last executing test programs: 14.706944267s ago: executing program 4 (id=4879): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x800, 0x0, 0x10, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, &(0x7f0000000d40), 0x0}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x3, 0x0, 0x4, 0x3}, {0x3, 0x6, 0x5, 0x2}, {0x6, 0x6, 0x4, 0x5}, {0x1, 0xe0, 0xda, 0x4}]}, 0x10) connect$can_bcm(r5, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/15, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000013"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x48}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000080)=0x100, 0x4) sendmmsg$inet(r7, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x20}) 13.216335148s ago: executing program 3 (id=4889): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xbf}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "0100008000", "d130ebe74d173213476d920ff40a000000838c00ca64323baa456ffbd39bd564", "e866a836", "3f6c1d7fad7bfa30"}, 0x38) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000740)=0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, 0x0, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) listen(r2, 0x5) ioctl$KVM_NMI(r5, 0xae9a) 11.717110906s ago: executing program 3 (id=4891): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, r1, &(0x7f0000000000)=0x7, 0xa) io_setup(0x6, &(0x7f0000001380)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r3, 0x0, 0x0, 0x4, 0x0, 0x0, r3}]) 11.48798408s ago: executing program 3 (id=4892): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x15, 0x5, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2f, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) getsockopt(r2, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000006c0)={0x8001, 0x30, '\x00', 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daafcd3a4a42200", 0x3, 0x1000001, 0x8}, 0x3c) unshare(0x62040200) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x1, 0xfffff038}, {0x6}]}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd603cf72f4496880020010000000000000000000000000002fe8000000000000000000000000000aa000000", @ANYRES32=0x41424344], 0x0) 11.402303696s ago: executing program 4 (id=4894): timerfd_create(0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x200000000003, 0x87) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000", @ANYRES32=r1, @ANYBLOB], 0x38}}, 0x10) 10.979186867s ago: executing program 4 (id=4896): r0 = gettid() r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xcb0, 0x4, 0x800}, 0x0) request_key(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_set$pid(0x1, 0x0, 0x4007) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) mremap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f000007d000/0x4000)=nil) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7, 0x4, 0xf0}, {0x6, 0x3, 0x8, 0x532b}]}) ioctl$USBDEVFS_SUBMITURB(r1, 0xc0185500, &(0x7f0000000500)=@urb_type_iso={0x0, {0x5}, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x7, 0x0, 0x0, [{0xb5, 0x3, 0x4}]}) r5 = fcntl$getown(r1, 0x9) ptrace$getenv(0x4201, r5, 0x0, &(0x7f00000000c0)) syz_open_procfs(r0, &(0x7f00000000c0)='auxv\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="781002000000025f"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x0, 0x3, 0x0, 0x2, 0x4}}) syz_clone(0x5020000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) 9.177767969s ago: executing program 3 (id=4901): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x800, 0x0, 0x10, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, &(0x7f0000000d40), 0x0}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x3, 0x0, 0x4, 0x3}, {0x3, 0x6, 0x5, 0x2}, {0x6, 0x6, 0x4, 0x5}, {0x1, 0xe0, 0xda, 0x4}]}, 0x10) connect$can_bcm(r5, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r5, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x48}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000080)=0x100, 0x4) sendmmsg$inet(r7, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x20}) 8.039923322s ago: executing program 2 (id=4906): timerfd_create(0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x200000000003, 0x87) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000", @ANYRES32=r1, @ANYBLOB], 0x38}}, 0x10) 7.674897614s ago: executing program 0 (id=4907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x6b, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0x69, 0xa3, 0x6e, 0x8, 0x5c6, 0x9078, 0x8a79, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x5, 0xa3, 0x80, 0x0, [{{0x9, 0x4, 0x3, 0x1, 0x1, 0xb8, 0x34, 0x9e, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x1ee9, 0x2}, [@processing_unit={0xc, 0x24, 0x7, 0x2, 0x0, 0x1a, "66ff69f6ca"}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0xff57, 0x83}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "a6ff92d425"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0x8, 0xf0}, [@country_functional={0x6, 0x24, 0x7, 0x7, 0x40}]}], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x7, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x40000) recvmmsg(r0, &(0x7f00000000c0), 0x2a2c525d60e4e020, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002480)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) 7.66089467s ago: executing program 2 (id=4908): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r0, 0x0, r0, &(0x7f0000000080)='./mnt\x00', 0x214) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3020}) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x8) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x80015b1a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) pipe(&(0x7f0000000440)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f00000011c0)=""/4096) r6 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x11100, 0x3, 0x17d}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000000a80)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x2, &(0x7f0000000000)='test_dummy_encryption', &(0x7f00000001c0)="e4ec93a160db08", 0x7) io_uring_enter(r6, 0x4d10, 0x2, 0x2, 0x0, 0x0) 6.8303629s ago: executing program 1 (id=4909): r0 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000200)={0x8, 0x4, 0x1c8e}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x9, 0xffff, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r1, &(0x7f0000000440), &(0x7f0000000540)=@udp6, 0x11}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r4, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r5 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f027, 0x0, '\x00', @p_u8=0x0}}) 6.405814545s ago: executing program 4 (id=4910): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000003bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000a2000101aa6c04a1df25130040000000000000000000c584000000d4947e851b15f1eeecf2fe35fdf9d0d8532ddacb3dcd1ee4815853fc408a7148ede044390140cee334401f1323e73fbf649f6aa326f77d5b6368"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4008004) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) r1 = syz_usb_connect$hid(0x5, 0x8f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000104c05680200000000000109022400010000000009040000050b000000092100000001220200090581030000000000"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000440)={0x1c, r8, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {0x0, 0x4107}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d1ffffff", @ANYRES16=r8, @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x44040080}, 0x45010) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000040)={0x29d0, 0x4, 0x0, "edf5137ba3b3dd25df1750caa643b0813ba7601b069835e4a121cb5249a187e7", 0x38415262}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="668073978bca677a8245d9b1a2ab6e1ba8fb2d237224c4ff08b2a4b867774617a5", 0x21}, {&(0x7f00000012c0)="7392e62940d116fec5b32fc874863df469a0177055efde134e5b10e5eb0c24d7ed7079c7fa180c18f60d6730c9f3c3940c6be1cf0e25914d07f7616ad3fda3ad706e09b4aec1183c911299441b4c81d0afca6d3064d57f7cb39bd28b473f5556f0cdf229416e05934b10d89535c44b260cfba0e1501443b1701dc5865b61f61492a5b9ebc305e598e8125472202dd147c0e2be1700725e30345851077085b9599521db03157ced021cc4321bba62ef6e0611cecfce0ceb82d007d63c7d03f6e877967f052ef7e1da1e7de31242c0c45b8bb12203b7aff68cb5b4184cb4632c10ace730092c27ce8ab4fa280d689b8592b734a222409d4b5286e4e421ba14fc2c9b9df536f3ecc2087da1f6d4decc64a3bc3e347945fbe7e0471fbe64147f9559547260233edd899cfc34dba7f3085149249f4508094cb7127830d3224ceb53a70ca9154dd4af39e123e425e23b829e1e6f6b13dd43c909d9a7a3876e88bd22bc561d8efbe2b933a685df07a720c5ed059a76e8071b305bf891810dd2650d177901d7396e0034969c046c5e50f7a34ed758cca7f9b9a73a26b7fc363cb2e09171b16308b6945bd5c6732f05970fdefaf09d0d6caac92d780a2b68ffd066560157307d822e863e9801173c7c02531e32379de2cc807e0294fe9061fce1524a53ec9a4573683a173f0e1b14a4b946b7bf47b0bfddb95638dc7aa25420d40ef7d38e34e02666352e48b078fd078b001d94e6a6277a275e03dda09039203679db00f2f4889af0eef972ea0515b2887c435ef550aba4888abf512028c69c552a39e102ec59e608a3e339e76f238239cbf75a6e4f0832e8c8a072b998f4092d76c2fe11b0569553ae59c8cf8cd76cfcf4c6b28b5c6e8de4ebc0cd820296c4f3b3449dda76133de22028495105f8b1d7c528a124e4e2a7489492829d9366d6324d9b51bf46618055bbd1e3cb395040518834b0403c1f946d8b14d7896246bb4cd76434eabd9037ae19cfc1c41a04fd3495b17c0e53d05ed342caef081fdcc3d7634a32c4dc57cd9086649a7c11e5d41d0e249113ce585c73da984773676d1c153e001155688bc2f336443af83ed46fdb36fe65d9a003b0f47220b018b74e39858ef7060b7d252da91e40ddfb1e744b63f73e368ca4168c51a0e586279e1e6166eba8530bdd81b4d0b0594a051a50d305f0afcb99378e7c27a5ee36c0cc54443c4ec824f60c453e26d48ba9ef5b8fc8e8fadb66bb50e5cfdb4f963a10ef4b3c817b8a1f06febc92ccc1745dc9b6dd3eb8fb048ec179bc1c472fd73ac182d91bfec318d0aecdf9307bf7cd73a582b84812b5ebb9c02a593ec41fc5aa8a6ec0bec90fabf1075eca1a7726bfba5d686aeddb12c46ace61a69853de74c7524528d76241ac2a7de68d3f5e08d866f4747e2dba7bb2228a9184518738c08a5278472187fda0964377d70ef1ceb05fbba36c042cf339f0af63d5368c21ae4e66613ea5d63138559557223137320a22c75534518da3c02fa4ee49a5acabb23e6e5d1b559ead4a2ad1d1177ec769dff3a13c43d7a81dabf004caba3b0b098cd4ec593b24e2fcc43d007a5df5b155ee9faebdd4df4559e2afca1d876c9d29b22b3a297cc542c3facd5b44ead5bed4c2804025a1d3b8c4da8070b1a3451c8c13948590533268f1dd077a1b60c4bf2b69bfaae50412e6f61d8720b700e1f81c69870c9a8ce6bfd4b4fd6a17c0adec1de7943762dbbcb38fc1364d75ecae0637f441bdf42d5da120af9ee0e29f89b87b28c6cc4bf6ff9c8be3d10e608ed5d3f08a76fa5a4bb17a55cc7168eb11d90c591b8bc3a2b898aabbaee1d2620c449a05a639c1025eb9db912724ae3f9a834f5be272696a5f723a87ae46a966b5f57402221342a4180cb5d8d6850cfbbcda2c10462f4f53323964c33f5ef9292e8b5960b1535b0e595816a82f01598f8dad7150438513c1c9165ae0619ede032a5267d2050757fdf7596d3d60ee2cef4a308add06ae4aae75e0bd80f9867171d03c76a35be91f5e8707bf6118e55df26674f575d618afd563582317bd763e0997876aae61298cfe294161af1a139465f526b684c659e39b6274e19a3b6f4e4fe69bfc8358f883839e5c373eafc7350a07b9707a95bdf89a32e559a5af71189cfee6b990b6ea49a566f5c3b55b929f08900acda1642ff8b2a25e67660f8c9cc12ad5f9d104a6fa836181a755acb53f9c7d836b59c003a22cf03acca0fbf68554d7ed62c42235b79141c1b4e7b22b2d37a514fe4c681688c1d1d38768fa6116904d4312ed9b98a79674b936045982d6d0381f590abf6cf6c813854c4f99de642ec519cf1f9fa9e651679f489236f7f50035628472f5cd5c8b4f85fd2e6c04dc7695f7dc3d1c740b6604138e07aacb5789f097a65597fc2663362f256a511cb0182e727d824ac372eaf94654e855bef09cff49dc584d10e760de6f9b435ee4311bd1924f68af00835f60a537db6896b33925a570be04991e2457572112be2079d94f2345830f1a4d4bcd9bd736ad2a8c7960be11225060cf4eb84debe03d7b499fe98926372870ca849962321b6479a45d6e17f3e0663b08d6401511688cfa2a2c4b83ba5f9b7df7cf89915b7b3edbd824de90688a8aef80ae91de4d98b9c18cbc0c790588c36370d3734b2954da624d286a5a9c2e795f3b602f1f74e4e62be5e215d3250044816e5582ee177373471efeb21575b192081445c4a227f6d9e05eabf6a964a78538717598055dd3b378009950c207226c6cc83d9f68d7cd65a4f586144af857a8f20b80bb4dd8546cabac3ec69fc2c0075d843b015427b68733c11bee661be25fa40edfb94cadfb328ad47c4b5b705616faaef83f1d253162da0884759b48cba823f8a52c16b839f81b13df4d45991b9cbeefb1a4f0b295aceb342400ca6c734cdc5ff98f1afc05f4d1e03ec6a00dec910b0b2cf97afc6e8ab2c98af86b9a4cd9eabea7327753c030c20532e5bbfe501d93172ab5e2370aed5778d60a97211e74d495e7a35594a82a58c91cc6da1a69b8bc151331dab238e1772477fe632ca1d474e39ce2d674219926c86265802de504e6ad5f8f4e8e1269f99cf6ec14d998e64a9a5607798ad922071704bff4f6cdbd0efa4248206d5834ca094ddd63afa3bb14033df7d56c304f3b752ea56e55b7c39fbb1e05079d7133d0da725795bf616aeeafecdb4ae75dae7d34f67d73d911afbc305e64b67a19ff0f006a7327988dcb2260b20ccd25d0fcba64f91c1bf1e0c7cf862ed451810a56a8334151cac8e4df0ea9e9f8f9d908539d88336ddd23ba84333d3d682a5e5aea25edb1d11508bded146b6cd2305665043eebee3068299ee6f70f16fe538912e1a99b55562a3f0d6a6bdee4c58d19e4347ad1d9941cb9717f43224e348f36d12373f8b3a5ec1142da8241ae7564f516b285d4928ef24492dcdd4a23b1f33f001cc45213e620e0c863fbb637f0ebc9cdee421d7a86549f648767f82c355411439aaec3237dc47db9302de26d8e717447bb81f273a87a912902f674325c6bba535c351e8a01ca6e993932f43d0d1d7b10b851cf8c87cd46516a7f34748e0240c03d0d282ba0e11a5f492131c963c28a2e92ffa8512c7b4a05f99460ff1be39a8b75f140784414729ad3d34f427caca6edb503e6f9e1138bcf41644aab3d1faf603c15b9779989bf835f9213f78a162590e5bfa1390d426c1fb79b0caa8af762b8400cc2618a7933d2c2de9c3b2cb78d812df488e89bef46dbcb5a1c82d57823c6d0699ed1a3018f054ede3db16830942aa304b2be53b3d9a34ee6af3a2972d280c97c10ccfe293e1d7c9b847d9a05b46fc222f637cfe470fd5b7b266c1a27f5b62566182811a77313381d4e9c81c9fd3b9c64ca89fe972e35764541134740aa56bedff8f0d6d41b669de5935609d18d54792497830a2eb07280e791848b9c2fe50a5547bba060652d9c05d63bed19dc62c85511e82096aed76d43637aead01bbef89b4d85b5dc1e0519fdd157d58814eac7ea1fe6e799cc36398ef1554a191ed9be8f753e8ea075f6bef15026f5247d5edd700c36ea739a6f3f8ff078ae042f259fe6291461a6cf3841184e1977b0c85f72a406de7c7b59fba1490d718dadc1e32a6136dab363d326ea7543157baf807663589c0cafc7bb13398b1ca6dcc68b7f5090b584d45c70c6b7b952816b7fd7d7beb46b403427c825148cb183d0241795185e774c620ef1da683a60ebfa330b2a30f63fad44cb19f2575b6c832bb79b21af951770760fda08b7b7f4b6783d575ddb927287e31a66f843e808444948d2aa18cb377ea3ebf6136e371f826f556a1e2727d0cd0f3fc5ed9595310b90fe5c77108b788eac9d50de054fb0f2ec5e18d640eb0ef5ff460521fb8d2f2ec38fdb701fe57421b1563306692dcbfe72c52ad72a8d1bfc0bd5f2df76f265df2935e5ba6b069cac1805d2e3907159533a3833c2254837558fababc9cca2176afd123b3d50b31d4af3ef152ccef08c891e339b77e7105b17ee3f33158a352081342b0fbc8b1ccf36956f4a1aa64c82a6bc0257703ef1cac3c6407b2862c464dd79cd3718e48115f5b968f98a03b1c7de3a5da6458aa146133ca9eabd3485bd35631df9dc93cfc8e3afd4d167d0940cd4b4c0e23e2562536b2450b228ef66f11e294bbe20d9eb5e70b02238e393c865a34afeb895cc0f03076313e8528e94a439aa640c8f854050e1758353fe0ae431b3d58e3af9dbdb157725dbd2c6244663f83397b5d6b539dce4c91aaca2068ee439ff51e35495b7687f5061c9b4edfbb2579aa1ab342c7249bc5d70038ee44c2d52f80598ae0f7ceebc43c6dc3f27f4eb432455f72b5d72ceed31aeb1c5c69df9ecf211fd0227709904e3bf264fbabf45d6a33c0d59065c4feab86336f107da5b15a6b18aed2d9753baa930de89aa96c430abec27f65767062b699679bd40b1dedc8d412caabcea60927012639bd31123558cfc41d1a7c17bfa7610cfd532789a38e5e3935d342fdb77ab6ae80af2ec3ae99b3f3f32cfdbe627c794176ae241e75c9d01237dd4442b939878474c6f454b35c86294d0f3445c651554ee508cee809e6db68f3d86c5ee95ad8e75ab5976675d6b70afea8ef34c8c86ffe48a7e19fddc368af4906927c0bfff3012ef8b0fd32e81d1fbfc1fcd360c6a477537ec0d7d21ac05c0d25cfc4059fc235e98241657be51557da83a880b9b5994a5e28fd8e7d8a23c2c37176c68ce3337cfad53f6cbbd7ccd821de79c924a5a17c58f7d86beb79ccd1438e722585abfaa42ace36cb9844b8c6cf5f3c9446bbf7b146ffb04eaff68deae4d3f8fbd96d7155f455f581bdbeec87f7d5dd9345382863f318b5f9b4189277328e202d8693aa926590a53face64f4a01f7a046571e6f5858e577493f7ebf2b07e249a9eac6842bc7a2f471f602ad41907feea3ae5fb92034bfe372486936fa71f713a57980f001223d64924e3bb6792220c4ea99d697ef5453f664b1b1e4eafd44ce25e70dd3928d3f070372627f4abce7cc89871e13713a6b8f0b31e2c3967c80b23d49920529904cc90462785b8944512acdeb5dc5021697c56ca2c4c8c4e58844fff30762c5bca29f2d01a6f5713e170f35132e9e0dad63b3730cb0e602118d5501be2ac23cbb38a2fdd5959470140aa30dfb6cbc33927f911beb18ae33a7c72e28687329cbb3b63e6470f555f0a0cbf0d7cef4588da26e259450dedeccba6eef7dd1813a8d6faf1d1363e7e9681798531ec90cc709a2d336668a17fefe2ceb7cebf", 0x1000}, {&(0x7f00000002c0)="7f30251ca53ee313e907e62bc50843e100fd2c0d23aca2567fd5f15f7daaf85f2dd75c218cb082d5414fe0ec34cda8ded6459c708209c74fc5c752e8c654075189e8327a4fe65b5e807faf33092504f4a40b15d8cdd4274b718013a85c30ea288483ec03267c80c00a5a0c6788eaee0ea326f34d2eb4dd15f51a0a00418b4451fb7ae0e4b3359dfc76dd4cd0dc86305bb6d9e327ce07a564e87c0931b25162fbd065e60f65b19d0a5c41e50b5d8529215bb8c008508a5e191a5d3dea89dcd92a5b5d3e50cf", 0xc5}, {&(0x7f00000022c0)="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", 0x105f}], 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5) sendmsg$IPVS_CMD_DEL_SERVICE(r9, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r11, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x8005}, 0x0) fsopen(0x0, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x1) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000ac0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\b', @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.931326875s ago: executing program 1 (id=4911): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x15, 0x5, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2f, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) getsockopt(r2, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000006c0)={0x8001, 0x30, '\x00', 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daafcd3a4a42200", 0x3, 0x1000001, 0x8}, 0x3c) unshare(0x62040200) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg0\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x1, 0xfffff038}, {0x6}]}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd603cf72f4496880020010000000000000000000000000002fe8000000000000000000000000000aa000000", @ANYRES32=0x41424344], 0x0) 5.543750744s ago: executing program 2 (id=4912): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f0000000000)={0x2}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) write$binfmt_script(r10, &(0x7f0000000180), 0xfefc) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 5.08784599s ago: executing program 3 (id=4913): fsopen(0x0, 0x1) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000080)={&(0x7f0000000040)=[{0xa75d, 0x3000, 0x1, &(0x7f00000000c0)='Q'}], 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) openat$cgroup_subtree(r1, &(0x7f0000000300), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newtclass={0xc4, 0x28, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x6, 0x2}, {0xa, 0x8}, {0xf, 0x7}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x94, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x0, 0xf3bc, 0x11}}, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x0, 0x5}}, @TCA_HFSC_RSC={0x10, 0x1, {0x203, 0x9, 0x80}}, @TCA_HFSC_RSC={0x10, 0x1, {0xa84, 0x401, 0x5}}, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x9, 0x5}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x1, 0xa}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x6, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0x40, 0xe0, 0x1}}, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x3, 0x1}}]}}]}, 0xc4}}, 0x4000804) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x7fff, {0x0, 0x0, 0x0, r8, {0x9, 0xffde}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) r9 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x35ec, 0x100, 0x14, 0x2ac, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x7c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x83, 0x50942, 0x12345}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001340)={0x2020}, 0xfffffffffffffd68) 4.560222206s ago: executing program 1 (id=4914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfffffe28, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001e7a2d7587fffa6000080"], 0x24}}, 0x8d0) 4.426366141s ago: executing program 0 (id=4915): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200, 0x0, 0xff00}, 0x3c) 4.425405524s ago: executing program 1 (id=4916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x8, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0xc}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x880, 0x2c, 0xf0b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0x6}, {0x0, 0xfff1}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xbc6, 0x10, 0x100, 0x6, 0x5, 0xfffffff7, 0x8001, 0x8, 0x101, 0x8, 0x49, 0x8, 0x80, 0x4, 0x2, 0x5, 0x3ff, 0x7af, 0x5, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x108, 0x4, 0x1, 0x6, 0x1, 0x2, 0x1, 0x7, 0x29b3, 0x8, 0x5, 0x9, 0x80000001, 0xfffffffc, 0x5, 0xb, 0x2, 0xb, 0x1ff, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x2596, 0x1, 0x4, 0x2, 0x2, 0x3, 0xd, 0x4000000, 0x5, 0x8001, 0xc, 0xf605, 0x8, 0x1, 0x9, 0x2, 0x2a9, 0xc, 0x0, 0x1, 0x5, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x32, 0x8, 0x645, 0x2, 0x80000800, 0x2, 0x9, 0x9, 0x298, 0x186000, 0x3230, 0xfffffffd, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0x7f, 0xffffff6b, 0x8, 0x4ed5, 0x8, 0x7, 0x0, 0xd53, 0xfffffffd, 0x1, 0x180, 0xa, 0x4, 0x9, 0x0, 0x7, 0x10, 0x6, 0x3, 0x5, 0x6, 0xd72d, 0x0, 0xc9, 0x101, 0x9, 0xf, 0xb1e, 0x3, 0x4, 0x6, 0x9, 0xff, 0x8, 0xe0, 0x3, 0x6ee4, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74f, 0x87, 0x80000000, 0x7fffffff, 0x1, 0xfffffff7, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x6e, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x20000006, 0x613b, 0x3, 0x2007ff, 0xefba, 0xf7, 0x5, 0x2, 0xfffffff8, 0x9, 0x100, 0x9, 0x1, 0x2, 0x80000000, 0x401, 0x2, 0xc9, 0x81, 0x68, 0x3, 0xa5, 0x80, 0x0, 0x80000001, 0x1ff, 0x5, 0x1, 0x7f, 0x7, 0x6, 0x5, 0xfff, 0x68e0, 0x2, 0x0, 0x100002, 0x9, 0xfff, 0x1000, 0x1, 0x5, 0x5, 0x71c, 0x6, 0x699c, 0x41bf, 0x34, 0x5, 0x7f, 0x8a5a, 0xc0000000, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x4009366, 0x7, 0x800, 0x401, 0x1, 0xce, 0x8, 0x3, 0x2, 0x2, 0x5, 0xe, 0xfe, 0x809, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x1, 0x8, 0x6, 0x8002, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x5, 0xd, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x816}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x40, 0x6, 0xc, 0xff, 0xffffffff, 0x2, 0x0, 0x6, 0x13c, 0x800, 0x8b, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x6, 0x10001, 0xda, 0x689, 0x7fffffff, 0x2, 0x10, 0x1fd, 0x2, 0x101, 0x2, 0x4, 0x4, 0x8000, 0x3c, 0x3, 0xa, 0x8, 0x2, 0x8001, 0x401, 0x3, 0x6, 0x303, 0xda, 0x1ff, 0x101, 0x9, 0x7fff, 0x3, 0x0, 0x4, 0x2, 0x8, 0xfffffff7, 0x110001, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x3, 0x1000, 0x5, 0x2, 0x8, 0x3, 0xf, 0x0, 0xa3, 0x4, 0x2, 0xffd, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1, 0x9, 0x6, 0x23, 0xfffffffe, 0xff, 0xfffffffc, 0x6, 0x2, 0x5326, 0xb, 0x5, 0x7, 0x6, 0x81, 0xd9f6, 0xa, 0x8000, 0x0, 0x401, 0x3, 0x3, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x4, 0xffff8000, 0xc, 0xa, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0x3, 0x1, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xc, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x80000001, 0x7fffffff, 0x4, 0xd95, 0x3c5, 0x6, 0xffff, 0x1, 0xaa3a, 0x5, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x1000, 0xa16, 0x101, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x5, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x3, 0x8, 0x81, 0x7, 0xff, 0xc9, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x4, 0x3aee, 0xffffffff, 0x8, 0x0, 0x1, 0x0, 0x4, 0x7, 0x7ffffffc, 0x0, 0x5, 0x7ab2a9cb, 0xfffffffe, 0xfff, 0x5, 0xffffffff, 0x0, 0x7f, 0x2, 0xfffffff9, 0x3, 0x10001, 0x8000, 0x8, 0x6, 0x9, 0x3, 0xfffffff8, 0xe58, 0x80000001, 0x60000000, 0xffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x100, 0x9, 0xfc, 0x3, 0x5, 0x7fff, 0xc, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0xdc8d, 0xfffd, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0xb, 0xbffffffe, 0x1, 0x80, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x4, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xfffeffff}, 0x1, 0xf, 0x1}}]}]}}]}, 0x880}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYRES8=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB="6bd4573f714afd90b2511eb93f828be399672463316b5ce869e57784a3d5073e280166d7303fc240267ec6ce64fdbdb023ae897f735a7e0b8f1d12dddfa300fccce1730cc6d7c85476d125cab9cc9bfe4d9f7d76a1badece567e217d7e95913d8c76195ca95422f3623647b6dbc45698a66ebf05a379445ec8d080", @ANYRES64=r0, @ANYRESDEC=0x0, @ANYRES8=r4]) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={r6, 0x9, 0xb, 0x8}, 0x10) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x7, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x1000000, 0x1010, r7, 0x0) getdents64(r7, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a000000060000000000000000000000010000000000000004000d00002000000100"], 0x2a) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="b0000000feffffff00000000000000000400000000200000030000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000fdffffffffffffff02000000000000000800000000c0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@int=0x1, 0x4) 4.286876509s ago: executing program 0 (id=4917): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="1c000000190081044e81f782db4cb90402200800fd007c05e8fe55a1", 0x1c}], 0x1}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 4.143536405s ago: executing program 2 (id=4918): unshare(0x4020400) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) 4.099929224s ago: executing program 0 (id=4919): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r2, 0x24, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32) socket(0x27, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async, rerun: 64) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x4, 0x10, 0x0, 0x0, 0x5f, 0xff, 0x0, 0xa6, 0x2, 0x5}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0x2, 0x35, 0x0, 0x0, 0x4, 0x5, 0x4, 0xfe, 0x5, 0x0, 0x0, 0x0, 0x7fffffff}], 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000280)={[{0x48, 0x20fe, 0x6, 0x7, 0x4c, 0x9, 0x2, 0xc3, 0x4, 0x81, 0x5, 0x5, 0x9}, {0x711, 0x4, 0x8, 0x1, 0x33, 0xc, 0x7, 0x6, 0xfc, 0xa0, 0x84, 0xbb, 0x3}, {0xfffffffc, 0xe0, 0xc, 0x2, 0x3, 0x3, 0x2, 0xf, 0x8, 0xf, 0x7, 0x3, 0x9}], 0x2}) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x620900, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0xffffffffffffffff) ioctl$KVM_GET_MP_STATE(r8, 0x8004ae98, &(0x7f0000000000)) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x202000, 0x0) syz_kvm_setup_cpu$x86(r9, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000001c0)="0f01c8660f38210ecc040f6f220f214dbaf80c66b865a5098d66efbafc0cb0dbee0f019b00000f01d80fc7adf3ff0f01c2660f38009b0038", 0x38}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac00f30f099db920000000b806000000ba000000000f3066460f38809bf77f00000f474a0fc73d0d0000003e653666400f00c7775f5f0f01c4", 0x52}], 0x1, 0x10, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) 4.058396681s ago: executing program 2 (id=4920): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000002000000001"], 0x18}, 0x0) 3.96836523s ago: executing program 0 (id=4921): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) socket$nl_audit(0x10, 0x3, 0x9) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff}, 0xc) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffa000/0x1000)=nil, 0x1000}) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 3.231919197s ago: executing program 4 (id=4922): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0xfd2, 0x3, 0x3}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x0, 0xfffffffd, 0x33}, 0x2c) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x76f}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000200)={0x4000, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x1, 0x2}) syz_clone(0x0, 0x0, 0xf5ff, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {0x0}, {&(0x7f0000001680)="094fb143daa9baa3eaaa10ca06886c463118e0", 0x13}], 0x3}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x32, @local, 0x0, 0x2, 'sh\x00'}, 0x2c) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') 2.962437616s ago: executing program 0 (id=4923): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x800, 0x0, 0x10, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, &(0x7f0000000d40), 0x0}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x3, 0x0, 0x4, 0x3}, {0x3, 0x6, 0x5, 0x2}, {0x6, 0x6, 0x4, 0x5}, {0x1, 0xe0, 0xda, 0x4}]}, 0x10) connect$can_bcm(r5, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r5, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x48}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000080)=0x100, 0x4) sendmmsg$inet(r7, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x20}) 2.391797427s ago: executing program 1 (id=4924): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_regs={0x4, 0x0, 0x6, "f42a97b96d02"}}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000240)={0x18, r1}) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xc) 2.231748474s ago: executing program 2 (id=4925): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000064, 0x0, 0xcfb, 0x1, 0x0, 0x5, 0x0, 0xffffffff}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x80, 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)={[], 0xfffffffffffffff4}) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902"], 0x0) ioprio_get$pid(0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903001bd701020301"], 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000380)=ANY=[@ANYRES16=r2], 0x45) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in6=@mcast1, 0x0, 0x8, 0x4e23, 0x0, 0xa, 0x50, 0x0, 0x3c}, {0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x400000000000000}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x2}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000810) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9f508cddc5652e08f2c6eb135deb010018000000000000000000000300000000020000000000"], 0x0, 0x1a, 0x0, 0x1, 0x5, 0x10000}, 0x28) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 981.907071ms ago: executing program 1 (id=4926): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f0000000000)={0x2}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) write$binfmt_script(r10, &(0x7f0000000180), 0xfefc) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 716.558244ms ago: executing program 3 (id=4927): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002480)={0x2020}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) lseek(r2, 0xfffffffffffffff5, 0x1) 0s ago: executing program 4 (id=4928): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, r3, 0x3000011, 0x2012, r2, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000040), 0xb80, 0x10200) signalfd4(r4, &(0x7f0000000080)={[0x4]}, 0x8, 0x800) close(0x5) close(0x4) munmap(&(0x7f0000c00000/0x400000)=nil, 0x400000) kernel console output (not intermixed with test programs): usb 4-1: SerialNumber: syz [ 866.740651][T19048] usb 4-1: config 0 descriptor?? [ 866.952927][T19354] netlink: 'syz.3.4495': attribute type 13 has an invalid length. [ 866.973131][T19354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.981844][T19354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.035631][T19354] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 867.063323][T19048] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 867.118517][T19048] usb 4-1: USB disconnect, device number 55 [ 867.307814][T19380] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.4504'. [ 868.002458][T13976] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 868.178038][T13976] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 868.186861][T13976] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.208558][T13976] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 868.218960][T13976] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.257508][T13976] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.411100][T13976] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 868.446092][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 868.446108][ T30] audit: type=1400 audit(1751580600.332:404): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=19404 comm="syz.4.4511" [ 868.487279][T13976] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 868.501592][T13976] usb 3-1: Product: syz [ 868.516553][T13976] usb 3-1: Manufacturer: syz [ 868.577171][T13976] cdc_wdm 3-1:1.0: skipping garbage [ 868.584665][T13976] cdc_wdm 3-1:1.0: skipping garbage [ 868.591519][T13976] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 868.607659][T13976] cdc_wdm 3-1:1.0: Unknown control protocol [ 868.904705][T19398] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 868.919261][T19398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.929488][T19398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.267933][T19416] netlink: 'syz.2.4508': attribute type 27 has an invalid length. [ 869.549043][T19420] netlink: 892 bytes leftover after parsing attributes in process `syz.4.4514'. [ 869.750025][T19423] tipc: Started in network mode [ 869.762719][T19423] tipc: Node identity 3eb9288a63b3, cluster identity 4711 [ 869.778081][T19423] tipc: Enabled bearer , priority 0 [ 869.788706][T19423] syzkaller0: entered promiscuous mode [ 869.823331][T19423] syzkaller0: entered allmulticast mode [ 869.974064][T19428] netlink: 'syz.1.4516': attribute type 3 has an invalid length. [ 870.027853][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.034412][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.044749][T19424] tipc: Resetting bearer [ 870.094022][T19424] tipc: Disabling bearer [ 871.343083][T19041] usb 3-1: USB disconnect, device number 27 [ 872.002391][T19041] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 872.183994][T19041] usb 4-1: Using ep0 maxpacket: 16 [ 872.232286][T19041] usb 4-1: config 0 has no interfaces? [ 872.254079][T19041] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 872.284966][T19041] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.302639][T19041] usb 4-1: config 0 descriptor?? [ 872.767350][T19484] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 873.951287][T19495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.975060][T19495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.484871][T19041] usb 4-1: USB disconnect, device number 56 [ 874.944872][T19041] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 875.154642][T19041] usb 4-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 875.177328][T19041] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 875.188214][T19041] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 875.214260][T19041] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 875.271290][T19041] usb 4-1: SerialNumber: syz [ 875.576812][T19041] usb 4-1: 0:2 : does not exist [ 875.693343][T19041] usb 4-1: unit 5: unexpected type 0x03 [ 875.743944][T19041] usb 4-1: USB disconnect, device number 57 [ 876.411622][T19530] fuse: Bad value for 'user_id' [ 876.423001][T19530] fuse: Bad value for 'user_id' [ 877.942757][ T5912] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 878.145572][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 878.168089][ T5912] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 878.182401][ T5912] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 878.203135][ T5912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 878.214606][ T5912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 878.224701][ T5912] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 878.238178][ T5912] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 878.248327][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.471615][ T5912] usb 3-1: GET_CAPABILITIES returned 0 [ 878.485914][ T5912] usbtmc 3-1:16.0: can't read capabilities [ 878.533199][T19564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4554'. [ 878.852965][T19563] xt_CT: No such helper "snmp" [ 879.272465][ T5912] usb 3-1: USB disconnect, device number 28 [ 879.308654][T19563] x_tables: duplicate underflow at hook 2 [ 879.329330][T19563] netlink: 'syz.4.4555': attribute type 12 has an invalid length. [ 879.732648][ T5897] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 879.772547][ T5912] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 879.894212][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.906591][ T5912] usb 3-1: device descriptor read/64, error -71 [ 879.912950][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.923465][ T5897] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 879.932620][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.943542][ T5897] usb 4-1: config 0 descriptor?? [ 880.172803][ T5912] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 880.264519][T14364] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 880.280026][T14364] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 880.292389][T14364] usb 2-1: USB disconnect, device number 14 [ 880.305535][ T5912] usb 3-1: device descriptor read/64, error -71 [ 880.353859][ T5897] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 880.360873][ T5897] pyra 0003:1E7D:2CF6.0025: item fetching failed at offset 5/7 [ 880.369240][ T5897] pyra 0003:1E7D:2CF6.0025: parse failed [ 880.375176][ T5897] pyra 0003:1E7D:2CF6.0025: probe with driver pyra failed with error -22 [ 880.423342][ T5912] usb usb3-port1: attempt power cycle [ 880.602635][T14364] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 880.782772][ T5912] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 880.787436][T14364] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 880.799726][T14364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.817191][T14364] usb 2-1: config 0 descriptor?? [ 880.827588][T14364] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 880.882574][T19041] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 880.981633][T14364] gp8psk: usb in 128 operation failed. [ 880.990508][T14364] gp8psk: usb in 137 operation failed. [ 880.998134][T14364] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 881.011084][ T5912] usb 3-1: device not accepting address 31, error -71 [ 881.011095][T14364] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 881.014672][T14364] usb 2-1: USB disconnect, device number 15 [ 881.052707][T19041] usb 5-1: Using ep0 maxpacket: 8 [ 881.061507][T19041] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 881.105207][T19041] usb 5-1: config 179 has no interface number 0 [ 881.122070][T19041] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 881.146543][T19041] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 881.169795][T19041] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 881.198432][T19041] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 881.223789][T19041] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 881.259328][T19041] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 881.281655][T19041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.316951][T19587] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 881.392436][ T5912] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 881.492481][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 881.508166][ T5912] usb 3-1: unable to get BOS descriptor or descriptor too short [ 881.559875][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 881.732460][ T5912] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 881.740814][T19041] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input112 [ 881.791957][ T5912] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 881.832887][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.840960][ T5912] usb 3-1: Product: syz [ 881.964498][ T5912] usb 3-1: Manufacturer: syz [ 881.969164][ T5912] usb 3-1: SerialNumber: syz [ 882.507308][ T10] usb 4-1: USB disconnect, device number 58 [ 882.877019][T19606] FAULT_INJECTION: forcing a failure. [ 882.877019][T19606] name failslab, interval 1, probability 0, space 0, times 0 [ 882.891408][T19606] CPU: 0 UID: 0 PID: 19606 Comm: syz.3.4569 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 882.891435][T19606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 882.891446][T19606] Call Trace: [ 882.891454][T19606] [ 882.891462][T19606] dump_stack_lvl+0x189/0x250 [ 882.891492][T19606] ? __pfx____ratelimit+0x10/0x10 [ 882.891516][T19606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 882.891539][T19606] ? __pfx__printk+0x10/0x10 [ 882.891563][T19606] ? __pfx___might_resched+0x10/0x10 [ 882.891586][T19606] ? fs_reclaim_acquire+0x7d/0x100 [ 882.891610][T19606] should_fail_ex+0x414/0x560 [ 882.891635][T19606] should_failslab+0xa8/0x100 [ 882.891655][T19606] __kmalloc_noprof+0xcb/0x4f0 [ 882.891670][T19606] ? snd_pcm_hw_refine+0x967/0x1640 [ 882.891696][T19606] snd_pcm_hw_refine+0x967/0x1640 [ 882.891722][T19606] ? kasan_save_free_info+0x46/0x50 [ 882.891742][T19606] ? snd_pcm_hw_param_near+0x417/0x500 [ 882.891764][T19606] ? snd_pcm_oss_write+0x2fb/0x11a0 [ 882.891785][T19606] ? do_writev+0x14d/0x2d0 [ 882.891802][T19606] ? do_syscall_64+0xfa/0x3b0 [ 882.891824][T19606] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 882.891880][T19606] ? kasan_quarantine_put+0xdd/0x220 [ 882.891910][T19606] ? lockdep_hardirqs_on+0x9c/0x150 [ 882.891936][T19606] snd_pcm_hw_param_first+0x3e9/0xaf0 [ 882.891968][T19606] snd_pcm_hw_param_near+0x460/0x500 [ 882.892001][T19606] snd_pcm_oss_change_params_locked+0x2135/0x3e40 [ 882.892057][T19606] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 882.892079][T19606] ? snd_pcm_oss_write+0x28f/0x11a0 [ 882.892108][T19606] ? aa_file_perm+0x3e7/0xed0 [ 882.892144][T19606] snd_pcm_oss_write+0x2fb/0x11a0 [ 882.892185][T19606] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 882.892209][T19606] ? bpf_lsm_file_permission+0x9/0x20 [ 882.892230][T19606] ? security_file_permission+0x75/0x290 [ 882.892249][T19606] ? rw_verify_area+0x258/0x650 [ 882.892277][T19606] vfs_writev+0x4b3/0x960 [ 882.892298][T19606] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 882.892322][T19606] ? __pfx_vfs_writev+0x10/0x10 [ 882.892354][T19606] ? __fget_files+0x2a/0x420 [ 882.892376][T19606] ? __fget_files+0x3a0/0x420 [ 882.892392][T19606] ? __fget_files+0x2a/0x420 [ 882.892419][T19606] do_writev+0x14d/0x2d0 [ 882.892441][T19606] ? __pfx_do_writev+0x10/0x10 [ 882.892458][T19606] ? rcu_is_watching+0x15/0xb0 [ 882.892487][T19606] ? do_syscall_64+0xbe/0x3b0 [ 882.892512][T19606] do_syscall_64+0xfa/0x3b0 [ 882.892534][T19606] ? lockdep_hardirqs_on+0x9c/0x150 [ 882.892556][T19606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.892573][T19606] ? clear_bhb_loop+0x60/0xb0 [ 882.892593][T19606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.892609][T19606] RIP: 0033:0x7f5e1338e929 [ 882.892625][T19606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 882.892640][T19606] RSP: 002b:00007f5e14193038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 882.892659][T19606] RAX: ffffffffffffffda RBX: 00007f5e135b5fa0 RCX: 00007f5e1338e929 [ 882.892671][T19606] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 882.892681][T19606] RBP: 00007f5e14193090 R08: 0000000000000000 R09: 0000000000000000 [ 882.892692][T19606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 882.892702][T19606] R13: 0000000000000000 R14: 00007f5e135b5fa0 R15: 00007f5e136dfa28 [ 882.892731][T19606] [ 883.237069][T19041] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 883.514954][T19041] usb 2-1: unable to get BOS descriptor or descriptor too short [ 883.625757][T19041] usb 2-1: not running at top speed; connect to a high speed hub [ 883.691891][T19041] usb 2-1: config 3 has an invalid interface number: 106 but max is 0 [ 883.713399][T19041] usb 2-1: config 3 has no interface number 0 [ 883.720786][T19041] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 883.732871][T19041] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 883.744936][T19041] usb 2-1: config 3 interface 106 has no altsetting 0 [ 883.761590][T19041] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 883.773461][T19041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.781770][T19041] usb 2-1: Product: syz [ 883.796826][T19041] usb 2-1: Manufacturer: syz [ 883.802301][T19041] usb 2-1: SerialNumber: syz [ 883.816153][T19600] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 883.830936][T19600] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 883.846960][ T5897] usb 5-1: USB disconnect, device number 39 [ 883.846996][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 883.861861][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 883.862269][ T5897] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 884.055261][T19600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.079553][T19600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.185638][T19041] kobil_sct 2-1:3.106: KOBIL USB smart card terminal converter detected [ 884.203172][T19041] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 884.225573][T19041] usb 2-1: USB disconnect, device number 16 [ 884.262495][T19041] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 884.291175][T19041] kobil_sct 2-1:3.106: device disconnected [ 884.778011][ T5912] usb 3-1: USB disconnect, device number 32 [ 885.312636][ T5897] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 885.486185][ T5897] usb 2-1: config index 0 descriptor too short (expected 8192, got 77) [ 885.497695][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.566291][ T5897] usb 2-1: config 0 has no interfaces? [ 885.669295][ T5897] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 885.682484][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.690513][ T5897] usb 2-1: Product: syz [ 885.722412][ T5897] usb 2-1: Manufacturer: syz [ 885.738763][ T5897] usb 2-1: SerialNumber: syz [ 885.833558][ T5897] usb 2-1: config 0 descriptor?? [ 886.237013][T19645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4578'. [ 886.320309][T19645] netlink: 5004 bytes leftover after parsing attributes in process `syz.4.4578'. [ 886.861533][ T30] audit: type=1804 audit(1751580618.752:405): pid=19652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4580" name="/newroot/268/file0" dev="tmpfs" ino=1397 res=1 errno=0 [ 886.890107][ T30] audit: type=1800 audit(1751580618.752:406): pid=19652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4580" name="file0" dev="tmpfs" ino=1397 res=0 errno=0 [ 887.292715][ T5912] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 887.854583][ T5912] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 887.870729][ T5912] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.898956][ T5912] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 887.928657][ T5912] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.963303][ T5912] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.008291][ T5912] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 888.022195][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 888.071433][ T5912] usb 5-1: Product: syz [ 888.091920][ T5912] usb 5-1: Manufacturer: syz [ 888.129113][ T5912] cdc_wdm 5-1:1.0: skipping garbage [ 888.162566][ T5912] cdc_wdm 5-1:1.0: skipping garbage [ 888.199532][ T5912] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 888.209857][ T5897] usb 2-1: USB disconnect, device number 17 [ 888.234137][ T5912] cdc_wdm 5-1:1.0: Unknown control protocol [ 888.331209][T19657] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 888.347170][T19657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.357528][T19657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.627423][T19675] netlink: 'syz.4.4582': attribute type 27 has an invalid length. [ 889.251156][T19675] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.258469][T19675] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.385576][T19675] batman_adv: batadv0: Interface deactivated: dummy0 [ 889.393177][T19675] dummy0: left promiscuous mode [ 889.398063][T19675] dummy0: left allmulticast mode [ 890.012569][T19041] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 890.053646][T19675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.092202][T19675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.164189][T19041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.178065][T19041] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 890.190597][T19041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.207244][T19041] usb 3-1: config 0 descriptor?? [ 890.503287][T19675] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.518755][T19675] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.528434][T19675] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.538259][T19675] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.633491][T19696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.656181][T19696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.672939][T19696] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 890.684278][T19041] usbhid 3-1:0.0: can't add hid device: -71 [ 890.694010][T19041] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 890.715932][T19041] usb 3-1: USB disconnect, device number 33 [ 890.848916][ T5897] usb 5-1: USB disconnect, device number 40 [ 891.025424][T19720] netlink: 'syz.1.4601': attribute type 63 has an invalid length. [ 891.087602][T19723] usb usb8: usbfs: process 19723 (syz.4.4603) did not claim interface 0 before use [ 891.375130][T19738] binder: 19734:19738 ioctl c0189379 200000002540 returned -22 [ 891.442936][T19739] tap0: tun_chr_ioctl cmd 1074025677 [ 891.479589][T19739] tap0: linktype set to 768 [ 891.822628][ T10] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 892.055812][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 892.063896][ T10] usb 5-1: can't read configurations, error -61 [ 892.072937][T19041] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 892.192430][ T10] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 892.311356][T19041] usb 2-1: Using ep0 maxpacket: 32 [ 892.322626][ T5897] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 892.343643][T19041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.345443][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 892.403792][T19766] syzkaller1: entered promiscuous mode [ 892.409387][T19766] syzkaller1: entered allmulticast mode [ 892.471162][ T10] usb 5-1: can't read configurations, error -61 [ 892.473270][T19041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.492498][ T10] usb usb5-port1: attempt power cycle [ 892.515324][T19041] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 892.525663][T19041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.543597][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.566283][T19041] usb 2-1: config 0 descriptor?? [ 892.568948][ T5897] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 892.712430][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 892.762580][ T5897] usb 4-1: Product: syz [ 892.775605][ T5897] usb 4-1: Manufacturer: syz [ 892.783189][ T5897] usb 4-1: SerialNumber: syz [ 892.799278][ T5897] usb 4-1: config 0 descriptor?? [ 892.862441][ T5897] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 893.012496][ T10] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 893.147398][ T7405] udevd[7405]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 893.177061][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 893.185325][ T10] usb 5-1: can't read configurations, error -61 [ 893.332851][ T10] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 893.380948][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 893.398129][ T10] usb 5-1: can't read configurations, error -61 [ 893.413131][ T10] usb usb5-port1: unable to enumerate USB device [ 893.578968][T19773] syzkaller1: entered promiscuous mode [ 893.587129][T19773] syzkaller1: entered allmulticast mode [ 893.605534][T19773] syzkaller1: left promiscuous mode [ 893.610909][T19773] syzkaller1: left allmulticast mode [ 893.631400][T14364] usb 4-1: USB disconnect, device number 59 [ 893.729635][T19777] FAULT_INJECTION: forcing a failure. [ 893.729635][T19777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.746516][T19777] CPU: 1 UID: 0 PID: 19777 Comm: syz.3.4622 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 893.746542][T19777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 893.746552][T19777] Call Trace: [ 893.746559][T19777] [ 893.746566][T19777] dump_stack_lvl+0x189/0x250 [ 893.746597][T19777] ? __pfx____ratelimit+0x10/0x10 [ 893.746619][T19777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 893.746641][T19777] ? __pfx__printk+0x10/0x10 [ 893.746659][T19777] ? __might_fault+0xb0/0x130 [ 893.746686][T19777] should_fail_ex+0x414/0x560 [ 893.746709][T19777] _copy_from_iter+0x1db/0x16f0 [ 893.746735][T19777] ? rcu_is_watching+0x15/0xb0 [ 893.746758][T19777] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 893.746776][T19777] ? __pfx__copy_from_iter+0x10/0x10 [ 893.746798][T19777] ? __build_skb_around+0x257/0x3e0 [ 893.746820][T19777] ? netlink_sendmsg+0x642/0xb30 [ 893.746836][T19777] ? skb_put+0x11b/0x210 [ 893.746857][T19777] netlink_sendmsg+0x6b2/0xb30 [ 893.746884][T19777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.746905][T19777] ? aa_sock_msg_perm+0x94/0x160 [ 893.746927][T19777] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 893.746947][T19777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.746967][T19777] __sock_sendmsg+0x219/0x270 [ 893.746993][T19777] ____sys_sendmsg+0x505/0x830 [ 893.747019][T19777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.747047][T19777] ? import_iovec+0x74/0xa0 [ 893.747067][T19777] ___sys_sendmsg+0x21f/0x2a0 [ 893.747088][T19777] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.747141][T19777] ? __fget_files+0x2a/0x420 [ 893.747159][T19777] ? __fget_files+0x3a0/0x420 [ 893.747186][T19777] __x64_sys_sendmsg+0x19b/0x260 [ 893.747208][T19777] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 893.747237][T19777] ? __pfx_ksys_write+0x10/0x10 [ 893.747251][T19777] ? rcu_is_watching+0x15/0xb0 [ 893.747278][T19777] ? do_syscall_64+0xbe/0x3b0 [ 893.747305][T19777] do_syscall_64+0xfa/0x3b0 [ 893.747326][T19777] ? lockdep_hardirqs_on+0x9c/0x150 [ 893.747354][T19777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.747371][T19777] ? clear_bhb_loop+0x60/0xb0 [ 893.747390][T19777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.747407][T19777] RIP: 0033:0x7f5e1338e929 [ 893.747423][T19777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.747439][T19777] RSP: 002b:00007f5e14193038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 893.747457][T19777] RAX: ffffffffffffffda RBX: 00007f5e135b5fa0 RCX: 00007f5e1338e929 [ 893.747470][T19777] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 893.747481][T19777] RBP: 00007f5e14193090 R08: 0000000000000000 R09: 0000000000000000 [ 893.747491][T19777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.747500][T19777] R13: 0000000000000000 R14: 00007f5e135b5fa0 R15: 00007f5e136dfa28 [ 893.747525][T19777] [ 894.118679][T19781] netlink: 'syz.2.4624': attribute type 6 has an invalid length. [ 894.808510][T19757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.827777][T19041] usbhid 2-1:0.0: can't add hid device: -71 [ 894.835913][T19041] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 894.856559][T19041] usb 2-1: USB disconnect, device number 18 [ 895.353237][T19804] dummy0: entered promiscuous mode [ 895.360214][T19804] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 895.373285][T19804] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 895.383480][T19804] hsr1: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 895.402466][T19804] hsr1: entered allmulticast mode [ 895.422457][T19807] netlink: 'syz.1.4629': attribute type 11 has an invalid length. [ 895.481115][T19804] dummy0: entered allmulticast mode [ 895.502509][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 895.551126][T19804] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 895.674095][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.710972][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.732719][ T10] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 895.742543][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.768927][ T10] usb 3-1: config 0 descriptor?? [ 896.328970][ T10] hid-steam 0003:28DE:1142.0026: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 896.342027][T19818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4632'. [ 896.447434][ T10] hid-steam 0003:28DE:1142.0026: Steam wireless receiver connected [ 896.602717][ T10] hid-steam 0003:28DE:1142.0027: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 896.614616][ T5897] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 896.621418][T19818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4632'. [ 896.646984][ T10] usb 3-1: USB disconnect, device number 34 [ 896.663055][ T10] hid-steam 0003:28DE:1142.0026: Steam wireless receiver disconnected [ 896.732074][T19827] fido_id[19827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 896.794767][ T5897] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 896.807390][ T5897] usb 4-1: config 5 has no interface number 0 [ 896.813990][ T5897] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 896.826396][ T5897] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 896.856592][ T5897] usb 4-1: config 5 interface 123 has no altsetting 0 [ 896.877155][ T5897] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 896.896553][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.905706][ T5897] usb 4-1: Product: syz [ 896.911052][ T5897] usb 4-1: Manufacturer: syz [ 896.916854][ T5897] usb 4-1: SerialNumber: syz [ 897.149671][ T5897] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 897.168921][ T5897] usb 4-1: USB disconnect, device number 60 [ 897.387250][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4643'. [ 897.396574][T19848] veth0_to_bond: entered allmulticast mode [ 897.584745][T19855] syzkaller1: entered promiscuous mode [ 897.599714][T19855] syzkaller1: entered allmulticast mode [ 899.120411][T19888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.273058][T14364] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 899.442433][T14364] usb 5-1: Using ep0 maxpacket: 8 [ 899.448966][T14364] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.480303][T14364] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 899.514496][T14364] usb 5-1: config 0 interface 0 has no altsetting 0 [ 899.531484][T14364] usb 5-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 899.550822][T14364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.577025][T14364] usb 5-1: config 0 descriptor?? [ 899.597917][T14364] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 899.664110][T19041] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 899.809059][T14364] usb 5-1: USB disconnect, device number 45 [ 899.837275][T19041] usb 3-1: not running at top speed; connect to a high speed hub [ 899.846338][T19041] usb 3-1: config 8 has an invalid interface number: 161 but max is 3 [ 899.856284][T19041] usb 3-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 899.865043][T19041] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 899.891915][T19041] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 899.931396][T19041] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 899.941613][T19041] usb 3-1: config 8 has an invalid interface number: 10 but max is 3 [ 899.958204][T19041] usb 3-1: config 8 has an invalid interface number: 244 but max is 3 [ 899.973090][T19041] usb 3-1: config 8 has no interface number 0 [ 899.979396][T19041] usb 3-1: config 8 has no interface number 1 [ 899.989674][T19041] usb 3-1: config 8 has no interface number 2 [ 899.999861][T19041] usb 3-1: config 8 interface 3 altsetting 128 endpoint 0x8 has invalid maxpacket 2048, setting to 64 [ 900.024976][T19041] usb 3-1: config 8 interface 3 altsetting 128 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 900.077241][T19041] usb 3-1: config 8 interface 161 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 900.096823][T19041] usb 3-1: config 8 interface 161 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 900.121294][T19041] usb 3-1: config 8 interface 161 altsetting 8 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 900.144253][T19041] usb 3-1: config 8 interface 161 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 900.172960][T19041] usb 3-1: config 8 interface 161 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 900.192637][T19041] usb 3-1: config 8 interface 161 altsetting 8 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 900.212528][T19041] usb 3-1: config 8 interface 161 altsetting 8 has 12 endpoint descriptors, different from the interface descriptor's value: 13 [ 900.243115][T19041] usb 3-1: config 8 interface 244 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 900.289519][T19041] usb 3-1: config 8 interface 244 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 900.482828][T19041] usb 3-1: config 8 interface 244 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 900.502619][T14364] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 900.513456][T19041] usb 3-1: config 8 interface 244 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 900.739607][T14364] usb 2-1: config 0 has no interfaces? [ 900.749343][T19041] usb 3-1: config 8 interface 244 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 900.764698][T14364] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 900.798147][T19041] usb 3-1: config 8 interface 244 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 900.857546][T14364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.883654][T14364] usb 2-1: Product: syz [ 900.889351][T19041] usb 3-1: config 8 interface 3 has no altsetting 0 [ 900.896602][T14364] usb 2-1: Manufacturer: syz [ 901.058482][T19910] netlink: 'syz.3.4662': attribute type 27 has an invalid length. [ 901.067755][T19910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.080234][T19910] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.114207][T19910] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.123628][T19041] usb 3-1: config 8 interface 161 has no altsetting 0 [ 901.123652][T19041] usb 3-1: config 8 interface 10 has no altsetting 0 [ 901.123669][T19041] usb 3-1: config 8 interface 244 has no altsetting 0 [ 901.123822][T14364] usb 2-1: SerialNumber: syz [ 901.156784][T19910] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.168475][T14364] usb 2-1: config 0 descriptor?? [ 901.180618][T19041] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice=16.e8 [ 901.211660][T19910] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.249026][T19910] geneve2: left promiscuous mode [ 901.273716][T19041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.281751][T19041] usb 3-1: Product:   [ 901.312656][T19041] usb 3-1: Manufacturer: 怑む묀琩梋뱳탸嬸⺬㝶޶댬亼塕豯崞ࠤ頻䂡몏﹚Ƹዬ颅ꖊ᪍鐿ꃷ휹篩怖⤴蟞狣虅礴춴焋柝粵꟨廖镙耀쿕ᕱ㾪ܕ촣￧䆊⒵䖹鶮叚齨ᑢ넬㝺𢡊㭅堜﨨坾䢈߹Ⱄ蠤嘁菶з䬳躏ᳱぱ⭹䭍邒㊍佩첝⨙ [ 901.594622][T19041] usb 3-1: SerialNumber: й [ 901.805752][T19916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.820709][T19916] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.836880][T19916] batman_adv: batadv0: Interface activated: dummy0 [ 901.846362][T19916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 901.868724][T19919] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 902.049430][T19925] netlink: 'syz.0.4664': attribute type 4 has an invalid length. [ 902.061840][T19041] option 3-1:8.161: GSM modem (1-port) converter detected [ 902.120905][T19041] option 3-1:8.10: GSM modem (1-port) converter detected [ 902.154027][T19041] option 3-1:8.244: GSM modem (1-port) converter detected [ 902.224351][T19041] usb 3-1: USB disconnect, device number 35 [ 902.298575][T19041] option 3-1:8.161: device disconnected [ 902.320062][T19041] option 3-1:8.10: device disconnected [ 902.358700][T19041] option 3-1:8.244: device disconnected [ 902.531492][T19933] 8021q: adding VLAN 0 to HW filter on device bond3 [ 902.559863][T19933] bond0: (slave bond3): Enslaving as an active interface with an up link [ 902.986147][ T5897] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 903.222150][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.254400][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.277604][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 903.306414][ T5897] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 903.326011][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.389972][ T5897] usb 4-1: config 0 descriptor?? [ 903.833844][ T5897] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 904.125440][T19048] usb 2-1: USB disconnect, device number 19 [ 904.632662][ T5897] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 904.797870][ T5897] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 904.820508][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.292479][T19048] usb 4-1: reset high-speed USB device number 61 using dummy_hcd [ 905.404417][ T5897] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 905.414167][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 905.422233][ T5897] usb 3-1: SerialNumber: syz [ 905.438221][T19048] usb 4-1: device descriptor read/64, error -32 [ 905.666787][ T5897] usb 3-1: 0:2 : does not exist [ 905.675686][ T5897] usb 3-1: unit 5: unexpected type 0x03 [ 905.702430][T19048] usb 4-1: reset high-speed USB device number 61 using dummy_hcd [ 905.765656][ T5897] usb 3-1: USB disconnect, device number 36 [ 905.846397][T19048] usb 4-1: device descriptor read/64, error -32 [ 906.102428][T19048] usb 4-1: reset high-speed USB device number 61 using dummy_hcd [ 906.132805][T19048] usb 4-1: device descriptor read/8, error -32 [ 906.215496][T19987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 906.372541][T19048] usb 4-1: reset high-speed USB device number 61 using dummy_hcd [ 906.402820][T19048] usb 4-1: device descriptor read/8, error -32 [ 906.462408][ T5897] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 906.512546][T19048] raw-gadget.2 gadget.3: failed to queue suspend event [ 906.525929][T14364] usb 4-1: USB disconnect, device number 61 [ 906.548345][T14364] raw-gadget.2 gadget.3: failed to queue reset event [ 906.618080][ T5897] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 906.627310][ T5897] usb 2-1: config 0 has no interface number 0 [ 906.633972][ T5897] usb 2-1: config 0 interface 29 has no altsetting 0 [ 906.646167][ T5897] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 906.655500][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.663818][ T5897] usb 2-1: Product: syz [ 906.668094][ T5897] usb 2-1: Manufacturer: syz [ 906.673174][ T5897] usb 2-1: SerialNumber: syz [ 906.679593][T14364] raw-gadget.2 gadget.3: failed to queue resume event [ 906.687683][ T5897] usb 2-1: config 0 descriptor?? [ 906.698584][T19930] raw-gadget.2 gadget.3: failed to queue suspend event [ 906.723595][T19930] raw-gadget.2 gadget.3: failed to queue disconnect event [ 906.763488][T14364] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 906.946430][ T5897] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 907.678676][T14364] usb 4-1: device descriptor read/64, error -71 [ 907.922768][T14364] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 908.926949][T14364] usb 4-1: config 0 has no interfaces? [ 908.971197][T14364] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 908.992420][T14364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.001324][T14364] usb 4-1: Product: syz [ 909.011713][T14364] usb 4-1: Manufacturer: syz [ 909.028829][T14364] usb 4-1: SerialNumber: syz [ 909.050985][T14364] usb 4-1: config 0 descriptor?? [ 909.223234][ T5897] peak_usb 2-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 909.231668][ T5897] peak_usb 2-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 909.443044][ T5897] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71 [ 909.474306][ T5897] usb 2-1: USB disconnect, device number 20 [ 909.607784][T20022] xt_CT: No such helper "snmp" [ 909.615381][T20022] x_tables: duplicate underflow at hook 2 [ 909.622998][T20022] netlink: 'syz.1.4691': attribute type 12 has an invalid length. [ 909.888906][T20026] can: request_module (can-proto-0) failed. [ 910.417746][T20037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.406676][ T5897] usb 4-1: USB disconnect, device number 63 [ 911.481296][T20046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 911.832646][T14364] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 912.014402][T14364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.025413][T14364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.035941][T14364] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 912.045256][T14364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.053362][T19048] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 912.069170][T14364] usb 5-1: config 0 descriptor?? [ 912.132440][T19041] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 912.225623][T19048] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 912.267400][T19048] usb 4-1: config 0 has no interface number 0 [ 912.274619][T19048] usb 4-1: config 0 interface 29 has no altsetting 0 [ 912.298821][T19041] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 912.307265][T19041] usb 2-1: config 0 has no interface number 0 [ 912.314459][T19041] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 912.326892][T19041] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 912.340681][T19041] usb 2-1: config 0 interface 255 has no altsetting 0 [ 912.352018][T19041] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 912.369121][T19048] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 912.382233][T19048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.391032][T19048] usb 4-1: Product: syz [ 912.395636][T19048] usb 4-1: Manufacturer: syz [ 912.400704][T19041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.409256][T19048] usb 4-1: SerialNumber: syz [ 912.423161][T19041] usb 2-1: config 0 descriptor?? [ 912.428859][T19048] usb 4-1: config 0 descriptor?? [ 912.451774][T19041] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 912.486199][T14364] samsung 0003:0419:0600.0029: unknown main item tag 0x0 [ 912.512534][T14364] samsung 0003:0419:0600.0029: unknown main item tag 0x0 [ 912.520295][T14364] samsung 0003:0419:0600.0029: unknown main item tag 0x0 [ 912.527903][T14364] samsung 0003:0419:0600.0029: unknown main item tag 0x0 [ 912.536269][T14364] samsung 0003:0419:0600.0029: unknown main item tag 0x0 [ 912.557502][T14364] samsung 0003:0419:0600.0029: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 912.664835][T20059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4701'. [ 912.673861][T20063] fuse: Unknown parameter '' [ 912.690319][T14364] usb 2-1: USB disconnect, device number 21 [ 912.716985][ T24] usb 5-1: USB disconnect, device number 46 [ 912.841413][T20064] fido_id[20064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 912.855950][T19048] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 912.962669][T19041] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 913.142467][T19041] usb 3-1: Using ep0 maxpacket: 8 [ 913.159047][T19041] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 913.167930][T19041] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 913.176760][T19041] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 913.192841][T19041] usb 3-1: config 250 has no interface number 0 [ 913.233273][T19041] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 913.308579][T19041] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 913.344600][T19041] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 913.369801][T19041] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 913.403887][T19041] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 913.434791][T20075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4704'. [ 913.455127][T19041] usb 3-1: config 250 interface 228 has no altsetting 0 [ 913.475279][T19041] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 913.485190][T19041] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 913.493824][T19041] usb 3-1: Product: syz [ 913.498170][T19041] usb 3-1: SerialNumber: syz [ 913.533956][T19041] hub 3-1:250.228: bad descriptor, ignoring hub [ 913.554930][T19041] hub 3-1:250.228: probe with driver hub failed with error -5 [ 913.839010][T19041] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 37 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 914.033148][T20066] FAULT_INJECTION: forcing a failure. [ 914.033148][T20066] name failslab, interval 1, probability 0, space 0, times 0 [ 914.045947][ T5897] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 914.052519][T20066] CPU: 1 UID: 0 PID: 20066 Comm: syz.2.4703 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 914.052543][T20066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 914.052554][T20066] Call Trace: [ 914.052562][T20066] [ 914.052570][T20066] dump_stack_lvl+0x189/0x250 [ 914.052599][T20066] ? __pfx____ratelimit+0x10/0x10 [ 914.052625][T20066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 914.052648][T20066] ? __pfx__printk+0x10/0x10 [ 914.052671][T20066] ? __pfx___might_resched+0x10/0x10 [ 914.052693][T20066] ? fs_reclaim_acquire+0x7d/0x100 [ 914.052716][T20066] should_fail_ex+0x414/0x560 [ 914.052746][T20066] should_failslab+0xa8/0x100 [ 914.052765][T20066] kmem_cache_alloc_noprof+0x73/0x3c0 [ 914.052788][T20066] ? alloc_empty_file+0x55/0x1d0 [ 914.052811][T20066] alloc_empty_file+0x55/0x1d0 [ 914.052831][T20066] path_openat+0x107/0x3830 [ 914.052851][T20066] ? arch_stack_walk+0xfc/0x150 [ 914.052892][T20066] ? kasan_save_track+0x4f/0x80 [ 914.052912][T20066] ? kasan_save_track+0x3e/0x80 [ 914.052931][T20066] ? __kasan_slab_alloc+0x6c/0x80 [ 914.052945][T20066] ? getname_flags+0xb8/0x540 [ 914.052962][T20066] ? __pfx_path_openat+0x10/0x10 [ 914.052981][T20066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.053014][T20066] do_filp_open+0x1fa/0x410 [ 914.053034][T20066] ? __lock_acquire+0xab9/0xd20 [ 914.053056][T20066] ? __pfx_do_filp_open+0x10/0x10 [ 914.053097][T20066] ? _raw_spin_unlock+0x28/0x50 [ 914.053116][T20066] ? alloc_fd+0x64c/0x6c0 [ 914.053143][T20066] do_sys_openat2+0x121/0x1c0 [ 914.053166][T20066] ? __pfx_do_sys_openat2+0x10/0x10 [ 914.053187][T20066] ? ksys_write+0x22a/0x250 [ 914.053203][T20066] ? __pfx_ksys_write+0x10/0x10 [ 914.053221][T20066] __x64_sys_openat+0x138/0x170 [ 914.053246][T20066] do_syscall_64+0xfa/0x3b0 [ 914.053267][T20066] ? lockdep_hardirqs_on+0x9c/0x150 [ 914.053288][T20066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.053303][T20066] ? clear_bhb_loop+0x60/0xb0 [ 914.053322][T20066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.053338][T20066] RIP: 0033:0x7f968738d290 [ 914.053354][T20066] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 914.053369][T20066] RSP: 002b:00007f968829eb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 914.053387][T20066] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f968738d290 [ 914.053399][T20066] RDX: 0000000000000002 RSI: 00007f968829ec10 RDI: 00000000ffffff9c [ 914.053410][T20066] RBP: 00007f968829ec10 R08: 0000000000000000 R09: 00007f968829e987 [ 914.053421][T20066] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 914.053431][T20066] R13: 0000000000000000 R14: 00007f96875b5fa0 R15: 00007f96876dfa28 [ 914.053465][T20066] [ 914.167143][T19041] usb 3-1: USB disconnect, device number 37 [ 914.423621][T20083] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4706'. [ 914.433165][T20083] FAULT_INJECTION: forcing a failure. [ 914.433165][T20083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.454466][T20083] CPU: 0 UID: 0 PID: 20083 Comm: syz.4.4706 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 914.454483][T20083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 914.454489][T20083] Call Trace: [ 914.454494][T20083] [ 914.454499][T20083] dump_stack_lvl+0x189/0x250 [ 914.454518][T20083] ? __pfx____ratelimit+0x10/0x10 [ 914.454534][T20083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 914.454549][T20083] ? __pfx__printk+0x10/0x10 [ 914.454560][T20083] ? __might_fault+0xb0/0x130 [ 914.454575][T20083] should_fail_ex+0x414/0x560 [ 914.454595][T20083] _copy_from_user+0x2d/0xb0 [ 914.454605][T20083] kstrtouint_from_user+0xc4/0x170 [ 914.454619][T20083] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 914.454644][T20083] proc_fail_nth_write+0x88/0x240 [ 914.454657][T20083] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 914.454671][T20083] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 914.454683][T20083] vfs_write+0x27e/0xa90 [ 914.454709][T20083] ? __pfx_vfs_write+0x10/0x10 [ 914.454724][T20083] ? __fget_files+0x2a/0x420 [ 914.454737][T20083] ? __fget_files+0x3a0/0x420 [ 914.454746][T20083] ? __fget_files+0x2a/0x420 [ 914.454766][T20083] ksys_write+0x145/0x250 [ 914.454776][T20083] ? __pfx_ksys_write+0x10/0x10 [ 914.454784][T20083] ? rcu_is_watching+0x15/0xb0 [ 914.454801][T20083] ? do_syscall_64+0xbe/0x3b0 [ 914.454818][T20083] do_syscall_64+0xfa/0x3b0 [ 914.454831][T20083] ? lockdep_hardirqs_on+0x9c/0x150 [ 914.454844][T20083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.454853][T20083] ? clear_bhb_loop+0x60/0xb0 [ 914.454865][T20083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.454874][T20083] RIP: 0033:0x7f8be618d3df [ 914.454884][T20083] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 914.454893][T20083] RSP: 002b:00007f8be6f34030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 914.454904][T20083] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8be618d3df [ 914.454911][T20083] RDX: 0000000000000001 RSI: 00007f8be6f340a0 RDI: 0000000000000005 [ 914.454917][T20083] RBP: 00007f8be6f34090 R08: 0000000000000000 R09: 0000000000000000 [ 914.454923][T20083] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 914.454928][T20083] R13: 0000000000000000 R14: 00007f8be63b5fa0 R15: 00007f8be64dfa28 [ 914.454944][T20083] [ 915.020833][T19048] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 915.044859][T19041] usblp0: removed [ 915.052405][T19048] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 915.073772][T20088] FAULT_INJECTION: forcing a failure. [ 915.073772][T20088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.123872][T20088] CPU: 0 UID: 0 PID: 20088 Comm: syz.4.4708 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 915.123897][T20088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 915.123906][T20088] Call Trace: [ 915.123914][T20088] [ 915.123921][T20088] dump_stack_lvl+0x189/0x250 [ 915.123951][T20088] ? __pfx____ratelimit+0x10/0x10 [ 915.123974][T20088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 915.123998][T20088] ? __pfx__printk+0x10/0x10 [ 915.124017][T20088] ? __might_fault+0xb0/0x130 [ 915.124045][T20088] should_fail_ex+0x414/0x560 [ 915.124070][T20088] _copy_from_user+0x2d/0xb0 [ 915.124088][T20088] ___sys_sendmsg+0x158/0x2a0 [ 915.124112][T20088] ? __pfx____sys_sendmsg+0x10/0x10 [ 915.124169][T20088] ? __might_fault+0xb0/0x130 [ 915.124193][T20088] __sys_sendmmsg+0x227/0x430 [ 915.124217][T20088] ? __pfx___sys_sendmmsg+0x10/0x10 [ 915.124233][T20088] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 915.124283][T20088] ? ksys_write+0x22a/0x250 [ 915.124301][T20088] ? __pfx_ksys_write+0x10/0x10 [ 915.124315][T20088] ? rcu_is_watching+0x15/0xb0 [ 915.124345][T20088] __x64_sys_sendmmsg+0xa0/0xc0 [ 915.124368][T20088] do_syscall_64+0xfa/0x3b0 [ 915.124390][T20088] ? lockdep_hardirqs_on+0x9c/0x150 [ 915.124419][T20088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.124436][T20088] ? clear_bhb_loop+0x60/0xb0 [ 915.124457][T20088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.124473][T20088] RIP: 0033:0x7f8be618e929 [ 915.124489][T20088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.124504][T20088] RSP: 002b:00007f8be6f34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 915.124522][T20088] RAX: ffffffffffffffda RBX: 00007f8be63b5fa0 RCX: 00007f8be618e929 [ 915.124534][T20088] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 915.124546][T20088] RBP: 00007f8be6f34090 R08: 0000000000000000 R09: 0000000000000000 [ 915.124556][T20088] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 915.124566][T20088] R13: 0000000000000000 R14: 00007f8be63b5fa0 R15: 00007f8be64dfa28 [ 915.124591][T20088] [ 915.512413][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 915.579918][ T5897] usb 2-1: config 3 has an invalid interface number: 227 but max is 0 [ 915.589419][ T5897] usb 2-1: config 3 has no interface number 0 [ 915.657962][ T5897] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=8a.99 [ 915.712472][T19041] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 915.752947][T19048] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 915.766984][T19048] usb 4-1: USB disconnect, device number 64 [ 915.816889][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.872401][T19041] usb 3-1: device descriptor read/64, error -71 [ 915.929796][ T5897] usb 2-1: Product: syz [ 915.952642][ T5897] usb 2-1: Manufacturer: syz [ 915.982498][ T5897] usb 2-1: SerialNumber: syz [ 916.112484][T19041] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 916.120201][T19048] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 916.252608][T19041] usb 3-1: device descriptor read/64, error -71 [ 916.362984][T19041] usb usb3-port1: attempt power cycle [ 916.384564][T19048] usb 4-1: config 0 has no interfaces? [ 916.622945][T19048] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 916.741510][T19048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.782433][T19041] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 916.834300][T19048] usb 4-1: Product: syz [ 916.838519][T19048] usb 4-1: Manufacturer: syz [ 916.883148][T19041] usb 3-1: device descriptor read/8, error -71 [ 916.925953][ T5897] usb 2-1: can't set config #3, error -71 [ 916.945932][ T5897] usb 2-1: USB disconnect, device number 22 [ 916.955889][T19048] usb 4-1: SerialNumber: syz [ 916.992669][T19048] usb 4-1: config 0 descriptor?? [ 917.192576][T19041] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 917.213111][T19041] usb 3-1: device descriptor read/8, error -71 [ 917.332796][T19041] usb usb3-port1: unable to enumerate USB device [ 917.478578][T20115] ======================================================= [ 917.478578][T20115] WARNING: The mand mount option has been deprecated and [ 917.478578][T20115] and is ignored by this kernel. Remove the mand [ 917.478578][T20115] option from the mount to silence this warning. [ 917.478578][T20115] ======================================================= [ 917.513532][ C1] vkms_vblank_simulate: vblank timer overrun [ 917.563026][T20115] fuse: Bad value for 'fd' [ 917.568097][T20115] netlink: 'syz.1.4717': attribute type 1 has an invalid length. [ 917.618773][T20116] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4717'. [ 917.785388][T20115] bond1: entered promiscuous mode [ 917.793687][T20115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 917.891522][T20116] batadv1: entered promiscuous mode [ 917.912535][T20116] batadv1: entered allmulticast mode [ 917.925682][T20116] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 917.946467][T20116] bond1: (slave batadv1): making interface the new active one [ 918.031159][T20116] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 919.448006][ T10] usb 4-1: USB disconnect, device number 65 [ 920.243576][ T30] audit: type=1326 audit(1751580652.112:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.2.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968738e929 code=0x7ffc0000 [ 920.289588][ T30] audit: type=1326 audit(1751580652.122:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.2.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968738e929 code=0x7ffc0000 [ 920.311934][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.335648][T20152] syzkaller1: entered promiscuous mode [ 920.341123][T20152] syzkaller1: entered allmulticast mode [ 920.415317][ T30] audit: type=1326 audit(1751580652.122:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.2.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f968738e929 code=0x7ffc0000 [ 920.466701][ T30] audit: type=1326 audit(1751580652.122:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.2.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968738e929 code=0x7ffc0000 [ 920.489430][ T10] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 920.734083][ T30] audit: type=1326 audit(1751580652.122:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.2.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f968738d290 code=0x7ffc0000 [ 920.756443][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.949294][ T30] audit: type=1326 audit(1751580652.122:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.2.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f968738e52b code=0x7ffc0000 [ 920.993143][ T10] usb 3-1: too many configurations: 175, using maximum allowed: 8 [ 921.049698][ T30] audit: type=1326 audit(1751580652.122:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.2.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f968738e52b code=0x7ffc0000 [ 921.077859][ T30] audit: type=1326 audit(1751580652.132:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.2.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f968738e52b code=0x7ffc0000 [ 921.104399][ T30] audit: type=1326 audit(1751580652.132:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.2.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f968738e52b code=0x7ffc0000 [ 921.104638][ T10] usb 3-1: config 7 has an invalid interface number: 192 but max is 0 [ 921.126663][ C0] vkms_vblank_simulate: vblank timer overrun [ 921.161010][ T30] audit: type=1326 audit(1751580652.272:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.2.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f968738e52b code=0x7ffc0000 [ 921.282085][ T10] usb 3-1: config 7 has no interface number 0 [ 921.345719][ T10] usb 3-1: config 7 interface 192 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 921.365627][ T10] usb 3-1: config 7 interface 192 has no altsetting 0 [ 921.400902][ T10] usb 3-1: config 7 has an invalid interface number: 192 but max is 0 [ 921.421328][ T10] usb 3-1: config 7 has no interface number 0 [ 921.452102][ T10] usb 3-1: config 7 interface 192 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 921.465105][ T10] usb 3-1: config 7 interface 192 has no altsetting 0 [ 921.476508][ T10] usb 3-1: config 7 has an invalid interface number: 192 but max is 0 [ 921.485287][ T10] usb 3-1: config 7 has no interface number 0 [ 921.491624][ T10] usb 3-1: config 7 interface 192 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 921.502402][ T10] usb 3-1: config 7 interface 192 has no altsetting 0 [ 921.515709][ T10] usb 3-1: config 7 has an invalid interface number: 192 but max is 0 [ 921.524458][ T10] usb 3-1: config 7 has no interface number 0 [ 921.547292][ T10] usb 3-1: config 7 interface 192 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 921.563088][ T10] usb 3-1: config 7 interface 192 has no altsetting 0 [ 921.579294][ T10] usb 3-1: config 7 has an invalid interface number: 192 but max is 0 [ 921.590819][ T10] usb 3-1: config 7 has no interface number 0 [ 921.597157][ T10] usb 3-1: config 7 interface 192 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 921.639138][ T10] usb 3-1: config 7 interface 192 has no altsetting 0 [ 921.660155][ T10] usb 3-1: config 7 has an invalid interface number: 192 but max is 0 [ 921.672275][ T10] usb 3-1: config 7 has no interface number 0 [ 921.684318][ T10] usb 3-1: config 7 interface 192 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 921.704783][ T10] usb 3-1: config 7 interface 192 has no altsetting 0 [ 921.721673][ T10] usb 3-1: config 7 has an invalid interface number: 192 but max is 0 [ 921.730819][ T10] usb 3-1: config 7 has no interface number 0 [ 921.739882][ T10] usb 3-1: config 7 interface 192 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 921.762830][ T10] usb 3-1: config 7 interface 192 has no altsetting 0 [ 921.804533][ T10] usb 3-1: config 7 has an invalid interface number: 192 but max is 0 [ 921.860640][ T10] usb 3-1: config 7 has no interface number 0 [ 921.884720][ T10] usb 3-1: config 7 interface 192 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 921.915287][ T10] usb 3-1: config 7 interface 192 has no altsetting 0 [ 921.946746][ T10] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 921.967279][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.979010][ T10] usb 3-1: Product: syz [ 921.983363][ T10] usb 3-1: Manufacturer: syz [ 921.987973][ T10] usb 3-1: SerialNumber: syz [ 922.152862][ T5897] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 922.294452][ T10] usb 3-1: USB disconnect, device number 42 [ 922.325187][ T5897] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 922.335789][ T5897] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 922.437830][ T5897] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 922.544110][ T5897] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 922.553805][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.586460][ T5897] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 922.595276][ T5897] usb 5-1: invalid MIDI out EP 0 [ 922.809545][ T5897] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 922.841396][ T5897] usb 5-1: USB disconnect, device number 47 [ 923.333498][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 923.492676][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 923.501338][ T10] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.516588][ T10] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.529931][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 923.562516][ T10] usb 3-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 923.660160][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.701545][ T10] usb 3-1: config 0 descriptor?? [ 923.721907][T20202] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 924.248783][T20184] netlink: 'syz.2.4737': attribute type 1 has an invalid length. [ 924.365356][ T10] thrustmaster 0003:044F:B300.002A: ignoring exceeding usage max [ 924.387340][ T10] thrustmaster 0003:044F:B300.002A: collection stack underflow [ 924.415642][ T10] thrustmaster 0003:044F:B300.002A: item 0 4 0 12 parsing failed [ 924.435357][ T10] thrustmaster 0003:044F:B300.002A: parse failed [ 924.455690][ T10] thrustmaster 0003:044F:B300.002A: probe with driver thrustmaster failed with error -22 [ 924.571440][T20225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 924.659544][T20217] macvlan2: entered promiscuous mode [ 924.749293][T20217] macvlan2: entered allmulticast mode [ 924.767283][T20217] bond1: entered promiscuous mode [ 924.779259][T20217] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 924.895625][T20217] bond1: left promiscuous mode [ 925.183419][T19048] usb 3-1: USB disconnect, device number 43 [ 925.505054][T20231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4752'. [ 925.582648][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 925.804832][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.861110][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.881365][ T10] usb 5-1: New USB device found, idVendor=1e71, idProduct=200d, bcdDevice= 0.00 [ 925.894132][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.919514][ T5897] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 925.947445][ T10] usb 5-1: config 0 descriptor?? [ 926.022862][T19041] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 926.079559][ T5897] usb 4-1: device descriptor read/64, error -71 [ 926.225118][T20243] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 926.254433][T20243] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 926.261539][T20243] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 926.276497][T20243] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 926.313985][T20243] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 926.327644][T20229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.342529][ T5897] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 926.350733][T20229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.363122][T19041] usb 2-1: Using ep0 maxpacket: 16 [ 926.472631][ T5897] usb 4-1: device descriptor read/64, error -71 [ 926.583071][ T5897] usb usb4-port1: attempt power cycle [ 926.600380][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 926.620044][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 926.660724][ T10] usb 5-1: USB disconnect, device number 48 [ 926.932553][ T5897] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 927.149896][ T5897] usb 4-1: device descriptor read/8, error -71 [ 927.424516][ T5897] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 927.465447][ T5897] usb 4-1: device descriptor read/8, error -71 [ 927.583029][ T5897] usb usb4-port1: unable to enumerate USB device [ 927.612739][T13976] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 927.803439][T13976] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 927.816047][T13976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.827639][T13976] usb 5-1: config 0 descriptor?? [ 928.007467][T20259] netlink: 272 bytes leftover after parsing attributes in process `syz.0.4760'. [ 928.023400][T20259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 928.184306][T13410] Bluetooth: hci0: command 0x0406 tx timeout [ 928.342602][T18645] Bluetooth: hci4: command 0x0406 tx timeout [ 928.348655][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 928.355131][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 928.361217][T13410] Bluetooth: hci3: command 0x0405 tx timeout [ 928.819787][T19041] usb 2-1: unable to get BOS descriptor or descriptor too short [ 928.840715][T19041] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 928.858778][T19041] usb 2-1: can't read configurations, error -71 [ 929.543431][T19048] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 929.704020][T19048] usb 3-1: config 0 has no interfaces? [ 929.719984][T19048] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 929.772844][T19048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.825869][T19048] usb 3-1: config 0 descriptor?? [ 929.877906][T20280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4765'. [ 930.473580][T19041] usb 5-1: USB disconnect, device number 49 [ 930.624085][T19048] usb 3-1: USB disconnect, device number 44 [ 930.878492][T20296] input: syz1 as /devices/virtual/input/input117 [ 931.412683][T13976] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 931.465122][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.482730][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.563144][T13976] usb 3-1: Using ep0 maxpacket: 16 [ 931.585735][T13976] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.603259][T13976] usb 3-1: config 0 interface 0 has no altsetting 0 [ 931.620187][T13976] usb 3-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 931.675303][T13976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.736589][T13976] usb 3-1: config 0 descriptor?? [ 932.834335][T13976] smartjoyplus 0003:0925:0005.002B: unknown main item tag 0x0 [ 932.841927][T13976] smartjoyplus 0003:0925:0005.002B: unknown main item tag 0x0 [ 932.852089][T13976] smartjoyplus 0003:0925:0005.002B: unknown main item tag 0x0 [ 932.882301][T13976] smartjoyplus 0003:0925:0005.002B: unknown main item tag 0x0 [ 932.890368][T13976] smartjoyplus 0003:0925:0005.002B: unknown main item tag 0x0 [ 933.024151][T13976] smartjoyplus 0003:0925:0005.002B: hidraw0: USB HID v0.00 Device [HID 0925:0005] on usb-dummy_hcd.2-1/input0 [ 933.036426][T13976] smartjoyplus 0003:0925:0005.002B: no output reports found [ 933.055282][T13976] usb 3-1: USB disconnect, device number 45 [ 933.129385][T20321] fido_id[20321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 933.152662][T19048] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 933.231805][T20322] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4773'. [ 933.251173][T19041] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 933.408991][T20324] macvlan2: entered promiscuous mode [ 933.446293][T20324] bridge0: entered promiscuous mode [ 933.454250][T19048] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 933.466694][T19048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.487718][T19041] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.533997][T19048] usb 4-1: config 0 descriptor?? [ 933.539199][T19041] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 933.555003][T19048] cp210x 4-1:0.0: cp210x converter detected [ 933.563099][T19041] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 933.584107][T19041] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 933.593499][T19041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.601539][T19041] usb 2-1: Product: syz [ 933.606223][T19041] usb 2-1: Manufacturer: syz [ 933.610848][T19041] usb 2-1: SerialNumber: syz [ 933.626764][T19041] usb 2-1: config 0 descriptor?? [ 933.640644][T19041] usb 2-1: Found UVC 34.00 device syz (8086:0b5b) [ 933.660568][T19041] usb 2-1: No valid video chain found. [ 933.840477][T19041] usb 2-1: USB disconnect, device number 25 [ 933.897972][T20329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 933.958709][T20317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.979959][T20317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.999781][T19048] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 934.013166][T19048] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 934.026149][T19048] usb 4-1: cp210x converter now attached to ttyUSB0 [ 934.037150][T19048] usb 4-1: USB disconnect, device number 70 [ 934.065402][T19048] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 934.087991][T19048] cp210x 4-1:0.0: device disconnected [ 934.339714][T20339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4784'. [ 934.553252][T20344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.562012][T20344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.731960][T20351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4788'. [ 934.742943][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 934.742959][ T30] audit: type=1326 audit(1751580666.632:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20349 comm="syz.3.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1338e929 code=0x7ffc0000 [ 934.804940][T19048] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 934.868622][ T30] audit: type=1326 audit(1751580666.672:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20349 comm="syz.3.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1338e929 code=0x7ffc0000 [ 934.953480][T19048] usb 2-1: device descriptor read/64, error -71 [ 935.195342][ T30] audit: type=1326 audit(1751580666.672:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20349 comm="syz.3.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5e1338e929 code=0x7ffc0000 [ 935.222498][T19048] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 935.372759][T19048] usb 2-1: device descriptor read/64, error -71 [ 935.377571][ T30] audit: type=1326 audit(1751580666.672:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20349 comm="syz.3.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1338e929 code=0x7ffc0000 [ 935.493094][T19048] usb usb2-port1: attempt power cycle [ 935.559151][ T30] audit: type=1326 audit(1751580666.672:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20349 comm="syz.3.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1338e929 code=0x7ffc0000 [ 935.662460][ T30] audit: type=1326 audit(1751580666.672:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20349 comm="syz.3.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5e1338e929 code=0x7ffc0000 [ 935.827708][T20366] netlink: 'syz.0.4793': attribute type 27 has an invalid length. [ 935.838027][ T30] audit: type=1326 audit(1751580666.672:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20349 comm="syz.3.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e1332ab19 code=0x7ffc0000 [ 935.862992][T19048] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 935.908083][ T30] audit: type=1326 audit(1751580666.672:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20349 comm="syz.3.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e1332ab19 code=0x7ffc0000 [ 935.975495][ T30] audit: type=1326 audit(1751580666.672:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20349 comm="syz.3.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1338e929 code=0x7ffc0000 [ 936.013797][T20366] syzkaller1: left promiscuous mode [ 936.020270][ T30] audit: type=1326 audit(1751580666.672:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20349 comm="syz.3.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1338e929 code=0x7ffc0000 [ 936.055683][T19048] usb 2-1: device descriptor read/8, error -71 [ 936.063701][T20366] syzkaller1: left allmulticast mode [ 936.117431][T20366] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.127132][T20366] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.136113][T20366] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.145133][T20366] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.196112][T20366] bridge0: left promiscuous mode [ 936.204771][T20366] macvlan2: left promiscuous mode [ 936.295925][T19048] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 936.351264][T19048] usb 2-1: device descriptor read/8, error -71 [ 936.472857][T19048] usb usb2-port1: unable to enumerate USB device [ 938.943961][T20398] loop7: detected capacity change from 0 to 16384 [ 939.192552][T19048] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 939.344204][T19048] usb 5-1: config 0 has no interfaces? [ 939.352437][T19048] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 939.361503][T19048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.405122][T19048] usb 5-1: Product: syz [ 939.411193][T19048] usb 5-1: Manufacturer: syz [ 939.433751][T19048] usb 5-1: SerialNumber: syz [ 939.468186][T19048] usb 5-1: config 0 descriptor?? [ 939.748633][T20414] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 939.759975][T20398] I/O error, dev loop7, sector 552 op 0x0:(READ) flags 0x80700 phys_seg 6 prio class 0 [ 939.842954][T20398] I/O error, dev loop7, sector 384 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 939.911587][T20398] buffer_io_error: 14 callbacks suppressed [ 939.911605][T20398] Buffer I/O error on dev loop7, logical block 48, lost async page write [ 939.926569][T20398] Buffer I/O error on dev loop7, logical block 49, lost async page write [ 939.942489][T20398] Buffer I/O error on dev loop7, logical block 50, lost async page write [ 939.991689][T20398] Buffer I/O error on dev loop7, logical block 51, lost async page write [ 940.014110][T20398] Buffer I/O error on dev loop7, logical block 52, lost async page write [ 940.023944][T20398] Buffer I/O error on dev loop7, logical block 53, lost async page write [ 940.042757][T20398] Buffer I/O error on dev loop7, logical block 54, lost async page write [ 940.051881][T20398] Buffer I/O error on dev loop7, logical block 55, lost async page write [ 940.078566][T20427] vivid-005: disconnect [ 940.107784][T20398] Buffer I/O error on dev loop7, logical block 56, lost async page write [ 940.282123][T20398] Buffer I/O error on dev loop7, logical block 57, lost async page write [ 940.448498][T13976] usb 5-1: USB disconnect, device number 50 [ 940.965748][T20426] vivid-005: reconnect [ 941.087386][T20436] xt_CT: No such helper "snmp" [ 941.129406][T20436] x_tables: duplicate underflow at hook 2 [ 941.396163][T20447] macvlan3: entered allmulticast mode [ 941.437498][T20447] bond0: entered allmulticast mode [ 941.473281][T20447] bond_slave_0: entered allmulticast mode [ 941.531167][T20447] bond_slave_1: entered allmulticast mode [ 941.544139][T20447] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 941.602632][T20447] bridge0: port 3(macvlan3) entered blocking state [ 941.618891][T20447] bridge0: port 3(macvlan3) entered disabled state [ 941.633726][T20447] macvlan3: entered promiscuous mode [ 941.647037][T20447] bond0: entered promiscuous mode [ 941.659606][T20447] bond_slave_0: entered promiscuous mode [ 941.708752][T20447] bond_slave_1: entered promiscuous mode [ 942.091200][T19041] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 942.304333][T19041] usb 5-1: Using ep0 maxpacket: 16 [ 942.329767][T19041] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.340113][T19041] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 942.365879][T19041] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 942.382744][T13976] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 942.423237][T19041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.441543][T19041] usb 5-1: Product: syz [ 942.453417][T19041] usb 5-1: Manufacturer: syz [ 942.459270][T19041] usb 5-1: SerialNumber: syz [ 942.485287][T19041] usb 5-1: config 0 descriptor?? [ 942.576291][T13976] usb 4-1: Using ep0 maxpacket: 16 [ 942.626038][T20469] netlink: 'syz.0.4820': attribute type 27 has an invalid length. [ 942.639512][T20469] bond0: left allmulticast mode [ 942.644907][T20469] bond_slave_0: left allmulticast mode [ 942.650508][T20469] bond_slave_1: left allmulticast mode [ 942.661399][T20469] bond0: left promiscuous mode [ 942.666681][T20469] bond_slave_0: left promiscuous mode [ 942.673892][T20469] bond_slave_1: left promiscuous mode [ 942.861111][T20471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.900158][T20471] batman_adv: batadv0: Interface activated: dummy0 [ 942.909790][T20471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 943.384910][ T30] kauditd_printk_skb: 752 callbacks suppressed [ 943.384928][ T30] audit: type=1326 audit(1751580675.282:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20476 comm="syz.0.4822" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb78b8e929 code=0x0 [ 943.528456][T20484] FAULT_INJECTION: forcing a failure. [ 943.528456][T20484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.583001][T20484] CPU: 1 UID: 0 PID: 20484 Comm: syz.1.4823 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 943.583029][T20484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 943.583040][T20484] Call Trace: [ 943.583048][T20484] [ 943.583056][T20484] dump_stack_lvl+0x189/0x250 [ 943.583086][T20484] ? __pfx____ratelimit+0x10/0x10 [ 943.583110][T20484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 943.583133][T20484] ? __pfx__printk+0x10/0x10 [ 943.583163][T20484] should_fail_ex+0x414/0x560 [ 943.583188][T20484] _copy_to_user+0x31/0xb0 [ 943.583207][T20484] move_addr_to_user+0x146/0x200 [ 943.583226][T20484] ____sys_recvmsg+0x228/0x460 [ 943.583254][T20484] ? __pfx_____sys_recvmsg+0x10/0x10 [ 943.583289][T20484] ? import_iovec+0x74/0xa0 [ 943.583308][T20484] ___sys_recvmsg+0x1b5/0x510 [ 943.583337][T20484] ? __pfx____sys_recvmsg+0x10/0x10 [ 943.583382][T20484] ? __fget_files+0x3a0/0x420 [ 943.583418][T20484] do_recvmmsg+0x307/0x770 [ 943.583446][T20484] ? __pfx_do_recvmmsg+0x10/0x10 [ 943.583480][T20484] ? _copy_from_user+0x94/0xb0 [ 943.583517][T20484] __x64_sys_recvmmsg+0x1af/0x240 [ 943.583541][T20484] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 943.583559][T20484] ? rcu_is_watching+0x15/0xb0 [ 943.583591][T20484] ? do_syscall_64+0xbe/0x3b0 [ 943.583617][T20484] do_syscall_64+0xfa/0x3b0 [ 943.583637][T20484] ? lockdep_hardirqs_on+0x9c/0x150 [ 943.583659][T20484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.583676][T20484] ? clear_bhb_loop+0x60/0xb0 [ 943.583697][T20484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.583713][T20484] RIP: 0033:0x7fac9978e929 [ 943.583727][T20484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 943.583742][T20484] RSP: 002b:00007fac9a517038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 943.583761][T20484] RAX: ffffffffffffffda RBX: 00007fac999b5fa0 RCX: 00007fac9978e929 [ 943.583773][T20484] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 943.583785][T20484] RBP: 00007fac9a517090 R08: 0000200000003700 R09: 0000000000000000 [ 943.583797][T20484] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 943.583808][T20484] R13: 0000000000000000 R14: 00007fac999b5fa0 R15: 00007fac99adfa28 [ 943.583837][T20484] [ 944.402960][T19048] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 944.440738][T20501] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 944.447286][T20501] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 944.461560][T20501] vhci_hcd vhci_hcd.0: Device attached [ 944.530003][T20504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4829'. [ 944.563940][T19048] usb 2-1: Using ep0 maxpacket: 8 [ 944.571769][T19048] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 944.579625][T19048] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 944.597516][T19048] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 944.610091][T19048] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 944.621572][T19048] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 944.633161][ T24] vhci_hcd: vhci_device speed not set [ 944.638592][T19041] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 944.648773][T19048] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 944.656270][T19048] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 944.667735][T19048] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 944.680492][T19048] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 944.691686][T19048] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 944.703226][ T24] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 944.712030][T19048] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 944.720296][T19048] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 944.731671][T19048] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 944.743625][T19048] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 944.754818][T19048] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 944.769109][T19048] usb 2-1: string descriptor 0 read error: -22 [ 944.775830][T19048] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 944.787107][T19048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.797398][T19041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.816231][T19041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.827001][T19048] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 944.836443][T19041] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 944.847652][T19041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.859117][T19041] usb 3-1: config 0 descriptor?? [ 945.077547][ T5897] usb 2-1: USB disconnect, device number 30 [ 945.148727][T13976] usb 4-1: unable to get BOS descriptor or descriptor too short [ 945.176653][T13976] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 945.190890][T13976] usb 4-1: can't read configurations, error -71 [ 945.221109][T20502] vhci_hcd: connection reset by peer [ 945.232825][ T36] vhci_hcd: stop threads [ 945.237102][ T36] vhci_hcd: release socket [ 945.241877][ T36] vhci_hcd: disconnect device [ 945.265665][T19048] usb 5-1: USB disconnect, device number 51 [ 945.388374][T19041] hid-steam 0003:28DE:1142.002C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 945.482837][T19041] hid-steam 0003:28DE:1142.002C: Steam wireless receiver connected [ 945.508497][T19041] hid-steam 0003:28DE:1142.002D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 945.619760][T20517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4833'. [ 945.638772][T19041] usb 3-1: USB disconnect, device number 46 [ 945.659394][T19041] hid-steam 0003:28DE:1142.002C: Steam wireless receiver disconnected [ 945.762701][T19048] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 946.089617][T19048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.111072][T19048] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 946.154963][T19048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.232661][T19048] usb 5-1: config 0 descriptor?? [ 946.490607][T19048] usbhid 5-1:0.0: can't add hid device: -71 [ 946.497207][T19048] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 946.527644][T20523] delete_channel: no stack [ 946.541378][T19048] usb 5-1: USB disconnect, device number 52 [ 946.546989][T20523] delete_channel: no stack [ 946.577825][T20523] delete_channel: no stack [ 946.609640][T20523] delete_channel: no stack [ 946.630760][T20523] delete_channel: no stack [ 946.645780][T20523] delete_channel: no stack [ 946.650491][T20523] delete_channel: no stack [ 946.678845][T20523] delete_channel: no stack [ 946.726547][T20523] delete_channel: no stack [ 946.741827][T20523] delete_channel: no stack [ 946.811870][T20530] FAULT_INJECTION: forcing a failure. [ 946.811870][T20530] name failslab, interval 1, probability 0, space 0, times 0 [ 946.825234][T20530] CPU: 0 UID: 0 PID: 20530 Comm: syz.2.4836 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 946.825249][T20530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 946.825255][T20530] Call Trace: [ 946.825260][T20530] [ 946.825265][T20530] dump_stack_lvl+0x189/0x250 [ 946.825284][T20530] ? __pfx____ratelimit+0x10/0x10 [ 946.825298][T20530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 946.825312][T20530] ? __pfx__printk+0x10/0x10 [ 946.825326][T20530] ? __pfx___might_resched+0x10/0x10 [ 946.825340][T20530] ? fs_reclaim_acquire+0x7d/0x100 [ 946.825354][T20530] should_fail_ex+0x414/0x560 [ 946.825369][T20530] should_failslab+0xa8/0x100 [ 946.825380][T20530] __kmalloc_cache_noprof+0x70/0x3d0 [ 946.825390][T20530] ? nf_tables_newchain+0x1d01/0x2900 [ 946.825405][T20530] nf_tables_newchain+0x1d01/0x2900 [ 946.825425][T20530] ? __pfx_nf_tables_newchain+0x10/0x10 [ 946.825454][T20530] ? nfnl_pernet+0x23/0x240 [ 946.825473][T20530] ? __nla_parse+0x40/0x60 [ 946.825488][T20530] nfnetlink_rcv+0x112f/0x2520 [ 946.825517][T20530] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 946.825536][T20530] ? __lock_acquire+0xab9/0xd20 [ 946.825574][T20530] ? netlink_deliver_tap+0x2e/0x1b0 [ 946.825585][T20530] ? netlink_deliver_tap+0x2e/0x1b0 [ 946.825598][T20530] netlink_unicast+0x758/0x8d0 [ 946.825613][T20530] netlink_sendmsg+0x805/0xb30 [ 946.825628][T20530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 946.825641][T20530] ? aa_sock_msg_perm+0x94/0x160 [ 946.825653][T20530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 946.825666][T20530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 946.825677][T20530] __sock_sendmsg+0x219/0x270 [ 946.825693][T20530] ____sys_sendmsg+0x505/0x830 [ 946.825707][T20530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 946.825724][T20530] ? import_iovec+0x74/0xa0 [ 946.825735][T20530] ___sys_sendmsg+0x21f/0x2a0 [ 946.825748][T20530] ? __pfx____sys_sendmsg+0x10/0x10 [ 946.825778][T20530] ? __fget_files+0x2a/0x420 [ 946.825788][T20530] ? __fget_files+0x3a0/0x420 [ 946.825803][T20530] __x64_sys_sendmsg+0x19b/0x260 [ 946.825816][T20530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 946.825832][T20530] ? __pfx_ksys_write+0x10/0x10 [ 946.825840][T20530] ? rcu_is_watching+0x15/0xb0 [ 946.825857][T20530] ? do_syscall_64+0xbe/0x3b0 [ 946.825873][T20530] do_syscall_64+0xfa/0x3b0 [ 946.825886][T20530] ? lockdep_hardirqs_on+0x9c/0x150 [ 946.825899][T20530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.825909][T20530] ? clear_bhb_loop+0x60/0xb0 [ 946.825929][T20530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.825938][T20530] RIP: 0033:0x7f968738e929 [ 946.825948][T20530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 946.825956][T20530] RSP: 002b:00007f968829f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 946.825968][T20530] RAX: ffffffffffffffda RBX: 00007f96875b5fa0 RCX: 00007f968738e929 [ 946.825975][T20530] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 946.825981][T20530] RBP: 00007f968829f090 R08: 0000000000000000 R09: 0000000000000000 [ 946.825986][T20530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 946.825992][T20530] R13: 0000000000000000 R14: 00007f96875b5fa0 R15: 00007f96876dfa28 [ 946.826007][T20530] [ 947.258578][T20533] gretap0: entered promiscuous mode [ 947.267498][T20533] batman_adv: batadv0: Adding interface: macvlan4 [ 947.284667][T20533] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.319225][T20533] batman_adv: batadv0: Interface activated: macvlan4 [ 947.372599][T19048] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 947.533258][T19048] usb 5-1: Using ep0 maxpacket: 16 [ 947.568481][T19048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.667844][T19048] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 947.692878][T19048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.717717][T19048] usb 5-1: config 0 descriptor?? [ 947.780109][T20543] netlink: 'syz.2.4840': attribute type 27 has an invalid length. [ 947.789418][T20543] veth0_to_bond: left allmulticast mode [ 947.888614][T20543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.898001][T20543] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.909393][T20543] batman_adv: batadv0: Interface activated: dummy0 [ 947.949083][T20543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 948.198796][T19048] mcp2221 0003:04D8:00DD.002E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 948.619758][T20511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.635199][T20511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.982514][T19048] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 949.312881][T19048] usb 3-1: Using ep0 maxpacket: 32 [ 949.361625][T19048] usb 3-1: too many configurations: 29, using maximum allowed: 8 [ 949.625034][T19048] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 949.634755][T19048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.643237][T19048] usb 3-1: Product: syz [ 949.647528][T19048] usb 3-1: Manufacturer: syz [ 949.652128][T19048] usb 3-1: SerialNumber: syz [ 949.721159][T19048] usb 3-1: config 0 descriptor?? [ 949.768202][T19041] usb 5-1: USB disconnect, device number 53 [ 949.781540][T19048] hub 3-1:0.0: Invalid hub with more than one config or interface [ 949.805737][T19048] hub 3-1:0.0: probe with driver hub failed with error -22 [ 949.837631][T19048] gspca_main: 0ac8:c301 too many config [ 949.862732][ T24] vhci_hcd: vhci_device speed not set [ 949.917618][T20568] netlink: 'syz.0.4844': attribute type 11 has an invalid length. [ 949.999077][T19041] usb 3-1: USB disconnect, device number 47 [ 950.752979][T13976] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 950.922776][T13976] usb 5-1: config 0 has no interfaces? [ 950.936826][T13976] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 950.957099][T13976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.026913][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 951.032161][T13976] usb 5-1: Product: syz [ 951.039505][T13976] usb 5-1: Manufacturer: syz [ 951.098311][T13976] usb 5-1: SerialNumber: syz [ 951.124724][T13976] usb 5-1: config 0 descriptor?? [ 951.328573][ T24] usb 3-1: config 1 has an invalid interface number: 16 but max is 3 [ 951.341310][ T24] usb 3-1: config 1 has an invalid interface number: 63 but max is 3 [ 951.378335][ T24] usb 3-1: config 1 has an invalid interface number: 8 but max is 3 [ 951.408289][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 951.430500][T20589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.452439][ T24] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 951.467426][T20589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.486648][ T24] usb 3-1: config 1 has no interface number 0 [ 951.564808][ T24] usb 3-1: config 1 has no interface number 1 [ 951.622400][ T24] usb 3-1: config 1 has no interface number 2 [ 951.679382][ T24] usb 3-1: config 1 interface 16 altsetting 3 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 951.715443][ T24] usb 3-1: config 1 interface 16 altsetting 3 endpoint 0xA has invalid maxpacket 63845, setting to 64 [ 951.742637][ T24] usb 3-1: config 1 interface 16 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 951.768429][ T24] usb 3-1: config 1 interface 16 altsetting 3 endpoint 0x7 has an invalid bInterval 253, changing to 7 [ 951.835599][ T24] usb 3-1: config 1 interface 16 altsetting 3 endpoint 0xE has invalid wMaxPacketSize 0 [ 951.859291][ T24] usb 3-1: config 1 interface 16 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 951.904913][T20602] fuse: Unknown parameter '' [ 951.974150][ T24] usb 3-1: config 1 interface 16 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 951.994622][ T24] usb 3-1: config 1 interface 16 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 952.017946][ T24] usb 3-1: config 1 interface 16 altsetting 3 has 9 endpoint descriptors, different from the interface descriptor's value: 11 [ 952.060985][ T24] usb 3-1: too many endpoints for config 1 interface 63 altsetting 51: 52, using maximum allowed: 30 [ 952.092687][ T24] usb 3-1: config 1 interface 63 altsetting 51 has an invalid descriptor for endpoint zero, skipping [ 952.165936][ T24] usb 3-1: config 1 interface 63 altsetting 51 has 2 endpoint descriptors, different from the interface descriptor's value: 52 [ 952.202436][ T24] usb 3-1: config 1 interface 8 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 952.231495][ T24] usb 3-1: config 1 interface 16 has no altsetting 0 [ 952.241378][ T24] usb 3-1: config 1 interface 63 has no altsetting 0 [ 952.249034][ T24] usb 3-1: config 1 interface 8 has no altsetting 0 [ 952.260808][ T24] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0186, bcdDevice=17.79 [ 952.261160][T13976] IPVS: starting estimator thread 0... [ 952.291749][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.315302][T20606] fuse: Unknown parameter '' [ 952.320219][ T24] usb 3-1: Product:  [ 952.326590][ T24] usb 3-1: Manufacturer: ඏ辫薩࢑㫒㶃᭭䣺ٸ鏶វ么焻匿ᅌ㫋㌩ቪ香亟単ܖ讅橓∆擦ໜﰽꢪބꃾ浪䐫ij䛤쿀გ甂䡬췡瓴₹낆ꑵ큆돜ﱾ蜵Ｋ倚ᜯ뼱ᠸ죸ꛋⱐ [ 952.378836][ T24] usb 3-1: SerialNumber: ৯끔㝈뗠䅆⩜ㅅ㓏쪘︹ꕴ嬈罈팃ﻞ摺䠓侅꾆≇㢄ힻ天똲ꜵ⸅씵믜樦閴곽㞃鏃鈖씈틗¼ꆖ㠤ꨈ蟢퍥碆蓺阋囱᎘䞒咶憱鶕腶췤 [ 952.442858][T20604] IPVS: using max 31 ests per chain, 74400 per kthread [ 952.661994][T20595] fuse: Bad value for 'user_id' [ 952.667581][T20595] fuse: Bad value for 'user_id' [ 952.964808][ T24] ftdi_sio 3-1:1.16: FTDI USB Serial Device converter detected [ 952.975084][ T24] ftdi_sio ttyUSB0: unknown device type: 0x1779 [ 953.130658][ T24] ftdi_sio 3-1:1.63: FTDI USB Serial Device converter detected [ 953.177461][ T24] ftdi_sio ttyUSB1: unknown device type: 0x1779 [ 953.197242][ T24] ftdi_sio 3-1:1.8: FTDI USB Serial Device converter detected [ 953.233593][ T24] ftdi_sio ttyUSB2: unknown device type: 0x1779 [ 953.258638][ T24] usb 3-1: USB disconnect, device number 48 [ 953.315825][ T24] ftdi_sio 3-1:1.16: device disconnected [ 953.344882][ T24] ftdi_sio 3-1:1.63: device disconnected [ 953.351872][ T24] ftdi_sio 3-1:1.8: device disconnected [ 953.618967][ T5897] usb 5-1: USB disconnect, device number 54 [ 953.632669][T13976] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 953.730921][T20621] xt_CT: No such helper "snmp" [ 953.736433][T20624] x_tables: duplicate underflow at hook 2 [ 953.819839][T13976] usb 4-1: config 0 has no interfaces? [ 953.850733][T13976] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 953.893456][T13976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.916637][T13976] usb 4-1: Product: syz [ 953.920842][T13976] usb 4-1: Manufacturer: syz [ 953.937462][T20621] netlink: 'syz.2.4857': attribute type 12 has an invalid length. [ 953.942941][T13976] usb 4-1: SerialNumber: syz [ 953.955204][T13976] usb 4-1: config 0 descriptor?? [ 954.058003][ T3441] IPVS: stop unused estimator thread 0... [ 954.178549][T20617] pimreg: left allmulticast mode [ 954.251265][T20638] FAULT_INJECTION: forcing a failure. [ 954.251265][T20638] name failslab, interval 1, probability 0, space 0, times 0 [ 954.269818][T20638] CPU: 0 UID: 0 PID: 20638 Comm: syz.2.4860 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 954.269843][T20638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 954.269854][T20638] Call Trace: [ 954.269862][T20638] [ 954.269870][T20638] dump_stack_lvl+0x189/0x250 [ 954.269900][T20638] ? __pfx____ratelimit+0x10/0x10 [ 954.269923][T20638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 954.269946][T20638] ? __pfx__printk+0x10/0x10 [ 954.269970][T20638] ? __pfx___might_resched+0x10/0x10 [ 954.269995][T20638] should_fail_ex+0x414/0x560 [ 954.270019][T20638] should_failslab+0xa8/0x100 [ 954.270038][T20638] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 954.270055][T20638] ? __alloc_skb+0x112/0x2d0 [ 954.270078][T20638] __alloc_skb+0x112/0x2d0 [ 954.270099][T20638] netlink_sendmsg+0x5c6/0xb30 [ 954.270127][T20638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.270149][T20638] ? aa_sock_msg_perm+0x94/0x160 [ 954.270171][T20638] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 954.270192][T20638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.270212][T20638] __sock_sendmsg+0x219/0x270 [ 954.270238][T20638] ____sys_sendmsg+0x505/0x830 [ 954.270263][T20638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 954.270293][T20638] ? import_iovec+0x74/0xa0 [ 954.270326][T20638] ___sys_sendmsg+0x21f/0x2a0 [ 954.270354][T20638] ? __pfx____sys_sendmsg+0x10/0x10 [ 954.270410][T20638] ? __fget_files+0x2a/0x420 [ 954.270428][T20638] ? __fget_files+0x3a0/0x420 [ 954.270456][T20638] __x64_sys_sendmsg+0x19b/0x260 [ 954.270479][T20638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 954.270509][T20638] ? __pfx_ksys_write+0x10/0x10 [ 954.270523][T20638] ? rcu_is_watching+0x15/0xb0 [ 954.270552][T20638] ? do_syscall_64+0xbe/0x3b0 [ 954.270582][T20638] do_syscall_64+0xfa/0x3b0 [ 954.270603][T20638] ? lockdep_hardirqs_on+0x9c/0x150 [ 954.270624][T20638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.270641][T20638] ? clear_bhb_loop+0x60/0xb0 [ 954.270662][T20638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.270678][T20638] RIP: 0033:0x7f968738e929 [ 954.270694][T20638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 954.270710][T20638] RSP: 002b:00007f968829f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 954.270728][T20638] RAX: ffffffffffffffda RBX: 00007f96875b5fa0 RCX: 00007f968738e929 [ 954.270741][T20638] RDX: 0000000000000010 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 954.270753][T20638] RBP: 00007f968829f090 R08: 0000000000000000 R09: 0000000000000000 [ 954.270764][T20638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.270774][T20638] R13: 0000000000000000 R14: 00007f96875b5fa0 R15: 00007f96876dfa28 [ 954.270802][T20638] [ 954.577872][T20640] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4861'. [ 954.654808][T20640] netlink: 'syz.2.4861': attribute type 11 has an invalid length. [ 954.733725][T20643] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4863'. [ 955.961988][T20668] xt_CT: No such helper "snmp" [ 955.968479][T20668] x_tables: duplicate underflow at hook 2 [ 955.976076][T20668] netlink: 'syz.1.4869': attribute type 12 has an invalid length. [ 956.220935][T20677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4873'. [ 956.233206][T20675] FAULT_INJECTION: forcing a failure. [ 956.233206][T20675] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 956.254371][T20675] CPU: 1 UID: 0 PID: 20675 Comm: syz.4.4872 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 956.254395][T20675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 956.254406][T20675] Call Trace: [ 956.254414][T20675] [ 956.254427][T20675] dump_stack_lvl+0x189/0x250 [ 956.254456][T20675] ? __pfx____ratelimit+0x10/0x10 [ 956.254479][T20675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 956.254502][T20675] ? __pfx__printk+0x10/0x10 [ 956.254522][T20675] ? fs_reclaim_acquire+0x7d/0x100 [ 956.254550][T20675] should_fail_ex+0x414/0x560 [ 956.254576][T20675] prepare_alloc_pages+0x213/0x610 [ 956.254604][T20675] __alloc_frozen_pages_noprof+0x123/0x370 [ 956.254629][T20675] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 956.254666][T20675] alloc_pages_bulk_noprof+0x560/0x710 [ 956.254688][T20675] ? rcu_is_watching+0x15/0xb0 [ 956.254712][T20675] ? trace_kmalloc+0x1f/0xd0 [ 956.254726][T20675] ? __kmalloc_noprof+0x29b/0x4f0 [ 956.254742][T20675] ? copy_splice_read+0x143/0x9b0 [ 956.254764][T20675] copy_splice_read+0x173/0x9b0 [ 956.254786][T20675] ? __pfx_iter_file_splice_write+0x10/0x10 [ 956.254808][T20675] ? __pfx_copy_splice_read+0x10/0x10 [ 956.254823][T20675] ? look_up_lock_class+0x74/0x170 [ 956.254857][T20675] ? file_end_write+0xd8/0x250 [ 956.254876][T20675] ? direct_splice_actor+0x10c/0x160 [ 956.254895][T20675] ? __pfx_copy_splice_read+0x10/0x10 [ 956.254910][T20675] splice_direct_to_actor+0x4a9/0xcc0 [ 956.254948][T20675] ? __pfx_direct_splice_actor+0x10/0x10 [ 956.254965][T20675] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 956.254983][T20675] ? __pfx_aa_file_perm+0x10/0x10 [ 956.255012][T20675] do_splice_direct+0x181/0x270 [ 956.255032][T20675] ? __pfx_do_splice_direct+0x10/0x10 [ 956.255050][T20675] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 956.255071][T20675] ? bpf_lsm_file_permission+0x9/0x20 [ 956.255092][T20675] ? security_file_permission+0x75/0x290 [ 956.255112][T20675] ? rw_verify_area+0x258/0x650 [ 956.255140][T20675] do_sendfile+0x4da/0x7e0 [ 956.255159][T20675] ? __pfx_vfs_write+0x10/0x10 [ 956.255186][T20675] ? __pfx_do_sendfile+0x10/0x10 [ 956.255206][T20675] ? __fget_files+0x3a0/0x420 [ 956.255235][T20675] __se_sys_sendfile64+0x13e/0x190 [ 956.255258][T20675] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 956.255275][T20675] ? rcu_is_watching+0x15/0xb0 [ 956.255303][T20675] ? do_syscall_64+0xbe/0x3b0 [ 956.255330][T20675] do_syscall_64+0xfa/0x3b0 [ 956.255352][T20675] ? lockdep_hardirqs_on+0x9c/0x150 [ 956.255377][T20675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.255393][T20675] ? clear_bhb_loop+0x60/0xb0 [ 956.255414][T20675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.255435][T20675] RIP: 0033:0x7f8be618e929 [ 956.255452][T20675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 956.255466][T20675] RSP: 002b:00007f8be6f34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 956.255485][T20675] RAX: ffffffffffffffda RBX: 00007f8be63b5fa0 RCX: 00007f8be618e929 [ 956.255498][T20675] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 956.255509][T20675] RBP: 00007f8be6f34090 R08: 0000000000000000 R09: 0000000000000000 [ 956.255520][T20675] R10: 0000004800000009 R11: 0000000000000246 R12: 0000000000000002 [ 956.255531][T20675] R13: 0000000000000000 R14: 00007f8be63b5fa0 R15: 00007f8be64dfa28 [ 956.255559][T20675] [ 956.668112][ T5897] usb 4-1: USB disconnect, device number 73 [ 956.775316][T20693] fuse: Bad value for 'user_id' [ 956.780257][T20693] fuse: Bad value for 'user_id' [ 956.823973][T20690] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4877'. [ 956.950466][T20698] netlink: 'syz.2.4877': attribute type 11 has an invalid length. [ 957.082558][T19041] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 957.124657][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 957.232745][T19041] usb 2-1: Using ep0 maxpacket: 8 [ 957.246000][T19041] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 957.290951][T19041] usb 2-1: config 0 has no interface number 0 [ 957.302801][ T24] usb 5-1: config 0 has no interfaces? [ 957.355330][T19041] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 957.386697][T19041] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 957.398454][T19041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.407058][T19041] usb 2-1: Product: syz [ 957.421031][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 957.472397][T19041] usb 2-1: Manufacturer: syz [ 957.482429][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.492763][T19041] usb 2-1: SerialNumber: syz [ 957.522524][ T24] usb 5-1: Product: syz [ 957.526705][ T24] usb 5-1: Manufacturer: syz [ 957.537495][T19041] usb 2-1: config 0 descriptor?? [ 957.543791][ T24] usb 5-1: SerialNumber: syz [ 957.557903][ T24] usb 5-1: config 0 descriptor?? [ 957.618821][T19041] msi2500 2-1:0.246: Registered as swradio24 [ 957.625859][T19041] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 959.012565][ T10] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 959.172655][ T10] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 959.180816][ T10] usb 3-1: config 0 has no interface number 0 [ 959.194506][ T10] usb 3-1: config 0 interface 29 has no altsetting 0 [ 959.222641][ T10] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 959.248050][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.267173][ T10] usb 3-1: Product: syz [ 959.275439][ T10] usb 3-1: Manufacturer: syz [ 959.287008][ T10] usb 3-1: SerialNumber: syz [ 959.441900][ T10] usb 3-1: config 0 descriptor?? [ 959.820328][T19041] usb 2-1: USB disconnect, device number 31 [ 959.924823][ T10] peak_usb 3-1:0.29 can0: unable to request usb[type=0 value=1] err=-32 [ 959.943074][ T10] peak_usb 3-1:0.29: unable to read PCAN-USB X6 firmware info (err -32) [ 959.971413][ T24] usb 5-1: USB disconnect, device number 55 [ 960.063245][ T10] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -32 [ 960.923187][T20749] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4895'. [ 961.480005][T20756] xt_nfacct: accounting object `syz0' does not exists [ 961.496987][ T30] audit: type=1326 audit(1751580693.392:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20746 comm="syz.4.4896" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8be618e929 code=0x0 [ 961.635707][ T30] audit: type=1326 audit(1751580693.522:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20746 comm="syz.4.4896" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8be618e929 code=0x0 [ 961.812008][ T10] usb 3-1: USB disconnect, device number 49 [ 961.932584][T19048] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 962.125424][T19048] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 962.142511][T19048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.241811][T19048] usb 5-1: config 0 descriptor?? [ 962.244685][T20765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 962.470326][T19048] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 962.632559][T19041] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 962.856477][T19041] usb 4-1: config 0 has no interfaces? [ 962.920358][T20781] FAULT_INJECTION: forcing a failure. [ 962.920358][T20781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.986505][T19041] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 962.992673][T20781] CPU: 0 UID: 0 PID: 20781 Comm: syz.2.4903 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 962.992701][T20781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 962.992711][T20781] Call Trace: [ 962.992719][T20781] [ 962.992727][T20781] dump_stack_lvl+0x189/0x250 [ 962.992754][T20781] ? __pfx____ratelimit+0x10/0x10 [ 962.992777][T20781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 962.992800][T20781] ? __pfx__printk+0x10/0x10 [ 962.992828][T20781] should_fail_ex+0x414/0x560 [ 962.992853][T20781] _copy_to_user+0x31/0xb0 [ 962.992872][T20781] simple_read_from_buffer+0xe1/0x170 [ 962.992894][T20781] proc_fail_nth_read+0x1df/0x250 [ 962.992916][T20781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 962.992938][T20781] ? rw_verify_area+0x258/0x650 [ 962.992966][T20781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 962.992986][T20781] vfs_read+0x200/0x980 [ 962.993013][T20781] ? __pfx___mutex_lock+0x10/0x10 [ 962.993037][T20781] ? __pfx_vfs_read+0x10/0x10 [ 962.993061][T20781] ? __fget_files+0x2a/0x420 [ 962.993082][T20781] ? __fget_files+0x3a0/0x420 [ 962.993097][T20781] ? __fget_files+0x2a/0x420 [ 962.993124][T20781] ksys_read+0x145/0x250 [ 962.993148][T20781] ? __pfx_ksys_read+0x10/0x10 [ 962.993174][T20781] ? do_syscall_64+0xbe/0x3b0 [ 962.993199][T20781] do_syscall_64+0xfa/0x3b0 [ 962.993220][T20781] ? lockdep_hardirqs_on+0x9c/0x150 [ 962.993241][T20781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.993257][T20781] ? clear_bhb_loop+0x60/0xb0 [ 962.993277][T20781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.993293][T20781] RIP: 0033:0x7f968738d33c [ 962.993308][T20781] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 962.993323][T20781] RSP: 002b:00007f968827e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 962.993342][T20781] RAX: ffffffffffffffda RBX: 00007f96875b6080 RCX: 00007f968738d33c [ 962.993354][T20781] RDX: 000000000000000f RSI: 00007f968827e0a0 RDI: 0000000000000008 [ 962.993364][T20781] RBP: 00007f968827e090 R08: 0000000000000000 R09: 0000000000000000 [ 962.993374][T20781] R10: 0080000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 962.993386][T20781] R13: 0000000000000000 R14: 00007f96875b6080 R15: 00007f96876dfa28 [ 962.993413][T20781] [ 963.480749][T19041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.489457][T19041] usb 4-1: Product: syz [ 963.493939][T19041] usb 4-1: Manufacturer: syz [ 963.498626][T19041] usb 4-1: SerialNumber: syz [ 963.511085][T19041] usb 4-1: config 0 descriptor?? [ 963.532852][T20791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4906'. [ 964.112418][T19041] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 964.275454][T19041] usb 3-1: Using ep0 maxpacket: 8 [ 964.286262][T19041] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 964.295190][T19041] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 964.325296][T19041] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 964.347537][T19041] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 964.375915][T19041] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 964.422905][T19041] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 964.451658][T19041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.699320][T19041] usb 3-1: usb_control_msg returned -32 [ 964.708526][T19041] usbtmc 3-1:16.0: can't read capabilities [ 964.952007][T19048] [drm:udl_init] *ERROR* Selecting channel failed [ 964.990160][T19048] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 965.003297][T19048] [drm] Initialized udl on minor 2 [ 965.015240][T19048] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 965.027848][T19048] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 965.040588][T19041] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 965.067734][T20801] usbtmc 3-1:16.0: control status returned 0 [ 965.076440][T19048] usb 5-1: USB disconnect, device number 56 [ 965.083053][T19041] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 965.269214][ T10] usb 3-1: USB disconnect, device number 50 [ 965.433301][T19048] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 965.592443][T19048] usb 5-1: Using ep0 maxpacket: 16 [ 965.604526][T19048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.619668][T19048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.632451][T19048] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 965.646432][T19048] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 965.670214][T19048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.700019][T19048] usb 5-1: config 0 descriptor?? [ 966.282545][T19048] usb 4-1: USB disconnect, device number 74 [ 966.672457][T19048] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 966.863453][T19048] usb 4-1: Using ep0 maxpacket: 32 [ 966.870895][T19048] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 966.881059][T19048] usb 4-1: config 0 has no interface number 0 [ 966.901907][T19048] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 966.949329][T19048] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 966.965477][T19048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.978743][T19048] usb 4-1: Product: syz [ 966.985560][T19048] usb 4-1: Manufacturer: syz [ 966.990385][T19048] usb 4-1: SerialNumber: syz [ 967.005932][T19048] usb 4-1: config 0 descriptor?? [ 967.024105][T19048] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 967.034518][T19048] em28xx 4-1:0.132: Video interface 132 found: [ 967.071126][T20827] fuse: Unknown parameter '' [ 967.418679][T19048] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 968.112687][ T24] usb 5-1: USB disconnect, device number 57 [ 968.562547][ T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 968.593055][T19048] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 968.605367][T20819] em28xx 4-1:0.132: failed to trigger write to i2c address 0xba (error=-5) [ 968.629585][T19048] em28xx 4-1:0.132: board has no eeprom [ 968.692479][T19048] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 968.703615][T19048] em28xx 4-1:0.132: analog set to bulk mode. [ 968.709839][ T24] em28xx 4-1:0.132: Registering V4L2 extension [ 968.797940][ T10] usb 5-1: config 0 has no interfaces? [ 968.840111][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 968.878784][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 968.901401][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 968.926278][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 968.935365][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.935630][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 969.012278][ T10] usb 5-1: Product: syz [ 969.090394][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 969.105448][ T10] usb 5-1: Manufacturer: syz [ 969.129939][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 969.159349][ T10] usb 5-1: SerialNumber: syz [ 969.173671][ T10] usb 5-1: config 0 descriptor?? [ 969.181642][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 969.267234][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 969.490524][T20858] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:0 [ 970.283215][ T10] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 970.349881][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 970.525609][ T10] usb 3-1: config 0 has no interfaces? [ 970.534320][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 970.543884][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.551937][ T10] usb 3-1: Product: syz [ 970.560633][ T10] usb 3-1: Manufacturer: syz [ 970.590618][ T10] usb 3-1: SerialNumber: syz [ 970.608595][ T10] usb 3-1: config 0 descriptor?? [ 970.649494][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 970.670407][ T10] usb 4-1: USB disconnect, device number 75 [ 970.677264][ T10] em28xx 4-1:0.132: Disconnecting em28xx [ 970.841850][T20872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.851345][ T24] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 970.856294][T20872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.905083][ T24] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 970.971094][ T24] em28xx 4-1:0.132: No AC97 audio processor [ 971.373340][ T24] usb 4-1: Decoder not found [ 971.384291][ T24] em28xx 4-1:0.132: failed to create media graph [ 971.392137][T13976] usb 5-1: USB disconnect, device number 58 [ 971.394094][ T24] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 971.529012][ T24] em28xx 4-1:0.132: Remote control support is not available for this card. [ 971.704061][T20883] ================================================================== [ 971.704876][ T10] em28xx 4-1:0.132: Closing input extension [ 971.712149][T20883] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 971.712179][T20883] Read of size 8 at addr ffff8880596f0738 by task v4l_id/20883 [ 971.733171][T20883] [ 971.735503][T20883] CPU: 1 UID: 0 PID: 20883 Comm: v4l_id Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 971.735526][T20883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 971.735538][T20883] Call Trace: [ 971.735546][T20883] [ 971.735554][T20883] dump_stack_lvl+0x189/0x250 [ 971.735581][T20883] ? __virt_addr_valid+0x1c8/0x5c0 [ 971.735598][T20883] ? rcu_is_watching+0x15/0xb0 [ 971.735622][T20883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 971.735644][T20883] ? rcu_is_watching+0x15/0xb0 [ 971.735666][T20883] ? lock_release+0x4b/0x3e0 [ 971.735689][T20883] ? __virt_addr_valid+0x1c8/0x5c0 [ 971.735705][T20883] ? __virt_addr_valid+0x4a5/0x5c0 [ 971.735722][T20883] print_report+0xd2/0x2b0 [ 971.735744][T20883] ? v4l2_fh_open+0xc7/0x430 [ 971.735765][T20883] kasan_report+0x118/0x150 [ 971.735784][T20883] ? v4l2_fh_open+0xc7/0x430 [ 971.735809][T20883] v4l2_fh_open+0xc7/0x430 [ 971.735830][T20883] ? __pfx___mutex_lock+0x10/0x10 [ 971.735855][T20883] em28xx_v4l2_open+0x157/0x9a0 [ 971.735882][T20883] v4l2_open+0x20f/0x360 [ 971.735899][T20883] chrdev_open+0x4c9/0x5e0 [ 971.735919][T20883] ? __pfx_chrdev_open+0x10/0x10 [ 971.735939][T20883] ? __pfx_chrdev_open+0x10/0x10 [ 971.735955][T20883] do_dentry_open+0xdf0/0x1970 [ 971.735980][T20883] vfs_open+0x3b/0x340 [ 971.735998][T20883] ? path_openat+0x2ecd/0x3830 [ 971.736019][T20883] path_openat+0x2ee5/0x3830 [ 971.736040][T20883] ? arch_stack_walk+0xfc/0x150 [ 971.736070][T20883] ? __pfx_path_openat+0x10/0x10 [ 971.736090][T20883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.736115][T20883] do_filp_open+0x1fa/0x410 [ 971.736135][T20883] ? __lock_acquire+0xab9/0xd20 [ 971.736157][T20883] ? __pfx_do_filp_open+0x10/0x10 [ 971.736187][T20883] ? _raw_spin_unlock+0x28/0x50 [ 971.736212][T20883] ? alloc_fd+0x64c/0x6c0 [ 971.736233][T20883] do_sys_openat2+0x121/0x1c0 [ 971.736254][T20883] ? __pfx_do_sys_openat2+0x10/0x10 [ 971.736274][T20883] ? exc_page_fault+0x76/0xf0 [ 971.736296][T20883] ? do_user_addr_fault+0xc8a/0x1390 [ 971.736317][T20883] __x64_sys_openat+0x138/0x170 [ 971.736339][T20883] do_syscall_64+0xfa/0x3b0 [ 971.736361][T20883] ? lockdep_hardirqs_on+0x9c/0x150 [ 971.736381][T20883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.736398][T20883] ? clear_bhb_loop+0x60/0xb0 [ 971.736416][T20883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.736433][T20883] RIP: 0033:0x7f20462a7407 [ 971.736448][T20883] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 971.736464][T20883] RSP: 002b:00007fff003ef3f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 971.736482][T20883] RAX: ffffffffffffffda RBX: 00007f20469ef880 RCX: 00007f20462a7407 [ 971.736495][T20883] RDX: 0000000000000000 RSI: 00007fff003f0f1b RDI: ffffffffffffff9c [ 971.736507][T20883] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 971.736517][T20883] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 971.736528][T20883] R13: 00007fff003ef640 R14: 00007f2046b56000 R15: 000055abbe49a4d8 [ 971.736548][T20883] [ 971.736554][T20883] [ 972.039682][T20883] Allocated by task 24: [ 972.043825][T20883] kasan_save_track+0x3e/0x80 [ 972.048485][T20883] __kasan_kmalloc+0x93/0xb0 [ 972.053052][T20883] __kmalloc_cache_noprof+0x230/0x3d0 [ 972.058398][T20883] em28xx_v4l2_init+0x10b/0x2e70 [ 972.063318][T20883] em28xx_init_extension+0x11d/0x1c0 [ 972.068580][T20883] process_scheduled_works+0xade/0x17b0 [ 972.074104][T20883] worker_thread+0x8a0/0xda0 [ 972.078673][T20883] kthread+0x70e/0x8a0 [ 972.082718][T20883] ret_from_fork+0x3fc/0x770 [ 972.087286][T20883] ret_from_fork_asm+0x1a/0x30 [ 972.092026][T20883] [ 972.094329][T20883] Freed by task 24: [ 972.098108][T20883] kasan_save_track+0x3e/0x80 [ 972.102766][T20883] kasan_save_free_info+0x46/0x50 [ 972.107766][T20883] __kasan_slab_free+0x62/0x70 [ 972.112505][T20883] kfree+0x18e/0x440 [ 972.116380][T20883] em28xx_v4l2_init+0x1683/0x2e70 [ 972.121382][T20883] em28xx_init_extension+0x11d/0x1c0 [ 972.126643][T20883] process_scheduled_works+0xade/0x17b0 [ 972.132171][T20883] worker_thread+0x8a0/0xda0 [ 972.136739][T20883] kthread+0x70e/0x8a0 [ 972.140784][T20883] ret_from_fork+0x3fc/0x770 [ 972.145352][T20883] ret_from_fork_asm+0x1a/0x30 [ 972.150091][T20883] [ 972.152395][T20883] The buggy address belongs to the object at ffff8880596f0000 [ 972.152395][T20883] which belongs to the cache kmalloc-8k of size 8192 [ 972.166423][T20883] The buggy address is located 1848 bytes inside of [ 972.166423][T20883] freed 8192-byte region [ffff8880596f0000, ffff8880596f2000) [ 972.180371][T20883] [ 972.182677][T20883] The buggy address belongs to the physical page: [ 972.189070][T20883] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x596f0 [ 972.197804][T20883] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 972.206281][T20883] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 972.214242][T20883] page_type: f5(slab) [ 972.218200][T20883] raw: 00fff00000000040 ffff88801a442280 0000000000000000 0000000000000001 [ 972.226761][T20883] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 972.235319][T20883] head: 00fff00000000040 ffff88801a442280 0000000000000000 0000000000000001 [ 972.243966][T20883] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 972.252613][T20883] head: 00fff00000000003 ffffea000165bc01 00000000ffffffff 00000000ffffffff [ 972.261254][T20883] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 972.269898][T20883] page dumped because: kasan: bad access detected [ 972.276292][T20883] page_owner tracks the page as allocated [ 972.281991][T20883] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 18935, tgid 18934 (syz.2.4372), ts 837457655677, free_ts 831571241278 [ 972.303327][T20883] post_alloc_hook+0x240/0x2a0 [ 972.308070][T20883] get_page_from_freelist+0x21e4/0x22c0 [ 972.313592][T20883] __alloc_frozen_pages_noprof+0x181/0x370 [ 972.319375][T20883] alloc_pages_mpol+0x232/0x4a0 [ 972.324203][T20883] allocate_slab+0x8a/0x3b0 [ 972.328685][T20883] ___slab_alloc+0xbfc/0x1480 [ 972.333336][T20883] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 972.339724][T20883] kmalloc_reserve+0x136/0x290 [ 972.344466][T20883] __alloc_skb+0x142/0x2d0 [ 972.348857][T20883] netlink_dump+0x1c7/0xe20 [ 972.353337][T20883] netlink_recvmsg+0x676/0xa30 [ 972.358082][T20883] sock_recvmsg_nosec+0x186/0x1c0 [ 972.363087][T20883] ____sys_recvmsg+0x3aa/0x460 [ 972.367827][T20883] ___sys_recvmsg+0x1b5/0x510 [ 972.372480][T20883] do_recvmmsg+0x307/0x770 [ 972.376871][T20883] __x64_sys_recvmmsg+0x1af/0x240 [ 972.381874][T20883] page last free pid 18801 tgid 18801 stack trace: [ 972.388347][T20883] __free_frozen_pages+0xc71/0xe70 [ 972.393434][T20883] __folio_put+0x21b/0x2c0 [ 972.397823][T20883] skb_release_data+0x49a/0x7c0 [ 972.402649][T20883] kfree_skb_list_reason+0x25d/0x460 [ 972.407909][T20883] skb_release_data+0x61e/0x7c0 [ 972.412736][T20883] sk_skb_reason_drop+0x127/0x170 [ 972.417736][T20883] kcm_release+0x149/0x5c0 [ 972.422127][T20883] sock_close+0xc0/0x240 [ 972.426354][T20883] __fput+0x449/0xa70 [ 972.430315][T20883] task_work_run+0x1d1/0x260 [ 972.434884][T20883] do_exit+0x6b5/0x22e0 [ 972.439015][T20883] do_group_exit+0x21c/0x2d0 [ 972.443582][T20883] get_signal+0x1286/0x1340 [ 972.448063][T20883] arch_do_signal_or_restart+0x9a/0x750 [ 972.453590][T20883] exit_to_user_mode_loop+0x75/0x110 [ 972.458855][T20883] do_syscall_64+0x2bd/0x3b0 [ 972.463425][T20883] [ 972.465728][T20883] Memory state around the buggy address: [ 972.471336][T20883] ffff8880596f0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 972.479374][T20883] ffff8880596f0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 972.487411][T20883] >ffff8880596f0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 972.495448][T20883] ^ [ 972.501314][T20883] ffff8880596f0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 972.509440][T20883] ffff8880596f0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 972.517476][T20883] ================================================================== [ 972.872795][T20883] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 972.880032][T20883] CPU: 1 UID: 0 PID: 20883 Comm: v4l_id Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 972.891750][T20883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 972.901792][T20883] Call Trace: [ 972.905064][T20883] [ 972.907983][T20883] dump_stack_lvl+0x99/0x250 [ 972.912570][T20883] ? __asan_memcpy+0x40/0x70 [ 972.917151][T20883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 972.922346][T20883] ? __pfx__printk+0x10/0x10 [ 972.926935][T20883] panic+0x2db/0x790 [ 972.930820][T20883] ? __pfx_panic+0x10/0x10 [ 972.935230][T20883] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 972.941112][T20883] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 972.947427][T20883] ? print_memory_metadata+0x314/0x400 [ 972.952879][T20883] ? v4l2_fh_open+0xc7/0x430 [ 972.957459][T20883] check_panic_on_warn+0x89/0xb0 [ 972.962389][T20883] ? v4l2_fh_open+0xc7/0x430 [ 972.966979][T20883] end_report+0x78/0x160 [ 972.971206][T20883] kasan_report+0x129/0x150 [ 972.975694][T20883] ? v4l2_fh_open+0xc7/0x430 [ 972.980276][T20883] v4l2_fh_open+0xc7/0x430 [ 972.984684][T20883] ? __pfx___mutex_lock+0x10/0x10 [ 972.989700][T20883] em28xx_v4l2_open+0x157/0x9a0 [ 972.994546][T20883] v4l2_open+0x20f/0x360 [ 972.998777][T20883] chrdev_open+0x4c9/0x5e0 [ 973.003181][T20883] ? __pfx_chrdev_open+0x10/0x10 [ 973.008107][T20883] ? __pfx_chrdev_open+0x10/0x10 [ 973.013031][T20883] do_dentry_open+0xdf0/0x1970 [ 973.017789][T20883] vfs_open+0x3b/0x340 [ 973.021844][T20883] ? path_openat+0x2ecd/0x3830 [ 973.026601][T20883] path_openat+0x2ee5/0x3830 [ 973.031179][T20883] ? arch_stack_walk+0xfc/0x150 [ 973.036025][T20883] ? __pfx_path_openat+0x10/0x10 [ 973.040948][T20883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.047007][T20883] do_filp_open+0x1fa/0x410 [ 973.051499][T20883] ? __lock_acquire+0xab9/0xd20 [ 973.056340][T20883] ? __pfx_do_filp_open+0x10/0x10 [ 973.061360][T20883] ? _raw_spin_unlock+0x28/0x50 [ 973.066201][T20883] ? alloc_fd+0x64c/0x6c0 [ 973.070520][T20883] do_sys_openat2+0x121/0x1c0 [ 973.075185][T20883] ? __pfx_do_sys_openat2+0x10/0x10 [ 973.080369][T20883] ? exc_page_fault+0x76/0xf0 [ 973.085040][T20883] ? do_user_addr_fault+0xc8a/0x1390 [ 973.090315][T20883] __x64_sys_openat+0x138/0x170 [ 973.095157][T20883] do_syscall_64+0xfa/0x3b0 [ 973.099650][T20883] ? lockdep_hardirqs_on+0x9c/0x150 [ 973.104837][T20883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.110892][T20883] ? clear_bhb_loop+0x60/0xb0 [ 973.115555][T20883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.121431][T20883] RIP: 0033:0x7f20462a7407 [ 973.125832][T20883] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 973.145426][T20883] RSP: 002b:00007fff003ef3f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 973.153827][T20883] RAX: ffffffffffffffda RBX: 00007f20469ef880 RCX: 00007f20462a7407 [ 973.161785][T20883] RDX: 0000000000000000 RSI: 00007fff003f0f1b RDI: ffffffffffffff9c [ 973.169742][T20883] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 973.177701][T20883] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 973.185662][T20883] R13: 00007fff003ef640 R14: 00007f2046b56000 R15: 000055abbe49a4d8 [ 973.193626][T20883] [ 973.196871][T20883] Kernel Offset: disabled [ 973.201178][T20883] Rebooting in 86400 seconds..