last executing test programs: 5m33.093636105s ago: executing program 3 (id=182): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026fcf786b4a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffffac14140c00"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 5m32.098806594s ago: executing program 3 (id=186): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0x0, 0x6}, 0x2}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000200)="4e74bd725e4c4c68382d", 0xa}, 0x1, 0x0, 0xfeffffffffffffff}, 0xee) 5m31.799786566s ago: executing program 3 (id=188): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x2000000008, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) connect$tipc(r2, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r2, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) syz_io_uring_setup(0x1644, &(0x7f0000000580)={0x0, 0xc2bd, 0x1, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0xb) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 5m28.626494862s ago: executing program 3 (id=198): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, 0x0, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902"], 0xfffffffffffffffc) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES64=r2, @ANYBLOB="f568d2429bdb47f8d7638e4440c13a130bb258e84cf9327ca0b352532ee9a9d4742c6c3b6c8ad390639957c0979790d3714fae288115a40517808ba97e790851e02f499629bcce2b1596ea2fb2017b52a98eb61fe0a36f192d9e161c7ac73b2b590026b1fde859b53282f1d38beaeba1923aa2c008fbfd251ae84f2242a96324c80aebd441c20ff8c31e6a558036130458920bcad245fa2657d5e94f8e59d1bd7ec96de84b35ccf2c1e9651ec7eec5245bbd5ae90200fe43c0035ed4d5b94801e0331ab0ba418cba7e8e", @ANYRESDEC=r5, @ANYRES8=r0, @ANYBLOB="04c2a5d3ddf9c5db197d36f878499fe44058fb"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) dup2(r6, r3) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 5m24.685476541s ago: executing program 3 (id=211): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000e00"], 0x10b8}, 0xff00) 5m23.548534905s ago: executing program 3 (id=213): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x19, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40da7}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b7398bf}, 0x8040) r1 = socket(0xa, 0x3, 0x3a) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x15, 0x2}], 0xfffffffffffffd22) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'wlan1\x00', {0x2, 0x0, @dev}}) 5m22.95105097s ago: executing program 32 (id=213): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x19, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40da7}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b7398bf}, 0x8040) r1 = socket(0xa, 0x3, 0x3a) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x15, 0x2}], 0xfffffffffffffd22) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'wlan1\x00', {0x2, 0x0, @dev}}) 7.037668153s ago: executing program 4 (id=1475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x13}}, 0xc0}}, 0x0) 6.909532514s ago: executing program 4 (id=1478): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x80000001, 0x4d, 0x0, 0x5, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x2, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000040000000304fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) 6.909277304s ago: executing program 0 (id=1479): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c27, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_gettime(r6, &(0x7f00000001c0)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0086426, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r7, 0x4008641c, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/93}) flock(r8, 0x2) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r9, &(0x7f0000001440)=""/126, 0x7e, 0x41) 6.885220972s ago: executing program 5 (id=1480): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) fsopen(0x0, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001e1fd04000000a60c6eec00be00442f"], 0xfdef) sendto(r1, &(0x7f0000000280)="9a5e9a8a3e6e3b54d8e315f3089451a3dd07658d9bb794e662d2f8607ee963d3b72058f3e1d4642c9932757fa349923c12a08b46b55bc616e3ea83ce4e01e77b966d4e96faca45dd7aeb034acc1e33ec7372ba6cb2e6c46b0e62dfbf560298fd908d0362a5fddc0497c85414ea644af2352093a05dce5190a2b6d5ddeebaeb54c6d99cbc1a0a4ec6a9bb6dd3c97536d2d904235802e17a8452e2b6561827caf45ecdfede047cf48d47a7197dfc7ae716a9aad5342f57e4363d4a902b4c7208509652fb16cbb21d31fb0f9c3249bbfc7ff8", 0xd1, 0x4000, &(0x7f0000000100)=@l2={0x1f, 0x6, @any, 0x5, 0x1}, 0x80) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5}]}}}]}, 0x44}, 0x1, 0xffffffea}, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x11) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002200), &(0x7f0000002240)=0xc) timer_create(0x0, &(0x7f0000002300)={0x0, 0x200000}, &(0x7f00000022c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000003100)=@filter={'filter\x00', 0xe, 0x4, 0x12e, [0x0, 0x200000002a80, 0x200000002e3c, 0x2000000030c8], 0x0, 0x0, &(0x7f0000002a80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x64, 0x1c, 'netdevsim0\x00', 'veth1\x00', '\x00', 'bond0\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x4, 0xfffffffffffffffc}]}, 0x1a6) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x6, 0x400, 0x1}}, 0x30) 6.835686549s ago: executing program 4 (id=1481): socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bind$inet(r6, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f000001f580), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r8, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) 6.607708739s ago: executing program 1 (id=1483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd000010000000000000006000000000206c01fe8000f50000000005000000000000aaff020000000000000000000000000001"], 0x56) 5.995253119s ago: executing program 0 (id=1484): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0x8, 0x1, 0xa, 0xffffffffffff8005, 0x3], 0x1, 0x0, 0x0, [{}]}, 0x88) (fail_nth: 8) 5.269458766s ago: executing program 0 (id=1485): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigaction(0x0, &(0x7f0000000180)={&(0x7f0000000600)="ca00d1c441ef196ec866400fe2de0fae4e0a64652f65660f29990080000000466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618e", @ANYBLOB=',rootmode', @ANYBLOB=',group_i']) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x2480, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0x0, 0x0) dup(r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddaf0200000000000000d2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a630900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r7 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fbe52163448002ba8", 0xd}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a1, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, 0x0, 0x0) 5.06891994s ago: executing program 1 (id=1486): fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0x61}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4.523173108s ago: executing program 5 (id=1487): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "0000000000000000000100"/100}}}}}}, 0x0) 4.445711236s ago: executing program 0 (id=1488): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000600)={0x0, 0x7, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000005c0)={0x0, 0x4, 0xffffffa7}) 4.071721787s ago: executing program 2 (id=1489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x3bc}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) 4.026195288s ago: executing program 5 (id=1490): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b405000000000000711063006a2a0000a680"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd3, &(0x7f0000000280)=""/211, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x94) 3.923511104s ago: executing program 4 (id=1491): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000040000000304fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) 3.785544147s ago: executing program 1 (id=1492): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026fcf786b4a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffff"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 3.785263631s ago: executing program 5 (id=1493): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026fcf786b4a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffff"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 3.785058659s ago: executing program 2 (id=1494): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) (async) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000940)='u', 0x1}], 0x1}}], 0x1, 0x4c040) 3.763882648s ago: executing program 4 (id=1495): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000002c0)={0x0, 0x320, 0xbf32a260a82ebd2f, 0x20, 0xe, 0xfffffffe, 0x4, 0x2, {0xfffffffe, 0x1}, {0x8, 0xff, 0x1}, {0x8, 0x8, 0x1}, {0x2, 0x7fff}, 0x1, 0x40, 0x4, 0xfffffffe, 0x1, 0x3, 0xfffffff1, 0xb71a, 0x197bf06c, 0x0, 0x7, 0x4007, 0x18, 0x7, 0x3, 0x6}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x30, 0xb3, {0xb3, 0x5, "39c69e17014a877617542f8ce0b35eac21d1fea808824e3fdc08763da43ba79df66ec96e72c37b5ac01c194ee744ebfa5d9c93037a57ac6a917a36487fad6a48e69046eb96605d13cb63206e9a63c1627f2ff3301b2c038249c4c01182382ad9e305924aa452c3466c9d56887f7be179abe8a8c24f25d611495196b1364f749e4a4bf1b7f87746d3f955d41c586c6fb87e2023f62d83e65a73dd0bda25d86b5a7a30c0692f07c312e88b0a33806c97d362"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000380)={0x40, 0x14, 0xe5, "d60a6bd5a18e3442a855a449cc2a2b8a828adc0491a80fedb4c6c784321e6ce640a8d56ea996b76c15ac1c2585e755a8631b92a784643bfc21b69533b215fa53713011c73b5da9080855db980451d19fbd95505f2fcdbd44b712e34c206cad348502b8ab006da12ccb65a6d46dd7796c0686cc8ede25ab7207d13c2e7a435d23ddb8ed138d6ba7ad12cafbde3436eca66a3473b259cc14c8e3f4368eb98e6402b72c22ae23d8108274303f1c4a80553d3c1623b5ea303703a8e0e38ce6c69fcb838cfe34e35025ebfba9d81d7ec995dd5e6ca07994ed734cdf57a90a326998f244e01377b2"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0xfff8, 0x6, 0x8, 0xfffb, 0x1000, 0x4, 0x3, 0x96, 0x1ff, 0xf, 0x7, 0x7}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0xfffffffa}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x7fff}, &(0x7f0000000500)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0}) 3.751498417s ago: executing program 0 (id=1496): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000380)={0x2f, 0xb, '\x00', [@calipso={0x7, 0x50, {0x1, 0x12, 0x5, 0x0, [0x3, 0x4, 0xd, 0x80, 0x401, 0x2, 0x3, 0x81, 0x2]}}, @ra={0x5, 0x2, 0x7400}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}, 0x68) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x408, 0x8, 0x0, 0x0, 0x6000, '\x00', 0x8001, 0x7ff, 0x100000000, 0x6, {0x6, 0xe}, {0x20000000000004}, {0x100000000, 0x9}, {0x8, 0xa04}, 0x4, 0x80000b, 0x5, 0x3}}}}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7}, 0x1, 0x8, 0xffffffff, 0x8, r2, r2, 0x6f8a}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000066001fff0000000000000000", @ANYRES64], 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902120001000014000d04b8070096d1ca00"], 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_usb_connect$uac1(0x2, 0xaf, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x8], 0xfb}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x2, 0x5, 0x900, 0x9, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0xe}, @feature_unit={0x7, 0x24, 0x6, 0x0, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x205, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x6, 0x6, 0xfe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x20, {0x7}}}}}}}]}}, 0x0) 3.585656655s ago: executing program 2 (id=1497): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@remote, @random, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x37, 0x1c, 0x67, 0x0, 0x2, 0x2, 0x0, @private=0xa010102, @empty}, {0x13, 0x46, 0x0, @remote}}}}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r3 = syz_open_dev$video(&(0x7f0000000540), 0x0, 0x180) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000040)={0x9, {0x101, 0x80000001, 0x0, 0x5}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000280)=0x0) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) write(r4, 0x0, 0x0) connect$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, 0x0) 2.404982173s ago: executing program 2 (id=1498): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) (async, rerun: 32) r3 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff], 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r3) (async) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) (async) unshare(0x40000080) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) (async) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async, rerun: 32) r6 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e23, 0x7, @mcast2}, 0x0, {[0xce4, 0xb, 0x5, 0x0, 0xb, 0xc0000000, 0x7f, 0x8]}}, 0x5c) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 1.941071602s ago: executing program 5 (id=1499): socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 1.519896266s ago: executing program 1 (id=1500): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x20, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350, 0x20002}, {0xf4ef}, {0x0, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 1.403166279s ago: executing program 1 (id=1501): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x54, 0x12, 0x101, 0x0, 0x0, {0x0, 0x8, 0x0, 0x0, {0x0, 0x0, [0x0, 0x4]}, 0x400, 0x1476}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "3e2044fc"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x2000000, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0xfffffffffffffff3, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xfffffffe}]}}}]}, 0x40}}, 0x0) 1.364783174s ago: executing program 5 (id=1502): fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r3, 0x0, 0xffffffffffffffff, 0xa3}) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0x61}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.245552684s ago: executing program 1 (id=1503): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000036) getsockname$inet(r2, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x8031, 0xffffffffffffffff, 0x8d898000) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r6, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r5, &(0x7f0000000000)=""/49, 0x31) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r8, &(0x7f0000008180)="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", 0x2000, &(0x7f0000004440)={&(0x7f00000021c0)={0x50, 0x0, 0x8, {0x7, 0x29, 0x9f53, 0x11000248, 0xc0f7, 0x48e, 0x7, 0x7fff, 0x0, 0x0, 0x7e, 0x105}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.160714998s ago: executing program 2 (id=1504): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b405000000000000711063006a2a0000a680"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd3, &(0x7f0000000280)=""/211, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x94) 872.366448ms ago: executing program 2 (id=1505): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x80800) accept4$unix(r0, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40000) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r5 = accept4(r4, 0x0, 0x0, 0x80000) r6 = dup(r5) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xff8d}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$media(&(0x7f0000000440), 0x5, 0x88000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000480)=0xffffffffffffffff) close(r9) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r11, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x102}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1f}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000340)=""/230, 0xe6}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f00000008c0)=""/4094, 0xffe}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000500)=""/232, 0xe8}], 0x6}, 0x7ffffffd}], 0x4, 0x4022, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000101010200000000000000000a0080000c00198008000200050800000600124000030000380002802c000180140003"], 0x60}}, 0x0) 49.604006ms ago: executing program 4 (id=1506): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000040000003003e00ebffffff940200000000e62c0e880000000000000000000000000000000000002c8f380001"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000005c0)={0x0, 0x4, 0xffffffa7}) 0s ago: executing program 0 (id=1507): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}}], {0x14}}, 0xb0}}, 0x0) socket$netlink(0x10, 0x3, 0xa) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x80002, 0x1e3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(r3, 0x200004) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r3], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000180)) write$apparmor_exec(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080001001000000010"], 0x68}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xd4, 0x8e, 0x88, 0x40, 0x15c2, 0x36, 0xbb7a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x10, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x4b, 0x2, 0x8d, 0x4a, 0xdd, 0xc, [], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x9, 0x8}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x0, 0x4, 0xe}}]}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): m state. [ 480.546543][ T9647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1000'. [ 480.590638][ T9647] program syz.2.1000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.767661][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 480.826105][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 480.841160][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 480.851646][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 480.876121][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 480.909354][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 480.928672][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 480.941784][ T9656] loop5: detected capacity change from 0 to 7 [ 480.971894][ T6431] Dev loop5: unable to read RDB block 7 [ 480.977562][ T6431] loop5: unable to read partition table [ 480.979243][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 480.999132][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 481.006371][ T6431] loop5: partition table beyond EOD, truncated [ 481.028284][ T9656] Dev loop5: unable to read RDB block 7 [ 481.035096][ T9656] loop5: unable to read partition table [ 481.058287][ T9656] loop5: partition table beyond EOD, truncated [ 481.071256][ T9656] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 481.073629][ T10] pwc: Registered as video103. [ 481.127483][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 481.259826][ T10] usb 1-1: USB disconnect, device number 36 [ 481.335232][ T5879] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 481.521623][ T5879] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 481.863965][ T9673] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 482.049895][ T9676] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 482.065921][ T9676] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 482.464561][ T9678] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 482.489086][ T9673] bond1: (slave gretap1): making interface the new active one [ 482.497604][ T9673] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 482.604417][ T9683] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 482.677547][ T9683] bond2 (unregistering): Released all slaves [ 483.225556][ T5879] usb 3-1: USB disconnect, device number 38 [ 483.940863][ T5879] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 484.098626][ T9701] netlink: 'syz.0.1012': attribute type 7 has an invalid length. [ 484.110470][ T5879] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 484.122112][ T5879] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 484.271445][ T5879] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 484.295266][ T9706] Cannot find del_set index 2 as target [ 484.318278][ T9707] MPI: mpi too large (130952 bits) [ 484.329344][ T5879] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 484.338526][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.356994][ T5879] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 484.367112][ T5879] usb 3-1: invalid MIDI out EP 0 [ 484.616792][ T9697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.681240][ T9714] usb usb8: usbfs: process 9714 (syz.0.1017) did not claim interface 0 before use [ 484.697837][ T9697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.707553][ T5879] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 484.737789][ T9697] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1011'. [ 484.792184][ T9697] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 484.815250][ T9697] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.823512][ T9697] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.913393][ T9718] program syz.0.1017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.359167][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1018'. [ 485.428183][ T9722] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1019'. [ 485.448196][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1019'. [ 486.310930][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 486.349932][ T983] usb 3-1: USB disconnect, device number 39 [ 486.641017][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 486.648938][ T10] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 486.657644][ T10] usb 6-1: config 0 has no interface number 0 [ 486.667519][ T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 486.696924][ T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 486.753121][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 486.763560][ T10] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 486.827877][ T10] usb 6-1: Product: syz [ 486.836315][ T10] usb 6-1: SerialNumber: syz [ 487.177932][ T10] usb 6-1: config 0 descriptor?? [ 487.192010][ T10] cm109 6-1:0.8: invalid payload size 1024, expected 4 [ 487.200229][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input31 [ 488.285110][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1022'. [ 488.305504][ T9732] hsr0: entered promiscuous mode [ 488.314673][ T9732] macvlan2: entered allmulticast mode [ 488.328979][ T9732] hsr0: entered allmulticast mode [ 488.349181][ T9764] Cannot find add_set index 0 as target [ 488.362818][ T9766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.365356][ T9732] hsr_slave_0: entered allmulticast mode [ 488.378115][ T9766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.472090][ C0] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 488.479415][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 488.486530][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 488.493787][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 488.500942][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 488.508047][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 488.515160][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 488.522519][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 488.529623][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 488.536744][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 488.543886][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 488.562495][ T983] usb 6-1: USB disconnect, device number 29 [ 488.568429][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 488.582915][ T983] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 488.736670][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 488.924090][ T9775] FAULT_INJECTION: forcing a failure. [ 488.924090][ T9775] name failslab, interval 1, probability 0, space 0, times 0 [ 488.941330][ T9775] CPU: 0 UID: 0 PID: 9775 Comm: syz.4.1037 Not tainted syzkaller #0 PREEMPT(full) [ 488.941355][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 488.941362][ T9775] Call Trace: [ 488.941367][ T9775] [ 488.941372][ T9775] dump_stack_lvl+0x189/0x250 [ 488.941388][ T9775] ? __pfx____ratelimit+0x10/0x10 [ 488.941403][ T9775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.941413][ T9775] ? __pfx__printk+0x10/0x10 [ 488.941427][ T9775] ? __pfx___might_resched+0x10/0x10 [ 488.941442][ T9775] should_fail_ex+0x414/0x560 [ 488.941460][ T9775] should_failslab+0xa8/0x100 [ 488.941473][ T9775] __kmalloc_cache_noprof+0x6f/0x6f0 [ 488.941485][ T9775] ? do_blk_trace_setup+0x221/0x980 [ 488.941501][ T9775] do_blk_trace_setup+0x221/0x980 [ 488.941519][ T9775] blk_trace_setup+0x116/0x1f0 [ 488.941534][ T9775] ? __pfx_blk_trace_setup+0x10/0x10 [ 488.941550][ T9775] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.941565][ T9775] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 488.941584][ T9775] blk_trace_ioctl+0x181/0x430 [ 488.941596][ T9775] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 488.941606][ T9775] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 488.941637][ T9775] blkdev_ioctl+0x41d/0x6d0 [ 488.941651][ T9775] ? __pfx_blkdev_ioctl+0x10/0x10 [ 488.941661][ T9775] ? __fget_files+0x3a0/0x420 [ 488.941672][ T9775] ? __fget_files+0x2a/0x420 [ 488.941685][ T9775] ? bpf_lsm_file_ioctl+0x9/0x20 [ 488.941698][ T9775] ? __pfx_blkdev_ioctl+0x10/0x10 [ 488.941709][ T9775] __se_sys_ioctl+0xfc/0x170 [ 488.941720][ T9775] do_syscall_64+0xfa/0xfa0 [ 488.941729][ T9775] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.941739][ T9775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.941748][ T9775] ? clear_bhb_loop+0x60/0xb0 [ 488.941760][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.941770][ T9775] RIP: 0033:0x7f069918eec9 [ 488.941780][ T9775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.941789][ T9775] RSP: 002b:00007f069a04b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.941800][ T9775] RAX: ffffffffffffffda RBX: 00007f06993e5fa0 RCX: 00007f069918eec9 [ 488.941807][ T9775] RDX: 0000200000000080 RSI: 00000000c0481273 RDI: 0000000000000003 [ 488.941814][ T9775] RBP: 00007f069a04b090 R08: 0000000000000000 R09: 0000000000000000 [ 488.941820][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.941825][ T9775] R13: 00007f06993e6038 R14: 00007f06993e5fa0 R15: 00007f069950fa28 [ 488.941841][ T9775] [ 489.953568][ T9793] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 490.551008][ T983] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 490.664750][ T9797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1043'. [ 490.720820][ T983] usb 1-1: Using ep0 maxpacket: 8 [ 490.750874][ T983] usb 1-1: too many configurations: 188, using maximum allowed: 8 [ 490.803058][ T983] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 490.905570][ T983] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.070450][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'. [ 491.091147][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 491.124898][ T983] usb 1-1: config 0 has no interface number 0 [ 491.202240][ T983] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 491.433537][ T983] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 491.447782][ T983] usb 1-1: config 0 interface 255 has no altsetting 0 [ 491.465967][ T983] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 492.090985][ T983] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.102005][ T983] usb 1-1: config 0 has no interface number 0 [ 492.108236][ T983] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 492.478333][ T983] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 492.537824][ T983] usb 1-1: config 0 interface 255 has no altsetting 0 [ 493.556492][ T9842] kvm: user requested TSC rate below hardware speed [ 494.130881][ T30] audit: type=1326 audit(1760249756.417:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9850 comm="syz.1.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c498eec9 code=0x7ffc0000 [ 494.189984][ T30] audit: type=1326 audit(1760249756.417:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9850 comm="syz.1.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41c498eec9 code=0x7ffc0000 [ 494.235162][ T30] audit: type=1326 audit(1760249756.417:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9850 comm="syz.1.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c498eec9 code=0x7ffc0000 [ 494.272911][ T983] usb 1-1: unable to read config index 2 descriptor/start: -71 [ 494.281270][ T983] usb 1-1: can't read configurations, error -71 [ 494.291744][ T30] audit: type=1326 audit(1760249756.447:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9850 comm="syz.1.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c498eec9 code=0x7ffc0000 [ 494.548973][ T9860] kvm: pic: non byte write [ 494.556610][ T9860] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 495.059921][ T30] audit: type=1326 audit(1760249757.347:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069918eec9 code=0x7ffc0000 [ 495.151727][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 495.173913][ T30] audit: type=1326 audit(1760249757.377:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069918eec9 code=0x7ffc0000 [ 495.229660][ T30] audit: type=1326 audit(1760249757.377:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069918eec9 code=0x7ffc0000 [ 495.299851][ T30] audit: type=1326 audit(1760249757.377:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069918eec9 code=0x7ffc0000 [ 495.381614][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.405498][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 495.436205][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.451028][ T30] audit: type=1326 audit(1760249757.377:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069918eec9 code=0x7ffc0000 [ 495.491579][ T10] usb 2-1: config 0 descriptor?? [ 495.499811][ T30] audit: type=1326 audit(1760249757.377:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f069918eec9 code=0x7ffc0000 [ 495.534059][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 495.921149][ T9892] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1072'. [ 495.924652][ T9894] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1073'. [ 495.936594][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 495.947263][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 495.963988][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 495.981240][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 496.010829][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 496.049794][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 496.114586][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 496.196338][ T9899] syz.1.1066: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 496.241673][ T9899] CPU: 0 UID: 0 PID: 9899 Comm: syz.1.1066 Not tainted syzkaller #0 PREEMPT(full) [ 496.241702][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 496.241713][ T9899] Call Trace: [ 496.241721][ T9899] [ 496.241730][ T9899] dump_stack_lvl+0x189/0x250 [ 496.241760][ T9899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.241779][ T9899] ? __pfx__printk+0x10/0x10 [ 496.241798][ T9899] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 496.241817][ T9899] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 496.241838][ T9899] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 496.241867][ T9899] warn_alloc+0x214/0x310 [ 496.241890][ T9899] ? stack_depot_save_flags+0x40/0x860 [ 496.241909][ T9899] ? rcu_is_watching+0x15/0xb0 [ 496.241936][ T9899] ? __pfx_warn_alloc+0x10/0x10 [ 496.241957][ T9899] ? kasan_save_track+0x3e/0x80 [ 496.241975][ T9899] ? __kasan_kmalloc+0x93/0xb0 [ 496.241995][ T9899] ? xsk_setsockopt+0x4dc/0x8d0 [ 496.242019][ T9899] ? do_sock_setsockopt+0x17c/0x1b0 [ 496.242044][ T9899] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 496.242069][ T9899] ? do_syscall_64+0xfa/0xfa0 [ 496.242084][ T9899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.242110][ T9899] __vmalloc_node_range_noprof+0x125/0x12d0 [ 496.242157][ T9899] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 496.242179][ T9899] ? __kasan_kmalloc+0x93/0xb0 [ 496.242204][ T9899] vmalloc_user_noprof+0xad/0xf0 [ 496.242223][ T9899] ? xskq_create+0xbf/0x170 [ 496.242247][ T9899] xskq_create+0xbf/0x170 [ 496.242272][ T9899] xsk_init_queue+0xb0/0x110 [ 496.242300][ T9899] xsk_setsockopt+0x4dc/0x8d0 [ 496.242327][ T9899] ? __pfx_xsk_setsockopt+0x10/0x10 [ 496.242355][ T9899] ? __pfx_aa_sk_perm+0x10/0x10 [ 496.242376][ T9899] ? aa_sock_opt_perm+0xff/0x1b0 [ 496.242400][ T9899] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 496.242422][ T9899] ? __pfx_xsk_setsockopt+0x10/0x10 [ 496.242448][ T9899] do_sock_setsockopt+0x17c/0x1b0 [ 496.242478][ T9899] __x64_sys_setsockopt+0x13f/0x1b0 [ 496.242508][ T9899] do_syscall_64+0xfa/0xfa0 [ 496.242524][ T9899] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.242541][ T9899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.242558][ T9899] ? clear_bhb_loop+0x60/0xb0 [ 496.242580][ T9899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.242597][ T9899] RIP: 0033:0x7f41c498eec9 [ 496.242614][ T9899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.242629][ T9899] RSP: 002b:00007f41c588b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 496.242649][ T9899] RAX: ffffffffffffffda RBX: 00007f41c4be6090 RCX: 00007f41c498eec9 [ 496.242664][ T9899] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 496.242675][ T9899] RBP: 00007f41c4a11f91 R08: 0000000000000052 R09: 0000000000000000 [ 496.242687][ T9899] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.242699][ T9899] R13: 00007f41c4be6128 R14: 00007f41c4be6090 R15: 00007f41c4d0fa28 [ 496.242731][ T9899] [ 496.242768][ T9899] Mem-Info: [ 496.545972][ T9899] active_anon:7191 inactive_anon:0 isolated_anon:0 [ 496.545972][ T9899] active_file:3627 inactive_file:40077 isolated_file:0 [ 496.545972][ T9899] unevictable:768 dirty:257 writeback:0 [ 496.545972][ T9899] slab_reclaimable:10813 slab_unreclaimable:100128 [ 496.545972][ T9899] mapped:31546 shmem:1360 pagetables:1380 [ 496.545972][ T9899] sec_pagetables:0 bounce:0 [ 496.545972][ T9899] kernel_misc_reclaimable:0 [ 496.545972][ T9899] free:1320358 free_pcp:13443 free_cma:0 [ 496.595340][ T9899] Node 0 active_anon:28764kB inactive_anon:0kB active_file:14508kB inactive_file:160104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126184kB dirty:1028kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12792kB pagetables:5556kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 496.630945][ T9899] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 496.721799][ T9899] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 496.721869][ T9899] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 496.721895][ T9899] Node 0 DMA32 free:1371772kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29464kB inactive_anon:0kB active_file:14508kB inactive_file:160104kB unevictable:1536kB writepending:1028kB zspages:0kB present:3129332kB managed:2561628kB mlocked:0kB bounce:0kB free_pcp:37732kB local_pcp:19176kB free_cma:0kB [ 496.721929][ T9899] lowmem_reserve[]: 0 0 1 1 1 [ 496.721951][ T9899] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 496.721980][ T9899] lowmem_reserve[]: 0 0 0 0 0 [ 496.722019][ T9899] Node 1 Normal free:3894300kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15808kB local_pcp:10080kB free_cma:0kB [ 496.722050][ T9899] lowmem_reserve[]: 0 0 0 0 0 [ 496.722073][ T9899] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 496.722159][ T9899] Node 0 DMA32: 1183*4kB (UME) 632*8kB (UME) 328*16kB (UME) 170*32kB (UME) 72*64kB (UME) 191*128kB (UME) 115*256kB (UM) 57*512kB (UME) 28*1024kB (UME) 11*2048kB (UME) 296*4096kB (UM) = 1371772kB [ 496.722260][ T9899] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 496.724083][ T9899] Node 1 Normal: 157*4kB (UE) 31*8kB (UME) 31*16kB (UME) 116*32kB (UME) 41*64kB (UME) 8*128kB (UME) 4*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3894300kB [ 496.724200][ T9899] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 496.724217][ T9899] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 496.724234][ T9899] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 496.724251][ T9899] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 496.724267][ T9899] 45060 total pagecache pages [ 496.724274][ T9899] 0 pages in swap cache [ 496.724279][ T9899] Free swap = 124996kB [ 496.724283][ T9899] Total swap = 124996kB [ 496.724288][ T9899] 2097051 pages RAM [ 496.724293][ T9899] 0 pages HighMem/MovableOnly [ 496.724297][ T9899] 424554 pages reserved [ 496.724301][ T9899] 0 pages cma reserved [ 498.157717][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 498.182967][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 498.211394][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 498.224509][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 498.257358][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 498.276560][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 498.283580][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 498.291749][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 498.298964][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 498.309608][ T10] pwc: Registered as video103. [ 498.316681][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 498.341785][ T24] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 498.362087][ T9933] netlink: 532 bytes leftover after parsing attributes in process `syz.0.1085'. [ 498.704818][ T10] usb 2-1: USB disconnect, device number 35 [ 498.726281][ T9933] loop9: detected capacity change from 0 to 7 [ 498.760854][ T9933] Dev loop9: unable to read RDB block 7 [ 498.762838][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 498.776165][ T9933] loop9: unable to read partition table [ 498.786194][ T9940] tipc: Enabling of bearer rejected, failed to enable media [ 498.860826][ T24] usb 3-1: config 0 has no interfaces? [ 498.872459][ T9933] loop9: partition table beyond EOD, truncated [ 498.873886][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 498.892657][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 498.909357][ T24] usb 3-1: Manufacturer: syz [ 498.963537][ T24] usb 3-1: config 0 descriptor?? [ 498.963671][ T9933] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 499.075749][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1088'. [ 499.099835][ T9942] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.108273][ T9942] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.140429][ T9942] bridge0: left promiscuous mode [ 499.151187][ T9942] bridge0: left allmulticast mode [ 499.565855][ T9951] binder: 9949:9951 ioctl 4018620d 0 returned -22 [ 499.573935][ T9951] binder: 9949:9951 ioctl 4040942c 0 returned -22 [ 500.018789][ T9972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1101'. [ 500.028258][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 500.329292][ T9978] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 500.766332][ T48] usb 3-1: USB disconnect, device number 40 [ 500.795685][ T9983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1102'. [ 500.987803][ T5879] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 501.171695][ T9983] hub 9-0:1.0: USB hub found [ 501.241254][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 501.275616][ T9983] hub 9-0:1.0: 1 port detected [ 501.289726][ T5879] usb 5-1: too many configurations: 188, using maximum allowed: 8 [ 501.399482][ T5879] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 501.487642][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.564650][ T5879] usb 5-1: config 0 has no interface number 0 [ 501.587476][ T5879] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 501.625492][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.632737][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.692381][ T5879] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 501.927613][ T5879] usb 5-1: config 0 interface 255 has no altsetting 0 [ 501.998809][ T5879] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 502.024302][ T5893] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 502.102478][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.252609][ T5893] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 502.261311][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.290311][ T5879] usb 5-1: config 0 has no interface number 0 [ 502.301219][ T5879] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 502.329980][ T5893] usb 3-1: config 0 has no interface number 0 [ 502.343726][ T5879] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 502.379325][ T5879] usb 5-1: config 0 interface 255 has no altsetting 0 [ 502.387075][ T5893] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 502.550169][ T5879] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 502.559018][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.576858][ T5879] usb 5-1: config 0 has no interface number 0 [ 502.592393][ T5879] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 502.619118][ T5893] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.734390][ T5893] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 502.743823][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.760282][ T5893] usb 3-1: Product: syz [ 502.760280][ T5879] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 502.760308][ T5879] usb 5-1: config 0 interface 255 has no altsetting 0 [ 502.795783][ T5893] usb 3-1: Manufacturer: syz [ 502.800580][ T5893] usb 3-1: SerialNumber: syz [ 502.822077][ T5893] usb 3-1: config 0 descriptor?? [ 502.935346][ T5879] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 502.988651][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.114112][ T5879] usb 5-1: config 0 has no interface number 0 [ 503.132163][ T5879] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 503.163202][ T5879] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 503.195278][ T5879] usb 5-1: config 0 interface 255 has no altsetting 0 [ 503.230734][ T5879] usb 5-1: unable to read config index 4 descriptor/start: -71 [ 503.359541][ T5879] usb 5-1: can't read configurations, error -71 [ 503.560469][ T5893] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.117/input/input33 [ 503.644356][T10017] trusted_key: syz.4.1112 sent an empty control message without MSG_MORE. [ 503.754602][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 504.797763][ T5879] usb 3-1: USB disconnect, device number 41 [ 505.082190][T10034] binder: 10029:10034 ioctl 4040942c 200000000300 returned -22 [ 505.102789][T10034] binder: BINDER_SET_CONTEXT_MGR already set [ 505.108864][T10034] binder: 10029:10034 ioctl 4018620d 2000000002c0 returned -16 [ 507.280854][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 507.371010][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 507.507367][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 507.525620][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 507.729416][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 507.735068][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 507.851216][ T10] usb 5-1: config 0 has no interfaces? [ 507.863604][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 507.880648][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 507.910218][ T10] usb 5-1: Manufacturer: syz [ 507.939019][ T10] usb 5-1: config 0 descriptor?? [ 507.962941][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 508.230822][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 508.420846][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.445561][T10073] MPI: mpi too large (130952 bits) [ 508.478971][ T24] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 508.503711][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.519719][ T24] usb 3-1: Product: syz [ 508.535240][ T24] usb 3-1: Manufacturer: syz [ 508.549940][ T24] usb 3-1: SerialNumber: syz [ 508.587283][ T24] usb 3-1: config 0 descriptor?? [ 508.959920][T10077] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 508.968081][T10077] CPU: 0 UID: 0 PID: 10077 Comm: syz.2.1123 Not tainted syzkaller #0 PREEMPT(full) [ 508.968108][T10077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 508.968119][T10077] Call Trace: [ 508.968128][T10077] [ 508.968136][T10077] dump_stack_lvl+0x189/0x250 [ 508.968166][T10077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.968186][T10077] ? __pfx__printk+0x10/0x10 [ 508.968212][T10077] ? kernfs_path_from_node+0x2f/0x290 [ 508.968229][T10077] ? kernfs_path_from_node+0x250/0x290 [ 508.968244][T10077] ? kernfs_path_from_node+0x2f/0x290 [ 508.968266][T10077] sysfs_warn_dup+0x8e/0xa0 [ 508.968291][T10077] sysfs_do_create_link_sd+0xc0/0x110 [ 508.968322][T10077] device_add_class_symlinks+0x1cf/0x240 [ 508.968349][T10077] device_add+0x475/0xb50 [ 508.968376][T10077] wiphy_register+0x1c81/0x2aa0 [ 508.968421][T10077] ? __pfx_wiphy_register+0x10/0x10 [ 508.968439][T10077] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 508.968472][T10077] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 508.968498][T10077] ieee80211_register_hw+0x3473/0x40d0 [ 508.968529][T10077] ? ieee80211_register_hw+0x1491/0x40d0 [ 508.968560][T10077] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 508.968581][T10077] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 508.968604][T10077] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 508.968623][T10077] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 508.968650][T10077] ? __hrtimer_setup+0x187/0x210 [ 508.968667][T10077] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 508.968686][T10077] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 508.968739][T10077] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 508.968758][T10077] ? trace_kmalloc+0x1f/0xd0 [ 508.968772][T10077] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 508.968788][T10077] ? kstrndup+0xbf/0x160 [ 508.968814][T10077] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 508.968841][T10077] ? __pfx___nla_validate_parse+0x10/0x10 [ 508.968871][T10077] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 508.968896][T10077] ? rcu_is_watching+0x15/0xb0 [ 508.968918][T10077] ? __nla_parse+0x40/0x60 [ 508.968937][T10077] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 508.968959][T10077] genl_family_rcv_msg_doit+0x215/0x300 [ 508.968984][T10077] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 508.969010][T10077] ? bpf_lsm_capable+0x9/0x20 [ 508.969022][T10077] ? security_capable+0x7e/0x2e0 [ 508.969043][T10077] genl_rcv_msg+0x60e/0x790 [ 508.969066][T10077] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.969081][T10077] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 508.969116][T10077] netlink_rcv_skb+0x208/0x470 [ 508.969137][T10077] ? __lock_acquire+0xab9/0xd20 [ 508.969156][T10077] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.969171][T10077] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.969205][T10077] ? down_read+0x1ad/0x2e0 [ 508.969222][T10077] genl_rcv+0x28/0x40 [ 508.969234][T10077] netlink_unicast+0x82f/0x9e0 [ 508.969263][T10077] ? __pfx_netlink_unicast+0x10/0x10 [ 508.969282][T10077] ? netlink_sendmsg+0x642/0xb30 [ 508.969299][T10077] ? skb_put+0x11b/0x210 [ 508.969321][T10077] netlink_sendmsg+0x805/0xb30 [ 508.969347][T10077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.969368][T10077] ? aa_sock_msg_perm+0xf1/0x1d0 [ 508.969394][T10077] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 508.969413][T10077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.969434][T10077] __sock_sendmsg+0x21c/0x270 [ 508.969453][T10077] ____sys_sendmsg+0x505/0x830 [ 508.969480][T10077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.969509][T10077] ? import_iovec+0x74/0xa0 [ 508.969534][T10077] ___sys_sendmsg+0x21f/0x2a0 [ 508.969557][T10077] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.969583][T10077] ? futex_wake+0x4b2/0x560 [ 508.969634][T10077] __x64_sys_sendmsg+0x19b/0x260 [ 508.969650][T10077] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 508.969689][T10077] ? do_syscall_64+0xbe/0xfa0 [ 508.969706][T10077] do_syscall_64+0xfa/0xfa0 [ 508.969718][T10077] ? lockdep_hardirqs_on+0x9c/0x150 [ 508.969731][T10077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.969745][T10077] ? clear_bhb_loop+0x60/0xb0 [ 508.969761][T10077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.969775][T10077] RIP: 0033:0x7f55e378eec9 [ 508.969790][T10077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.969805][T10077] RSP: 002b:00007f55e46c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.969823][T10077] RAX: ffffffffffffffda RBX: 00007f55e39e6180 RCX: 00007f55e378eec9 [ 508.969833][T10077] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000007 [ 508.969843][T10077] RBP: 00007f55e3811f91 R08: 0000000000000000 R09: 0000000000000000 [ 508.969851][T10077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.969860][T10077] R13: 00007f55e39e6218 R14: 00007f55e39e6180 R15: 00007f55e3b0fa28 [ 508.969887][T10077] [ 509.671197][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 509.759851][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1129'. [ 510.020878][ T48] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 510.180844][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 510.250483][ T48] usb 6-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 510.360945][ T48] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.419222][ T5956] usb 5-1: USB disconnect, device number 34 [ 510.435214][ T48] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 510.622263][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.731009][ T48] usb 6-1: Product: syz [ 510.752015][ T48] usb 6-1: Manufacturer: syz [ 510.756649][ T48] usb 6-1: SerialNumber: syz [ 510.883167][ T48] usb 6-1: config 0 descriptor?? [ 511.094639][T10100] tipc: Enabling of bearer rejected, failed to enable media [ 511.257931][T10101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.268304][T10101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.671311][ T5956] usb 6-1: USB disconnect, device number 30 [ 513.214276][ T5956] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 513.270822][ T24] rc_core: IR keymap rc-imon-rsc not found [ 513.286737][ T24] Registered IR keymap rc-empty [ 513.294360][ T24] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 513.578686][ T24] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input34 [ 513.642146][ T24] usb 3-1: USB disconnect, device number 42 [ 513.654369][ T5956] usb 6-1: config 0 has no interfaces? [ 513.671821][ T5956] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 513.685400][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.707290][ T5956] usb 6-1: Product: syz [ 513.711726][ T5956] usb 6-1: Manufacturer: syz [ 513.716304][ T5956] usb 6-1: SerialNumber: syz [ 513.752431][ T5956] usb 6-1: config 0 descriptor?? [ 513.977947][T10128] netlink: 'syz.2.1141': attribute type 8 has an invalid length. [ 515.502739][T10138] FAULT_INJECTION: forcing a failure. [ 515.502739][T10138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.617388][T10138] CPU: 1 UID: 0 PID: 10138 Comm: syz.0.1144 Not tainted syzkaller #0 PREEMPT(full) [ 515.617405][T10138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 515.617412][T10138] Call Trace: [ 515.617417][T10138] [ 515.617423][T10138] dump_stack_lvl+0x189/0x250 [ 515.617439][T10138] ? __pfx____ratelimit+0x10/0x10 [ 515.617455][T10138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.617465][T10138] ? __pfx__printk+0x10/0x10 [ 515.617486][T10138] should_fail_ex+0x414/0x560 [ 515.617504][T10138] _copy_to_user+0x31/0xb0 [ 515.617518][T10138] simple_read_from_buffer+0xe1/0x170 [ 515.617533][T10138] proc_fail_nth_read+0x1b3/0x220 [ 515.617550][T10138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 515.617566][T10138] ? rw_verify_area+0x2a6/0x4d0 [ 515.617576][T10138] ? __lock_acquire+0xab9/0xd20 [ 515.617587][T10138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 515.617602][T10138] vfs_read+0x200/0xa30 [ 515.617611][T10138] ? fdget_pos+0x247/0x320 [ 515.617625][T10138] ? __pfx___mutex_lock+0x10/0x10 [ 515.617636][T10138] ? __pfx_vfs_read+0x10/0x10 [ 515.617647][T10138] ? __fget_files+0x2a/0x420 [ 515.617661][T10138] ? __fget_files+0x3a0/0x420 [ 515.617671][T10138] ? __fget_files+0x2a/0x420 [ 515.617686][T10138] ksys_read+0x145/0x250 [ 515.617698][T10138] ? __pfx_ksys_read+0x10/0x10 [ 515.617710][T10138] ? do_syscall_64+0xbe/0xfa0 [ 515.617722][T10138] do_syscall_64+0xfa/0xfa0 [ 515.617731][T10138] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.617741][T10138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.617751][T10138] ? clear_bhb_loop+0x60/0xb0 [ 515.617763][T10138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.617774][T10138] RIP: 0033:0x7f221d58d8dc [ 515.617784][T10138] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 515.617793][T10138] RSP: 002b:00007f221e3ac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 515.617806][T10138] RAX: ffffffffffffffda RBX: 00007f221d7e5fa0 RCX: 00007f221d58d8dc [ 515.617813][T10138] RDX: 000000000000000f RSI: 00007f221e3ac0a0 RDI: 0000000000000004 [ 515.617819][T10138] RBP: 00007f221e3ac090 R08: 0000000000000000 R09: 0000000000000000 [ 515.617825][T10138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.617837][T10138] R13: 00007f221d7e6038 R14: 00007f221d7e5fa0 R15: 00007f221d90fa28 [ 515.617853][T10138] [ 516.142545][ T5893] usb 6-1: USB disconnect, device number 31 [ 516.504907][T10154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1148'. [ 516.668494][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 516.668512][ T30] audit: type=1326 audit(1760249778.957:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10157 comm="syz.5.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b78eec9 code=0x7ffc0000 [ 516.760788][ T5956] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 516.773282][ T30] audit: type=1326 audit(1760249778.957:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10157 comm="syz.5.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b78eec9 code=0x7ffc0000 [ 516.864379][ T30] audit: type=1326 audit(1760249778.997:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10157 comm="syz.5.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa41b78eec9 code=0x7ffc0000 [ 516.919552][ T30] audit: type=1326 audit(1760249778.997:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10157 comm="syz.5.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b78eec9 code=0x7ffc0000 [ 516.952437][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 516.964611][ T30] audit: type=1326 audit(1760249778.997:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10157 comm="syz.5.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b78eec9 code=0x7ffc0000 [ 517.015347][ T5956] usb 3-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 517.039243][ T65] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.048993][ T65] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.052675][ T5956] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 517.222295][ T65] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.232482][ T65] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.326402][ T30] audit: type=1326 audit(1760249778.997:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10157 comm="syz.5.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa41b78eec9 code=0x7ffc0000 [ 517.367722][ T5956] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 517.383262][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.399184][ T5956] usb 3-1: Product: syz [ 517.403882][ T30] audit: type=1326 audit(1760249778.997:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10157 comm="syz.5.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b78eec9 code=0x7ffc0000 [ 517.426647][ T5956] usb 3-1: Manufacturer: syz [ 517.437238][ T5956] usb 3-1: SerialNumber: syz [ 517.453178][ T5956] usb 3-1: config 0 descriptor?? [ 517.459816][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 517.469510][ T30] audit: type=1326 audit(1760249778.997:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10157 comm="syz.5.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b78eec9 code=0x7ffc0000 [ 517.547864][ T30] audit: type=1326 audit(1760249778.997:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10157 comm="syz.5.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fa41b78eec9 code=0x7ffc0000 [ 517.625171][ T30] audit: type=1326 audit(1760249778.997:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10157 comm="syz.5.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b78eec9 code=0x7ffc0000 [ 517.810647][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 517.860652][T10180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.928859][T10180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.002942][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 518.033002][ T10] usb 2-1: config index 0 descriptor too short (expected 21760, got 18) [ 518.043364][ T10] usb 2-1: config 73 has too many interfaces: 57, using maximum allowed: 32 [ 518.057473][ T10] usb 2-1: config 73 has an invalid descriptor of length 28, skipping remainder of the config [ 518.080847][ T10] usb 2-1: config 73 has 0 interfaces, different from the descriptor's value: 57 [ 518.098083][ T10] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=be.93 [ 518.109773][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.119637][ T10] usb 2-1: Product: syz [ 518.125313][ T10] usb 2-1: Manufacturer: syz [ 518.132510][ T10] usb 2-1: SerialNumber: syz [ 518.181128][ T5930] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 518.313004][ T5930] usb 5-1: device descriptor read/64, error -71 [ 518.550822][ T5930] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 518.841730][ T5930] usb 5-1: device descriptor read/64, error -71 [ 518.951674][ T5930] usb usb5-port1: attempt power cycle [ 519.290983][ T5930] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 519.312238][ T5930] usb 5-1: device descriptor read/8, error -71 [ 519.451523][ T983] usb 3-1: USB disconnect, device number 43 [ 519.494868][T10199] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 0 [ 519.550997][ T5930] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 519.581817][ T5930] usb 5-1: device descriptor read/8, error -71 [ 519.720558][T10201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1163'. [ 519.735918][ T5930] usb usb5-port1: unable to enumerate USB device [ 519.747650][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1163'. [ 520.099605][T10210] fuse: Unknown parameter 'roopmode' [ 520.292700][T10214] loop5: detected capacity change from 0 to 7 [ 520.310444][ T6430] Dev loop5: unable to read RDB block 7 [ 520.324599][ T6430] loop5: unable to read partition table [ 520.331853][ T6430] loop5: partition table beyond EOD, truncated [ 520.342004][T10214] Dev loop5: unable to read RDB block 7 [ 520.360960][T10214] loop5: unable to read partition table [ 520.366945][T10214] loop5: partition table beyond EOD, truncated [ 520.373651][T10214] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 520.599989][ T10] usb 2-1: USB disconnect, device number 36 [ 521.095011][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1173'. [ 521.400934][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 521.551189][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 521.559814][ T10] usb 1-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 521.571276][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 521.629444][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 521.775494][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.794204][ T10] usb 1-1: Product: syz [ 521.825808][ T10] usb 1-1: Manufacturer: syz [ 521.846613][ T10] usb 1-1: SerialNumber: syz [ 522.009415][ T983] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 522.041964][ T10] usb 1-1: config 0 descriptor?? [ 522.215036][ T983] usb 6-1: Using ep0 maxpacket: 16 [ 522.265323][ T983] usb 6-1: config 0 has no interfaces? [ 522.274017][ T983] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 522.291507][ T983] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 522.338501][T10243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.348790][T10243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.365333][ T983] usb 6-1: Manufacturer: syz [ 522.407529][ T983] usb 6-1: config 0 descriptor?? [ 523.447101][T10252] Cannot find add_set index 0 as target [ 524.019748][ T10] usb 1-1: USB disconnect, device number 39 [ 525.035136][ T10] usb 6-1: USB disconnect, device number 32 [ 526.489358][T10294] kvm: pic: non byte write [ 527.045098][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'. [ 527.310755][ T5956] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 527.560846][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 527.567541][ T5956] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 527.594122][ T5956] usb 5-1: config 1 has no interface number 1 [ 527.609475][ T5956] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 527.649286][ T5956] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 527.658908][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.671681][ T5956] usb 5-1: Product: syz [ 527.677123][ T5956] usb 5-1: Manufacturer: syz [ 527.682429][ T5956] usb 5-1: SerialNumber: syz [ 527.781478][ T48] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 527.955446][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 527.964332][ T48] usb 6-1: config 0 has an invalid interface number: 136 but max is 0 [ 527.973390][ T48] usb 6-1: config 0 has no interface number 0 [ 527.979748][ T48] usb 6-1: config 0 interface 136 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 527.996703][ T48] usb 6-1: config 0 interface 136 altsetting 1 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 528.023437][ T48] usb 6-1: config 0 interface 136 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 528.068337][T10334] loop2: detected capacity change from 0 to 7 [ 528.079790][T10334] Dev loop2: unable to read RDB block 7 [ 528.114572][T10334] loop2: unable to read partition table [ 528.121783][ T48] usb 6-1: config 0 interface 136 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 528.133318][T10334] loop2: partition table beyond EOD, truncated [ 528.151316][T10334] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 528.176573][ T48] usb 6-1: config 0 interface 136 has no altsetting 0 [ 528.228688][ T48] usb 6-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=b1.63 [ 528.238964][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.249312][ T48] usb 6-1: Product: syz [ 528.266957][ T48] usb 6-1: Manufacturer: syz [ 528.272108][ T48] usb 6-1: SerialNumber: syz [ 528.482555][ T48] usb 6-1: config 0 descriptor?? [ 528.655506][ T5199] Dev loop2: unable to read RDB block 7 [ 528.663566][ T5199] loop2: unable to read partition table [ 528.676802][ T5199] loop2: partition table beyond EOD, truncated [ 528.819998][ T5199] Dev loop2: unable to read RDB block 7 [ 528.830263][ T5199] loop2: unable to read partition table [ 528.847207][ T5199] loop2: partition table beyond EOD, truncated [ 529.081331][T10346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1206'. [ 529.525627][ T5199] Dev loop2: unable to read RDB block 7 [ 529.577613][ T48] uvcvideo 6-1:0.136: Found UVC 0.00 device syz (06f8:300c) [ 529.593870][ T48] uvcvideo 6-1:0.136: No valid video chain found. [ 529.595032][ T5199] loop2: unable to read partition table [ 529.641145][ T5199] loop2: partition table beyond EOD, truncated [ 529.716497][ T48] usb 6-1: USB disconnect, device number 33 [ 529.810471][T10348] tipc: Enabling of bearer rejected, failed to enable media [ 530.072764][T10354] Cannot find add_set index 0 as target [ 530.382271][T10360] loop5: detected capacity change from 0 to 7 [ 530.390951][T10360] Dev loop5: unable to read RDB block 7 [ 530.396706][T10360] loop5: unable to read partition table [ 530.468153][T10360] loop5: partition table beyond EOD, truncated [ 530.476551][T10360] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 530.560614][ T5199] Dev loop2: unable to read RDB block 7 [ 530.574695][ T5199] loop2: unable to read partition table [ 530.607640][ T5199] loop2: partition table beyond EOD, truncated [ 530.740187][T10364] loop9: detected capacity change from 0 to 7 [ 530.773566][T10364] Buffer I/O error on dev loop9, logical block 0, async page read [ 530.953568][T10364] Buffer I/O error on dev loop9, logical block 0, async page read [ 530.966165][T10364] Buffer I/O error on dev loop9, logical block 0, async page read [ 531.057781][T10364] Buffer I/O error on dev loop9, logical block 0, async page read [ 531.082886][T10364] Buffer I/O error on dev loop9, logical block 0, async page read [ 531.096328][T10364] Buffer I/O error on dev loop9, logical block 0, async page read [ 531.106518][T10364] Buffer I/O error on dev loop9, logical block 0, async page read [ 531.117503][T10364] ldm_validate_partition_table(): Disk read failed. [ 531.124875][T10364] Buffer I/O error on dev loop9, logical block 0, async page read [ 531.131088][ T5956] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 531.133188][T10364] Buffer I/O error on dev loop9, logical block 0, async page read [ 531.152322][T10364] Buffer I/O error on dev loop9, logical block 0, async page read [ 531.160564][T10364] Dev loop9: unable to read RDB block 0 [ 531.185257][T10364] loop9: unable to read partition table [ 531.192042][T10364] loop9: partition table beyond EOD, truncated [ 531.211188][T10364] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 531.211188][T10364] ) failed (rc=-5) [ 531.260811][ T5956] usb 5-1: USB disconnect, device number 39 [ 531.555800][ T6431] udevd[6431]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.041417][T10394] binder: 10389:10394 ioctl 4040942c 200000000300 returned -22 [ 533.053385][T10394] binder: BINDER_SET_CONTEXT_MGR already set [ 533.070824][T10394] binder: 10389:10394 ioctl 4018620d 2000000002c0 returned -16 [ 533.267898][T10398] netlink: 'syz.4.1218': attribute type 8 has an invalid length. [ 534.371347][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 534.608804][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 535.227104][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 535.280203][T10419] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 535.310649][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 535.330013][ T10] usb 1-1: can't read configurations, error -71 [ 535.510206][T10428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1224'. [ 535.702539][T10437] MPI: mpi too large (130952 bits) [ 537.946701][T10463] FAULT_INJECTION: forcing a failure. [ 537.946701][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 537.968936][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.5.1235 Not tainted syzkaller #0 PREEMPT(full) [ 537.968962][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.968973][T10463] Call Trace: [ 537.968980][T10463] [ 537.968986][T10463] dump_stack_lvl+0x189/0x250 [ 537.969002][T10463] ? __pfx____ratelimit+0x10/0x10 [ 537.969017][T10463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.969027][T10463] ? __pfx__printk+0x10/0x10 [ 537.969041][T10463] ? __pfx___might_resched+0x10/0x10 [ 537.969053][T10463] ? fs_reclaim_acquire+0x7d/0x100 [ 537.969068][T10463] should_fail_ex+0x414/0x560 [ 537.969086][T10463] should_failslab+0xa8/0x100 [ 537.969099][T10463] __kmalloc_noprof+0xcb/0x7f0 [ 537.969110][T10463] ? tomoyo_encode+0x28b/0x550 [ 537.969124][T10463] tomoyo_encode+0x28b/0x550 [ 537.969137][T10463] tomoyo_realpath_from_path+0x58d/0x5d0 [ 537.969149][T10463] ? tomoyo_domain+0xd9/0x130 [ 537.969163][T10463] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 537.969177][T10463] tomoyo_path_number_perm+0x1e8/0x5a0 [ 537.969192][T10463] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 537.969225][T10463] ? __fget_files+0x2a/0x420 [ 537.969239][T10463] ? __fget_files+0x3a0/0x420 [ 537.969250][T10463] ? __fget_files+0x2a/0x420 [ 537.969262][T10463] security_file_ioctl+0xcb/0x2d0 [ 537.969278][T10463] __se_sys_ioctl+0x47/0x170 [ 537.969289][T10463] do_syscall_64+0xfa/0xfa0 [ 537.969299][T10463] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.969309][T10463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.969318][T10463] ? clear_bhb_loop+0x60/0xb0 [ 537.969330][T10463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.969341][T10463] RIP: 0033:0x7fa41b78eec9 [ 537.969351][T10463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.969359][T10463] RSP: 002b:00007fa41c656038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.969371][T10463] RAX: ffffffffffffffda RBX: 00007fa41b9e5fa0 RCX: 00007fa41b78eec9 [ 537.969379][T10463] RDX: 0000200000000080 RSI: 00000000000089e1 RDI: 0000000000000003 [ 537.969385][T10463] RBP: 00007fa41c656090 R08: 0000000000000000 R09: 0000000000000000 [ 537.969391][T10463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.969397][T10463] R13: 00007fa41b9e6038 R14: 00007fa41b9e5fa0 R15: 00007fa41bb0fa28 [ 537.969413][T10463] [ 537.969431][T10463] ERROR: Out of memory at tomoyo_realpath_from_path. [ 539.802244][T10479] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.023084][T10483] MPI: mpi too large (130952 bits) [ 540.050834][ T5930] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 540.181129][ T5930] usb 2-1: device descriptor read/64, error -71 [ 540.451391][ T5930] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 540.825115][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 540.903167][ T5930] usb 2-1: device descriptor read/64, error -71 [ 541.011187][ T5930] usb usb2-port1: attempt power cycle [ 541.170786][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 541.290818][ T983] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 541.340815][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 541.351887][ T5930] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 541.362993][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 541.404376][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 541.417151][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 541.429004][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 541.440595][ T5930] usb 2-1: device descriptor read/8, error -71 [ 541.448961][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.493723][ T983] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 541.503044][ T983] usb 1-1: config 0 has no interface number 0 [ 541.509459][ T983] usb 1-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 541.533717][ T10] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 541.555574][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.567573][ T983] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 541.585711][ T10] usb 3-1: Product: syz [ 541.593253][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.598325][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 541.598342][ T30] audit: type=1326 audit(1760249803.887:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10511 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069918eec9 code=0x7ffc0000 [ 541.632716][ T10] usb 3-1: Manufacturer: syz [ 541.637378][ T10] usb 3-1: SerialNumber: syz [ 541.642656][ T983] usb 1-1: Product: syz [ 541.646824][ T983] usb 1-1: Manufacturer: syz [ 541.651876][ T30] audit: type=1326 audit(1760249803.937:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10511 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069918eec9 code=0x7ffc0000 [ 541.674298][ T983] usb 1-1: SerialNumber: syz [ 541.680392][ T30] audit: type=1326 audit(1760249803.937:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10511 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f069918eec9 code=0x7ffc0000 [ 541.681857][ T983] usb 1-1: config 0 descriptor?? [ 541.765997][ T10] usb 3-1: config 0 descriptor?? [ 541.797414][ T983] uvcvideo 1-1:0.160: Found UVC 0.00 device syz (05ac:8501) [ 541.805028][ T5930] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 541.824177][ T983] uvcvideo 1-1:0.160: No valid video chain found. [ 541.826081][ T30] audit: type=1326 audit(1760249804.047:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10511 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069918eec9 code=0x7ffc0000 [ 541.853772][ T30] audit: type=1326 audit(1760249804.047:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10511 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f069918eec9 code=0x7ffc0000 [ 541.877143][ T5930] usb 2-1: device descriptor read/8, error -71 [ 541.877552][ T30] audit: type=1326 audit(1760249804.047:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10511 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069918eec9 code=0x7ffc0000 [ 541.975066][ T30] audit: type=1326 audit(1760249804.047:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10511 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069918eec9 code=0x7ffc0000 [ 542.007075][ T983] usb 1-1: USB disconnect, device number 42 [ 542.034447][ T30] audit: type=1326 audit(1760249804.047:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10511 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f069918eec9 code=0x7ffc0000 [ 542.071142][ T5930] usb usb2-port1: unable to enumerate USB device [ 542.119562][T10514] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 542.132266][T10514] CPU: 0 UID: 0 PID: 10514 Comm: syz.2.1246 Not tainted syzkaller #0 PREEMPT(full) [ 542.132291][T10514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 542.132302][T10514] Call Trace: [ 542.132309][T10514] [ 542.132319][T10514] dump_stack_lvl+0x189/0x250 [ 542.132349][T10514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.132370][T10514] ? __pfx__printk+0x10/0x10 [ 542.132395][T10514] ? __rcu_read_unlock+0x84/0xe0 [ 542.132417][T10514] ? kernfs_path_from_node+0x2f/0x290 [ 542.132434][T10514] ? kernfs_path_from_node+0x250/0x290 [ 542.132449][T10514] ? kernfs_path_from_node+0x2f/0x290 [ 542.132470][T10514] sysfs_warn_dup+0x8e/0xa0 [ 542.132496][T10514] sysfs_do_create_link_sd+0xc0/0x110 [ 542.132526][T10514] device_add_class_symlinks+0x1cf/0x240 [ 542.132553][T10514] device_add+0x475/0xb50 [ 542.132580][T10514] wiphy_register+0x1c81/0x2aa0 [ 542.132618][T10514] ? __pfx_wiphy_register+0x10/0x10 [ 542.132637][T10514] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 542.132669][T10514] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 542.132697][T10514] ieee80211_register_hw+0x3473/0x40d0 [ 542.132738][T10514] ? ieee80211_register_hw+0x1491/0x40d0 [ 542.132773][T10514] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 542.132795][T10514] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 542.132827][T10514] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 542.132849][T10514] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 542.132881][T10514] ? __hrtimer_setup+0x187/0x210 [ 542.132902][T10514] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 542.132923][T10514] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 542.132971][T10514] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 542.132991][T10514] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 542.133007][T10514] ? kstrndup+0xbf/0x160 [ 542.133034][T10514] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 542.133060][T10514] ? __pfx___nla_validate_parse+0x10/0x10 [ 542.133091][T10514] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 542.133119][T10514] ? rcu_is_watching+0x15/0xb0 [ 542.133142][T10514] ? __nla_parse+0x40/0x60 [ 542.133161][T10514] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 542.133185][T10514] genl_family_rcv_msg_doit+0x215/0x300 [ 542.133206][T10514] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 542.133232][T10514] ? bpf_lsm_capable+0x9/0x20 [ 542.133253][T10514] ? security_capable+0x7e/0x2e0 [ 542.133274][T10514] genl_rcv_msg+0x60e/0x790 [ 542.133294][T10514] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.133309][T10514] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 542.133343][T10514] netlink_rcv_skb+0x208/0x470 [ 542.133362][T10514] ? __lock_acquire+0xab9/0xd20 [ 542.133380][T10514] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.133396][T10514] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 542.133434][T10514] ? down_read+0x1ad/0x2e0 [ 542.133452][T10514] genl_rcv+0x28/0x40 [ 542.133465][T10514] netlink_unicast+0x82f/0x9e0 [ 542.133491][T10514] ? __pfx_netlink_unicast+0x10/0x10 [ 542.133511][T10514] ? netlink_sendmsg+0x642/0xb30 [ 542.133528][T10514] ? skb_put+0x11b/0x210 [ 542.133550][T10514] netlink_sendmsg+0x805/0xb30 [ 542.133577][T10514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.133600][T10514] ? aa_sock_msg_perm+0xf1/0x1d0 [ 542.133617][T10514] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 542.133634][T10514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.133654][T10514] __sock_sendmsg+0x21c/0x270 [ 542.133673][T10514] ____sys_sendmsg+0x505/0x830 [ 542.133698][T10514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 542.133727][T10514] ? import_iovec+0x74/0xa0 [ 542.133747][T10514] ___sys_sendmsg+0x21f/0x2a0 [ 542.133770][T10514] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.133796][T10514] ? futex_wake+0x4b2/0x560 [ 542.133822][T10514] ? init_file+0x10d/0x2f0 [ 542.133863][T10514] __x64_sys_sendmsg+0x19b/0x260 [ 542.133879][T10514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 542.133914][T10514] ? do_syscall_64+0xbe/0xfa0 [ 542.133930][T10514] do_syscall_64+0xfa/0xfa0 [ 542.133945][T10514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.133958][T10514] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 542.133971][T10514] ? clear_bhb_loop+0x60/0xb0 [ 542.133988][T10514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.134002][T10514] RIP: 0033:0x7f55e378eec9 [ 542.134016][T10514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.134033][T10514] RSP: 002b:00007f55e46c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.134050][T10514] RAX: ffffffffffffffda RBX: 00007f55e39e6180 RCX: 00007f55e378eec9 [ 542.134061][T10514] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000007 [ 542.134070][T10514] RBP: 00007f55e3811f91 R08: 0000000000000000 R09: 0000000000000000 [ 542.134079][T10514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.134087][T10514] R13: 00007f55e39e6218 R14: 00007f55e39e6180 R15: 00007f55e3b0fa28 [ 542.134113][T10514] [ 542.613963][ T30] audit: type=1326 audit(1760249804.047:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10511 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069918eec9 code=0x7ffc0000 [ 542.637766][ T30] audit: type=1326 audit(1760249804.047:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10511 comm="syz.4.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f069918eec9 code=0x7ffc0000 [ 543.451556][T10514] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1246'. [ 544.130639][T10521] MPI: mpi too large (130952 bits) [ 545.564135][T10541] Cannot find del_set index 2 as target [ 545.857307][T10544] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1257'. [ 545.947551][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 545.981899][ T10] rc_core: IR keymap rc-imon-rsc not found [ 545.988107][ T10] Registered IR keymap rc-empty [ 545.997940][ T10] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 546.027747][ T10] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 546.081530][ T10] usb 3-1: USB disconnect, device number 44 [ 546.471155][ T5879] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 546.618441][T10555] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1260'. [ 546.810758][ T5879] usb 6-1: Using ep0 maxpacket: 16 [ 546.830467][ T5879] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 546.857624][ T5879] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.912293][ T5879] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.958912][ T5879] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 546.977957][ T5879] usb 6-1: config 7 interface 0 has no altsetting 0 [ 547.156353][ T5879] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 547.176727][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.435043][ T5879] usbhid 6-1:7.0: can't add hid device: -71 [ 549.443060][ T5879] usbhid 6-1:7.0: probe with driver usbhid failed with error -71 [ 549.455790][ T5879] usb 6-1: USB disconnect, device number 34 [ 550.160826][ T5879] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 550.187169][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 550.370217][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.385198][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 550.411933][ T5879] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 550.427477][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.460846][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.505615][ T24] usb 3-1: config 0 descriptor?? [ 550.552863][ T5879] usb 2-1: config 0 descriptor?? [ 550.576371][ T5879] cp210x 2-1:0.0: cp210x converter detected [ 550.745471][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 550.752207][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 550.799969][ T24] usb 3-1: USB disconnect, device number 45 [ 551.178770][T10589] vlan3: entered promiscuous mode [ 551.197593][T10589] vlan3: entered allmulticast mode [ 551.241227][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 551.243444][T10589] hsr_slave_1: entered allmulticast mode [ 551.308080][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'. [ 551.471963][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 551.482438][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.493972][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 551.503691][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.527263][ T24] usb 3-1: config 0 descriptor?? [ 551.559815][ T24] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 551.614068][ T24] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 551.773169][ C1] ldusb 3-1:0.0: Ring buffer overflow, 32 bytes dropped [ 551.989512][ T983] usb 3-1: USB disconnect, device number 46 [ 552.032690][ T983] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 552.112959][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 552.332552][ T24] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 552.424970][ T5879] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 552.435296][ T5879] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 552.520955][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 552.526692][ T24] usb 6-1: too many configurations: 224, using maximum allowed: 8 [ 552.535410][ T5879] usb 2-1: cp210x converter now attached to ttyUSB0 [ 552.561751][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 552.580301][ T24] usb 6-1: can't read configurations, error -61 [ 552.587736][ T5879] usb 2-1: USB disconnect, device number 41 [ 552.627043][ T5879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 552.639928][ T5879] cp210x 2-1:0.0: device disconnected [ 552.754233][ T24] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 552.913261][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 552.928502][ T24] usb 6-1: too many configurations: 224, using maximum allowed: 8 [ 552.992315][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 553.000106][ T24] usb 6-1: can't read configurations, error -61 [ 553.007396][ T24] usb usb6-port1: attempt power cycle [ 553.270815][ T5879] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 553.380811][ T24] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 553.402289][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 553.408292][ T24] usb 6-1: too many configurations: 224, using maximum allowed: 8 [ 553.419937][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 553.428722][ T24] usb 6-1: can't read configurations, error -61 [ 553.437984][ T5879] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 553.447610][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.459682][ T5879] usb 1-1: Product: syz [ 553.468951][ T5879] usb 1-1: Manufacturer: syz [ 553.479788][ T5879] usb 1-1: SerialNumber: syz [ 553.497964][ T5879] usb 1-1: config 0 descriptor?? [ 553.631867][ T24] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 553.651399][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 553.657389][ T24] usb 6-1: too many configurations: 224, using maximum allowed: 8 [ 553.667443][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 553.676459][ T24] usb 6-1: can't read configurations, error -61 [ 553.701884][ T24] usb usb6-port1: unable to enumerate USB device [ 555.391883][ T5879] usb 1-1: Firmware version (0.0) predates our first public release. [ 555.670132][ T5879] usb 1-1: Please update to version 0.2 or newer [ 556.205614][ T5879] usb 1-1: USB disconnect, device number 43 [ 556.601734][ T983] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 557.011368][ T983] usb 6-1: Using ep0 maxpacket: 8 [ 557.025419][ T983] usb 6-1: unable to get BOS descriptor or descriptor too short [ 557.034485][ T983] usb 6-1: config 4 interface 0 has no altsetting 0 [ 557.044817][ T983] usb 6-1: string descriptor 0 read error: -22 [ 557.051413][ T983] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 557.164059][T10672] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 557.405740][ T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.483327][ T983] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 557.546462][ T983] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 557.577951][ T983] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 557.672346][ T983] usb 6-1: media controller created [ 557.716413][ T983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 557.884865][T10668] usb 6-1: dvb_usb_au6610: wlen=0, aborting [ 558.801591][ T983] zl10353_read_register: readreg error (reg=127, ret==0) [ 558.945281][ T983] usb 6-1: USB disconnect, device number 39 [ 559.140803][ T5879] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 559.432916][ T5879] usb 5-1: config 255 has too many interfaces: 229, using maximum allowed: 32 [ 559.450796][ T5879] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 559.472512][ T5879] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 229 [ 559.501105][ T5879] usb 5-1: New USB device found, idVendor=1241, idProduct=5038, bcdDevice= 0.00 [ 559.513335][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.794439][ T983] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 559.960808][ T983] usb 6-1: Using ep0 maxpacket: 16 [ 559.972432][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.990841][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.016728][ T983] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 560.147561][T10719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.161503][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 560.184147][ T983] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 560.201220][T10719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.219836][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.232100][T10719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.260634][T10719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.269803][ T983] usb 6-1: config 0 descriptor?? [ 560.321295][T10719] tmpfs: Unknown parameter 'r%Ҵ\wӠR(4;a; [ 560.321295][T10719] MUg6&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn;O훌u [ 560.321295][T10719] ~^>Ƥr&Dq.;쀯<2AU' [ 560.350471][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 560.360035][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 560.374455][ T10] usb 3-1: config 1 has no interface number 1 [ 560.403532][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 560.441767][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 560.466501][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.485187][ T10] usb 3-1: Product: syz [ 560.503547][ T10] usb 3-1: Manufacturer: syz [ 560.514843][ T10] usb 3-1: SerialNumber: syz [ 560.759502][T10725] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1306'. [ 560.785955][ T983] HID 045e:07da: Invalid code 65791 type 1 [ 560.842093][ T983] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0009/input/input37 [ 560.882846][T10727] loop2: detected capacity change from 0 to 7 [ 560.915772][T10727] Dev loop2: unable to read RDB block 7 [ 560.923205][T10727] loop2: unable to read partition table [ 560.954134][T10727] loop2: partition table beyond EOD, truncated [ 560.965140][ T983] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 561.023838][T10728] IPv6: Can't replace route, no match found [ 561.069013][T10727] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 561.292371][ T983] usb 6-1: USB disconnect, device number 40 [ 561.456154][T10729] fido_id[10729]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 561.606783][T10725] syz.0.1306 (10725): drop_caches: 2 [ 561.680615][T10731] loop5: detected capacity change from 0 to 7 [ 561.689349][T10731] Dev loop5: unable to read RDB block 7 [ 561.696527][T10731] loop5: unable to read partition table [ 561.706801][T10731] loop5: partition table beyond EOD, truncated [ 561.713251][T10731] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 561.822893][ T5879] usb 5-1: USB disconnect, device number 40 [ 561.994001][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a58fc00: rx timeout, send abort [ 562.005467][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a58f400: rx timeout, send abort [ 562.017155][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a58fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 562.032065][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a58f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 563.099164][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.105916][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.171370][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 563.526021][ T10] usb 3-1: USB disconnect, device number 47 [ 563.856514][ T6431] udevd[6431]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.962135][T10766] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1317'. [ 565.130817][ T5930] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 565.310795][ T5930] usb 5-1: device descriptor read/64, error -71 [ 565.558315][ T5930] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 565.851494][T10798] fuse: Bad value for 'group_id' [ 565.856586][T10798] fuse: Bad value for 'group_id' [ 565.881056][ T5930] usb 5-1: device descriptor read/64, error -71 [ 566.409668][ T5930] usb usb5-port1: attempt power cycle [ 566.790003][ T5930] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 566.842741][ T5930] usb 5-1: device descriptor read/8, error -71 [ 567.091340][ T5930] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 567.111583][ T5930] usb 5-1: device descriptor read/8, error -71 [ 567.221209][ T5930] usb usb5-port1: unable to enumerate USB device [ 567.746185][T10827] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 567.791486][T10827] bond1: (slave vcan1): Error -95 calling set_mac_address [ 568.143568][T10833] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1339'. [ 568.154518][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'. [ 568.325638][T10836] team_slave_0: entered promiscuous mode [ 568.331896][T10836] team_slave_1: entered promiscuous mode [ 568.399643][T10836] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 568.483514][T10842] syz.4.1343 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 568.620868][ T5879] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 568.630854][ T5956] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 568.781822][ T5956] usb 1-1: Using ep0 maxpacket: 16 [ 568.790296][ T5879] usb 2-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 568.817196][ T5956] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 568.849813][ T5879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.859305][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 568.876590][ T5879] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 568.896493][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 568.908537][ T5879] usb 2-1: SerialNumber: syz [ 568.914344][ T5956] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 568.925736][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.939544][ T5879] usb 2-1: invalid UAC_HEADER (v1) [ 568.951658][ T5956] usb 1-1: Product: syz [ 568.956301][ T5956] usb 1-1: Manufacturer: syz [ 568.963950][ T5956] usb 1-1: SerialNumber: syz [ 568.976115][ T5879] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 569.005920][ T5956] usb 1-1: config 0 descriptor?? [ 569.184989][ T6431] udevd[6431]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.215579][ T5956] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 569.226548][ T5956] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 569.413914][T10855] loop5: detected capacity change from 0 to 7 [ 569.423556][ T6431] Dev loop5: unable to read RDB block 7 [ 569.429262][ T6431] loop5: unable to read partition table [ 569.476163][ T6431] loop5: partition table beyond EOD, truncated [ 569.517433][T10855] Dev loop5: unable to read RDB block 7 [ 569.527692][T10855] loop5: unable to read partition table [ 569.540647][T10855] loop5: partition table beyond EOD, truncated [ 569.573338][T10855] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 569.705186][ T5956] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 569.712327][ T5956] em28xx 1-1:0.0: Config register raw data: 0x97 [ 569.822900][T10858] vlan2: entered promiscuous mode [ 569.840275][T10858] bond0: entered promiscuous mode [ 569.859506][T10858] bond_slave_0: entered promiscuous mode [ 569.878600][T10858] bond_slave_1: entered promiscuous mode [ 569.926549][ T5956] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 569.937274][ T5956] em28xx 1-1:0.0: No AC97 audio processor [ 569.985508][ T5956] usb 1-1: USB disconnect, device number 44 [ 570.002907][ T5956] em28xx 1-1:0.0: Disconnecting em28xx [ 570.025633][ T5956] em28xx 1-1:0.0: Freeing device [ 570.581158][ T5930] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 570.660984][ T5879] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 570.778266][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 570.810485][ T5930] usb 3-1: config 0 has no interfaces? [ 570.821992][ T5879] usb 6-1: not running at top speed; connect to a high speed hub [ 570.833469][ T5879] usb 6-1: config 1 has an invalid interface number: 78 but max is 0 [ 570.842398][ T5879] usb 6-1: config 1 has no interface number 0 [ 570.854460][ T5879] usb 6-1: config 1 interface 78 has no altsetting 0 [ 570.873985][ T5930] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 570.890187][ T5879] usb 6-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 570.900586][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.912778][ T5930] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 570.923633][ T5879] usb 6-1: Product: syz [ 570.941992][ T5879] usb 6-1: Manufacturer: syz [ 570.972751][ T5930] usb 3-1: Manufacturer: syz [ 570.977653][ T5879] usb 6-1: SerialNumber: syz [ 570.986828][ T5930] usb 3-1: config 0 descriptor?? [ 571.152246][ T5956] usb 2-1: USB disconnect, device number 42 [ 571.390321][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 572.110919][ T5930] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 572.344224][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 572.372945][ T5930] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 572.390353][ T5930] usb 2-1: config 1 has no interface number 1 [ 572.407588][ T5930] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 572.445180][ T5930] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 572.454762][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.467975][ T5930] usb 2-1: Product: syz [ 572.477889][ T5930] usb 2-1: Manufacturer: syz [ 572.487298][ T5930] usb 2-1: SerialNumber: syz [ 572.847606][T10900] FAULT_INJECTION: forcing a failure. [ 572.847606][T10900] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 572.912349][T10900] CPU: 1 UID: 0 PID: 10900 Comm: syz.0.1359 Not tainted syzkaller #0 PREEMPT(full) [ 572.912375][T10900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 572.912385][T10900] Call Trace: [ 572.912393][T10900] [ 572.912401][T10900] dump_stack_lvl+0x189/0x250 [ 572.912424][T10900] ? __pfx____ratelimit+0x10/0x10 [ 572.912450][T10900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 572.912467][T10900] ? __pfx__printk+0x10/0x10 [ 572.912486][T10900] ? fs_reclaim_acquire+0x7d/0x100 [ 572.912512][T10900] should_fail_ex+0x414/0x560 [ 572.912542][T10900] prepare_alloc_pages+0x213/0x610 [ 572.912570][T10900] __alloc_frozen_pages_noprof+0x123/0x370 [ 572.912593][T10900] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 572.912616][T10900] ? __lock_acquire+0xab9/0xd20 [ 572.912639][T10900] ? policy_nodemask+0x27c/0x720 [ 572.912661][T10900] alloc_pages_mpol+0x232/0x4a0 [ 572.912687][T10900] alloc_pages_noprof+0xa9/0x190 [ 572.912710][T10900] pte_alloc_one+0x23/0x310 [ 572.912733][T10900] ? __pte_alloc+0x1d/0x1a0 [ 572.912755][T10900] __pte_alloc+0x25/0x1a0 [ 572.912777][T10900] __handle_mm_fault+0x4985/0x5400 [ 572.912810][T10900] ? __pfx___handle_mm_fault+0x10/0x10 [ 572.912847][T10900] ? find_vma+0xe7/0x160 [ 572.912864][T10900] ? __pfx_find_vma+0x10/0x10 [ 572.912884][T10900] handle_mm_fault+0x40a/0x8e0 [ 572.912913][T10900] do_user_addr_fault+0x764/0x1380 [ 572.912952][T10900] exc_page_fault+0x82/0x100 [ 572.912973][T10900] asm_exc_page_fault+0x26/0x30 [ 572.912990][T10900] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 572.913013][T10900] Code: 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 35 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 572.913028][T10900] RSP: 0018:ffffc90003eff918 EFLAGS: 00050202 [ 572.913046][T10900] RAX: 00007ffffffff001 RBX: 0000000000000078 RCX: 0000000000000078 [ 572.913058][T10900] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffc90003eff980 [ 572.913070][T10900] RBP: ffffc90003effa70 R08: ffffc90003eff9f7 R09: 1ffff920007dff3e [ 572.913083][T10900] R10: dffffc0000000000 R11: fffff520007dff3f R12: 00002000000000c0 [ 572.913095][T10900] R13: 0000000000000000 R14: ffffc90003eff980 R15: 00002000000000c0 [ 572.913125][T10900] _copy_from_user+0x7a/0xb0 [ 572.913150][T10900] update_counters+0xe3/0x1b0 [ 572.913176][T10900] ? __pfx_update_counters+0x10/0x10 [ 572.913209][T10900] ? bpf_lsm_capable+0x9/0x20 [ 572.913225][T10900] ? security_capable+0x7e/0x2e0 [ 572.913251][T10900] do_ebt_set_ctl+0x17d/0xb60 [ 572.913376][T10900] ? __pfx___mutex_trylock_common+0x10/0x10 [ 572.913452][T10900] ? __local_bh_enable_ip+0x12d/0x1c0 [ 572.913483][T10900] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 572.913509][T10900] ? rcu_is_watching+0x15/0xb0 [ 572.913532][T10900] ? trace_contention_end+0x39/0x120 [ 572.913563][T10900] ? nf_setsockopt+0x221/0x290 [ 572.913588][T10900] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 572.913613][T10900] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 572.913635][T10900] ? __pfx___mutex_lock+0x10/0x10 [ 572.913665][T10900] nf_setsockopt+0x26f/0x290 [ 572.913686][T10900] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 572.913706][T10900] smc_setsockopt+0x232/0xab0 [ 572.913720][T10900] ? __pfx_smc_setsockopt+0x10/0x10 [ 572.913729][T10900] ? aa_sock_opt_perm+0xff/0x1b0 [ 572.913743][T10900] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 572.913754][T10900] ? __pfx_smc_setsockopt+0x10/0x10 [ 572.913771][T10900] do_sock_setsockopt+0x17c/0x1b0 [ 572.913801][T10900] __x64_sys_setsockopt+0x13f/0x1b0 [ 572.913831][T10900] do_syscall_64+0xfa/0xfa0 [ 572.913847][T10900] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.913858][T10900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.913868][T10900] ? clear_bhb_loop+0x60/0xb0 [ 572.913880][T10900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.913889][T10900] RIP: 0033:0x7f221d58eec9 [ 572.913899][T10900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.913907][T10900] RSP: 002b:00007f221e3ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 572.913922][T10900] RAX: ffffffffffffffda RBX: 00007f221d7e5fa0 RCX: 00007f221d58eec9 [ 572.913939][T10900] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 572.913949][T10900] RBP: 00007f221e3ac090 R08: 0000000000000088 R09: 0000000000000000 [ 572.913961][T10900] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 572.913972][T10900] R13: 00007f221d7e6038 R14: 00007f221d7e5fa0 R15: 00007f221d90fa28 [ 572.914003][T10900] [ 573.757112][ T5956] usb 3-1: USB disconnect, device number 48 [ 574.154603][ T5879] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 574.176518][ T5879] usb 6-1: selecting invalid altsetting 0 [ 574.189103][ T2345] pvrusb2: Invalid write control endpoint [ 574.208025][ T5879] usb 6-1: USB disconnect, device number 41 [ 574.226861][T10910] tipc: Enabling of bearer rejected, failed to enable media [ 574.497217][ T2345] pvrusb2: Invalid write control endpoint [ 574.805522][ T2345] pvrusb2: Invalid write control endpoint [ 574.815246][ T2345] pvrusb2: Invalid write control endpoint [ 574.833092][ T2345] pvrusb2: Invalid write control endpoint [ 574.839213][ T2345] pvrusb2: Invalid write control endpoint [ 574.867149][ T2345] pvrusb2: Invalid write control endpoint [ 574.910907][ T2345] pvrusb2: Invalid write control endpoint [ 574.916964][ T2345] pvrusb2: Invalid write control endpoint [ 575.011846][ T2345] pvrusb2: Invalid write control endpoint [ 575.017681][ T2345] pvrusb2: Invalid write control endpoint [ 575.035728][ T2345] pvrusb2: Invalid write control endpoint [ 575.042815][ T5930] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 575.049995][ T2345] pvrusb2: Invalid write control endpoint [ 575.094100][ T5930] usb 2-1: USB disconnect, device number 43 [ 575.101373][ T2345] pvrusb2: Invalid write control endpoint [ 575.119275][ T2345] pvrusb2: Invalid write control endpoint [ 575.161520][ T2345] pvrusb2: Invalid write control endpoint [ 575.180379][ T2345] pvrusb2: Invalid write control endpoint [ 575.188920][ T6431] udevd[6431]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.209757][ T2345] pvrusb2: Invalid write control endpoint [ 575.235710][T10925] binder: 10919:10925 ioctl 4040942c 200000000300 returned -22 [ 575.252417][ T2345] pvrusb2: Invalid write control endpoint [ 575.298974][ T2345] pvrusb2: Invalid write control endpoint [ 575.391036][ T2345] pvrusb2: Invalid write control endpoint [ 575.476700][ T2345] pvrusb2: Invalid write control endpoint [ 575.850335][ T5930] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 575.900863][ T2345] pvrusb2: Invalid write control endpoint [ 575.930834][ T2345] pvrusb2: Invalid write control endpoint [ 575.941547][ T2345] pvrusb2: Invalid write control endpoint [ 575.974220][ T2345] pvrusb2: Invalid write control endpoint [ 576.021014][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 576.048154][ T2345] pvrusb2: Invalid write control endpoint [ 576.054149][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 576.070287][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 576.100881][ T2345] pvrusb2: Invalid write control endpoint [ 576.147560][ T2345] pvrusb2: Invalid write control endpoint [ 576.190832][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 576.202559][ T2345] pvrusb2: Invalid write control endpoint [ 576.208756][ T2345] pvrusb2: Invalid write control endpoint [ 576.218282][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 576.231910][ T2345] pvrusb2: Invalid write control endpoint [ 576.250884][ T2345] pvrusb2: Invalid write control endpoint [ 576.310753][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.332473][ T2345] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 576.371919][ T5930] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 576.470193][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.490468][ T5930] usb 2-1: Product: syz [ 576.497588][ T5930] usb 2-1: Manufacturer: syz [ 576.506730][ T5930] usb 2-1: SerialNumber: syz [ 576.536547][ T5930] usb 2-1: config 0 descriptor?? [ 576.652201][ T2345] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 576.691507][ T2345] pvrusb2: Invalid write control endpoint [ 576.697271][ T2345] pvrusb2: Invalid write control endpoint [ 576.715059][ T2345] pvrusb2: Invalid write control endpoint [ 576.724055][ T2345] pvrusb2: Invalid write control endpoint [ 576.730153][ T2345] pvrusb2: Invalid write control endpoint [ 576.736523][ T2345] pvrusb2: Invalid write control endpoint [ 576.756624][ T2345] pvrusb2: Invalid write control endpoint [ 576.808275][ T2345] pvrusb2: Invalid write control endpoint [ 576.859003][ T2345] pvrusb2: Invalid write control endpoint [ 576.884672][T10942] debugfs: '!' already exists in 'ieee80211' [ 576.976521][ T2345] pvrusb2: Invalid write control endpoint [ 576.995618][ T2345] pvrusb2: Invalid write control endpoint [ 577.030889][ T2345] pvrusb2: Invalid write control endpoint [ 577.050769][ T2345] pvrusb2: Invalid write control endpoint [ 577.072846][ T2345] pvrusb2: Invalid write control endpoint [ 577.229232][ T2345] pvrusb2: Invalid write control endpoint [ 577.238712][ T2345] pvrusb2: Invalid write control endpoint [ 577.245622][ T2345] pvrusb2: Invalid write control endpoint [ 577.253207][ T2345] pvrusb2: Invalid write control endpoint [ 577.259120][ T2345] pvrusb2: Invalid write control endpoint [ 577.266075][ T2345] pvrusb2: Invalid write control endpoint [ 577.530799][ T2345] pvrusb2: Invalid write control endpoint [ 577.561112][ T2345] pvrusb2: Attached sub-driver cs53l32a [ 578.101303][ T2345] pvrusb2: Invalid write control endpoint [ 578.108834][ T2345] pvrusb2: Invalid write control endpoint [ 578.114876][ T2345] pvrusb2: Invalid write control endpoint [ 578.125497][ T2345] pvrusb2: Invalid write control endpoint [ 578.191571][ T983] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 578.227872][ T2345] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 578.263177][ T2345] pvrusb2: Device being rendered inoperable [ 578.279672][ T2345] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 578.310205][ T2345] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 578.543236][ T983] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.610158][ T983] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 578.619413][ T983] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 578.706087][T10964] syzkaller0: entered promiscuous mode [ 578.711962][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.719640][T10964] syzkaller0: entered allmulticast mode [ 578.744293][T10966] binder: 10963:10966 ioctl 4068aea3 2000000004c0 returned -22 [ 578.764294][ T5879] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 578.778215][T10967] binder: 10963:10967 ioctl 4068aea3 2000000004c0 returned -22 [ 578.804222][ T983] usb 3-1: config 0 descriptor?? [ 579.191074][ T5930] rc_core: IR keymap rc-imon-rsc not found [ 579.216939][T10955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.229120][ T5930] Registered IR keymap rc-empty [ 579.248516][ T5930] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 579.269070][T10955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.299445][ T5879] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 579.317240][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 579.339247][ T5930] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input38 [ 579.359800][ T5879] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 579.396068][ T5930] usb 2-1: USB disconnect, device number 44 [ 579.413961][ T24] usb 3-1: USB disconnect, device number 49 [ 579.450157][ T5879] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 579.476366][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.643133][T10953] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 579.670534][ T5879] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 579.919410][T10953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.930897][T10953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.165591][T10953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.202924][T10953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.218358][ T30] kauditd_printk_skb: 469 callbacks suppressed [ 580.218376][ T30] audit: type=1326 audit(1760249842.447:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10947 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b78eec9 code=0x7ffc0000 [ 580.683745][T10986] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 580.805681][ T30] audit: type=1326 audit(1760249842.447:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10947 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa41b78d710 code=0x7ffc0000 [ 581.042485][ T30] audit: type=1326 audit(1760249842.457:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10947 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa41b78eacb code=0x7ffc0000 [ 581.115491][ T30] audit: type=1326 audit(1760249842.457:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10947 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa41b78eacb code=0x7ffc0000 [ 581.314567][ T30] audit: type=1326 audit(1760249842.977:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10947 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b78eec9 code=0x7ffc0000 [ 581.489855][ T30] audit: type=1326 audit(1760249842.977:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10947 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b78eec9 code=0x7ffc0000 [ 581.651082][ T30] audit: type=1326 audit(1760249842.987:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10947 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fa41b78eec9 code=0x7ffc0000 [ 581.861787][ T30] audit: type=1326 audit(1760249842.987:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10947 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b78eec9 code=0x7ffc0000 [ 582.340852][ T30] audit: type=1326 audit(1760249842.987:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10947 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b78eec9 code=0x7ffc0000 [ 582.742154][ T5930] usb 6-1: USB disconnect, device number 42 [ 582.929611][T11018] vlan3: entered promiscuous mode [ 583.161015][ T983] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 583.278326][T11028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1393'. [ 583.775373][ T983] usb 1-1: Using ep0 maxpacket: 32 [ 583.782764][ T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.794475][ T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.812185][ T983] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 583.834314][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.847413][ T983] usb 1-1: config 0 descriptor?? [ 584.231365][ T5930] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 584.260650][T11021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.293451][T11021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.387379][T11021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.397395][T11021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.410345][ T5930] usb 5-1: unable to get BOS descriptor or descriptor too short [ 584.419635][ T5930] usb 5-1: config 250 has an invalid interface number: 150 but max is 0 [ 584.449846][ T5930] usb 5-1: config 250 has no interface number 0 [ 584.501330][ T5930] usb 5-1: config 250 interface 150 has no altsetting 0 [ 584.528688][T11048] loop4: detected capacity change from 0 to 7 [ 584.539754][ T5930] usb 5-1: New USB device found, idVendor=1b71, idProduct=3002, bcdDevice=43.a2 [ 584.550244][ T5930] usb 5-1: New USB device strings: Mfr=175, Product=87, SerialNumber=3 [ 584.565128][ T5930] usb 5-1: Product: syz [ 584.574401][ T5930] usb 5-1: Manufacturer: syz [ 584.586669][ T5930] usb 5-1: SerialNumber: syz [ 584.598006][T11048] Dev loop4: unable to read RDB block 7 [ 584.622140][T11048] loop4: unable to read partition table [ 584.635496][T11048] loop4: partition table beyond EOD, truncated [ 584.647826][T11048] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 584.816856][T11021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.837058][T11021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.857656][ T983] usbhid 1-1:0.0: can't add hid device: -71 [ 584.863922][ T90] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 584.872223][ T983] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 584.890266][ T983] usb 1-1: USB disconnect, device number 45 [ 584.948623][T11038] macvtap2: entered allmulticast mode [ 585.050647][ T5930] usb 5-1: USB disconnect, device number 45 [ 585.144188][ T90] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 585.171391][ T90] usb 2-1: config 0 has no interface number 0 [ 585.177566][ T90] usb 2-1: config 0 interface 47 altsetting 252 has an endpoint descriptor with address 0x2D, changing to 0xD [ 585.212263][ T90] usb 2-1: config 0 interface 47 altsetting 252 bulk endpoint 0xD has invalid maxpacket 8 [ 585.223230][ T90] usb 2-1: config 0 interface 47 altsetting 252 bulk endpoint 0x1 has invalid maxpacket 8 [ 585.234273][ T90] usb 2-1: config 0 interface 47 altsetting 252 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 585.250978][ T90] usb 2-1: config 0 interface 47 has no altsetting 0 [ 585.257793][ T90] usb 2-1: New USB device found, idVendor=7d15, idProduct=31b2, bcdDevice=57.4b [ 585.266916][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.281447][ T90] usb 2-1: config 0 descriptor?? [ 585.301485][T11049] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 585.308960][T11049] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 585.323620][ T90] usb-storage 2-1:0.47: USB Mass Storage device detected [ 585.420875][ T5879] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 585.521076][ T5956] usb 2-1: USB disconnect, device number 45 [ 585.622179][ T5879] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 585.650772][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.705624][ T5879] usb 6-1: config 0 descriptor?? [ 585.723130][ T5879] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 585.734011][T11066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1406'. [ 586.081707][T11055] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1403'. [ 586.122322][T11055] program syz.5.1403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 586.640487][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1412'. [ 586.885350][ T5879] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 586.916387][ T5879] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 587.480825][ T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 587.583622][ T5879] usb 6-1: USB disconnect, device number 43 [ 587.638310][T11106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.660835][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 587.675321][ T24] usb 1-1: config 250 has an invalid interface number: 150 but max is 0 [ 587.686075][ T24] usb 1-1: config 250 has no interface number 0 [ 587.699942][ T24] usb 1-1: config 250 interface 150 has no altsetting 0 [ 587.736601][ T24] usb 1-1: New USB device found, idVendor=1b71, idProduct=3002, bcdDevice=43.a2 [ 587.755069][ T24] usb 1-1: New USB device strings: Mfr=175, Product=87, SerialNumber=3 [ 587.764142][ T24] usb 1-1: Product: syz [ 587.768349][ T24] usb 1-1: Manufacturer: syz [ 587.774505][ T24] usb 1-1: SerialNumber: syz [ 587.798466][T11110] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1417'. [ 587.808142][T11110] openvswitch: netlink: Message has 512 unknown bytes. [ 587.863367][T11112] Cannot find del_set index 2 as target [ 588.007134][T11099] macvtap3: entered allmulticast mode [ 588.022685][ T24] usb 1-1: USB disconnect, device number 46 [ 588.299314][T11119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1422'. [ 588.590921][ T5930] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 588.775048][T11126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1425'. [ 588.796357][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 588.804228][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1425'. [ 588.822350][ T5930] usb 2-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 588.834538][ T5930] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 588.931731][ T5930] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 588.942276][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.956195][ T5930] usb 2-1: Product: syz [ 588.960501][ T5930] usb 2-1: Manufacturer: syz [ 588.997684][ T5930] usb 2-1: SerialNumber: syz [ 589.059785][ T5930] usb 2-1: config 0 descriptor?? [ 589.697772][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'. [ 590.147464][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 590.156768][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 590.305253][T11141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.316573][T11141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.503835][T11140] veth0_macvtap (unregistering): left allmulticast mode [ 591.988808][ T90] usb 2-1: USB disconnect, device number 46 [ 592.010854][ T5879] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 592.078123][T11165] netlink: 'syz.1.1434': attribute type 7 has an invalid length. [ 592.191265][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 592.229994][ T5879] usb 1-1: config 0 has no interfaces? [ 592.240386][ T5879] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 592.251039][ T5879] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 592.259530][ T5879] usb 1-1: Manufacturer: syz [ 592.291385][ T5879] usb 1-1: config 0 descriptor?? [ 592.513126][T11179] FAULT_INJECTION: forcing a failure. [ 592.513126][T11179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.717480][T11179] CPU: 1 UID: 0 PID: 11179 Comm: syz.5.1438 Not tainted syzkaller #0 PREEMPT(full) [ 592.717507][T11179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 592.717517][T11179] Call Trace: [ 592.717523][T11179] [ 592.717528][T11179] dump_stack_lvl+0x189/0x250 [ 592.717545][T11179] ? __pfx____ratelimit+0x10/0x10 [ 592.717560][T11179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.717571][T11179] ? __pfx__printk+0x10/0x10 [ 592.717581][T11179] ? __might_fault+0xb0/0x130 [ 592.717597][T11179] should_fail_ex+0x414/0x560 [ 592.717615][T11179] _copy_from_user+0x2d/0xb0 [ 592.717629][T11179] smc_setsockopt+0x3b8/0xab0 [ 592.717643][T11179] ? __pfx_smc_setsockopt+0x10/0x10 [ 592.717652][T11179] ? aa_sock_opt_perm+0xff/0x1b0 [ 592.717666][T11179] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 592.717681][T11179] ? __pfx_smc_setsockopt+0x10/0x10 [ 592.717691][T11179] do_sock_setsockopt+0x17c/0x1b0 [ 592.717709][T11179] __x64_sys_setsockopt+0x13f/0x1b0 [ 592.717725][T11179] do_syscall_64+0xfa/0xfa0 [ 592.717734][T11179] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.717744][T11179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.717753][T11179] ? clear_bhb_loop+0x60/0xb0 [ 592.717765][T11179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.717774][T11179] RIP: 0033:0x7fa41b78eec9 [ 592.717785][T11179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.717794][T11179] RSP: 002b:00007fa41c656038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 592.717806][T11179] RAX: ffffffffffffffda RBX: 00007fa41b9e5fa0 RCX: 00007fa41b78eec9 [ 592.717813][T11179] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 592.717819][T11179] RBP: 00007fa41c656090 R08: 0000000000000088 R09: 0000000000000000 [ 592.717825][T11179] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 592.717831][T11179] R13: 00007fa41b9e6038 R14: 00007fa41b9e5fa0 R15: 00007fa41bb0fa28 [ 592.717847][T11179] [ 592.917948][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.973711][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'. [ 593.150057][T11190] fuse: Bad value for 'fd' [ 593.329895][T11199] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1445'. [ 594.503468][ T5879] usb 1-1: USB disconnect, device number 47 [ 595.176171][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 595.726475][T11246] fuse: Bad value for 'fd' [ 595.933717][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1460'. [ 595.947391][T11255] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1458'. [ 596.134545][T11265] vivid-003: ================= START STATUS ================= [ 596.147347][T11265] vivid-003: Radio HW Seek Mode: Bounded [ 596.154737][T11265] vivid-003: Radio Programmable HW Seek: false [ 596.161242][T11265] vivid-003: RDS Rx I/O Mode: Block I/O [ 596.166962][T11265] vivid-003: Generate RBDS Instead of RDS: false [ 596.174078][T11265] vivid-003: RDS Reception: true [ 596.179191][T11265] vivid-003: RDS Program Type: 0 inactive [ 596.186644][T11265] vivid-003: RDS PS Name: inactive [ 596.192696][T11265] vivid-003: RDS Radio Text: inactive [ 596.198567][T11265] vivid-003: RDS Traffic Announcement: false inactive [ 596.205983][T11265] vivid-003: RDS Traffic Program: false inactive [ 596.213319][T11265] vivid-003: RDS Music: false inactive [ 596.219042][T11265] vivid-003: ================== END STATUS ================== [ 596.233717][ T5879] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 596.592962][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 596.613499][ T5879] usb 6-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 596.626698][ T5879] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 596.642139][ T5879] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 596.651508][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.659509][ T5879] usb 6-1: Product: syz [ 596.665781][ T5879] usb 6-1: Manufacturer: syz [ 596.671612][ T5879] usb 6-1: SerialNumber: syz [ 596.682995][ T5879] usb 6-1: config 0 descriptor?? [ 596.919496][T11255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.929066][T11255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.945576][ T5956] usb 6-1: USB disconnect, device number 44 [ 597.121889][T11285] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1468'. [ 598.051577][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1480'. [ 598.694714][T11336] netlink: 'syz.2.1482': attribute type 8 has an invalid length. [ 598.770276][T11338] FAULT_INJECTION: forcing a failure. [ 598.770276][T11338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.910587][T11338] CPU: 1 UID: 0 PID: 11338 Comm: syz.0.1484 Not tainted syzkaller #0 PREEMPT(full) [ 598.910605][T11338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 598.910612][T11338] Call Trace: [ 598.910617][T11338] [ 598.910622][T11338] dump_stack_lvl+0x189/0x250 [ 598.910638][T11338] ? __pfx____ratelimit+0x10/0x10 [ 598.910653][T11338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.910669][T11338] ? __pfx__printk+0x10/0x10 [ 598.910696][T11338] should_fail_ex+0x414/0x560 [ 598.910723][T11338] _copy_to_user+0x31/0xb0 [ 598.910747][T11338] simple_read_from_buffer+0xe1/0x170 [ 598.910776][T11338] proc_fail_nth_read+0x1b3/0x220 [ 598.910793][T11338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.910809][T11338] ? rw_verify_area+0x2a6/0x4d0 [ 598.910818][T11338] ? __lock_acquire+0xab9/0xd20 [ 598.910830][T11338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.910845][T11338] vfs_read+0x200/0xa30 [ 598.910855][T11338] ? fdget_pos+0x247/0x320 [ 598.910868][T11338] ? __pfx___mutex_lock+0x10/0x10 [ 598.910879][T11338] ? __pfx_vfs_read+0x10/0x10 [ 598.910890][T11338] ? __fget_files+0x2a/0x420 [ 598.910903][T11338] ? __fget_files+0x3a0/0x420 [ 598.910913][T11338] ? __fget_files+0x2a/0x420 [ 598.910929][T11338] ksys_read+0x145/0x250 [ 598.910941][T11338] ? __pfx_ksys_read+0x10/0x10 [ 598.910953][T11338] ? do_syscall_64+0xbe/0xfa0 [ 598.910964][T11338] do_syscall_64+0xfa/0xfa0 [ 598.910973][T11338] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.910983][T11338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.910992][T11338] ? clear_bhb_loop+0x60/0xb0 [ 598.911004][T11338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.911013][T11338] RIP: 0033:0x7f221d58d8dc [ 598.911024][T11338] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 598.911032][T11338] RSP: 002b:00007f221e3ac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 598.911043][T11338] RAX: ffffffffffffffda RBX: 00007f221d7e5fa0 RCX: 00007f221d58d8dc [ 598.911051][T11338] RDX: 000000000000000f RSI: 00007f221e3ac0a0 RDI: 0000000000000004 [ 598.911057][T11338] RBP: 00007f221e3ac090 R08: 0000000000000000 R09: 0000000000000000 [ 598.911063][T11338] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 598.911069][T11338] R13: 00007f221d7e6038 R14: 00007f221d7e5fa0 R15: 00007f221d90fa28 [ 598.911085][T11338] [ 600.713681][T11352] program syz.0.1488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.764904][T11354] program syz.0.1488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.781205][T11355] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1489'. [ 601.407469][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1496'. [ 601.620890][ T48] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 601.726561][T11381] binder: 11380:11381 ioctl 4018620d 0 returned -22 [ 601.733471][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 601.745379][T11381] binder: 11380:11381 ioctl 4040942c 0 returned -22 [ 601.781390][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 601.858117][ T48] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 601.911490][ T48] usb 5-1: config 0 has no interface number 0 [ 601.941904][ T48] usb 5-1: config 0 interface 89 has no altsetting 0 [ 601.978536][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 602.132776][ T48] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 602.142243][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.150328][ T48] usb 5-1: Product: syz [ 602.159232][ T48] usb 5-1: Manufacturer: syz [ 602.169454][ T48] usb 5-1: SerialNumber: syz [ 602.196261][ T48] usb 5-1: config 0 descriptor?? [ 602.206545][ T10] usb 1-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 602.228599][ T48] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 602.257617][ T48] em28xx 5-1:0.89: Video interface 89 found: bulk [ 602.260755][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 602.419759][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 602.431720][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.439757][ T10] usb 1-1: Product: syz [ 602.444611][ T10] usb 1-1: Manufacturer: syz [ 602.449678][ T10] usb 1-1: SerialNumber: syz [ 602.547746][ T10] usb 1-1: config 0 descriptor?? [ 602.686778][ T48] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 603.023873][T11389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1499'. [ 603.085134][T11372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.102113][T11372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.136719][ T48] em28xx 5-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 603.146556][ T48] em28xx 5-1:0.89: board has no eeprom [ 603.401648][T11394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1501'. [ 603.676033][ T48] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 603.724661][ T48] em28xx 5-1:0.89: analog set to bulk mode. [ 603.731721][ T5956] em28xx 5-1:0.89: Registering V4L2 extension [ 603.804872][ T5956] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 604.027592][ T48] usb 5-1: USB disconnect, device number 46 [ 604.115635][ T48] em28xx 5-1:0.89: Disconnecting em28xx [ 604.122496][ T5956] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 604.133004][ T5956] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 604.150459][ T5956] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 604.160659][ T5956] em28xx 5-1:0.89: No AC97 audio processor [ 604.216851][ T5956] usb 5-1: Decoder not found [ 604.349037][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'. [ 604.391066][T11411] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1505'. [ 604.570762][ T5956] em28xx 5-1:0.89: failed to create media graph [ 604.708925][T11414] xt_hashlimit: max too large, truncated to 1048576 [ 604.720930][ T5956] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 604.725040][ T90] usb 1-1: USB disconnect, device number 48 [ 604.739438][ T5956] em28xx 5-1:0.89: Registering snapshot button... [ 604.747395][T11412] ================================================================== [ 604.755688][T11412] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 604.759943][ T5956] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input39 [ 604.763511][T11412] Read of size 8 at addr ffff8880590c4740 by task v4l_id/11412 [ 604.763530][T11412] [ 604.763542][T11412] CPU: 0 UID: 0 PID: 11412 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 604.763559][T11412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 604.763568][T11412] Call Trace: [ 604.763576][T11412] [ 604.763583][T11412] dump_stack_lvl+0x189/0x250 [ 604.763604][T11412] ? __virt_addr_valid+0x1c8/0x5c0 [ 604.763621][T11412] ? rcu_is_watching+0x15/0xb0 [ 604.763645][T11412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.763662][T11412] ? rcu_is_watching+0x15/0xb0 [ 604.763683][T11412] ? lock_release+0x4b/0x3e0 [ 604.763703][T11412] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 604.763725][T11412] ? __virt_addr_valid+0x1c8/0x5c0 [ 604.763742][T11412] ? __virt_addr_valid+0x4a5/0x5c0 [ 604.763758][T11412] print_report+0xca/0x240 [ 604.763778][T11412] ? v4l2_fh_open+0xac/0x420 [ 604.763793][T11412] kasan_report+0x118/0x150 [ 604.763813][T11412] ? v4l2_fh_open+0xac/0x420 [ 604.763831][T11412] v4l2_fh_open+0xac/0x420 [ 604.763846][T11412] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 604.763867][T11412] em28xx_v4l2_open+0x157/0x9a0 [ 604.763894][T11412] v4l2_open+0x1bf/0x3a0 [ 604.763917][T11412] chrdev_open+0x4cc/0x5e0 [ 604.763938][T11412] ? __pfx_chrdev_open+0x10/0x10 [ 604.763959][T11412] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 604.763983][T11412] ? __pfx_chrdev_open+0x10/0x10 [ 604.764001][T11412] do_dentry_open+0x953/0x13f0 [ 604.764032][T11412] vfs_open+0x3b/0x340 [ 604.764052][T11412] ? path_openat+0x2ecd/0x3830 [ 604.764069][T11412] path_openat+0x2ee5/0x3830 [ 604.764098][T11412] ? __pfx_path_openat+0x10/0x10 [ 604.764121][T11412] do_filp_open+0x1fa/0x410 [ 604.764136][T11412] ? __lock_acquire+0xab9/0xd20 [ 604.764157][T11412] ? __pfx_do_filp_open+0x10/0x10 [ 604.764181][T11412] ? _raw_spin_unlock+0x28/0x50 [ 604.764220][T11412] ? alloc_fd+0x64c/0x6c0 [ 604.764243][T11412] do_sys_openat2+0x121/0x1c0 [ 604.764264][T11412] ? __pfx_do_sys_openat2+0x10/0x10 [ 604.764286][T11412] ? exc_page_fault+0x82/0x100 [ 604.764302][T11412] ? do_user_addr_fault+0xc85/0x1380 [ 604.764325][T11412] __x64_sys_openat+0x138/0x170 [ 604.764350][T11412] do_syscall_64+0xfa/0xfa0 [ 604.764365][T11412] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.764381][T11412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.764398][T11412] ? clear_bhb_loop+0x60/0xb0 [ 604.764416][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.764433][T11412] RIP: 0033:0x7f19a62a7407 [ 604.764450][T11412] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 604.764470][T11412] RSP: 002b:00007ffe796902e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 604.764489][T11412] RAX: ffffffffffffffda RBX: 00007f19a69da880 RCX: 00007f19a62a7407 [ 604.764502][T11412] RDX: 0000000000000000 RSI: 00007ffe79691f1c RDI: ffffffffffffff9c [ 604.764517][T11412] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 604.764527][T11412] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 604.764538][T11412] R13: 00007ffe79690530 R14: 00007f19a6b41000 R15: 0000563ba6d6f4d8 [ 604.764557][T11412] [ 604.764563][T11412] [ 605.089489][T11412] Allocated by task 5956: [ 605.093884][T11412] kasan_save_track+0x3e/0x80 [ 605.098543][T11412] __kasan_kmalloc+0x93/0xb0 [ 605.103121][T11412] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 605.108481][T11412] em28xx_v4l2_init+0x10b/0x2e70 [ 605.113403][T11412] em28xx_init_extension+0x120/0x1c0 [ 605.118664][T11412] process_scheduled_works+0xae1/0x17b0 [ 605.124205][T11412] worker_thread+0x8a0/0xda0 [ 605.128839][T11412] kthread+0x711/0x8a0 [ 605.132922][T11412] ret_from_fork+0x4bc/0x870 [ 605.137730][T11412] ret_from_fork_asm+0x1a/0x30 [ 605.142492][T11412] [ 605.144800][T11412] Freed by task 5956: [ 605.148756][T11412] kasan_save_track+0x3e/0x80 [ 605.153442][T11412] __kasan_save_free_info+0x46/0x50 [ 605.158657][T11412] __kasan_slab_free+0x5c/0x80 [ 605.163421][T11412] kfree+0x19a/0x6d0 [ 605.167471][T11412] em28xx_v4l2_init+0x1683/0x2e70 [ 605.172484][T11412] em28xx_init_extension+0x120/0x1c0 [ 605.177749][T11412] process_scheduled_works+0xae1/0x17b0 [ 605.183272][T11412] worker_thread+0x8a0/0xda0 [ 605.188010][T11412] kthread+0x711/0x8a0 [ 605.192056][T11412] ret_from_fork+0x4bc/0x870 [ 605.196622][T11412] ret_from_fork_asm+0x1a/0x30 [ 605.201409][T11412] [ 605.203713][T11412] The buggy address belongs to the object at ffff8880590c4000 [ 605.203713][T11412] which belongs to the cache kmalloc-8k of size 8192 [ 605.217833][T11412] The buggy address is located 1856 bytes inside of [ 605.217833][T11412] freed 8192-byte region [ffff8880590c4000, ffff8880590c6000) [ 605.232133][T11412] [ 605.234446][T11412] The buggy address belongs to the physical page: [ 605.240846][T11412] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x590c0 [ 605.249706][T11412] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 605.258216][T11412] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 605.266190][T11412] page_type: f5(slab) [ 605.270154][T11412] raw: 00fff00000000040 ffff88813ffa7280 0000000000000000 dead000000000001 [ 605.278720][T11412] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 605.287418][T11412] head: 00fff00000000040 ffff88813ffa7280 0000000000000000 dead000000000001 [ 605.296078][T11412] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 605.305005][T11412] head: 00fff00000000003 ffffea0001643001 00000000ffffffff 00000000ffffffff [ 605.313673][T11412] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 605.322320][T11412] page dumped because: kasan: bad access detected [ 605.328815][T11412] page_owner tracks the page as allocated [ 605.334506][T11412] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 24, tgid 24 (kworker/1:0), ts 553418301627, free_ts 553417224635 [ 605.355684][T11412] post_alloc_hook+0x240/0x2a0 [ 605.360443][T11412] get_page_from_freelist+0x2365/0x2440 [ 605.365970][T11412] __alloc_frozen_pages_noprof+0x181/0x370 [ 605.371846][T11412] alloc_pages_mpol+0x232/0x4a0 [ 605.376694][T11412] allocate_slab+0x96/0x3a0 [ 605.381262][T11412] ___slab_alloc+0xe94/0x18a0 [ 605.386001][T11412] __slab_alloc+0x65/0x100 [ 605.390394][T11412] __kmalloc_noprof+0x471/0x7f0 [ 605.395278][T11412] usb_get_configuration+0x11a/0x5360 [ 605.400642][T11412] usb_new_device+0x146/0x16f0 [ 605.405411][T11412] hub_event+0x2958/0x4a20 [ 605.409905][T11412] process_scheduled_works+0xae1/0x17b0 [ 605.415441][T11412] worker_thread+0x8a0/0xda0 [ 605.420075][T11412] kthread+0x711/0x8a0 [ 605.424120][T11412] ret_from_fork+0x4bc/0x870 [ 605.428701][T11412] ret_from_fork_asm+0x1a/0x30 [ 605.433534][T11412] page last free pid 10618 tgid 10617 stack trace: [ 605.440009][T11412] __free_frozen_pages+0xbc4/0xd30 [ 605.445138][T11412] __put_partials+0x146/0x170 [ 605.449807][T11412] put_cpu_partial+0x1f2/0x2e0 [ 605.454551][T11412] __slab_free+0x2b9/0x390 [ 605.458976][T11412] qlist_free_all+0x97/0x140 [ 605.463551][T11412] kasan_quarantine_reduce+0x148/0x160 [ 605.469079][T11412] __kasan_slab_alloc+0x22/0x80 [ 605.473908][T11412] __kmalloc_noprof+0x3c3/0x7f0 [ 605.478935][T11412] tomoyo_realpath_from_path+0xe3/0x5d0 [ 605.484470][T11412] tomoyo_path_number_perm+0x1e8/0x5a0 [ 605.489933][T11412] security_file_ioctl+0xcb/0x2d0 [ 605.494952][T11412] __se_sys_ioctl+0x47/0x170 [ 605.499527][T11412] do_syscall_64+0xfa/0xfa0 [ 605.504077][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.510455][T11412] [ 605.512772][T11412] Memory state around the buggy address: [ 605.518396][T11412] ffff8880590c4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.526632][T11412] ffff8880590c4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.534986][T11412] >ffff8880590c4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.543032][T11412] ^ [ 605.549255][T11412] ffff8880590c4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.557396][T11412] ffff8880590c4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.565452][T11412] ================================================================== [ 605.600146][ T5956] em28xx 5-1:0.89: Remote control support is not available for this card. [ 605.614120][ T48] em28xx 5-1:0.89: Closing input extension [ 605.622964][ T48] em28xx 5-1:0.89: Deregistering snapshot button [ 605.690151][T11412] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 605.697477][T11412] CPU: 0 UID: 0 PID: 11412 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 605.706512][T11412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 605.716560][T11412] Call Trace: [ 605.719828][T11412] [ 605.722746][T11412] dump_stack_lvl+0x99/0x250 [ 605.727417][T11412] ? __asan_memcpy+0x40/0x70 [ 605.732079][T11412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.737274][T11412] ? __pfx__printk+0x10/0x10 [ 605.741886][T11412] vpanic+0x237/0x6d0 [ 605.745862][T11412] ? __pfx_vpanic+0x10/0x10 [ 605.750454][T11412] ? preempt_schedule+0xae/0xc0 [ 605.755301][T11412] ? __pfx_preempt_schedule+0x10/0x10 [ 605.760681][T11412] panic+0xb9/0xc0 [ 605.764754][T11412] ? __pfx_panic+0x10/0x10 [ 605.769508][T11412] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 605.775394][T11412] ? is_module_address+0x17/0xf0 [ 605.780403][T11412] ? v4l2_fh_open+0xac/0x420 [ 605.784979][T11412] check_panic_on_warn+0x89/0xb0 [ 605.789915][T11412] ? v4l2_fh_open+0xac/0x420 [ 605.794487][T11412] end_report+0x78/0x160 [ 605.798739][T11412] kasan_report+0x129/0x150 [ 605.803237][T11412] ? v4l2_fh_open+0xac/0x420 [ 605.807913][T11412] v4l2_fh_open+0xac/0x420 [ 605.812574][T11412] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 605.818545][T11412] em28xx_v4l2_open+0x157/0x9a0 [ 605.823410][T11412] v4l2_open+0x1bf/0x3a0 [ 605.827646][T11412] chrdev_open+0x4cc/0x5e0 [ 605.832213][T11412] ? __pfx_chrdev_open+0x10/0x10 [ 605.837138][T11412] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 605.843541][T11412] ? __pfx_chrdev_open+0x10/0x10 [ 605.848478][T11412] do_dentry_open+0x953/0x13f0 [ 605.853371][T11412] vfs_open+0x3b/0x340 [ 605.857546][T11412] ? path_openat+0x2ecd/0x3830 [ 605.862414][T11412] path_openat+0x2ee5/0x3830 [ 605.867014][T11412] ? __pfx_path_openat+0x10/0x10 [ 605.872196][T11412] do_filp_open+0x1fa/0x410 [ 605.876691][T11412] ? __lock_acquire+0xab9/0xd20 [ 605.881704][T11412] ? __pfx_do_filp_open+0x10/0x10 [ 605.886721][T11412] ? _raw_spin_unlock+0x28/0x50 [ 605.891579][T11412] ? alloc_fd+0x64c/0x6c0 [ 605.895930][T11412] do_sys_openat2+0x121/0x1c0 [ 605.900719][T11412] ? __pfx_do_sys_openat2+0x10/0x10 [ 605.905933][T11412] ? exc_page_fault+0x82/0x100 [ 605.910702][T11412] ? do_user_addr_fault+0xc85/0x1380 [ 605.915983][T11412] __x64_sys_openat+0x138/0x170 [ 605.921443][T11412] do_syscall_64+0xfa/0xfa0 [ 605.926196][T11412] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.931379][T11412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.937443][T11412] ? clear_bhb_loop+0x60/0xb0 [ 605.942102][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.947983][T11412] RIP: 0033:0x7f19a62a7407 [ 605.952470][T11412] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 605.972148][T11412] RSP: 002b:00007ffe796902e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 605.980568][T11412] RAX: ffffffffffffffda RBX: 00007f19a69da880 RCX: 00007f19a62a7407 [ 605.988622][T11412] RDX: 0000000000000000 RSI: 00007ffe79691f1c RDI: ffffffffffffff9c [ 605.997363][T11412] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 606.005860][T11412] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 606.014100][T11412] R13: 00007ffe79690530 R14: 00007f19a6b41000 R15: 0000563ba6d6f4d8 [ 606.022104][T11412] [ 606.025498][T11412] Kernel Offset: disabled [ 606.029895][T11412] Rebooting in 86400 seconds..