last executing test programs: 28.194873961s ago: executing program 3 (id=8841): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x2, [@generic={0x31, 0x10, 0x1, "02eb0b358ff7d959ace44d304d22daee24d9e2f6deff2d90f7416d685351a352fed8419b82e85469e0a2f2969547"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x80, 0x6, 0x2}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x2, 0x7, 0x4, "b5d6a06e", "bf1dbb30"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x1, 0x1, 0x7, 0x7, 0x9, 0xff}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000180)=[{0x1, 0x1, 0x0, 0x0}], 0x1}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) 24.539580076s ago: executing program 3 (id=8851): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1001, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x7fc}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000500)={0x5, 0x0, &(0x7f0000000340), &(0x7f0000000380)=[0x1, 0x7]}, 0x20) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9ecba966ec0544ed2c1f5c7fb3d11e23564c90bdbd9dda884c0161f2dd98fa977dfc46", 0x23}], 0x1}, 0x4000010) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x7ffffffffffffff}, 0x18) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x5}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 24.007173259s ago: executing program 3 (id=8856): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000001c0)={r4, 0xa1, &(0x7f0000000200)}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_delete(r5) 22.119000156s ago: executing program 3 (id=8860): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpgid(0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_open_procfs(r3, &(0x7f0000000140)='net/vlan/config\x00') sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a1482, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x22}]}}}]}, 0x58}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) 20.665328695s ago: executing program 3 (id=8864): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee060000000800000001"], 0x88}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 20.434342131s ago: executing program 3 (id=8866): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x14}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1404, 0x2, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0xc3c7cc7fd157d031) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e20, @empty=0xfdfdffff}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x3, 0x3, 0x9, 0x5, 0xfea, 0x6, 0x8, 0x5, 0x5}, 0x0) 20.035861882s ago: executing program 32 (id=8866): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x14}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1404, 0x2, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0xc3c7cc7fd157d031) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e20, @empty=0xfdfdffff}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x3, 0x3, 0x9, 0x5, 0xfea, 0x6, 0x8, 0x5, 0x5}, 0x0) 8.618157785s ago: executing program 1 (id=8895): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newchain={0x2d4, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x264, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x8}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x180, 0x9, 0x0, 0x1, [@m_xt={0x88, 0x7, 0x0, 0x0, {{0x7}, {0x4}, {0x5d, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc509"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x74, 0x1c, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x80, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x53, 0x6, "96986d955fa653444a3d601379169839058212418f8681f2327b9b105bd5e31418412b10ab51efbf536d6faa7284fcdcbb6732089908467917f254c5f0de058b4c6d1dda345d1da5e7e1ac23a4576a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 6.958298532s ago: executing program 2 (id=8901): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x2, [@generic={0x31, 0x10, 0x1, "02eb0b358ff7d959ace44d304d22daee24d9e2f6deff2d90f7416d685351a352fed8419b82e85469e0a2f2969547"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x80, 0x6, 0x2}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x2, 0x7, 0x4, "b5d6a06e", "bf1dbb30"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x1, 0x1, 0x7, 0x7, 0x9, 0xff}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000180)=[{0x1, 0x1, 0x0, 0x0}], 0x1}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 6.455520784s ago: executing program 1 (id=8905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0xf4ff, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002bbd7000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="10005a800c0003800500020303030303030000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r5, 0x402c582b, &(0x7f0000000140)={0xffffffffffffff21, 0x1, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x62, 0x0, 0x0, 0x0, 0x6a, 0x22, 0x7, 0x2b}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000007c0)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5.911268536s ago: executing program 1 (id=8909): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee060000000800000001"], 0x88}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 5.629832582s ago: executing program 1 (id=8910): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xc}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x4080, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x38, r5, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x2, 0x4, 0x0, 0x4000, 0xd, 0x5]}}]}]}]}, 0x38}}, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r8, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x107c, r5, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xd200000, 0x53}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0x28, 0x5b, "e47ff672f20e13d93c8888e7d20f3161e0599bf16d6a450a36a9d853588fca65a816c7fd"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x8, 0x5b, "7a2590a1"}]}, 0x107c}, 0x1, 0x0, 0x0, 0x48804}, 0x8050) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}, {}], 0x2, 0x0, &(0x7f0000000300)={[0x0, 0x3ff]}, 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x0, 0x0, 0x14, 0x0, "ebe1034686e36d0af8f4568653d5761808efa9b67c84fb24a1e249c112243220050595b6d4e29b6a9ebffaf63d213443087c53416acfad4d2f449914615284b4ddbf4efe06d5fcf57ceb33d9b1332b17"}, 0xd8) 4.858505049s ago: executing program 1 (id=8911): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_init() connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='loginuid\x00') fchdir(r7) inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='./file0\x00', 0x8000041e) splice(r6, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_elf64(r5, &(0x7f0000000380)=ANY=[], 0x18c6) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x0, &(0x7f0000006680)=0x1) io_setup(0xe9, &(0x7f0000000140)) 3.468378189s ago: executing program 4 (id=8914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newlink={0x44, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40) 3.352940083s ago: executing program 5 (id=8915): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newchain={0x2d4, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x264, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x8}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x180, 0x9, 0x0, 0x1, [@m_xt={0x88, 0x7, 0x0, 0x0, {{0x7}, {0x4}, {0x5d, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc509"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x74, 0x1c, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x80, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x53, 0x6, "96986d955fa653444a3d601379169839058212418f8681f2327b9b105bd5e31418412b10ab51efbf536d6faa7284fcdcbb6732089908467917f254c5f0de058b4c6d1dda345d1da5e7e1ac23a4576a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.256461836s ago: executing program 4 (id=8916): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = userfaultfd(0x80c01) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f00006f6000/0x2000)=nil, 0x2000}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f0000000640), 0x0) 2.914905784s ago: executing program 4 (id=8917): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0xfcfd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x2, 0xff, 0x4, 0xfffd, 0x100}, 0x20) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRES16=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000040)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x3e, 0x3230135, 0x2, 0x65c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000003500)={&(0x7f00000003c0)={0x50, 0x0, 0x7fffffff, {0x7, 0x29, 0x4, 0x400000, 0x7, 0x80, 0x8, 0x9, 0x0, 0x0, 0x10, 0x247}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000080)={0xe000200f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f00000002c0)="b8000001000f23c00f21f835020008000f23f866b8d0000f00d80f01cb0f2158363e670fc7a703003e83d7000f00d6b8050000000f23d80f21f835400000700f23f86467260f792c66ba210066ed", 0x4e}], 0x1, 0x10, &(0x7f0000000380)=[@cr0={0x0, 0x20000020}], 0x1) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r9, 0x300000b, 0x11, r7, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000000000000006000000040000000900000000000000000000400800000072470000070000000400000000000000000000000a000000ffda5a00000000c00500000294fe4400000000c00600000d00000000000000000300000000000000"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.751723226s ago: executing program 1 (id=8918): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x1, 0x9, 0x800ed0, 0x1, 0x17, 0x2865, 0x9, 0xe7, 0x56bf, 0x5, 0x3, 0x81}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0xe3, 0x2, 0x7, 0x1, 0x3, 0xf, "", {{{0x9, 0x5, 0x1, 0x2, 0x450, 0x25, 0x9, 0xa2}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x1, 0x4}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x6, 0x8, 0xa6, 0x8}, 0x53, &(0x7f0000000080)={0x5, 0xf, 0x53, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "fe9a36b324e9f533dd61c04644ec4ee4"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0xf4, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xc, 0x7, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x6, 0x5, 0xc22}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0xd, 0xf000, 0x7, [0xc0, 0xff0000, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x5, 0x6}]}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x480a}}, {0x98, &(0x7f0000000140)=@string={0x98, 0x3, "94fc4554cb75d7385555918fb9728f53e2621fa3f6b6e078d560614bc2c29b460dd255813e9a2cc742759a2c5f01b63548a44747f10f3b92ba0165b150929441f44be19312ac7b2b9071cecc93ace73d51b97a3eeb2548c63fd8288df408a6b4d21824d0db861b7b3d55a0f008ce2f3e0c777188bb14e5a206a3c7eb0653c2cb5b06b9bd3e7c3917fb50052679dcdedf567b00896067"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2c09}}, {0x32, &(0x7f0000000240)=@string={0x32, 0x3, "507d23d021abca5526ad782e5c4331ef498b696ebb86239a64bc8f30c21eed3f2b16a8a3bab448945d8e2cf6c33e79d5"}}, {0xc4, &(0x7f0000000380)=@string={0xc4, 0x3, "1fe460aaacb303d88b1fccd0a3c1a697d9aa9bc853a89ace1aed170c8a212f64801b863a18a845ff19cf2c6c885a8547226b14e578ce9faafb54a8370d527556cc6b27b21b41a14d67628450868eef1a483d4ce801afd5be07403370bcb170cc19bd135fa8b49a89af41b6e75b155b783fde66119ab5efbf200cddb370329da2cb889bbf37ab171982d59e54fc83c946f42d35e8d4dc9cab542162af8a713bcf59c9ebb940d81ff19dbb8b82607ba676379d12b44fefd5b38eadd449ce409e65254b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x843}}, {0xc0, &(0x7f0000000480)=ANY=[@ANYBLOB="c0032472559bdd125b15c9561c7599a22f2c07517ff4116a332fe2057848ca693e2a3a2b828c2b5f3d33987186f65ed1d34fcb0521df6cc774854e72ad7a29423d54edadca1b225a6179671cda5c2d175afc267c52abb381471d1bd72f1a938cdad527e560d3cac017a1abcc801f8845127574d43a1e906040e8e4c21c670b7b013287c0ed5b2a1c54cb8a50b961f4d3e67578d455d95dbb74b70a732e546163652430a45070bd3d12013e0e922b787939a9bec98e9733979e604bc63a"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io(r0, 0x0, 0x0) 2.541264506s ago: executing program 0 (id=8919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.513124143s ago: executing program 2 (id=8920): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee060000000800000001"], 0x88}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.087475267s ago: executing program 5 (id=8921): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1974}, @IFLA_BOND_UPDELAY={0x8}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}]}}}]}, 0x4c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 1.961698484s ago: executing program 0 (id=8922): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) copy_file_range(r1, 0x0, r1, &(0x7f00000003c0)=0xffffffffffff7ffa, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/psched\x00') ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000000c0)={0x133, 0x9, &(0x7f0000000400)}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x39}}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) madvise(&(0x7f0000cd0000/0x4000)=nil, 0xffffffffdf32ffff, 0x16) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000e6064d564b"]) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {r3, 0x4, 0x1c, 0x0, 0x0, @ib={0x1b, 0x38, 0x2, {"d443021a60f1fee6a55b2c80551d6582"}, 0x6, 0x9, 0x7f}, @ib={0x1b, 0x0, 0x0, {"b9322b534f61cd1848a76d94f0ba2078"}, 0xffffffffffffffff}}}, 0x118) 1.958598626s ago: executing program 2 (id=8923): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000f15000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10000, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 1.725161506s ago: executing program 4 (id=8924): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x25, 0x101, 0x70bd25, 0xfffffffc, {0x10}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0xbcc48fd5bdb0723a}, 0x28044) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x200000a0) accept4(r0, &(0x7f00000001c0)=@nfc, &(0x7f0000000140)=0x80, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e1450009058383"], 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x2a0, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "f112d0f0aebec95893eaa51305802624e414f66e3af2c1e16318a45922628b2aea"}}, @TIPC_NLA_NODE_ID={0x9a, 0x3, "f4c790ce6d85d8bd96fe4a5a7eddd59d290e8e3333436fbd765c9f41b7a1de46fb77848ade0fd7ecaf8822dc078859b035cf065c3db667c8fd52023e636c47b9b99bd20dbd407e7fd7e30e7d14fd366e219024ba5e4af12c4420d69eda44c4a30f5b73cfb00b311aec86bd58f54e6cb06adb5a4a382fb9f4e8c450e1e631376d818d37083b4bb9a4c871fb8932e69affdca04fb72b1d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffe8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x142c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd65}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x200, @mcast2, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa66}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x120000}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x10}, 0x20004014) 1.704857913s ago: executing program 0 (id=8925): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000bf9800000000000056080000020000008500000007613009d8d01e3da8c54ba4609df742000000b70000000000000095000000000000005dc55e32a1439e40d3a57b083de9caf8b709333f9ef71f94b7292f3cd7e5bf8dca2263992940ff840873d227c97fd6e4c8cc36fef298174ef7b636954505cc3aa021"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000953fd1268b100000000000000000000000000020000000"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup3(r3, 0xffffffffffffffff, 0x0) 1.690437611s ago: executing program 5 (id=8926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4795d7a1, 0x4, 0x3, 0x4, 0x401, 0xb2f, 0x800, 0xfffffff9, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008050}, 0x10008814) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xa47c}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@private=0xa010102, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1}, {{@in6=@local, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) r11 = getpid() ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001100)={0x0, r0, 0x4b078931, 0x4590, 0x8000, 0x4}) capget(&(0x7f0000001000)={0x19980330, r11}, &(0x7f0000001040)={0xaf9f, 0x5, 0xc2, 0x6d9, 0x3, 0x5}) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/timer_list\x00', 0x0, 0x0) 1.421160847s ago: executing program 5 (id=8927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee", 0x1d}], 0x1}, 0x0) 1.400029028s ago: executing program 2 (id=8928): r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000140)={0xa, @pix_mp={0x4, 0xffff, 0x33565348, 0x4, 0x3, [{0x3, 0xffffffff}, {0x9, 0xa}, {0x7, 0x40}, {0x8, 0xa}, {0x4, 0x2}, {0xb9a1, 0x1}, {0x49, 0x692d610b}, {0x7d03}], 0x0, 0x1, 0x7, 0x0, 0x3}}) 1.279142083s ago: executing program 2 (id=8929): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) fchown(r0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000400)=@urb_type_control={0x2, {0x8, 0x1}, 0x4, 0x40, &(0x7f0000000200)={0x0, 0x14, 0xabf2, 0x7d53, 0xfffd}, 0x8, 0x80000000, 0xc000, 0x0, 0xb, 0x1, &(0x7f0000000380)="6a8e7e985c20ad78e9cf45250a5cc444cb07223b9bee55d1a01bd89eb6ae7d5d75f85e"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 1.1095696s ago: executing program 5 (id=8930): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x4040000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x10000008, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x2, 0x10}, 0xc) fchmod(r0, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="250000b3f8bd8818000000000060ffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="290000003000000008001f0001800000080004000300000008002c0001000000"], 0x38}}, 0x894) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="f8947f4f0000000000000600070002008000"], 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="0002001000fe04000100000020c19f83115678ac70"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x300, 0x70bd25, 0x0, {0xa, 0x0, 0x0, 0x0, 0x12}, [@NHA_BLACKHOLE={0x4}, @NHA_BLACKHOLE={0x4}]}, 0x20}}, 0x20020000) write$tcp_mem(r6, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x1, 0x2c}, 0x48) 617.341898ms ago: executing program 2 (id=8931): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000bf9800000000000056080000020000008500000007613009d8d01e3da8c54ba4609df742000000b70000000000000095000000000000005dc55e32a1439e40d3a57b083de9caf8b709333f9ef71f94b7292f3cd7e5bf8dca2263992940ff840873d227c97fd6e4c8cc36fef298174ef7b636954505cc3aa021"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 503.463389ms ago: executing program 0 (id=8932): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1e, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1974}, @IFLA_BOND_UPDELAY={0x8}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}]}}}]}, 0x4c}}, 0x0) 315.279153ms ago: executing program 0 (id=8933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 233.323112ms ago: executing program 4 (id=8934): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee060000000800000001"], 0x88}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 93.155766ms ago: executing program 4 (id=8935): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a1482, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x20) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r7, 0x0) 43.202484ms ago: executing program 5 (id=8936): r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000100)={0x6, [[0x1, 0x1797, 0x15c, 0x9fc, 0x0, 0x1, 0x1], [0x1ffffffe, 0x3, 0x2, 0x10, 0x0, 0xfffbffff, 0xfffffffd], [0x3, 0x3, 0x40000000, 0x4, 0x20000, 0x3bc9, 0x2, 0x1]], '\x00', [{0xffffffff, 0x5, 0x0, 0x1, 0x1}, {0x1fb, 0x0, 0x0, 0x1}, {0x4000000, 0x4000b}, {0x5, 0x6}, {0x2000080, 0x8000006}, {}, {}, {}, {0x8, 0x7}, {0x0, 0x400}, {0xfffffffc}], '\x00', 0x1}) unshare(0x6a040000) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x201f00) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) r2 = syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x2000000, 0x10, 0xffffffffffffffff, 0x94177000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) landlock_create_ruleset(&(0x7f0000000380)={0x5508, 0x0, 0x3}, 0x18, 0x1) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x400, 0x30, 0x10000000, 0x5f}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r6, 0x401, 0x2}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2e, 0x20000000, {0x0, 0x0, 0x12, r4, {}, {0x0, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x2c}}, 0x0) socket$kcm(0xa, 0x8, 0x0) 0s ago: executing program 0 (id=8937): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth1_to_bond\x00', 0x2b0559f13b35a4f3}) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b3d, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000080)={0x1}) kernel console output (not intermixed with test programs): 4: 0000000000000000 R15: 0000000000000000 [ 2182.914847][ T5118] [ 2183.300775][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 2183.305807][ T5124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2183.318869][ T5126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8698'. [ 2183.324576][ T5118] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2183.331629][ T5124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2183.365728][ T5126] macvtap11: entered promiscuous mode [ 2183.377947][ T5126] macvtap11: entered allmulticast mode [ 2183.414681][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 2183.524674][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 2183.640339][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2183.647792][ T5134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8701'. [ 2183.756477][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2183.864662][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2183.974649][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2184.084974][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2184.194952][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2184.304655][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2184.414710][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2184.535159][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2184.655102][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2184.764943][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 2184.836945][ T5948] usb 1-1: USB disconnect, device number 47 [ 2184.926465][ T5948] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2185.818353][ T5190] loop4: detected capacity change from 0 to 7 [ 2185.879890][ T5190] Dev loop4: unable to read RDB block 7 [ 2185.888561][ T5190] loop4: unable to read partition table [ 2185.895490][ T5190] loop4: partition table beyond EOD, truncated [ 2185.896947][ T5193] binfmt_misc: register: failed to install interpreter file ./file0 [ 2185.915417][ T5190] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2185.944618][ T2675] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2186.009276][ T5195] tipc: Enabled bearer , priority 0 [ 2186.029667][ T5195] syzkaller0: entered promiscuous mode [ 2186.047194][ T5195] syzkaller0: entered allmulticast mode [ 2186.054545][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2186.054558][ T30] audit: type=1326 audit(1762836782.285:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5182 comm="syz.4.8709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2186.083010][ T30] audit: type=1326 audit(1762836782.295:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5182 comm="syz.4.8709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2186.106866][ T2675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2186.118996][ T2675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2186.132241][ T2675] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2186.142531][ T2675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.167171][ T2675] usb 2-1: config 0 descriptor?? [ 2186.186249][ T5195] tipc: Resetting bearer [ 2186.227656][ T5194] tipc: Resetting bearer [ 2186.335474][ T5194] tipc: Disabling bearer [ 2186.582229][ T2675] steelseries 0003:1038:12B6.0038: unknown main item tag 0x0 [ 2186.595471][ T2675] steelseries 0003:1038:12B6.0038: unknown main item tag 0x0 [ 2186.613119][ T2675] steelseries 0003:1038:12B6.0038: unknown main item tag 0x0 [ 2186.622388][ T2675] steelseries 0003:1038:12B6.0038: unknown main item tag 0x0 [ 2186.654578][ T2675] steelseries 0003:1038:12B6.0038: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 2186.796004][ T5177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2186.818288][ T5207] FAULT_INJECTION: forcing a failure. [ 2186.818288][ T5207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2186.831648][ T5207] CPU: 0 UID: 0 PID: 5207 Comm: syz.2.8714 Not tainted syzkaller #0 PREEMPT(full) [ 2186.831669][ T5207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2186.831680][ T5207] Call Trace: [ 2186.831687][ T5207] [ 2186.831696][ T5207] dump_stack_lvl+0x189/0x250 [ 2186.831721][ T5207] ? __pfx____ratelimit+0x10/0x10 [ 2186.831743][ T5207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2186.831765][ T5207] ? __pfx__printk+0x10/0x10 [ 2186.831783][ T5207] ? __might_fault+0xb0/0x130 [ 2186.831817][ T5207] should_fail_ex+0x414/0x560 [ 2186.831847][ T5207] _copy_from_user+0x2d/0xb0 [ 2186.831869][ T5207] __sys_sendto+0x25c/0x520 [ 2186.831889][ T5207] ? __pfx___sys_sendto+0x10/0x10 [ 2186.831904][ T5207] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2186.831940][ T5207] ? __fget_files+0x3a0/0x420 [ 2186.831968][ T5207] ? ksys_write+0x22a/0x250 [ 2186.831990][ T5207] ? exc_page_fault+0x82/0x100 [ 2186.832022][ T5207] ? __pfx_ksys_write+0x10/0x10 [ 2186.832049][ T5207] __ia32_sys_sendto+0xdd/0x100 [ 2186.832071][ T5207] __do_fast_syscall_32+0xb6/0x2b0 [ 2186.832096][ T5207] ? lockdep_hardirqs_on+0x9c/0x150 [ 2186.832123][ T5207] do_fast_syscall_32+0x34/0x80 [ 2186.832148][ T5207] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2186.832168][ T5207] RIP: 0023:0xf708d539 [ 2186.832184][ T5207] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2186.832198][ T5207] RSP: 002b:00000000f543b55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2186.832218][ T5207] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080f6f000 [ 2186.832230][ T5207] RDX: 00000000fffffea7 RSI: 0000000020000004 RDI: 0000000080b63fe4 [ 2186.832242][ T5207] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 2186.832253][ T5207] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2186.832263][ T5207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2186.832290][ T5207] [ 2187.043286][ T5177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2187.268243][ T2675] steelseries 0003:1038:12B6.0038: hid_hw_raw_request() failed with -71 [ 2187.300294][ T2675] usb 2-1: USB disconnect, device number 35 [ 2187.641915][ T5219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8717'. [ 2187.804614][ T5948] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 2187.951607][ T5219] hub 9-0:1.0: USB hub found [ 2187.964556][ T5219] hub 9-0:1.0: 1 port detected [ 2188.008229][ T5948] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2188.028326][ T5948] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2188.050833][ T5948] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 2188.072307][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2188.086016][ T5948] usb 5-1: SerialNumber: syz [ 2188.106078][ T5229] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2188.513554][ T5241] @0Ù: renamed from bond_slave_1 (while UP) [ 2189.308737][ T5250] tipc: Enabled bearer , priority 0 [ 2189.339630][ T5250] syzkaller0: entered promiscuous mode [ 2189.366323][ T5250] syzkaller0: entered allmulticast mode [ 2189.402146][ T5250] tipc: Resetting bearer [ 2189.414994][ T5249] tipc: Resetting bearer [ 2189.435574][ T5249] tipc: Disabling bearer [ 2189.514600][ T2675] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2189.575717][ T5254] FAULT_INJECTION: forcing a failure. [ 2189.575717][ T5254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2189.595941][ T5254] CPU: 1 UID: 0 PID: 5254 Comm: syz.3.8726 Not tainted syzkaller #0 PREEMPT(full) [ 2189.595965][ T5254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2189.595976][ T5254] Call Trace: [ 2189.595984][ T5254] [ 2189.595991][ T5254] dump_stack_lvl+0x189/0x250 [ 2189.596019][ T5254] ? __pfx____ratelimit+0x10/0x10 [ 2189.596040][ T5254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2189.596062][ T5254] ? __pfx__printk+0x10/0x10 [ 2189.596080][ T5254] ? __might_fault+0xb0/0x130 [ 2189.596114][ T5254] should_fail_ex+0x414/0x560 [ 2189.596143][ T5254] _copy_from_user+0x2d/0xb0 [ 2189.596165][ T5254] get_compat_msghdr+0xad/0x4a0 [ 2189.596190][ T5254] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2189.596218][ T5254] ___sys_sendmsg+0x193/0x2a0 [ 2189.596240][ T5254] ? __pfx____sys_sendmsg+0x10/0x10 [ 2189.596284][ T5254] ? __fget_files+0x2a/0x420 [ 2189.596295][ T5254] ? __fget_files+0x3a0/0x420 [ 2189.596309][ T5254] __sys_sendmsg+0x164/0x220 [ 2189.596320][ T5254] ? __pfx___sys_sendmsg+0x10/0x10 [ 2189.596335][ T5254] ? __pfx_ksys_write+0x10/0x10 [ 2189.596351][ T5254] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2189.596365][ T5254] ? lockdep_hardirqs_on+0x9c/0x150 [ 2189.596380][ T5254] __do_fast_syscall_32+0xb6/0x2b0 [ 2189.596394][ T5254] ? lockdep_hardirqs_on+0x9c/0x150 [ 2189.596408][ T5254] do_fast_syscall_32+0x34/0x80 [ 2189.596422][ T5254] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2189.596434][ T5254] RIP: 0023:0xf7fb1539 [ 2189.596443][ T5254] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2189.596451][ T5254] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2189.596463][ T5254] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 2189.596470][ T5254] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2189.596476][ T5254] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2189.596481][ T5254] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2189.596494][ T5254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2189.596508][ T5254] [ 2189.814929][ C1] vkms_vblank_simulate: vblank timer overrun [ 2189.822827][ T2675] usb 1-1: device descriptor read/64, error -71 [ 2190.005899][ T5259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8728'. [ 2190.064651][ T2675] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2190.180905][ T5261] FAULT_INJECTION: forcing a failure. [ 2190.180905][ T5261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2190.194706][ T2675] usb 1-1: device descriptor read/64, error -71 [ 2190.212788][ T5263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8727'. [ 2190.214570][ T5261] CPU: 0 UID: 0 PID: 5261 Comm: syz.2.8729 Not tainted syzkaller #0 PREEMPT(full) [ 2190.214593][ T5261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2190.214603][ T5261] Call Trace: [ 2190.214610][ T5261] [ 2190.214635][ T5261] dump_stack_lvl+0x189/0x250 [ 2190.214661][ T5261] ? __pfx____ratelimit+0x10/0x10 [ 2190.214684][ T5261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2190.214705][ T5261] ? __pfx__printk+0x10/0x10 [ 2190.214728][ T5261] ? __might_fault+0xb0/0x130 [ 2190.214761][ T5261] should_fail_ex+0x414/0x560 [ 2190.214789][ T5261] _copy_from_user+0x2d/0xb0 [ 2190.214811][ T5261] get_compat_msghdr+0xad/0x4a0 [ 2190.214835][ T5261] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2190.214864][ T5261] ___sys_sendmsg+0x193/0x2a0 [ 2190.214885][ T5261] ? __pfx____sys_sendmsg+0x10/0x10 [ 2190.214936][ T5261] ? __fget_files+0x2a/0x420 [ 2190.214951][ T5261] ? __fget_files+0x3a0/0x420 [ 2190.214977][ T5261] __sys_sendmsg+0x164/0x220 [ 2190.214997][ T5261] ? __pfx___sys_sendmsg+0x10/0x10 [ 2190.215023][ T5261] ? __pfx_ksys_write+0x10/0x10 [ 2190.215048][ T5261] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2190.215072][ T5261] ? lockdep_hardirqs_on+0x9c/0x150 [ 2190.215097][ T5261] __do_fast_syscall_32+0xb6/0x2b0 [ 2190.215122][ T5261] ? lockdep_hardirqs_on+0x9c/0x150 [ 2190.215147][ T5261] do_fast_syscall_32+0x34/0x80 [ 2190.215170][ T5261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2190.215190][ T5261] RIP: 0023:0xf708d539 [ 2190.215205][ T5261] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2190.215219][ T5261] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2190.215237][ T5261] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001080 [ 2190.215249][ T5261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2190.215259][ T5261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2190.215269][ T5261] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2190.215279][ T5261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2190.215306][ T5261] [ 2190.435701][ T2675] usb usb1-port1: attempt power cycle [ 2190.600988][ T5262] hub 9-0:1.0: USB hub found [ 2190.606008][ T5262] hub 9-0:1.0: 1 port detected [ 2190.620836][ T30] audit: type=1326 audit(1762836786.855:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.2.8731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2190.636339][ T5267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8731'. [ 2190.652127][ T30] audit: type=1326 audit(1762836786.855:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.2.8731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2190.680085][ T30] audit: type=1326 audit(1762836786.855:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.2.8731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2190.702709][ T30] audit: type=1326 audit(1762836786.855:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.2.8731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2190.732713][ T30] audit: type=1326 audit(1762836786.855:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.2.8731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2190.755114][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2190.773111][ T30] audit: type=1326 audit(1762836786.855:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.2.8731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2190.795144][ C1] vkms_vblank_simulate: vblank timer overrun [ 2190.824655][ T2675] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2190.849955][ T30] audit: type=1326 audit(1762836786.855:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.2.8731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2190.873092][ T30] audit: type=1326 audit(1762836786.855:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.2.8731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2190.897722][ T2675] usb 1-1: device descriptor read/8, error -71 [ 2190.914981][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 2190.923551][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2190.935869][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2190.945304][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2190.963503][ T9] usb 2-1: Product: syz [ 2190.970086][ T9] usb 2-1: Manufacturer: syz [ 2190.976251][ T9] usb 2-1: SerialNumber: syz [ 2190.986621][ T9] usb 2-1: config 0 descriptor?? [ 2190.995751][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2191.009339][ T9] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 2191.155002][ T2675] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2191.193392][ T2675] usb 1-1: device descriptor read/8, error -71 [ 2191.240754][ T5948] usb 5-1: USB disconnect, device number 61 [ 2191.305992][ T2675] usb usb1-port1: unable to enumerate USB device [ 2191.354173][ T5274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8734'. [ 2191.504060][ T5282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8733'. [ 2191.642293][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 2191.672016][ T5278] hub 9-0:1.0: USB hub found [ 2191.678554][ T5278] hub 9-0:1.0: 1 port detected [ 2191.745475][ T5286] netlink: 'syz.3.8736': attribute type 10 has an invalid length. [ 2192.079818][ T9] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2192.088254][ T9] em28xx 2-1:0.0: board has no eeprom [ 2192.449371][ T9] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2192.479459][ T9] em28xx 2-1:0.0: dvb set to bulk mode. [ 2192.488342][ T1848] em28xx 2-1:0.0: Binding DVB extension [ 2192.600637][ T5291] tipc: Enabled bearer , priority 0 [ 2192.611065][ T5265] em28xx 2-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 2192.622428][ T9] usb 2-1: USB disconnect, device number 36 [ 2192.673341][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 2192.703974][ T5294] syzkaller0: entered promiscuous mode [ 2192.723831][ T5294] syzkaller0: entered allmulticast mode [ 2192.747526][ T1848] em28xx 2-1:0.0: Registering input extension [ 2192.756418][ T9] em28xx 2-1:0.0: Closing input extension [ 2192.789504][ T9] em28xx 2-1:0.0: Freeing device [ 2192.811680][ T5295] tipc: Resetting bearer [ 2192.847996][ T5290] tipc: Resetting bearer [ 2192.914345][ T5290] tipc: Disabling bearer [ 2193.205389][ T5299] FAULT_INJECTION: forcing a failure. [ 2193.205389][ T5299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2193.364515][ T5299] CPU: 1 UID: 0 PID: 5299 Comm: syz.2.8740 Not tainted syzkaller #0 PREEMPT(full) [ 2193.364547][ T5299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2193.364558][ T5299] Call Trace: [ 2193.364566][ T5299] [ 2193.364574][ T5299] dump_stack_lvl+0x189/0x250 [ 2193.364601][ T5299] ? __pfx____ratelimit+0x10/0x10 [ 2193.364623][ T5299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2193.364644][ T5299] ? __pfx__printk+0x10/0x10 [ 2193.364662][ T5299] ? __might_fault+0xb0/0x130 [ 2193.364694][ T5299] should_fail_ex+0x414/0x560 [ 2193.364722][ T5299] _copy_from_user+0x2d/0xb0 [ 2193.364743][ T5299] get_compat_msghdr+0xad/0x4a0 [ 2193.364767][ T5299] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2193.364796][ T5299] ___sys_sendmsg+0x193/0x2a0 [ 2193.364818][ T5299] ? __pfx____sys_sendmsg+0x10/0x10 [ 2193.364870][ T5299] ? __fget_files+0x2a/0x420 [ 2193.364885][ T5299] ? __fget_files+0x3a0/0x420 [ 2193.364910][ T5299] __sys_sendmsg+0x164/0x220 [ 2193.364929][ T5299] ? __pfx___sys_sendmsg+0x10/0x10 [ 2193.364953][ T5299] ? __pfx_ksys_write+0x10/0x10 [ 2193.364979][ T5299] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2193.365004][ T5299] ? lockdep_hardirqs_on+0x9c/0x150 [ 2193.365028][ T5299] __do_fast_syscall_32+0xb6/0x2b0 [ 2193.365051][ T5299] ? lockdep_hardirqs_on+0x9c/0x150 [ 2193.365076][ T5299] do_fast_syscall_32+0x34/0x80 [ 2193.365098][ T5299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2193.365118][ T5299] RIP: 0023:0xf708d539 [ 2193.365134][ T5299] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2193.365149][ T5299] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2193.365169][ T5299] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 2193.365183][ T5299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2193.365193][ T5299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2193.365204][ T5299] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2193.365215][ T5299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2193.365242][ T5299] [ 2193.584955][ C1] vkms_vblank_simulate: vblank timer overrun [ 2193.822370][T29302] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2193.839337][T29302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2193.849530][T29302] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2193.858347][T29302] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2193.877452][T29302] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2193.966039][T14419] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2193.986523][T14419] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2193.996652][T14419] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2194.004918][T14419] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2194.012827][T14419] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2194.057984][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.094763][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 2194.094776][ T30] audit: type=1326 audit(1762836790.315:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2194.313677][ T30] audit: type=1326 audit(1762836790.315:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2194.336089][ T30] audit: type=1326 audit(1762836790.475:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2194.363499][ T30] audit: type=1326 audit(1762836790.475:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2194.386485][ T30] audit: type=1326 audit(1762836790.475:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2194.409912][ T30] audit: type=1326 audit(1762836790.475:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2194.411479][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.432631][ T30] audit: type=1326 audit(1762836790.475:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2194.479253][ T30] audit: type=1326 audit(1762836790.475:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2194.503495][ T30] audit: type=1326 audit(1762836790.545:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2194.528195][ T30] audit: type=1326 audit(1762836790.545:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5314 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2194.601268][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.752500][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.804373][ T5337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8747'. [ 2194.819328][ T5317] chnl_net:caif_netlink_parms(): no params data found [ 2194.895518][ T5337] hub 9-0:1.0: USB hub found [ 2194.900692][ T5337] hub 9-0:1.0: 1 port detected [ 2195.336102][ T5317] bridge0: port 1(bridge_slave_0) entered blocking state [ 2195.343391][ T5317] bridge0: port 1(bridge_slave_0) entered disabled state [ 2195.355573][ T5317] bridge_slave_0: entered allmulticast mode [ 2195.364018][ T5317] bridge_slave_0: entered promiscuous mode [ 2195.399732][ T5317] bridge0: port 2(bridge_slave_1) entered blocking state [ 2195.415076][ T5317] bridge0: port 2(bridge_slave_1) entered disabled state [ 2195.423781][ T5317] bridge_slave_1: entered allmulticast mode [ 2195.434419][ T5317] bridge_slave_1: entered promiscuous mode [ 2195.667865][ T5317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2195.702100][ T50] bridge_slave_1: left allmulticast mode [ 2195.717084][ T50] bridge_slave_1: left promiscuous mode [ 2195.775048][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 2195.790950][ T50] bridge_slave_0: left allmulticast mode [ 2195.797447][ T50] bridge_slave_0: left promiscuous mode [ 2195.803419][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 2196.116702][T14419] Bluetooth: hci0: command tx timeout [ 2196.695982][ T50] dvmrp0 (unregistering): left allmulticast mode [ 2196.763235][ T50] bridge0 (unregistering): left allmulticast mode [ 2196.771322][ T50] bridge0 (unregistering): left promiscuous mode [ 2197.001345][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2197.115940][ T50] bond0 (unregistering): left allmulticast mode [ 2197.122347][ T50] bond_slave_0: left allmulticast mode [ 2197.129631][ T5376] FAULT_INJECTION: forcing a failure. [ 2197.129631][ T5376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2197.130241][ T50] bond_slave_1: left allmulticast mode [ 2197.143661][ T5376] CPU: 0 UID: 0 PID: 5376 Comm: syz.4.8754 Not tainted syzkaller #0 PREEMPT(full) [ 2197.143684][ T5376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2197.143695][ T5376] Call Trace: [ 2197.143702][ T5376] [ 2197.143710][ T5376] dump_stack_lvl+0x189/0x250 [ 2197.143735][ T5376] ? __pfx____ratelimit+0x10/0x10 [ 2197.143758][ T5376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2197.143780][ T5376] ? __pfx__printk+0x10/0x10 [ 2197.143798][ T5376] ? __might_fault+0xb0/0x130 [ 2197.143830][ T5376] should_fail_ex+0x414/0x560 [ 2197.143859][ T5376] _copy_from_user+0x2d/0xb0 [ 2197.143886][ T5376] get_compat_msghdr+0xad/0x4a0 [ 2197.143910][ T5376] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2197.143939][ T5376] ___sys_sendmsg+0x193/0x2a0 [ 2197.143960][ T5376] ? __pfx____sys_sendmsg+0x10/0x10 [ 2197.144011][ T5376] ? __fget_files+0x2a/0x420 [ 2197.144026][ T5376] ? __fget_files+0x3a0/0x420 [ 2197.144052][ T5376] __sys_sendmsg+0x164/0x220 [ 2197.144072][ T5376] ? __pfx___sys_sendmsg+0x10/0x10 [ 2197.144098][ T5376] ? __pfx_ksys_write+0x10/0x10 [ 2197.144123][ T5376] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2197.144148][ T5376] ? lockdep_hardirqs_on+0x9c/0x150 [ 2197.144173][ T5376] __do_fast_syscall_32+0xb6/0x2b0 [ 2197.144197][ T5376] ? lockdep_hardirqs_on+0x9c/0x150 [ 2197.144222][ T5376] do_fast_syscall_32+0x34/0x80 [ 2197.144245][ T5376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2197.144264][ T5376] RIP: 0023:0xf7f64539 [ 2197.144279][ T5376] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2197.144294][ T5376] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2197.144313][ T5376] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001080 [ 2197.144326][ T5376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2197.144337][ T5376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2197.144347][ T5376] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2197.144358][ T5376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2197.144385][ T5376] [ 2197.155514][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 2197.175400][ T50] bond0 (unregistering): left promiscuous mode [ 2197.203407][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2197.399535][ T50] bond_slave_0: left promiscuous mode [ 2197.405729][ T50] bond_slave_1: left promiscuous mode [ 2197.409875][ T5377] binder: BINDER_SET_CONTEXT_MGR already set [ 2197.417199][ T5377] binder: 5371:5377 ioctl 4018620d 80000040 returned -16 [ 2197.489639][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2197.502527][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.510768][ T9] usb 2-1: Product: syz [ 2197.516401][ T9] usb 2-1: Manufacturer: syz [ 2197.521031][ T9] usb 2-1: SerialNumber: syz [ 2197.533330][ T9] usb 2-1: config 0 descriptor?? [ 2197.545990][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2197.555424][ T9] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 2197.582237][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2197.595215][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2197.618099][ T50] bond0 (unregistering): Released all slaves [ 2197.670673][ T5317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2197.683692][ T5380] loop4: detected capacity change from 0 to 7 [ 2197.692888][ T725] Dev loop4: unable to read RDB block 7 [ 2197.699291][ T725] loop4: unable to read partition table [ 2197.707305][ T725] loop4: partition table beyond EOD, truncated [ 2197.717213][ T5380] Dev loop4: unable to read RDB block 7 [ 2197.722784][ T5380] loop4: unable to read partition table [ 2197.733746][ T5380] loop4: partition table beyond EOD, truncated [ 2197.810873][ T5317] team0: Port device team_slave_0 added [ 2197.836173][ T5317] team0: Port device team_slave_1 added [ 2197.894178][ T5317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2197.905345][ T5380] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2197.922774][ T5317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2197.984328][ T5317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2197.997541][ T5317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2198.032642][ T5317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2198.064747][ T5317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2198.092102][ T50] tipc: Disabling bearer [ 2198.099075][ T50] tipc: Left network mode [ 2198.135423][ T50] IPVS: stopping master sync thread 2279 ... [ 2198.196185][T14419] Bluetooth: hci0: command tx timeout [ 2198.203098][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 2198.301658][ T5377] syz.2.8753 (5377): drop_caches: 2 [ 2198.347402][ T5317] hsr_slave_0: entered promiscuous mode [ 2198.353907][ T5317] hsr_slave_1: entered promiscuous mode [ 2198.371876][ T5317] debugfs: 'hsr0' already exists in 'hsr' [ 2198.383694][ T5317] Cannot create hsr debugfs directory [ 2198.617694][ T9] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2198.630744][ T9] em28xx 2-1:0.0: board has no eeprom [ 2198.922460][ T5405] binder: 5403:5405 unknown command 0 [ 2198.928693][ T5405] binder: 5403:5405 ioctl c0306201 80000080 returned -22 [ 2198.945201][ T50] hsr_slave_0: left promiscuous mode [ 2198.954695][ T50] hsr_slave_1: left promiscuous mode [ 2198.965892][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2198.973294][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2198.981676][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2198.985022][ T9] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2198.999229][ T9] em28xx 2-1:0.0: dvb set to bulk mode. [ 2199.014657][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2199.018594][ T1848] em28xx 2-1:0.0: Binding DVB extension [ 2199.053819][ T5408] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8757'. [ 2199.094071][ T5408] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8757'. [ 2199.150445][ T50] dummy0: left allmulticast mode [ 2199.156563][ T5368] em28xx 2-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 2199.166094][ T9] usb 2-1: USB disconnect, device number 37 [ 2199.177580][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 2199.185143][ T50] veth1_macvtap: left promiscuous mode [ 2199.190708][ T50] veth0_macvtap: left promiscuous mode [ 2199.218189][ T1848] em28xx 2-1:0.0: Registering input extension [ 2199.225187][ T9] em28xx 2-1:0.0: Closing input extension [ 2199.246650][ T50] veth1_vlan: left promiscuous mode [ 2199.250995][ T9] em28xx 2-1:0.0: Freeing device [ 2199.279922][ T50] veth0_vlan: left promiscuous mode [ 2200.031120][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8761'. [ 2200.076928][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8761'. [ 2200.228890][ T50] team0 (unregistering): Port device team_slave_1 removed [ 2200.287724][T14419] Bluetooth: hci0: command tx timeout [ 2200.306540][ T50] team0 (unregistering): Port device team_slave_0 removed [ 2201.068552][ T5417] tipc: Enabling of bearer rejected, failed to enable media [ 2201.913584][ T50] IPVS: stop unused estimator thread 0... [ 2202.365274][T14419] Bluetooth: hci0: command tx timeout [ 2202.384298][ T5470] FAULT_INJECTION: forcing a failure. [ 2202.384298][ T5470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2202.434070][ T5470] CPU: 0 UID: 0 PID: 5470 Comm: syz.3.8768 Not tainted syzkaller #0 PREEMPT(full) [ 2202.434099][ T5470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2202.434111][ T5470] Call Trace: [ 2202.434119][ T5470] [ 2202.434128][ T5470] dump_stack_lvl+0x189/0x250 [ 2202.434155][ T5470] ? __pfx____ratelimit+0x10/0x10 [ 2202.434178][ T5470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2202.434201][ T5470] ? __pfx__printk+0x10/0x10 [ 2202.434220][ T5470] ? __might_fault+0xb0/0x130 [ 2202.434254][ T5470] should_fail_ex+0x414/0x560 [ 2202.434284][ T5470] _copy_from_user+0x2d/0xb0 [ 2202.434306][ T5470] get_compat_msghdr+0xad/0x4a0 [ 2202.434331][ T5470] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2202.434360][ T5470] ___sys_sendmsg+0x193/0x2a0 [ 2202.434382][ T5470] ? __pfx____sys_sendmsg+0x10/0x10 [ 2202.434430][ T5470] ? __fget_files+0x2a/0x420 [ 2202.434445][ T5470] ? __fget_files+0x3a0/0x420 [ 2202.434468][ T5470] __sys_sendmsg+0x164/0x220 [ 2202.434489][ T5470] ? __pfx___sys_sendmsg+0x10/0x10 [ 2202.434513][ T5470] ? __pfx_ksys_write+0x10/0x10 [ 2202.434537][ T5470] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2202.434560][ T5470] ? lockdep_hardirqs_on+0x9c/0x150 [ 2202.434585][ T5470] __do_fast_syscall_32+0xb6/0x2b0 [ 2202.434607][ T5470] ? lockdep_hardirqs_on+0x9c/0x150 [ 2202.434633][ T5470] do_fast_syscall_32+0x34/0x80 [ 2202.434663][ T5470] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2202.434684][ T5470] RIP: 0023:0xf7fb1539 [ 2202.434699][ T5470] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2202.434715][ T5470] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2202.434734][ T5470] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001080 [ 2202.434747][ T5470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2202.434758][ T5470] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2202.434768][ T5470] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2202.434777][ T5470] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2202.434809][ T5470] [ 2202.473929][ T5317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2202.475354][ C0] vkms_vblank_simulate: vblank timer overrun [ 2202.644765][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2202.687809][ T5317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2202.699693][ T5317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2202.711881][ T5317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2202.827002][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2202.841963][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2202.863198][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2202.909456][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2202.919358][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.940173][ T9] usb 2-1: Product: syz [ 2202.944397][ T9] usb 2-1: Manufacturer: syz [ 2202.954890][ T5317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2202.961583][ T9] usb 2-1: SerialNumber: syz [ 2202.997123][ T5317] 8021q: adding VLAN 0 to HW filter on device team0 [ 2203.007108][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 2203.013066][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2203.046596][ T4903] bridge0: port 1(bridge_slave_0) entered blocking state [ 2203.053754][ T4903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2203.113990][ T5475] fuse: Unknown parameter 'fv0x0000000000000004' [ 2203.152475][ T4903] bridge0: port 2(bridge_slave_1) entered blocking state [ 2203.159700][ T4903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2203.237819][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2203.393996][ T5317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2203.480167][ T5317] veth0_vlan: entered promiscuous mode [ 2203.539491][ T5317] veth1_vlan: entered promiscuous mode [ 2203.590337][ T5317] veth0_macvtap: entered promiscuous mode [ 2203.602065][ T5317] veth1_macvtap: entered promiscuous mode [ 2203.616571][ T2675] usb 2-1: USB disconnect, device number 38 [ 2203.639836][ T2675] usblp0: removed [ 2203.650628][ T5317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2203.690337][ T5317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2203.732548][ T4903] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.742641][ T4903] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.770334][ T4903] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.781352][ T4903] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.967174][T14033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2203.989773][T14033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2204.026963][T14033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2204.037973][T14033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2204.402239][ T5536] tipc: Enabled bearer , priority 0 [ 2204.424736][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2204.529210][ T5536] syzkaller0: entered promiscuous mode [ 2204.544486][ T5536] syzkaller0: entered allmulticast mode [ 2204.594778][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 2204.624348][ T9] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2204.651235][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.728607][ T9] usb 3-1: Product: syz [ 2204.732812][ T9] usb 3-1: Manufacturer: syz [ 2204.744836][ T9] usb 3-1: SerialNumber: syz [ 2204.775865][ T9] usb 3-1: config 0 descriptor?? [ 2204.795635][ T5536] tipc: Resetting bearer [ 2204.797547][ T9] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2204.822049][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 2204.858347][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2204.867732][ T1848] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2204.899837][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2204.913589][ T9] usb 3-1: media controller created [ 2205.017683][ T5535] tipc: Resetting bearer [ 2205.034134][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2205.057773][ T1848] usb 1-1: Using ep0 maxpacket: 16 [ 2205.067370][ T1848] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 2205.087947][ T1848] usb 1-1: config 0 has no interface number 0 [ 2205.094080][ T1848] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2205.112232][ T9] usb 3-1: selecting invalid altsetting 7 [ 2205.135070][ T9] cxusb: set interface failed [ 2205.139810][ T1848] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2205.150197][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2205.163869][ T1848] usb 1-1: config 0 interface 41 has no altsetting 0 [ 2205.175086][ T5558] dvb-usb: bulk message failed: -22 (3/0) [ 2205.192973][ T1848] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 2205.202502][ T1848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2205.214707][ T1848] usb 1-1: Product: syz [ 2205.234490][ T1848] usb 1-1: Manufacturer: syz [ 2205.239174][ T1848] usb 1-1: SerialNumber: syz [ 2205.272906][ T1848] usb 1-1: config 0 descriptor?? [ 2205.283583][ T5544] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2205.292766][ T5560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2205.299567][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 2205.317597][ T5544] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2205.325688][ T5535] tipc: Disabling bearer [ 2205.377848][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2205.406600][ T5560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2205.457342][ T5917] tipc: Node number set to 4288371516 [ 2205.490761][ T5558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2205.503861][ T5558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2205.525006][ T9] rc_core: IR keymap rc-dvico-portable not found [ 2205.531384][ T9] Registered IR keymap rc-empty [ 2205.541064][ T9] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 2205.584067][ T9] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input151 [ 2205.591732][ T5539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2205.604914][ T5539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2205.626035][ T5539] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2205.633464][ T5539] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2205.659838][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 2205.782268][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2205.907048][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2205.962502][ T5558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2205.984742][ T5558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2206.064974][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2206.099590][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8775'. [ 2206.108861][ T5573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8775'. [ 2206.174583][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2206.206112][ T5537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2206.220473][ T5537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2206.230629][ T1848] Error reading MAC address [ 2206.257352][ T5537] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2206.271901][ T5537] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2206.284754][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2206.394555][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2206.449708][ T5580] tipc: Enabled bearer , priority 0 [ 2206.472580][ T5580] syzkaller0: entered promiscuous mode [ 2206.484717][ T5580] syzkaller0: entered allmulticast mode [ 2206.504818][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2206.545544][ T5580] tipc: Resetting bearer [ 2206.600374][ T5579] tipc: Resetting bearer [ 2206.629529][ T5579] tipc: Disabling bearer [ 2206.634981][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2206.747287][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2206.777291][ T5594] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8780'. [ 2206.793800][ T5594] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2206.866693][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2206.931913][ T5601] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8785'. [ 2206.941619][ T5601] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2206.986469][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 2207.104701][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 2207.177949][ T5919] usb 3-1: USB disconnect, device number 54 [ 2207.205377][ T5610] netlink: 112 bytes leftover after parsing attributes in process `syz.4.8789'. [ 2207.282075][ T5919] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2207.293626][ T5614] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8790'. [ 2207.376663][ T5618] syzkaller0: entered promiscuous mode [ 2207.382867][ T5618] syzkaller0: entered allmulticast mode [ 2207.500114][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2207.500133][ T30] audit: type=1326 audit(1762836803.735:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.8793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2207.555809][ T30] audit: type=1326 audit(1762836803.765:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.8793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2207.606514][ T30] audit: type=1326 audit(1762836803.845:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.8793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2207.631463][ T5624] binfmt_misc: register: failed to install interpreter file ./file0 [ 2207.643035][ T30] audit: type=1326 audit(1762836803.845:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.8793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2207.666030][ T5917] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2207.697203][ T30] audit: type=1326 audit(1762836803.845:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.8793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2207.729851][ T30] audit: type=1326 audit(1762836803.865:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.8793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2207.743864][ T1848] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 2207.785304][ T30] audit: type=1326 audit(1762836803.865:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.8793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2207.817749][ T30] audit: type=1326 audit(1762836803.865:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.8793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2207.842253][ T1848] usb 1-1: USB disconnect, device number 52 [ 2207.848282][ T30] audit: type=1326 audit(1762836803.865:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.8793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2207.848407][ T30] audit: type=1326 audit(1762836803.865:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.8793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2207.856567][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2207.943251][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2207.968269][ T5917] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2207.984711][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2208.053150][ T5634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8795'. [ 2208.076479][ T5917] usb 4-1: config 0 descriptor?? [ 2208.150608][ T5638] tipc: Started in network mode [ 2208.157458][ T5638] tipc: Node identity 32f7aaf0909a, cluster identity 4711 [ 2208.168634][ T5638] tipc: Enabled bearer , priority 0 [ 2208.177420][ T5634] fuse: Bad value for 'fd' [ 2208.228251][ T5638] syzkaller0: entered promiscuous mode [ 2208.244081][ T5638] syzkaller0: entered allmulticast mode [ 2208.311947][ T5638] tipc: Resetting bearer [ 2208.338791][ T5635] tipc: Resetting bearer [ 2208.397018][ T5635] tipc: Disabling bearer [ 2208.509100][ T5917] steelseries 0003:1038:12B6.0039: unknown main item tag 0x0 [ 2208.526211][ T5917] steelseries 0003:1038:12B6.0039: unknown main item tag 0x0 [ 2208.564274][ T5917] steelseries 0003:1038:12B6.0039: unknown main item tag 0x0 [ 2208.588302][ T5917] steelseries 0003:1038:12B6.0039: unknown main item tag 0x0 [ 2208.603199][ T5917] steelseries 0003:1038:12B6.0039: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 2208.726762][ T5612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2208.791445][ T5652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8798'. [ 2208.903275][ T5612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2209.010646][ T5917] steelseries 0003:1038:12B6.0039: hid_hw_raw_request() failed with -71 [ 2209.121602][ T5917] usb 4-1: USB disconnect, device number 29 [ 2209.480084][ T5645] hub 9-0:1.0: USB hub found [ 2209.488086][ T5645] hub 9-0:1.0: 1 port detected [ 2209.725033][ T5659] vhci_hcd vhci_hcd.0: port 0 already used [ 2209.814664][ T1848] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2209.959756][ T5668] FAULT_INJECTION: forcing a failure. [ 2209.959756][ T5668] name failslab, interval 1, probability 0, space 0, times 0 [ 2209.982775][ T5668] CPU: 0 UID: 0 PID: 5668 Comm: syz.3.8802 Not tainted syzkaller #0 PREEMPT(full) [ 2209.982801][ T5668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2209.982812][ T5668] Call Trace: [ 2209.982820][ T5668] [ 2209.982828][ T5668] dump_stack_lvl+0x189/0x250 [ 2209.982857][ T5668] ? __pfx____ratelimit+0x10/0x10 [ 2209.982880][ T5668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2209.982903][ T5668] ? __pfx__printk+0x10/0x10 [ 2209.982928][ T5668] ? __pfx___might_resched+0x10/0x10 [ 2209.982952][ T5668] should_fail_ex+0x414/0x560 [ 2209.982983][ T5668] should_failslab+0xa8/0x100 [ 2209.983015][ T5668] __kmalloc_noprof+0xcb/0x7f0 [ 2209.983038][ T5668] ? kfree+0x4d/0x6d0 [ 2209.983056][ T5668] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2209.983089][ T5668] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2209.983117][ T5668] ? tomoyo_domain+0xd9/0x130 [ 2209.983140][ T5668] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2209.983162][ T5668] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2209.983188][ T5668] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2209.983229][ T5668] ? __lock_acquire+0xab9/0xd20 [ 2209.983264][ T5668] ? __fget_files+0x2a/0x420 [ 2209.983284][ T5668] ? __fget_files+0x3a0/0x420 [ 2209.983300][ T5668] ? __fget_files+0x2a/0x420 [ 2209.983315][ T5668] security_file_ioctl_compat+0xcb/0x2d0 [ 2209.983334][ T5668] __ia32_compat_sys_ioctl+0x128/0x840 [ 2209.983355][ T5668] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2209.983372][ T5668] ? __fget_files+0x3a0/0x420 [ 2209.983389][ T5668] ? fput+0xa0/0xd0 [ 2209.983405][ T5668] ? ksys_write+0x22a/0x250 [ 2209.983422][ T5668] ? exc_page_fault+0x82/0x100 [ 2209.983441][ T5668] ? __pfx_ksys_write+0x10/0x10 [ 2209.983460][ T5668] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2209.983480][ T5668] ? lockdep_hardirqs_on+0x9c/0x150 [ 2209.983500][ T5668] __do_fast_syscall_32+0xb6/0x2b0 [ 2209.983519][ T5668] ? lockdep_hardirqs_on+0x9c/0x150 [ 2209.983540][ T5668] do_fast_syscall_32+0x34/0x80 [ 2209.983558][ T5668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2209.983574][ T5668] RIP: 0023:0xf7fb1539 [ 2209.983586][ T5668] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2209.983598][ T5668] RSP: 002b:00000000f546455c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2209.983613][ T5668] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c028aa03 [ 2209.983623][ T5668] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2209.983632][ T5668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2209.983640][ T5668] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2209.983649][ T5668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2209.983670][ T5668] [ 2209.983682][ T5668] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2210.260549][ T1848] usb 5-1: device descriptor read/64, error -71 [ 2210.394569][ T9] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 2210.504543][ T1848] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2210.538883][ T5672] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8804'. [ 2210.553906][ T5672] FAULT_INJECTION: forcing a failure. [ 2210.553906][ T5672] name failslab, interval 1, probability 0, space 0, times 0 [ 2210.576410][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2210.586616][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 2210.602452][ T5672] CPU: 1 UID: 0 PID: 5672 Comm: syz.2.8804 Not tainted syzkaller #0 PREEMPT(full) [ 2210.602477][ T5672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2210.602487][ T5672] Call Trace: [ 2210.602494][ T5672] [ 2210.602501][ T5672] dump_stack_lvl+0x189/0x250 [ 2210.602529][ T5672] ? __pfx____ratelimit+0x10/0x10 [ 2210.602551][ T5672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2210.602571][ T5672] ? __pfx__printk+0x10/0x10 [ 2210.602593][ T5672] ? __pfx___might_resched+0x10/0x10 [ 2210.602617][ T5672] should_fail_ex+0x414/0x560 [ 2210.602648][ T5672] should_failslab+0xa8/0x100 [ 2210.602669][ T5672] __kmalloc_noprof+0xcb/0x7f0 [ 2210.602690][ T5672] ? kfree+0x4d/0x6d0 [ 2210.602709][ T5672] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2210.602753][ T5672] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2210.602781][ T5672] ? tomoyo_domain+0xd9/0x130 [ 2210.602803][ T5672] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2210.602826][ T5672] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2210.602851][ T5672] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2210.602891][ T5672] ? __lock_acquire+0xab9/0xd20 [ 2210.602931][ T5672] ? __fget_files+0x2a/0x420 [ 2210.602961][ T5672] ? __fget_files+0x3a0/0x420 [ 2210.602977][ T5672] ? __fget_files+0x2a/0x420 [ 2210.602999][ T5672] security_file_ioctl_compat+0xcb/0x2d0 [ 2210.603023][ T5672] __ia32_compat_sys_ioctl+0x128/0x840 [ 2210.603050][ T5672] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2210.603073][ T5672] ? __fget_files+0x3a0/0x420 [ 2210.603095][ T5672] ? fput+0xa0/0xd0 [ 2210.603115][ T5672] ? ksys_write+0x22a/0x250 [ 2210.603137][ T5672] ? exc_page_fault+0x82/0x100 [ 2210.603161][ T5672] ? __pfx_ksys_write+0x10/0x10 [ 2210.603188][ T5672] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2210.603214][ T5672] ? lockdep_hardirqs_on+0x9c/0x150 [ 2210.603241][ T5672] __do_fast_syscall_32+0xb6/0x2b0 [ 2210.603267][ T5672] ? lockdep_hardirqs_on+0x9c/0x150 [ 2210.603294][ T5672] do_fast_syscall_32+0x34/0x80 [ 2210.603322][ T5672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2210.603343][ T5672] RIP: 0023:0xf708d539 [ 2210.603360][ T5672] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2210.603375][ T5672] RSP: 002b:00000000f543b55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2210.603395][ T5672] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000c0505350 [ 2210.603408][ T5672] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 2210.603419][ T5672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2210.603430][ T5672] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2210.603441][ T5672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2210.603470][ T5672] [ 2210.603650][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.610812][ T5672] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2210.896871][ T5674] loop4: detected capacity change from 0 to 7 [ 2210.925380][ T1848] usb 5-1: device descriptor read/64, error -71 [ 2210.933207][ T9] usb 1-1: config 0 descriptor?? [ 2210.942104][ T725] Dev loop4: unable to read RDB block 7 [ 2210.951334][ T725] loop4: unable to read partition table [ 2210.957301][ T725] loop4: partition table beyond EOD, truncated [ 2210.976792][ T5674] Dev loop4: unable to read RDB block 7 [ 2210.985357][ T5674] loop4: unable to read partition table [ 2210.998909][ T5674] loop4: partition table beyond EOD, truncated [ 2211.014556][ T5674] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2211.044917][ T1848] usb usb5-port1: attempt power cycle [ 2211.426158][ T9] wacom 0003:056A:0317.003A: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 2211.435695][ T1848] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2211.449974][ T5681] tipc: Enabled bearer , priority 0 [ 2211.458140][ T5681] syzkaller0: entered promiscuous mode [ 2211.458859][ T9] wacom 0003:056A:0317.003A: hidraw0: USB HID v0.01 Device [HID 056a:0317] on usb-dummy_hcd.0-1/input0 [ 2211.492846][ T5681] syzkaller0: entered allmulticast mode [ 2211.523801][ T1848] usb 5-1: device descriptor read/8, error -71 [ 2211.542949][ T5681] tipc: Resetting bearer [ 2211.576457][ T5680] tipc: Resetting bearer [ 2211.708446][ T5680] tipc: Disabling bearer [ 2211.744680][ T9] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0317.003A/input/input152 [ 2211.844597][ T5836] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2211.883266][ T5917] usb 1-1: USB disconnect, device number 53 [ 2211.894619][ T1848] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2211.925980][ T1848] usb 5-1: device descriptor read/8, error -71 [ 2212.024602][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 2212.035218][ T1848] usb usb5-port1: unable to enumerate USB device [ 2212.058466][ T5836] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 2212.066788][ T5836] usb 2-1: config 0 has no interface number 0 [ 2212.072879][ T5836] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2212.085813][ T5836] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2212.098525][ T5836] usb 2-1: config 0 interface 41 has no altsetting 0 [ 2212.105718][ T5691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8809'. [ 2212.117839][ T5836] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 2212.140950][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2212.174501][ T5836] usb 2-1: Product: syz [ 2212.194878][ T5836] usb 2-1: Manufacturer: syz [ 2212.199523][ T5836] usb 2-1: SerialNumber: syz [ 2212.236054][ T5836] usb 2-1: config 0 descriptor?? [ 2212.280135][ T5691] hub 9-0:1.0: USB hub found [ 2212.285204][ T5691] hub 9-0:1.0: 1 port detected [ 2212.295698][ T5684] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2212.311016][ T5684] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2212.673954][ T5684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2212.723063][ T5684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2212.742772][ T5684] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2212.803343][ T5704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8810'. [ 2212.823191][ T5684] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2212.944523][ T5704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8810'. [ 2213.283580][ T5684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2213.317728][ T5684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2213.411071][ T5836] Error reading MAC address [ 2213.427422][ T5684] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2213.440510][ T5684] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2213.950252][ T5723] FAULT_INJECTION: forcing a failure. [ 2213.950252][ T5723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2213.986076][ T5724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8815'. [ 2214.064675][ T5723] CPU: 1 UID: 0 PID: 5723 Comm: syz.3.8816 Not tainted syzkaller #0 PREEMPT(full) [ 2214.064696][ T5723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2214.064703][ T5723] Call Trace: [ 2214.064708][ T5723] [ 2214.064713][ T5723] dump_stack_lvl+0x189/0x250 [ 2214.064731][ T5723] ? __pfx____ratelimit+0x10/0x10 [ 2214.064745][ T5723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2214.064757][ T5723] ? __pfx__printk+0x10/0x10 [ 2214.064767][ T5723] ? __might_fault+0xb0/0x130 [ 2214.064787][ T5723] should_fail_ex+0x414/0x560 [ 2214.064804][ T5723] _copy_from_user+0x2d/0xb0 [ 2214.064817][ T5723] get_compat_msghdr+0xad/0x4a0 [ 2214.064832][ T5723] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2214.064848][ T5723] ___sys_sendmsg+0x193/0x2a0 [ 2214.064861][ T5723] ? __pfx____sys_sendmsg+0x10/0x10 [ 2214.064872][ T5723] ? __lock_acquire+0xab9/0xd20 [ 2214.064897][ T5723] ? __fget_files+0x2a/0x420 [ 2214.064907][ T5723] ? __fget_files+0x3a0/0x420 [ 2214.064921][ T5723] __sys_sendmmsg+0x28e/0x430 [ 2214.064934][ T5723] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2214.064943][ T5723] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2214.064969][ T5723] ? ksys_write+0x22a/0x250 [ 2214.064982][ T5723] ? exc_page_fault+0x82/0x100 [ 2214.064995][ T5723] ? __pfx_ksys_write+0x10/0x10 [ 2214.065011][ T5723] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2214.065023][ T5723] __do_fast_syscall_32+0xb6/0x2b0 [ 2214.065044][ T5723] ? lockdep_hardirqs_on+0x9c/0x150 [ 2214.065068][ T5723] do_fast_syscall_32+0x34/0x80 [ 2214.065092][ T5723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2214.065112][ T5723] RIP: 0023:0xf7fb1539 [ 2214.065127][ T5723] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2214.065141][ T5723] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2214.065154][ T5723] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0 [ 2214.065161][ T5723] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000000 [ 2214.065167][ T5723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2214.065173][ T5723] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2214.065178][ T5723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2214.065194][ T5723] [ 2214.450895][ T5720] hub 9-0:1.0: USB hub found [ 2214.456074][ T5720] hub 9-0:1.0: 1 port detected [ 2214.808779][ T5836] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 2214.817445][ T5730] block device autoloading is deprecated and will be removed. [ 2214.852147][ T5836] usb 2-1: USB disconnect, device number 39 [ 2214.883252][ T5730] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 2214.890121][ T5730] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2214.905440][ T5730] vhci_hcd vhci_hcd.0: Device attached [ 2215.144579][ T9] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 2215.423153][ T5733] vhci_hcd: connection reset by peer [ 2215.431171][T14033] vhci_hcd: stop threads [ 2215.435778][T14033] vhci_hcd: release socket [ 2215.445669][T14033] vhci_hcd: disconnect device [ 2215.452893][ T5744] FAULT_INJECTION: forcing a failure. [ 2215.452893][ T5744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2215.563986][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8823'. [ 2215.573476][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8823'. [ 2215.638702][ T5744] CPU: 0 UID: 0 PID: 5744 Comm: syz.1.8821 Not tainted syzkaller #0 PREEMPT(full) [ 2215.638726][ T5744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2215.638737][ T5744] Call Trace: [ 2215.638745][ T5744] [ 2215.638753][ T5744] dump_stack_lvl+0x189/0x250 [ 2215.638780][ T5744] ? __pfx____ratelimit+0x10/0x10 [ 2215.638803][ T5744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2215.638825][ T5744] ? __pfx__printk+0x10/0x10 [ 2215.638844][ T5744] ? __might_fault+0xb0/0x130 [ 2215.638878][ T5744] should_fail_ex+0x414/0x560 [ 2215.638908][ T5744] _copy_from_user+0x2d/0xb0 [ 2215.638932][ T5744] get_compat_msghdr+0xad/0x4a0 [ 2215.638957][ T5744] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2215.638988][ T5744] ___sys_sendmsg+0x193/0x2a0 [ 2215.639010][ T5744] ? __pfx____sys_sendmsg+0x10/0x10 [ 2215.639062][ T5744] ? __fget_files+0x2a/0x420 [ 2215.639079][ T5744] ? __fget_files+0x3a0/0x420 [ 2215.639106][ T5744] __sys_sendmsg+0x164/0x220 [ 2215.639127][ T5744] ? __pfx___sys_sendmsg+0x10/0x10 [ 2215.639154][ T5744] ? __pfx_ksys_write+0x10/0x10 [ 2215.639180][ T5744] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2215.639206][ T5744] ? lockdep_hardirqs_on+0x9c/0x150 [ 2215.639232][ T5744] __do_fast_syscall_32+0xb6/0x2b0 [ 2215.639265][ T5744] ? lockdep_hardirqs_on+0x9c/0x150 [ 2215.639291][ T5744] do_fast_syscall_32+0x34/0x80 [ 2215.639315][ T5744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2215.639336][ T5744] RIP: 0023:0xf707d539 [ 2215.639351][ T5744] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2215.639366][ T5744] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2215.639386][ T5744] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000680 [ 2215.639399][ T5744] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2215.639410][ T5744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2215.639420][ T5744] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2215.639431][ T5744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2215.639459][ T5744] [ 2215.854940][ C0] vkms_vblank_simulate: vblank timer overrun [ 2216.131846][ T5759] loop4: detected capacity change from 0 to 7 [ 2216.168516][ T725] Dev loop4: unable to read RDB block 7 [ 2216.174088][ T725] loop4: unable to read partition table [ 2216.180325][ T725] loop4: partition table beyond EOD, truncated [ 2216.225735][ T5759] Dev loop4: unable to read RDB block 7 [ 2216.231556][ T5759] loop4: unable to read partition table [ 2216.240735][ T5759] loop4: partition table beyond EOD, truncated [ 2216.247376][ T5759] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2216.345025][ T5917] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2216.404602][T28788] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 2216.443966][ T5765] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.8827'. [ 2216.536193][ T5917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2216.546139][ T5917] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2216.566504][T28788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2216.580248][T28788] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2216.597652][ T5917] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2216.621165][T28788] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 2216.644975][ T5917] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2216.660884][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.687082][ T5917] usb 5-1: Product: syz [ 2216.697259][ T5917] usb 5-1: Manufacturer: syz [ 2216.710415][ T5917] usb 5-1: SerialNumber: syz [ 2216.734154][ T5917] hub 5-1:1.0: bad descriptor, ignoring hub [ 2216.741497][T28788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2216.753937][T28788] usb 4-1: SerialNumber: syz [ 2216.785665][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2216.785677][ T30] audit: type=1326 audit(1762836813.015:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2216.813854][ C0] vkms_vblank_simulate: vblank timer overrun [ 2216.826887][ T5769] binfmt_misc: register: failed to install interpreter file ./file0 [ 2216.847294][ T5917] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2216.957554][ T30] audit: type=1326 audit(1762836813.015:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2216.979544][ C0] vkms_vblank_simulate: vblank timer overrun [ 2217.020759][ T5917] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2217.028561][ T30] audit: type=1326 audit(1762836813.015:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2217.097957][ T30] audit: type=1326 audit(1762836813.015:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2217.163417][ T30] audit: type=1326 audit(1762836813.015:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2217.242278][ T30] audit: type=1326 audit(1762836813.015:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2217.303979][ T30] audit: type=1326 audit(1762836813.015:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2217.326005][ C0] vkms_vblank_simulate: vblank timer overrun [ 2217.371403][ T5777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8831'. [ 2217.423738][ T30] audit: type=1326 audit(1762836813.015:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2217.445771][ C0] vkms_vblank_simulate: vblank timer overrun [ 2217.455803][ T1848] usb 5-1: USB disconnect, device number 66 [ 2217.508147][ T1848] usblp0: removed [ 2217.536327][ T30] audit: type=1326 audit(1762836813.025:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2217.624868][ T30] audit: type=1326 audit(1762836813.245:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.1.8828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2217.646840][ C0] vkms_vblank_simulate: vblank timer overrun [ 2217.668769][ T5776] hub 9-0:1.0: USB hub found [ 2217.682847][ T5776] hub 9-0:1.0: 1 port detected [ 2218.306075][ T5779] binder: 5778:5779 ioctl c0306201 80000680 returned -14 [ 2218.492470][ T5781] tipc: Enabled bearer , priority 0 [ 2218.502775][ T5781] syzkaller0: entered promiscuous mode [ 2218.509431][ T5781] syzkaller0: entered allmulticast mode [ 2218.596805][ T5781] tipc: Resetting bearer [ 2218.608329][ T5780] tipc: Resetting bearer [ 2218.636647][ T5784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8835'. [ 2218.680234][ T5780] tipc: Disabling bearer [ 2218.681713][ T5784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8835'. [ 2218.700699][ T5919] usb 4-1: USB disconnect, device number 30 [ 2218.844376][ T5794] FAULT_INJECTION: forcing a failure. [ 2218.844376][ T5794] name failslab, interval 1, probability 0, space 0, times 0 [ 2218.868486][ T5794] CPU: 1 UID: 0 PID: 5794 Comm: syz.2.8837 Not tainted syzkaller #0 PREEMPT(full) [ 2218.868509][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2218.868520][ T5794] Call Trace: [ 2218.868528][ T5794] [ 2218.868536][ T5794] dump_stack_lvl+0x189/0x250 [ 2218.868563][ T5794] ? __pfx____ratelimit+0x10/0x10 [ 2218.868587][ T5794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2218.868609][ T5794] ? __pfx__printk+0x10/0x10 [ 2218.868633][ T5794] ? __pfx___might_resched+0x10/0x10 [ 2218.868652][ T5794] ? fs_reclaim_acquire+0x7d/0x100 [ 2218.868675][ T5794] should_fail_ex+0x414/0x560 [ 2218.868705][ T5794] should_failslab+0xa8/0x100 [ 2218.868725][ T5794] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2218.868748][ T5794] ? __alloc_skb+0x112/0x2d0 [ 2218.868764][ T5794] ? netlink_autobind+0xdb/0x300 [ 2218.868787][ T5794] __alloc_skb+0x112/0x2d0 [ 2218.868808][ T5794] netlink_sendmsg+0x5c6/0xb30 [ 2218.868835][ T5794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2218.868855][ T5794] ? __import_iovec+0x5d4/0x7f0 [ 2218.868874][ T5794] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2218.868900][ T5794] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2218.868917][ T5794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2218.868936][ T5794] __sock_sendmsg+0x21c/0x270 [ 2218.868961][ T5794] ____sys_sendmsg+0x505/0x830 [ 2218.868986][ T5794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2218.869019][ T5794] ___sys_sendmsg+0x21f/0x2a0 [ 2218.869041][ T5794] ? __pfx____sys_sendmsg+0x10/0x10 [ 2218.869094][ T5794] ? __fget_files+0x2a/0x420 [ 2218.869111][ T5794] ? __fget_files+0x3a0/0x420 [ 2218.869137][ T5794] __sys_sendmsg+0x164/0x220 [ 2218.869158][ T5794] ? __pfx___sys_sendmsg+0x10/0x10 [ 2218.869186][ T5794] ? __pfx_ksys_write+0x10/0x10 [ 2218.869212][ T5794] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2218.869238][ T5794] ? lockdep_hardirqs_on+0x9c/0x150 [ 2218.869271][ T5794] __do_fast_syscall_32+0xb6/0x2b0 [ 2218.869297][ T5794] ? lockdep_hardirqs_on+0x9c/0x150 [ 2218.869324][ T5794] do_fast_syscall_32+0x34/0x80 [ 2218.869348][ T5794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2218.869369][ T5794] RIP: 0023:0xf708d539 [ 2218.869385][ T5794] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2218.869401][ T5794] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2218.869420][ T5794] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 2218.869433][ T5794] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2218.869444][ T5794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2218.869454][ T5794] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2218.869464][ T5794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2218.869489][ T5794] [ 2219.335361][ T5800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8839'. [ 2219.535093][ T5800] hub 9-0:1.0: USB hub found [ 2219.574399][ T5800] hub 9-0:1.0: 1 port detected [ 2219.684629][ T5919] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2219.864539][ T1848] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2219.872297][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 2219.973942][ T5919] usb 3-1: config 1 has an invalid interface number: 233 but max is 0 [ 2219.994206][ T5919] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2220.010793][ T5919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2220.021244][ T5919] usb 3-1: config 1 has no interface number 0 [ 2220.027414][ T1848] usb 4-1: Using ep0 maxpacket: 16 [ 2220.034539][ T1848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2220.057631][ T5919] usb 3-1: config 1 interface 233 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2220.087408][ T1848] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2220.098261][ T5919] usb 3-1: config 1 interface 233 has no altsetting 0 [ 2220.118223][ T1848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.166695][ T5919] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 2220.200576][ T1848] usb 4-1: Product: syz [ 2220.214659][ T1848] usb 4-1: Manufacturer: syz [ 2220.219401][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.229234][ T1848] usb 4-1: SerialNumber: syz [ 2220.244496][ T5919] usb 3-1: Product: syz [ 2220.264609][ T9] vhci_hcd: vhci_device speed not set [ 2220.270925][ T1848] usb 4-1: config 0 descriptor?? [ 2220.287219][ T5919] usb 3-1: Manufacturer: syz [ 2220.307008][ T5919] usb 3-1: SerialNumber: syz [ 2220.313631][ T1848] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2220.374795][ T1848] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 2220.489459][ T5818] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 2220.507050][ T5818] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 2220.986367][ T1848] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2221.399323][ T1848] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2221.432488][ T1848] em28xx 4-1:0.0: board has no eeprom [ 2221.446948][ T5828] loop4: detected capacity change from 0 to 7 [ 2221.456720][ T5828] Dev loop4: unable to read RDB block 7 [ 2221.462965][ T5828] loop4: unable to read partition table [ 2221.469358][ T5828] loop4: partition table beyond EOD, truncated [ 2221.490369][ T5828] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2221.799766][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.807249][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.874378][ T1848] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2221.895223][ T1848] em28xx 4-1:0.0: dvb set to bulk mode. [ 2221.910771][ T9] em28xx 4-1:0.0: Binding DVB extension [ 2222.017067][ T5917] usb 4-1: USB disconnect, device number 31 [ 2222.017085][ T5807] em28xx 4-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 2222.024558][ T5917] em28xx 4-1:0.0: Disconnecting em28xx [ 2222.118698][ T5834] binder: 5830:5834 ioctl c0306201 0 returned -14 [ 2222.171986][ T9] em28xx 4-1:0.0: Registering input extension [ 2222.181443][ T5917] em28xx 4-1:0.0: Closing input extension [ 2222.227448][ T5843] tipc: Enabled bearer , priority 0 [ 2222.236058][ T5843] syzkaller0: entered promiscuous mode [ 2222.241868][ T5843] syzkaller0: entered allmulticast mode [ 2222.252149][ T5917] em28xx 4-1:0.0: Freeing device [ 2222.334623][ T2675] usb 5-1: new low-speed USB device number 67 using dummy_hcd [ 2222.343834][ T5843] tipc: Resetting bearer [ 2222.353922][ T5842] tipc: Resetting bearer [ 2222.487981][ T2675] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2222.496243][ T5842] tipc: Disabling bearer [ 2222.532467][ T2675] usb 5-1: config 9 has an invalid interface number: 198 but max is 0 [ 2222.546007][ T2675] usb 5-1: config 9 has no interface number 0 [ 2222.555306][ T2675] usb 5-1: config 9 interface 198 has no altsetting 0 [ 2222.566229][ T2675] usb 5-1: string descriptor 0 read error: -22 [ 2222.572658][ T2675] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 2222.582327][ T2675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.600503][ T2675] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 2222.610739][ T2675] dvb-usb: bulk message failed: -22 (3/0) [ 2222.639173][ T2675] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2222.660106][ T2675] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 2222.680371][ T2675] usb 5-1: media controller created [ 2222.792351][ T2675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2222.887813][ T5919] imon_raw 3-1:1.233: IR endpoint missing [ 2222.952640][ T5850] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.8852'. [ 2222.962463][ T2675] DVB: Unable to find symbol mt352_attach() [ 2222.968623][ T2675] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 2222.987517][ T2675] dvb-usb: bulk message failed: -22 (3/0) [ 2222.994324][ T5919] usb 3-1: USB disconnect, device number 55 [ 2223.015067][ T2675] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 2223.088771][ T9] usb 5-1: USB disconnect, device number 67 [ 2223.138039][ T5851] loop4: detected capacity change from 0 to 7 [ 2223.159820][ T9] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 2223.195678][ T5851] Dev loop4: unable to read RDB block 7 [ 2223.201593][ T5851] loop4: unable to read partition table [ 2223.207908][ T5851] loop4: partition table beyond EOD, truncated [ 2223.214718][ T1848] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2223.225443][ T5851] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2223.414790][ T1848] usb 2-1: Using ep0 maxpacket: 32 [ 2223.424460][ T1848] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2223.442708][ T1848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.460029][ T5866] binder: BINDER_SET_CONTEXT_MGR already set [ 2223.466245][ T5866] binder: 5859:5866 ioctl 4018620d 80000100 returned -16 [ 2223.474571][ T5866] binder: 5859:5866 ioctl c0306201 0 returned -14 [ 2223.496348][ T1848] usb 2-1: Product: syz [ 2223.500543][ T1848] usb 2-1: Manufacturer: syz [ 2223.505267][ T1848] usb 2-1: SerialNumber: syz [ 2223.529545][ T1848] usb 2-1: config 0 descriptor?? [ 2223.579824][ T1848] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2223.598477][ T1848] dvb-usb: bulk message failed: -22 (2/0) [ 2223.607269][ T1848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2223.690684][ T1848] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2223.708373][ T1848] usb 2-1: media controller created [ 2223.731786][ T1848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2223.816919][ T1848] usb 2-1: selecting invalid altsetting 7 [ 2223.825567][ T1848] cxusb: set interface failed [ 2223.835468][ T1848] dvb-usb: bulk message failed: -22 (1/0) [ 2223.929194][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 2223.937850][ T1848] DVB: Unable to find symbol lgdt330x_attach() [ 2223.950858][ T5878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2223.967784][ T5878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2223.980964][ T5878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2223.994917][ T1848] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2224.008401][ T5878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2224.074490][ T5919] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 2224.191280][ T1848] rc_core: IR keymap rc-dvico-portable not found [ 2224.204143][ T1848] Registered IR keymap rc-empty [ 2224.240216][ T1848] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 2224.270400][ T1848] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input156 [ 2224.284828][ T1848] dvb-usb: schedule remote query interval to 100 msecs. [ 2224.294393][ T1848] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2224.355448][ T5919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2224.379924][ T5919] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2224.394608][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2224.480051][ T5919] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 2224.504524][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2224.518953][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2224.539178][ T5919] usb 1-1: SerialNumber: syz [ 2224.624784][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 2224.667251][ T5878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2224.744664][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 2224.801376][ T5878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2224.854547][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2224.964555][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2225.032446][ T5883] IPVS: set_ctl: invalid protocol: 1463 0.0.0.0:30992 [ 2225.084630][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 2225.194592][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 2225.304528][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 2225.379131][ T5891] tipc: Enabled bearer , priority 0 [ 2225.386892][ T5891] syzkaller0: entered promiscuous mode [ 2225.392364][ T5891] syzkaller0: entered allmulticast mode [ 2225.424780][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 2225.447515][ T5891] tipc: Resetting bearer [ 2225.456387][ T5890] tipc: Resetting bearer [ 2225.498217][ T5890] tipc: Disabling bearer [ 2225.548273][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 2225.643646][ T5900] netlink: 'syz.3.8860': attribute type 5 has an invalid length. [ 2225.674787][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 2225.784900][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 2225.864675][ T5836] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2225.904655][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2225.984717][ T2675] usb 2-1: USB disconnect, device number 40 [ 2226.028399][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 2226.076281][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2226.100724][ T5836] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2226.110168][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.118372][ T5836] usb 5-1: Product: syz [ 2226.122608][ T5836] usb 5-1: Manufacturer: syz [ 2226.127873][ T5836] usb 5-1: SerialNumber: syz [ 2226.156627][ T2675] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2226.167353][ T5836] usb 5-1: config 0 descriptor?? [ 2226.186196][ T5836] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2226.206645][ T5836] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 2226.802621][ T5836] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2226.853964][ T2675] usb 1-1: USB disconnect, device number 54 [ 2227.063772][T28633] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.196828][T28633] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.226036][ T5836] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2227.234232][ T5836] em28xx 5-1:0.0: board has no eeprom [ 2227.278662][T28633] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.364782][ T5919] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2227.406897][T28633] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.473397][ T5916] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 2227.548172][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 2227.565453][ T5919] usb 2-1: config 1 has an invalid interface number: 233 but max is 0 [ 2227.595595][ T5919] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2227.604309][ T5919] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2227.604619][ T5836] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2227.642343][ T5836] em28xx 5-1:0.0: dvb set to bulk mode. [ 2227.658417][T28299] em28xx 5-1:0.0: Binding DVB extension [ 2227.687377][ T5919] usb 2-1: config 1 has no interface number 0 [ 2227.701385][ T5919] usb 2-1: config 1 interface 233 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2227.733585][ T5919] usb 2-1: config 1 interface 233 has no altsetting 0 [ 2227.750194][ T5919] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 2227.768311][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2227.831458][ T5919] usb 2-1: Product: syz [ 2227.849765][ T5919] usb 2-1: Manufacturer: syz [ 2227.858146][ T5919] usb 2-1: SerialNumber: syz [ 2227.899817][T28633] bridge_slave_1: left allmulticast mode [ 2227.915351][T28633] bridge_slave_1: left promiscuous mode [ 2227.926626][T28633] bridge0: port 2(bridge_slave_1) entered disabled state [ 2227.947519][T28633] bridge_slave_0: left allmulticast mode [ 2227.953507][T28633] bridge0: port 1(bridge_slave_0) entered disabled state [ 2228.101502][T29302] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2228.112368][T29302] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2228.122945][T29302] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2228.132603][T29302] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2228.140814][T29302] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2228.254150][T28633] ip6gretap0 (unregistering): left allmulticast mode [ 2228.596457][ T5899] em28xx 5-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 2228.607696][T28633] dvmrp0 (unregistering): left allmulticast mode [ 2228.690736][ T1847] usb 5-1: USB disconnect, device number 68 [ 2228.718548][ T1847] em28xx 5-1:0.0: Disconnecting em28xx [ 2228.733642][T28633] bridge0 (unregistering): left allmulticast mode [ 2228.766496][T28299] em28xx 5-1:0.0: Registering input extension [ 2228.791382][ T1847] em28xx 5-1:0.0: Closing input extension [ 2228.803956][ T5919] imon_raw 2-1:1.233: IR endpoint missing [ 2228.878238][ T1847] em28xx 5-1:0.0: Freeing device [ 2228.885548][ T5919] usb 2-1: USB disconnect, device number 41 [ 2229.033348][ T5936] FAULT_INJECTION: forcing a failure. [ 2229.033348][ T5936] name failslab, interval 1, probability 0, space 0, times 0 [ 2229.049298][ T5936] CPU: 0 UID: 0 PID: 5936 Comm: syz.1.8870 Not tainted syzkaller #0 PREEMPT(full) [ 2229.049323][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2229.049334][ T5936] Call Trace: [ 2229.049342][ T5936] [ 2229.049351][ T5936] dump_stack_lvl+0x189/0x250 [ 2229.049378][ T5936] ? __pfx____ratelimit+0x10/0x10 [ 2229.049401][ T5936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2229.049424][ T5936] ? __pfx__printk+0x10/0x10 [ 2229.049447][ T5936] ? __lock_acquire+0xab9/0xd20 [ 2229.049471][ T5936] should_fail_ex+0x414/0x560 [ 2229.049501][ T5936] should_failslab+0xa8/0x100 [ 2229.049520][ T5936] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2229.049544][ T5936] ? skb_clone+0x212/0x3a0 [ 2229.049569][ T5936] skb_clone+0x212/0x3a0 [ 2229.049591][ T5936] __netlink_deliver_tap+0x404/0x850 [ 2229.049622][ T5936] ? netlink_deliver_tap+0x2e/0x1b0 [ 2229.049640][ T5936] netlink_deliver_tap+0x19c/0x1b0 [ 2229.049659][ T5936] netlink_unicast+0x7fa/0x9e0 [ 2229.049692][ T5936] ? __pfx_netlink_unicast+0x10/0x10 [ 2229.049717][ T5936] ? netlink_sendmsg+0x642/0xb30 [ 2229.049732][ T5936] ? skb_put+0x11b/0x210 [ 2229.049753][ T5936] netlink_sendmsg+0x805/0xb30 [ 2229.049780][ T5936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2229.049800][ T5936] ? __import_iovec+0x5d4/0x7f0 [ 2229.049819][ T5936] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2229.049845][ T5936] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2229.049862][ T5936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2229.049880][ T5936] __sock_sendmsg+0x21c/0x270 [ 2229.049905][ T5936] ____sys_sendmsg+0x505/0x830 [ 2229.049930][ T5936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2229.049966][ T5936] ___sys_sendmsg+0x21f/0x2a0 [ 2229.049987][ T5936] ? __pfx____sys_sendmsg+0x10/0x10 [ 2229.050041][ T5936] ? __fget_files+0x2a/0x420 [ 2229.050057][ T5936] ? __fget_files+0x3a0/0x420 [ 2229.050085][ T5936] __sys_sendmsg+0x164/0x220 [ 2229.050106][ T5936] ? __pfx___sys_sendmsg+0x10/0x10 [ 2229.050134][ T5936] ? __pfx_ksys_write+0x10/0x10 [ 2229.050161][ T5936] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2229.050186][ T5936] ? lockdep_hardirqs_on+0x9c/0x150 [ 2229.050219][ T5936] __do_fast_syscall_32+0xb6/0x2b0 [ 2229.050244][ T5936] ? lockdep_hardirqs_on+0x9c/0x150 [ 2229.050271][ T5936] do_fast_syscall_32+0x34/0x80 [ 2229.050295][ T5936] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2229.050315][ T5936] RIP: 0023:0xf707d539 [ 2229.050331][ T5936] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2229.050346][ T5936] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2229.050365][ T5936] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 2229.050377][ T5936] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2229.050388][ T5936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2229.050398][ T5936] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2229.050409][ T5936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2229.050438][ T5936] [ 2229.050507][ T5936] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8870'. [ 2229.552882][T28633] bond0 (unregistering): left allmulticast mode [ 2229.561410][T28633] bond_slave_0: left allmulticast mode [ 2229.567443][T28633] bond_slave_1: left allmulticast mode [ 2229.572961][T28633] bond0 (unregistering): left promiscuous mode [ 2229.580092][T28633] bond_slave_0: left promiscuous mode [ 2229.585832][T28633] bond_slave_1: left promiscuous mode [ 2229.641932][T28633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2229.654009][T28633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2229.667102][T28633] bond0 (unregistering): Released all slaves [ 2229.698958][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 2229.739419][ T5946] tipc: Enabled bearer , priority 0 [ 2229.752862][ T5947] syzkaller0: entered promiscuous mode [ 2229.760605][ T5947] syzkaller0: entered allmulticast mode [ 2229.781343][T28633] tipc: Left network mode [ 2229.945683][ T5943] tipc: Resetting bearer [ 2230.032233][ T5942] tipc: Resetting bearer [ 2230.125247][ T5942] tipc: Disabling bearer [ 2230.194676][T14419] Bluetooth: hci2: command tx timeout [ 2230.261454][ T5964] binfmt_misc: register: failed to install interpreter file ./file0 [ 2230.284551][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2230.284567][ T30] audit: type=1326 audit(1762836826.495:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.1.8874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2230.343291][ T30] audit: type=1326 audit(1762836826.495:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.1.8874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2230.384646][ T30] audit: type=1326 audit(1762836826.495:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.1.8874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2230.438143][ T30] audit: type=1326 audit(1762836826.495:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.1.8874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2230.489607][ T30] audit: type=1326 audit(1762836826.495:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.1.8874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2230.514112][ T30] audit: type=1326 audit(1762836826.495:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.1.8874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2230.559398][ T30] audit: type=1326 audit(1762836826.495:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.1.8874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2230.582442][ T30] audit: type=1326 audit(1762836826.495:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.1.8874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2230.607249][ T30] audit: type=1326 audit(1762836826.495:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.1.8874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2230.629586][ T30] audit: type=1326 audit(1762836826.505:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.1.8874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2230.780042][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 2231.197135][T28633] hsr_slave_0: left promiscuous mode [ 2231.297134][T28633] hsr_slave_1: left promiscuous mode [ 2231.315390][T28633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2231.336959][T28633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2231.389780][T28633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2231.538362][T28633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2231.796316][T28633] team0: left promiscuous mode [ 2231.801101][T28633] team_slave_0: left promiscuous mode [ 2231.807580][T28633] team_slave_1: left promiscuous mode [ 2231.954602][T28633] veth1_macvtap: left promiscuous mode [ 2231.960305][T28633] veth0_macvtap: left promiscuous mode [ 2231.983653][T28633] veth1_vlan: left promiscuous mode [ 2231.994691][T28633] veth0_vlan: left promiscuous mode [ 2232.276264][T14419] Bluetooth: hci2: command tx timeout [ 2232.407642][T28633] team0 (unregistering): Port device vlan0 removed [ 2233.012031][T28633] team0 (unregistering): Port device team_slave_1 removed [ 2233.069499][T28633] team0 (unregistering): Port device team_slave_0 removed [ 2233.887055][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 2233.894335][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 2233.907646][ T5929] bridge_slave_0: entered allmulticast mode [ 2233.919441][ T5929] bridge_slave_0: entered promiscuous mode [ 2233.938219][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 2233.949793][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 2233.981947][ T5929] bridge_slave_1: entered allmulticast mode [ 2234.002143][ T5929] bridge_slave_1: entered promiscuous mode [ 2234.091807][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2234.110864][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2234.197245][ T5929] team0: Port device team_slave_0 added [ 2234.206729][ T5929] team0: Port device team_slave_1 added [ 2234.267907][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2234.295046][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2234.352436][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2234.354749][T14419] Bluetooth: hci2: command tx timeout [ 2234.477303][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2234.484267][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2234.540500][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2234.633593][ T5929] hsr_slave_0: entered promiscuous mode [ 2234.640269][ T5929] hsr_slave_1: entered promiscuous mode [ 2234.646761][ T5929] debugfs: 'hsr0' already exists in 'hsr' [ 2234.652582][ T5929] Cannot create hsr debugfs directory [ 2234.724141][ T6037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8883'. [ 2234.792517][T28633] IPVS: stop unused estimator thread 0... [ 2235.177699][ T6034] hub 9-0:1.0: USB hub found [ 2235.182956][ T6034] hub 9-0:1.0: 1 port detected [ 2235.833151][ T5929] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2235.883757][ T5929] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2235.981215][ T5929] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2236.011099][ T5929] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2236.356532][ T6062] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 2236.366162][ T6062] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 2236.422465][ T6077] syzkaller0: entered promiscuous mode [ 2236.436429][T14419] Bluetooth: hci2: command tx timeout [ 2236.446697][ T6077] syzkaller0: entered allmulticast mode [ 2236.483855][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2236.510670][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 2236.659488][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 2236.666684][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2236.699680][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 2236.706818][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2236.757254][ T5929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2236.878683][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2236.999834][ T5929] veth0_vlan: entered promiscuous mode [ 2237.010187][ T5929] veth1_vlan: entered promiscuous mode [ 2237.126730][ T5929] veth0_macvtap: entered promiscuous mode [ 2237.136215][ T5929] veth1_macvtap: entered promiscuous mode [ 2237.160905][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2237.184121][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2237.200926][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8889'. [ 2237.285977][T14036] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2237.328075][T14036] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2237.389253][T14036] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2237.415874][T14036] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2237.610882][T14036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2237.654479][T14036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2237.698249][T14033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2237.750508][ T6101] hub 9-0:1.0: USB hub found [ 2237.772629][ T6101] hub 9-0:1.0: 1 port detected [ 2237.784927][T14033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2239.385849][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8895'. [ 2239.582866][ T6130] hub 9-0:1.0: USB hub found [ 2239.644522][ T6130] hub 9-0:1.0: 1 port detected [ 2239.747408][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8896'. [ 2239.767105][ T6133] loop4: detected capacity change from 0 to 7 [ 2239.819585][ T6133] Dev loop4: unable to read RDB block 7 [ 2239.834374][ T6133] loop4: unable to read partition table [ 2239.954786][ T6133] loop4: partition table beyond EOD, truncated [ 2240.010884][ T6133] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2240.589490][ T6151] syzkaller0: entered promiscuous mode [ 2240.632298][ T6151] syzkaller0: entered allmulticast mode [ 2240.776279][ T5919] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2240.867618][ T6154] tipc: Started in network mode [ 2240.885198][ T6154] tipc: Node identity 36aac8d44a8, cluster identity 4711 [ 2240.929119][ T6154] tipc: Enabled bearer , priority 0 [ 2240.936450][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 2240.969353][ T6155] syzkaller0: entered promiscuous mode [ 2240.969362][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2240.972036][ T5919] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2240.975282][ T6155] syzkaller0: entered allmulticast mode [ 2241.030960][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2241.124592][ T5919] usb 3-1: Product: syz [ 2241.134143][ T5919] usb 3-1: Manufacturer: syz [ 2241.135060][ T6159] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8904'. [ 2241.141241][ T5919] usb 3-1: SerialNumber: syz [ 2241.157611][ T5919] usb 3-1: config 0 descriptor?? [ 2241.165526][ T5919] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2241.177478][ T6154] tipc: Resetting bearer [ 2241.189400][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8905'. [ 2241.198808][ T5919] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 2241.209524][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 2241.216852][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 2241.243710][ T6158] fuse: Bad value for 'fd' [ 2241.249665][ T6153] tipc: Resetting bearer [ 2241.305888][ T6153] tipc: Disabling bearer [ 2241.585819][ T6172] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8909'. [ 2241.602542][ T6173] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8906'. [ 2241.690369][ T6166] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2241.697285][ T6166] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2241.760331][ T6166] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2241.769713][ T6166] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2241.789238][ T6166] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2241.809196][ T6166] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2241.981321][ T5919] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2242.164306][ T6181] : entered promiscuous mode [ 2242.432078][ T5919] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2242.520783][ T5919] em28xx 3-1:0.0: board has no eeprom [ 2242.915091][ T5919] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2242.924972][ T5919] em28xx 3-1:0.0: dvb set to bulk mode. [ 2242.930593][ T1848] em28xx 3-1:0.0: Binding DVB extension [ 2243.160027][ T6194] binder: 6187:6194 ioctl c0306201 0 returned -14 [ 2243.176723][ T6199] FAULT_INJECTION: forcing a failure. [ 2243.176723][ T6199] name failslab, interval 1, probability 0, space 0, times 0 [ 2243.198685][ T6199] CPU: 1 UID: 0 PID: 6199 Comm: syz.5.8913 Not tainted syzkaller #0 PREEMPT(full) [ 2243.198711][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2243.198723][ T6199] Call Trace: [ 2243.198731][ T6199] [ 2243.198739][ T6199] dump_stack_lvl+0x189/0x250 [ 2243.198770][ T6199] ? __pfx____ratelimit+0x10/0x10 [ 2243.198793][ T6199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2243.198814][ T6199] ? __pfx__printk+0x10/0x10 [ 2243.198834][ T6199] ? __pfx___might_resched+0x10/0x10 [ 2243.198852][ T6199] ? fs_reclaim_acquire+0x7d/0x100 [ 2243.198872][ T6199] should_fail_ex+0x414/0x560 [ 2243.198902][ T6199] should_failslab+0xa8/0x100 [ 2243.198930][ T6199] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2243.198955][ T6199] ? rtnl_newlink+0xfb/0x1c80 [ 2243.198979][ T6199] ? kasan_save_track+0x4f/0x80 [ 2243.199006][ T6199] rtnl_newlink+0xfb/0x1c80 [ 2243.199028][ T6199] ? netlink_deliver_tap+0x19c/0x1b0 [ 2243.199044][ T6199] ? netlink_unicast+0x7fa/0x9e0 [ 2243.199065][ T6199] ? netlink_sendmsg+0x805/0xb30 [ 2243.199081][ T6199] ? __sock_sendmsg+0x21c/0x270 [ 2243.199101][ T6199] ? ____sys_sendmsg+0x505/0x830 [ 2243.199118][ T6199] ? ___sys_sendmsg+0x21f/0x2a0 [ 2243.199134][ T6199] ? __sys_sendmsg+0x164/0x220 [ 2243.199150][ T6199] ? __do_fast_syscall_32+0xb6/0x2b0 [ 2243.199172][ T6199] ? do_fast_syscall_32+0x34/0x80 [ 2243.199195][ T6199] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2243.199221][ T6199] ? __pfx_rtnl_newlink+0x10/0x10 [ 2243.199269][ T6199] ? kasan_quarantine_put+0xdd/0x220 [ 2243.199292][ T6199] ? lockdep_hardirqs_on+0x9c/0x150 [ 2243.199321][ T6199] ? nlmon_xmit+0xb0/0x100 [ 2243.199340][ T6199] ? kmem_cache_free+0x19b/0x690 [ 2243.199371][ T6199] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2243.199390][ T6199] ? lockdep_hardirqs_on+0x9c/0x150 [ 2243.199412][ T6199] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2243.199431][ T6199] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2243.199454][ T6199] ? __dev_queue_xmit+0x27b/0x3b50 [ 2243.199474][ T6199] ? __dev_queue_xmit+0x27b/0x3b50 [ 2243.199492][ T6199] ? __dev_queue_xmit+0x27b/0x3b50 [ 2243.199513][ T6199] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2243.199531][ T6199] ? kasan_save_track+0x3e/0x80 [ 2243.199552][ T6199] ? __kasan_slab_alloc+0x6c/0x80 [ 2243.199580][ T6199] ? __lock_acquire+0xab9/0xd20 [ 2243.199628][ T6199] ? __pfx_rtnl_newlink+0x10/0x10 [ 2243.199651][ T6199] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2243.199680][ T6199] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2243.199703][ T6199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2243.199726][ T6199] ? ref_tracker_free+0x63a/0x7d0 [ 2243.199744][ T6199] ? __asan_memcpy+0x40/0x70 [ 2243.199765][ T6199] ? __pfx_ref_tracker_free+0x10/0x10 [ 2243.199781][ T6199] ? __skb_clone+0x63/0x7a0 [ 2243.199810][ T6199] netlink_rcv_skb+0x208/0x470 [ 2243.199829][ T6199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2243.199855][ T6199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2243.199891][ T6199] ? netlink_deliver_tap+0x2e/0x1b0 [ 2243.199920][ T6199] netlink_unicast+0x82f/0x9e0 [ 2243.199951][ T6199] ? __pfx_netlink_unicast+0x10/0x10 [ 2243.199977][ T6199] ? netlink_sendmsg+0x642/0xb30 [ 2243.199997][ T6199] ? skb_put+0x11b/0x210 [ 2243.200015][ T6199] netlink_sendmsg+0x805/0xb30 [ 2243.200041][ T6199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2243.200061][ T6199] ? __import_iovec+0x5d4/0x7f0 [ 2243.200081][ T6199] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2243.200108][ T6199] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2243.200126][ T6199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2243.200145][ T6199] __sock_sendmsg+0x21c/0x270 [ 2243.200170][ T6199] ____sys_sendmsg+0x505/0x830 [ 2243.200195][ T6199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2243.200230][ T6199] ___sys_sendmsg+0x21f/0x2a0 [ 2243.200252][ T6199] ? __pfx____sys_sendmsg+0x10/0x10 [ 2243.200306][ T6199] ? __fget_files+0x2a/0x420 [ 2243.200323][ T6199] ? __fget_files+0x3a0/0x420 [ 2243.200350][ T6199] __sys_sendmsg+0x164/0x220 [ 2243.200372][ T6199] ? __pfx___sys_sendmsg+0x10/0x10 [ 2243.200400][ T6199] ? __pfx_ksys_write+0x10/0x10 [ 2243.200427][ T6199] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2243.200452][ T6199] ? lockdep_hardirqs_on+0x9c/0x150 [ 2243.200479][ T6199] __do_fast_syscall_32+0xb6/0x2b0 [ 2243.200503][ T6199] ? lockdep_hardirqs_on+0x9c/0x150 [ 2243.200528][ T6199] do_fast_syscall_32+0x34/0x80 [ 2243.200553][ T6199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2243.200575][ T6199] RIP: 0023:0xf7fd4539 [ 2243.200591][ T6199] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2243.200606][ T6199] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2243.200627][ T6199] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 2243.200640][ T6199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2243.200651][ T6199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2243.200662][ T6199] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2243.200673][ T6199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2243.200702][ T6199] [ 2243.686693][ C1] vkms_vblank_simulate: vblank timer overrun [ 2243.806603][T14419] Bluetooth: hci0: command 0x0c1a tx timeout [ 2243.812889][T29302] Bluetooth: hci2: command 0x0c1a tx timeout [ 2243.898134][ T6149] em28xx 3-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 2244.014647][ T1847] usb 3-1: USB disconnect, device number 56 [ 2244.021450][ T1847] em28xx 3-1:0.0: Disconnecting em28xx [ 2244.075407][ T1848] em28xx 3-1:0.0: Registering input extension [ 2244.124775][ T1847] em28xx 3-1:0.0: Closing input extension [ 2244.334706][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8915'. [ 2244.382004][ T1847] em28xx 3-1:0.0: Freeing device [ 2244.504675][ T6210] hub 9-0:1.0: USB hub found [ 2244.509757][ T6210] hub 9-0:1.0: 1 port detected [ 2244.795810][ T6215] fuse: Bad value for 'fd' [ 2244.817143][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2244.817159][ T30] audit: type=1326 audit(1762836841.035:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.4.8917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2244.863288][ T6218] tipc: Enabled bearer , priority 0 [ 2244.873254][ T6218] syzkaller0: entered promiscuous mode [ 2244.879165][ T6218] syzkaller0: entered allmulticast mode [ 2244.889279][ T30] audit: type=1326 audit(1762836841.045:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.4.8917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2244.911256][ C1] vkms_vblank_simulate: vblank timer overrun [ 2244.917784][ T5917] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 2244.946175][ T30] audit: type=1326 audit(1762836841.045:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.4.8917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2244.976473][ T30] audit: type=1326 audit(1762836841.045:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.4.8917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2245.031630][ T30] audit: type=1326 audit(1762836841.095:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.4.8917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2245.056354][ T6220] tipc: Resetting bearer [ 2245.064545][ T5917] usb 2-1: device descriptor read/64, error -71 [ 2245.079626][ T6217] tipc: Resetting bearer [ 2245.102953][ T6222] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8920'. [ 2245.184985][ T6217] tipc: Disabling bearer [ 2245.197630][ T30] audit: type=1326 audit(1762836841.205:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.4.8917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2245.234677][ T30] audit: type=1326 audit(1762836841.205:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.4.8917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2245.304583][ T5917] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 2245.313822][ T30] audit: type=1326 audit(1762836841.205:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.4.8917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2245.337365][ T30] audit: type=1326 audit(1762836841.205:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.4.8917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2245.359688][ T30] audit: type=1326 audit(1762836841.205:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.4.8917" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2245.454884][ T5917] usb 2-1: device descriptor read/64, error -71 [ 2245.461516][ T6224] bond1 (unregistering): Released all slaves [ 2245.564943][ T5917] usb usb2-port1: attempt power cycle [ 2245.733715][ T6232] tipc: Enabled bearer , priority 0 [ 2245.757378][ T6232] netlink: 2 bytes leftover after parsing attributes in process `syz.5.8926'. [ 2245.774065][ T6232] tipc: Resetting bearer [ 2245.799779][ T6231] tipc: Disabling bearer [ 2245.884868][T29302] Bluetooth: hci2: command 0x0c1a tx timeout [ 2245.884893][T14419] Bluetooth: hci0: command 0x0c1a tx timeout [ 2245.904634][ T5917] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 2245.950419][ T5917] usb 2-1: device descriptor read/8, error -71 [ 2246.035294][ T6241] syzkaller0: entered promiscuous mode [ 2246.049553][ T6241] syzkaller0: entered allmulticast mode [ 2246.054547][T28299] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2246.204896][ T5917] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 2246.225381][ T5917] usb 2-1: device descriptor read/8, error -71 [ 2246.236500][T28299] usb 5-1: Using ep0 maxpacket: 16 [ 2246.238710][T28299] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 2246.238744][T28299] usb 5-1: config 0 has no interface number 0 [ 2246.238784][T28299] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2246.238808][T28299] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2246.241127][T28299] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 2246.241153][T28299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.241172][T28299] usb 5-1: Product: syz [ 2246.241191][T28299] usb 5-1: Manufacturer: syz [ 2246.241204][T28299] usb 5-1: SerialNumber: syz [ 2246.243458][T28299] usb 5-1: config 0 descriptor?? [ 2246.349774][ T5917] usb usb2-port1: unable to enumerate USB device [ 2246.524768][T28299] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 2246.546405][T28299] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 2246.599447][T28299] usb 5-1: USB disconnect, device number 69 [ 2246.915874][ T6258] bond1 (unregistering): Released all slaves [ 2247.131783][ T6263] tipc: Enabled bearer , priority 0 [ 2247.147107][ T6263] syzkaller0: entered promiscuous mode [ 2247.159677][ T6263] syzkaller0: entered allmulticast mode [ 2247.186103][ T6265] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8934'. [ 2247.191244][ T6263] tipc: Resetting bearer [ 2247.206024][ T6262] tipc: Resetting bearer [ 2247.232691][ T6262] tipc: Disabling bearer [ 2247.960344][T14419] Bluetooth: hci2: command 0x0c1a tx timeout [ 2247.966649][T14419] Bluetooth: hci0: command 0x0c1a tx timeout [ 2248.803074][ T6295] syzkaller0: entered promiscuous mode [ 2248.816345][ T6295] syzkaller0: entered allmulticast mode [ 2249.655233][ T6320] binfmt_misc: register: failed to install interpreter file ./file0 [ 2249.914580][ T1847] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2250.084590][ T1847] usb 6-1: Using ep0 maxpacket: 32 [ 2250.102431][ T1847] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2250.111670][ T1847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2250.120160][ T1847] usb 6-1: Product: syz [ 2250.124480][ T1847] usb 6-1: Manufacturer: syz [ 2250.129187][ T1847] usb 6-1: SerialNumber: syz [ 2250.167149][ T1847] usb 6-1: config 0 descriptor?? [ 2250.175634][ T1847] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2250.183420][ T1847] dvb-usb: bulk message failed: -22 (2/0) [ 2250.192597][ T1847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2250.205105][ T1847] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2250.213259][ T1847] usb 6-1: media controller created [ 2250.231565][ T1847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2250.251279][T28299] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2250.254219][ T1847] usb 6-1: selecting invalid altsetting 7 [ 2250.267886][ T1847] cxusb: set interface failed [ 2250.275074][ T1847] dvb-usb: bulk message failed: -22 (1/0) [ 2250.330326][ T1847] DVB: Unable to find symbol lgdt330x_attach() [ 2250.336621][ T1847] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2250.394665][ T1847] rc_core: IR keymap rc-dvico-portable not found [ 2250.401196][ T1847] Registered IR keymap rc-empty [ 2250.408390][ T1847] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 2250.419917][ T1847] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input160 [ 2250.432269][ T1847] dvb-usb: schedule remote query interval to 100 msecs. [ 2250.434522][T28299] usb 5-1: device descriptor read/64, error -71 [ 2250.439993][ T1847] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2250.544919][ T1847] dvb-usb: bulk message failed: -22 (1/0) [ 2250.655643][ T1847] dvb-usb: bulk message failed: -22 (1/0) [ 2250.670262][ T6329] dvb-usb: bulk message failed: -22 (3/0) [ 2250.691442][ T6329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.700246][ T6329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.708369][T28299] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2250.738120][ T6329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.748018][ T6329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.769579][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 2250.860624][ T6331] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8946'. [ 2250.862128][T28299] usb 5-1: device descriptor read/64, error -71 [ 2250.893369][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 2250.962668][ T6329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.977078][ T6329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.997565][T28299] usb usb5-port1: attempt power cycle [ 2251.010879][ T1848] dvb-usb: bulk message failed: -22 (1/0) [ 2251.129666][ T1848] dvb-usb: bulk message failed: -22 (1/0) [ 2251.244597][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 2251.354612][T28299] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2251.359652][ T1848] dvb-usb: bulk message failed: -22 (1/0) [ 2251.385203][T28299] usb 5-1: device descriptor read/8, error -71 [ 2251.476018][ T1848] dvb-usb: bulk message failed: -22 (1/0) [ 2251.584498][ T1848] dvb-usb: bulk message failed: -22 (1/0) [ 2251.624599][T28299] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2251.648335][T28299] usb 5-1: device descriptor read/8, error -71 [ 2251.694902][ T1848] dvb-usb: bulk message failed: -22 (1/0) [ 2251.765058][T28299] usb usb5-port1: unable to enumerate USB device [ 2251.807705][ T1848] dvb-usb: bulk message failed: -22 (1/0) [ 2251.914585][ T1848] dvb-usb: bulk message failed: -22 (1/0) [ 2252.024802][ T1848] dvb-usb: bulk message failed: -22 (1/0) [ 2252.137850][ T1848] dvb-usb: bulk message failed: -22 (1/0) [ 2252.254898][ T1848] dvb-usb: bulk message failed: -22 (1/0) [ 2252.364834][ T1848] dvb-usb: bulk message failed: -22 (1/0) [ 2252.466787][ T6315] : entered promiscuous mode [ 2252.474754][ T1847] dvb-usb: bulk message failed: -22 (1/0) [ 2252.594790][ T1847] dvb-usb: bulk message failed: -22 (1/0) [ 2252.657697][ T1847] usb 6-1: USB disconnect, device number 2 [ 2252.740686][ T1847] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2283.236682][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.243085][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.677196][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.683536][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2403.554600][ T31] INFO: task kworker/0:2:28015 blocked for more than 143 seconds. [ 2403.562440][ T31] Not tainted syzkaller #0 [ 2403.567505][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2403.577107][ T31] task:kworker/0:2 state:D stack:21016 pid:28015 tgid:28015 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2403.589180][ T31] Workqueue: usb_hub_wq hub_event [ 2403.594203][ T31] Call Trace: [ 2403.597574][ T31] [ 2403.600512][ T31] __schedule+0x1798/0x4cc0 [ 2403.605156][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2403.610546][ T31] ? __pfx___schedule+0x10/0x10 [ 2403.615548][ T31] ? schedule+0x91/0x360 [ 2403.619812][ T31] schedule+0x165/0x360 [ 2403.623983][ T31] usb_kill_urb+0x1be/0x2d0 [ 2403.628745][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2403.633996][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2403.640491][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2403.647043][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2403.652107][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2403.657748][ T31] ? usb_alloc_urb+0x46/0x150 [ 2403.662452][ T31] usb_control_msg+0x232/0x3e0 [ 2403.667368][ T31] hub_port_init+0xbf9/0x2800 [ 2403.672083][ T31] hub_event+0x2532/0x4a20 [ 2403.676655][ T31] ? __pfx_hub_event+0x10/0x10 [ 2403.681435][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2403.688163][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2403.693392][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2403.699240][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2403.705084][ T31] process_scheduled_works+0xae1/0x17b0 [ 2403.710682][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2403.716870][ T31] worker_thread+0x8a0/0xda0 [ 2403.721484][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2403.727958][ T31] ? __kthread_parkme+0x7b/0x200 [ 2403.732923][ T31] kthread+0x711/0x8a0 [ 2403.737176][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2403.742310][ T31] ? __pfx_kthread+0x10/0x10 [ 2403.747208][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2403.752436][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2403.757781][ T31] ? __pfx_kthread+0x10/0x10 [ 2403.762400][ T31] ret_from_fork+0x4bc/0x870 [ 2403.767314][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2403.772547][ T31] ? __switch_to_asm+0x39/0x70 [ 2403.777385][ T31] ? __switch_to_asm+0x33/0x70 [ 2403.782242][ T31] ? __pfx_kthread+0x10/0x10 [ 2403.787880][ T31] ret_from_fork_asm+0x1a/0x30 [ 2403.792684][ T31] [ 2403.796971][ T31] [ 2403.796971][ T31] Showing all locks held in the system: [ 2403.804845][ T31] 1 lock held by khungtaskd/31: [ 2403.809751][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2403.819700][ T31] 2 locks held by getty/5590: [ 2403.824563][ T31] #0: ffff8880337fd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2403.834456][ T31] #1: ffffc9000363e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2403.844830][ T31] 2 locks held by kworker/u8:12/14036: [ 2403.850784][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2403.860858][ T31] #1: ffffc90002ee7ba0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2403.876377][ T31] 5 locks held by kworker/0:2/28015: [ 2403.881673][ T31] #0: ffff888021a9ed48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2403.893024][ T31] #1: ffffc9000ed2fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2403.904987][ T31] #2: ffff88814575c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2403.913908][ T31] #3: ffff88814575f518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2403.924246][ T31] #4: ffff8880284c4268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2403.934006][ T31] [ 2403.936660][ T31] ============================================= [ 2403.936660][ T31] [ 2403.945129][ T31] NMI backtrace for cpu 0 [ 2403.945144][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2403.945160][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2403.945170][ T31] Call Trace: [ 2403.945177][ T31] [ 2403.945186][ T31] dump_stack_lvl+0x189/0x250 [ 2403.945212][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2403.945233][ T31] ? __pfx__printk+0x10/0x10 [ 2403.945261][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2403.945281][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2403.945302][ T31] ? __pfx__printk+0x10/0x10 [ 2403.945320][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2403.945347][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2403.945368][ T31] watchdog+0xf60/0xfa0 [ 2403.945391][ T31] ? watchdog+0x1e2/0xfa0 [ 2403.945414][ T31] kthread+0x711/0x8a0 [ 2403.945437][ T31] ? __pfx_watchdog+0x10/0x10 [ 2403.945454][ T31] ? __pfx_kthread+0x10/0x10 [ 2403.945478][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2403.945500][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2403.945522][ T31] ? __pfx_kthread+0x10/0x10 [ 2403.945544][ T31] ret_from_fork+0x4bc/0x870 [ 2403.945566][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2403.945592][ T31] ? __switch_to_asm+0x39/0x70 [ 2403.945604][ T31] ? __switch_to_asm+0x33/0x70 [ 2403.945618][ T31] ? __pfx_kthread+0x10/0x10 [ 2403.945640][ T31] ret_from_fork_asm+0x1a/0x30 [ 2403.945670][ T31] [ 2403.945678][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2404.091802][ C1] NMI backtrace for cpu 1 [ 2404.091827][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 2404.091844][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2404.091854][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2404.091879][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 e0 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2404.091891][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 2404.091905][ C1] RAX: 61fe01a595ea0800 RBX: ffffffff81967b47 RCX: 61fe01a595ea0800 [ 2404.091917][ C1] RDX: 0000000000000001 RSI: ffffffff8d70db6e RDI: ffffffff8bbf0760 [ 2404.091929][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 2404.091940][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ce370 [ 2404.091952][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395eb58 [ 2404.091962][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 2404.091975][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2404.091985][ C1] CR2: 0000562b4f87e168 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 2404.091999][ C1] Call Trace: [ 2404.092006][ C1] [ 2404.092013][ C1] default_idle+0x13/0x20 [ 2404.092027][ C1] default_idle_call+0x73/0xb0 [ 2404.092042][ C1] do_idle+0x1e7/0x510 [ 2404.092061][ C1] ? __pfx_do_idle+0x10/0x10 [ 2404.092084][ C1] cpu_startup_entry+0x44/0x60 [ 2404.092099][ C1] start_secondary+0x101/0x110 [ 2404.092113][ C1] common_startup_64+0x13e/0x147 [ 2404.092139][ C1] [ 2406.116962][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.123287][ T1303] ieee802154 phy1 wpan1: encryption failed: -22