last executing test programs: 4m53.02809011s ago: executing program 0 (id=1678): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x80) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x4e24, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, {0xcb29, 0x1000000000, 0x53e5, 0xc9d7}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in=@local, 0x0, 0x6c}, 0x2, @in=@broadcast, 0x1502, 0x4, 0x2, 0x0, 0x0, 0xfffffffd}}, 0xe8) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r2, &(0x7f0000000700)=""/115, 0x73, 0x5) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@multiplanar_fd={0x8, 0xb, 0x4, 0x1000, 0xffffffff, {0x0, 0x2710}, {0x3, 0x1, 0x4, 0x2, 0x4, 0x6, "09dcd1bd"}, 0xffff8000, 0x4, {0x0}, 0xd}) syz_usb_connect(0x0, 0x35, &(0x7f0000000100)=ANY=[@ANYBLOB="120100036aa61d10f00a617061060102030109022300011b0e20050904bbfa01ff0403060905ccd9dc178d6a02000004090700080be2ddca5ae06874bc2184b801d87cc6062c755301619d0510a5f52ed978ceae13647e47f0f62e3881c43334374b4f92999a51f58d81f7a06ab5f1dd5eb5962452587ae65dccf8acf3be2567be88f472fd0637453e091a64db8c98ac01a0bcee8a46"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 4m51.562611123s ago: executing program 0 (id=1682): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffff8]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10001, 0x7, 0x7fff, 0xf833, 0x7, 0xfffffffc, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x0, 0x0, [0x6, 0x6, 0x10000, 0x3, 0x9a, 0x6, 0x681, 0x0, 0x49, 0x6, 0x9, 0xa, 0x4, 0x4, 0x27, 0x6]}, {0x2, 0x0, [0x3, 0x4a8d2598, 0x9, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x6, 0x2393, 0x2, 0xd8, 0x101]}, {0x25, 0x0, [0x5458, 0x5, 0x80000000, 0x10001, 0x1000, 0x4, 0x1, 0x44, 0x800, 0xb467, 0x10000, 0xe4, 0x80000000, 0xfffffffa, 0x1, 0xffffff00]}, {0x1a, 0x0, [0x2, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x9, 0x7, 0x0, 0x2, 0xe7ca, 0x8, 0xfffffffa, 0x3, 0x3, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x1b0}}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd78492480", @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m51.270186255s ago: executing program 0 (id=1687): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffff8]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10001, 0x7, 0x7fff, 0xf833, 0x7, 0xfffffffc, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x0, 0x0, [0x6, 0x6, 0x10000, 0x3, 0x9a, 0x6, 0x681, 0x0, 0x49, 0x6, 0x9, 0xa, 0x4, 0x4, 0x27, 0x6]}, {0x2, 0x0, [0x3, 0x4a8d2598, 0x9, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x6, 0x2393, 0x2, 0xd8, 0x101]}, {0x25, 0x0, [0x5458, 0x5, 0x80000000, 0x10001, 0x1000, 0x4, 0x1, 0x44, 0x800, 0xb467, 0x10000, 0xe4, 0x80000000, 0xfffffffa, 0x1, 0xffffff00]}, {0x1a, 0x0, [0x2, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x9, 0x7, 0x0, 0x2, 0xe7ca, 0x8, 0xfffffffa, 0x3, 0x3, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x1b0}}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd78492480", @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d", 0x7) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m51.0667881s ago: executing program 0 (id=1689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m50.983389855s ago: executing program 0 (id=1691): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000030000000000000001701000002000000eb7c"], 0x340, 0x80}], 0x1, 0x4000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000340)={0x0, 0x0, @pic={0x7, 0x10, 0x8, 0x10, 0x2, 0x7, 0x8, 0x80, 0x8, 0x80, 0x60, 0x9, 0x0, 0x2, 0x8, 0x3}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f0000000040)=0x3, 0x4) ioctl$int_out(r4, 0x5460, &(0x7f0000000100)) finit_module(r4, 0x0, 0x5) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x7}, 0x8) 4m50.623658034s ago: executing program 0 (id=1694): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="3a9493912331126757e27b547b8c2d39198162e17d2020710ffc251899aba7e55e52048a73294a1832bad09921ad1e8641a43c5e1bf3176493ae82ab44b8d0773e64aa50c36fd8c59b1160141e35abfbbe6be277a983d4bdf6cd7ed120968d98afdddcc34ec386431aaded9df2ef6ba4c818237e2c7a10436d0d3750953e09ff4281d83dfd1850befe6bfb65e3c9fad89f1d8b7da6e79b1aa47db8b01f4311933d14b335b3e3513820a86b10534dc3f4f8ad526141d8dd95df56d8b5c29dd6c355a78d59ce0de807deadc3834c470d8b84b34e42d1e1bcdc6a68d1b09dd40e70de87c53628584ea69d9aeb05ad924ee7aaf9e943c23405f30baae2e92cf2d2b86868c984459e13bc6a0cf3ff59b2f0551f2474196094cbb57aaccaa5709b8fd917bddc68ef302a3215cda1f3cc8ee717606dcb94a3a38e700abe8ce33931f0229e605472d16b6ed0a6c9a7ace805201a93248d87db706875f8fa200ae603a4d4261dcd528373bbaf4db0936701be0c90b57b519c98db07c34d8e6e4029ff5e1c0772df5b55162a1d8b6d0be3ab7353dcdde8df45e4f478728bb5b11a4abc88d706799085c5e236916b23b5cbcba4717fd00c94f5600cd2a499ce3bbf12c1a2986ad8ddf0319e34b4760767e8e45941e54eb96a8663386ff39693c05869a0dab1dec0f1dd86c013928d108604f0bb644dd38fd3593391dd6316b43c9e2b2e58cf28b802a6f81c59d8ea0574e0947ac95d56dd33a6176f28f7b9ce4f9b14b9be92586e0cf1ffa231e16cd51b3b5f59c22730f165df1c3923e02ee6f927038e14096e3c457f4a89c0aa5cfeac53491566411d2f3fe03cd0f3ee4917c9085d13955aaf27b5b0b8edd8c057744f9c97133dbe5588fe4a73a4e5caab73c92d12a8a46be3ba05c5c5e3f3397e1d2790ed48869fc043d1fa4e6d7abdcb0e184f9c7cea91418838a3b4bcb91383ebcad04ff5b74743e8f13a0999a02d5fe9f5d662583c215daccfe3b9e74fec51876c2dae7e656bb18e560a6a42e2a1c2ae57fd27ed59846626f6679fb4f76d5f91f9a422647979cf693d97c521dab80f46c1a647024ea26186c4863d85cafd0c82c48febef23517d7a1a447ed6b2392fc2ba377d6b3d1e05e43601b4007707a57d519be321454246a7b1ddd2bc7f9c493e86b80f6ec9a1aff6278e386bdfc07b1aeca7ba5275bf02577f08b3507ccb553fe7d8451ccdcfaae6b4857f508d5dfb3d1622ba4d69b57f2341164584a2526c221abf3826ec547b31f0ee7a9dd7fb974d6696bcfac005d8af4ea9695354fef70b0160c1de6a25ff14b6a366bd3d218673ba0154bc967eb6cf0f13141d31b10ea4f6b1d4f4c9dd64103b74aec448eeddf251f6956ee9f29cae4868bfc1ab9c7bc0c7962d0d9a6cde90e9ac20945f6e0ecd9203717aca366c466bdb5c1826822311ac4360aa3c7ff35fef037afcb345dcc5128c4ab9811faef67c25920f2963cc4741d7508d878e295a6a4be3b38b294097ab9f91be518cd76f6b993a23f30e9b65d6bb3cbdd323023785379de64e0dacd042767474bb9d30824f5b1f15cef675b7b817d612219e7805fe77240d2966d1c91f7c520e7a24acdd8dcbf5a848462b4bd92bdc79e0c1238c1540b877650f28875d7a19fb4d1d46e1110c289e7e06e191746a24d0032e411e2e993329feb0fca35e4b76271f87553ff5f3735aac8738507b1715ea1745a66b7fc701ecdd89265e418dc411b31f65635aae19938ff461a61f639e39d9cdada2740d4bb2fa29baa250b5deb4ac5bb0b08b381a9a522a7c271c2e7f5b0b0cbfa4e92098152ba96eeee1fc3918f27f68e59af89d1b29122fd19b74e587dadecb7eda360de2fc7bea3975f055b6f9391c8064d58dc5544dd79895d38dea43b7b3ced70a4d319152a0940af81fb537a38d40cf4b59789e5e536e778979c2171d24f4088de1ea13da783a47a306f9649f1992497d4ed74658298c019ce7902c7f09e2df42cb6cafedc37ce6bc4d22bb2669d46ae7fc3813af4dae406de8e39cfd146d6f4977085ef920cd392ebc9a900685c026e1eaaff553f0e47ca36744f6ca6e09c5754301b7a8c44f7235657e9f9669e782c54ba43f4aac401d79b4b1662e505652d54cf18e2641c83ddc5d5f3fb27cfb4bdd619fb0f234bb03129349d9ac706753f2f557bcd89d362871eb16dac1dbceb8fe3ec9c73a4e649fb6f102f65790a35948bde609060580c730e2cf7a778d14e799f7b87f773bb2cfa2fdf023d7ca062c8569ed33621a6a9c064d5821affe1eaa332274b4b5644cd76aa35c342b037d4349470dbe7a2366fac143fbe1c513a01a9b9d0b4edf22ba1197318e888dfa84de2c30d90087efd52b925b381d04ef747b1a66bf7a4b539a3722792146be5def0c08ce4a45bf7f8f25b4e2a381cd8064c98e5f46fed4b1d8e50f41de39090b84384bef1316c71d1060cfb2e268a3a8fcd5ba1e8b47e3f39d7a4fae4540c2237e273a3cb1b467d10aba377402cfac0f62637a73caf76fb8b53262ac618d80d1aa957e076050ad9692067a3ab2d12eec655ac74ca1def429184e3d5b025c802d5b95baea1b53ed988ff264c8a4225cbaea5173db4cda6aad25e4666abc9c27190222324cf1e1391a8c67ad56aa4bd387553e461fbb17b08937981c625964e054e73f42494e1e22a44649108395dc9d109d75e065701fed4bbfdae0491ddaad44edd7277d9986391997aa674d2ac8a50d5f596cf28426d81f84a8b87d9ff0d0d3c77fc94bf7121adf5d9257d7b1c4d4fe2c3a66806ca9982df7199e76f9c0a5c289f1ab797321770ef87bec09a57e529b55018622356c40531fac4860de627285883ea127ce790b5fd95ac7716a6ba9978d6624734f6001151178a31a11ffe31a7fabdb82d2c4173df1e4effd3d671340f78c7f2efdb4419113366ebe317d3f38b1db9dc8044aa3439c4eb3bbfb99c568af20e15f2966ff2eb609a6162ed373b20dc09d6469731b33eb0141c5a96f192265df84d2fce416f41e9efaf73056bb3adb48349edb94b4e6b2a883323c1b3faf0de57d0b10896c8743fc3b1379ec6c406ae533c66e77246d13f0bdafc39567c22b87cedffd11c2ebe83aa857700292ab3ae4c35925e74142bb8bf6109f4feeee7dfaa23d00ad7667b6c835b40cdcc751427681733ee6cdfe28b85c9958bfd446dc248eb6c75343312090ad7b913278d67982315f23bc5b167fb108817de351e600a2a560a119cca597fcd3e8b729c998a496346fb80fe0913bc55a469bde8047e30e0b2181a675f0220125ce3646739779437b9245c4d151f2e2e85027d4253c0d6cf92910e73d40beebfdf8fbbebc4490ea5d921391370ae9ed7ea8e6dae3d5158733685bd92bd1654daea3532940c4b7e4e7e423aa7aa9fb98d8adc85f422195a395d67cd0bdcd35ef04858fbd489b45c8d0995ffe21fc7aa8c4e035d5a75792ddc17fa1d9254a52795a7a4cebae69e45ed3c0c1362b4e52969052a3448ae8ea81047e70d57178dbd8ed4f7580a3d62ec043f05b2251bcb1c74bcb90aaed65c723dbf2922c328cd908027a730603c11d03a2283d006cdadc87ddd7433640d730e574b686fcdce0bf382fa8724db71965caee9d72bcf82a38efd485ad8b28f6d30a16a018513dd7aada3c540741a009398f877e42f8b56e6c0e0aca4c88e2c999ff66b1fe8617f0fd3b42c7b29959ad7bae93c8a31c47179a855d6864a5554aaab45dacf314a749828c088fa8c9f46281f00a052c73161db5554aeb0b676a38503712e498643c8de06956092a0797f4fd336c99201f14591ce8ab001f5525f8bc2627faff5f2cd70521bff2b3a987b41730422af2bd0c104b933f03e9660d13496831d0a4d82b49ec4d8dc0a95f7f65301e1fe01325bc23215e0a296bb52fb1bcabcc5479c8aa95b9ecdac4b7fdea574bfaea4a6ab79a457c96b8c60fdbc82f49ebe39f39ffeb541485df4edad5e27abbf33e9a9dc73f986bb549cff7613c34130807ee4ae924aff26da4e16274dd6a6d557d5587e54f669007739513db877d2dc7464ed1852ad5fe19899cfdc55f5b4bcb5e8a6e5a9c97a206bdc0aa04805a50200f35e16fc1df136e6e15912e3ef9e0de2415bcd4a6e20fddd2a46e2811d8708c128baca264381fda2480327efee37bccca58a86ab52e70c8b97ddd5043a461f75c7c805d60d2451ae1a7bedc99b6e319b93a8b376915c583caa5cd977e9d3c4a989d041e8e725df937922d292ac5f8304d547a1f8126e2c4fa551feb801408c5f49cb0d1f3f21326e49ae7b45074798c452b529bc4243e7ecc10995f547d350c798c238f01ecbfd71005b1be45ad8d1caba4d6654e3eeba5d7829364bdccfbbf72af700f401a705905be4f9b376af557f863119ba6d6763d39358b4fdaa48e48471081ba72296f9382e79b179da580d0f0844f3e60075cdcf1ccd33d9c8f41c081e4874a3b5bcfd2ae2f0d611de5243ebd82f2d99af9cee7f41ba1b9251104f77f3c66f9ab51bc4c31dae60f314a67f70b54836110d0472aa57109144898e3e27dc8dec05bb36ab38f6c1736febf53f5bf0098c774fb58a282464c1326436a40c5ad4f3281eba2ce13726fc1f9ff8e4650c5111a3c44c7a8e442f998627afd0a15e5b9b7ad618f38cd255db7e07e47745f15bcc42b0fdabe2603ef0dac0d9ba086458a7e73c945fd7080b921146cad77376c492fa04d80fedbf96bbfd28f15beec507d02ae3a8c796680e112caeeeb1ba086d42d3262797b8370747f4cf316c1ac722bbb315fc35002f13276a6259e7992b1c81c00efbf275992c36446e690647029833b93758c3b2acca2b5b85882805a1facc6e3a71118a1a690499631ee2c2d076b17898c6773c856907e249266814c0722b65f3c5930e145b56d8c5f12ad46dddaae360eead1c6a33668709463416ceb237a57fdba27733a7097914edf622aa06f5aa7886ac7b814758a0d07228e568181f51591c97573819b81996a8ca0d2fd6775535c1fec2816c1f87bde47c763bd4f6fe51d2a49b6ab75a15c4275a4f1e0731d97712abc65e4e088c38f2655db127cf394394d0fa33d1837bf51b746153b8bd8a1fe46b79108239585cac06313676fff2991ff86ce866c6227d3b3e0b75057c81f46885d156a24c5f3c6805becfe0ef0e06fdd8f619c5086f3dc311805b641ca08bfc6d02d0a510811d4033c08468ed27a7e1a64bebe305f82b318f530cb2eece1530016d7f041c8b48b89e68f3ea311edffcaa1a854a56a22b2dbae92cec195dfcecfdb187d5d52130d2f0231961b3ab593ebdc9e9ae0d3f7b154e526f3365fd626d06956809c8e7db58c9ce51d7a0954756f5ee359cd9a9c11fea1cbbd7b2d47d2ddfa4f5991cccb016298f4565f78469a86c55d312b09915ec0c490417daa2350d0bab5cee17460af3734a48aa8e718ef14ac03b2f806cc2ed0ec022a44fddf3607608213ff11374d98070b2655c81c69a62bf98ba1851082d5d548cd1e1c61b9c9cdac2c3d4de06f4713f5741583d8fa04af610577d1d28f6706a1777d81ba256d4e101abd65f2a15368854ee5e11788bea1ca98ca23972793f08d86493d0c06f780e5a0d0fa4d6ecfb87b05f8614f5acf83864b708dbccb4c3559bbfad571b050cc92daca4c90c12c6d5f5aeac1849ff6286edbe2a439a4719f2bb5d1afb042cf16a8404f982c7a32af04d3ba1906e73f710fe7ca32bf6be1baa450340396bce938b573d7f22c02934ba9ee74da69a003bf4004c71d2cddaea975cf049587316c4d6894999b9d", @ANYBLOB="010000000000800000001a000000280022800414008004000080040000808341f1680200008014000080040000800400008004000080060021"], 0x44}, 0x1, 0x0, 0x0, 0x61}, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 4m50.236832139s ago: executing program 32 (id=1694): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="010000000000800000001a000000280022800414008004000080040000808341f1680200008014000080040000800400008004000080060021"], 0x44}, 0x1, 0x0, 0x0, 0x61}, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 6.537105812s ago: executing program 2 (id=3902): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffff8]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10001, 0x7, 0x7fff, 0xf833, 0x7, 0xfffffffc, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x0, 0x0, [0x6, 0x6, 0x10000, 0x3, 0x9a, 0x6, 0x681, 0x0, 0x49, 0x6, 0x9, 0xa, 0x4, 0x4, 0x27, 0x6]}, {0x2, 0x0, [0x3, 0x4a8d2598, 0x9, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x6, 0x2393, 0x2, 0xd8, 0x101]}, {0x25, 0x0, [0x5458, 0x5, 0x80000000, 0x10001, 0x1000, 0x4, 0x1, 0x44, 0x800, 0xb467, 0x10000, 0xe4, 0x80000000, 0xfffffffa, 0x1, 0xffffff00]}, {0x1a, 0x0, [0x2, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x9, 0x7, 0x0, 0x2, 0xe7ca, 0x8, 0xfffffffa, 0x3, 0x3, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x1b0}}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd78492480", @ANYBLOB=',rootmode=0000000000', @ANYBLOB=',group_id', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf8a}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.410651222s ago: executing program 2 (id=3903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='00'], 0x30}, 0x1, 0x0, 0x0, 0x18004}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="3a9493912331126757e27b547b8c2d39198162e17d2020710ffc251899aba7e55e52048a73294a1832bad09921ad1e8641a43c5e1bf3176493ae82ab44b8d0773e64aa50c36fd8c59b1160141e35abfbbe6be277a983d4bdf6cd7ed120968d98afdddcc34ec386431aaded9df2ef6ba4c818237e2c7a10436d0d3750953e09ff4281d83dfd1850befe6bfb65e3c9fad89f1d8b7da6e79b1aa47db8b01f4311933d14b335b3e3513820a86b10534dc3f4f8ad526141d8dd95df56d8b5c29dd6c355a78d59ce0de807deadc3834c470d8b84b34e42d1e1bcdc6a68d1b09dd40e70de87c53628584ea69d9aeb05ad924ee7aaf9e943c23405f30baae2e92cf2d2b86868c984459e13bc6a0cf3ff59b2f0551f2474196094cbb57aaccaa5709b8fd917bddc68ef302a3215cda1f3cc8ee717606dcb94a3a38e700abe8ce33931f0229e605472d16b6ed0a6c9a7ace805201a93248d87db706875f8fa200ae603a4d4261dcd528373bbaf4db0936701be0c90b57b519c98db07c34d8e6e4029ff5e1c0772df5b55162a1d8b6d0be3ab7353dcdde8df45e4f478728bb5b11a4abc88d706799085c5e236916b23b5cbcba4717fd00c94f5600cd2a499ce3bbf12c1a2986ad8ddf0319e34b4760767e8e45941e54eb96a8663386ff39693c05869a0dab1dec0f1dd86c013928d108604f0bb644dd38fd3593391dd6316b43c9e2b2e58cf28b802a6f81c59d8ea0574e0947ac95d56dd33a6176f28f7b9ce4f9b14b9be92586e0cf1ffa231e16cd51b3b5f59c22730f165df1c3923e02ee6f927038e14096e3c457f4a89c0aa5cfeac53491566411d2f3fe03cd0f3ee4917c9085d13955aaf27b5b0b8edd8c057744f9c97133dbe5588fe4a73a4e5caab73c92d12a8a46be3ba05c5c5e3f3397e1d2790ed48869fc043d1fa4e6d7abdcb0e184f9c7cea91418838a3b4bcb91383ebcad04ff5b74743e8f13a0999a02d5fe9f5d662583c215daccfe3b9e74fec51876c2dae7e656bb18e560a6a42e2a1c2ae57fd27ed59846626f6679fb4f76d5f91f9a422647979cf693d97c521dab80f46c1a647024ea26186c4863d85cafd0c82c48febef23517d7a1a447ed6b2392fc2ba377d6b3d1e05e43601b4007707a57d519be321454246a7b1ddd2bc7f9c493e86b80f6ec9a1aff6278e386bdfc07b1aeca7ba5275bf02577f08b3507ccb553fe7d8451ccdcfaae6b4857f508d5dfb3d1622ba4d69b57f2341164584a2526c221abf3826ec547b31f0ee7a9dd7fb974d6696bcfac005d8af4ea9695354fef70b0160c1de6a25ff14b6a366bd3d218673ba0154bc967eb6cf0f13141d31b10ea4f6b1d4f4c9dd64103b74aec448eeddf251f6956ee9f29cae4868bfc1ab9c7bc0c7962d0d9a6cde90e9ac20945f6e0ecd9203717aca366c466bdb5c1826822311ac4360aa3c7ff35fef037afcb345dcc5128c4ab9811faef67c25920f2963cc4741d7508d878e295a6a4be3b38b294097ab9f91be518cd76f6b993a23f30e9b65d6bb3cbdd323023785379de64e0dacd042767474bb9d30824f5b1f15cef675b7b817d612219e7805fe77240d2966d1c91f7c520e7a24acdd8dcbf5a848462b4bd92bdc79e0c1238c1540b877650f28875d7a19fb4d1d46e1110c289e7e06e191746a24d0032e411e2e993329feb0fca35e4b76271f87553ff5f3735aac8738507b1715ea1745a66b7fc701ecdd89265e418dc411b31f65635aae19938ff461a61f639e39d9cdada2740d4bb2fa29baa250b5deb4ac5bb0b08b381a9a522a7c271c2e7f5b0b0cbfa4e92098152ba96eeee1fc3918f27f68e59af89d1b29122fd19b74e587dadecb7eda360de2fc7bea3975f055b6f9391c8064d58dc5544dd79895d38dea43b7b3ced70a4d319152a0940af81fb537a38d40cf4b59789e5e536e778979c2171d24f4088de1ea13da783a47a306f9649f1992497d4ed74658298c019ce7902c7f09e2df42cb6cafedc37ce6bc4d22bb2669d46ae7fc3813af4dae406de8e39cfd146d6f4977085ef920cd392ebc9a900685c026e1eaaff553f0e47ca36744f6ca6e09c5754301b7a8c44f7235657e9f9669e782c54ba43f4aac401d79b4b1662e505652d54cf18e2641c83ddc5d5f3fb27cfb4bdd619fb0f234bb03129349d9ac706753f2f557bcd89d362871eb16dac1dbceb8fe3ec9c73a4e649fb6f102f65790a35948bde609060580c730e2cf7a778d14e799f7b87f773bb2cfa2fdf023d7ca062c8569ed33621a6a9c064d5821affe1eaa332274b4b5644cd76aa35c342b037d4349470dbe7a2366fac143fbe1c513a01a9b9d0b4edf22ba1197318e888dfa84de2c30d90087efd52b925b381d04ef747b1a66bf7a4b539a3722792146be5def0c08ce4a45bf7f8f25b4e2a381cd8064c98e5f46fed4b1d8e50f41de39090b84384bef1316c71d1060cfb2e268a3a8fcd5ba1e8b47e3f39d7a4fae4540c2237e273a3cb1b467d10aba377402cfac0f62637a73caf76fb8b53262ac618d80d1aa957e076050ad9692067a3ab2d12eec655ac74ca1def429184e3d5b025c802d5b95baea1b53ed988ff264c8a4225cbaea5173db4cda6aad25e4666abc9c27190222324cf1e1391a8c67ad56aa4bd387553e461fbb17b08937981c625964e054e73f42494e1e22a44649108395dc9d109d75e065701fed4bbfdae0491ddaad44edd7277d9986391997aa674d2ac8a50d5f596cf28426d81f84a8b87d9ff0d0d3c77fc94bf7121adf5d9257d7b1c4d4fe2c3a66806ca9982df7199e76f9c0a5c289f1ab797321770ef87bec09a57e529b55018622356c40531fac4860de627285883ea127ce790b5fd95ac7716a6ba9978d6624734f6001151178a31a11ffe31a7fabdb82d2c4173df1e4effd3d671340f78c7f2efdb4419113366ebe317d3f38b1db9dc8044aa3439c4eb3bbfb99c568af20e15f2966ff2eb609a6162ed373b20dc09d6469731b33eb0141c5a96f192265df84d2fce416f41e9efaf73056bb3adb48349edb94b4e6b2a883323c1b3faf0de57d0b10896c8743fc3b1379ec6c406ae533c66e77246d13f0bdafc39567c22b87cedffd11c2ebe83aa857700292ab3ae4c35925e74142bb8bf6109f4feeee7dfaa23d00ad7667b6c835b40cdcc751427681733ee6cdfe28b85c9958bfd446dc248eb6c75343312090ad7b913278d67982315f23bc5b167fb108817de351e600a2a560a119cca597fcd3e8b729c998a496346fb80fe0913bc55a469bde8047e30e0b2181a675f0220125ce3646739779437b9245c4d151f2e2e85027d4253c0d6cf92910e73d40beebfdf8fbbebc4490ea5d921391370ae9ed7ea8e6dae3d5158733685bd92bd1654daea3532940c4b7e4e7e423aa7aa9fb98d8adc85f422195a395d67cd0bdcd35ef04858fbd489b45c8d0995ffe21fc7aa8c4e035d5a75792ddc17fa1d9254a52795a7a4cebae69e45ed3c0c1362b4e52969052a3448ae8ea81047e70d57178dbd8ed4f7580a3d62ec043f05b2251bcb1c74bcb90aaed65c723dbf2922c328cd908027a730603c11d03a2283d006cdadc87ddd7433640d730e574b686fcdce0bf382fa8724db71965caee9d72bcf82a38efd485ad8b28f6d30a16a018513dd7aada3c540741a009398f877e42f8b56e6c0e0aca4c88e2c999ff66b1fe8617f0fd3b42c7b29959ad7bae93c8a31c47179a855d6864a5554aaab45dacf314a749828c088fa8c9f46281f00a052c73161db5554aeb0b676a38503712e498643c8de06956092a0797f4fd336c99201f14591ce8ab001f5525f8bc2627faff5f2cd70521bff2b3a987b41730422af2bd0c104b933f03e9660d13496831d0a4d82b49ec4d8dc0a95f7f65301e1fe01325bc23215e0a296bb52fb1bcabcc5479c8aa95b9ecdac4b7fdea574bfaea4a6ab79a457c96b8c60fdbc82f49ebe39f39ffeb541485df4edad5e27abbf33e9a9dc73f986bb549cff7613c34130807ee4ae924aff26da4e16274dd6a6d557d5587e54f669007739513db877d2dc7464ed1852ad5fe19899cfdc55f5b4bcb5e8a6e5a9c97a206bdc0aa04805a50200f35e16fc1df136e6e15912e3ef9e0de2415bcd4a6e20fddd2a46e2811d8708c128baca264381fda2480327efee37bccca58a86ab52e70c8b97ddd5043a461f75c7c805d60d2451ae1a7bedc99b6e319b93a8b376915c583caa5cd977e9d3c4a989d041e8e725df937922d292ac5f8304d547a1f8126e2c4fa551feb801408c5f49cb0d1f3f21326e49ae7b45074798c452b529bc4243e7ecc10995f547d350c798c238f01ecbfd71005b1be45ad8d1caba4d6654e3eeba5d7829364bdccfbbf72af700f401a705905be4f9b376af557f863119ba6d6763d39358b4fdaa48e48471081ba72296f9382e79b179da580d0f0844f3e60075cdcf1ccd33d9c8f41c081e4874a3b5bcfd2ae2f0d611de5243ebd82f2d99af9cee7f41ba1b9251104f77f3c66f9ab51bc4c31dae60f314a67f70b54836110d0472aa57109144898e3e27dc8dec05bb36ab38f6c1736febf53f5bf0098c774fb58a282464c1326436a40c5ad4f3281eba2ce13726fc1f9ff8e4650c5111a3c44c7a8e442f998627afd0a15e5b9b7ad618f38cd255db7e07e47745f15bcc42b0fdabe2603ef0dac0d9ba086458a7e73c945fd7080b921146cad77376c492fa04d80fedbf96bbfd28f15beec507d02ae3a8c796680e112caeeeb1ba086d42d3262797b8370747f4cf316c1ac722bbb315fc35002f13276a6259e7992b1c81c00efbf275992c36446e690647029833b93758c3b2acca2b5b85882805a1facc6e3a71118a1a690499631ee2c2d076b17898c6773c856907e249266814c0722b65f3c5930e145b56d8c5f12ad46dddaae360eead1c6a33668709463416ceb237a57fdba27733a7097914edf622aa06f5aa7886ac7b814758a0d07228e568181f51591c97573819b81996a8ca0d2fd6775535c1fec2816c1f87bde47c763bd4f6fe51d2a49b6ab75a15c4275a4f1e0731d97712abc65e4e088c38f2655db127cf394394d0fa33d1837bf51b746153b8bd8a1fe46b79108239585cac06313676fff2991ff86ce866c6227d3b3e0b75057c81f46885d156a24c5f3c6805becfe0ef0e06fdd8f619c5086f3dc311805b641ca08bfc6d02d0a510811d4033c08468ed27a7e1a64bebe305f82b318f530cb2eece1530016d7f041c8b48b89e68f3ea311edffcaa1a854a56a22b2dbae92cec195dfcecfdb187d5d52130d2f0231961b3ab593ebdc9e9ae0d3f7b154e526f3365fd626d06956809c8e7db58c9ce51d7a0954756f5ee359cd9a9c11fea1cbbd7b2d47d2ddfa4f5991cccb016298f4565f78469a86c55d312b09915ec0c490417daa2350d0bab5cee17460af3734a48aa8e718ef14ac03b2f806cc2ed0ec022a44fddf3607608213ff11374d98070b2655c81c69a62bf98ba1851082d5d548cd1e1c61b9c9cdac2c3d4de06f4713f5741583d8fa04af610577d1d28f6706a1777d81ba256d4e101abd65f2a15368854ee5e11788bea1ca98ca23972793f08d86493d0c06f780e5a0d0fa4d6ecfb87b05f8614f5acf83864b708dbccb4c3559bbfad571b050cc92daca4c90c12c6d5f5aeac1849ff6286edbe2a439a4719f2bb5d1afb042cf16a8404f982c7a32af04d3ba1906e73f710fe7ca32bf6be1baa450340396bce938b573d7f22c02934ba9ee74da69a003bf4004c71d2cddaea975cf049587316c4d6894999b9d", @ANYBLOB="010000000000800000001a000000280022800414008004000080040000808341f1680200008014000080040000800400008004000080060021"], 0x44}, 0x1, 0x0, 0x0, 0x61}, 0x0) close(r6) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) fcntl$lock(r8, 0x24, &(0x7f0000000140)={0xed15909e0658bf9, 0x0, 0x5b4, 0x4}) r9 = syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e9000009fcff0000000000000705d77b5d2898"], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x8000, '\x00', @p_u8=0x0}}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000ffdbdf254f00000008000300", @ANYRES32=r12, @ANYBLOB="40007a801400020082f383246038cef88b9a31b488bdddc814000100119b5d2984747e56928193217bdf5bc30c000300f76805be6a51e983080006000c000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r13 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r14 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x141202, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r13, r14, 0x54) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x200) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x60, 0xa0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8, 0x1}, {0x8, 0x8, 0xfffffffe}, {0x3ff, 0x80000000}, {0x1000}}) 6.226460285s ago: executing program 1 (id=3906): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r4 = accept(r1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 6.090496301s ago: executing program 1 (id=3907): r0 = eventfd2(0x5, 0x80000) read$eventfd(r0, &(0x7f00000000c0), 0x8) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x176) (async) read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x2020) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x4008080) 5.690473122s ago: executing program 1 (id=3911): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x4, 0xb1, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x709, 0x9a50, 0x10}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x25dfdc00, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="042218000000a8c1da29fe4b686cbe027bce43e45f8a359e82ad0592bd3d88e8ea4bbef94186c7d38d620a906e9bd497984eea530f9fcaf8173e5a0c8f72014d6ade2187549d80d9845fba2a0fde4bc6c82891cfba1d7c27d65631b6299aea05290c87dff6c86d9ce2cbf46d5eec277dce061e0b9eaf6318a6d8a79d8eaf948a3a65f6b99c652e8cc71e51c0bd17469fc0eb88c16a5402f6d68fdfd9606c41d3ad8b75566f5f37518fb2cc984f103c2a201991177a9486748f"], 0x0}, 0x0) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa08000700", @ANYRES32=0x0, @ANYBLOB="6b2a6d3167513a743a4aaee6af2e9734d7360f49a19604470aa1719228fd55854d3aa735b5f7938ef6ac6dad16d9a7453614658738c67ad67f0895e6584b313fcdd9972536e61386da209fcb232133"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 5.071044566s ago: executing program 1 (id=3917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 8) 4.329723128s ago: executing program 2 (id=3920): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffff8]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10001, 0x7, 0x7fff, 0xf833, 0x7, 0xfffffffc, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x0, 0x0, [0x6, 0x6, 0x10000, 0x3, 0x9a, 0x6, 0x681, 0x0, 0x49, 0x6, 0x9, 0xa, 0x4, 0x4, 0x27, 0x6]}, {0x2, 0x0, [0x3, 0x4a8d2598, 0x9, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x6, 0x2393, 0x2, 0xd8, 0x101]}, {0x25, 0x0, [0x5458, 0x5, 0x80000000, 0x10001, 0x1000, 0x4, 0x1, 0x44, 0x800, 0xb467, 0x10000, 0xe4, 0x80000000, 0xfffffffa, 0x1, 0xffffff00]}, {0x1a, 0x0, [0x2, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x9, 0x7, 0x0, 0x2, 0xe7ca, 0x8, 0xfffffffa, 0x3, 0x3, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x1b0}}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd78492480", @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf82}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.613318177s ago: executing program 2 (id=3926): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r4 = accept(r1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 3.415261626s ago: executing program 2 (id=3928): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffff8]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10001, 0x7, 0x7fff, 0xf833, 0x7, 0xfffffffc, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x0, 0x0, [0x6, 0x6, 0x10000, 0x3, 0x9a, 0x6, 0x681, 0x0, 0x49, 0x6, 0x9, 0xa, 0x4, 0x4, 0x27, 0x6]}, {0x2, 0x0, [0x3, 0x4a8d2598, 0x9, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x6, 0x2393, 0x2, 0xd8, 0x101]}, {0x25, 0x0, [0x5458, 0x5, 0x80000000, 0x10001, 0x1000, 0x4, 0x1, 0x44, 0x800, 0xb467, 0x10000, 0xe4, 0x80000000, 0xfffffffa, 0x1, 0xffffff00]}, {0x1a, 0x0, [0x2, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x9, 0x7, 0x0, 0x2, 0xe7ca, 0x8, 0xfffffffa, 0x3, 0x3, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x1b0}}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd78492480", @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.221455658s ago: executing program 1 (id=3929): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1}) 3.149616855s ago: executing program 2 (id=3931): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d040ec20000000000010902"], 0x0) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) 2.010288644s ago: executing program 4 (id=3939): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xf8) 1.439033659s ago: executing program 4 (id=3941): ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=@routing={0xe9, 0x2, 0x0, 0x3, 0x0, [@local]}, 0x18) (async) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x13c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, @CTA_NAT_SRC={0xb0, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_NAT_SRC={0x64, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000340)) (async) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000380)={0xe95a, 0xbb, 0x5}) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000003c0)={0x1, 0x0, 0x7, 0x67, 0xe, "aae8bb4ee6868fad"}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000400)=[@wr_crn={0x46, 0x20, {0x0, 0x1fe}}, @uexit={0x0, 0x18, 0xfff}], 0x38}) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x8, 0x10, 0xff, 0x94, {{0x49, 0x4, 0x2, 0x27, 0x124, 0x65, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x82, 0x1, 0x2, [{@empty, 0x80000001}]}, @timestamp={0x44, 0x8, 0xb5, 0x0, 0x5, [0x3]}, @generic={0x44, 0x6, "ba5bb877"}, @timestamp_addr={0x44, 0x4c, 0x7a, 0x1, 0x4, [{@remote, 0x8000}, {@private=0xa010100, 0x5}, {@broadcast, 0x8c28}, {@private=0xa010100, 0x3}, {@multicast1, 0x1}, {@multicast2, 0x8}, {@private=0xa010102, 0x200}, {@rand_addr=0x64010101, 0xf3f}, {@remote}]}, @timestamp_prespec={0x44, 0x54, 0xdf, 0x3, 0x2, [{@multicast1, 0x101}, {@private=0xa010102, 0xb}, {@broadcast, 0xa}, {@multicast1, 0x5}, {@local}, {@remote, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@private=0xa010101, 0xab2f}, {@empty, 0x5d9c637b}, {@rand_addr=0x64010102, 0x76a9}]}, @timestamp_prespec={0x44, 0x54, 0x81, 0x3, 0x0, [{@multicast1, 0x8}, {@local, 0x7ff}, {@multicast1}, {@rand_addr=0x64010102, 0x1ff}, {@remote, 0x3}, {@multicast1, 0x1000}, {@loopback}, {@broadcast, 0x100}, {@loopback}, {@private=0xa010100, 0x8}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001840)={&(0x7f0000000700)={0x1128, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x10b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0x94, 0x5, "75fc1541274b0d8cb5550b9d6fd1d0c225b00990e8801a48240c9c23b3e3f414770dc51ce6f01ba7acc875be7b4c87a76f1f6ac8c5f31326372d05321d3cbef847a97949198815c02c3f79cb13fb2133be3777e2ae753d1c851c00205087c247eef87a06cfae34a9a31bf9e48b191fd6dee516f1ad238043b196f931dab0858bd89695a6b337e84997cdb8150d046eba"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1128}}, 0x4) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000018c0)={0xa, "a237a5"}, 0x6) (async) write$cgroup_type(r1, &(0x7f0000001900), 0x9) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000001940)={0x1, "affd42"}, 0x6) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x50, r1, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0xc0, &(0x7f0000001a80)=0x7, 0x0, 0x4) ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000001ac0)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, r9, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}}, 0x4000) (async) setsockopt$inet6_opts(r0, 0x29, 0x2, &(0x7f0000001cc0)=@hopopts={0x3c, 0xb, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x2, 0x7, [0x30, 0x3, 0x6, 0x7fffffff, 0x9, 0x5, 0x2, 0x2]}}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7, 0xaf3}}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x68) 1.319591591s ago: executing program 4 (id=3943): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xef}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd756}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf907281}, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r8, 0x5605) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r7, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'lo\x00', {0x1}, 0x3}) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x28000000000000, 0xfffffffe, 0x0, 0x80000, 0x1000, 0x0, 0x0, r10, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r11, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 1.118009845s ago: executing program 4 (id=3945): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffff8]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10001, 0x7, 0x7fff, 0xf833, 0x7, 0xfffffffc, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x0, 0x0, [0x6, 0x6, 0x10000, 0x3, 0x9a, 0x6, 0x681, 0x0, 0x49, 0x6, 0x9, 0xa, 0x4, 0x4, 0x27, 0x6]}, {0x2, 0x0, [0x3, 0x4a8d2598, 0x9, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x6, 0x2393, 0x2, 0xd8, 0x101]}, {0x25, 0x0, [0x5458, 0x5, 0x80000000, 0x10001, 0x1000, 0x4, 0x1, 0x44, 0x800, 0xb467, 0x10000, 0xe4, 0x80000000, 0xfffffffa, 0x1, 0xffffff00]}, {0x1a, 0x0, [0x2, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x9, 0x7, 0x0, 0x2, 0xe7ca, 0x8, 0xfffffffa, 0x3, 0x3, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x1b0}}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd78492480", @ANYBLOB=',rootmode=0000000000', @ANYBLOB=',group_id', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf8e}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.001186799s ago: executing program 3 (id=3947): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r0, &(0x7f0000000000)=@short={0xb, @dev, @bcast, 0x1, @null}, &(0x7f0000000080)=0x1c, 0x80000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000514010029bd70a545085dc8d8dc668cbc5b7ffcc666f200fddbdf2508001ad4020000000800030001008000c5445970af14f9f432c7bb8634215410081176028ae76b8a8745c553"], 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x800) 949.8359ms ago: executing program 3 (id=3948): syz_open_dev$loop(&(0x7f0000001100), 0x5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)}}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 934.702978ms ago: executing program 4 (id=3949): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0xf8) 799.593538ms ago: executing program 3 (id=3950): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x4, 0xb1, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x709, 0x9a50, 0x10}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x25dfdc00, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="042218000000a8c1da29fe4b686cbe027bce43e45f8a359e82ad0592bd3d88e8ea4bbef94186c7d38d620a906e9bd497984eea530f9fcaf8173e5a0c8f72014d6ade2187549d80d9845fba2a0fde4bc6c82891cfba1d7c27d65631b6299aea05290c87dff6c86d9ce2cbf46d5eec277dce061e0b9eaf6318a6d8a79d8eaf948a3a65f6b99c652e8cc71e51c0bd17469fc0eb88c16a5402f6d68fdfd9606c41d3ad8b75566f5f37518fb2cc984f103c2a201991177a9486748f"], 0x0}, 0x0) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa08000700", @ANYRES32=0x0, @ANYBLOB="6b2a6d3167513a743a4aaee6af2e9734d7360f49a19604470aa1719228fd55854d3aa735b5f7938ef6ac6dad16d9a7453614658738c67ad67f0895e6584b313fcdd9972536e61386da209fcb232133"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 323.261387ms ago: executing program 4 (id=3951): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d00)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8}, 0x18) sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r9, &(0x7f0000000800)={&(0x7f0000000000)={0x1d, r8, 0x0, {0x2, 0xff}}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x4000040) sendmsg$nl_xfrm(r5, &(0x7f0000000f80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d40)=@acquire={0x200, 0x17, 0x400, 0x70bd2c, 0x25dfdbfc, {{@in6=@mcast2, 0x4d3, 0x32}, @in=@broadcast, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x5, 0x4e20, 0x80, 0x2, 0x0, 0x20, 0x59, r6, r3}, {{@in=@remote, @in=@local, 0x4e21, 0x100, 0x4e22, 0x7, 0xa, 0x20, 0x0, 0x21, r8, r3}, {0x81, 0xa, 0xa, 0x4, 0xffffffff, 0x245, 0x8, 0x8}, {0x9068, 0x5, 0x430d, 0x3}, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x8001, 0x10000, 0x7, 0x70bd25}, [@sec_ctx={0xb4, 0x8, {0xb0, 0x8, 0x0, 0x4, 0xa8, "ff38c764d9de1e6578a1834d957e84ce1d03ba5658d73acaada2e79b37c036213306df35c6ed1bdb83ac920aeeabb15aa89808e2fa737c5f3853ae0e46f2c5bee41a2b052609d67c2a44de0f8911760aa4df238d8ffddbf3d5559878d1f0342e7b52597e37bfa49f54f0e1bc043067d4f8291d1c13aa86275e243c7a1c21d68346d35b2b0ebb546f98ea575bb767fee654565c21212204272753b64100ad0fef57e945550d3e5b97"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e23, 0x4e22, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @extra_flags={0x8, 0x18, 0x6}]}, 0x200}, 0x1, 0x0, 0x0, 0x400c044}, 0x20000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) bind$inet(r1, 0x0, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f0000000400)={0x40, 0xe, 0xd1, {0xd1, 0x31, "29556abd667528655dbd20125c71034df8814cdf34db2c728dce86c7c30ebc1d7b97a670baef5be0320983f418ef5ce7e6872252fbc85cbfa2363afde412400cd3127f67b64ee733eee19725a19faa7999cf200bec9b321d29e3129a270f572135a864a8c7244f01cbad5a7392fbce2c219dcf7187613e582deaf3cde2861c4cedf31a092adf2d12031babd19346ca63b163f0487091a45602a33c2b8bb992cf87b811efd6f93a89df6d2459212c40e71248deda6c7ffcfa8b3bc19da934ef7c5e276f5be2d3ca84c0e76ca4fbd517"}}, &(0x7f0000000500)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "1308b5baf718e3ea2da7cdb00f3c7f7c9272e39c532c61851897e5226a2e1d4d893347dcf9455d73ea1708f6abe71754f22945ef4b3720f2b0e505a0a4b59e86831d1861b7110494cb2a92102273fa07652ef3feb730da79dea7e667dbaf0abaaeed615b6899d5f6a5542c3e1e8a265f23ed77e5c4e4747bc303f702428cd19c6e55028213f2cc70d8b8d7189f8c72f66a33ef23f05741cc53fc7e12580a3b1b808c0d4e9d56ee8af82c1f9303e68458e590a9a627c7183e83"}}, &(0x7f0000000600)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x18, 0x0, 0x2, "1c5aa7b4", "ec76ab66"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0x8, 0x7, 0x7, 0xd, 0x4}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x40, 0xc, 0xaf, "4eedf7e2f2c3bc537998e88880468ab2783c838453e62278822f0c57c305d60403c4d447906f5cb7f536748c4a0061fe883aca00bfa3cbec89f38cedca633cd3dde0e5d3125ee15d0edb63572145836656528cd7aebe4a94313be28bccb9fda08eb8fc662f8541245c494042ce536dfacbf479b76753ba2e229a50fe95782158ac4a371296bb6040340529e2dc06d099eb6ca7d297a67df1771e05db0f1afaa9fe7af50adb6c3f58214b067a551305"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x45}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xa8}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x200, 0x20}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000940)={0x40, 0xb, 0x2, "1c21"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0xfffc}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "8b43"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0xb}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0xf3}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x21, 0x1b, {0x1b, 0x1, "1cd51c75cf677f8f1f1eb846616f653f691d0a8bc9dfc9e8c1"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f00000000c0)={0x20, 0x9, 0xd5, "b4df1353c3d5ca0b0d8ed4345918e49a80409c5c6166947e3aacbccdaca55ca888d5edabe5f4d893fa0982ce308b491cc6b7a23952b34773b9cd210cd47a79ba85fa18d145a20bf316e4d8abbe3473143e3372008767cc72b03c3ce137a49e3dd0f1af8904413e41c51fe5c236b8bf1d069eb49be004ead8b316386e25f3a3d55f4654f1d22d5dbab8d56fbb36d593b6d7c5e9fe9c8a4130849923c4d6c5e68973084868cf9a2d4bb5132385c6a9281cb2044b7c6fa6a46348ff2dcff124254cbee0d63cc557047892b38b59a724ae77aa50b84d38"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x5, 0x5c1d, 0x0, 0x8000, 0x7ff, 0x2, 0x1, 0x7fffffff, 0xa81b, 0xff, 0xfffd, 0x3495}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0xffff}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000340)={0x20, 0x89, 0x2}}) 241.191101ms ago: executing program 3 (id=3952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x5) r5 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r6}}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003740)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16, @ANYBLOB="000127bd7000fcdbdf253400000008000300", @ANYRES32], 0xa4}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000480)={'syzkaller0\x00', @remote}) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r6}}, 0x18) 160.214089ms ago: executing program 1 (id=3953): timer_create(0x3, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x1) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket(0x10, 0x3, 0x3) sendmmsg$alg(r2, &(0x7f00000055c0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="da", 0x1}], 0x1, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}], 0x2, 0x30048090) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x2}]}}}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="0f", 0x1}], 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x48000, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x40) r5 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) 60.59202ms ago: executing program 3 (id=3954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000500", @ANYRES16=r1, @ANYBLOB="05002ebd7000fcdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340001010101010100000400fa00"], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x4800) 0s ago: executing program 3 (id=3955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4], 0x100, 0x42, 0x8}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x4, @multicast2, 0x4e23, 0x2, 'sed\x00', 0x2e, 0x8, 0x2c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x6, 0x7fffffff, 0x4}}, 0x44) ioctl$KVM_RUN(r2, 0xae80, 0x2800) kernel console output (not intermixed with test programs): y_hcd [ 518.986239][ T983] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 519.006878][ T9] usb 2-1: device descriptor read/8, error -71 [ 519.116593][ T9] usb usb2-port1: unable to enumerate USB device [ 519.125976][ T983] usb 4-1: device descriptor read/64, error -71 [ 519.160815][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 519.170128][T16554] usbtmc 3-1:16.0: Unable to send data, error -71 [ 519.180036][ T5914] usb 3-1: USB disconnect, device number 110 [ 519.237968][ T983] usb usb4-port1: attempt power cycle [ 519.576017][ T983] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 519.596978][ T983] usb 4-1: device descriptor read/8, error -71 [ 519.707425][T16564] tmpfs: Bad value for 'nr_inodes' [ 519.866102][ T983] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 519.886756][ T983] usb 4-1: device descriptor read/8, error -71 [ 520.000359][ T983] usb usb4-port1: unable to enumerate USB device [ 520.047841][ T5914] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 520.075366][T16574] comedi comedi0: Minor 3 could not be opened [ 520.141621][ T797] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 520.153166][ T797] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 520.216122][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 520.250733][ T5914] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 520.270337][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.286018][ T5914] usb 3-1: Product: syz [ 520.290376][ T5914] usb 3-1: Manufacturer: syz [ 520.295278][ T5914] usb 3-1: SerialNumber: syz [ 520.304921][ T5914] usb 3-1: config 0 descriptor?? [ 520.655166][T16585] FAULT_INJECTION: forcing a failure. [ 520.655166][T16585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.669123][T16585] CPU: 0 UID: 0 PID: 16585 Comm: syz.1.3471 Not tainted syzkaller #0 PREEMPT(full) [ 520.669151][T16585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 520.669162][T16585] Call Trace: [ 520.669171][T16585] [ 520.669179][T16585] dump_stack_lvl+0x189/0x250 [ 520.669201][T16585] ? __pfx____ratelimit+0x10/0x10 [ 520.669216][T16585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.669229][T16585] ? __pfx__printk+0x10/0x10 [ 520.669266][T16585] should_fail_ex+0x414/0x560 [ 520.669295][T16585] __kvm_read_guest_page+0x18d/0x240 [ 520.669324][T16585] kvm_fetch_guest_virt+0x12b/0x170 [ 520.669347][T16585] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 520.669361][T16585] __do_insn_fetch_bytes+0x2fc/0x6d0 [ 520.669380][T16585] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 520.669394][T16585] ? __up_read+0x280/0x680 [ 520.669417][T16585] ? __pfx___up_read+0x10/0x10 [ 520.669438][T16585] ? x86_decode_insn+0x11f5/0x5470 [ 520.669469][T16585] x86_decode_insn+0x31d/0x5470 [ 520.669518][T16585] ? __pfx_x86_decode_insn+0x10/0x10 [ 520.669537][T16585] ? kvm_tdp_mmu_map+0x308/0x1d30 [ 520.669560][T16585] ? __asan_memset+0x22/0x50 [ 520.669599][T16585] ? init_decode_cache+0x78/0x90 [ 520.669625][T16585] ? init_emulate_ctxt+0x4d6/0x660 [ 520.669650][T16585] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 520.669669][T16585] ? trace_rcu_utilization+0x47/0x1d0 [ 520.669685][T16585] x86_emulate_instruction+0x61b/0x1f90 [ 520.669703][T16585] ? fred_extint+0x38/0x80 [ 520.669725][T16585] ? fred_sysvec_apic_timer_interrupt+0xad/0xe0 [ 520.669754][T16585] ? fred_extint+0x4f/0x80 [ 520.669777][T16585] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 520.669798][T16585] ? __get_current_cr3_fast+0x90/0x150 [ 520.669819][T16585] ? clear_bhb_loop+0x60/0xb0 [ 520.669830][T16585] ? clear_bhb_loop+0x60/0xb0 [ 520.669842][T16585] ? vmx_vcpu_run+0xe92/0x2b70 [ 520.669853][T16585] ? __vmx_complete_interrupts+0xe7/0x690 [ 520.669877][T16585] handle_ud+0x142/0x590 [ 520.669901][T16585] ? __pfx_handle_ud+0x10/0x10 [ 520.669919][T16585] ? vmx_handle_exit_irqoff+0x61e/0x940 [ 520.669936][T16585] ? __pfx_current_save_fsgs+0x10/0x10 [ 520.669966][T16585] ? __lock_acquire+0xab9/0xd20 [ 520.669987][T16585] ? __pfx_handle_exception_nmi+0x10/0x10 [ 520.670009][T16585] vmx_handle_exit+0x10a4/0x18c0 [ 520.670031][T16585] ? vcpu_run+0x361b/0x7040 [ 520.670071][T16585] vcpu_run+0x43aa/0x7040 [ 520.670112][T16585] ? vcpu_run+0x361b/0x7040 [ 520.670166][T16585] ? __pfx_vcpu_run+0x10/0x10 [ 520.670184][T16585] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 520.670206][T16585] ? complete_emulated_mmio+0x18e/0x7a0 [ 520.670232][T16585] ? __asan_memcpy+0x40/0x70 [ 520.670256][T16585] ? complete_emulated_mmio+0x4d2/0x7a0 [ 520.670285][T16585] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 520.670305][T16585] ? __mutex_trylock_common+0x153/0x260 [ 520.670320][T16585] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 520.670338][T16585] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 520.670365][T16585] ? rcu_is_watching+0x15/0xb0 [ 520.670385][T16585] ? trace_contention_end+0x39/0x120 [ 520.670406][T16585] ? __mutex_lock+0x335/0x1350 [ 520.670435][T16585] ? kasan_quarantine_put+0xdd/0x220 [ 520.670451][T16585] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.670465][T16585] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 520.670481][T16585] ? __pfx___mutex_lock+0x10/0x10 [ 520.670501][T16585] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 520.670528][T16585] ? do_vfs_ioctl+0xbe8/0x1430 [ 520.670546][T16585] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 520.670568][T16585] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 520.670590][T16585] kvm_vcpu_ioctl+0x95c/0xe90 [ 520.670608][T16585] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 520.670636][T16585] ? __fget_files+0x2a/0x420 [ 520.670662][T16585] ? __fget_files+0x3a0/0x420 [ 520.670685][T16585] ? __fget_files+0x2a/0x420 [ 520.670712][T16585] ? bpf_lsm_file_ioctl+0x9/0x20 [ 520.670733][T16585] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 520.670750][T16585] __se_sys_ioctl+0xfc/0x170 [ 520.670764][T16585] do_syscall_64+0xfa/0xfa0 [ 520.670777][T16585] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.670791][T16585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.670806][T16585] ? clear_bhb_loop+0x60/0xb0 [ 520.670829][T16585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.670845][T16585] RIP: 0033:0x7fe0db78efc9 [ 520.670860][T16585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.670872][T16585] RSP: 002b:00007fe0dc588038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.670889][T16585] RAX: ffffffffffffffda RBX: 00007fe0db9e5fa0 RCX: 00007fe0db78efc9 [ 520.670898][T16585] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 520.670904][T16585] RBP: 00007fe0dc588090 R08: 0000000000000000 R09: 0000000000000000 [ 520.670909][T16585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 520.670915][T16585] R13: 00007fe0db9e6038 R14: 00007fe0db9e5fa0 R15: 00007ffd13f335e8 [ 520.670931][T16585] [ 520.714357][ T5914] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 521.198397][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 521.235223][ T5914] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 521.270374][ T5914] usb 3-1: media controller created [ 521.294779][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 521.337506][ T5914] zl10353_read_register: readreg error (reg=127, ret==0) [ 521.344590][ T5914] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 521.355084][ T5914] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 521.377436][ T5914] usb 3-1: USB disconnect, device number 111 [ 521.435666][T16596] tmpfs: Unknown parameter 'si' [ 521.454086][ T5914] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 521.536552][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 521.544279][ T983] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 521.706029][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 521.711458][ T983] usb 2-1: Using ep0 maxpacket: 8 [ 521.719481][ T9] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 521.731229][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.742269][ T983] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 521.757077][ T9] usb 5-1: config 0 has no interfaces? [ 521.763109][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 521.772998][ T983] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 521.784618][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.792723][ T983] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 521.804742][ T983] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 521.819269][ T9] usb 5-1: config 0 descriptor?? [ 521.824517][ T983] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 521.844430][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.043486][ T10] usb 5-1: USB disconnect, device number 37 [ 522.076710][ T983] usb 2-1: GET_CAPABILITIES returned 0 [ 522.089137][ T983] usbtmc 2-1:16.0: can't read capabilities [ 522.148682][T16614] comedi comedi0: Minor 3 could not be opened [ 522.216743][ T983] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 522.245997][ T983] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 522.342013][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 522.351606][T16618] usbtmc 2-1:16.0: Unable to send data, error -71 [ 522.377032][ T983] usb 2-1: USB disconnect, device number 111 [ 522.498002][T16621] tipc: Enabling of bearer rejected, failed to enable media [ 522.766106][ T5914] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 522.855968][ T983] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 522.896075][ T5914] usb 3-1: device descriptor read/64, error -71 [ 523.019104][ T983] usb 5-1: Using ep0 maxpacket: 32 [ 523.026888][ T983] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 523.037319][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.056107][ T983] usb 5-1: config 0 descriptor?? [ 523.070828][ T983] gspca_main: sunplus-2.14.0 probing 041e:400b [ 523.136111][ T5914] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 523.156510][ T5822] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 523.240518][T16635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3488'. [ 523.265988][ T5914] usb 3-1: device descriptor read/64, error -71 [ 523.316180][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 523.328120][ T5822] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 523.337528][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.345806][ T5822] usb 2-1: Product: syz [ 523.351356][ T5822] usb 2-1: Manufacturer: syz [ 523.358222][ T5822] usb 2-1: SerialNumber: syz [ 523.373827][ T5822] usb 2-1: config 0 descriptor?? [ 523.380796][ T5914] usb usb3-port1: attempt power cycle [ 523.620183][T16645] tmpfs: Unknown parameter 'si' [ 523.675183][T16647] comedi comedi0: Minor 3 could not be opened [ 523.688240][ T983] gspca_sunplus: reg_r err -32 [ 523.693799][ T983] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 523.726025][ T5914] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 523.746559][ T983] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 523.755671][ T5914] usb 3-1: device descriptor read/8, error -71 [ 523.757879][ T983] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 523.793458][ T5822] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 523.819313][ T5822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 523.837595][ T5822] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 523.858693][ T5822] usb 2-1: media controller created [ 523.900189][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.919212][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 524.000937][ T5822] zl10353_read_register: readreg error (reg=127, ret==0) [ 524.008284][ T5914] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 524.016746][ T5822] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 524.024927][ T5822] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 524.039407][ T5822] usb 2-1: USB disconnect, device number 112 [ 524.050754][ T5914] usb 3-1: device descriptor read/8, error -71 [ 524.087001][ T5822] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 524.166842][ T5914] usb usb3-port1: unable to enumerate USB device [ 524.826834][T16662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3497'. [ 525.032385][T16671] netlink: 'syz.1.3501': attribute type 10 has an invalid length. [ 525.248402][T16678] comedi comedi0: Minor 3 could not be opened [ 525.312338][ T983] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 525.326213][ T983] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 525.336763][ T5914] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 525.496036][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 525.504941][ T5914] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 525.514328][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.522530][ T5914] usb 2-1: Product: syz [ 525.527024][ T5914] usb 2-1: Manufacturer: syz [ 525.531788][ T5914] usb 2-1: SerialNumber: syz [ 525.546754][ T5914] usb 2-1: config 0 descriptor?? [ 525.629597][ T10] usb 5-1: USB disconnect, device number 38 [ 525.690361][T16685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3506'. [ 525.959021][ T5914] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 525.968494][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 525.978477][ T5914] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 525.986691][ T5914] usb 2-1: media controller created [ 526.000186][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 526.163814][ T5914] zl10353_read_register: readreg error (reg=127, ret==0) [ 526.184156][ T5914] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 526.205093][ T5914] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 526.247388][ T5914] usb 2-1: USB disconnect, device number 113 [ 526.329534][ T5914] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 526.450055][T16699] tmpfs: Bad value for 'size' [ 526.816344][ T9] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 526.960267][ T9] usb 3-1: device descriptor read/64, error -71 [ 527.205951][ T9] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 527.345960][ T9] usb 3-1: device descriptor read/64, error -71 [ 527.466668][ T9] usb usb3-port1: attempt power cycle [ 527.547823][T16741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3526'. [ 527.644982][T16744] netlink: 'syz.3.3527': attribute type 10 has an invalid length. [ 527.746580][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 527.806141][ T9] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 527.828057][ T9] usb 3-1: device descriptor read/8, error -71 [ 527.896194][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 527.906026][ T1221] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 527.918853][ T10] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 527.930143][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.939782][ T10] usb 2-1: Product: syz [ 527.943984][ T10] usb 2-1: Manufacturer: syz [ 527.949109][ T10] usb 2-1: SerialNumber: syz [ 527.961104][ T10] usb 2-1: config 0 descriptor?? [ 528.067441][ T9] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 528.076560][ T1221] usb 4-1: Using ep0 maxpacket: 16 [ 528.083906][ T1221] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 528.095563][ T1221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 528.107395][ T1221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 528.119991][ T9] usb 3-1: device descriptor read/8, error -71 [ 528.136858][ T1221] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 528.146136][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.154559][ T1221] usb 4-1: Product: syz [ 528.159643][ T1221] usb 4-1: Manufacturer: syz [ 528.164323][ T1221] usb 4-1: SerialNumber: syz [ 528.173436][ T1221] usb 4-1: config 0 descriptor?? [ 528.237365][ T9] usb usb3-port1: unable to enumerate USB device [ 528.383049][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 528.392188][ T1221] appledisplay 4-1:0.0: Error while getting initial brightness: -90 [ 528.412737][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 528.422818][ T1221] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -90 [ 528.432726][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 528.442357][ T10] usb 2-1: media controller created [ 528.467067][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 528.604083][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 528.606164][ T1221] usb 4-1: USB disconnect, device number 99 [ 528.623650][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 528.633916][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 528.657950][ T10] usb 2-1: USB disconnect, device number 114 [ 528.729454][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 529.012485][T16769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3535'. [ 529.784216][T16796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3544'. [ 529.895376][T16801] random: crng reseeded on system resumption [ 529.908456][T16801] FAULT_INJECTION: forcing a failure. [ 529.908456][T16801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 529.922321][T16801] CPU: 1 UID: 0 PID: 16801 Comm: syz.1.3546 Not tainted syzkaller #0 PREEMPT(full) [ 529.922349][T16801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 529.922362][T16801] Call Trace: [ 529.922370][T16801] [ 529.922380][T16801] dump_stack_lvl+0x189/0x250 [ 529.922410][T16801] ? __pfx____ratelimit+0x10/0x10 [ 529.922433][T16801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.922457][T16801] ? __pfx__printk+0x10/0x10 [ 529.922482][T16801] ? fs_reclaim_acquire+0x7d/0x100 [ 529.922512][T16801] should_fail_ex+0x414/0x560 [ 529.922540][T16801] prepare_alloc_pages+0x22b/0x650 [ 529.922570][T16801] __alloc_frozen_pages_noprof+0x123/0x370 [ 529.922597][T16801] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 529.922641][T16801] alloc_pages_mpol+0x232/0x4a0 [ 529.922670][T16801] alloc_pages_noprof+0xa9/0x190 [ 529.922692][T16801] get_zeroed_page_noprof+0x1a/0x90 [ 529.922714][T16801] get_image_page+0x36/0x330 [ 529.922748][T16801] memory_bm_create+0x736/0xdc0 [ 529.922794][T16801] create_basic_memory_bitmaps+0x98/0x430 [ 529.922827][T16801] snapshot_open+0x1aa/0x280 [ 529.922848][T16801] ? __pfx_snapshot_open+0x10/0x10 [ 529.922866][T16801] misc_open+0x2d5/0x350 [ 529.922898][T16801] chrdev_open+0x4cc/0x5e0 [ 529.922924][T16801] ? __pfx_chrdev_open+0x10/0x10 [ 529.922951][T16801] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 529.922995][T16801] ? __pfx_chrdev_open+0x10/0x10 [ 529.923019][T16801] do_dentry_open+0x953/0x13f0 [ 529.923064][T16801] vfs_open+0x3b/0x340 [ 529.923090][T16801] ? path_openat+0x2ecd/0x3830 [ 529.923113][T16801] path_openat+0x2ee5/0x3830 [ 529.923174][T16801] ? __pfx_path_openat+0x10/0x10 [ 529.923218][T16801] do_filp_open+0x1fa/0x410 [ 529.923238][T16801] ? __lock_acquire+0xab9/0xd20 [ 529.923268][T16801] ? __pfx_do_filp_open+0x10/0x10 [ 529.923318][T16801] ? _raw_spin_unlock+0x28/0x50 [ 529.923338][T16801] ? alloc_fd+0x64c/0x6c0 [ 529.923378][T16801] do_sys_openat2+0x121/0x1c0 [ 529.923411][T16801] ? __pfx_do_sys_openat2+0x10/0x10 [ 529.923446][T16801] ? ksys_write+0x22a/0x250 [ 529.923472][T16801] ? __pfx_ksys_write+0x10/0x10 [ 529.923498][T16801] __x64_sys_openat+0x138/0x170 [ 529.923525][T16801] do_syscall_64+0xfa/0xfa0 [ 529.923546][T16801] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.923571][T16801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.923591][T16801] ? clear_bhb_loop+0x60/0xb0 [ 529.923616][T16801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.923636][T16801] RIP: 0033:0x7fe0db78efc9 [ 529.923655][T16801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.923673][T16801] RSP: 002b:00007fe0dc588038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 529.923695][T16801] RAX: ffffffffffffffda RBX: 00007fe0db9e5fa0 RCX: 00007fe0db78efc9 [ 529.923709][T16801] RDX: 00000000000c2d41 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 529.923722][T16801] RBP: 00007fe0dc588090 R08: 0000000000000000 R09: 0000000000000000 [ 529.923733][T16801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 529.923745][T16801] R13: 00007fe0db9e6038 R14: 00007fe0db9e5fa0 R15: 00007ffd13f335e8 [ 529.923779][T16801] [ 530.243706][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 530.402534][T16812] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3551'. [ 530.404664][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 530.429863][ T10] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 530.439745][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.448981][ T10] usb 5-1: Product: syz [ 530.453333][ T10] usb 5-1: Manufacturer: syz [ 530.463719][ T10] usb 5-1: SerialNumber: syz [ 530.468269][T16814] tmpfs: Bad value for 'size' [ 530.486782][ T10] usb 5-1: config 0 descriptor?? [ 530.626030][ T1221] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 530.778349][ T1221] usb 3-1: Using ep0 maxpacket: 32 [ 530.786775][ T1221] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 530.796422][ T1221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.822437][ T1221] usb 3-1: config 0 descriptor?? [ 530.832722][ T1221] gspca_main: sunplus-2.14.0 probing 041e:400b [ 530.926117][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 530.938251][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 530.948782][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 530.958208][ T10] usb 5-1: media controller created [ 530.984798][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 531.126859][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 531.135558][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 531.143765][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 531.167376][ T10] usb 5-1: USB disconnect, device number 39 [ 531.262206][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 531.438600][ T1221] gspca_sunplus: reg_r err -32 [ 531.443511][ T1221] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 531.687252][ T5914] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 531.866128][ T5914] usb 4-1: device descriptor read/64, error -71 [ 531.881164][T16845] tmpfs: Unknown parameter 'si' [ 532.115980][ T5914] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 532.226084][ T1221] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 532.246035][ T5914] usb 4-1: device descriptor read/64, error -71 [ 532.356323][ T5914] usb usb4-port1: attempt power cycle [ 532.387712][ T1221] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.398144][ T1221] usb 5-1: config 0 has no interfaces? [ 532.406717][ T1221] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 532.416241][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.424328][ T1221] usb 5-1: Product: syz [ 532.428592][ T1221] usb 5-1: Manufacturer: syz [ 532.433230][ T1221] usb 5-1: SerialNumber: syz [ 532.440643][ T1221] usb 5-1: config 0 descriptor?? [ 532.717213][ T5914] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 532.736578][ T5914] usb 4-1: device descriptor read/8, error -71 [ 532.985975][ T5914] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 533.006534][ T5914] usb 4-1: device descriptor read/8, error -71 [ 533.055984][ T1221] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 533.116300][ T5914] usb usb4-port1: unable to enumerate USB device [ 533.205927][ T1221] usb 2-1: Using ep0 maxpacket: 16 [ 533.214446][ T1221] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 533.223982][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.232347][ T1221] usb 2-1: Product: syz [ 533.236613][ T1221] usb 2-1: Manufacturer: syz [ 533.241303][ T1221] usb 2-1: SerialNumber: syz [ 533.250723][ T1221] usb 2-1: config 0 descriptor?? [ 533.392815][ T9] usb 3-1: USB disconnect, device number 120 [ 533.478260][ T5827] Bluetooth: hci2: unknown advertising packet type: 0x31 [ 533.478335][ T5827] Bluetooth: hci2: Dropping invalid advertising data [ 533.493192][ T5827] Bluetooth: hci2: Malformed LE Event: 0x02 [ 533.660555][ T1221] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 533.672493][ T1221] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 533.683911][ T1221] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 533.694032][ T1221] usb 2-1: media controller created [ 533.701491][T16870] tmpfs: Bad value for 'size' [ 533.719403][ T1221] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 533.866050][ T1221] zl10353_read_register: readreg error (reg=127, ret==0) [ 533.873248][ T1221] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 533.881680][ T1221] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 533.896819][ T1221] usb 2-1: USB disconnect, device number 115 [ 533.970908][ T1221] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 534.407130][T16879] netlink: 'syz.1.3575': attribute type 10 has an invalid length. [ 534.693515][T16893] comedi comedi0: Minor 3 could not be opened [ 534.780689][ T10] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 534.803303][ T10] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 535.098850][ T9] usb 5-1: USB disconnect, device number 40 [ 535.607724][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 535.778862][T16923] tmpfs: Bad value for 'size' [ 535.785972][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 535.803865][ T9] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 535.813858][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.822596][ T9] usb 5-1: Product: syz [ 535.830792][ T9] usb 5-1: Manufacturer: syz [ 535.835702][ T9] usb 5-1: SerialNumber: syz [ 535.846721][ T9] usb 5-1: config 0 descriptor?? [ 535.965508][ T5827] Bluetooth: hci4: unknown advertising packet type: 0x31 [ 535.965539][ T5827] Bluetooth: hci4: Malformed LE Event: 0x02 [ 536.259885][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 536.266207][T16939] comedi comedi0: Minor 3 could not be opened [ 536.268333][ T1221] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 536.284145][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 536.295223][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 536.304304][ T9] usb 5-1: media controller created [ 536.315972][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.333352][ T797] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 536.343342][ T797] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 536.441545][ T1221] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 536.452589][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.466027][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 536.473920][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 536.483563][ T1221] usb 4-1: Product: syz [ 536.496197][ T1221] usb 4-1: Manufacturer: syz [ 536.500972][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 536.515992][ T1221] usb 4-1: SerialNumber: syz [ 536.534848][ T1221] usb 4-1: config 0 descriptor?? [ 536.541683][ T9] usb 5-1: USB disconnect, device number 41 [ 536.667483][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 536.771699][ T1221] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 537.041327][ T9] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 537.042298][T16950] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3600'. [ 537.113678][T16952] tmpfs: Bad value for 'size' [ 537.215970][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 537.232030][ T9] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 537.262144][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.275759][ T9] usb 2-1: config 0 has no interfaces? [ 537.281404][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 537.291039][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.316812][ T9] usb 2-1: config 0 descriptor?? [ 538.046018][ T9] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 538.102841][T16972] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3609'. [ 538.172373][T16974] tmpfs: Bad value for 'size' [ 538.206003][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 538.225590][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 538.230347][T16976] comedi comedi0: Minor 3 could not be opened [ 538.242925][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.253746][ T9] usb 3-1: Product: syz [ 538.259631][ T9] usb 3-1: Manufacturer: syz [ 538.264617][ T9] usb 3-1: SerialNumber: syz [ 538.273284][ T9] usb 3-1: config 0 descriptor?? [ 538.312902][T16559] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 538.327694][T16559] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 538.683041][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 538.693774][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 538.703801][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 538.711872][ T9] usb 3-1: media controller created [ 538.730624][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 538.884546][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 538.892143][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 538.901382][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 538.914479][ T9] usb 3-1: USB disconnect, device number 121 [ 538.967972][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 538.993849][ T1221] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 539.011898][ T1221] usb 4-1: USB disconnect, device number 104 [ 539.285964][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 539.700292][ T5914] usb 2-1: USB disconnect, device number 116 [ 539.789265][T17005] comedi comedi0: Minor 3 could not be opened [ 539.862772][ T9] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 539.887086][ T9] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 540.198897][ T9] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 540.367928][ T9] usb 3-1: config index 0 descriptor too short (expected 65526, got 18) [ 540.376911][ T9] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 540.385188][ T9] usb 3-1: config 0 has no interface number 0 [ 540.393124][ T9] usb 3-1: config 0 interface 29 has no altsetting 0 [ 540.407114][ T9] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 540.416915][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.425151][ T9] usb 3-1: Product: syz [ 540.429700][ T9] usb 3-1: Manufacturer: syz [ 540.434424][ T9] usb 3-1: SerialNumber: syz [ 540.443377][ T9] usb 3-1: config 0 descriptor?? [ 540.516104][ T1221] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 540.662081][ T9] peak_usb 3-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 540.686736][ T9] peak_usb 3-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 540.707934][ T1221] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 540.729382][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.747687][ T1221] usb 4-1: Product: syz [ 540.752076][ T1221] usb 4-1: Manufacturer: syz [ 540.762116][ T1221] usb 4-1: SerialNumber: syz [ 540.778397][ T9] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 540.789771][ T1221] usb 4-1: config 0 descriptor?? [ 540.824814][ T9] usb 3-1: USB disconnect, device number 122 [ 540.902201][T17036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3631'. [ 541.001974][ T1221] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 541.189270][T17044] FAULT_INJECTION: forcing a failure. [ 541.189270][T17044] name failslab, interval 1, probability 0, space 0, times 0 [ 541.206704][T17044] CPU: 1 UID: 0 PID: 17044 Comm: syz.1.3634 Not tainted syzkaller #0 PREEMPT(full) [ 541.206733][T17044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 541.206755][T17044] Call Trace: [ 541.206764][T17044] [ 541.206773][T17044] dump_stack_lvl+0x189/0x250 [ 541.206803][T17044] ? __pfx____ratelimit+0x10/0x10 [ 541.206826][T17044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.206849][T17044] ? __pfx__printk+0x10/0x10 [ 541.206879][T17044] ? __pfx___might_resched+0x10/0x10 [ 541.206906][T17044] should_fail_ex+0x414/0x560 [ 541.206934][T17044] should_failslab+0xa8/0x100 [ 541.206967][T17044] __kmalloc_noprof+0xdf/0x800 [ 541.206992][T17044] ? kfree+0x4d/0x6d0 [ 541.207015][T17044] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 541.207049][T17044] tomoyo_realpath_from_path+0xe3/0x5d0 [ 541.207078][T17044] ? tomoyo_domain+0xd8/0x130 [ 541.207112][T17044] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 541.207135][T17044] tomoyo_path_number_perm+0x1e8/0x5a0 [ 541.207161][T17044] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 541.207224][T17044] ? __fget_files+0x2a/0x420 [ 541.207256][T17044] ? __fget_files+0x3a0/0x420 [ 541.207280][T17044] ? __fget_files+0x2a/0x420 [ 541.207309][T17044] security_file_ioctl+0xcb/0x2d0 [ 541.207332][T17044] __se_sys_ioctl+0x47/0x170 [ 541.207357][T17044] do_syscall_64+0xfa/0xfa0 [ 541.207380][T17044] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.207403][T17044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.207422][T17044] ? clear_bhb_loop+0x60/0xb0 [ 541.207447][T17044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.207466][T17044] RIP: 0033:0x7fe0db78efc9 [ 541.207484][T17044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.207502][T17044] RSP: 002b:00007fe0dc588038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 541.207525][T17044] RAX: ffffffffffffffda RBX: 00007fe0db9e5fa0 RCX: 00007fe0db78efc9 [ 541.207540][T17044] RDX: 00002000000002c0 RSI: 000000004010aeab RDI: 0000000000000005 [ 541.207553][T17044] RBP: 00007fe0dc588090 R08: 0000000000000000 R09: 0000000000000000 [ 541.207566][T17044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.207578][T17044] R13: 00007fe0db9e6038 R14: 00007fe0db9e5fa0 R15: 00007ffd13f335e8 [ 541.207613][T17044] [ 541.207622][T17044] ERROR: Out of memory at tomoyo_realpath_from_path. [ 541.506235][T16559] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 541.543914][ T5831] Bluetooth: hci4: unknown advertising packet type: 0x31 [ 541.543982][ T5831] Bluetooth: hci4: Malformed LE Event: 0x02 [ 541.656467][T16559] usb 3-1: Using ep0 maxpacket: 8 [ 541.663832][T16559] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 541.675722][T16559] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 541.690346][T16559] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 541.700534][T16559] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 541.713730][T16559] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 541.722949][T16559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.944086][T16559] usb 3-1: GET_CAPABILITIES returned 0 [ 541.952088][T16559] usbtmc 3-1:16.0: can't read capabilities [ 542.139106][T17065] FAULT_INJECTION: forcing a failure. [ 542.139106][T17065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.152530][T17065] CPU: 1 UID: 0 PID: 17065 Comm: syz.1.3643 Not tainted syzkaller #0 PREEMPT(full) [ 542.152560][T17065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 542.152571][T17065] Call Trace: [ 542.152581][T17065] [ 542.152592][T17065] dump_stack_lvl+0x189/0x250 [ 542.152622][T17065] ? __pfx____ratelimit+0x10/0x10 [ 542.152645][T17065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.152669][T17065] ? __pfx__printk+0x10/0x10 [ 542.152691][T17065] ? __might_fault+0xb0/0x130 [ 542.152728][T17065] should_fail_ex+0x414/0x560 [ 542.152753][T17065] _copy_from_user+0x2d/0xb0 [ 542.152783][T17065] ___sys_sendmsg+0x158/0x2a0 [ 542.152812][T17065] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.152875][T17065] ? __fget_files+0x2a/0x420 [ 542.152895][T17065] ? __fget_files+0x3a0/0x420 [ 542.152929][T17065] __x64_sys_sendmsg+0x19b/0x260 [ 542.152954][T17065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 542.152990][T17065] ? __pfx_ksys_write+0x10/0x10 [ 542.153029][T17065] ? do_syscall_64+0xbe/0xfa0 [ 542.153056][T17065] do_syscall_64+0xfa/0xfa0 [ 542.153076][T17065] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.153097][T17065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.153116][T17065] ? clear_bhb_loop+0x60/0xb0 [ 542.153138][T17065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.153157][T17065] RIP: 0033:0x7fe0db78efc9 [ 542.153175][T17065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.153191][T17065] RSP: 002b:00007fe0dc588038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.153212][T17065] RAX: ffffffffffffffda RBX: 00007fe0db9e5fa0 RCX: 00007fe0db78efc9 [ 542.153226][T17065] RDX: 000000000000c004 RSI: 0000200000000000 RDI: 0000000000000003 [ 542.153238][T17065] RBP: 00007fe0dc588090 R08: 0000000000000000 R09: 0000000000000000 [ 542.153250][T17065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.153261][T17065] R13: 00007fe0db9e6038 R14: 00007fe0db9e5fa0 R15: 00007ffd13f335e8 [ 542.153293][T17065] [ 542.236777][ T5827] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 542.245303][ T5831] Bluetooth: hci3: command 0x1003 tx timeout [ 542.307000][T16559] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 542.348278][T17069] binder: 17068:17069 unknown command 0 [ 542.392710][T17069] binder: 17068:17069 ioctl c0306201 200000000080 returned -22 [ 542.394919][ T9] usb 3-1: USB disconnect, device number 123 [ 542.407011][T17069] binder: 17068:17069 ioctl c0306201 2000000003c0 returned -14 [ 542.527936][T16559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 542.539566][T16559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.550660][T16559] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 542.563787][T16559] usb 5-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 542.573872][T16559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.584670][T16559] usb 5-1: config 0 descriptor?? [ 542.746112][ T983] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 542.896044][ T983] usb 2-1: Using ep0 maxpacket: 16 [ 542.905525][ T983] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 542.915107][ T983] usb 2-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 542.924391][ T983] usb 2-1: Product: syz [ 542.929747][ T983] usb 2-1: Manufacturer: syz [ 542.934441][ T983] usb 2-1: SerialNumber: syz [ 542.943946][ T983] usb 2-1: config 0 descriptor?? [ 542.955168][ T983] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 543.005497][T17061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.015568][T17061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.152580][ T983] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 543.167979][ T983] usb 2-1: USB disconnect, device number 117 [ 543.240406][T16559] usbhid 5-1:0.0: can't add hid device: -71 [ 543.246498][T16559] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 543.258724][T16559] usb 5-1: USB disconnect, device number 42 [ 543.439661][ T1221] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 543.455004][ T1221] usb 4-1: USB disconnect, device number 105 [ 543.700174][T17082] netlink: 'syz.2.3650': attribute type 10 has an invalid length. [ 543.717667][ T5827] Bluetooth: hci4: unknown advertising packet type: 0x31 [ 543.717725][ T5827] Bluetooth: hci4: Malformed LE Event: 0x02 [ 543.780546][T17086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3652'. [ 543.849190][T17090] comedi comedi0: Minor 3 could not be opened [ 543.917871][ T5914] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 543.936936][ T5914] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz1] on syz0 [ 544.115989][ T5914] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 544.266228][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 544.273392][ T5914] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 544.284801][ T5914] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 544.296609][ T5914] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 544.306718][ T5914] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.320251][ T5914] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 544.329583][ T797] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 544.337499][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.505904][ T797] usb 4-1: Using ep0 maxpacket: 16 [ 544.512916][ T797] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 544.524923][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 544.536195][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 544.550589][ T797] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 544.560236][ T5914] usb 5-1: GET_CAPABILITIES returned 0 [ 544.566142][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.574146][ T797] usb 4-1: Product: syz [ 544.578451][ T5914] usbtmc 5-1:16.0: can't read capabilities [ 544.584777][ T797] usb 4-1: Manufacturer: syz [ 544.590117][ T797] usb 4-1: SerialNumber: syz [ 544.604379][ T797] usb 4-1: config 0 descriptor?? [ 544.807981][ T9] usb 5-1: USB disconnect, device number 43 [ 544.834361][ T797] appledisplay 4-1:0.0: Error while getting initial brightness: -90 [ 544.852827][ T797] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -90 [ 545.052170][ T797] usb 4-1: USB disconnect, device number 106 [ 545.168263][T17109] netlink: 'syz.1.3660': attribute type 10 has an invalid length. [ 545.407381][T17115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3663'. [ 545.790958][ T9] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 545.944310][T17132] netlink: 'syz.3.3670': attribute type 10 has an invalid length. [ 545.958164][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.968908][ T9] usb 5-1: config 0 has no interfaces? [ 545.977719][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 545.988190][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.007420][ T9] usb 5-1: Product: syz [ 546.015133][ T9] usb 5-1: Manufacturer: syz [ 546.024405][ T9] usb 5-1: SerialNumber: syz [ 546.041061][ T9] usb 5-1: config 0 descriptor?? [ 546.335949][ T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 546.486042][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 546.493962][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 546.506239][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 546.519547][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 546.530697][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.548222][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 546.557842][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.716283][T17141] FAULT_INJECTION: forcing a failure. [ 546.716283][T17141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.734427][T17141] CPU: 1 UID: 0 PID: 17141 Comm: syz.1.3673 Not tainted syzkaller #0 PREEMPT(full) [ 546.734458][T17141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 546.734470][T17141] Call Trace: [ 546.734481][T17141] [ 546.734492][T17141] dump_stack_lvl+0x189/0x250 [ 546.734521][T17141] ? __pfx____ratelimit+0x10/0x10 [ 546.734543][T17141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.734564][T17141] ? __pfx__printk+0x10/0x10 [ 546.734582][T17141] ? __might_fault+0xb0/0x130 [ 546.734605][T17141] should_fail_ex+0x414/0x560 [ 546.734622][T17141] _copy_from_user+0x2d/0xb0 [ 546.734648][T17141] ___sys_sendmsg+0x158/0x2a0 [ 546.734676][T17141] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.734738][T17141] ? __fget_files+0x2a/0x420 [ 546.734753][T17141] ? __fget_files+0x3a0/0x420 [ 546.734774][T17141] __x64_sys_sendmsg+0x19b/0x260 [ 546.734794][T17141] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 546.734827][T17141] ? __pfx_ksys_write+0x10/0x10 [ 546.734853][T17141] ? do_syscall_64+0xbe/0xfa0 [ 546.734878][T17141] do_syscall_64+0xfa/0xfa0 [ 546.734899][T17141] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.734913][T17141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.734945][T17141] ? clear_bhb_loop+0x60/0xb0 [ 546.734965][T17141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.734980][T17141] RIP: 0033:0x7fe0db78efc9 [ 546.734996][T17141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.735008][T17141] RSP: 002b:00007fe0dc588038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.735026][T17141] RAX: ffffffffffffffda RBX: 00007fe0db9e5fa0 RCX: 00007fe0db78efc9 [ 546.735037][T17141] RDX: 0000000004000810 RSI: 00002000000000c0 RDI: 0000000000000003 [ 546.735047][T17141] RBP: 00007fe0dc588090 R08: 0000000000000000 R09: 0000000000000000 [ 546.735054][T17141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.735059][T17141] R13: 00007fe0db9e6038 R14: 00007fe0db9e5fa0 R15: 00007ffd13f335e8 [ 546.735074][T17141] [ 546.982741][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 546.996950][ T9] usbtmc 4-1:16.0: can't read capabilities [ 547.014188][T17144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3674'. [ 547.083797][T17146] netlink: 'syz.1.3675': attribute type 10 has an invalid length. [ 547.199577][ T9] usb 4-1: USB disconnect, device number 107 [ 547.345966][ T5822] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 547.496016][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 547.503089][ T5822] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 547.515340][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 547.529441][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 547.543389][ T5822] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 547.552881][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.560964][ T5822] usb 2-1: Product: syz [ 547.566006][ T5822] usb 2-1: Manufacturer: syz [ 547.570634][ T5822] usb 2-1: SerialNumber: syz [ 547.577743][ T5822] usb 2-1: config 0 descriptor?? [ 547.707197][T16559] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 547.791573][ T5822] appledisplay 2-1:0.0: Error while getting initial brightness: -90 [ 547.801857][ T5822] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -90 [ 547.841981][T17158] netlink: 'syz.3.3679': attribute type 10 has an invalid length. [ 547.866453][T16559] usb 3-1: Using ep0 maxpacket: 32 [ 547.875335][T16559] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 547.884766][T16559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.898714][T16559] usb 3-1: config 0 descriptor?? [ 547.914945][T16559] gspca_main: sunplus-2.14.0 probing 041e:400b [ 548.009449][ T5822] usb 2-1: USB disconnect, device number 118 [ 548.517317][T16559] gspca_sunplus: reg_r err -32 [ 548.522680][T16559] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 548.601275][ T5822] usb 5-1: USB disconnect, device number 44 [ 548.972846][T17184] netlink: 'syz.3.3688': attribute type 10 has an invalid length. [ 548.981180][ T5822] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 549.103429][T17190] netlink: 'syz.3.3691': attribute type 10 has an invalid length. [ 549.146148][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 549.155340][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 549.169856][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 549.183466][ T5822] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 549.192739][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.202121][ T5822] usb 5-1: Product: syz [ 549.206674][ T5822] usb 5-1: Manufacturer: syz [ 549.211396][ T5822] usb 5-1: SerialNumber: syz [ 549.229462][ T5822] usb 5-1: config 0 descriptor?? [ 549.240725][ T5822] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 549.251331][ T5822] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 549.366461][ T5916] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 549.546069][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 549.553575][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 549.565341][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 549.576807][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 549.590996][ T5916] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 549.600839][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.608945][ T5916] usb 4-1: Product: syz [ 549.613900][ T5916] usb 4-1: Manufacturer: syz [ 549.618722][ T5916] usb 4-1: SerialNumber: syz [ 549.626463][ T5916] usb 4-1: config 0 descriptor?? [ 549.641104][ T5822] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 549.648141][ T5822] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 549.835672][ T5916] appledisplay 4-1:0.0: Error while getting initial brightness: -90 [ 549.848353][ T5916] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -90 [ 549.858736][ T5822] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 549.865766][ T5822] em28xx 5-1:0.0: No AC97 audio processor [ 550.048578][ T5916] usb 4-1: USB disconnect, device number 108 [ 550.483109][ T5916] usb 3-1: USB disconnect, device number 124 [ 550.546005][ T5822] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 550.620532][T17208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3698'. [ 550.714202][ T5822] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 550.735974][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.745685][ T5822] usb 2-1: Product: syz [ 550.750305][ T5822] usb 2-1: Manufacturer: syz [ 550.754948][ T5822] usb 2-1: SerialNumber: syz [ 550.776833][ T5822] usb 2-1: config 0 descriptor?? [ 550.991246][ T5822] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 551.679678][ T9] usb 5-1: USB disconnect, device number 45 [ 551.697910][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 551.715518][ T9] em28xx 5-1:0.0: Freeing device [ 551.857109][T17229] netlink: 'syz.4.3707': attribute type 10 has an invalid length. [ 551.871938][T17229] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 551.879390][T17229] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 552.186059][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 552.244575][T17235] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 552.252711][T17235] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 552.335985][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 552.343067][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 552.356086][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 552.367403][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 552.381132][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 552.390565][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.398781][ T9] usb 5-1: Product: syz [ 552.403064][ T9] usb 5-1: Manufacturer: syz [ 552.408859][ T9] usb 5-1: SerialNumber: syz [ 552.416030][ T9] usb 5-1: config 0 descriptor?? [ 552.625815][ T9] appledisplay 5-1:0.0: Error while getting initial brightness: -90 [ 552.637640][ T9] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -90 [ 552.826004][ T5914] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 552.858069][ T9] usb 5-1: USB disconnect, device number 46 [ 552.968437][ T5914] usb 3-1: device descriptor read/64, error -71 [ 553.050651][T17246] program syz.3.3715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 553.216025][ T5914] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 553.227059][ T5822] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 553.246717][ T5822] usb 2-1: USB disconnect, device number 119 [ 553.345967][ T5914] usb 3-1: device descriptor read/64, error -71 [ 553.456754][ T5914] usb usb3-port1: attempt power cycle [ 553.796112][ T5914] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 553.837159][ T5914] usb 3-1: device descriptor read/8, error -71 [ 554.086044][ T5914] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 554.106103][ T5822] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 554.115181][ T5914] usb 3-1: device descriptor read/8, error -71 [ 554.126203][ T9] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 554.237010][ T5914] usb usb3-port1: unable to enumerate USB device [ 554.267619][ T5822] usb 2-1: Using ep0 maxpacket: 8 [ 554.274667][ T5822] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 554.285542][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.286772][ T5822] usb 2-1: config 0 has no interface number 0 [ 554.302312][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.308381][ T5822] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 554.315119][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 554.333118][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.337989][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.343332][ T5822] usb 2-1: Product: syz [ 554.352430][ T9] usb 4-1: Product: syz [ 554.354436][ T5822] usb 2-1: Manufacturer: syz [ 554.358287][ T9] usb 4-1: Manufacturer: syz [ 554.366059][T17277] netlink: 'syz.4.3728': attribute type 10 has an invalid length. [ 554.367760][ T9] usb 4-1: SerialNumber: syz [ 554.376697][ T5822] usb 2-1: SerialNumber: syz [ 554.384995][ T9] usb 4-1: config 0 descriptor?? [ 554.403744][ T5822] usb 2-1: config 0 descriptor?? [ 554.416465][ T5822] usb 2-1: selecting invalid altsetting 2 [ 554.422399][ T5822] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 554.625991][ T5822] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 554.786107][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 554.793650][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 554.808322][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 554.820326][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 554.834530][ T5822] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 554.843779][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.851824][ T5822] usb 5-1: Product: syz [ 554.856047][ T5822] usb 5-1: Manufacturer: syz [ 554.860754][ T5822] usb 5-1: SerialNumber: syz [ 554.868043][ T5822] usb 5-1: config 0 descriptor?? [ 555.076644][ T5822] appledisplay 5-1:0.0: Error while getting initial brightness: -90 [ 555.085965][ T5822] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -90 [ 555.291047][ T5822] usb 5-1: USB disconnect, device number 47 [ 555.935988][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 556.086083][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 556.095271][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 556.104700][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.112766][ T9] usb 3-1: Product: syz [ 556.117374][ T9] usb 3-1: Manufacturer: syz [ 556.122222][ T9] usb 3-1: SerialNumber: syz [ 556.129655][ T9] usb 3-1: config 0 descriptor?? [ 556.537553][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 556.548229][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 556.558725][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 556.567397][ T9] usb 3-1: media controller created [ 556.586434][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.875771][ T5916] usb 2-1: USB disconnect, device number 120 [ 556.943960][ T5822] usb 4-1: USB disconnect, device number 109 [ 557.094379][T17307] FAULT_INJECTION: forcing a failure. [ 557.094379][T17307] name failslab, interval 1, probability 0, space 0, times 0 [ 557.112424][T17307] CPU: 1 UID: 0 PID: 17307 Comm: syz.1.3738 Not tainted syzkaller #0 PREEMPT(full) [ 557.112452][T17307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 557.112465][T17307] Call Trace: [ 557.112474][T17307] [ 557.112483][T17307] dump_stack_lvl+0x189/0x250 [ 557.112513][T17307] ? __pfx____ratelimit+0x10/0x10 [ 557.112535][T17307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.112558][T17307] ? __pfx__printk+0x10/0x10 [ 557.112587][T17307] ? __pfx___might_resched+0x10/0x10 [ 557.112605][T17307] ? fs_reclaim_acquire+0x7d/0x100 [ 557.112630][T17307] should_fail_ex+0x414/0x560 [ 557.112657][T17307] should_failslab+0xa8/0x100 [ 557.112679][T17307] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 557.112705][T17307] ? end_current_label_crit_section+0x152/0x180 [ 557.112731][T17307] ? sock_alloc_inode+0x28/0xc0 [ 557.112754][T17307] ? __pfx_sock_alloc_inode+0x10/0x10 [ 557.112770][T17307] sock_alloc_inode+0x28/0xc0 [ 557.112788][T17307] alloc_inode+0x6a/0x1b0 [ 557.112814][T17307] __sock_create+0x12d/0x9f0 [ 557.112831][T17307] ? fput+0xa0/0xd0 [ 557.112865][T17307] __sys_socket+0xd7/0x1b0 [ 557.112890][T17307] __x64_sys_socket+0x7a/0x90 [ 557.112912][T17307] do_syscall_64+0xfa/0xfa0 [ 557.112932][T17307] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.112994][T17307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.113013][T17307] ? clear_bhb_loop+0x60/0xb0 [ 557.113036][T17307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.113055][T17307] RIP: 0033:0x7fe0db78efc9 [ 557.113072][T17307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.113088][T17307] RSP: 002b:00007fe0dc588038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 557.113111][T17307] RAX: ffffffffffffffda RBX: 00007fe0db9e5fa0 RCX: 00007fe0db78efc9 [ 557.113125][T17307] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000008 [ 557.113137][T17307] RBP: 00007fe0dc588090 R08: 0000000000000000 R09: 0000000000000000 [ 557.113150][T17307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.113161][T17307] R13: 00007fe0db9e6038 R14: 00007fe0db9e5fa0 R15: 00007ffd13f335e8 [ 557.113196][T17307] [ 557.113207][T17307] socket: no more sockets [ 557.147825][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 557.350300][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 557.374976][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 557.395338][ T9] usb 3-1: USB disconnect, device number 3 [ 557.464507][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 557.565555][T17320] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3741'. [ 557.795420][T17329] comedi comedi0: Minor 3 could not be opened [ 557.886996][ T9] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 557.916251][ T9] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 558.113855][ T5822] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 558.267960][ T5822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.280478][ T5822] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 558.292557][ T5822] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 558.302366][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.310996][ T5822] usb 3-1: Product: syz [ 558.317304][ T5822] usb 3-1: Manufacturer: syz [ 558.322036][ T5822] usb 3-1: SerialNumber: syz [ 558.342158][ T5822] usb 3-1: config 0 descriptor?? [ 558.361652][T17348] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3752'. [ 558.676114][ T9] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 558.735990][ T5822] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 558.847732][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 558.866804][ T9] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 558.877173][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.885223][ T9] usb 2-1: Product: syz [ 558.889778][ T9] usb 2-1: Manufacturer: syz [ 558.894420][ T9] usb 2-1: SerialNumber: syz [ 558.898363][ T5822] usb 4-1: Using ep0 maxpacket: 16 [ 558.913419][ T9] usb 2-1: config 0 descriptor?? [ 558.917253][ T5822] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 558.928158][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.938029][ T5822] usb 4-1: Product: syz [ 558.942585][ T5822] usb 4-1: Manufacturer: syz [ 558.947449][ T5822] usb 4-1: SerialNumber: syz [ 558.955307][ T5822] usb 4-1: config 0 descriptor?? [ 559.331770][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 559.342691][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 559.353095][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 559.361334][ T9] usb 2-1: media controller created [ 559.368204][ T5822] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 559.380462][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 559.380846][ T5822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 559.403472][ T5822] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 559.411604][ T5822] usb 4-1: media controller created [ 559.423076][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 559.570299][ T5822] zl10353_read_register: readreg error (reg=127, ret==0) [ 559.585954][ T5822] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 559.594250][ T5822] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 559.608315][ T5822] usb 4-1: USB disconnect, device number 110 [ 559.689627][ T5822] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 559.936527][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 559.943833][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 559.951833][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 559.983451][ T9] usb 2-1: USB disconnect, device number 121 [ 560.013472][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 560.131678][T17373] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 560.139016][T17373] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 560.222166][ T5827] Bluetooth: hci1: link tx timeout [ 560.228089][ T5827] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 560.239408][ T5827] Bluetooth: hci1: link tx timeout [ 560.244628][ T5827] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 560.255315][ T5827] Bluetooth: hci1: link tx timeout [ 560.262228][ T5827] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 560.272100][ T5827] Bluetooth: hci1: link tx timeout [ 560.277456][ T5827] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 560.332961][T17379] comedi comedi0: Minor 3 could not be opened [ 560.480927][T17384] netlink: 'syz.4.3765': attribute type 10 has an invalid length. [ 560.709908][T17392] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3768'. [ 560.758653][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 560.888012][ T5916] usb 3-1: USB disconnect, device number 4 [ 560.927187][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 560.934773][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 560.940618][T17397] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 560.947614][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 560.964920][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 560.965046][T17397] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 560.979603][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 560.993001][ T5822] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 561.002631][T17397] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 561.011268][T17397] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 561.018053][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.018395][T17397] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 561.026101][ T9] usb 5-1: Product: syz [ 561.026122][ T9] usb 5-1: Manufacturer: syz [ 561.026138][ T9] usb 5-1: SerialNumber: syz [ 561.036585][ T9] usb 5-1: config 0 descriptor?? [ 561.041946][T17397] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 561.059047][T17397] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 561.065644][T17397] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 561.073069][T17397] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 561.081735][T17397] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 561.088644][T17397] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 561.096764][T17397] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 561.104991][T17397] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 561.113261][T17397] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 561.122645][T17397] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 561.129739][T17397] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 561.136452][T17397] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 561.143147][T17397] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 561.150081][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 561.151451][T17397] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 561.159171][ T5822] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 561.164547][T17397] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 561.180014][T17397] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 561.183431][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.187747][T17397] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 561.203317][T17397] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 561.206792][ T5822] usb 2-1: Product: syz [ 561.215453][ T5822] usb 2-1: Manufacturer: syz [ 561.230161][ T5822] usb 2-1: SerialNumber: syz [ 561.239843][ T5822] usb 2-1: config 0 descriptor?? [ 561.254245][ T9] appledisplay 5-1:0.0: Error while getting initial brightness: -90 [ 561.276252][ T9] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -90 [ 561.467692][ T9] usb 5-1: USB disconnect, device number 48 [ 561.678912][ T5822] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 561.688454][ T5822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 561.699631][ T5822] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 561.707624][ T5822] usb 2-1: media controller created [ 561.720014][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 561.883041][ T5822] zl10353_read_register: readreg error (reg=127, ret==0) [ 561.890519][ T5822] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 561.900797][ T5822] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 561.913396][ T5822] usb 2-1: USB disconnect, device number 122 [ 561.983715][ T5822] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 562.111531][T17411] mac80211_hwsim hwsim23 syzkaller0: left promiscuous mode [ 562.119269][T17411] mac80211_hwsim hwsim23 syzkaller0: left allmulticast mode [ 562.286076][ T797] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 562.316114][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 562.387136][T17419] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3778'. [ 562.436242][ T797] usb 5-1: Using ep0 maxpacket: 8 [ 562.469131][ T797] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 562.487848][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 562.496095][ T797] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.518139][ T797] usb 5-1: config 0 has no interfaces? [ 562.523809][ T797] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 562.548131][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.569543][ T797] usb 5-1: config 0 descriptor?? [ 562.573891][T17426] comedi comedi0: comedi_bond: 3:0 3:15 3:19 3:20 3:21 3:26 attached, 144 channels from 6 devices [ 562.681461][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 562.702482][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 562.721144][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 562.744649][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 562.783490][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 562.815450][ T797] usb 5-1: USB disconnect, device number 49 [ 562.827368][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.833946][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.853480][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.870609][ T9] usb 3-1: Product: syz [ 562.880946][ T9] usb 3-1: Manufacturer: ʖ맜嵿අí–ê¿è‘£ä¥‚橲絇ᛲ䧻î¨é˜­ã­£æ‘´ê½¡ï¾¾Ï¤âº˜èŸ â£¨æ®åˆ–ב얻Ϻ㛚ᆳ꫻ï´ê½®å‹á›’㛧늕뚙ìžâ¡Žë£ˆï‘¥è¶šíˆ›ä…·ì¼‹ä—ᠭ牯âµìƒ à¼©ã¦”켂븰虜웰묉騕櫴쳩ﶌ婌骵綠暪艶늈鄻谇â³ì ™à³°å¼¡ã¦¥áš‚ê°çµï´¬â™žá»Ÿé‹¸ä¸ˆî‹”㺕㞠촥뷢哸햡áà·¶æ†§é¸ â æ…°ï—¯ä†´áº¼æ«·äª·âœˆé¿žç¶¸é—µãž¢í»â¡Žä˜¹ë›€ï¼’ႌ砛蜇ç‹ã…›á±† [ 562.959408][ T9] usb 3-1: SerialNumber: syz [ 563.204026][ T9] usb 3-1: 0:2 : does not exist [ 563.256339][ T9] usb 3-1: USB disconnect, device number 5 [ 563.288521][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.715956][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 563.866184][ T9] usb 5-1: device descriptor read/64, error -71 [ 564.127970][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 564.268254][T16559] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 564.277659][ T9] usb 5-1: device descriptor read/64, error -71 [ 564.387025][ T9] usb usb5-port1: attempt power cycle [ 564.435910][T16559] usb 4-1: Using ep0 maxpacket: 16 [ 564.447229][ T983] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 564.474339][T16559] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 564.494440][T16559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.514665][T16559] usb 4-1: Product: syz [ 564.519479][T16559] usb 4-1: Manufacturer: syz [ 564.524124][T16559] usb 4-1: SerialNumber: syz [ 564.548087][T16559] usb 4-1: config 0 descriptor?? [ 564.625961][ T983] usb 3-1: Using ep0 maxpacket: 8 [ 564.633795][ T983] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 564.655780][ T983] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.680344][ T983] usb 3-1: config 0 has no interfaces? [ 564.688274][ T983] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 564.697805][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.716763][ T983] usb 3-1: config 0 descriptor?? [ 564.746072][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 564.790773][ T9] usb 5-1: device descriptor read/8, error -71 [ 564.876484][ T797] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 564.937311][ T983] usb 3-1: USB disconnect, device number 6 [ 564.963599][T16559] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 564.987915][T16559] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 564.999160][T16559] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 565.009356][T16559] usb 4-1: media controller created [ 565.032970][T16559] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 565.041840][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 565.050504][ T797] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 565.068600][ T9] usb 5-1: device descriptor read/8, error -71 [ 565.076130][ T797] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 565.087480][ T797] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 565.098165][ T797] usb 2-1: config 48 interface 0 altsetting 98 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 565.113595][ T797] usb 2-1: config 48 interface 0 has no altsetting 0 [ 565.123866][ T797] usb 2-1: New USB device found, idVendor=1784, idProduct=6a06, bcdDevice=bb.b9 [ 565.133724][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.142086][ T797] usb 2-1: Product: syz [ 565.146769][ T797] usb 2-1: Manufacturer: syz [ 565.151698][ T797] usb 2-1: SerialNumber: syz [ 565.169107][T16559] zl10353_read_register: readreg error (reg=127, ret==0) [ 565.186038][T16559] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 565.194837][ T9] usb usb5-port1: unable to enumerate USB device [ 565.205533][T16559] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 565.228620][T16559] usb 4-1: USB disconnect, device number 111 [ 565.293771][T16559] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 565.420528][T17493] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 565.516883][ T797] usb 2-1: USB disconnect, device number 123 [ 565.996413][ T797] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 566.168285][ T797] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.197277][ T797] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.232281][ T797] usb 4-1: config 0 interface 0 has no altsetting 0 [ 566.244120][ T797] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 566.256370][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.269189][ T797] usb 4-1: config 0 descriptor?? [ 566.656437][ T797] usbhid 4-1:0.0: can't add hid device: -71 [ 566.662736][ T797] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 566.699064][ T797] usb 4-1: USB disconnect, device number 112 [ 566.811864][T17563] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3798'. [ 566.967723][T17572] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3800'. [ 567.383591][T17597] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3806'. [ 567.415998][ T797] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 567.487662][T17602] UHID_CREATE from different security context by process 867 (syz.1.3807), this is not allowed. [ 567.576068][ T797] usb 3-1: device descriptor read/64, error -71 [ 567.674191][T17610] FAULT_INJECTION: forcing a failure. [ 567.674191][T17610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.697975][T17610] CPU: 0 UID: 0 PID: 17610 Comm: syz.3.3809 Not tainted syzkaller #0 PREEMPT(full) [ 567.698004][T17610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 567.698016][T17610] Call Trace: [ 567.698024][T17610] [ 567.698033][T17610] dump_stack_lvl+0x189/0x250 [ 567.698062][T17610] ? __pfx____ratelimit+0x10/0x10 [ 567.698090][T17610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.698113][T17610] ? __pfx__printk+0x10/0x10 [ 567.698136][T17610] ? __might_fault+0xb0/0x130 [ 567.698175][T17610] should_fail_ex+0x414/0x560 [ 567.698210][T17610] _copy_from_user+0x2d/0xb0 [ 567.698239][T17610] ___sys_sendmsg+0x158/0x2a0 [ 567.698269][T17610] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.698333][T17610] ? __fget_files+0x2a/0x420 [ 567.698357][T17610] ? __fget_files+0x3a0/0x420 [ 567.698394][T17610] __x64_sys_sendmsg+0x19b/0x260 [ 567.698422][T17610] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 567.698458][T17610] ? __pfx_ksys_write+0x10/0x10 [ 567.698485][T17610] ? do_syscall_64+0xbe/0xfa0 [ 567.698513][T17610] do_syscall_64+0xfa/0xfa0 [ 567.698534][T17610] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.698557][T17610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.698576][T17610] ? clear_bhb_loop+0x60/0xb0 [ 567.698599][T17610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.698618][T17610] RIP: 0033:0x7fe20ff8efc9 [ 567.698635][T17610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.698652][T17610] RSP: 002b:00007fe210e2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.698673][T17610] RAX: ffffffffffffffda RBX: 00007fe2101e5fa0 RCX: 00007fe20ff8efc9 [ 567.698687][T17610] RDX: 0000000000008010 RSI: 0000200000000180 RDI: 0000000000000004 [ 567.698700][T17610] RBP: 00007fe210e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 567.698712][T17610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.698724][T17610] R13: 00007fe2101e6038 R14: 00007fe2101e5fa0 R15: 00007fff61ad0c08 [ 567.698757][T17610] [ 567.981088][ T5822] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 567.996101][ T797] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 568.120990][T17619] tipc: Enabling of bearer rejected, already enabled [ 568.129480][ T797] usb 3-1: device descriptor read/64, error -71 [ 568.178429][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 568.191410][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 568.218868][ T5822] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 568.228636][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.237802][ T797] usb usb3-port1: attempt power cycle [ 568.257943][ T5822] usb 5-1: Product: syz [ 568.262194][ T5822] usb 5-1: Manufacturer: syz [ 568.269077][T17625] FAULT_INJECTION: forcing a failure. [ 568.269077][T17625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.282903][ T5822] usb 5-1: SerialNumber: syz [ 568.289923][T17625] CPU: 1 UID: 0 PID: 17625 Comm: syz.3.3812 Not tainted syzkaller #0 PREEMPT(full) [ 568.289950][T17625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 568.289961][T17625] Call Trace: [ 568.289968][T17625] [ 568.289977][T17625] dump_stack_lvl+0x189/0x250 [ 568.290006][T17625] ? __pfx____ratelimit+0x10/0x10 [ 568.290029][T17625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.290050][T17625] ? __pfx__printk+0x10/0x10 [ 568.290071][T17625] ? __might_fault+0xb0/0x130 [ 568.290107][T17625] should_fail_ex+0x414/0x560 [ 568.290134][T17625] _copy_from_user+0x2d/0xb0 [ 568.290160][T17625] ___sys_sendmsg+0x158/0x2a0 [ 568.290188][T17625] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.290261][T17625] ? __fget_files+0x2a/0x420 [ 568.290287][T17625] ? __fget_files+0x3a0/0x420 [ 568.290320][T17625] __x64_sys_sendmsg+0x19b/0x260 [ 568.290348][T17625] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 568.290385][T17625] ? __pfx_ksys_write+0x10/0x10 [ 568.290412][T17625] ? do_syscall_64+0xbe/0xfa0 [ 568.290439][T17625] do_syscall_64+0xfa/0xfa0 [ 568.290460][T17625] ? lockdep_hardirqs_on+0x9c/0x150 [ 568.290483][T17625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.290502][T17625] ? clear_bhb_loop+0x60/0xb0 [ 568.290526][T17625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.290546][T17625] RIP: 0033:0x7fe20ff8efc9 [ 568.290563][T17625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.290579][T17625] RSP: 002b:00007fe210e2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.290601][T17625] RAX: ffffffffffffffda RBX: 00007fe2101e5fa0 RCX: 00007fe20ff8efc9 [ 568.290616][T17625] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 568.290629][T17625] RBP: 00007fe210e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 568.290642][T17625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.290654][T17625] R13: 00007fe2101e6038 R14: 00007fe2101e5fa0 R15: 00007fff61ad0c08 [ 568.290687][T17625] [ 568.499885][ T5822] usb 5-1: config 0 descriptor?? [ 568.564678][ T5822] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress ca [ 568.800099][ T5822] usb 5-1: USB disconnect, device number 54 [ 568.820447][T17640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3815'. [ 568.846065][ T797] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 568.890768][ T797] usb 3-1: device descriptor read/8, error -71 [ 569.166562][ T797] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 569.206880][ T797] usb 3-1: device descriptor read/8, error -71 [ 569.319889][ T797] usb usb3-port1: unable to enumerate USB device [ 569.366283][ T5914] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 569.414739][T17658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3820'. [ 569.415049][T17659] FAULT_INJECTION: forcing a failure. [ 569.415049][T17659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.462915][T17659] CPU: 0 UID: 0 PID: 17659 Comm: syz.1.3819 Not tainted syzkaller #0 PREEMPT(full) [ 569.462942][T17659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 569.462956][T17659] Call Trace: [ 569.462965][T17659] [ 569.462975][T17659] dump_stack_lvl+0x189/0x250 [ 569.463006][T17659] ? __pfx____ratelimit+0x10/0x10 [ 569.463030][T17659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.463054][T17659] ? __pfx__printk+0x10/0x10 [ 569.463078][T17659] ? __might_fault+0xb0/0x130 [ 569.463119][T17659] should_fail_ex+0x414/0x560 [ 569.463148][T17659] _copy_to_iter+0x1de/0x1790 [ 569.463187][T17659] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 569.463212][T17659] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.463240][T17659] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 569.463262][T17659] ? __pfx__copy_to_iter+0x10/0x10 [ 569.463284][T17659] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 569.463319][T17659] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 569.463354][T17659] __skb_datagram_iter+0xf8/0x990 [ 569.463384][T17659] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 569.463422][T17659] skb_copy_datagram_iter+0xc5/0x230 [ 569.463453][T17659] netlink_recvmsg+0x2ab/0xa30 [ 569.463490][T17659] ? __pfx_netlink_recvmsg+0x10/0x10 [ 569.463521][T17659] ? aa_sock_msg_perm+0xf1/0x1d0 [ 569.463549][T17659] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 569.463568][T17659] ? security_socket_recvmsg+0x7e/0x2e0 [ 569.463598][T17659] ? __pfx_netlink_recvmsg+0x10/0x10 [ 569.463623][T17659] sock_recvmsg+0x22c/0x270 [ 569.463648][T17659] sock_read_iter+0x231/0x2f0 [ 569.463680][T17659] ? __pfx_sock_read_iter+0x10/0x10 [ 569.463721][T17659] ? bpf_lsm_file_permission+0x9/0x20 [ 569.463743][T17659] ? security_file_permission+0x75/0x290 [ 569.463774][T17659] vfs_read+0x55a/0xa30 [ 569.463806][T17659] ? __pfx_vfs_read+0x10/0x10 [ 569.463840][T17659] ? __fget_files+0x2a/0x420 [ 569.463877][T17659] ksys_read+0x145/0x250 [ 569.463902][T17659] ? __pfx_ksys_read+0x10/0x10 [ 569.463926][T17659] ? do_syscall_64+0xbe/0xfa0 [ 569.463955][T17659] do_syscall_64+0xfa/0xfa0 [ 569.463977][T17659] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.464000][T17659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.464019][T17659] ? clear_bhb_loop+0x60/0xb0 [ 569.464045][T17659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.464064][T17659] RIP: 0033:0x7fe0db78efc9 [ 569.464082][T17659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.464099][T17659] RSP: 002b:00007fe0dc567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 569.464121][T17659] RAX: ffffffffffffffda RBX: 00007fe0db9e6090 RCX: 00007fe0db78efc9 [ 569.464136][T17659] RDX: 0000000000000026 RSI: 0000200000000080 RDI: 0000000000000004 [ 569.464149][T17659] RBP: 00007fe0dc567090 R08: 0000000000000000 R09: 0000000000000000 [ 569.464171][T17659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.464183][T17659] R13: 00007fe0db9e6128 R14: 00007fe0db9e6090 R15: 00007ffd13f335e8 [ 569.464217][T17659] [ 569.788370][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 569.797455][ T5914] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 569.809849][ T5914] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 569.819812][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.864926][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 569.891772][ T5914] usb 4-1: config 0 has no interface number 0 [ 569.905296][ T5914] usb 4-1: config 0 interface 125 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 569.951959][ T5914] usb 4-1: config 0 interface 125 has no altsetting 0 [ 569.965045][ T5914] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 569.975908][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.983963][ T5914] usb 4-1: Product: syz [ 570.029895][ T5914] usb 4-1: Manufacturer: syz [ 570.047931][ T5914] usb 4-1: SerialNumber: syz [ 570.077745][ T5914] usb 4-1: config 0 descriptor?? [ 570.338321][T17649] tipc: Enabling of bearer rejected, already enabled [ 570.418560][T16559] usb 4-1: USB disconnect, device number 113 [ 570.771719][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3826'. [ 570.803070][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3826'. [ 570.815945][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3826'. [ 571.236485][ T5914] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 571.409032][ T5914] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 571.432508][ T5914] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 571.444354][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.452897][ T5914] usb 3-1: Product: syz [ 571.457854][ T5914] usb 3-1: Manufacturer: syz [ 571.463438][ T5914] usb 3-1: SerialNumber: syz [ 571.472651][ T5914] usb 3-1: config 0 descriptor?? [ 571.496113][ T5916] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 571.665934][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 571.673426][ T5916] usb 2-1: config 0 has no interfaces? [ 571.682187][ T5916] usb 2-1: New USB device found, idVendor=17a8, idProduct=0011, bcdDevice=9a.8c [ 571.698361][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.707587][ T5916] usb 2-1: Product: syz [ 571.722709][ T5916] usb 2-1: Manufacturer: syz [ 571.728212][T17730] FAULT_INJECTION: forcing a failure. [ 571.728212][T17730] name failslab, interval 1, probability 0, space 0, times 0 [ 571.749952][ T5916] usb 2-1: SerialNumber: syz [ 571.768212][ T5916] usb 2-1: config 0 descriptor?? [ 571.768500][T17730] CPU: 0 UID: 0 PID: 17730 Comm: syz.4.3835 Not tainted syzkaller #0 PREEMPT(full) [ 571.768524][T17730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 571.768536][T17730] Call Trace: [ 571.768543][T17730] [ 571.768552][T17730] dump_stack_lvl+0x189/0x250 [ 571.768578][T17730] ? __pfx____ratelimit+0x10/0x10 [ 571.768599][T17730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.768619][T17730] ? __pfx__printk+0x10/0x10 [ 571.768644][T17730] ? __pfx___might_resched+0x10/0x10 [ 571.768668][T17730] should_fail_ex+0x414/0x560 [ 571.768693][T17730] should_failslab+0xa8/0x100 [ 571.768714][T17730] __kmalloc_noprof+0xdf/0x800 [ 571.768736][T17730] ? kfree+0x4d/0x6d0 [ 571.768756][T17730] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 571.768785][T17730] tomoyo_realpath_from_path+0xe3/0x5d0 [ 571.768810][T17730] ? tomoyo_domain+0xd8/0x130 [ 571.768839][T17730] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 571.768860][T17730] tomoyo_path_number_perm+0x1e8/0x5a0 [ 571.768891][T17730] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 571.768950][T17730] ? __fget_files+0x2a/0x420 [ 571.768978][T17730] ? __fget_files+0x3a0/0x420 [ 571.768998][T17730] ? __fget_files+0x2a/0x420 [ 571.769023][T17730] security_file_ioctl+0xcb/0x2d0 [ 571.769045][T17730] __se_sys_ioctl+0x47/0x170 [ 571.769066][T17730] do_syscall_64+0xfa/0xfa0 [ 571.769086][T17730] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.769107][T17730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.769124][T17730] ? clear_bhb_loop+0x60/0xb0 [ 571.769145][T17730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.769162][T17730] RIP: 0033:0x7f8efe78efc9 [ 571.769179][T17730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.769195][T17730] RSP: 002b:00007f8eff65e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.769215][T17730] RAX: ffffffffffffffda RBX: 00007f8efe9e6090 RCX: 00007f8efe78efc9 [ 571.769229][T17730] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 571.769240][T17730] RBP: 00007f8eff65e090 R08: 0000000000000000 R09: 0000000000000000 [ 571.769252][T17730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.769263][T17730] R13: 00007f8efe9e6128 R14: 00007f8efe9e6090 R15: 00007ffde3028008 [ 571.769294][T17730] [ 571.769302][T17730] ERROR: Out of memory at tomoyo_realpath_from_path. [ 572.145955][ T5914] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 572.344410][ T5914] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 572.360475][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.370620][T17750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.371012][ T5914] usb 4-1: Product: syz [ 572.386146][ T5914] usb 4-1: Manufacturer: syz [ 572.390802][ T5914] usb 4-1: SerialNumber: syz [ 572.399035][T17750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.981119][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 573.006541][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 573.020005][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 573.033646][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 573.057977][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 573.087299][ T5914] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 573.139686][ T5914] usb 4-1: USB disconnect, device number 114 [ 573.877735][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 574.054793][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 574.059938][ T5914] usb 3-1: USB disconnect, device number 11 [ 574.068443][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.103933][ T9] usb 5-1: Product: syz [ 574.125356][ T9] usb 5-1: Manufacturer: syz [ 574.144688][ T9] usb 5-1: SerialNumber: syz [ 574.177306][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 574.207866][ T983] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 574.310803][ T9] usb 2-1: USB disconnect, device number 124 [ 574.725985][T16559] usb 5-1: USB disconnect, device number 55 [ 575.284051][ T983] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 575.296181][ T983] ath9k_htc: Failed to initialize the device [ 575.324275][T16559] usb 5-1: ath9k_htc: USB layer deinitialized [ 575.921163][T17869] netlink: 'syz.4.3861': attribute type 10 has an invalid length. [ 576.186029][ T5914] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 576.213038][T17879] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3865'. [ 576.375981][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 576.397045][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 576.416942][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 576.455974][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 576.499415][ T5914] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 576.517634][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.545390][ T5914] usb 5-1: Product: syz [ 576.555710][ T5914] usb 5-1: Manufacturer: syz [ 576.579498][ T5914] usb 5-1: SerialNumber: syz [ 576.589709][ T5914] usb 5-1: config 0 descriptor?? [ 576.640890][T17894] FAULT_INJECTION: forcing a failure. [ 576.640890][T17894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.657823][T17894] CPU: 1 UID: 0 PID: 17894 Comm: syz.1.3870 Not tainted syzkaller #0 PREEMPT(full) [ 576.657855][T17894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 576.657866][T17894] Call Trace: [ 576.657876][T17894] [ 576.657886][T17894] dump_stack_lvl+0x189/0x250 [ 576.657922][T17894] ? __pfx____ratelimit+0x10/0x10 [ 576.657946][T17894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.657971][T17894] ? __pfx__printk+0x10/0x10 [ 576.657994][T17894] ? __might_fault+0xb0/0x130 [ 576.658033][T17894] should_fail_ex+0x414/0x560 [ 576.658062][T17894] _copy_from_user+0x2d/0xb0 [ 576.658092][T17894] input_event_from_user+0xb2/0x280 [ 576.658128][T17894] ? __pfx_input_event_from_user+0x10/0x10 [ 576.658162][T17894] ? input_inject_event+0xb6/0x340 [ 576.658185][T17894] evdev_write+0x2a6/0x480 [ 576.658217][T17894] ? __pfx_evdev_write+0x10/0x10 [ 576.658242][T17894] ? bpf_lsm_file_permission+0x9/0x20 [ 576.658264][T17894] ? security_file_permission+0x75/0x290 [ 576.658286][T17894] ? rw_verify_area+0x255/0x4d0 [ 576.658307][T17894] ? __lock_acquire+0xab9/0xd20 [ 576.658333][T17894] ? __pfx_evdev_write+0x10/0x10 [ 576.658361][T17894] vfs_write+0x27e/0xb30 [ 576.658393][T17894] ? __pfx_vfs_write+0x10/0x10 [ 576.658418][T17894] ? __fget_files+0x2a/0x420 [ 576.658448][T17894] ? __fget_files+0x2a/0x420 [ 576.658472][T17894] ? __fget_files+0x3a0/0x420 [ 576.658496][T17894] ? __fget_files+0x2a/0x420 [ 576.658532][T17894] ksys_write+0x145/0x250 [ 576.658558][T17894] ? __pfx_ksys_write+0x10/0x10 [ 576.658586][T17894] ? do_syscall_64+0xbe/0xfa0 [ 576.658615][T17894] do_syscall_64+0xfa/0xfa0 [ 576.658636][T17894] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.658660][T17894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.658680][T17894] ? clear_bhb_loop+0x60/0xb0 [ 576.658705][T17894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.658724][T17894] RIP: 0033:0x7fe0db78efc9 [ 576.658743][T17894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.658761][T17894] RSP: 002b:00007fe0dc588038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 576.658784][T17894] RAX: ffffffffffffffda RBX: 00007fe0db9e5fa0 RCX: 00007fe0db78efc9 [ 576.658798][T17894] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 576.658811][T17894] RBP: 00007fe0dc588090 R08: 0000000000000000 R09: 0000000000000000 [ 576.658824][T17894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.658837][T17894] R13: 00007fe0db9e6038 R14: 00007fe0db9e5fa0 R15: 00007ffd13f335e8 [ 576.658869][T17894] [ 577.023336][ T5914] appledisplay 5-1:0.0: Error while getting initial brightness: -90 [ 577.036840][ T5914] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -90 [ 577.059526][T17898] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3872'. [ 577.078697][T17898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3872'. [ 577.229434][ T5914] usb 5-1: USB disconnect, device number 56 [ 577.539949][T17916] netdevsim netdevsim1: Direct firmware load for ÿ failed with error -2 [ 577.549857][T17916] netdevsim netdevsim1: Falling back to sysfs fallback for: ÿ [ 577.706130][T16559] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 577.858243][T16559] usb 4-1: config 0 has an invalid interface number: 139 but max is 0 [ 577.867994][T16559] usb 4-1: config 0 has no interface number 0 [ 577.874998][T16559] usb 4-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 577.890041][T16559] usb 4-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 577.902219][T16559] usb 4-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 577.913988][T16559] usb 4-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 577.929312][T16559] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 577.941270][T16559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.949433][T16559] usb 4-1: Product: syz [ 577.953629][T16559] usb 4-1: Manufacturer: syz [ 577.958347][T16559] usb 4-1: SerialNumber: syz [ 577.966231][T16559] usb 4-1: config 0 descriptor?? [ 577.972054][T17911] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 577.981760][T17911] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 578.158534][ T5914] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 578.320629][ T5914] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 578.330411][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.338660][ T5914] usb 3-1: Product: syz [ 578.343081][ T5914] usb 3-1: Manufacturer: syz [ 578.348001][ T5914] usb 3-1: SerialNumber: syz [ 578.355204][ T5914] usb 3-1: config 0 descriptor?? [ 578.566091][ T5914] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 578.778344][ T5914] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 578.872659][T17917] netdevsim netdevsim1: Direct firmware load for ÿ failed with error -2 [ 578.882089][T17917] netdevsim netdevsim1: Falling back to sysfs fallback for: ÿ [ 579.215995][ T983] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 579.368049][ T983] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.383732][ T983] usb 2-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.397542][ T983] usb 2-1: config 0 interface 0 has no altsetting 0 [ 579.404458][ T983] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 579.414151][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.424991][ T983] usb 2-1: config 0 descriptor?? [ 579.850350][ T983] logitech 0003:046D:CA03.0044: hidraw0: USB HID v8.80 Device [HID 046d:ca03] on usb-dummy_hcd.1-1/input0 [ 579.862134][ T983] logitech 0003:046D:CA03.0044: no inputs found [ 580.084112][T17933] netlink: 'syz.1.3883': attribute type 58 has an invalid length. [ 580.183403][ T5914] usb 2-1: USB disconnect, device number 125 [ 580.490999][T16559] mct_u232 4-1:0.139: MCT U232 converter detected [ 580.511509][T16559] usb 4-1: MCT U232 converter now attached to ttyUSB0 [ 580.531384][T16559] usb 4-1: USB disconnect, device number 115 [ 580.562612][T16559] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 580.578336][T16559] mct_u232 4-1:0.139: device disconnected [ 580.935621][ T1221] usb 3-1: USB disconnect, device number 12 [ 581.086002][T16559] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 581.164937][T17979] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 581.172808][T17979] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 581.183539][T17979] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 581.192546][T17979] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 581.237762][T16559] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 581.246839][T16559] usb 4-1: config 0 has no interface number 0 [ 581.253842][T16559] usb 4-1: New USB device found, idVendor=0733, idProduct=0401, bcdDevice=ad.7d [ 581.268326][T16559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.305413][T16559] usb 4-1: config 0 descriptor?? [ 581.330394][T16559] gspca_main: spca501-2.14.0 probing 0733:0401 [ 581.529986][T16559] gspca_spca501: reg write: error -71 [ 581.535591][T16559] spca501 4-1:0.255: Reg write failed for 0x00,0xaa,0x00 [ 581.545792][T16559] spca501 4-1:0.255: probe with driver spca501 failed with error -22 [ 581.558566][T16559] usb 4-1: USB disconnect, device number 116 [ 581.680221][T17994] misc userio: No port type given on /dev/userio [ 582.053289][T18000] netlink: 'syz.2.3903': attribute type 10 has an invalid length. [ 582.305970][ T1221] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 582.465975][ T1221] usb 3-1: Using ep0 maxpacket: 16 [ 582.473589][ T1221] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 582.491886][ T1221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 582.505490][ T1221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 582.522201][ T1221] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 582.531589][ T1221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.539769][ T1221] usb 3-1: Product: syz [ 582.548705][ T1221] usb 3-1: Manufacturer: syz [ 582.553559][ T1221] usb 3-1: SerialNumber: syz [ 582.571687][ T1221] usb 3-1: config 0 descriptor?? [ 582.785461][ T1221] appledisplay 3-1:0.0: Error while getting initial brightness: -90 [ 582.814908][ T1221] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -90 [ 582.876049][T18029] FAULT_INJECTION: forcing a failure. [ 582.876049][T18029] name failslab, interval 1, probability 0, space 0, times 0 [ 582.890890][T18029] CPU: 0 UID: 0 PID: 18029 Comm: syz.4.3912 Not tainted syzkaller #0 PREEMPT(full) [ 582.890918][T18029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 582.890931][T18029] Call Trace: [ 582.890940][T18029] [ 582.890950][T18029] dump_stack_lvl+0x189/0x250 [ 582.890981][T18029] ? __pfx____ratelimit+0x10/0x10 [ 582.891010][T18029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.891034][T18029] ? __pfx__printk+0x10/0x10 [ 582.891063][T18029] ? __pfx___might_resched+0x10/0x10 [ 582.891091][T18029] should_fail_ex+0x414/0x560 [ 582.891119][T18029] should_failslab+0xa8/0x100 [ 582.891142][T18029] __kmalloc_noprof+0xdf/0x800 [ 582.891179][T18029] ? kfree+0x4d/0x6d0 [ 582.891202][T18029] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 582.891237][T18029] tomoyo_realpath_from_path+0xe3/0x5d0 [ 582.891266][T18029] ? tomoyo_domain+0xd8/0x130 [ 582.891299][T18029] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 582.891323][T18029] tomoyo_path_number_perm+0x1e8/0x5a0 [ 582.891349][T18029] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 582.891418][T18029] ? __fget_files+0x2a/0x420 [ 582.891450][T18029] ? __fget_files+0x3a0/0x420 [ 582.891474][T18029] ? __fget_files+0x2a/0x420 [ 582.891503][T18029] security_file_ioctl+0xcb/0x2d0 [ 582.891528][T18029] __se_sys_ioctl+0x47/0x170 [ 582.891552][T18029] do_syscall_64+0xfa/0xfa0 [ 582.891575][T18029] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.891597][T18029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.891616][T18029] ? clear_bhb_loop+0x60/0xb0 [ 582.891639][T18029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.891658][T18029] RIP: 0033:0x7f8efe78efc9 [ 582.891677][T18029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.891693][T18029] RSP: 002b:00007f8eff67f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 582.891716][T18029] RAX: ffffffffffffffda RBX: 00007f8efe9e5fa0 RCX: 00007f8efe78efc9 [ 582.891731][T18029] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000003 [ 582.891745][T18029] RBP: 00007f8eff67f090 R08: 0000000000000000 R09: 0000000000000000 [ 582.891758][T18029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.891771][T18029] R13: 00007f8efe9e6038 R14: 00007f8efe9e5fa0 R15: 00007ffde3028008 [ 582.891807][T18029] [ 582.892723][T18029] ERROR: Out of memory at tomoyo_realpath_from_path. [ 583.132529][T18029] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 583.132560][T18029] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 583.165257][ T1221] usb 3-1: USB disconnect, device number 13 [ 583.514400][T18048] FAULT_INJECTION: forcing a failure. [ 583.514400][T18048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 583.544568][T18048] CPU: 1 UID: 0 PID: 18048 Comm: syz.1.3917 Not tainted syzkaller #0 PREEMPT(full) [ 583.544597][T18048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 583.544608][T18048] Call Trace: [ 583.544616][T18048] [ 583.544625][T18048] dump_stack_lvl+0x189/0x250 [ 583.544655][T18048] ? __pfx____ratelimit+0x10/0x10 [ 583.544678][T18048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.544700][T18048] ? __pfx__printk+0x10/0x10 [ 583.544725][T18048] ? fs_reclaim_acquire+0x7d/0x100 [ 583.544753][T18048] should_fail_ex+0x414/0x560 [ 583.544780][T18048] prepare_alloc_pages+0x22b/0x650 [ 583.544808][T18048] __alloc_frozen_pages_noprof+0x123/0x370 [ 583.544831][T18048] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 583.544878][T18048] alloc_pages_bulk_noprof+0x560/0x710 [ 583.544908][T18048] ? alloc_pages_noprof+0xbe/0x190 [ 583.544931][T18048] __kasan_populate_vmalloc+0xc1/0x1d0 [ 583.544962][T18048] alloc_vmap_area+0xdf0/0x1520 [ 583.545010][T18048] ? __pfx_alloc_vmap_area+0x10/0x10 [ 583.545032][T18048] ? __kasan_kmalloc+0x93/0xb0 [ 583.545055][T18048] ? __get_vm_area_node+0x13f/0x300 [ 583.545079][T18048] ? copy_process+0x54b/0x3c00 [ 583.545100][T18048] __get_vm_area_node+0x1f8/0x300 [ 583.545133][T18048] __vmalloc_node_range_noprof+0x365/0x1640 [ 583.545160][T18048] ? copy_process+0x54b/0x3c00 [ 583.545187][T18048] ? percpu_ref_get_many+0x19/0x140 [ 583.545220][T18048] ? percpu_ref_get_many+0x19/0x140 [ 583.545252][T18048] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 583.545278][T18048] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 583.545314][T18048] ? memcpy_and_pad+0x48/0x80 [ 583.545339][T18048] __vmalloc_node_noprof+0xc2/0x110 [ 583.545367][T18048] ? copy_process+0x54b/0x3c00 [ 583.545384][T18048] ? copy_process+0x54b/0x3c00 [ 583.545405][T18048] dup_task_struct+0x3d4/0x830 [ 583.545425][T18048] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.545452][T18048] copy_process+0x54b/0x3c00 [ 583.545507][T18048] ? __pfx_copy_process+0x10/0x10 [ 583.545544][T18048] vhost_task_create+0x1ce/0x320 [ 583.545568][T18048] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 583.545592][T18048] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 583.545617][T18048] ? __pfx_vhost_task_create+0x10/0x10 [ 583.545652][T18048] ? __pfx_vhost_task_fn+0x10/0x10 [ 583.545699][T18048] kvm_mmu_post_init_vm+0x14c/0x300 [ 583.545730][T18048] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 583.545763][T18048] ? __mutex_trylock_common+0x153/0x260 [ 583.545790][T18048] ? __pfx___mutex_trylock_common+0x10/0x10 [ 583.545818][T18048] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 583.545844][T18048] ? rcu_is_watching+0x15/0xb0 [ 583.545873][T18048] ? trace_contention_end+0x39/0x120 [ 583.545894][T18048] ? look_up_lock_class+0x74/0x170 [ 583.545918][T18048] ? register_lock_class+0x51/0x320 [ 583.545951][T18048] ? __lock_acquire+0xab9/0xd20 [ 583.546014][T18048] kvm_vcpu_ioctl+0x95c/0xe90 [ 583.546048][T18048] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 583.546099][T18048] ? __fget_files+0x2a/0x420 [ 583.546129][T18048] ? __fget_files+0x3a0/0x420 [ 583.546153][T18048] ? __fget_files+0x2a/0x420 [ 583.546182][T18048] ? bpf_lsm_file_ioctl+0x9/0x20 [ 583.546205][T18048] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 583.546229][T18048] __se_sys_ioctl+0xfc/0x170 [ 583.546254][T18048] do_syscall_64+0xfa/0xfa0 [ 583.546277][T18048] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.546300][T18048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.546319][T18048] ? clear_bhb_loop+0x60/0xb0 [ 583.546345][T18048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.546364][T18048] RIP: 0033:0x7fe0db78efc9 [ 583.546385][T18048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.546401][T18048] RSP: 002b:00007fe0dc567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.546423][T18048] RAX: ffffffffffffffda RBX: 00007fe0db9e6090 RCX: 00007fe0db78efc9 [ 583.546438][T18048] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 583.546451][T18048] RBP: 00007fe0dc567090 R08: 0000000000000000 R09: 0000000000000000 [ 583.546463][T18048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.546475][T18048] R13: 00007fe0db9e6128 R14: 00007fe0db9e6090 R15: 00007ffd13f335e8 [ 583.546511][T18048] [ 583.970280][T18048] syz.1.3917: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 583.987085][T18048] CPU: 0 UID: 0 PID: 18048 Comm: syz.1.3917 Not tainted syzkaller #0 PREEMPT(full) [ 583.987139][T18048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 583.987153][T18048] Call Trace: [ 583.987162][T18048] [ 583.987172][T18048] dump_stack_lvl+0x189/0x250 [ 583.987205][T18048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.987229][T18048] ? __pfx__printk+0x10/0x10 [ 583.987253][T18048] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 583.987280][T18048] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 583.987308][T18048] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 583.987337][T18048] warn_alloc+0x214/0x310 [ 583.987357][T18048] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.987387][T18048] ? __pfx_warn_alloc+0x10/0x10 [ 583.987407][T18048] ? __get_vm_area_node+0x13f/0x300 [ 583.987437][T18048] ? copy_process+0x54b/0x3c00 [ 583.987458][T18048] ? __get_vm_area_node+0x211/0x300 [ 583.987491][T18048] __vmalloc_node_range_noprof+0x38a/0x1640 [ 583.987528][T18048] ? percpu_ref_get_many+0x19/0x140 [ 583.987562][T18048] ? percpu_ref_get_many+0x19/0x140 [ 583.987598][T18048] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 583.987625][T18048] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 583.987661][T18048] ? memcpy_and_pad+0x48/0x80 [ 583.987689][T18048] __vmalloc_node_noprof+0xc2/0x110 [ 583.987717][T18048] ? copy_process+0x54b/0x3c00 [ 583.987734][T18048] ? copy_process+0x54b/0x3c00 [ 583.987757][T18048] dup_task_struct+0x3d4/0x830 [ 583.987778][T18048] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.987805][T18048] copy_process+0x54b/0x3c00 [ 583.987859][T18048] ? __pfx_copy_process+0x10/0x10 [ 583.987896][T18048] vhost_task_create+0x1ce/0x320 [ 583.987920][T18048] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 583.987945][T18048] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 583.987970][T18048] ? __pfx_vhost_task_create+0x10/0x10 [ 583.988003][T18048] ? __pfx_vhost_task_fn+0x10/0x10 [ 583.988050][T18048] kvm_mmu_post_init_vm+0x14c/0x300 [ 583.988081][T18048] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 583.988124][T18048] ? __mutex_trylock_common+0x153/0x260 [ 583.988150][T18048] ? __pfx___mutex_trylock_common+0x10/0x10 [ 583.988174][T18048] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 583.988203][T18048] ? rcu_is_watching+0x15/0xb0 [ 583.988225][T18048] ? trace_contention_end+0x39/0x120 [ 583.988247][T18048] ? look_up_lock_class+0x74/0x170 [ 583.988273][T18048] ? register_lock_class+0x51/0x320 [ 583.988308][T18048] ? __lock_acquire+0xab9/0xd20 [ 583.988371][T18048] kvm_vcpu_ioctl+0x95c/0xe90 [ 583.988404][T18048] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 583.988456][T18048] ? __fget_files+0x2a/0x420 [ 583.988487][T18048] ? __fget_files+0x3a0/0x420 [ 583.988511][T18048] ? __fget_files+0x2a/0x420 [ 583.988540][T18048] ? bpf_lsm_file_ioctl+0x9/0x20 [ 583.988563][T18048] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 583.988587][T18048] __se_sys_ioctl+0xfc/0x170 [ 583.988612][T18048] do_syscall_64+0xfa/0xfa0 [ 583.988633][T18048] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.988656][T18048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.988677][T18048] ? clear_bhb_loop+0x60/0xb0 [ 583.988702][T18048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.988721][T18048] RIP: 0033:0x7fe0db78efc9 [ 583.988741][T18048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.988758][T18048] RSP: 002b:00007fe0dc567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.988781][T18048] RAX: ffffffffffffffda RBX: 00007fe0db9e6090 RCX: 00007fe0db78efc9 [ 583.988796][T18048] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 583.988809][T18048] RBP: 00007fe0dc567090 R08: 0000000000000000 R09: 0000000000000000 [ 583.988821][T18048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.988833][T18048] R13: 00007fe0db9e6128 R14: 00007fe0db9e6090 R15: 00007ffd13f335e8 [ 583.988869][T18048] [ 583.988878][T18048] Mem-Info: [ 584.394474][T18060] CIFS: VFS: Malformed UNC in devname [ 584.398911][T18048] active_anon:7333 inactive_anon:0 isolated_anon:0 [ 584.398911][T18048] active_file:14194 inactive_file:40591 isolated_file:0 [ 584.398911][T18048] unevictable:768 dirty:288 writeback:0 [ 584.398911][T18048] slab_reclaimable:12247 slab_unreclaimable:98173 [ 584.398911][T18048] mapped:26054 shmem:1401 pagetables:1531 [ 584.398911][T18048] sec_pagetables:0 bounce:0 [ 584.398911][T18048] kernel_misc_reclaimable:0 [ 584.398911][T18048] free:1320759 free_pcp:11190 free_cma:0 [ 584.474398][T18048] Node 0 active_anon:29332kB inactive_anon:0kB active_file:56776kB inactive_file:162160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104216kB dirty:1152kB writeback:0kB shmem:4068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12132kB pagetables:5956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 584.536068][T18048] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 584.578849][T18048] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:16kB free_cma:0kB [ 584.626080][T18048] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 584.646171][T18048] Node 0 DMA32 free:1381548kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29332kB inactive_anon:0kB active_file:56776kB inactive_file:162160kB unevictable:1536kB writepending:1152kB zspages:0kB present:3129332kB managed:2547896kB mlocked:0kB bounce:0kB free_pcp:32192kB local_pcp:19600kB free_cma:0kB [ 584.646262][T18048] lowmem_reserve[]: 0 0 0 0 0 [ 584.695496][T18066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3923'. [ 584.704049][T18048] [ 584.745002][T18048] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.786273][T18048] lowmem_reserve[]: 0 0 0 0 0 [ 584.791166][T18048] Node 1 Normal free:3885904kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13120kB local_pcp:5728kB free_cma:0kB [ 584.868685][T18048] lowmem_reserve[]: 0 0 0 0 0 [ 584.875443][T18048] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 584.916065][T18048] Node 0 DMA32: 6207*4kB (UME) 3214*8kB (UM) 1736*16kB (UME) 477*32kB (UM) 224*64kB (UM) 140*128kB (UME) 91*256kB (UME) 51*512kB (UME) 22*1024kB (UME) 18*2048kB (UM) 280*4096kB (UM) = 1381516kB [ 584.951147][T18048] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 584.968200][T18048] Node 1 Normal: 194*4kB (UME) 37*8kB (UME) 46*16kB (UME) 198*32kB (UME) 58*64kB (UME) 6*128kB (UME) 6*256kB (UM) 2*512kB (M) 4*1024kB (UME) 2*2048kB (UE) 943*4096kB (M) = 3885904kB [ 585.007557][T18048] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.018241][T18048] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 585.030162][T18048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.057872][T18048] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 585.086749][T18048] 56182 total pagecache pages [ 585.101063][T18048] 0 pages in swap cache [ 585.105319][T18048] Free swap = 124996kB [ 585.109640][T18048] Total swap = 124996kB [ 585.114005][T18048] 2097051 pages RAM [ 585.118280][T18048] 0 pages HighMem/MovableOnly [ 585.124803][T18048] 428435 pages reserved [ 585.129566][T18048] 0 pages cma reserved [ 585.475937][ T1221] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 585.606383][ T5914] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 585.626125][ T1221] usb 2-1: device descriptor read/64, error -71 [ 585.779332][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 585.803345][ T5914] usb 3-1: config 0 has no interfaces? [ 585.810301][ T5914] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 585.819577][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.831007][ T5914] usb 3-1: config 0 descriptor?? [ 585.875998][ T1221] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 585.943900][T18111] pim6reg: entered allmulticast mode [ 586.035956][ T1221] usb 2-1: device descriptor read/64, error -71 [ 586.128296][T18116] netlink: 'syz.4.3936': attribute type 27 has an invalid length. [ 586.146638][ T1221] usb usb2-port1: attempt power cycle [ 586.263280][T18119] syzkaller1: entered promiscuous mode [ 586.269602][T18119] syzkaller1: entered allmulticast mode [ 586.486498][ T1221] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 586.507185][ T1221] usb 2-1: device descriptor read/8, error -71 [ 586.766041][ T1221] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 586.786758][ T1221] usb 2-1: device descriptor read/8, error -71 [ 586.896307][ T1221] usb usb2-port1: unable to enumerate USB device [ 587.224295][T18152] 8021q: VLANs not supported on lo [ 587.459914][T18162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3947'. [ 588.366167][ T1221] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 588.371421][ T5914] usb 3-1: USB disconnect, device number 14 [ 588.398376][ C1] ------------[ cut here ]------------ [ 588.404197][ C1] ODEBUG: free active (active state 0) object: ffff88805bd6dc90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 588.417703][ C1] WARNING: lib/debugobjects.c:615 at debug_print_object+0x16b/0x1e0, CPU#1: kworker/1:5/5914 [ 588.428065][ C1] Modules linked in: [ 588.432393][ C1] CPU: 1 UID: 0 PID: 5914 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 588.441874][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 588.452116][ C1] Workqueue: usb_hub_wq hub_event [ 588.457348][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 588.463209][ C1] Code: 4c 89 ff e8 c7 ee 87 fd 4d 8b 0f 48 c7 c7 60 fa e0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ea eb e4 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 37 47 20 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 588.483200][ C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010296 [ 588.489366][ C1] RAX: 01bd4a12795f0000 RBX: dffffc0000000000 RCX: ffff88802d8b5ac0 [ 588.497531][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 588.505547][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 588.513636][ C1] R10: dffffc0000000000 R11: fffffbfff1c3a6e0 R12: ffffffff8a4e8350 [ 588.522063][ C1] R13: ffffffff8be0fbe0 R14: ffff88805bd6dc90 R15: ffffffff8b8cf900 [ 588.530257][ C1] FS: 0000000000000000(0000) GS:ffff888125b9f000(0000) knlGS:0000000000000000 [ 588.539364][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 588.546320][ C1] CR2: 00007f553fcbde9c CR3: 0000000075836000 CR4: 00000000003526f0 [ 588.554593][ C1] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 588.555938][ T1221] usb 5-1: device descriptor read/64, error -71 [ 588.562801][ C1] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 588.577219][ C1] Call Trace: [ 588.580630][ C1] [ 588.583520][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 588.589208][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 588.594392][ C1] kfree+0x115/0x6d0 [ 588.598407][ C1] rose_timer_expiry+0x4cb/0x600 [ 588.603366][ C1] call_timer_fn+0x17e/0x5f0 [ 588.608090][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 588.613567][ C1] ? call_timer_fn+0xbe/0x5f0 [ 588.618385][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 588.623542][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 588.628807][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.634030][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 588.639649][ C1] __run_timer_base+0x61a/0x860 [ 588.644520][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 588.650027][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 588.656312][ C1] run_timer_softirq+0xb7/0x180 [ 588.661190][ C1] handle_softirqs+0x286/0x870 [ 588.666103][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 588.670890][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 588.676510][ C1] __irq_exit_rcu+0xca/0x1f0 [ 588.681205][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 588.686449][ C1] irq_exit_rcu+0x9/0x30 [ 588.690800][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 588.696607][ C1] [ 588.699560][ C1] [ 588.702485][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 588.706047][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 588.708602][ C1] RIP: 0010:unwind_next_frame+0x21f/0x2390 [ 588.721975][ C1] Code: 44 39 f8 0f 86 65 18 00 00 44 89 f8 4c 8d 2c 85 a8 bd f9 90 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 48 89 eb 0f 85 1c 1c 00 00 <45> 8b 6d 00 44 89 f8 ff c0 48 8d 2c 85 a8 bd f9 90 48 89 e8 48 c1 [ 588.741660][ C1] RSP: 0018:ffffc9000364ef78 EFLAGS: 00000246 [ 588.747772][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 01bd4a12795f0000 [ 588.755759][ C1] RDX: 00000000000a615a RSI: ffffffff8be0f0a0 RDI: ffffffff8be0f060 [ 588.763975][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff81741f85 [ 588.772079][ C1] R10: ffffc9000364f098 R11: ffffffff81acffb0 R12: ffffffff870583df [ 588.780168][ C1] R13: ffffffff9111d3b4 R14: ffffc9000364f048 R15: 0000000000060583 [ 588.788265][ C1] ? usb_remove_ep_devs+0x4f/0x80 [ 588.793465][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 588.799747][ C1] ? unwind_next_frame+0xa5/0x2390 [ 588.804906][ C1] ? unwind_next_frame+0xd4/0x2390 [ 588.810085][ C1] ? unwind_next_frame+0xa5/0x2390 [ 588.815240][ C1] ? usb_remove_ep_devs+0x50/0x80 [ 588.820317][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 588.826644][ C1] arch_stack_walk+0x11c/0x150 [ 588.831508][ C1] ? usb_remove_ep_devs+0x50/0x80 [ 588.835899][ T1221] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 588.836686][ C1] stack_trace_save+0x9c/0xe0 [ 588.849019][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 588.854384][ C1] ? stack_depot_save_flags+0x40/0x860 [ 588.860590][ C1] kasan_save_stack+0x3e/0x60 [ 588.865288][ C1] ? kasan_save_stack+0x3e/0x60 [ 588.870193][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 588.875598][ C1] ? call_rcu+0x157/0x9c0 [ 588.875885][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 588.879993][ C1] ? kernfs_put+0x19e/0x480 [ 588.887519][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 588.889820][ C1] ? kernfs_remove_by_name_ns+0xb7/0x130 [ 588.901708][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 588.906704][ C1] ? sysfs_unmerge_group+0xd4/0x140 [ 588.906737][ C1] ? dpm_sysfs_remove+0x76/0xd0 [ 588.906757][ C1] ? device_del+0x251/0x8e0 [ 588.918282][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 588.922063][ C1] ? device_unregister+0x21/0x100 [ 588.922096][ C1] ? usb_remove_ep_devs+0x50/0x80 [ 588.927504][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 588.931555][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 588.931589][ C1] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 588.931611][ C1] call_rcu+0x157/0x9c0 [ 588.931631][ C1] ? __lock_acquire+0xab9/0xd20 [ 588.931672][ C1] ? delete_node+0x2de/0xa50 [ 588.931693][ C1] ? __pfx_call_rcu+0x10/0x10 [ 588.931723][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 588.931755][ C1] kernfs_put+0x19e/0x480 [ 588.931786][ C1] kernfs_remove_by_name_ns+0xb7/0x130 [ 588.931819][ C1] sysfs_unmerge_group+0xd4/0x140 [ 588.931847][ C1] dpm_sysfs_remove+0x76/0xd0 [ 588.931870][ C1] device_del+0x251/0x8e0 [ 588.945196][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 588.947020][ C1] ? __pfx_device_del+0x10/0x10 [ 588.952599][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.965148][ C1] ? kernfs_remove_by_name_ns+0xee/0x130 [ 588.965204][ C1] device_unregister+0x21/0x100 [ 588.965239][ C1] usb_remove_ep_devs+0x50/0x80 [ 588.965265][ C1] usb_disconnect+0x5c8/0x990 [ 588.985907][ T1221] usb 5-1: device descriptor read/64, error -71 [ 588.989850][ C1] hub_event+0x1ca9/0x4ef0 [ 589.076893][ C1] ? __set_next_task_fair+0x135/0x390 [ 589.082293][ C1] ? register_lock_class+0x51/0x320 [ 589.087573][ C1] ? __pfx_hub_event+0x10/0x10 [ 589.092351][ C1] ? process_one_work+0x868/0x15d0 [ 589.097525][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 589.102844][ C1] ? process_one_work+0x868/0x15d0 [ 589.106201][ T1221] usb usb5-port1: attempt power cycle [ 589.108023][ C1] process_one_work+0x94a/0x15d0 [ 589.118331][ C1] ? __lock_acquire+0xab9/0xd20 [ 589.123192][ C1] ? __pfx_process_one_work+0x10/0x10 [ 589.128611][ C1] ? assign_work+0x3a1/0x410 [ 589.133232][ C1] worker_thread+0x9b0/0xee0 [ 589.137892][ C1] kthread+0x711/0x8a0 [ 589.141978][ C1] ? __pfx_worker_thread+0x10/0x10 [ 589.147121][ C1] ? __pfx_kthread+0x10/0x10 [ 589.151816][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 589.157058][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.162375][ C1] ? __pfx_kthread+0x10/0x10 [ 589.167038][ C1] ret_from_fork+0x4bc/0x870 [ 589.171669][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 589.177339][ C1] ? __switch_to_asm+0x39/0x70 [ 589.182484][ C1] ? __switch_to_asm+0x33/0x70 [ 589.187289][ C1] ? __pfx_kthread+0x10/0x10 [ 589.191982][ C1] ret_from_fork_asm+0x1a/0x30 [ 589.205591][ C1] [ 589.208687][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 589.215988][ C1] CPU: 1 UID: 0 PID: 5914 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 589.225709][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.235767][ C1] Workqueue: usb_hub_wq hub_event [ 589.240812][ C1] Call Trace: [ 589.244088][ C1] [ 589.246923][ C1] dump_stack_lvl+0x99/0x250 [ 589.251515][ C1] ? __asan_memcpy+0x40/0x70 [ 589.256100][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.261296][ C1] ? __pfx__printk+0x10/0x10 [ 589.265900][ C1] vpanic+0x237/0x6d0 [ 589.269915][ C1] ? __pfx_vpanic+0x10/0x10 [ 589.274431][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 589.279755][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 589.285019][ C1] panic+0xb9/0xc0 [ 589.288764][ C1] ? __pfx_panic+0x10/0x10 [ 589.293183][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 589.298215][ C1] __warn+0x334/0x4c0 [ 589.302189][ C1] ? debug_print_object+0x16b/0x1e0 [ 589.307386][ C1] ? debug_print_object+0x16b/0x1e0 [ 589.312589][ C1] report_bug+0x2be/0x4f0 [ 589.316997][ C1] ? debug_print_object+0x16b/0x1e0 [ 589.322381][ C1] ? debug_print_object+0x16b/0x1e0 [ 589.327789][ C1] ? debug_print_object+0x16d/0x1e0 [ 589.333004][ C1] handle_bug+0x84/0x160 [ 589.337344][ C1] exc_invalid_op+0x1a/0x50 [ 589.341882][ C1] asm_exc_invalid_op+0x1a/0x20 [ 589.346768][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 589.352583][ C1] Code: 4c 89 ff e8 c7 ee 87 fd 4d 8b 0f 48 c7 c7 60 fa e0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ea eb e4 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 37 47 20 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 589.373169][ C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010296 [ 589.379244][ C1] RAX: 01bd4a12795f0000 RBX: dffffc0000000000 RCX: ffff88802d8b5ac0 [ 589.387329][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 589.395310][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 589.403284][ C1] R10: dffffc0000000000 R11: fffffbfff1c3a6e0 R12: ffffffff8a4e8350 [ 589.411345][ C1] R13: ffffffff8be0fbe0 R14: ffff88805bd6dc90 R15: ffffffff8b8cf900 [ 589.419503][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 589.425139][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 589.430682][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 589.435905][ C1] kfree+0x115/0x6d0 [ 589.439975][ C1] rose_timer_expiry+0x4cb/0x600 [ 589.444923][ C1] call_timer_fn+0x17e/0x5f0 [ 589.449594][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 589.455193][ C1] ? call_timer_fn+0xbe/0x5f0 [ 589.459978][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 589.465108][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 589.470487][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.475683][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 589.481227][ C1] __run_timer_base+0x61a/0x860 [ 589.486112][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 589.491490][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 589.497743][ C1] run_timer_softirq+0xb7/0x180 [ 589.502672][ C1] handle_softirqs+0x286/0x870 [ 589.507516][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 589.512288][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 589.517575][ C1] __irq_exit_rcu+0xca/0x1f0 [ 589.522169][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 589.527470][ C1] irq_exit_rcu+0x9/0x30 [ 589.531785][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 589.537500][ C1] [ 589.540433][ C1] [ 589.543352][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 589.549696][ C1] RIP: 0010:unwind_next_frame+0x21f/0x2390 [ 589.555626][ C1] Code: 44 39 f8 0f 86 65 18 00 00 44 89 f8 4c 8d 2c 85 a8 bd f9 90 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 48 89 eb 0f 85 1c 1c 00 00 <45> 8b 6d 00 44 89 f8 ff c0 48 8d 2c 85 a8 bd f9 90 48 89 e8 48 c1 [ 589.575396][ C1] RSP: 0018:ffffc9000364ef78 EFLAGS: 00000246 [ 589.581648][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 01bd4a12795f0000 [ 589.589715][ C1] RDX: 00000000000a615a RSI: ffffffff8be0f0a0 RDI: ffffffff8be0f060 [ 589.597779][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff81741f85 [ 589.606364][ C1] R10: ffffc9000364f098 R11: ffffffff81acffb0 R12: ffffffff870583df [ 589.614494][ C1] R13: ffffffff9111d3b4 R14: ffffc9000364f048 R15: 0000000000060583 [ 589.622541][ C1] ? usb_remove_ep_devs+0x4f/0x80 [ 589.627654][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 589.633799][ C1] ? unwind_next_frame+0xa5/0x2390 [ 589.638999][ C1] ? unwind_next_frame+0xd4/0x2390 [ 589.644114][ C1] ? unwind_next_frame+0xa5/0x2390 [ 589.649216][ C1] ? usb_remove_ep_devs+0x50/0x80 [ 589.654252][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 589.660408][ C1] arch_stack_walk+0x11c/0x150 [ 589.665160][ C1] ? usb_remove_ep_devs+0x50/0x80 [ 589.670181][ C1] stack_trace_save+0x9c/0xe0 [ 589.675138][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 589.680668][ C1] ? stack_depot_save_flags+0x40/0x860 [ 589.686217][ C1] kasan_save_stack+0x3e/0x60 [ 589.691070][ C1] ? kasan_save_stack+0x3e/0x60 [ 589.695922][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 589.701292][ C1] ? call_rcu+0x157/0x9c0 [ 589.705622][ C1] ? kernfs_put+0x19e/0x480 [ 589.710209][ C1] ? kernfs_remove_by_name_ns+0xb7/0x130 [ 589.715848][ C1] ? sysfs_unmerge_group+0xd4/0x140 [ 589.721096][ C1] ? dpm_sysfs_remove+0x76/0xd0 [ 589.726136][ C1] ? device_del+0x251/0x8e0 [ 589.730629][ C1] ? device_unregister+0x21/0x100 [ 589.735905][ C1] ? usb_remove_ep_devs+0x50/0x80 [ 589.741029][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 589.746219][ C1] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 589.751580][ C1] call_rcu+0x157/0x9c0 [ 589.755755][ C1] ? __lock_acquire+0xab9/0xd20 [ 589.760610][ C1] ? delete_node+0x2de/0xa50 [ 589.765270][ C1] ? __pfx_call_rcu+0x10/0x10 [ 589.769948][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 589.775165][ C1] kernfs_put+0x19e/0x480 [ 589.779503][ C1] kernfs_remove_by_name_ns+0xb7/0x130 [ 589.784991][ C1] sysfs_unmerge_group+0xd4/0x140 [ 589.790012][ C1] dpm_sysfs_remove+0x76/0xd0 [ 589.794686][ C1] device_del+0x251/0x8e0 [ 589.799208][ C1] ? __pfx_device_del+0x10/0x10 [ 589.804059][ C1] ? kernfs_remove_by_name_ns+0xee/0x130 [ 589.809690][ C1] device_unregister+0x21/0x100 [ 589.814542][ C1] usb_remove_ep_devs+0x50/0x80 [ 589.819474][ C1] usb_disconnect+0x5c8/0x990 [ 589.824151][ C1] hub_event+0x1ca9/0x4ef0 [ 589.828645][ C1] ? __set_next_task_fair+0x135/0x390 [ 589.834132][ C1] ? register_lock_class+0x51/0x320 [ 589.839450][ C1] ? __pfx_hub_event+0x10/0x10 [ 589.844212][ C1] ? process_one_work+0x868/0x15d0 [ 589.849319][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 589.854529][ C1] ? process_one_work+0x868/0x15d0 [ 589.859715][ C1] process_one_work+0x94a/0x15d0 [ 589.864736][ C1] ? __lock_acquire+0xab9/0xd20 [ 589.869671][ C1] ? __pfx_process_one_work+0x10/0x10 [ 589.875034][ C1] ? assign_work+0x3a1/0x410 [ 589.879757][ C1] worker_thread+0x9b0/0xee0 [ 589.884612][ C1] kthread+0x711/0x8a0 [ 589.888680][ C1] ? __pfx_worker_thread+0x10/0x10 [ 589.893776][ C1] ? __pfx_kthread+0x10/0x10 [ 589.898526][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 589.903807][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.909120][ C1] ? __pfx_kthread+0x10/0x10 [ 589.913916][ C1] ret_from_fork+0x4bc/0x870 [ 589.918507][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 589.923624][ C1] ? __switch_to_asm+0x39/0x70 [ 589.928486][ C1] ? __switch_to_asm+0x33/0x70 [ 589.933435][ C1] ? __pfx_kthread+0x10/0x10 [ 589.938061][ C1] ret_from_fork_asm+0x1a/0x30 [ 589.942824][ C1] [ 589.946152][ C1] Kernel Offset: disabled [ 589.950488][ C1] Rebooting in 86400 seconds..