last executing test programs: 10.355879394s ago: executing program 3 (id=261): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0x1}, {0x0}], 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0x10000a4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x6, 0x12a7, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0xfffffff3, 0x1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x6c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf5, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0xfffffffb, 0x4, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x3ff, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x409, 0x81, 0x3, 0x9d86, 0x0, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[@ANYBLOB="440000003300000900bd7000fddbdf253400fb802d001380783cabcf3de8f3c211caac293bfba1f6c66248e2705bfdeaf3e518701e75b6870e949c9efe541264de000000"], 0x44}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006200)=[{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)="c253d0b5f327aca830a76231715eee91a13369cbcc96c69a668ae1c755bc61d87b8846fe6d697788c07e8e15f13001a2f50a309a289770ad9ebe5fee591eafa34acc4441cead79b62225727a725dc75318af833d406c4d396c6e740305886fe3fcdcc3a492f93648eda251a5f599ca11ff5ef4ebaaa83e1b82d26018a7f86c55020d42b0ae8bedc8a47143e026d76594764352f113fb8161feb621a38248d279f076b4946b1bce49b27899ce312e", 0xae}, {&(0x7f0000000000)="f14aee643a2c5075d0cb701d4fb30b91a13fe6beeb711b78f5597705842227a32a0fabce96a0e3d1f91a38a8f423", 0x2e}, {&(0x7f0000000240)="88a8b6e06dec530bdff56d0cd3e32ff1223f961aa5e3a26a36daf36bf0a1c48143eb3fbbb468fe1d2ee683de8f3d9fbb832fa40aece2f18c855b3baaa97868a80f4de0", 0x43}, {&(0x7f00000002c0)="b958b660a4387dd9e22167e5b326f5997f43c5324b93b890e87471e503474adc50cfc403ef6671aced2e61bd7e5a2f975b42c78f52f289", 0x37}, {&(0x7f0000000300)="74b0ff3ca1d3410cf2d6a711f0c43f27c47ca37a6eadd1159afe4d5fbe9621980bfd528e508a7828db591d7a9b4ec70ce72fe7f09d2256dc79e7141b28d3dd953a7987fb3cdcdcae90b6af971a9bbb8dc89f56fd381598f920e7101d6e720c1c29d63370b363cc55db91ccc284441292e465c123cd2637a947f51ec72ab5719399e38f985f1d3415eb2fbef5457531bd147f773860f39bd5c7c47919808743a2b82979", 0xa3}, {&(0x7f00000003c0)="80e1aeecff9fd02c91c6801f2a1cfee186b4ee7398061e7c00f28c3922ccb7941398eeb6cc99993a199c12da1977c0379d44397db5609a5655556765531c9d7e59955b86f3a50b0e9ab7f87a0e2eb25c0e1615f7ba73a28c2cd4e5b980b44202b0badd96bf000b29aee7112286df9d27b1f16c8ada3fb080f6db2f80d3c01bea690e9db1b69b73673ff4e62acf957f8df6a8facc6c0d4a88f40116e6f151d54f98de72dd66c6c820590e", 0xaa}, {&(0x7f0000001480)="2bbb3ccad4d6482d5c5123a561541c95954cb3b9a9111a1aed298097126fac4b7b5ed366a2d11dd75577da3b80a4756ac427fe897a2ae52e5c9b23ff11f65235abacc728b5fd9028c3f9e2060825d0cfdcae5404f229", 0x56}], 0x7, 0x0, 0x0, 0x40004}], 0x1, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) fsopen(&(0x7f0000000100)='binfmt_misc\x00', 0x1) (async, rerun: 64) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00230200000002034797f60ed0441eedb7c25a9771014fddfeddb4385188d0a89806145b97a7b8b1c1a12101cce9d6000ca8912728fb527707b06d14d9c842ace14a21f4ff74b3"]}, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x90) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x84cd, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, 0x0, &(0x7f0000000040)) 9.527404334s ago: executing program 1 (id=264): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000140)=0x7, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0xfffffffe, 0xfffffffe, 0x0, r3}, &(0x7f0000000600)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2007, @fd_index=0x6, 0x1f, 0x0, 0x0, 0x18, 0x1, {0x3}}) io_uring_enter(r4, 0x3392, 0x136f, 0xa, 0x0, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r7, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmmsg(r8, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r10, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e27, 0x8, @initdev={0xfe, 0x88, '\x00', 0x11, 0x0}, 0xa}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x403f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}], 0x1c) socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) socket$inet6(0xa, 0x2, 0x0) 9.43912878s ago: executing program 3 (id=265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000001c0)=[0xab, 0x3]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x4082c1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r4, &(0x7f0000000200)={0x0, 0x9, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101}) unshare(0x2040400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x128}, 0x4050) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc", 0xe) accept4(r6, 0x0, 0x0, 0x0) keyctl$clear(0x7, 0xfffffffffffffffc) 9.406943718s ago: executing program 0 (id=266): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x60083, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000ffffffd410a400000000001c010000000000009500000000000000dae28b99db2e6c9338478f0763789e1011ce79d56c73e324c294ee"], 0x0, 0x5}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_usb_control_io(r0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000100)=@usbdevfs_connect={0x5}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 8.452959033s ago: executing program 1 (id=268): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, 0x1, 0x3, 0x101}, 0x14}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002030040000904000001020d00000524c3176f26240080a9b2f51a0100000000000001000006241a0100140905810340020000fc090401000002"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r5, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 7.27762871s ago: executing program 0 (id=272): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="23002abd7000ffdbdf2501000000000000000c41"], 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x4040050) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x3, 0x2, 0x8}, 0x2}, 0x20, 0x0, 0x0) io_setup(0x3ff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200004) 6.82975346s ago: executing program 1 (id=273): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x80, {0x0, 0x0, 0x0, 0x0, 0x5503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1c}]}}}]}, 0x3c}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) removexattr(0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x80086601, 0x0) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000210a010100a53786"], 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x40804) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) 6.641943202s ago: executing program 4 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x84}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) 6.393760344s ago: executing program 4 (id=276): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x1, 0x200000, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@RTA_IP_PROTO={0x5, 0x1b, 0x2}]}, 0x24}}, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x406}, 0x20) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xfffffffc, 0xffffffff, 0x8}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005200010000000000000000001c000000080002"], 0x1c}}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30001000000900020073797a310000000014000380080001400000000008040000000000004800000016160101000b008000000000010000000900020073797a3100000000090001ad8e3abd2d9dbbfd001c000380180003801400010070676d36726567310000000000000000140000001000010000000000000000000000000a33dff2cf"], 0xd0}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000100)={'syz_tun\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket(0x400000000010, 0x80000, 0x4008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x81&\xf5\t\x00\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xa9J3\x18\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V\x01\x00\x00\x00\x00\x00\x00\x00\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOe+\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\x99I\x9a9+r\x91\x06\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx', 0x3) write$binfmt_elf64(r7, &(0x7f00000002c0)=ANY=[], 0x78) sendfile(r6, r7, &(0x7f00000001c0), 0x8) fcntl$addseals(r7, 0x409, 0x8) 5.260524349s ago: executing program 1 (id=277): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x1718, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x108000}]}}, @filter_kind_options=@f_flow={{0x9}, {0x16d0, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x7ff}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xd, 0xa}}, @TCA_FLOW_EMATCHES={0x1684, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x228, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xd0, 0x1, 0x0, 0x0, {{0x0, 0x0, 0xabb3}, "cdb6b27b2f71b62136b3a97cca2d0a5f6021f75c4c56eb89787cb782f51ddbd07e814c28a5cd926482a778235d9d9ac3eadae819e8550c7895d3e0cb74040ce5d9c64cb86c85da299f869866e81e8337fd83a4cc9fff3deb70e26ce65e5e25edf361251ad96edc49ff5d7f640b3b4cba27c64a36f7616d51afea5abed9c220873bca310d8804869a522baa87922bd4450e41524b29ca0e7fd91e822e2806ff8a203a762cfcf470373ccd5a6b0370e2d78733b05896f403582a6a2a0743e16cda70ddf1"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x5}, {0x10000, 0x4, 0x82c, 0x5, 0x8, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x7fff, 0x0, 0x9}, "a4ff677c011cfb3579e41abf441c20e268fc714bbf047829ff84dbdca1f7524c8f93c1ba8a0bd6d8ed0b68c19cbc0bd415fd1f4a3527219430cfe595e58c9cf41bc4554e32a5453224f6a424944ea2d8b12d4b92107aa4220f7fd197fb98d9013f9c648a5b010656f980dd4ea1df19a0e35202c9e0d1d7f57b798b8801dad22e7b227d3c3b7e2e437bf210b75941ac60bf36d9a410b6267e201d02fdbcf26f2c7183243003cdde5388d0e06aa8ee1e9a8d41c8b7edd1b8cc8d4b7c93e56836"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x1}, {0x2, 0x6, 0x6}}}, @TCF_EM_IPT={0x60, 0x2, 0x0, 0x0, {{0x8, 0x9, 0xd}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x15, 0x5, "c6df7bcab286711688659ab4936d8e262d"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0xfffffffffffffde1, 0x3, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_LIST={0x1368, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x0, 0x2}, {0x1, 0x0, 0x2}}}]}}, @TCF_EM_META={0xcc, 0x3, 0x0, 0x0, {{0x460, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0xfb}, {0x40, 0x3, 0x9a5027471bef59bb}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x2}, {0xb4, 0x8, 0x2}}}, @TCA_EM_META_LVALUE={0x40, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="cca69b62ae2a2a574d", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="d46111bff110a0089d", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="12392d4494486f87d8", @TCF_META_TYPE_VAR="3007864a2d81c7f5d8cd", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="3f390462b4e4b3"]}, @TCA_EM_META_LVALUE={0x3b, 0x2, [@TCF_META_TYPE_VAR="4121a9309192", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="c8f78ba28d36cf4ec8", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="2727cb6a91867620bd8f"]}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="31e5", @TCF_META_TYPE_VAR="63659d51dd00660e03", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x80, 0x2}, {0x2, 0xfd, 0x2}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x3}, {{0x4}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x100}, {0x7, 0x6, 0xc, 0x1, 0xe, 0x0, 0x2}}}, @TCF_EM_IPT={0x104c, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}]}}, @TCF_EM_CONTAINER={0x108, 0x2, 0x0, 0x0, {{0x8000}, "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"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x400, 0x3, 0x8}, {0x7, 0x77a4, 0x6, 0x2}}}, @TCF_EM_CONTAINER={0xac, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x5b}, "bdb60f97825bf4f33c3560e92233d36e80d5037e307f47ca83c01b61c100324e7bfef4123332fbf5743595910ac138b25587efed9308cbda6c73b590017bad28137dfd27b25807a313f2af57d4dfbc40a3ed52c1a784815a61f0cb5e7227944807325cd8915dda62d5d98aa71423f37e7c13f4539cbf0b2309d73def2260ee27789d33cc22debcc0ba0c5b081e73799060045eb0d0079a95049f4f63e6cd"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x3, 0x3}, {0x5, 0x7fff, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0xc}, {0x8, 0x8, 0x5c89c8c2, 0x80}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xfff9, 0x8, 0x538}, {0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x6}, {{0x1, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0xb800, 0x9, 0x101}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf0}]}}, @TCF_EM_IPT={0x9c, 0x2, 0x0, 0x0, {{0xffff, 0x9, 0xfffa}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_NFPROTO={0x0, 0x4, 0xa}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x4, 0xffe0}}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xd, 0x4}}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x2}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}]}}]}, 0x1718}}, 0x20040800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000340)={'erspan0\x00', r2, 0x20, 0x20, 0xffffffff, 0xf, {{0x26, 0x4, 0x3, 0x1, 0x98, 0x65, 0x0, 0x9, 0x29, 0x0, @multicast2, @empty, {[@rr={0x7, 0x1f, 0x50, [@dev={0xac, 0x14, 0x14, 0xb}, @remote, @empty, @broadcast, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x1f}]}, @ssrr={0x89, 0x23, 0x62, [@dev={0xac, 0x14, 0x14, 0x17}, @multicast2, @local, @empty, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x2b, 0xdd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @multicast1, @multicast1, @multicast2, @local, @loopback, @private=0xa010102, @remote]}, @cipso={0x86, 0xd, 0x2, [{0x6, 0x7, "2ef11faeca"}]}]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xb6, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x40086602, &(0x7f0000000140)={0x2000000, 0x1, 0x0, 0x1000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000eb5b978ac105922c562cf58842a24ae2d0b64827490a5f1ab0a7e26e69937e1dad45d7297f", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000300"/28], 0x50) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0xae8879109c0f7a70, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000040)="6a1297aa9aa00050ecca54e47d3a9bf266a37518d7d450b1878cdf23f50641e7bf2a675a387aa2b9a0bf2ca822a0dff13d79457364deabfc439f8d8f98b34051de413ab12a79077302addfb79aa6e59ebbcf17c34615fccea1d24c4fbbf12c6daf996246fdd5fcc8461f9f79dc235e487747c5f31001ec734a0d03c9f45bb6c804d7a5dbf0be1ad8730bd0fccee0e3cbfc7cca01313962571257ffa967311d2f064be536a9d2a9c9e19c56107532592d075c47edec8df66cc98f85ab00f767efeee6268d9ccd9b55ee8837c477234bf8791da68d76c356e41ca97b42ee99cb13bc4b1d5b63787cd508c68ee4b3f1e919572d2d9d8f8966e9bacf8a4914f63f5b4a44ce379d471c837becffe80e4752ca502182d95605bbdafdd6fc75910c467bedeb0d3f54705422564ded9c5aa3277f056926cae7e40362e9997ed62b2c7ce48ce1fac07cb10a4cd3f24cb66e16c914d70e980ebe798d50156ff1b2349cd9ff87f76410d615cb39dd6990017739744807ff5285d6f599ed5037afbbbda5e319c83521fe6b530478a4d6f35b06af4f62f865c1bc3b425fa9c97abbadd9a50ad3dfb90733cf95a6d26b1301117108c1ca0b32df0527c2717c1a0abfc40294e5ee74a17978f9aa7c81ceb89e2c87ef2c47a22cb14d1862f7e4a92ce6acbbf4783df293a764b756140300000000000000ccf2fe045943f18f87eb98ad6620f0b03807bf719829a49d6aa20ce00894325d1ff16a5b4ae26a8f93709999b9f3b318418d42091fedc9ecb6c7f128d5bf032cf4361fd04fcb3d4307e07a0222e1b3d9defb5a2f2c28680709a7c67a3e8d1fd427cd196924624b981e784f9bd0b0a4fd353233266fb932afbec97a1b69536eeccf8e3fa2fc103ce526c652c5bd8c8608b8213429b9e00f703ca7f1f7dc64e045c30b06af6671cf32af74e77680ea9f6290b4d7a7fb6d66bb671ccc279a65734bef729a881ff715aba2a00ce64d612dfaee37bbcc414c24976e4561295f3ddfb84437ece83e6b09ab69f419c5a2f57c4be210a7035729082011bd1c38b7a88ad45c09ef0f7166e98f76f32e0a4bb9836962fbf949e98fecc33850cd34037695230a660e1bb886163193d66c9c65b39529c50edf5082d77f382ae85f22d07e6ad6633a0760b0ad638d429be49aa418ae9df808f26aedaa2fb6c0dde940a70794a4c2f853875dcab7f26ef261960488a215e9dd3131385cff93b4a1f43b9bb8bfec50008354a9490f386a98c75017dfe57a324b7b2bb03c64ad39481da0b359e7292f37279d4f84c7f3739e908a75b28f0cc1a797e7aa27ed813cfb48d9c33759b52ba58ce5400a2bdf49b7313b194d990f24eff992ed30cd2b77dc7e76764fd8676eed8a41a237e512e8a6f51ce70420f9807a59ea539170824f40e875cc5145df4448d2633f9a89b1e98c78ca115cb35db3151023de070cbbfa8af4407c547b4d7595dbe371ac68bb273a0169de42109137985c84", 0x423, 0x49094, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x3000, 0x0, 0x20003, 0x10020f5f, 0x0, [{}, {}, {}, {0x0, 0x35}, {0x20}, {0x0, 0x0, 0x0, '\x00', 0x26}, {}, {0x1, 0x6}, {0x0, 0x1}, {0xf, 0x1, 0x2}, {0x0, 0x0, 0xfe}, {0x0, 0x0, 0x0, '\x00', 0x61}, {0xfe}, {0x0, 0x0, 0x2}, {0x7, 0x0, 0xfe, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x3, 0x0, 0xfa}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {}, {0x0, 0x0, 0x0, '\x00', 0xd2}]}}) ioctl$KVM_RUN(r9, 0x8004ae98, 0x20e10000) 4.541376162s ago: executing program 1 (id=279): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x1d9, &(0x7f0000000b00)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c7, 0x1, 0x1, 0x5, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0xab, {{0xb, 0x24, 0x6, 0x0, 0x0, "7774d19b8947"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8000, 0x8, 0xf4}, [@mbim_extended={0x8, 0x24, 0x1c, 0xc, 0xff, 0x8}, @mdlm_detail={0xeb, 0x24, 0x13, 0x9, "4b1fa136c23c908256297945bfccc39401fd13a917b1a882176b89ea799cb11797a3010c8f2d89fe7b3af90f51021ad8bdb20131fe4cbd9428658c02b566238f79211d3e1fe71021cea0ef2f9e3ab5da8440dcf0f23e009c72958689fba6032aeeefc9536e77d28511b5e8d41ce4d5d229fa6432c24554bbcb4c413ff14a899013bfcd3a49666838866e52e49b3c6c6642d0e8e09c0d8b6170f05ad250debd9e5390d460a397f999950674e5281e6ed0623d67924148e30a1a36b1b6a39953f7d423a2671461974f200e61332fcf41d2f5bc35d531dec67667c52afc445481dd9f82f996766713"}, @mdlm_detail={0x80, 0x24, 0x13, 0xc, "0cbee06489817ed0ac70bedfde4dfa2091f957569df210d6fa9e2d2e22b4d69c5d60e00e1b88055d3d39d871e0b56615155620b0afcfab10676664ed3d8af087021dace04fdc8e8e695f52c93d8366c7723981c003b2fc93284138f505e5b7e02b1b76d8e68a5da7412e81a1a71c5be5b44cb3c0d1b5eaf9b7a001ab"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5b}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0xff, 0x4a}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xf3, 0x9, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0xf, 0xab}}}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x110, 0x0, 0x5, 0x39, 0x40, 0x10}, 0x8, &(0x7f0000000a40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x14d9, &(0x7f0000000480)={0x0, 0x5121, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x20, 0xfffff00c}, {0x16, 0x7, 0x6, 0x6}]}, 0x10) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="ecb4", 0x2}], 0x1}, 0x4000000) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f00000009c0)={0x7, 'xfrm0\x00', {0x6}, 0x4}) r8 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x3, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='\x05\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000907000000000000000000000005001a00ff020000000000004400000000000001ac1414bb0000000000000000000000000000b2"], 0x38}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x20, 0x3, 0x46, {0x46, 0x9, "e694702b7b7481efe3f17234d0014b521bbc62520a23a8a3529605c7c0bcd67764cb3a56ca0a41da73e515631ac6c1668994cfbbec5fe8c984c29a0445f43c42ca17529f"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "5901800c"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x3ae}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x0, 0x31, 0xc5, "e01afd37a049c53db3f472163aaac32bcf1149274d885652b24e95265cb95ea25c82654b25206d0da01a65e72f890c2f9f404253d54356f62fa795ecaa429a977fa63e39341fcfa4e48845de05320a7ef6380c8a282854d27427dd1bcfda3519b8f8b805ba3ab32da313cd94878bd862dc580fd204904dbfe1c2e9e94304d65a6bac2591b5da1d5b26607999882575426f337b6cbcc380d882457c6c78db09d49bfadb4288625a3b6494d1882c60f3660a7bf5baef7b84a031658059b05f8b15e0d3052d9f"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x1, 0x67, "083f4c9ffa2d723ace0512109259bb41de9894bd4d0a4aa907eb726caff73c779d5f453e57169d340bdb3e9e12f704667c70b8a9976a0184e5203257f1e9367200b6daa7ade4aea3de4b22264fbc5726fce75a3b36747ada09c7101a7b1892862b5a048a0133c2"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x1}}) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x190, 0xf, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x7c, 0xd6, 0xa8}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x7, 0x4, 0x10, 0x8, 0x1}, 0x113, &(0x7f0000000540)={0x5, 0xf, 0x113, 0x4, [@generic={0xf0, 0x10, 0x2, "1695b8728745b5ed5390687e1e32346b59eeae50f5f602048d8b4229eaaf7aaf5d54cdaf8fc402b4bffc3473d6a909926d673e4db5b183285a1e2d3ed7423d6626eee3cdeab6198cee7c673cf8a5bf0083850c4775205099fa0b0cc2de9a257787f5340a471d8703f559fedd6f36e60ef35ec464453de2d183b604f5ae636017e045c989dac214c90fd7f326e309d4338049ec93ed187b452b9750aacc26c7e118fbc92a34e959b21568875bb0f57e54affdfc423be30627856d1e84db50151c3843578c31df1cbace5b6c26f1cac8d7088615f65aca1773e340f4de744696de100f202c5ccb3c9c3943ce815f"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x3, 0x8000}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "1974af1edde7c9b4e969bf4d2bfff7b5"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x449}}, {0x8c, &(0x7f00000006c0)=@string={0x8c, 0x3, "8326130f81e6812ea3f5cf7daa79ecaff877db6e12c6189dd8ca92572d88be1ad39a0bd828b8e2cc8b5084c7e3f6bbb3dcf3d2323a528b1e57087a0cdad9a3a0802ba56f218fe0a677f614c37b92b9441bc64c8442fe3903035834e6370027bd9e45cd619bc566fbe0ccab4a3c0f8dcdce91ed82d65e940eba3dd4d36b287eaae5039a41bc21c2da44af"}}, {0x102, &(0x7f0000000780)=@string={0x102, 0x3, "8ce6b12840f54a63bf354339b565d098d2f2b37de3b3b676d1c0e1f1bc0dab7a384730d7fc89f2b003a28dac867605b6c8f307c96c4a81e568298c7b59fe7486b55e9adb706d82e51607b7feb6dad5b271f87a9ad6ea73bb686f9eed62e1ff3043d6dc712e2937ff69fe22a16ab41edfc14eb52aa9ca3aec180efd4bcf10267a785c102234ea95dfd9eedc7a2a912c31244d72b7164be17a1c72d59e0fbf45f8127a8c94226de02a6912413ed7584c75dae6105f2b20e9a28014590c07971d028e4ffadb02c4ee3e706b7aabd4c0af0590ed2559baec814beeb487808f05653fff00dcabf3507f9350b2fa599ac6a34c86728d917108e2a60a2f0bd6cfdf77ea"}}, {0x5f, &(0x7f00000008c0)=@string={0x5f, 0x3, "36f02c0af7cbb2f645371e32c2cdbf1b9ebaafa9fc1714bc6c6ac6463553ca5e297d405193d4aa019400d25e421b63574575869e1b1ed2d71dc7b083eebae9e26714ab1951823e91c285cf36abdcef8b6e6ac521f90ddf8323f9598ec1"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x80fe56492b58452a, "c9a449c7"}, @global=@item_012={0x1, 0x1, 0x7, 'O'}]}}, 0x0}, 0x0) 4.528807397s ago: executing program 3 (id=280): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x80, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000000c0)=0x2, 0x4) 4.435478835s ago: executing program 3 (id=281): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r4 = syz_open_dev$video4linux(&(0x7f0000000740), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f00000001c0)={0x0, 0x1000000, {0x28, 0x64, 0x2025, 0x5, 0x1, 0x0, 0x1, 0x4}}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x1fc, &(0x7f00000002c0)=0x7, &(0x7f00000003c0)=0x20000000000005) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)}, {&(0x7f00000004c0)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1d9a0e2e882972ec7befde520865c48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab", 0xb6}], 0x2}}], 0x1, 0xc0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r3, &(0x7f0000000300)="09268a9234f8b358387f1f6588b94b481241ded8974895abfab7511e6e9532120200000000000086b7c4fff5575470f7385a78182eeaea563a905780232726ffbcb5e8d06ec5161ab4b4317995652dc20915e12a020fe3e2bf05b39e5c14312c2f7efc25b5575a7697a9240b578ac6971c54aec0b1ee3d84056a80e7878b37568b295a57f59a9f599bd5ccf5a12920e47c2d37f9140a41ed0ec9392f997cf6", 0xffffffffffffff7f, 0x4000080, 0x0, 0xfffffffffffffff7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000000)=""/122) 4.365702127s ago: executing program 0 (id=282): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x28001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000500)={0x2, "fa02c80a3a1e9d4b9aaf000000008d6762e69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r3, 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000080)={0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000000000000740000000000000048b88ee50000000000000f23d80f21f835c00000f00f23f8460f01"], 0x74}) ioctl$KVM_SET_NESTED_STATE(r11, 0x4080aebf, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r12, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r13, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r13, 0xc0303e03, &(0x7f0000001b00)={"31ec861d1bdbb2f104dd52ad43b7db21214d0677cda6247cb86c05e119883e3f", r14}) r15 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r15, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r16 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r16, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 3.629142792s ago: executing program 2 (id=283): r0 = socket$packet(0x11, 0x526c36c875d1a970, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a82a0081"], 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200)=0x1fffd, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004f00)=ANY=[@ANYBLOB="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"], 0x217c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) read(r0, &(0x7f0000000000)=""/149, 0xaa) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xee00}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) fchown(r0, r3, r4) 3.22110243s ago: executing program 2 (id=284): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@delchain={0x30, 0x2e, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff2, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0xffffffffffff0000) 3.086014867s ago: executing program 3 (id=285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 2.78819649s ago: executing program 3 (id=286): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=ANY=[], 0x1580}, 0x200008c4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0xd80}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc014}, 0x8090) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="26a83364852029199b079164ae66b9be", 0x10, 0xfffffffffffffff9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000b8000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002b7c0011800b00010074617267657400006c00028059000100c8e0cd3d5494dadc537f998026210d81ca78da5d8527e5f18b2a33319f4564294f793cb1043098e5b74e2512d5c40c53b2056a8fd7eb876bddddf3e0709b8f7a2b0e481cd3002bf5ec60ec7f5d5164d3cbc1c2a46100000004000300080002"], 0x100}}, 0x0) r6 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="50910b2f820e333e2c1ec138640dca851231e6730d2f402e1284256883d209effd3a2f0499f748b3cfc94de69f5fd3a663cf166d9ee747c3e781ab32b53e00eb5e9fbd5424f12bad8a214972096c3de20e354ecb9264b1279e88c53ca6d33044a5cb3d110e5d550f520155657e1252b3feccbe7bd3667596b48d75e0d6340696cadfe990ee7a3900b89f7b1c743fc8cece6ba90068c6c00f81028b0081e2ec2a5f1e2c80676888d2094eb53f6dec79fbb203c7a626c0cf96662c5c4d2d8bd3d7fae356935d8d284336ade51f4b6dff31c8e969", 0xd3, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, r4, r6}, &(0x7f0000000340)=""/40, 0x28, 0x0) lseek(r1, 0xfffffffbfffffff9, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r7, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x80}, 0xe) recvmmsg(r7, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}, 0x1ff}], 0x1, 0x23, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000000380)={0x0, 0x2, 0x81, {0x81, 0xf, "acbc005c058ad15b4fd8768bc05058033d2e1d4fba556646c34ec0bf568db4c908b62adad9e411ba2bc309d79a9767a110fd7a03901154fc2b36eea0eadcdefcde9b36b4776cec96e8a5d36c8ea7cece6b51ff4ecaf191b21dbbf41e4171f0d40347ac5908983b2048dc5ca1b356606061f38fb4a0591c9215af002f9fb8e6"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f0000000480)={0x0, 0x22, 0x22, {[@local=@item_4={0x3, 0x2, 0x2, "b6587cd4"}, @global=@item_4={0x3, 0x1, 0x1, "31b39b5a"}, @global=@item_4={0x3, 0x1, 0xb, "8cfc14b5"}, @local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0x5, "161299c4"}, @global=@item_4={0x3, 0x1, 0x6, "ae29bcc7"}, @local=@item_012={0x2, 0x2, 0x4, "9454"}, @global=@item_4={0x3, 0x1, 0x7, "94fa43b7"}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0x54e}}}}, &(0x7f0000000700)={0x2c, &(0x7f00000005c0)={0x40, 0x15, 0x70, "72b3d1be76d72ce04650bb05d0a125c586c47165797def28e41b26414463dc988694df01747278013792a52aae054d384bb51c2f8ffb5fa4595687136113b6ba8760b15718ba85e370618d01ef73e57af9627d62f046687e044a4d03f4f804fe6402afc624a050a52f012108e5be1563"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000680)={0x20, 0x1, 0x17, "0b904fdf05c997019a5dc51e91b928cacdadb2ee0dfb5a"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x2}}) 2.728973541s ago: executing program 2 (id=287): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x4b, 0x2, [{0xfe}, {0xfbfffffa}]}}) 2.608614906s ago: executing program 0 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000bc0)={0xfffffe00, "f1a1173fb9462d356ee67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfc75b000000000000566a0982f8938caa52dd8d39af1405000000d59300", 0xfffffffd}, 0x48, 0xffffffffffffffff) add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000280), 0x0, r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006"], 0x84}}, 0x20000000) 2.218405168s ago: executing program 4 (id=289): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) write(r0, &(0x7f0000000100)='^', 0x1) syz_open_dev$evdev(&(0x7f0000000040), 0x80000000000000, 0x2840) r1 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) mknod$loop(&(0x7f0000000040)='./bus\x00', 0x208c, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x18, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x1, 0x7fff, 0x200}, 0xc) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) write(r3, 0x0, 0x0) 1.917939586s ago: executing program 4 (id=290): r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r1 = socket(0x2b, 0x1, 0x1) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000000300)="30800205e792080000", 0x9, r2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000040)=""/48, 0x30}], 0x1, 0xf48b, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1, 0x600}, 0x20) futex(&(0x7f0000000300), 0x7, 0x1, 0x0, 0x0, 0x2) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='1', 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="a4746d204683de0e1daf4b6963e26f4ff4df016e2d2f037c6464bb3e83e727dfe655254b0afa9c93a29aa07b9f4511a268d0f602be2467878da974c1d2c64e542ae51fca8cd90a0c2683baf202638df3d337fe99137902306fe6c043032306a8217650a0935842919396a4a92112ccded1df2f60e90bcab6088e109c92803a4efcc7c528437165dab9d79a97cac807c9140b7cc00e4a8f1b7e1254a567ee484b503c0c27410799b2bff6b24e19a7e2b774f3d084b255d3c5a6fd98c4225b45faadb8ac9b32a41f80a7842ffe6803d9fb3ceb2ef38a513558d29d088a09584ff86b907d9d585b461abe64ce766c7853078ae8c356d34c", 0xf6) 1.826022122s ago: executing program 4 (id=291): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000000206050000000000000000000000000814000780080011400000000005001500050000000500010006000000050005000a"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97c", 0x12}], 0x1}], 0x1, 0x40800) splice(r1, &(0x7f00000000c0)=0xfffffffffffffff7, 0xffffffffffffffff, &(0x7f0000000140)=0x61aa, 0x7, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 1.656207931s ago: executing program 2 (id=292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r3 = userfaultfd(0x80001) r4 = syz_open_dev$vim2m(&(0x7f0000000200), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000240)={0x0, @raw_data="bd147c964c21c6d3a1511ffcf2a1b41d6109d35cb80ee838e47f402c3d376fdfda5b59e99dde26ceb6d1274cc5a008e67ad1715655ee3d01fcfb1066c78edba3d7e5d8646c79d311b3e435cb64d0b2e686d16044a8b560d04187567bf7e459d6b50e1fa596ca883ddddceb1b1abd27498ef9b11515207b16abfd660cb6f71b2684cc20062cd2ce0bba700ae96b355d9183b483f59cf39aa2c5b859e9351274bc51b40da357e795ccc9d7503638fe68afe0c261f5831cb36eb80301eef4cc96bcf6e8ac18334ad8d7"}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x30}) io_setup(0x3, &(0x7f00000003c0)=0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) writev(r6, &(0x7f0000001440)=[{&(0x7f00000000c0)='\v', 0x1}], 0x1) io_submit(r5, 0x3, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, r3, &(0x7f0000000200)="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", 0x118, 0x4}, 0x0, 0x0]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000301, r7, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="01082bbd7000fedbdf250c00000020000580080001007564700014000280080004"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) 1.145306679s ago: executing program 0 (id=293): ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @empty, 0x5}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "eea2ce15f073cfc7b867a8f1eae374992b05d96de4fee8723648ec884824c0fa", "dad132180b5c87e3c4ce5aace7bd878f", {"bfb382e7c4f35588608b6b77d4179781", "5c1eec4feb340aa2a2dfcc3569d1153d"}}}}}}}, 0x0) 981.633172ms ago: executing program 0 (id=294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff707900082402ff200126ff09058503"], 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)='&^\x00') 783.339086ms ago: executing program 4 (id=295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000480)='y\x105\x14\xf8u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\x15]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xb4\x95\xd1\xc8s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV\x06\xee\x91\'\xae\x9c\x06\xb2\xd4\xfa,\xc0\xca\xd90$\xd7\xfe\xae\xddf?$\xb1\xeeE\b\xbc\xd1[\xd5tO`Z\x15 1\v\xa6\xd0[K!+>,FE\x10\t\xbb\x90Jj\xb8{', 0x2) ftruncate(r4, 0x400ffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000000}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) fcntl$dupfd(r1, 0x0, r5) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000001c0)={r0, 0x0, 0xfffffffffffff000, 0x1000000}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xc0000, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYRES16=r8], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) 699.088104ms ago: executing program 2 (id=296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68af5f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c00"], 0x1ec}}, 0x0) 465.731213ms ago: executing program 2 (id=297): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) unshare(0x2c020400) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r6}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086203, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffff000, 0x101, &(0x7f0000000080)) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x8000000000000000, 0x0, 0x41a2, 0x5, 0x1, 0xfffffffffffffffb, 0x2, 0x2, 0x3, 0x1, 0x6, 0x9, 0xed, 0xfffffffffffff801, 0x53, 0x1], 0x0, 0x210011}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000480)={0x7c, 0x0, &(0x7f00000004c0)=[@enter_looper, @dead_binder_done, @dead_binder_done, @acquire_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/215, 0xd7, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/185, 0xb9, 0x1, 0x2c}, @fd}, &(0x7f0000000140)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000480)={0x1, 0x0, @ioapic={0x4000, 0x5, 0x1b87, 0x4, 0x0, [{0x1, 0x6, 0xd, '\x00', 0x6}, {0x8, 0x4, 0x7}, {0x0, 0x78, 0xd4, '\x00', 0x8}, {0x0, 0xd1, 0x8, '\x00', 0x1}, {0x2, 0x34, 0x9, '\x00', 0x6}, {0x10, 0x6, 0x10, '\x00', 0x8}, {0x87, 0x5, 0x5, '\x00', 0x8}, {0x31, 0x2a, 0x9, '\x00', 0x2}, {0xc9, 0xbc, 0xfa, '\x00', 0xfb}, {0x9, 0x2, 0x4, '\x00', 0x9}, {0x1, 0x1, 0x5, '\x00', 0x8}, {0x8, 0xd6, 0xe8, '\x00', 0x4}, {0xc6, 0x8, 0x9, '\x00', 0x7}, {0x1, 0x9, 0x7f}, {0x3, 0x0, 0x1, '\x00', 0x9}, {0xd, 0x0, 0xf, '\x00', 0xe4}, {0xb, 0xcf, 0xe, '\x00', 0x4}, {0x6, 0x6, 0x2, '\x00', 0x5}, {0x6e, 0xb, 0x6, '\x00', 0xe0}, {0xa, 0xce, 0xf, '\x00', 0x81}, {0x6, 0x9, 0x8, '\x00', 0x7}, {0x3, 0x38, 0x6, '\x00', 0x7}, {0x9, 0x7, 0x4, '\x00', 0x5}, {0xaf, 0x6b, 0xe1, '\x00', 0x8}]}}) 0s ago: executing program 1 (id=298): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x1}}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001c00)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000006c0)="5a85be43a10838ee55f64c3a555d96384ae308e5cf8d25bc3b77459de14b9d3fbc86f77fead29fbc086922ef675e2fecf8cdadb8cc74b4b50d872d896186780fab8bdb782382489e833178fd8afc3a984867271d08e81a72f4bbffec0fdd41cfb74d370c3622243f6b7022a4b89f2abe2a6ecc1924bac38920534910e759a6a247e55b54a75d611d57a45de156d66110116bb397d5a0d6524fb8293df9cd3c34f3aafd0955fd8efbbd7db9271292f79041eb7ed60365db48e3985b094c2b93c678bf2535b188c8bc726ffa", 0xcb}, {&(0x7f00000007c0)="bce757a3425ba936df297c93938e3c1741902f081c1418f225add4d33c4903614e9df074debfd12d005b31e43032fa2e3aceab0235f284131f2e2a2b5ac2d20a495b721e4467bb93e13a1e301cf79267da2bab8c3156bdc37fc5914db97992363a770e85d8d6a5c86fac9d57bf75564635e5610b145b2d4eb0763d579e459d6c4e9e6f6206b8ab33d5781982469cb54104e6a7381257ee0bc4", 0x99}, {&(0x7f0000000140)="6e19603ac03e5b", 0x7}, {&(0x7f0000000240)="2451ff74522c4e7da74863a7096135be210ca0b50338798c80cce995149dd15ad59939089475c7175157edbd7b5712ffae", 0x31}, {&(0x7f0000000280)="cae32c5467aa0dfd", 0x8}], 0x5, 0x0, 0x0, 0x4000040}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000880)="b4f130b6aeeb9e78c38437728f2449cc2619e5c97be10c459dd042685f9d9383d9e26d9f46b73f0ae90b3dba588fc5ac6d92ed3891486f5157b61dfeee7b9c36880f1db60852e5a334c24aa60a931fde4e30ca99cde12b611d9f23a77e988a131410fbcc9b8b495d828fa40509cffe1225ee5d2b0cf8cfd73ecf0b61705b4c118f9188a111893ba7006616ad1678df0ad7ddb2eb4637a8242ea6a8c0e4222a6f66bc9cfa4b794ecaaf1ee1e514c7ff9267a55064fd797cc552580304c30d08de751c", 0xc2}, {&(0x7f0000000500)}], 0x2, &(0x7f0000000dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x20000010}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000e40)="a83627d91691a385fd2c3cb7bc3e08053f173f723fb4a4503079feec9ffe244ececd179f06af1e5b273aadbf70261366dae5e3d71d859266e4bb335784dee1014db7448f804e8c752c6e82c03446238f8268", 0x52}], 0x1, 0x0, 0x0, 0x400c0}}, {{&(0x7f0000001280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001300)="a6f69a0c854a2b08ada645bde95fd4c8b5562bf95d7d218679e02dd6edef222009daf72d53a5e8e474f7b2e143cbd511778b40df80203c", 0x37}, {&(0x7f0000001340)="b9b854218e746b3bccc151235f27b93fdacaa1f533e37cf83acb9c56", 0x1c}, {&(0x7f0000001380)}, {&(0x7f0000001440)="f034ed655a0ad0", 0x7}, {&(0x7f0000001480)="2a1ffd94f4259b9457fe1ea3c5bc72b0e20c9e675741a5965e0db4eb0ef8bc4f2767c926a632c30ac9cbad0280e4819d5a620c860cefad97eb9342562bedc6907c8c02f0576dd13f04e19aa2686cfba32e954104ff0ac20e613aa1e9a182e8c973dc3f8c6621546642423ebf7a8449112a91e748f4ff057cfe6d149ed3e6f1173ea1444db8ee39ad2e3fd6c9f36524e4ecfcfb220261ac421a35accff5469a2653e0f6c9a1a9b6d2712fe788aa6cf6aea87ad3e6900bb792339aa246c2015ee9daee", 0xc2}, {&(0x7f0000009340)="c96d2b7a510c0d92aaf4a8632b26496f7a26c52df45d4c280adad5a7a75479393aafa08b398e4f044b4a6b0999782433657e675d7382187ba33d2aa05c0be658d33cfff7624af1e282bfa3fbe74ae926695211172222f535a430b8903ac1fe8b71f595b7a38a980214dffe098453ef98b9a8118681cf5867c4979138003b998c4a7ead6e098315587d46b6f13ccd67a97cc208e6fa7ba727b2970351d4dbffee5ede8ac4b8669b471ea36e425409157a5543746f1d3a6c13206c2e852144c88cc0d516f38aadf41ff42324595b5bfca2d97dae18690b981a17c54b9d2bd7c5c3f8948fbf1270776b4bec72c8eee6be73a4898b1e90f50b86ade4d88c6d4aeb215aa2c093deb761c03cd084cdbd8ed916391c7d2fa97aeac787856ae0dcde2d0afdbcf5bcf557f11210d8efc934077e4d7fbffec11acd126afad9d791a5619c5e342baff1412e9206840552c4f659b76b6bdbeefb1cb5bd3ad5a71d96ac0ee3b7b5b05b256ecb11ec5539d7cb58fdb75cd09b19bd0fbf6b0fe61672ccf2d4c43266ae4f2354db022ea22a11d533f107a07c7e6c12c814534bf53f70d6efd1c18d45101a07059d41639a627a10ef3c324193f53c9778a37594036ecbd60c7aaf483d5f0d401d20ba5095bdc79192a750b73958c0aa36e0d9e1e5849fb05c4cb3697319828fb30c730416bbf3e1df30d7d08607f6ca61fc12f953155f4e077b4cdfc70bccce5c4f708fd0be0e6974b53eea27d7a12ea87d8a48b2540f26120b46c850e64abc05726e50eb6b7167dcfee18eb640d62b68c44d38ad372ccfbffda8280352312ea9a3777f61a98152658cf1a816c75f499388f193656ddf40c2e1d680d8965640082a47682f7e0b49bdf57d5ede7add4f82baf31cc72ae07e20d137f10c7126524c5fc3b759521f0c44160829b0ce0cc2a56c57a56ccdca6ee1194adadd7c76ce5cbaf7d60b983a5820d9f72be057283c2afad3e59453f2b4d2edc8a33629acdf2211a58a7302775029fb1368f14fe68e0f75887fe726f6c7cd2c339b36e6c6ca2e4b3857289c76dc7ec4f62f2c7c007c0a5b34269b190cc7bcde1e35ae11cbae31fd44309dc257b4571df6a1233c7aea08c96390fcfe442fae3d41ffbf3ecb2bdb9c9c7e6bd6ae6a810eae2046fffeb4c89d8d861536099d3fa2c2da2346ffe99be03098241fff1bb57e704db18f70c124b52924633936ef9c51ad4c4ad75a3d01f5482d63ea3b9dce9bf8109d56c5ffbbf2f1cfed9a5fe727ea007b1bd337d2a774cd04f5b6f414859e1eb6b10a33411f5ec9be9130e4c56de1753d555fbf4df13773dcaabe91c0c79884b5b6cc7792841af5cd7e282fe7660490acdb3b7c96083be7281f6b1e4bb28949983f50e6bb9f8e208ba0e6ce6924ed2d7a1640733b6a12a42aa9f9fc29b9d4ccb019a2f98edf82972e96997366ad3f513c3f4683051a4bbfcf89162afc03ee1fb22aeba94451a691479e6998632e06663401307c970ac319f84ec48fd6d6fef57b5780e8010bb57d82030a860bb73578223ac88eb2c13ca1a3410917e8ce167248e1191161e6adda84ad846d0796025e38587e5ecd109444f9e371a3aaa4db3bd423ec0502bb8b3dfb8272104da9156449f7e713cb722943dc3b5f023ce60979b6bbf1fea097f4ac7a3b2186b4122ec62209e238dce497dd2b6712834a515f898c04b4a953d5e2cbd84a8aff53a29e195c4c0c0c80bccb83244c8972eddde3636e27b98aff50fb57af53ffe93e1ce97b550966a2321a63467adec0f213802d17dd48230218a7c2b711f77468dd4203afaa2d90715648d658a3c7d1f1943fa46b31936883ad00ed3153227bcafce9cb9256dbd6cbcb55f730044a16b9c25f416f5883e8bf8c0d9243011e458c5c020a992b621d4b174d430ca61e7ae705cfad64a59e3a44990df5623dbc4ed0d3c6ec4c2159acc8425e2ade77460538c4248da48174d3686796742541f827a051e7e6dafb12ee17e19f5809a9d130dd925c5735aa48f69cdb69ffaf591244fd41dfa9e39cfdbbdb9a80c78dd1993b3c3c33837b78b279a45d910ebc40649d021f9bffabd4635ff2aa491e0f2fc28527ceef9aaeb7b3120cc773ad9b70beab709ad8dd5f7e425f8c32731e004c6648146fdc3ba02d603ca7c291e421d8abc28560f4f56a6d3d0870f3501b9e62d089342f76c6b96576a422f5713da3d6ccf6b95798d051466c10fe8be9e71650be40c67d863364d1a6c2926a5a7583d0eb1880deb08cbb8698f623299eb2bdedfb1b6e4531cfbbb3ce5bab2a99e572a33f92e0944421e9a4eb223f5fe4ccc5eb54e74ad4c2e69f760d02f01ae8ef727de1df6967cb8bc1a5b2f06b722ab06c740687fe7750dc61317bfbf023961dda0db4583c94c7d5797073d6a85d180ba2f1622a2ccb5852f2c4b60f1cc2485a4b3b560642d23e91bbd4f61047b5f1d6079fb20747a6fad6d4cfc06862ae35861992a1d3d3d1e354e3a69ec6de7ef1b68ad6cfc0e857a351941b7040ff232720983c6eecfd279da35ea90f99198c596f1089eb2e0cd7c07d816f22e65b46d51cf3e8ecd0ddd6ce8f2306728224dfc1f462ef603ee3963bfb3f7900f70f4f8641976a50a87fe36701896e3849f5adcea1f06191de2c000bc76a04a99b0fcbeb55c4b46163f8b049e079e8443fb2f401f288397530261f39af527c0c6ed0404c1620e7671ee334a0553d7a4cd8ce461119f4bc939aa1c8a93ae3448e717d79056eb28bb992e40182ea08c34ec6133d67a3c3f9879b5d0b412b7a17aab86fb5537a495f4033fef3b8a4734c717f517aec26d292418fcb6760e21330a75e77de291718ffc752592f8cd4d2e7bdd74901063f30eac37f652f2819ff2c9c3ba2477ea00f9c1acc02c70086ee91d64bdb7feab5f13277aa2830ab191c1023b4f6aa9a16b07426ed4da7d76b51e4ce1591a464e54bb66e149ecd717d47d7197f4a978c5c64209bd1d8bb739a7a81d88c2a826d878efdb265185b1e072feaabdf0b8691f0799b23173e20f57635a70c1a8f60e68ab8943e95936e770246f08d66352332a5c954302e88bff08af6bf8c0bf9b9276367df282e9c69680426e43dde4329bc95eadfd51378515564c07c3bb19b1b2bc25bada628d715d13e9dd61ffaf1ad22d946028b672fa22c2bd06539ea17548218669d468a07c0da571a804e62993a695fa3b371aaf696f22188c62113d1a28e958c1e87c6caa90cee054de3adfae01ee14de443ff132d05a18a72034498ba53209272c747985b19f24aa5a0f20e23d936f04838ba7d66c166ed13206a69e880a1b6627c6e93487eac3a124d30c3c72b7e78ed8a41e582215523e59df7fe3b4e163234e183287b0d08b5eac2d7b052a206c3fce9b08cb6ff7cb13f84c46b65f6a27964c930eeff9e77e5578e6860657cda72a4641b6c61fe9b09b973b246f61894942a9213c4c3bb2f03f7b79c5a80fbbfcdb787a712036bf2735f2d328b11cbacf67bbd01138419bf696a184b7d8770ef76bc119fd921f64b26e115d2eef39fab12bb33b18769517fa8ddd4092a646ba2ffcdbc29bfa81518d267591da8ab535d1b364d13739fd1d66616389e8cd610402146b06cc84c9314b25414f6eb6183e1dad47fa00a55597fb9342a73faec349c80d2a5c53b50ff8d3ebc24f26dfa49acc832d70421dd49d59795719748920099a17db5d59e201c5093f8e99731ca075b693b6cf0710e9c2081bf213f3f7cdc5eb34d01e34b2801fb998c369d579b0794383ba611e037cf1c8dd4f37a6e067ba616a05117d8c66af05cb36c1f0cc54bc891e0b903e8dddf45722238bd4ad2527db530fb6bcf385e35b0dc83e21ec80789bc801da003310b9adc1e3e39b91d0244471a92fc2209fa4e677584a7ab64112984b452a50e50243c3bb4484af6209869ff42eabb7177f3483f35e8cdc352c7d28127fc589327ac3cfc0f469c4764413e3df14ac665c8049152a1c8d3b9b7986ceec86e8882998a31ead14e06a30d3acae4663caf42378029e5f31f42c77c049b3ac65dad8516a71a0e8d1ebe2dd75aed5f3adcce9b13fed19bb8a84339d7288cb729447f7faa0e229e77a6e4784fab5440ac3b7f1d76b026938403bafa929d6ed07a95993f651b4ca13a7f44c131d1f8dc71f52378a29ebd2fad3f5c63efa73108930fe55f5672a502a9e430e73844c3b51b229f850a33022b0f1937f899e985b196b424e6dd40141f72b33434c1cecb86a530a95602aebcd960e2aa9eafbf7ba9114b81fbc081e0a5f5dde50d283e83cee8d0bf070deb2df6ae678e410eb52d939256ae7f2ca6f73ff6d1434ebe11958a09cf0e5cff191f9b2a41d2ae121138b9faf25e4b7e886dfc6aec455a2aa70f29006747a978e4b113ffa43cf943b94d861718c41894b62806b9fd4aa6331f0469f6f01d559b2e798268abc76a80357524ad4e506e6cea64e7d3573419491849d368960ccb13bec076b36e9146fc318529c04d46d576f66a5bbef7fda62f2f1d417540d0e93ff35908c52dec3f0bdd9a2ab4751600c1773652a14488ef648949afbd69ad057ca7069eec4015faee94adff210b93ad222bb4c14d4f59b3d5f79dd2b37aff4de8d9daa056100bcf3c5507062cb711e1251e3b90cddb51b01a55d61cfa29234766b1dd931215eaaa58f0d06487ecb89de6525d4f2e6bb161948b6a5d8ffd26e7de6157d3c3d9ef0b5548ce16a7a9d23f679af63eda63fbf0b05659524bf6146845cdf0e3801298a96b532bc47ca67597cdb520665b4a9a5d91acb88f70d3893c0cdcf55def87c19c6d06a02c654f844402d82b88c904f22babbe72676e74b31973fe3c06b0a711ecb2b6071241f018a65644a892c4b9119f80c615ec65708f7d55a0dc5d7b00bf7aaaca69e49f23c6e6915a01e727845ac499f83dd50783102aff9313effbe47e5f17f04073f43de858149e457d44d0b965a542d45a3ba1290a5e49be39c50749eb5144c718674cb96568357a15209ad13ca1343278fc5030b37fe34ee8cf293f41584b5e692bdf8879b90cb4867842fc22ee1ca6ec862771c3d0e97e6d6966644a4b193c0011b3e40328f281ca87f70db1da21ce73475100d5ed237356208501aab02cff6a9dcdf1d5e92573e5c1651fc0e8ef2114943bad8283faaccecdea8ca813be404be61f52b5e3041bec2f32d57fae0390aafb73ab835e227355ca9bb3053de3786c59cdbf32a1e1faa6f2f5023b94c1df0779889a918b0857a83601b35558ce4d2d042a8824347ea6965bc5a6f299af3360d4bc7861150adc6992eeeedbf90f1cea2357f27d14637be64630fec87761c3a8090009fb16d515f9ebd516b5972b6b95a781779f00c8a57c31c3ad781b6e853d583836f858c23e40420cdadc193c5ee7ee1251f22ab635ef2c5719a3caa2fb1cd3d9e50521c0aaa0c78d3deab79c1cc8f819d594ee85aacbbdc2193942e8ecf07b1100cddc0293d7da92c74907e227fb2b583226f328b4403271361b008649fa93c1145786c6b986fbab1077b1b853a9004dd994d5e14adb3a7f4c20337d1ccf490c0730163ad8dfc51f3d2bc87c193854cdb3131d54604eb9c58b645b9636c4626e3505ff92c47bb88b9f6d8fbf865baeef206747ab6eb3f3d15f4402115dbd008d66950029dc951d1c6214f83adb99af58007a394093a56e851a9a9a6b768b5ed671657b516a2b8e571cb07e7f74059921a75f40bf68d9b2fd74977bad18d10537fecd3fdd26207df03d5843845224611f1fc8525aaa65c49cd174d55611666bff3d50853da530d4", 0x1000}, {&(0x7f0000001580)="940a15ef59bb31f9a3673dee7180f3e32d8bf6576a212333ddacbe70d306ae6a7e0a01543c347668025618b372accf697e", 0x31}, {&(0x7f00000015c0)="4b5b0bb2094210846a71b38e675ff075da1c3bce633a4c31c8f7ceff9457a4d9d07210", 0x23}, {&(0x7f0000001600)="4eb3419fca9739707e2d822e0f2f2398045fd6d3d0184c96f0608954a2a03791ab80d3ba6f3b915b00d49154431e2b737786e0d84c875db1d41b965b72a462f37a3c9e7f797203435c43dd53424a991c160bc7f2", 0x54}, {&(0x7f0000001680)="89e4d60c5bdb5f9dad965d41228a577d12d8d0581e", 0x15}], 0xa, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x24008001}}, {{&(0x7f00000018c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001940)="9495a6accae4e5f97332f14ffd3fb15bd46970f04885adceb5bcea9fadf01f12a550e484598471fbdb2a051e648d30c139a4c06ef9b4fdfc5023cc87e6edb4d63b3e8d2409a50bf0b0e8c0fe2370f9b835ddaf9bfbde", 0x56}, {&(0x7f00000019c0)="703aaa55dec386dba962235c5c287c909e4737dc11e20f947fe254ba7566d433c26f4d1236fa7da00b2fc2f7a31e2cb2437d83f1ae065d4d4097c2f707379213263920b138276a26d4d7ae000122a3a6e071d8c24e2b28a879ab", 0x5a}], 0x2, &(0x7f0000001b40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8, 0x4000040}}], 0x5, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000100)) unshare(0x8040480) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="4ed7f4f19fd5114233f554efd9cfc851df26de9c0ce14e555266ded6b5741346ad74813cc187491717140ac72660b77bdc331053307bff1423b8b608ac0ef0ab2fd102dbffaf13b31a742ae3fd8b", @ANYRES32=r6, @ANYBLOB="55ebff80f1dba6761d23ba7000175b6a46a64c17333c317894742a29b040c1cc87e11ab837c6714fc975c5720361b229943570892d949879d159d4ac62c00ab24bc5113dde9b8110b4a9eae6e0484f5d452dff0db566b3595d4fda1009a0fe7aba0320a5409d9fff98beb0ee8ee621b36642"], 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x44) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) socket$rxrpc(0x21, 0x2, 0xa) write$6lowpan_control(r4, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) kernel console output (not intermixed with test programs): ding interface: batadv_slave_1 [ 75.626189][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.652177][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.664786][ T5878] team0: Port device team_slave_1 added [ 75.718089][ T5876] hsr_slave_0: entered promiscuous mode [ 75.724359][ T5876] hsr_slave_1: entered promiscuous mode [ 75.730896][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 75.736670][ T5876] Cannot create hsr debugfs directory [ 75.756226][ T5879] hsr_slave_0: entered promiscuous mode [ 75.762536][ T5879] hsr_slave_1: entered promiscuous mode [ 75.768448][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 75.774466][ T5879] Cannot create hsr debugfs directory [ 75.800400][ T5860] Bluetooth: hci0: command tx timeout [ 75.813426][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.820885][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.846880][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.879923][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.880344][ T5860] Bluetooth: hci2: command tx timeout [ 75.889062][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.892458][ T5874] Bluetooth: hci1: command tx timeout [ 75.925453][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.943196][ T5881] hsr_slave_0: entered promiscuous mode [ 75.949407][ T5881] hsr_slave_1: entered promiscuous mode [ 75.955813][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 75.961744][ T5860] Bluetooth: hci4: command tx timeout [ 75.962105][ T5881] Cannot create hsr debugfs directory [ 75.967314][ T5874] Bluetooth: hci3: command tx timeout [ 76.086266][ T5878] hsr_slave_0: entered promiscuous mode [ 76.093097][ T5878] hsr_slave_1: entered promiscuous mode [ 76.099053][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 76.104834][ T5878] Cannot create hsr debugfs directory [ 76.290007][ T5875] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.309132][ T5875] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.318566][ T5875] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.340842][ T5875] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.373000][ T5879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.390421][ T5879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.400037][ T5879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.409257][ T5879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.473361][ T5876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.492896][ T5876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.513339][ T5876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.526732][ T5876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.544930][ T5881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.571088][ T5881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.594075][ T5881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.605238][ T5881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.654777][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.665332][ T5878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.674933][ T5878] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.687127][ T5878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.704923][ T5878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.741960][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.756051][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.783741][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.790928][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.809090][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.816238][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.854201][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.893644][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.900805][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.909710][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.916938][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.939052][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.957370][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.989748][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.023170][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.030347][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.039962][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.047109][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.082319][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.099131][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.114840][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.121993][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.132752][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.145100][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.159799][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.175926][ T5876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.192235][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.199361][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.220867][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.227978][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.250398][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.257502][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.286685][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.352429][ T5879] veth0_vlan: entered promiscuous mode [ 77.384084][ T5876] veth0_vlan: entered promiscuous mode [ 77.391487][ T5875] veth0_vlan: entered promiscuous mode [ 77.415991][ T5875] veth1_vlan: entered promiscuous mode [ 77.428639][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.438960][ T5876] veth1_vlan: entered promiscuous mode [ 77.446619][ T5879] veth1_vlan: entered promiscuous mode [ 77.469165][ T5875] veth0_macvtap: entered promiscuous mode [ 77.491182][ T5875] veth1_macvtap: entered promiscuous mode [ 77.519945][ T5876] veth0_macvtap: entered promiscuous mode [ 77.535921][ T5876] veth1_macvtap: entered promiscuous mode [ 77.573141][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.586620][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.594556][ T5881] veth0_vlan: entered promiscuous mode [ 77.606071][ T5879] veth0_macvtap: entered promiscuous mode [ 77.617879][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.630018][ T5881] veth1_vlan: entered promiscuous mode [ 77.638719][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.651339][ T3478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.662747][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.681935][ T5879] veth1_macvtap: entered promiscuous mode [ 77.689314][ T3478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.698788][ T3478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.717004][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.756812][ T5881] veth0_macvtap: entered promiscuous mode [ 77.772181][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.797511][ T5881] veth1_macvtap: entered promiscuous mode [ 77.797982][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.812715][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.823737][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.833808][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.852791][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.873959][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.881809][ T5874] Bluetooth: hci0: command tx timeout [ 77.891954][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.902410][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.920026][ T5878] veth0_vlan: entered promiscuous mode [ 77.932063][ T5878] veth1_vlan: entered promiscuous mode [ 77.952402][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.961924][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.971861][ T5874] Bluetooth: hci1: command tx timeout [ 77.977302][ T5874] Bluetooth: hci2: command tx timeout [ 77.982094][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.991621][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.004018][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.024479][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.038277][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.051778][ T5860] Bluetooth: hci4: command tx timeout [ 78.057265][ T5874] Bluetooth: hci3: command tx timeout [ 78.068276][ T5875] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.100842][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.125586][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.137155][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.165453][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.188552][ T5878] veth0_macvtap: entered promiscuous mode [ 78.212713][ T3572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.224731][ T3572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.252590][ T5954] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.257872][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.265855][ T5878] veth1_macvtap: entered promiscuous mode [ 78.283946][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.348086][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.370509][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.390047][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.409955][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.424264][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.433953][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.458955][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.488995][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.499527][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.514834][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.522751][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.532537][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.544567][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.544881][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.558318][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.566314][ T5959] FAULT_INJECTION: forcing a failure. [ 78.566314][ T5959] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.585454][ T5959] CPU: 1 UID: 0 PID: 5959 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT(full) [ 78.585484][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.585498][ T5959] Call Trace: [ 78.585505][ T5959] [ 78.585513][ T5959] dump_stack_lvl+0x189/0x250 [ 78.585543][ T5959] ? __pfx____ratelimit+0x10/0x10 [ 78.585571][ T5959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.585593][ T5959] ? __pfx__printk+0x10/0x10 [ 78.585620][ T5959] ? __might_fault+0xb0/0x130 [ 78.585653][ T5959] ? rcu_is_watching+0x15/0xb0 [ 78.585674][ T5959] should_fail_ex+0x414/0x560 [ 78.585702][ T5959] _copy_from_user+0x2d/0xb0 [ 78.585725][ T5959] ___sys_sendmsg+0x158/0x2a0 [ 78.585747][ T5959] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.585784][ T5959] ? __fget_files+0x2a/0x420 [ 78.585814][ T5959] ? __fget_files+0x3a0/0x420 [ 78.585850][ T5959] __x64_sys_sendmsg+0x19b/0x260 [ 78.585872][ T5959] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 78.585897][ T5959] ? __pfx_ksys_write+0x10/0x10 [ 78.585923][ T5959] ? rcu_is_watching+0x15/0xb0 [ 78.585945][ T5959] ? rcu_is_watching+0x15/0xb0 [ 78.585965][ T5959] do_syscall_64+0xfa/0x3b0 [ 78.585996][ T5959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.586028][ T5959] ? clear_bhb_loop+0x60/0xb0 [ 78.586051][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.586070][ T5959] RIP: 0033:0x7f03c378ebe9 [ 78.586098][ T5959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.586115][ T5959] RSP: 002b:00007f03c454c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.586137][ T5959] RAX: ffffffffffffffda RBX: 00007f03c39b5fa0 RCX: 00007f03c378ebe9 [ 78.586152][ T5959] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 78.586165][ T5959] RBP: 00007f03c454c090 R08: 0000000000000000 R09: 0000000000000000 [ 78.586177][ T5959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.586189][ T5959] R13: 00007f03c39b6038 R14: 00007f03c39b5fa0 R15: 00007f03c3adfa28 [ 78.586213][ T5959] [ 78.834622][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 78.844395][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.883889][ T9] usb 3-1: Product: syz [ 78.910596][ T9] usb 3-1: Manufacturer: syz [ 78.931261][ T9] usb 3-1: SerialNumber: syz [ 78.972210][ T9] usb 3-1: config 0 descriptor?? [ 78.988487][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.996838][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.078155][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.107864][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.209900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.260606][ T9] hso 3-1:0.0: Failed to find BULK IN ep [ 79.300303][ T5864] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.356916][ T5981] fuse: Bad value for 'fd' [ 79.400665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.409027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.430778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.516607][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 79.533863][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.542521][ T5864] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 79.551035][ T5864] usb 4-1: config 0 has no interface number 0 [ 79.558784][ T5864] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.595886][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.691710][ T5864] usb 4-1: config 0 interface 85 has no altsetting 0 [ 79.923513][ T5864] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 79.946686][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.025795][ T5864] usb 4-1: Product: syz [ 80.025856][ T5874] Bluetooth: hci0: command tx timeout [ 80.030096][ T5864] usb 4-1: Manufacturer: syz [ 80.058519][ T5874] Bluetooth: hci2: command tx timeout [ 80.064348][ T5874] Bluetooth: hci1: command tx timeout [ 80.078295][ T5954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.110806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.130405][ T5874] Bluetooth: hci3: command tx timeout [ 80.135845][ T5874] Bluetooth: hci4: command tx timeout [ 80.140889][ T5954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.190302][ T5864] usb 4-1: SerialNumber: syz [ 80.345592][ T5864] usb 4-1: config 0 descriptor?? [ 80.394608][ T5945] usb 3-1: USB disconnect, device number 2 [ 80.520147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.586782][ T5864] appletouch 4-1:0.85: Failed to request geyser raw mode [ 80.624528][ T5864] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 80.662002][ T5864] usb 4-1: USB disconnect, device number 2 [ 80.800512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.991247][ T5945] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.141915][ T6004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.160554][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 81.173204][ T5945] usb 2-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 81.184134][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.194710][ T5945] usb 2-1: Product: syz [ 81.198903][ T5945] usb 2-1: Manufacturer: syz [ 81.204301][ T5945] usb 2-1: SerialNumber: syz [ 81.215622][ T5945] usb 2-1: config 0 descriptor?? [ 81.290253][ T5946] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.370338][ T5912] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.400342][ T5932] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.429816][ T5945] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 81.437733][ T5945] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 81.441814][ T5946] usb 4-1: Using ep0 maxpacket: 16 [ 81.461023][ T5946] usb 4-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 81.563581][ T6010] block device autoloading is deprecated and will be removed. [ 81.572839][ T5945] usb 2-1: USB disconnect, device number 2 [ 81.582792][ T6010] syz.0.17: attempt to access beyond end of device [ 81.582792][ T6010] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 81.621103][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 81.626314][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 81.651773][ T5912] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 81.666432][ T5932] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 81.677397][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.686380][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.694728][ T5912] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 81.703999][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 81.712271][ T5932] usb 5-1: Product: syz [ 81.716596][ T5932] usb 5-1: Manufacturer: syz [ 81.721402][ T5912] usb 3-1: Product: syz [ 81.725732][ T5946] usb 4-1: Product: syz [ 81.730003][ T5932] usb 5-1: SerialNumber: syz [ 81.734697][ T5912] usb 3-1: Manufacturer: syz [ 81.739372][ T5946] usb 4-1: Manufacturer: syz [ 81.744845][ T5912] usb 3-1: SerialNumber: syz [ 81.758045][ T5932] usb 5-1: config 0 descriptor?? [ 81.763151][ T5946] usb 4-1: SerialNumber: syz [ 81.812335][ T5932] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 81.823208][ T5946] usb 4-1: config 0 descriptor?? [ 81.828496][ T5912] usb 3-1: config 0 descriptor?? [ 81.834780][ T6005] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 81.844210][ T5932] usb 5-1: Detected FT-X [ 81.850059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.859121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.010895][ T5932] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 82.120934][ T5874] Bluetooth: hci0: command tx timeout [ 82.126406][ T5874] Bluetooth: hci1: command tx timeout [ 82.131872][ T5860] Bluetooth: hci2: command tx timeout [ 82.210264][ T51] Bluetooth: hci4: command tx timeout [ 82.215757][ T5874] Bluetooth: hci3: command tx timeout [ 82.258303][ T5946] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 82.271352][ T5932] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 82.288950][ T5946] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 82.309117][ T5932] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 82.326410][ T5946] usb 4-1: USB disconnect, device number 3 [ 82.336463][ T5932] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 82.396058][ T5932] usb 5-1: USB disconnect, device number 2 [ 82.424769][ T5932] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 82.449494][ T5932] ftdi_sio 5-1:0.0: device disconnected [ 82.463453][ T6017] sctp: [Deprecated]: syz.0.19 (pid 6017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.463453][ T6017] Use struct sctp_sack_info instead [ 82.690390][ T5945] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.800480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.829417][ T6022] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 82.852053][ T5945] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.864035][ T5945] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 32 [ 82.881007][ T5945] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 1023 [ 82.904459][ T5945] usb 2-1: config 1 interface 0 has no altsetting 0 [ 82.914145][ T5945] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.924436][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.933321][ T5945] usb 2-1: Product: syz [ 82.937382][ T6028] FAULT_INJECTION: forcing a failure. [ 82.937382][ T6028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.950902][ T5945] usb 2-1: Manufacturer: Ј [ 82.950926][ T5945] usb 2-1: SerialNumber: syz [ 82.959114][ T6016] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 82.967870][ T6016] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 82.989084][ T6028] CPU: 0 UID: 0 PID: 6028 Comm: syz.4.24 Not tainted syzkaller #0 PREEMPT(full) [ 82.989114][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.989127][ T6028] Call Trace: [ 82.989135][ T6028] [ 82.989143][ T6028] dump_stack_lvl+0x189/0x250 [ 82.989174][ T6028] ? __pfx____ratelimit+0x10/0x10 [ 82.989208][ T6028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.989233][ T6028] ? __pfx__printk+0x10/0x10 [ 82.989260][ T6028] ? __might_fault+0xb0/0x130 [ 82.989293][ T6028] ? rcu_is_watching+0x15/0xb0 [ 82.989315][ T6028] should_fail_ex+0x414/0x560 [ 82.989344][ T6028] _copy_from_user+0x2d/0xb0 [ 82.989369][ T6028] ___sys_sendmsg+0x158/0x2a0 [ 82.989392][ T6028] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.989430][ T6028] ? __fget_files+0x2a/0x420 [ 82.989461][ T6028] ? __fget_files+0x3a0/0x420 [ 82.989498][ T6028] __x64_sys_sendmsg+0x19b/0x260 [ 82.989521][ T6028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 82.989546][ T6028] ? __pfx_ksys_write+0x10/0x10 [ 82.989572][ T6028] ? rcu_is_watching+0x15/0xb0 [ 82.989594][ T6028] ? rcu_is_watching+0x15/0xb0 [ 82.989616][ T6028] do_syscall_64+0xfa/0x3b0 [ 82.989647][ T6028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.989667][ T6028] ? clear_bhb_loop+0x60/0xb0 [ 82.989690][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.989710][ T6028] RIP: 0033:0x7f4d6b38ebe9 [ 82.989728][ T6028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.989745][ T6028] RSP: 002b:00007f4d6c249038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.989768][ T6028] RAX: ffffffffffffffda RBX: 00007f4d6b5b5fa0 RCX: 00007f4d6b38ebe9 [ 82.989783][ T6028] RDX: 0000000020000044 RSI: 0000200000000040 RDI: 0000000000000003 [ 82.989797][ T6028] RBP: 00007f4d6c249090 R08: 0000000000000000 R09: 0000000000000000 [ 82.989810][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.989823][ T6028] R13: 00007f4d6b5b6038 R14: 00007f4d6b5b5fa0 R15: 00007f4d6b6dfa28 [ 82.989845][ T6028] [ 83.221105][ T6024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 83.233389][ T6016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.376379][ T6016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.462517][ T5945] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 83.496253][ T5945] usb 2-1: USB disconnect, device number 3 [ 83.657272][ T6042] fuse: Bad value for 'fd' [ 83.876288][ T6044] syz.3.28 uses obsolete (PF_INET,SOCK_PACKET) [ 84.099135][ T6051] netlink: 220 bytes leftover after parsing attributes in process `syz.1.30'. [ 84.112073][ T44] usb 3-1: USB disconnect, device number 3 [ 84.291803][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 84.597248][ T6055] netlink: 'syz.3.29': attribute type 1 has an invalid length. [ 84.624026][ T6055] netlink: 36 bytes leftover after parsing attributes in process `syz.3.29'. [ 84.676084][ T5864] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.198930][ T6069] FAULT_INJECTION: forcing a failure. [ 85.198930][ T6069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.242550][ T6069] CPU: 0 UID: 0 PID: 6069 Comm: syz.0.33 Not tainted syzkaller #0 PREEMPT(full) [ 85.242580][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.242593][ T6069] Call Trace: [ 85.242601][ T6069] [ 85.242612][ T6069] dump_stack_lvl+0x189/0x250 [ 85.242635][ T6069] ? __pfx____ratelimit+0x10/0x10 [ 85.242656][ T6069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.242673][ T6069] ? __pfx__printk+0x10/0x10 [ 85.242692][ T6069] ? __might_fault+0xb0/0x130 [ 85.242714][ T6069] ? aa_file_perm+0x13a/0x1550 [ 85.242730][ T6069] ? rcu_is_watching+0x15/0xb0 [ 85.242745][ T6069] should_fail_ex+0x414/0x560 [ 85.242766][ T6069] _copy_from_user+0x2d/0xb0 [ 85.242783][ T6069] sg_write+0x390/0xea0 [ 85.242806][ T6069] ? _parse_integer_limit+0x1ae/0x1f0 [ 85.242829][ T6069] ? __pfx_sg_write+0x10/0x10 [ 85.242852][ T6069] ? __pfx_aa_file_perm+0x10/0x10 [ 85.242877][ T6069] ? bpf_lsm_file_permission+0x9/0x20 [ 85.242895][ T6069] ? security_file_permission+0x75/0x290 [ 85.242914][ T6069] ? rw_verify_area+0x255/0x4d0 [ 85.242932][ T6069] ? __pfx_sg_write+0x10/0x10 [ 85.242955][ T6069] vfs_write+0x27b/0xb30 [ 85.242976][ T6069] ? __pfx_vfs_write+0x10/0x10 [ 85.242994][ T6069] ? lock_release+0x4b/0x3e0 [ 85.243017][ T6069] ? __fget_files+0x2a/0x420 [ 85.243039][ T6069] ? __fget_files+0x3a0/0x420 [ 85.243060][ T6069] ? __fget_files+0x2a/0x420 [ 85.243084][ T6069] ksys_write+0x145/0x250 [ 85.243104][ T6069] ? __pfx_ksys_write+0x10/0x10 [ 85.243122][ T6069] ? rcu_is_watching+0x15/0xb0 [ 85.243137][ T6069] ? rcu_is_watching+0x15/0xb0 [ 85.243152][ T6069] do_syscall_64+0xfa/0x3b0 [ 85.243174][ T6069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.243188][ T6069] ? clear_bhb_loop+0x60/0xb0 [ 85.243204][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.243218][ T6069] RIP: 0033:0x7f0a3c78ebe9 [ 85.243231][ T6069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.243243][ T6069] RSP: 002b:00007f0a3d5ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.243259][ T6069] RAX: ffffffffffffffda RBX: 00007f0a3c9b5fa0 RCX: 00007f0a3c78ebe9 [ 85.243270][ T6069] RDX: 0000000000000054 RSI: 00002000000005c0 RDI: 0000000000000004 [ 85.243279][ T6069] RBP: 00007f0a3d5ce090 R08: 0000000000000000 R09: 0000000000000000 [ 85.243291][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.243299][ T6069] R13: 00007f0a3c9b6038 R14: 00007f0a3c9b5fa0 R15: 00007f0a3cadfa28 [ 85.243315][ T6069] [ 85.607674][ T5864] usb 2-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 85.770341][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.780907][ T5864] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 85.821418][ T5864] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 85.920424][ T5864] usb 2-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 85.928557][ T5864] usb 2-1: Product: syz [ 85.951895][ T6073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.34'. [ 86.022097][ T5864] usb 2-1: Manufacturer: syz [ 86.075074][ T5864] usb 2-1: SerialNumber: syz [ 86.200849][ T5864] usb 2-1: config 0 descriptor?? [ 86.233638][ T5864] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 87.139843][ T6083] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 87.226248][ T5864] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 87.255806][ T5864] usb 2-1: USB disconnect, device number 4 [ 87.260286][ T5912] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.311112][ T6089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.354049][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.420258][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 87.457981][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.501830][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.545411][ T5912] usb 1-1: New USB device found, idVendor=0b05, idProduct=6ae0, bcdDevice= 0.c9 [ 87.571791][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=246, SerialNumber=0 [ 87.620242][ T5912] usb 1-1: Product: syz [ 87.680927][ T5912] usb 1-1: config 0 descriptor?? [ 89.334551][ T5912] usbhid 1-1:0.0: can't add hid device: -71 [ 89.341222][ T5912] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 89.355675][ T5912] usb 1-1: USB disconnect, device number 2 [ 89.375982][ T36] tipc: Subscription rejected, illegal request [ 89.609946][ T6077] delete_channel: no stack [ 89.658830][ T6115] Failed to get privilege flags for destination (handle=0x2:0x8) [ 89.685718][ T6121] tipc: Started in network mode [ 89.708287][ T6121] tipc: Node identity ac14140f, cluster identity 4711 [ 89.735346][ T6121] tipc: New replicast peer: 255.255.255.255 [ 89.757319][ T6121] tipc: Enabled bearer , priority 10 [ 89.791636][ T6122] Zero length message leads to an empty skb [ 89.799582][ T6123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 89.886881][ T6123] tipc: Disabling bearer [ 89.893553][ T6122] IPVS: set_ctl: invalid protocol: 2 8.0.0.0:256 [ 89.921314][ T6122] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 89.928633][ T6128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.50'. [ 89.968983][ T6121] vivid-007: ================= START STATUS ================= [ 89.990890][ T6121] vivid-007: Enable Output Cropping: true [ 89.996738][ T6121] vivid-007: Enable Output Composing: true [ 90.061984][ T6121] vivid-007: Enable Output Scaler: true [ 90.080432][ T6121] vivid-007: Tx RGB Quantization Range: Automatic [ 90.092371][ T6121] vivid-007: Transmit Mode: HDMI [ 90.097670][ T6121] vivid-007: Hotplug Present: 0x00000000 [ 90.103777][ T6121] vivid-007: RxSense Present: 0x00000000 [ 90.113403][ T6121] vivid-007: EDID Present: 0x00000000 [ 90.118844][ T6121] vivid-007: ================== END STATUS ================== [ 90.229393][ T6133] bond1: entered promiscuous mode [ 90.264781][ T6133] bond1: entered allmulticast mode [ 90.293598][ T6133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.358136][ T6143] pimreg3: entered allmulticast mode [ 90.786186][ T6154] mmap: syz.3.57 (6154) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.880461][ T6087] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.080718][ T6087] usb 1-1: Using ep0 maxpacket: 16 [ 91.091202][ T6087] usb 1-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 91.115070][ T6087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.140300][ T6087] usb 1-1: Product: syz [ 91.151774][ T6087] usb 1-1: Manufacturer: syz [ 91.160833][ T6087] usb 1-1: SerialNumber: syz [ 91.172423][ T6087] usb 1-1: config 0 descriptor?? [ 91.307912][ T5912] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 91.397120][ T6087] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 91.420372][ T5874] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 91.433370][ T6087] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 91.459166][ T6087] usb 1-1: USB disconnect, device number 3 [ 91.471751][ T5912] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.514455][ T5912] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.532229][ T5912] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.542202][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.553226][ T5912] usb 5-1: Product: syz [ 91.557403][ T5912] usb 5-1: Manufacturer: syz [ 91.562066][ T5912] usb 5-1: SerialNumber: syz [ 91.580239][ T5932] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 91.750280][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 91.764013][ T5932] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 91.778432][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.788260][ T5912] usb 5-1: 0:2 : does not exist [ 91.793858][ T5932] usb 2-1: Product: syz [ 91.850062][ T5932] usb 2-1: Manufacturer: syz [ 91.856158][ T5932] usb 2-1: SerialNumber: syz [ 91.863116][ T5912] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 91.892987][ T5912] usb 5-1: USB disconnect, device number 3 [ 91.909834][ T5932] usb 2-1: config 0 descriptor?? [ 92.020041][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.127170][ T24] cfg80211: failed to load regulatory.db [ 92.199684][ T6163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.214456][ T6163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.561385][ T6183] bond1: entered promiscuous mode [ 92.568540][ T6183] bond1: entered allmulticast mode [ 92.575917][ T6183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.613863][ T5932] usb_8dev 2-1:0.0 can0: sending command message failed [ 92.628783][ T6188] pimreg3: entered allmulticast mode [ 92.641107][ T5932] usb_8dev 2-1:0.0 can0: can't get firmware version [ 92.701034][ T5932] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 92.721578][ T5932] usb 2-1: USB disconnect, device number 5 [ 92.820252][ T5912] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.045840][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 93.055735][ T6201] @: renamed from syz_tun (while UP) [ 93.061554][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 93.074981][ T5912] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 93.084257][ T5946] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.094009][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.104085][ T5912] usb 5-1: Product: syz [ 93.109132][ T5912] usb 5-1: Manufacturer: syz [ 93.115615][ T5912] usb 5-1: SerialNumber: syz [ 93.622884][ T5912] usb 5-1: config 0 descriptor?? [ 93.639398][ T5912] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 93.662932][ T6198] syz.1.69 (6198): drop_caches: 2 [ 93.674276][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 93.682528][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.703646][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.723659][ T5946] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 93.734945][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.746708][ T5946] usb 3-1: config 0 descriptor?? [ 93.816626][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 93.990333][ T6205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.74'. [ 94.858604][ T5946] usbhid 3-1:0.0: can't add hid device: -71 [ 94.865590][ T5946] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 94.877408][ T5946] usb 3-1: USB disconnect, device number 4 [ 95.785051][ T5932] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 95.940473][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 95.947391][ T5932] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 95.957267][ T5932] usb 3-1: config 0 has no interface number 0 [ 95.966606][ T5932] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.978238][ T5932] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.019901][ T5932] usb 3-1: config 0 interface 85 has no altsetting 0 [ 96.039195][ T5932] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 96.048947][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.058532][ T5932] usb 3-1: Product: syz [ 96.060436][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.063305][ T5932] usb 3-1: Manufacturer: syz [ 96.128612][ T5932] usb 3-1: SerialNumber: syz [ 96.141170][ T5932] usb 3-1: config 0 descriptor?? [ 96.234861][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 96.241607][ T24] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 96.249724][ T24] usb 1-1: config 0 has no interface number 0 [ 96.258265][ T24] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.269817][ T24] usb 1-1: config 0 interface 85 has no altsetting 0 [ 96.277116][ T5912] gspca_stk1135: reg_w 0x300 err -71 [ 96.280985][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 96.284102][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 96.295503][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.315104][ T24] usb 1-1: Product: syz [ 96.319581][ T24] usb 1-1: Manufacturer: syz [ 96.326171][ T24] usb 1-1: SerialNumber: syz [ 96.326862][ T5912] gspca_stk1135: Sensor write failed [ 96.424577][ T24] usb 1-1: config 0 descriptor?? [ 96.559749][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 96.567983][ T5912] gspca_stk1135: Sensor write failed [ 96.573661][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 96.581497][ T5912] gspca_stk1135: Sensor read failed [ 96.587172][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 96.631254][ T5912] gspca_stk1135: Sensor read failed [ 96.718110][ T5912] gspca_stk1135: Detected sensor type unknown (0x0) [ 96.731841][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 96.747195][ T5912] gspca_stk1135: Sensor read failed [ 96.773425][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 96.791646][ T5932] appletouch 3-1:0.85: Geyser mode initialized. [ 96.827090][ T5932] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input6 [ 96.935410][ T5912] gspca_stk1135: Sensor read failed [ 96.959287][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 96.994430][ T5912] gspca_stk1135: Sensor write failed [ 97.002237][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 97.030298][ T5912] gspca_stk1135: Sensor write failed [ 97.041889][ T5912] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 97.138005][ T5912] usb 5-1: USB disconnect, device number 4 [ 97.219336][ T5864] usb 3-1: USB disconnect, device number 5 [ 97.226653][ T24] appletouch 1-1:0.85: Geyser mode initialized. [ 97.249257][ T5864] appletouch 3-1:0.85: input: appletouch disconnected [ 97.290785][ T24] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input7 [ 97.490636][ T5912] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 97.501898][ T9] usb 1-1: USB disconnect, device number 4 [ 97.512561][ T9] appletouch 1-1:0.85: input: appletouch disconnected [ 97.675946][ T5912] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 97.686817][ T5912] usb 5-1: config 0 has no interface number 0 [ 97.694300][ T5912] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 97.717634][ T5912] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.735757][ T5912] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 97.745181][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.755801][ T5912] usb 5-1: Product: syz [ 97.760002][ T5912] usb 5-1: Manufacturer: syz [ 97.765282][ T5912] usb 5-1: SerialNumber: syz [ 97.780760][ T5912] usb 5-1: config 0 descriptor?? [ 97.791142][ T6247] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 97.799836][ T5912] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 97.827149][ T5912] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 97.850405][ T5864] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.109108][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 98.122525][ T5864] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 98.137773][ T5864] usb 4-1: can't read configurations, error -22 [ 98.341721][ T5864] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.690524][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 98.703722][ T5864] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 98.711821][ T5864] usb 4-1: can't read configurations, error -22 [ 98.782663][ T5864] usb usb4-port1: attempt power cycle [ 98.859436][ T6269] netlink: 'syz.0.91': attribute type 6 has an invalid length. [ 98.955055][ T6271] netlink: 'syz.0.91': attribute type 12 has an invalid length. [ 98.994403][ T6271] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.91'. [ 99.112101][ T6269] netlink: 32 bytes leftover after parsing attributes in process `syz.0.91'. [ 99.141444][ T5864] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 99.171157][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 99.177961][ T5864] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 99.203355][ T5864] usb 4-1: can't read configurations, error -22 [ 99.215794][ T6264] syz.1.88 (6264): drop_caches: 2 [ 99.353899][ T5864] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 99.385005][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 99.404271][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 99.416954][ T6275] @: renamed from syz_tun (while UP) [ 99.434054][ T5864] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 99.446337][ T5864] usb 4-1: can't read configurations, error -22 [ 99.466885][ T5864] usb usb4-port1: unable to enumerate USB device [ 99.664833][ T6281] netlink: 68 bytes leftover after parsing attributes in process `syz.2.95'. [ 99.700277][ T5912] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 99.850388][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 99.862985][ T5912] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 99.897275][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.908264][ T5912] usb 2-1: Product: syz [ 99.913887][ T5912] usb 2-1: Manufacturer: syz [ 99.921386][ T5912] usb 2-1: SerialNumber: syz [ 99.929861][ T5912] usb 2-1: config 0 descriptor?? [ 99.946426][ T5912] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 100.024148][ T5949] usb 5-1: USB disconnect, device number 5 [ 100.050001][ T5949] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 100.067123][ T5949] cyberjack 5-1:0.69: device disconnected [ 101.022478][ T44] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 101.058864][ T6301] netlink: 'syz.4.101': attribute type 1 has an invalid length. [ 101.067200][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 101.076830][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.196017][ T44] usb 4-1: config 0 has an invalid interface number: 181 but max is 0 [ 101.232713][ T44] usb 4-1: config 0 has no interface number 0 [ 101.333102][ T44] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=d5.70 [ 101.405423][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.427090][ T6308] VFS: Mount too revealing [ 101.453759][ T44] usb 4-1: Product: syz [ 101.474510][ T44] usb 4-1: Manufacturer: syz [ 101.489063][ T44] usb 4-1: SerialNumber: syz [ 101.512144][ T44] usb 4-1: config 0 descriptor?? [ 101.552998][ T6308] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.564913][ T6308] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.572495][ T44] kl5kusb105 4-1:0.181: KL5KUSB105D / PalmConnect converter detected [ 101.627164][ T6308] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.641729][ T6308] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.649670][ T6308] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.706403][ T44] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 101.751431][ T6308] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.773808][ T44] usb 4-1: USB disconnect, device number 8 [ 101.786081][ T44] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 101.797973][ T6308] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.798539][ T44] kl5kusb105 4-1:0.181: device disconnected [ 101.828369][ T6308] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.869256][ T6308] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.902480][ T6308] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.914863][ T6308] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 101.951973][ T6308] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 101.972470][ T6308] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 101.986270][ T6308] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 101.998687][ T6308] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 102.214577][ T6315] sctp: [Deprecated]: syz.4.105 (pid 6315) Use of int in max_burst socket option deprecated. [ 102.214577][ T6315] Use struct sctp_assoc_value instead [ 102.367723][ T5912] gspca_stk1135: reg_w 0x300 err -71 [ 102.374170][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 102.381411][ T5912] gspca_stk1135: Sensor write failed [ 102.391224][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 102.407608][ T5912] gspca_stk1135: Sensor write failed [ 102.418338][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 102.435261][ T5912] gspca_stk1135: Sensor read failed [ 102.445427][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 102.459562][ T5912] gspca_stk1135: Sensor read failed [ 102.469377][ T5912] gspca_stk1135: Detected sensor type unknown (0x0) [ 102.525189][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 102.532789][ T5912] gspca_stk1135: Sensor read failed [ 102.539701][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 102.547113][ T5912] gspca_stk1135: Sensor read failed [ 102.552975][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 102.559822][ T5912] gspca_stk1135: Sensor write failed [ 102.565639][ T5912] gspca_stk1135: serial bus timeout: status=0x00 [ 102.572949][ T5912] gspca_stk1135: Sensor write failed [ 102.578476][ T5912] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 102.593673][ T5912] usb 2-1: USB disconnect, device number 6 [ 102.661328][ T5949] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.830862][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 102.837976][ T5949] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 102.850520][ T5949] usb 3-1: config 0 has no interface number 0 [ 102.856828][ T5949] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.870915][ T5949] usb 3-1: config 0 interface 85 has no altsetting 0 [ 102.879550][ T5949] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 102.890314][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.898392][ T5949] usb 3-1: Product: syz [ 102.903054][ T5949] usb 3-1: Manufacturer: syz [ 102.907734][ T5949] usb 3-1: SerialNumber: syz [ 102.922360][ T5949] usb 3-1: config 0 descriptor?? [ 102.938654][ T5949] appletouch 3-1:0.85: Could not find int-in endpoint [ 102.969852][ T5949] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 103.025692][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.026547][ T5949] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 103.206613][ T44] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 103.230217][ T44] usb 1-1: config 0 has no interface number 0 [ 103.247953][ T44] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 103.272674][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.297615][ T44] usb 1-1: Product: syz [ 103.312728][ T44] usb 1-1: Manufacturer: syz [ 103.317831][ T44] usb 1-1: SerialNumber: syz [ 103.347149][ T44] usb 1-1: config 0 descriptor?? [ 103.376245][ T44] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 103.398837][ T44] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 103.480250][ T5874] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.720358][ T5874] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.752734][ T5949] usb 1-1: USB disconnect, device number 5 [ 103.801272][ T5874] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.960585][ T5874] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.040428][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 105.367211][ T6365] random: crng reseeded on system resumption [ 105.573994][ T5874] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.794835][ T5864] usb 3-1: USB disconnect, device number 6 [ 105.812934][ T5874] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.890366][ T5874] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.041986][ T5874] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.122613][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 106.373999][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 106.464111][ T6375] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 106.567015][ T6375] netlink: 36 bytes leftover after parsing attributes in process `syz.2.119'. [ 106.826808][ T6383] fuse: Unknown parameter '0xffffffffffffffff' [ 107.657703][ T5874] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.942459][ T5874] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.960383][ T5874] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.122634][ T5874] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.180239][ T5864] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 108.208921][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 108.383480][ T5864] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.401755][ T5864] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 108.675283][ T5864] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 108.790920][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.821973][ T6400] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 108.851192][ T5864] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.732902][ T5949] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 109.920326][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 109.943365][ T5864] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 110.094540][ T5949] usb 3-1: config 0 has an invalid interface number: 102 but max is 0 [ 110.105392][ T5949] usb 3-1: config 0 has no interface number 0 [ 110.119948][ T5949] usb 3-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 110.140338][ T5864] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 110.140527][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.157418][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.437848][ T5864] usb 4-1: config 0 descriptor?? [ 110.469835][ T5949] usb 3-1: Product: syz [ 110.480332][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.507383][ T5949] usb 3-1: Manufacturer: syz [ 110.539043][ T5949] usb 3-1: SerialNumber: syz [ 110.583434][ T5949] usb 3-1: config 0 descriptor?? [ 110.604974][ T5949] usb-storage 3-1:0.102: USB Mass Storage device detected [ 110.640436][ T5949] usb-storage 3-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 110.658315][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.671398][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.686097][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.699571][ T5949] usb-storage 3-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 110.699571][ T5949] Please send a copy of this message to and [ 110.755323][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.858886][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.911072][ T24] usb 2-1: config 0 descriptor?? [ 110.940437][ T5949] usb 3-1: USB disconnect, device number 7 [ 111.144512][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.210050][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.370287][ T5912] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.422496][ T24] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 111.488626][ T24] usb 5-1: USB disconnect, device number 6 [ 111.520279][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 111.548514][ T5912] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 111.569719][ T5912] usb 1-1: config 8 has no interface number 0 [ 111.591799][ T5912] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 111.657726][ T5912] usb 1-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 111.683472][ T5912] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 111.706509][ T5912] usb 1-1: config 8 interface 39 has no altsetting 0 [ 111.717674][ T5912] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 111.729586][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 111.730026][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.747517][ T5912] usb 1-1: Product: syz [ 111.753544][ T5912] usb 1-1: Manufacturer: syz [ 111.758235][ T5912] usb 1-1: SerialNumber: syz [ 111.775424][ T6416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.128'. [ 111.801732][ T6416] bond1: entered allmulticast mode [ 111.820240][ T6445] fuse: Unknown parameter 'Á¥¦ÎÎ}Âç´¹äÆÔ9YZ4àpereisions' [ 111.821513][ T6416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.846050][ T5864] usb 4-1: Cannot set autoneg [ 111.851396][ T5864] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 111.878334][ T5864] usb 4-1: USB disconnect, device number 9 [ 111.930296][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 111.972654][ T5912] ipheth 1-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 112.110324][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 112.202829][ T5912] ipheth 1-1:8.39: probe with driver ipheth failed with error -71 [ 112.204753][ T24] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 112.219227][ T24] usb 5-1: config 0 has no interface number 0 [ 112.221698][ T5912] usb 1-1: USB disconnect, device number 6 [ 112.232884][ T24] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.252390][ T24] usb 5-1: config 0 interface 85 has no altsetting 0 [ 112.264561][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 112.275627][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.285426][ T24] usb 5-1: Product: syz [ 112.290025][ T24] usb 5-1: Manufacturer: syz [ 112.295899][ T24] usb 5-1: SerialNumber: syz [ 112.337613][ T24] usb 5-1: config 0 descriptor?? [ 112.873370][ T5864] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 112.881605][ T24] appletouch 5-1:0.85: Geyser mode initialized. [ 112.891472][ T24] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input8 [ 113.030298][ T5864] usb 2-1: device descriptor read/64, error -32 [ 113.090680][ T9] usb 5-1: USB disconnect, device number 7 [ 113.098694][ T9] appletouch 5-1:0.85: input: appletouch disconnected [ 113.310258][ T5864] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 113.350687][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 113.380308][ T24] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 113.440347][ T5864] usb 2-1: device descriptor read/64, error -32 [ 113.541773][ T24] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 113.608833][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.619725][ T24] usb 3-1: config 0 has no interface number 0 [ 113.626021][ T24] usb 3-1: config 0 interface 205 has no altsetting 0 [ 113.634669][ T24] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 113.648072][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.716743][ T24] usb 3-1: Product: syz [ 113.740398][ T5864] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 113.756293][ T24] usb 3-1: Manufacturer: syz [ 113.778107][ T24] usb 3-1: SerialNumber: syz [ 113.797310][ T24] usb 3-1: config 0 descriptor?? [ 113.826250][ T24] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 113.843037][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 113.876727][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.141'. [ 113.891565][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 113.901843][ T24] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 113.914105][ T24] usb 3-1: media controller created [ 113.928943][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.967106][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 114.300102][ T6474] syz.4.141 (6474): drop_caches: 2 [ 114.320573][ T6474] syz.4.141 (6474): drop_caches: 2 [ 114.342512][ T6476] fuse: Unknown parameter '0xffffffffffffffff' [ 114.425703][ T5864] usb 2-1: device not accepting address 7, error -71 [ 114.442414][ T24] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 114.473046][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 114.487381][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 114.504416][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 114.540657][ T24] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 114.590662][ T24] usb 3-1: USB disconnect, device number 8 [ 114.813012][ T6482] netlink: 'syz.3.144': attribute type 27 has an invalid length. [ 114.828765][ T24] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 114.887350][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.894813][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.114354][ T6482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.147838][ T6482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.160412][ T5912] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 115.241490][ T44] usb 2-1: USB disconnect, device number 7 [ 115.351272][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 115.379195][ T5912] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.387508][ T5912] usb 4-1: config 0 has no interface number 0 [ 115.405032][ T5912] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 115.436236][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.467021][ T6482] bond1: left allmulticast mode [ 115.528495][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.148'. [ 115.540562][ T5912] usb 4-1: Product: syz [ 115.547773][ T5912] usb 4-1: Manufacturer: syz [ 115.552638][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 115.568067][ T5912] usb 4-1: SerialNumber: syz [ 115.578698][ T5912] usb 4-1: config 0 descriptor?? [ 115.592776][ T5912] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 115.620463][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 115.649755][ T6483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.659863][ T6483] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.692928][ T6483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.732553][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 115.743786][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.756161][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.769872][ T3572] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.795120][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.808246][ T3572] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.808421][ T3572] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.090535][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.134566][ T3572] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.144256][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.170725][ T9] usb 3-1: config 0 descriptor?? [ 116.540286][ T5864] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 116.593942][ T5912] gspca_spca1528: reg_w err -71 [ 116.610307][ T5912] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 116.628352][ T5912] usb 4-1: USB disconnect, device number 10 [ 116.673983][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 116.691195][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 116.694219][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input10 [ 116.730797][ T5932] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 116.738606][ T5864] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 116.743612][ T9] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 116.758624][ T5864] usb 1-1: config 0 has no interface number 0 [ 116.758666][ T5864] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.815003][ T5864] usb 1-1: config 0 interface 85 has no altsetting 0 [ 116.833925][ T5864] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 116.851536][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.886973][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 116.888750][ T5864] usb 1-1: Product: syz [ 116.894016][ T5932] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 116.896716][ T5864] usb 1-1: Manufacturer: syz [ 116.917875][ T5864] usb 1-1: SerialNumber: syz [ 116.925816][ T5864] usb 1-1: config 0 descriptor?? [ 116.951708][ T5932] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.976769][ T5932] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.004384][ T5932] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.019781][ T5932] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.029237][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.037531][ T5932] usb 5-1: Product: syz [ 117.041856][ T5932] usb 5-1: Manufacturer: syz [ 117.046483][ T5932] usb 5-1: SerialNumber: syz [ 117.210402][ T6087] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 117.274941][ T6512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.152'. [ 117.342095][ T5864] appletouch 1-1:0.85: Geyser mode initialized. [ 117.349268][ T5864] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input11 [ 117.390657][ T6087] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 117.409236][ T6087] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 117.426790][ T6087] usb 2-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.432547][ T5932] usb 5-1: USB disconnect, device number 8 [ 117.462452][ T6522] fuse: Unknown parameter '0xffffffffffffffff' [ 117.536222][ T6087] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.559870][ T9] usb 1-1: USB disconnect, device number 7 [ 117.565839][ T6087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.565866][ T6087] usb 2-1: Product: syz [ 117.565882][ T6087] usb 2-1: Manufacturer: syz [ 117.565897][ T6087] usb 2-1: SerialNumber: syz [ 117.582002][ T6087] cdc_ncm 2-1:3.0: invalid descriptor buffer length [ 117.615916][ T6087] cdc_ncm 2-1:3.0: CDC Union missing and no IAD found [ 117.625794][ T6087] cdc_ncm 2-1:3.0: bind() failure [ 117.658042][ T9] appletouch 1-1:0.85: input: appletouch disconnected [ 117.970445][ T9] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 118.360705][ T6087] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 118.564580][ T6087] usb 5-1: device descriptor read/64, error -71 [ 118.598334][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.161'. [ 118.610435][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 118.789704][ T5925] usb 2-1: USB disconnect, device number 8 [ 118.819632][ T6537] Invalid logical block size (7) [ 118.919510][ T6087] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 119.129622][ T6087] usb 5-1: device descriptor read/64, error -71 [ 119.176188][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 119.238206][ T5932] usb 3-1: USB disconnect, device number 9 [ 119.254033][ T6548] netlink: 'syz.3.162': attribute type 1 has an invalid length. [ 119.261807][ T6548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.162'. [ 119.273208][ T6087] usb usb5-port1: attempt power cycle [ 119.620361][ T6087] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 119.711082][ T6087] usb 5-1: device descriptor read/8, error -71 [ 119.779248][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'. [ 119.795165][ T5874] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 119.795613][ T6557] fuse: blksize only supported for fuseblk [ 120.122536][ T6557] fuse: Bad value for 'user_id' [ 120.127397][ T6555] vlan2: entered promiscuous mode [ 120.127628][ T6557] fuse: Bad value for 'user_id' [ 120.132942][ T6555] team0: entered promiscuous mode [ 120.148372][ T6555] team_slave_0: entered promiscuous mode [ 120.155946][ T6555] team_slave_1: entered promiscuous mode [ 120.162615][ T6087] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 120.197395][ T6087] usb 5-1: device descriptor read/8, error -71 [ 120.327743][ T6562] bond2: entered promiscuous mode [ 120.341075][ T6087] usb usb5-port1: unable to enumerate USB device [ 120.475456][ T6562] bond2: entered allmulticast mode [ 120.500764][ T6562] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.657808][ T6579] netlink: 'syz.3.170': attribute type 1 has an invalid length. [ 120.829898][ T6579] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.867865][ T6584] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.940111][ T6583] bond2: (slave veth3): Enslaving as an active interface with a down link [ 120.959075][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 120.997350][ T30] audit: type=1326 audit(1755746215.124:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf83f8ebe9 code=0x7ffc0000 [ 121.033473][ T6579] vlan2: entered allmulticast mode [ 121.060304][ T6579] veth1: entered allmulticast mode [ 121.073970][ T6583] mac80211_hwsim hwsim5 è: renamed from wlan1 [ 121.096735][ T30] audit: type=1326 audit(1755746215.134:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf83f8ebe9 code=0x7ffc0000 [ 121.320482][ T30] audit: type=1326 audit(1755746215.134:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7faf83f8ebe9 code=0x7ffc0000 [ 121.343041][ T30] audit: type=1326 audit(1755746215.134:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf83f8ebe9 code=0x7ffc0000 [ 121.367505][ T30] audit: type=1326 audit(1755746215.134:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf83f8ebe9 code=0x7ffc0000 [ 121.390384][ T30] audit: type=1326 audit(1755746215.134:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf83f8ebe9 code=0x7ffc0000 [ 121.413890][ T30] audit: type=1326 audit(1755746215.134:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf83f8ebe9 code=0x7ffc0000 [ 121.436415][ T30] audit: type=1326 audit(1755746215.134:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7faf83f8ebe9 code=0x7ffc0000 [ 121.551884][ T6588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.172'. [ 121.561026][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 121.570308][ T30] audit: type=1326 audit(1755746215.134:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf83f8ebe9 code=0x7ffc0000 [ 121.613927][ T30] audit: type=1326 audit(1755746215.134:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faf83f8ebe9 code=0x7ffc0000 [ 122.503539][ T6602] Invalid logical block size (7) [ 123.180264][ T44] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 123.330238][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 123.340117][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 123.352523][ T44] usb 2-1: config 129 has an invalid interface number: 249 but max is 0 [ 123.377832][ T44] usb 2-1: config 129 has no interface number 0 [ 123.395977][ T44] usb 2-1: config 129 interface 249 altsetting 247 bulk endpoint 0x81 has invalid maxpacket 32 [ 123.432549][ T44] usb 2-1: config 129 interface 249 altsetting 247 bulk endpoint 0xA has invalid maxpacket 164 [ 123.462703][ T44] usb 2-1: config 129 interface 249 has no altsetting 0 [ 123.479655][ T44] usb 2-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=2e.38 [ 123.495085][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.506003][ T6620] bond2: entered promiscuous mode [ 123.511157][ T5925] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 123.518826][ T44] usb 2-1: Product: syz [ 123.523505][ T6620] bond2: entered allmulticast mode [ 123.530005][ T44] usb 2-1: Manufacturer: syz [ 123.530802][ T6620] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.534785][ T44] usb 2-1: SerialNumber: syz [ 123.566265][ T6610] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.580605][ T6610] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.670227][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 123.678103][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.694490][ T5925] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=26.35 [ 123.704062][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.712591][ T5925] usb 1-1: Product: syz [ 123.716977][ T5925] usb 1-1: Manufacturer: syz [ 123.727078][ T5925] usb 1-1: SerialNumber: syz [ 123.739432][ T5925] usb 1-1: config 0 descriptor?? [ 123.832534][ T44] smsc95xx v2.0.0 [ 123.842657][ T44] smsc95xx 2-1:129.249 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 123.853431][ T5864] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 123.864375][ T44] smsc95xx 2-1:129.249: probe with driver smsc95xx failed with error -71 [ 123.885780][ T44] usb 2-1: USB disconnect, device number 9 [ 123.920576][ T5932] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 123.967144][ T5925] usb 1-1: USB disconnect, device number 8 [ 124.020466][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 124.027351][ T5864] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.039109][ T5864] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.049374][ T5864] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.056346][ T5864] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 124.067867][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.077409][ T5864] usb 3-1: config 0 descriptor?? [ 124.090379][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 124.097127][ T5932] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 124.105416][ T5932] usb 4-1: config 0 has no interface number 0 [ 124.111916][ T5932] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.123278][ T5932] usb 4-1: config 0 interface 85 has no altsetting 0 [ 124.133021][ T5932] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 124.143829][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.151916][ T5932] usb 4-1: Product: syz [ 124.156307][ T5932] usb 4-1: Manufacturer: syz [ 124.161607][ T5932] usb 4-1: SerialNumber: syz [ 124.168494][ T5932] usb 4-1: config 0 descriptor?? [ 124.190295][ T5946] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 124.340228][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 124.348576][ T5946] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 124.357228][ T5946] usb 5-1: config 0 has no interface number 0 [ 124.363783][ T5946] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.377197][ T5946] usb 5-1: config 0 interface 85 has no altsetting 0 [ 124.391666][ T5946] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 124.404092][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.412529][ T5946] usb 5-1: Product: syz [ 124.416769][ T5946] usb 5-1: Manufacturer: syz [ 124.422583][ T5946] usb 5-1: SerialNumber: syz [ 124.429103][ T5946] usb 5-1: config 0 descriptor?? [ 124.502805][ T5864] hid (null): global environment stack underflow [ 124.563682][ T5864] cougar 0003:060B:500A.0003: usage count exceeds max: fixing up report descriptor [ 124.589961][ T5932] appletouch 4-1:0.85: Geyser mode initialized. [ 124.604972][ T5932] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input12 [ 124.609414][ T6638] FAULT_INJECTION: forcing a failure. [ 124.609414][ T6638] name failslab, interval 1, probability 0, space 0, times 0 [ 124.633008][ T5864] cougar 0003:060B:500A.0003: unexpected long global item [ 124.663772][ T5864] cougar 0003:060B:500A.0003: parse failed [ 124.669730][ T5864] cougar 0003:060B:500A.0003: probe with driver cougar failed with error -22 [ 124.694680][ T6638] CPU: 1 UID: 0 PID: 6638 Comm: syz.1.189 Not tainted syzkaller #0 PREEMPT(full) [ 124.694706][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.694718][ T6638] Call Trace: [ 124.694726][ T6638] [ 124.694735][ T6638] dump_stack_lvl+0x189/0x250 [ 124.694774][ T6638] ? __pfx____ratelimit+0x10/0x10 [ 124.694802][ T6638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.694826][ T6638] ? __pfx__printk+0x10/0x10 [ 124.694853][ T6638] ? security_file_ioctl+0xcb/0x2d0 [ 124.694883][ T6638] ? __pfx___might_resched+0x10/0x10 [ 124.694902][ T6638] ? lock_acquire+0x5f/0x360 [ 124.694939][ T6638] should_fail_ex+0x414/0x560 [ 124.694968][ T6638] should_failslab+0xa8/0x100 [ 124.695000][ T6638] __kmalloc_cache_noprof+0x70/0x3d0 [ 124.695028][ T6638] ? dev_ethtool+0x126/0x19b0 [ 124.695051][ T6638] dev_ethtool+0x126/0x19b0 [ 124.695073][ T6638] ? rcu_is_watching+0x15/0xb0 [ 124.695095][ T6638] ? __pfx_dev_ethtool+0x10/0x10 [ 124.695115][ T6638] ? dev_load+0x21/0x1f0 [ 124.695141][ T6638] ? rcu_is_watching+0x15/0xb0 [ 124.695163][ T6638] ? rcu_is_watching+0x15/0xb0 [ 124.695183][ T6638] ? lock_release+0x4b/0x3e0 [ 124.695215][ T6638] ? dev_load+0x21/0x1f0 [ 124.695243][ T6638] dev_ioctl+0x392/0x1150 [ 124.695274][ T6638] sock_do_ioctl+0x22c/0x300 [ 124.695301][ T6638] ? __pfx_sock_do_ioctl+0x10/0x10 [ 124.695325][ T6638] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 124.695363][ T6638] sock_ioctl+0x576/0x790 [ 124.695386][ T6638] ? lock_release+0x4b/0x3e0 [ 124.695416][ T6638] ? __pfx_sock_ioctl+0x10/0x10 [ 124.695441][ T6638] ? __fget_files+0x2a/0x420 [ 124.695472][ T6638] ? __fget_files+0x3a0/0x420 [ 124.695503][ T6638] ? __fget_files+0x2a/0x420 [ 124.695535][ T6638] ? bpf_lsm_file_ioctl+0x9/0x20 [ 124.695562][ T6638] ? __pfx_sock_ioctl+0x10/0x10 [ 124.695587][ T6638] __se_sys_ioctl+0xfc/0x170 [ 124.695612][ T6638] do_syscall_64+0xfa/0x3b0 [ 124.695643][ T6638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.695664][ T6638] ? clear_bhb_loop+0x60/0xb0 [ 124.695687][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.695708][ T6638] RIP: 0033:0x7fc2b5b8ebe9 [ 124.695735][ T6638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.695753][ T6638] RSP: 002b:00007fc2b6964038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.695781][ T6638] RAX: ffffffffffffffda RBX: 00007fc2b5db5fa0 RCX: 00007fc2b5b8ebe9 [ 124.695796][ T6638] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 124.695810][ T6638] RBP: 00007fc2b6964090 R08: 0000000000000000 R09: 0000000000000000 [ 124.695822][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.695835][ T6638] R13: 00007fc2b5db6038 R14: 00007fc2b5db5fa0 R15: 00007fc2b5edfa28 [ 124.695859][ T6638] [ 124.983622][ T5946] appletouch 5-1:0.85: Geyser mode initialized. [ 124.991525][ T5946] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input13 [ 125.018187][ T5864] usb 3-1: USB disconnect, device number 10 [ 125.340490][ T5946] usb 5-1: USB disconnect, device number 13 [ 125.368568][ T5932] usb 4-1: USB disconnect, device number 11 [ 125.387260][ T5946] appletouch 5-1:0.85: input: appletouch disconnected [ 125.428439][ T5932] appletouch 4-1:0.85: input: appletouch disconnected [ 126.371590][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 126.437560][ T6663] VFS: Mount too revealing [ 126.453446][ T6669] syz.4.194 (6669): drop_caches: 2 [ 126.458985][ T6669] syz.4.194 (6669): drop_caches: 2 [ 126.511265][ T6657] Invalid logical block size (7) [ 126.748725][ T6663] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.763331][ T6663] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.791898][ T6663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.071902][ T6663] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.120586][ T6663] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 127.549491][ T6675] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 128.052348][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 128.110320][ T5946] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 128.215326][ T9] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 128.223771][ T9] usb 1-1: config 6 has no interface number 0 [ 128.229874][ T9] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 128.240634][ T9] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 128.252332][ T9] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 128.265434][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 128.267142][ T6690] FAULT_INJECTION: forcing a failure. [ 128.267142][ T6690] name failslab, interval 1, probability 0, space 0, times 0 [ 128.274634][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.274658][ T9] usb 1-1: Product: syz [ 128.274683][ T9] usb 1-1: Manufacturer: syz [ 128.290835][ T6690] CPU: 1 UID: 0 PID: 6690 Comm: syz.3.203 Not tainted syzkaller #0 PREEMPT(full) [ 128.290866][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.290880][ T6690] Call Trace: [ 128.290889][ T6690] [ 128.290899][ T6690] dump_stack_lvl+0x189/0x250 [ 128.290932][ T6690] ? __pfx____ratelimit+0x10/0x10 [ 128.290964][ T6690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.290992][ T6690] ? __pfx__printk+0x10/0x10 [ 128.291027][ T6690] ? __pfx___might_resched+0x10/0x10 [ 128.291049][ T6690] ? lock_acquire+0x5f/0x360 [ 128.291085][ T6690] should_fail_ex+0x414/0x560 [ 128.291117][ T6690] should_failslab+0xa8/0x100 [ 128.291153][ T6690] __kmalloc_noprof+0xcb/0x4f0 [ 128.291184][ T6690] ? kfree+0x4d/0x440 [ 128.291210][ T6690] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 128.291237][ T6690] tomoyo_realpath_from_path+0xe3/0x5d0 [ 128.291260][ T6690] ? tomoyo_domain+0xd9/0x130 [ 128.291286][ T6690] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 128.291329][ T6690] tomoyo_path_number_perm+0x1e8/0x5a0 [ 128.291375][ T6690] ? lock_release+0x4b/0x3e0 [ 128.291407][ T6690] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 128.291442][ T6690] ? rcu_is_watching+0x15/0xb0 [ 128.291470][ T6690] ? lock_release+0x4b/0x3e0 [ 128.291501][ T6690] ? vfs_write+0x956/0xb30 [ 128.291535][ T6690] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 128.291577][ T6690] ? lock_release+0x4b/0x3e0 [ 128.291613][ T6690] ? __fget_files+0x2a/0x420 [ 128.291648][ T6690] ? __fget_files+0x3a0/0x420 [ 128.291683][ T6690] ? __fget_files+0x2a/0x420 [ 128.291729][ T6690] security_file_ioctl+0xcb/0x2d0 [ 128.291766][ T6690] __se_sys_ioctl+0x47/0x170 [ 128.291795][ T6690] do_syscall_64+0xfa/0x3b0 [ 128.291830][ T6690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.291854][ T6690] ? clear_bhb_loop+0x60/0xb0 [ 128.291879][ T6690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.291902][ T6690] RIP: 0033:0x7f03c378ebe9 [ 128.291922][ T6690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.291941][ T6690] RSP: 002b:00007f03c452a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.291965][ T6690] RAX: ffffffffffffffda RBX: 00007f03c39b6090 RCX: 00007f03c378ebe9 [ 128.291983][ T6690] RDX: 00002000000000c0 RSI: 000000004008ae89 RDI: 0000000000000008 [ 128.291999][ T6690] RBP: 00007f03c452a090 R08: 0000000000000000 R09: 0000000000000000 [ 128.292013][ T6690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.292028][ T6690] R13: 00007f03c39b6128 R14: 00007f03c39b6090 R15: 00007f03c3adfa28 [ 128.292052][ T6690] [ 128.292136][ T6690] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.300717][ T5946] usb 3-1: too many configurations: 19, using maximum allowed: 8 [ 128.576506][ T9] usb 1-1: SerialNumber: syz [ 128.584500][ T9] hso 1-1:6.2: Failed to find INT IN ep [ 128.595203][ T5946] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 128.603213][ T5874] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.610467][ T5946] usb 3-1: can't read configurations, error -61 [ 128.702446][ T6692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.204'. [ 128.722048][ T6692] netlink: 'syz.3.204': attribute type 5 has an invalid length. [ 128.730495][ T6692] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.204'. [ 128.758700][ T5946] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 128.798775][ T44] usb 1-1: USB disconnect, device number 9 [ 128.840925][ T5874] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.840931][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.932901][ T5946] usb 3-1: too many configurations: 19, using maximum allowed: 8 [ 128.942328][ T5946] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 128.950358][ T5946] usb 3-1: can't read configurations, error -61 [ 128.957561][ T5946] usb usb3-port1: attempt power cycle [ 129.000342][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 129.020228][ T5864] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 129.150432][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 129.233760][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 129.239819][ T5860] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.276578][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 129.290011][ T5864] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 129.290241][ T9] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 129.300425][ T5864] usb 2-1: config 0 has no interface number 0 [ 129.308711][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.368412][ T5946] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 129.395628][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.406501][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.418427][ T5946] usb 3-1: too many configurations: 19, using maximum allowed: 8 [ 129.428593][ T5946] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 129.436247][ T5946] usb 3-1: can't read configurations, error -61 [ 129.448903][ T5864] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.453595][ T9] usbtmc 4-1:16.0: bulk endpoints not found [ 129.471348][ T5864] usb 2-1: config 0 interface 85 has no altsetting 0 [ 129.526583][ T5864] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 129.538959][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.550754][ T5864] usb 2-1: Product: syz [ 129.560053][ T5864] usb 2-1: Manufacturer: syz [ 129.597683][ T5864] usb 2-1: SerialNumber: syz [ 129.618395][ T5946] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 129.619014][ T5864] usb 2-1: config 0 descriptor?? [ 129.640368][ T5949] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 129.657591][ T6704] VFS: Mount too revealing [ 129.675507][ T5946] usb 3-1: too many configurations: 19, using maximum allowed: 8 [ 129.687076][ T5946] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 129.701880][ T5946] usb 3-1: can't read configurations, error -61 [ 129.724222][ T5946] usb usb3-port1: unable to enumerate USB device [ 129.760455][ T6704] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.767875][ T6704] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.775413][ T6704] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.788356][ T6704] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.796035][ T6704] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.850440][ T5949] usb 5-1: Using ep0 maxpacket: 8 [ 129.879741][ T5949] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.902281][ T5949] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.991526][ T5949] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 130.000744][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.008840][ T5949] usb 5-1: Product: syz [ 130.013103][ T5949] usb 5-1: Manufacturer: syz [ 130.017769][ T5949] usb 5-1: SerialNumber: syz [ 130.027630][ T5949] usb 5-1: bad CDC descriptors [ 130.035947][ T5949] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 130.042618][ T5949] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 130.061763][ T5864] appletouch 2-1:0.85: Geyser mode initialized. [ 130.072844][ T5864] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input14 [ 130.297514][ T5949] usb 2-1: USB disconnect, device number 10 [ 130.308831][ T5949] appletouch 2-1:0.85: input: appletouch disconnected [ 131.040315][ T6720] Invalid logical block size (7) [ 131.830119][ T5860] Bluetooth: hci4: command 0x0405 tx timeout [ 131.847164][ T5864] usb 4-1: USB disconnect, device number 12 [ 131.854248][ T5874] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.860434][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.860475][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.872467][ T5868] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.952637][ T44] usb 5-1: USB disconnect, device number 14 [ 132.890367][ T5949] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 133.102002][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.108404][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.168190][ T5949] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 133.178550][ T5949] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 133.187614][ T5949] usb 5-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.217766][ T5949] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.227509][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.272416][ T6748] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 133.282244][ T6748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.219'. [ 133.370924][ T5949] usb 5-1: Product: syz [ 133.375216][ T5949] usb 5-1: Manufacturer: syz [ 133.379836][ T5949] usb 5-1: SerialNumber: syz [ 133.395025][ T5949] cdc_ncm 5-1:3.0: invalid descriptor buffer length [ 133.408303][ T5949] cdc_ncm 5-1:3.0: CDC Union missing and no IAD found [ 133.415418][ T5949] cdc_ncm 5-1:3.0: bind() failure [ 133.707161][ T6746] vivid-005: kernel_thread() failed [ 133.770527][ T44] usb 5-1: USB disconnect, device number 15 [ 134.110664][ T5864] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 134.270236][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 134.276723][ T5864] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 134.285916][ T5864] usb 2-1: config 0 has no interface number 0 [ 134.292173][ T5864] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.303204][ T5864] usb 2-1: config 0 interface 85 has no altsetting 0 [ 134.312149][ T5864] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 134.321882][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.329938][ T5864] usb 2-1: Product: syz [ 134.334193][ T5864] usb 2-1: Manufacturer: syz [ 134.338811][ T5864] usb 2-1: SerialNumber: syz [ 134.345326][ T5864] usb 2-1: config 0 descriptor?? [ 134.390352][ T44] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 134.420467][ T6767] netlink: 'syz.4.224': attribute type 1 has an invalid length. [ 134.540230][ T44] usb 3-1: device descriptor read/64, error -71 [ 134.670252][ T5949] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 134.757885][ T5864] appletouch 2-1:0.85: Geyser mode initialized. [ 134.766345][ T5864] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input15 [ 134.780206][ T44] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 134.822400][ T5949] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.836137][ T5949] usb 5-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 134.848360][ T5949] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.858498][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.874401][ T5949] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.882535][ T5949] usb 5-1: invalid MIDI out EP 0 [ 134.919942][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.927136][ T5949] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 134.940271][ T44] usb 3-1: device descriptor read/64, error -71 [ 134.951321][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 134.966426][ T5864] usb 2-1: USB disconnect, device number 11 [ 134.987722][ T5864] appletouch 2-1:0.85: input: appletouch disconnected [ 135.070841][ T44] usb usb3-port1: attempt power cycle [ 135.089355][ T24] usb 5-1: USB disconnect, device number 16 [ 135.120311][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 135.126876][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.138272][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.148507][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.155961][ T9] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 135.165469][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.174831][ T9] usb 4-1: config 0 descriptor?? [ 135.420292][ T44] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 135.441198][ T44] usb 3-1: device descriptor read/8, error -71 [ 135.588785][ T9] hid (null): invalid report_size 26978 [ 135.603741][ T9] cougar 0003:060B:500A.0004: usage count exceeds max: fixing up report descriptor [ 135.630914][ T9] cougar 0003:060B:500A.0004: unexpected long global item [ 135.733163][ T9] cougar 0003:060B:500A.0004: parse failed [ 135.737227][ T44] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 135.742742][ T9] cougar 0003:060B:500A.0004: probe with driver cougar failed with error -22 [ 135.802241][ T44] usb 3-1: device descriptor read/8, error -71 [ 135.844209][ T9] usb 4-1: USB disconnect, device number 13 [ 135.927901][ T44] usb usb3-port1: unable to enumerate USB device [ 136.341742][ T6787] Invalid logical block size (7) [ 136.956843][ T6795] netlink: 'syz.4.230': attribute type 1 has an invalid length. [ 137.009357][ T6795] bond3: entered promiscuous mode [ 137.015028][ T6795] bond3: entered allmulticast mode [ 137.021773][ T6795] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.155408][ T6793] netlink: 52 bytes leftover after parsing attributes in process `syz.3.231'. [ 137.164512][ T6793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.231'. [ 137.173461][ T6793] netlink: 52 bytes leftover after parsing attributes in process `syz.3.231'. [ 137.204213][ T6795] bridge1: entered promiscuous mode [ 137.209599][ T6795] bridge1: entered allmulticast mode [ 137.264469][ T6795] bond3: (slave bridge1): Enslaving as a backup interface with an up link [ 137.420292][ T3478] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 137.860587][ T3572] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 138.532100][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 138.564978][ T6819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.010845][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 139.096320][ T6823] FAULT_INJECTION: forcing a failure. [ 139.096320][ T6823] name failslab, interval 1, probability 0, space 0, times 0 [ 139.120503][ T6823] CPU: 0 UID: 0 PID: 6823 Comm: syz.2.237 Not tainted syzkaller #0 PREEMPT(full) [ 139.120533][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.120546][ T6823] Call Trace: [ 139.120554][ T6823] [ 139.120562][ T6823] dump_stack_lvl+0x189/0x250 [ 139.120593][ T6823] ? __pfx____ratelimit+0x10/0x10 [ 139.120622][ T6823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.120646][ T6823] ? __pfx__printk+0x10/0x10 [ 139.120681][ T6823] should_fail_ex+0x414/0x560 [ 139.120710][ T6823] should_failslab+0xa8/0x100 [ 139.120742][ T6823] kmem_cache_alloc_noprof+0x73/0x3c0 [ 139.120770][ T6823] ? skb_clone+0x212/0x3a0 [ 139.120795][ T6823] skb_clone+0x212/0x3a0 [ 139.120819][ T6823] __netlink_deliver_tap+0x404/0x850 [ 139.120856][ T6823] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.120887][ T6823] netlink_deliver_tap+0x19c/0x1b0 [ 139.120917][ T6823] netlink_unicast+0x7fa/0x9e0 [ 139.120949][ T6823] ? __pfx_netlink_unicast+0x10/0x10 [ 139.120976][ T6823] ? netlink_sendmsg+0x642/0xb30 [ 139.121006][ T6823] ? skb_put+0x11b/0x210 [ 139.121026][ T6823] netlink_sendmsg+0x805/0xb30 [ 139.121062][ T6823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.121094][ T6823] ? aa_sock_msg_perm+0xf1/0x1d0 [ 139.121114][ T6823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.121137][ T6823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.121168][ T6823] __sock_sendmsg+0x219/0x270 [ 139.121195][ T6823] ____sys_sendmsg+0x505/0x830 [ 139.121219][ T6823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.121245][ T6823] ? import_iovec+0x74/0xa0 [ 139.121270][ T6823] ___sys_sendmsg+0x21f/0x2a0 [ 139.121291][ T6823] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.121330][ T6823] ? __fget_files+0x2a/0x420 [ 139.121369][ T6823] ? __fget_files+0x3a0/0x420 [ 139.121405][ T6823] __x64_sys_sendmsg+0x19b/0x260 [ 139.121427][ T6823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.121454][ T6823] ? __pfx_ksys_write+0x10/0x10 [ 139.121480][ T6823] ? rcu_is_watching+0x15/0xb0 [ 139.121503][ T6823] ? rcu_is_watching+0x15/0xb0 [ 139.121524][ T6823] do_syscall_64+0xfa/0x3b0 [ 139.121555][ T6823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.121576][ T6823] ? clear_bhb_loop+0x60/0xb0 [ 139.121599][ T6823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.121620][ T6823] RIP: 0033:0x7faf83f8ebe9 [ 139.121638][ T6823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.121655][ T6823] RSP: 002b:00007faf821f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.121678][ T6823] RAX: ffffffffffffffda RBX: 00007faf841b5fa0 RCX: 00007faf83f8ebe9 [ 139.121693][ T6823] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 139.121706][ T6823] RBP: 00007faf821f6090 R08: 0000000000000000 R09: 0000000000000000 [ 139.121720][ T6823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.121732][ T6823] R13: 00007faf841b6038 R14: 00007faf841b5fa0 R15: 00007faf842dfa28 [ 139.121755][ T6823] [ 139.440539][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 139.448585][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 139.459548][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 139.473711][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 139.483658][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.493389][ T9] usb 4-1: Product: syz [ 139.497560][ T9] usb 4-1: Manufacturer: syz [ 139.502676][ T9] usb 4-1: SerialNumber: syz [ 139.509393][ T9] usb 4-1: config 0 descriptor?? [ 139.595309][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 139.827943][ T6834] fuse: Unknown parameter '0xffffffffffffffff' [ 140.377362][ T6840] VFS: Mount too revealing [ 140.521071][ T6842] Invalid logical block size (7) [ 140.614269][ T6840] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.620721][ T6840] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.631065][ T6840] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.692396][ T6840] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.720965][ T58] usb 4-1: Failed to submit usb control message: -110 [ 140.743148][ T58] usb 4-1: unable to send the bmi data to the device: -110 [ 140.757707][ T6840] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 140.761281][ T58] usb 4-1: unable to get target info from device [ 140.795975][ T58] usb 4-1: could not get target info (-110) [ 140.808527][ T58] usb 4-1: could not probe fw (-110) [ 141.350431][ T5864] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 141.460442][ T5949] usb 4-1: USB disconnect, device number 14 [ 141.598109][ T5864] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 141.713416][ T6863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.245'. [ 141.770346][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.801212][ T5864] usb 1-1: config 0 descriptor?? [ 141.830830][ T5864] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 141.839943][ T5864] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 142.701638][ T5874] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.714269][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'. [ 142.720286][ T5874] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.730265][ T5860] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.760346][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.827554][ T6874] VFS: Mount too revealing [ 142.840581][ T5860] Bluetooth: hci4: command 0x0405 tx timeout [ 142.978368][ T6874] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.001483][ T6874] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.043359][ T6874] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.106308][ T6874] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.132479][ T6879] program syz.1.250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.134954][ T6874] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 143.206696][ T6880] netlink: 52 bytes leftover after parsing attributes in process `syz.4.246'. [ 143.217091][ T6880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.246'. [ 143.226382][ T6880] netlink: 52 bytes leftover after parsing attributes in process `syz.4.246'. [ 143.270853][ T6884] ptrace attach of "./syz-executor exec"[5881] was attempted by ""[6884] [ 143.520274][ T5864] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 143.650356][ T44] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 143.682332][ T5864] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.692261][ T5864] usb 2-1: not running at top speed; connect to a high speed hub [ 143.703588][ T5864] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 143.711800][ T5864] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 143.721468][ T5864] usb 2-1: config 17 has no interface number 0 [ 143.727682][ T5864] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 143.738639][ T5864] usb 2-1: config 17 interface 8 has no altsetting 0 [ 143.747390][ T5864] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 143.756601][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.764797][ T5864] usb 2-1: Product: syz [ 143.769000][ T5864] usb 2-1: Manufacturer: syz [ 143.778499][ T5864] usb 2-1: SerialNumber: syz [ 143.800360][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 143.814099][ T5949] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 143.814414][ T44] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 143.827990][ T9] usb 1-1: USB disconnect, device number 10 [ 143.845888][ T44] usb 5-1: config 0 has no interface number 0 [ 143.870584][ T44] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.883148][ T44] usb 5-1: config 0 interface 85 has no altsetting 0 [ 143.892111][ T44] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 143.905526][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.913768][ T44] usb 5-1: Product: syz [ 143.918162][ T44] usb 5-1: Manufacturer: syz [ 143.925124][ T44] usb 5-1: SerialNumber: syz [ 143.932437][ T44] usb 5-1: config 0 descriptor?? [ 143.982561][ T5949] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 143.993648][ T5949] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 144.003442][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.003453][ T5949] usb 3-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.044590][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.060755][ T6897] ptrace attach of "./syz-executor exec"[5881] was attempted by ""[6897] [ 144.072715][ T5949] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.074235][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.095640][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.102166][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.143777][ T6899] syz.0.255 (6899): drop_caches: 2 [ 144.149157][ T5949] usb 3-1: Product: syz [ 144.156126][ T5949] usb 3-1: Manufacturer: syz [ 144.156902][ T6899] syz.0.255 (6899): drop_caches: 2 [ 144.166891][ T5949] usb 3-1: SerialNumber: syz [ 144.177410][ T5949] cdc_ncm 3-1:3.0: invalid descriptor buffer length [ 144.184935][ T5949] cdc_ncm 3-1:3.0: CDC Union missing and no IAD found [ 144.194089][ T5949] cdc_ncm 3-1:3.0: bind() failure [ 144.226652][ T5864] usb 2-1: selecting invalid altsetting 0 [ 144.270028][ T5864] usb 2-1: 8:6 : no UAC_FORMAT_TYPE desc [ 144.306800][ T5864] usb 2-1: selecting invalid altsetting 0 [ 144.329801][ T5864] usb 2-1: USB disconnect, device number 12 [ 144.356544][ T44] appletouch 5-1:0.85: Geyser mode initialized. [ 144.364699][ T44] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input16 [ 144.377462][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.471861][ T5949] usb 3-1: USB disconnect, device number 19 [ 144.564366][ T44] usb 5-1: USB disconnect, device number 18 [ 144.585449][ T44] appletouch 5-1:0.85: input: appletouch disconnected [ 144.680301][ T5864] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 144.845005][ T5864] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 144.863639][ T5864] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.897651][ T5864] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 144.908927][ T5864] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.924194][ T5864] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 144.935233][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 144.943412][ T5864] usb 2-1: Product: syz [ 144.947702][ T5864] usb 2-1: Manufacturer: syz [ 144.957237][ T5864] cdc_wdm 2-1:1.0: skipping garbage [ 144.964796][ T5864] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 145.000547][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.080505][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.086651][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.216217][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 145.216244][ T5860] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.259459][ T5949] usb 2-1: USB disconnect, device number 13 [ 145.432417][ T6915] FAULT_INJECTION: forcing a failure. [ 145.432417][ T6915] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 145.462487][ T6915] CPU: 0 UID: 0 PID: 6915 Comm: syz.4.260 Not tainted syzkaller #0 PREEMPT(full) [ 145.462516][ T6915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.462529][ T6915] Call Trace: [ 145.462538][ T6915] [ 145.462546][ T6915] dump_stack_lvl+0x189/0x250 [ 145.462576][ T6915] ? __pfx____ratelimit+0x10/0x10 [ 145.462605][ T6915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.462630][ T6915] ? __pfx__printk+0x10/0x10 [ 145.462660][ T6915] ? lock_acquire+0x5f/0x360 [ 145.462693][ T6915] should_fail_ex+0x414/0x560 [ 145.462723][ T6915] prepare_alloc_pages+0x213/0x610 [ 145.462750][ T6915] __alloc_frozen_pages_noprof+0x123/0x370 [ 145.462773][ T6915] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 145.462802][ T6915] alloc_pages_mpol+0x232/0x4a0 [ 145.462842][ T6915] alloc_pages_noprof+0xa9/0x190 [ 145.462871][ T6915] pte_alloc_one+0x21/0x170 [ 145.462894][ T6915] __pte_alloc+0x25/0x1a0 [ 145.462915][ T6915] __handle_mm_fault+0x49b3/0x5440 [ 145.462950][ T6915] ? __pfx___handle_mm_fault+0x10/0x10 [ 145.462976][ T6915] ? rcu_is_watching+0x15/0xb0 [ 145.463006][ T6915] ? find_vma+0xe7/0x160 [ 145.463032][ T6915] ? __pfx_find_vma+0x10/0x10 [ 145.463060][ T6915] handle_mm_fault+0x40a/0x8e0 [ 145.463092][ T6915] do_user_addr_fault+0x764/0x1390 [ 145.463133][ T6915] exc_page_fault+0x76/0xf0 [ 145.463162][ T6915] asm_exc_page_fault+0x26/0x30 [ 145.463183][ T6915] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 145.463207][ T6915] Code: 09 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 145.463226][ T6915] RSP: 0018:ffffc9001cbffc98 EFLAGS: 00050202 [ 145.463246][ T6915] RAX: 00007ffffffff001 RBX: 0000000000000080 RCX: 0000000000000080 [ 145.463261][ T6915] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc9001cbffd00 [ 145.463275][ T6915] RBP: ffffc9001cbffea0 R08: ffffc9001cbffd7f R09: 1ffff9200397ffaf [ 145.463291][ T6915] R10: dffffc0000000000 R11: fffff5200397ffb0 R12: 0000000000000080 [ 145.463305][ T6915] R13: 1ffff9200397ff9c R14: ffffc9001cbffd00 R15: 0000200000000040 [ 145.463330][ T6915] _copy_from_user+0x7a/0xb0 [ 145.463355][ T6915] __sys_sendto+0x25c/0x520 [ 145.463388][ T6915] ? __pfx___sys_sendto+0x10/0x10 [ 145.463418][ T6915] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 145.463455][ T6915] ? __fget_files+0x3a0/0x420 [ 145.463492][ T6915] ? ksys_write+0x22a/0x250 [ 145.463520][ T6915] ? __pfx_ksys_write+0x10/0x10 [ 145.463545][ T6915] ? rcu_is_watching+0x15/0xb0 [ 145.463568][ T6915] __x64_sys_sendto+0xde/0x100 [ 145.463601][ T6915] do_syscall_64+0xfa/0x3b0 [ 145.463631][ T6915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.463651][ T6915] ? clear_bhb_loop+0x60/0xb0 [ 145.463673][ T6915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.463693][ T6915] RIP: 0033:0x7f4d6b38ebe9 [ 145.463710][ T6915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.463728][ T6915] RSP: 002b:00007f4d6c249038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 145.463748][ T6915] RAX: ffffffffffffffda RBX: 00007f4d6b5b5fa0 RCX: 00007f4d6b38ebe9 [ 145.463763][ T6915] RDX: 0000000000000028 RSI: 00002000000016c0 RDI: 0000000000000004 [ 145.463776][ T6915] RBP: 00007f4d6c249090 R08: 0000200000000040 R09: 0000000000000080 [ 145.463789][ T6915] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000001 [ 145.463803][ T6915] R13: 00007f4d6b5b6038 R14: 00007f4d6b5b5fa0 R15: 00007f4d6b6dfa28 [ 145.463831][ T6915] [ 146.354018][ T6921] pim6reg: entered allmulticast mode [ 146.670455][ T5864] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 146.720234][ T44] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 146.901579][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 146.937431][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.948564][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.981687][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.116616][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 147.127797][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0 [ 147.134634][ T5864] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 147.148860][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 147.194927][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.206206][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 147.245839][ T5864] usb 1-1: config 0 descriptor?? [ 147.262675][ T6944] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 147.288043][ T6944] team0: Port device batadv1 added [ 147.305648][ T44] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 147.320645][ T44] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 147.343662][ T44] usb 4-1: Manufacturer: syz [ 147.372631][ T44] usb 4-1: config 0 descriptor?? [ 147.660394][ T44] rc_core: IR keymap rc-hauppauge not found [ 147.688331][ T44] Registered IR keymap rc-empty [ 147.700693][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 147.710290][ T5949] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 147.723991][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 147.754663][ T5864] cougar 0003:060B:500A.0005: usage count exceeds max: fixing up report descriptor [ 147.780454][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 147.796989][ T5864] cougar 0003:060B:500A.0005: unexpected long global item [ 147.807138][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 147.829972][ T5864] cougar 0003:060B:500A.0005: parse failed [ 147.840541][ T5864] cougar 0003:060B:500A.0005: probe with driver cougar failed with error -22 [ 147.852377][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 147.890379][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 147.902212][ T5949] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 147.920303][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 147.930130][ T5949] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 147.936755][ T5864] usb 1-1: USB disconnect, device number 11 [ 147.941711][ T5949] usb 2-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.975328][ T5949] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.986594][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.000706][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.045829][ T5949] usb 2-1: Product: syz [ 148.046102][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.050051][ T5949] usb 2-1: Manufacturer: syz [ 148.050070][ T5949] usb 2-1: SerialNumber: syz [ 148.062932][ T5949] cdc_ncm 2-1:3.0: invalid descriptor buffer length [ 148.095607][ T5949] cdc_ncm 2-1:3.0: CDC Union missing and no IAD found [ 148.128631][ T5949] cdc_ncm 2-1:3.0: bind() failure [ 148.190959][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.210430][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.230265][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.250289][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.270272][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.274842][ T5949] usb 2-1: USB disconnect, device number 14 [ 148.324581][ T44] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 148.337143][ T6954] ======================================================= [ 148.337143][ T6954] WARNING: The mand mount option has been deprecated and [ 148.337143][ T6954] and is ignored by this kernel. Remove the mand [ 148.337143][ T6954] option from the mount to silence this warning. [ 148.337143][ T6954] ======================================================= [ 148.372577][ T44] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 148.386103][ T6954] fuse: Unknown parameter 'group' [ 148.504398][ T6959] ptrace attach of "./syz-executor exec"[5875] was attempted by "./syz-executor exec"[6959] [ 149.246372][ T6970] syz.1.273: attempt to access beyond end of device [ 149.246372][ T6970] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 149.591397][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 149.650836][ T6978] @: renamed from syz_tun (while UP) [ 151.133695][ T9] usb 4-1: USB disconnect, device number 15 [ 151.319442][ T6990] netlink: 80 bytes leftover after parsing attributes in process `syz.2.278'. [ 151.500444][ T44] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 152.173493][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.311175][ T44] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 152.363579][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.390038][ T44] usb 2-1: config 0 descriptor?? [ 152.453914][ T7004] netlink: 'syz.2.283': attribute type 2 has an invalid length. [ 152.723874][ T7006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.284'. [ 152.796252][ T7009] netlink: 56 bytes leftover after parsing attributes in process `syz.3.285'. [ 153.440302][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 153.518398][ T7012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.531028][ T7012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.546002][ T44] lg-g15 0003:046D:C222.0006: unbalanced delimiter at end of report description [ 153.573004][ T44] lg-g15 0003:046D:C222.0006: probe with driver lg-g15 failed with error -22 [ 153.655324][ T7022] loop6: detected capacity change from 0 to 7 [ 153.665212][ T5877] Dev loop6: unable to read RDB block 7 [ 153.675543][ T5877] loop6: unable to read partition table [ 153.682430][ T5877] loop6: partition table beyond EOD, truncated [ 153.700265][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 153.711891][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 153.730540][ T9] usb 4-1: config 0 has no interface number 0 [ 153.737588][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.756984][ T7022] Dev loop6: unable to read RDB block 7 [ 153.788795][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 153.799611][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.810916][ T7022] loop6: unable to read partition table [ 153.817893][ T7022] loop6: partition table beyond EOD, truncated [ 153.827622][ T7022] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 153.883192][ T9] usb 4-1: Product: syz [ 153.901723][ T9] usb 4-1: Manufacturer: syz [ 153.912647][ T9] usb 4-1: SerialNumber: syz [ 153.919466][ T7025] PKCS8: Unsupported PKCS#8 version [ 153.929087][ T9] usb 4-1: config 0 descriptor?? [ 153.943951][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 153.963799][ T9] em28xx 4-1:0.132: Video interface 132 found: [ 154.089554][ T7020] netlink: 44 bytes leftover after parsing attributes in process `syz.0.288'. [ 154.125895][ T7020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.288'. [ 154.198511][ T7020] netlink: 44 bytes leftover after parsing attributes in process `syz.0.288'. [ 154.340823][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 154.756777][ T9] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 154.776579][ T9] em28xx 4-1:0.132: board has no eeprom [ 154.870291][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 154.885146][ T9] em28xx 4-1:0.132: analog set to bulk mode. [ 154.894628][ T5946] em28xx 4-1:0.132: Registering V4L2 extension [ 155.186365][ T7044] netlink: 56 bytes leftover after parsing attributes in process `syz.2.296'. [ 155.210227][ T44] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 155.262308][ T5946] em28xx 4-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 155.284566][ T5864] usb 4-1: USB disconnect, device number 16 [ 155.292381][ T5864] em28xx 4-1:0.132: Disconnecting em28xx [ 155.346855][ T7042] syzkaller0: entered promiscuous mode [ 155.381319][ T7042] syzkaller0: entered allmulticast mode [ 155.452357][ T44] usb 1-1: config 0 has no interfaces? [ 155.461807][ T44] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 155.471972][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.485033][ T44] usb 1-1: Product: syz [ 155.489346][ T44] usb 1-1: Manufacturer: syz [ 155.503915][ T44] usb 1-1: SerialNumber: syz [ 155.522096][ T44] usb 1-1: config 0 descriptor?? [ 155.528614][ T5946] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 155.544067][ T5946] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 155.577271][ T5946] em28xx 4-1:0.132: No AC97 audio processor [ 155.607753][ T5946] usb 4-1: Decoder not found [ 155.614836][ T5946] em28xx 4-1:0.132: failed to create media graph [ 155.658367][ T5946] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 155.830405][ T24] usb 2-1: USB disconnect, device number 15 [ 155.842455][ T5946] em28xx 4-1:0.132: Remote control support is not available for this card. [ 155.853516][ T7053] ================================================================== [ 155.863032][ T7053] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 155.871232][ T7053] Read of size 8 at addr ffff888027f38740 by task v4l_id/7053 [ 155.881936][ T7053] [ 155.884552][ T7053] CPU: 1 UID: 0 PID: 7053 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 155.884577][ T7053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.884591][ T7053] Call Trace: [ 155.884600][ T7053] [ 155.884608][ T7053] dump_stack_lvl+0x189/0x250 [ 155.884636][ T7053] ? rcu_is_watching+0x15/0xb0 [ 155.884659][ T7053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.884681][ T7053] ? rcu_is_watching+0x15/0xb0 [ 155.884701][ T7053] ? lock_release+0x4b/0x3e0 [ 155.884734][ T7053] ? __virt_addr_valid+0x1c8/0x5c0 [ 155.884762][ T7053] ? __virt_addr_valid+0x4a5/0x5c0 [ 155.884789][ T7053] print_report+0xca/0x240 [ 155.884810][ T7053] ? v4l2_fh_open+0xc7/0x430 [ 155.884846][ T7053] kasan_report+0x118/0x150 [ 155.884878][ T7053] ? v4l2_fh_open+0xc7/0x430 [ 155.884911][ T7053] v4l2_fh_open+0xc7/0x430 [ 155.884945][ T7053] em28xx_v4l2_open+0x157/0x9a0 [ 155.884978][ T7053] v4l2_open+0x20c/0x360 [ 155.885013][ T7053] chrdev_open+0x4c9/0x5e0 [ 155.885046][ T7053] ? __pfx_chrdev_open+0x10/0x10 [ 155.885077][ T7053] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 155.885113][ T7053] ? __pfx_chrdev_open+0x10/0x10 [ 155.885142][ T7053] do_dentry_open+0x950/0x13f0 [ 155.885169][ T7053] vfs_open+0x3b/0x340 [ 155.885187][ T7053] ? path_openat+0x2ecd/0x3830 [ 155.885213][ T7053] path_openat+0x2ee5/0x3830 [ 155.885237][ T7053] ? arch_stack_walk+0xfc/0x150 [ 155.885271][ T7053] ? stack_depot_save_flags+0x40/0x860 [ 155.885307][ T7053] ? __pfx_path_openat+0x10/0x10 [ 155.885331][ T7053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.885362][ T7053] do_filp_open+0x1fa/0x410 [ 155.885388][ T7053] ? __pfx_do_filp_open+0x10/0x10 [ 155.885424][ T7053] ? _raw_spin_unlock+0x28/0x50 [ 155.885467][ T7053] ? alloc_fd+0x64c/0x6c0 [ 155.885501][ T7053] do_sys_openat2+0x121/0x1c0 [ 155.885524][ T7053] ? __pfx_do_sys_openat2+0x10/0x10 [ 155.885546][ T7053] ? lock_release+0x4b/0x3e0 [ 155.885580][ T7053] ? do_user_addr_fault+0xc8a/0x1390 [ 155.885615][ T7053] __x64_sys_openat+0x138/0x170 [ 155.885640][ T7053] do_syscall_64+0xfa/0x3b0 [ 155.885671][ T7053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.885691][ T7053] ? clear_bhb_loop+0x60/0xb0 [ 155.885714][ T7053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.885736][ T7053] RIP: 0033:0x7f18e70a7407 [ 155.885755][ T7053] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 155.885775][ T7053] RSP: 002b:00007fffc4e4bf80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 155.885798][ T7053] RAX: ffffffffffffffda RBX: 00007f18e7798880 RCX: 00007f18e70a7407 [ 155.885822][ T7053] RDX: 0000000000000000 RSI: 00007fffc4e4df1b RDI: ffffffffffffff9c [ 155.885837][ T7053] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 155.885849][ T7053] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 155.885862][ T7053] R13: 00007fffc4e4c1d0 R14: 00007f18e78ff000 R15: 000055de4608e4d8 [ 155.885887][ T7053] [ 155.885894][ T7053] [ 156.233275][ T7053] Allocated by task 5946: [ 156.237711][ T7053] kasan_save_track+0x3e/0x80 [ 156.244136][ T7053] __kasan_kmalloc+0x93/0xb0 [ 156.249097][ T7053] __kmalloc_cache_noprof+0x230/0x3d0 [ 156.255017][ T7053] em28xx_v4l2_init+0x10b/0x2e70 [ 156.260505][ T7053] em28xx_init_extension+0x11d/0x1c0 [ 156.266247][ T7053] process_scheduled_works+0xae1/0x17b0 [ 156.272619][ T7053] worker_thread+0x8a0/0xda0 [ 156.277847][ T7053] kthread+0x70e/0x8a0 [ 156.282930][ T7053] ret_from_fork+0x3f9/0x770 [ 156.289885][ T7053] ret_from_fork_asm+0x1a/0x30 [ 156.294673][ T7053] [ 156.297187][ T7053] Freed by task 5946: [ 156.301889][ T7053] kasan_save_track+0x3e/0x80 [ 156.308089][ T7053] kasan_save_free_info+0x46/0x50 [ 156.313221][ T7053] __kasan_slab_free+0x5b/0x80 [ 156.318079][ T7053] kfree+0x18e/0x440 [ 156.321994][ T7053] em28xx_v4l2_init+0x1683/0x2e70 [ 156.329749][ T7053] em28xx_init_extension+0x11d/0x1c0 [ 156.336216][ T7053] process_scheduled_works+0xae1/0x17b0 [ 156.342033][ T7053] worker_thread+0x8a0/0xda0 [ 156.348459][ T7053] kthread+0x70e/0x8a0 [ 156.354019][ T7053] ret_from_fork+0x3f9/0x770 [ 156.359931][ T7053] ret_from_fork_asm+0x1a/0x30 [ 156.365507][ T7053] [ 156.367849][ T7053] The buggy address belongs to the object at ffff888027f38000 [ 156.367849][ T7053] which belongs to the cache kmalloc-8k of size 8192 [ 156.385997][ T7053] The buggy address is located 1856 bytes inside of [ 156.385997][ T7053] freed 8192-byte region [ffff888027f38000, ffff888027f3a000) [ 156.402881][ T7053] [ 156.405927][ T7053] The buggy address belongs to the physical page: [ 156.413415][ T7053] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27f38 [ 156.423784][ T7053] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 156.432833][ T7053] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 156.441272][ T7053] page_type: f5(slab) [ 156.446411][ T7053] raw: 00fff00000000040 ffff88801a442280 ffffea000085da00 dead000000000002 [ 156.455722][ T7053] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 156.466170][ T7053] head: 00fff00000000040 ffff88801a442280 ffffea000085da00 dead000000000002 [ 156.476556][ T7053] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 156.485946][ T7053] head: 00fff00000000003 ffffea00009fce01 00000000ffffffff 00000000ffffffff [ 156.497419][ T7053] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 156.507754][ T7053] page dumped because: kasan: bad access detected [ 156.514288][ T7053] page_owner tracks the page as allocated [ 156.520251][ T7053] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6434, tgid 6434 (udevd), ts 111458986027, free_ts 107365564851 [ 156.545460][ T7053] post_alloc_hook+0x240/0x2a0 [ 156.551214][ T7053] get_page_from_freelist+0x21e4/0x22c0 [ 156.556950][ T7053] __alloc_frozen_pages_noprof+0x181/0x370 [ 156.562965][ T7053] alloc_pages_mpol+0x232/0x4a0 [ 156.568107][ T7053] allocate_slab+0x8a/0x370 [ 156.573406][ T7053] ___slab_alloc+0xbeb/0x1410 [ 156.578281][ T7053] __kmalloc_cache_noprof+0x296/0x3d0 [ 156.584113][ T7053] tomoyo_init_log+0x111f/0x1f70 [ 156.589236][ T7053] tomoyo_supervisor+0x340/0x1480 [ 156.594622][ T7053] tomoyo_env_perm+0x149/0x1e0 [ 156.599494][ T7053] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 156.606361][ T7053] tomoyo_bprm_check_security+0x11c/0x180 [ 156.613928][ T7053] security_bprm_check+0x89/0x270 [ 156.620135][ T7053] bprm_execve+0x8ee/0x1450 [ 156.625112][ T7053] do_execveat_common+0x510/0x6a0 [ 156.630159][ T7053] __x64_sys_execve+0x94/0xb0 [ 156.635150][ T7053] page last free pid 6385 tgid 6384 stack trace: [ 156.642004][ T7053] __free_frozen_pages+0xbc4/0xd30 [ 156.647664][ T7053] __put_partials+0x156/0x1a0 [ 156.653664][ T7053] put_cpu_partial+0x17c/0x250 [ 156.658540][ T7053] __slab_free+0x2d5/0x3c0 [ 156.666132][ T7053] qlist_free_all+0x97/0x140 [ 156.678780][ T7053] kasan_quarantine_reduce+0x148/0x160 [ 156.684360][ T7053] __kasan_slab_alloc+0x22/0x80 [ 156.689599][ T7053] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 156.695548][ T7053] ptlock_alloc+0x20/0x70 [ 156.700128][ T7053] pte_alloc_one+0x7d/0x170 [ 156.708913][ T7053] __handle_mm_fault+0x2795/0x5440 [ 156.714162][ T7053] handle_mm_fault+0x40a/0x8e0 [ 156.721595][ T7053] __get_user_pages+0x1699/0x2ce0 [ 156.726991][ T7053] populate_vma_page_range+0x29f/0x3a0 [ 156.736785][ T7053] __mm_populate+0x24c/0x380 [ 156.744012][ T7053] vm_mmap_pgoff+0x387/0x4d0 [ 156.750536][ T7053] [ 156.753249][ T7053] Memory state around the buggy address: [ 156.759200][ T7053] ffff888027f38600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.767370][ T7053] ffff888027f38680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.776137][ T7053] >ffff888027f38700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.785099][ T7053] ^ [ 156.792043][ T7053] ffff888027f38780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.801356][ T7053] ffff888027f38800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.809715][ T7053] ================================================================== [ 156.830415][ T5864] em28xx 4-1:0.132: Closing input extension [ 157.230931][ T7053] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.241004][ T7053] CPU: 1 UID: 0 PID: 7053 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 157.251276][ T7053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.262173][ T7053] Call Trace: [ 157.265472][ T7053] [ 157.268539][ T7053] dump_stack_lvl+0x99/0x250 [ 157.274823][ T7053] ? __asan_memcpy+0x40/0x70 [ 157.279440][ T7053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.284657][ T7053] ? __pfx__printk+0x10/0x10 [ 157.289537][ T7053] vpanic+0x281/0x750 [ 157.294230][ T7053] ? preempt_schedule+0xae/0xc0 [ 157.299215][ T7053] ? __pfx_vpanic+0x10/0x10 [ 157.304840][ T7053] ? preempt_schedule_common+0x83/0xd0 [ 157.310943][ T7053] ? preempt_schedule+0xae/0xc0 [ 157.315908][ T7053] ? __pfx_preempt_schedule+0x10/0x10 [ 157.321927][ T7053] panic+0xb9/0xc0 [ 157.326159][ T7053] ? __pfx_panic+0x10/0x10 [ 157.333651][ T7053] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 157.340449][ T7053] ? v4l2_fh_open+0xc7/0x430 [ 157.346143][ T7053] check_panic_on_warn+0x89/0xb0 [ 157.351155][ T7053] ? v4l2_fh_open+0xc7/0x430 [ 157.356590][ T7053] end_report+0x78/0x160 [ 157.361749][ T7053] kasan_report+0x129/0x150 [ 157.367063][ T7053] ? v4l2_fh_open+0xc7/0x430 [ 157.372903][ T7053] v4l2_fh_open+0xc7/0x430 [ 157.377798][ T7053] em28xx_v4l2_open+0x157/0x9a0 [ 157.383630][ T7053] v4l2_open+0x20c/0x360 [ 157.389128][ T7053] chrdev_open+0x4c9/0x5e0 [ 157.394713][ T7053] ? __pfx_chrdev_open+0x10/0x10 [ 157.402262][ T7053] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 157.413979][ T7053] ? __pfx_chrdev_open+0x10/0x10 [ 157.419655][ T7053] do_dentry_open+0x950/0x13f0 [ 157.425501][ T7053] vfs_open+0x3b/0x340 [ 157.430110][ T7053] ? path_openat+0x2ecd/0x3830 [ 157.435695][ T7053] path_openat+0x2ee5/0x3830 [ 157.441358][ T7053] ? arch_stack_walk+0xfc/0x150 [ 157.446828][ T7053] ? stack_depot_save_flags+0x40/0x860 [ 157.452492][ T7053] ? __pfx_path_openat+0x10/0x10 [ 157.457999][ T7053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.465326][ T7053] do_filp_open+0x1fa/0x410 [ 157.469878][ T7053] ? __pfx_do_filp_open+0x10/0x10 [ 157.475816][ T7053] ? _raw_spin_unlock+0x28/0x50 [ 157.481394][ T7053] ? alloc_fd+0x64c/0x6c0 [ 157.486107][ T7053] do_sys_openat2+0x121/0x1c0 [ 157.491247][ T7053] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.496838][ T7053] ? lock_release+0x4b/0x3e0 [ 157.501921][ T7053] ? do_user_addr_fault+0xc8a/0x1390 [ 157.507760][ T7053] __x64_sys_openat+0x138/0x170 [ 157.514639][ T7053] do_syscall_64+0xfa/0x3b0 [ 157.519448][ T7053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.526076][ T7053] ? clear_bhb_loop+0x60/0xb0 [ 157.531388][ T7053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.538666][ T7053] RIP: 0033:0x7f18e70a7407 [ 157.543188][ T7053] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 157.566640][ T7053] RSP: 002b:00007fffc4e4bf80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 157.576208][ T7053] RAX: ffffffffffffffda RBX: 00007f18e7798880 RCX: 00007f18e70a7407 [ 157.586308][ T7053] RDX: 0000000000000000 RSI: 00007fffc4e4df1b RDI: ffffffffffffff9c [ 157.596473][ T7053] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 157.605428][ T7053] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 157.615746][ T7053] R13: 00007fffc4e4c1d0 R14: 00007f18e78ff000 R15: 000055de4608e4d8 [ 157.626541][ T7053] [ 157.629940][ T7053] Kernel Offset: disabled [ 157.635562][ T7053] Rebooting in 86400 seconds..