last executing test programs: 29m32.689960441s ago: executing program 3 (id=2434): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0xfffffffffffffffc, 0x8001, 0xdec, 0x7}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x10000000000008, 0x8, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0), 0x0, 0x8000, 0x0) setns(0xffffffffffffffff, 0x8020000) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) 29m30.807341585s ago: executing program 3 (id=2441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r0, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1ec3c0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x356, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x6, 0xfffffffe, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x2, 0xfd, 0x0, r3}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r7, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x1e, 0x4, 0x0) r12 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r12, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x80) r13 = dup3(r12, r11, 0x0) recvmmsg$unix(r13, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000005140)=""/4106, 0x100a}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/169, 0xa9}], 0x3}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/241, 0xf1}], 0x1}}, {{&(0x7f0000000500), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x4, 0x58ca2280, 0x0) 29m29.537522778s ago: executing program 3 (id=2445): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) syz_emit_ethernet(0x92, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x5, 0x84, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, 0xfffe, {[@timestamp={0x8, 0xa, 0x6, 0x7}, @nop, @mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "ab519c9940eb739563a3c52b43aee4a2"}, @sack={0x5, 0x26, [0x9, 0xffffff4c, 0x43, 0x1, 0x8, 0xfa39, 0x8000, 0x8, 0x9]}, @md5sig={0x13, 0x12, "625fbe96fc97dc524d8a397b7b38957f"}]}}}}}}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/145, 0x91}], 0x1) 29m28.402813848s ago: executing program 3 (id=2447): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') open_tree(r1, &(0x7f0000000080)='.\x00', 0x9001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 29m28.247197979s ago: executing program 3 (id=2449): socket(0x24, 0x1, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) 29m27.055973843s ago: executing program 3 (id=2451): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0xfffffffffffffffc, 0x8001, 0xdec, 0x7}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x10000000000008, 0x8, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0), 0x0, 0x8000, 0x0) setns(0xffffffffffffffff, 0x8020000) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) 29m26.656793462s ago: executing program 32 (id=2451): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0xfffffffffffffffc, 0x8001, 0xdec, 0x7}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x10000000000008, 0x8, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0), 0x0, 0x8000, 0x0) setns(0xffffffffffffffff, 0x8020000) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) 13m53.975720833s ago: executing program 1 (id=6268): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 13m53.840032173s ago: executing program 1 (id=6269): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}]}]}]}, 0x30}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @remote}) socket$inet6_sctp(0xa, 0x1, 0x84) 13m53.067600247s ago: executing program 1 (id=6270): tkill(0x0, 0x39) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x6, 0xc, 0x3, 0x9, 0x1, 0x4, 0x1000, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x4, 0x7, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x7, 0x5, 0x5, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x1, 0x8001, 0x7abe, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc92, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0xb, 0x4, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2, 0x1, 0xfffffff3, 0xd077, 0x4, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0xa476, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0x1, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) syz_emit_ethernet(0x16, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r5 = socket(0x11, 0x2, 0x1) setsockopt(r5, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) (async) setsockopt(r5, 0x107, 0x2, &(0x7f00000001c0)="fcff00000100060000071a80010061cc", 0x10) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) getsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000180), &(0x7f0000000280)=0x10) (async) listen(r7, 0x6) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) accept(r2, 0x0, 0x0) 11m47.44817151s ago: executing program 1 (id=6274): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x5, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000240)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000004c0)={[0xa, 0x6, 0x7000000, 0x2d6c00000000000, 0x61e3b6b6, 0xfffffffffffffffc, 0xb3, 0x4, 0x80000000000b1d, 0x5, 0x8, 0x81, 0x3, 0x7, 0xe5, 0x3], 0x3000, 0x3877c4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_io_uring_setup(0x6df1, &(0x7f00000001c0)={0x0, 0x1, 0x2, 0xffffffff, 0xb8}, &(0x7f0000000080), &(0x7f00000020c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4a8}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f00000002c0)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x15, &(0x7f00000000c0)=[@cr4={0x1, 0x100070}], 0x1) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) 11m47.442796192s ago: executing program 1 (id=6276): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001180), 0x50) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x1403, 0x4, 0x70bd26, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8011}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2040600) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000410000009"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000840), &(0x7f0000000340)=r5}, 0x20) close(r5) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f0000000900)}, 0x20) rseq(&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(r2, 0x1) fcntl$notify(r0, 0x402, 0x38) 11m47.420577175s ago: executing program 1 (id=6280): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000a80)={&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="9a4152257ecb371bad4c15b6cda571eb38e658691136b7ecdd955982958f57cf297f06d6444084839063138bcdf0b13a3e470529742142477a5efa60beeae4a1e3bf9c83b066f2a8cfb74b5673d99d2c7df68621b2a54a5a848d44dc1753fffa6f9117aed0ece672a7543825a777dc6d6ea148b93b7ad8676bbe87252bd836e3ae975fbe3e634cf1812fc63f37c42f2c183cabb682fa521d9f1c9164bb82d9b4a055d14ec84ae8a3db6e0abc982be9fa50c906db3a15ddeb7dbe5af4", 0xbc}, {&(0x7f0000000140)="6fc6cb2853d80ca2e7622fe30b78783d66bfa0f7d3da8cc9150fccc07125ba53e6f284ce157b894563bdd6348ffda8d9a7f1786b12ed2e40fde9b774a0cf46fba72bc6a91c37beb3e20db7458b84dcdc6d4ae2f4dd2cc16a282b60b5d23cf9efd232553df9e38a89a130f7d428b083692f8388f65d8799f1ffb6c0c0ae", 0x7d}, {&(0x7f0000000280)="56afebae688940d3ecf8acc2e7f61ad2230212bdf3a669748dfc02994684a53025e497a1f4f11b507c0bb8900f628f74ac302345c223d754eb2f1c30ca4cbfcc4518bbde7827518cf4583383c95a77363e752a32f0e6220d0745d744ff4de6d14d4b0028208dcae933487fdc5f94cf5281cde9ba717859acdb29be234d7341a8dc8fcbaf94ed084da26ef4d32380dee9f474d0aebc", 0x95}, {&(0x7f00000001c0)="dd8e1d6cd0e82572d4cb6135f90616bf35f9b7ad95fd16fbc30320eae4e8c33a5b71b5d8", 0x24}, {&(0x7f00000003c0)="9de2e7215fe24097bf2120cfdb7b72ca7dafcc31852a859e188c9376473fdec49b1a9490e770cb6be87653d6c0c970a98ab5fda3", 0x34}], 0x5, &(0x7f0000000480)=[{0x108, 0x109, 0x5, "8ac10efdc2d917302c25d50956a1c396d7396afe03ec3046ad0ad93f87f454d66c6455373bbfdd8521d911b966ebf691690c3c00b22ba8082d12643b269fb95f9e2c37fa8a03a85ae54e43a7febbfdf90b8d1de5529a69990653539341b33e191afe11ade257d9cadcbe912eb8d8ea134f44d222dbc6d7246dc08d5bf4b294cac113e5988a5d5fcc533062e3cbc54faf177ed785eb0ec56fb960f619fffcb7c2978bd48eed209827a50c545da49517528a117717b7f458345f528a1b6818d6cb9b19d56fb22fd16616ca7c727115da2fedabeefd99f71d833ddf7bc425c6f039437af5845d3728857abc7682bfb71c2b5aba8c64c1fd9481"}, {0xc0, 0x89, 0x2, "29ea032d21ebf01a141ae39975d99d9d6ac19ee28635c29f1254654f64c463d1c2214f593264fd2906b0828fe4f560dac8c4be4936e43cb4493924e68cebaa09e9e22722958123f4a711a50ff188c35054a9f63b866e936e5591b2153b895c85621b2cbb05544ccb67c7df57d7b25e0910f7e6e6c613f716532f25519dbd832741fae558a8bb61b14bfc6f612c308a9195c7d35c50ac3d9abac8ece3bf747732f537c1bec4750f2d9f6c7d5153aa8a66"}, {0x80, 0x10e, 0xd2d30000, "589984d346e80bdbad8fd4eec9e5b2bdb6bfb95b83eaa245bff231b39e4403afe4ae1329b2d0935b05149828476ae529f1f6bbf0866ad8bdca7aafefa945fc7f87949d24b0a12949a776c430cf9e5abb92110b62106182b03b35eabf15e8a41a4c37f3230d0cd4da2ba5cb"}, {0xe0, 0x29, 0x6, "fdcfe6a059874259549fea90c667a9ce3c858d35fb574c5c646ea293abf124e56e985421cce6af65934c59288d13f53f729ed91b606bf19c30dd32f2c77064f7c432d1ed41d898bec3a9f0721c34e798f1bb0043669461773c77e2c66d32dfe2ac64bc97993f1760e72e849c23e4b8afeb16d6a00e1c7f2573b3904df3486fa11b4fda0a5efdab0a2b959db6aa70ad155d7ba74b4c0a3b239c44012c6b7e1c5ea448d82fdef1b8b98e3562d534973e4691b012fe20e84bb29bfbc6477083a216d369ba001268f5ccdd82"}, {0x30, 0x84, 0x0, "1c05cb58c11cc81aa0690dd6df73905f71f236a2e47889a93e0008fc"}, {0x70, 0x88, 0x200, "c72d778144345a55e71c4d6c4660b359a6e316f8c79251dee26dd028dd182f67ca922010dd88899c8ee004727a14988d97d81210d688ad6e04665b890330b71bc66f9a2b0111b12e81b0cfb500019f544120a2c8f5ee38826fd0bc8d1f"}, {0x18, 0x103, 0x2, '9hM!M'}, {0xe0, 0x88, 0x80000000, "3ca830a02337822d935e6a26425a6b675323570981f915ab79af4dc3ede7b6a2e9b6d55e6834a5959c9037c00d74cfd7719da7f9a6c485fc12c427d8c05693d49f3f1ee84320cb29a891e7eb842b6bdaeb04a7c02acdf1fe092e4717260008277d63bba05644e8d63e3d05772a584e8afc4bef7b902c75619f74b0f5e2bb2120335fbb1c54a22f48629a83f39e4d3ff81fcf4ff2e88bbc8c71f1df48149f396eed1064b8527051aa14966980d1845ccb8ed21615245ca0c404ef42c13a262f0060bfafa2cc36a7a998fae87492"}, {0x90, 0x29, 0x2, "ef0ee97da6ffdc3c57f92d3f133effecf60678eaa098db8e920ab229112d092e381cda35a75163dc0090b4a985bcc4d80cb6127536f95ac2d8b3eb0ec3ed7d600f40889eddc51c75ccd245c087e7b4ebdc1bdda712f6bed5f77a8274980758a7c2ca8329297b0db8356bd214e370898bf22ff1a7d33c7ced2d13b7a005"}, {0x90, 0x112, 0xc, "f76a2a1b73ba1be44678cf6366010b6725296ee736f4fa9247ec5363f3d2a39a95376f8cbf9259e0e0bbd2543ebaebff12eb184a52b77864dfa1e114a4b04c60e06b81eaedaed32c0f1307b2b1cfa04bd6e3dc413b8a245418e73ee443dea178d1592ad832ed77412e11c62235ca85a1f29761941a56dfe6aa"}], 0x5e0}, 0x44010) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x20048010) 11m47.408824738s ago: executing program 33 (id=6280): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000a80)={&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="9a4152257ecb371bad4c15b6cda571eb38e658691136b7ecdd955982958f57cf297f06d6444084839063138bcdf0b13a3e470529742142477a5efa60beeae4a1e3bf9c83b066f2a8cfb74b5673d99d2c7df68621b2a54a5a848d44dc1753fffa6f9117aed0ece672a7543825a777dc6d6ea148b93b7ad8676bbe87252bd836e3ae975fbe3e634cf1812fc63f37c42f2c183cabb682fa521d9f1c9164bb82d9b4a055d14ec84ae8a3db6e0abc982be9fa50c906db3a15ddeb7dbe5af4", 0xbc}, {&(0x7f0000000140)="6fc6cb2853d80ca2e7622fe30b78783d66bfa0f7d3da8cc9150fccc07125ba53e6f284ce157b894563bdd6348ffda8d9a7f1786b12ed2e40fde9b774a0cf46fba72bc6a91c37beb3e20db7458b84dcdc6d4ae2f4dd2cc16a282b60b5d23cf9efd232553df9e38a89a130f7d428b083692f8388f65d8799f1ffb6c0c0ae", 0x7d}, {&(0x7f0000000280)="56afebae688940d3ecf8acc2e7f61ad2230212bdf3a669748dfc02994684a53025e497a1f4f11b507c0bb8900f628f74ac302345c223d754eb2f1c30ca4cbfcc4518bbde7827518cf4583383c95a77363e752a32f0e6220d0745d744ff4de6d14d4b0028208dcae933487fdc5f94cf5281cde9ba717859acdb29be234d7341a8dc8fcbaf94ed084da26ef4d32380dee9f474d0aebc", 0x95}, {&(0x7f00000001c0)="dd8e1d6cd0e82572d4cb6135f90616bf35f9b7ad95fd16fbc30320eae4e8c33a5b71b5d8", 0x24}, {&(0x7f00000003c0)="9de2e7215fe24097bf2120cfdb7b72ca7dafcc31852a859e188c9376473fdec49b1a9490e770cb6be87653d6c0c970a98ab5fda3", 0x34}], 0x5, &(0x7f0000000480)=[{0x108, 0x109, 0x5, "8ac10efdc2d917302c25d50956a1c396d7396afe03ec3046ad0ad93f87f454d66c6455373bbfdd8521d911b966ebf691690c3c00b22ba8082d12643b269fb95f9e2c37fa8a03a85ae54e43a7febbfdf90b8d1de5529a69990653539341b33e191afe11ade257d9cadcbe912eb8d8ea134f44d222dbc6d7246dc08d5bf4b294cac113e5988a5d5fcc533062e3cbc54faf177ed785eb0ec56fb960f619fffcb7c2978bd48eed209827a50c545da49517528a117717b7f458345f528a1b6818d6cb9b19d56fb22fd16616ca7c727115da2fedabeefd99f71d833ddf7bc425c6f039437af5845d3728857abc7682bfb71c2b5aba8c64c1fd9481"}, {0xc0, 0x89, 0x2, "29ea032d21ebf01a141ae39975d99d9d6ac19ee28635c29f1254654f64c463d1c2214f593264fd2906b0828fe4f560dac8c4be4936e43cb4493924e68cebaa09e9e22722958123f4a711a50ff188c35054a9f63b866e936e5591b2153b895c85621b2cbb05544ccb67c7df57d7b25e0910f7e6e6c613f716532f25519dbd832741fae558a8bb61b14bfc6f612c308a9195c7d35c50ac3d9abac8ece3bf747732f537c1bec4750f2d9f6c7d5153aa8a66"}, {0x80, 0x10e, 0xd2d30000, "589984d346e80bdbad8fd4eec9e5b2bdb6bfb95b83eaa245bff231b39e4403afe4ae1329b2d0935b05149828476ae529f1f6bbf0866ad8bdca7aafefa945fc7f87949d24b0a12949a776c430cf9e5abb92110b62106182b03b35eabf15e8a41a4c37f3230d0cd4da2ba5cb"}, {0xe0, 0x29, 0x6, "fdcfe6a059874259549fea90c667a9ce3c858d35fb574c5c646ea293abf124e56e985421cce6af65934c59288d13f53f729ed91b606bf19c30dd32f2c77064f7c432d1ed41d898bec3a9f0721c34e798f1bb0043669461773c77e2c66d32dfe2ac64bc97993f1760e72e849c23e4b8afeb16d6a00e1c7f2573b3904df3486fa11b4fda0a5efdab0a2b959db6aa70ad155d7ba74b4c0a3b239c44012c6b7e1c5ea448d82fdef1b8b98e3562d534973e4691b012fe20e84bb29bfbc6477083a216d369ba001268f5ccdd82"}, {0x30, 0x84, 0x0, "1c05cb58c11cc81aa0690dd6df73905f71f236a2e47889a93e0008fc"}, {0x70, 0x88, 0x200, "c72d778144345a55e71c4d6c4660b359a6e316f8c79251dee26dd028dd182f67ca922010dd88899c8ee004727a14988d97d81210d688ad6e04665b890330b71bc66f9a2b0111b12e81b0cfb500019f544120a2c8f5ee38826fd0bc8d1f"}, {0x18, 0x103, 0x2, '9hM!M'}, {0xe0, 0x88, 0x80000000, "3ca830a02337822d935e6a26425a6b675323570981f915ab79af4dc3ede7b6a2e9b6d55e6834a5959c9037c00d74cfd7719da7f9a6c485fc12c427d8c05693d49f3f1ee84320cb29a891e7eb842b6bdaeb04a7c02acdf1fe092e4717260008277d63bba05644e8d63e3d05772a584e8afc4bef7b902c75619f74b0f5e2bb2120335fbb1c54a22f48629a83f39e4d3ff81fcf4ff2e88bbc8c71f1df48149f396eed1064b8527051aa14966980d1845ccb8ed21615245ca0c404ef42c13a262f0060bfafa2cc36a7a998fae87492"}, {0x90, 0x29, 0x2, "ef0ee97da6ffdc3c57f92d3f133effecf60678eaa098db8e920ab229112d092e381cda35a75163dc0090b4a985bcc4d80cb6127536f95ac2d8b3eb0ec3ed7d600f40889eddc51c75ccd245c087e7b4ebdc1bdda712f6bed5f77a8274980758a7c2ca8329297b0db8356bd214e370898bf22ff1a7d33c7ced2d13b7a005"}, {0x90, 0x112, 0xc, "f76a2a1b73ba1be44678cf6366010b6725296ee736f4fa9247ec5363f3d2a39a95376f8cbf9259e0e0bbd2543ebaebff12eb184a52b77864dfa1e114a4b04c60e06b81eaedaed32c0f1307b2b1cfa04bd6e3dc413b8a245418e73ee443dea178d1592ad832ed77412e11c62235ca85a1f29761941a56dfe6aa"}], 0x5e0}, 0x44010) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x20048010) 11.52594168s ago: executing program 2 (id=9021): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40000000}) r3 = syz_open_dev$video4linux(&(0x7f0000000140), 0x400, 0x40) socket$netlink(0x10, 0x3, 0x8000000004) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000240)={0x0, @reserved}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) pselect6(0x40, &(0x7f0000000100)={0x7ff, 0xfffffffffffffffc, 0x100005, 0x0, 0x800, 0x0, 0x8000000000000001, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 11.052005993s ago: executing program 6 (id=9024): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x1900) fchdir(r0) close(r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x4, 0x1}, 0x18, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'macvlan1\x00', {0x70}, 0x1000}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002c36f8140c95f6300030000006763049eede1f7abbe54d5c2030109021b00016c00a00409040002010b53fd0809050f001000c003fe"], &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 10.599495858s ago: executing program 0 (id=9027): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) syz_emit_ethernet(0x102, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa17810000008606cb2a7c0dbf76e8732911dd6bc77d3d00c83a00fc02000000000000000000000000000100000000000000000000000000000001800090780007a6da3176bfbd042068c33e918ec01022cba177678a2cabd58bcd327221570000000000000000000000000000106e32c152b48ee2f1e5df3ca23a33b2d7793758dec91ae5f200098182c406f88035bfc74cf4446a8ea4a4592dde2cb06d04d0769c2dd9d8216c07cdad82f9f54976bbd205b525ee229b23c5f897a5d43c0aa7d134c346bea9f7d36bad04a7ecc02df877cdbee42c9aab82fb83a9dbd4417aabbde268730b500a015e2a2b72db8f14dfde630bd1fb09a27773b281ce4b04d06db6c256e99bf43a113a4a435d6d29236c9d122489f1"], 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="31830000000000000000190000001800a7cd140002006c6f00000000000000000000000000000a2cacf116377d1438aaa6e34dbad634f8b195b55d79ef91674381933d7e41ce1ae10afbd3a93ffea7bdced76bd81d9a0ce02dc493ebf08c03"], 0x2c}}, 0x40010) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)=""/238, 0xee}], 0x1, &(0x7f0000000600)=""/173, 0xad}, 0x5}], 0x1, 0x60010000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r6, &(0x7f0000000540)=[{&(0x7f00000005c0)="0800000014001923", 0xfff2}], 0x1) 9.740001915s ago: executing program 2 (id=9028): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x7e1e, 0x9, {"37e160209bcd4fe2379c50a7b6b7cb5c"}, 0x400, 0x8, 0x5}, @ib={0x1b, 0x803, 0x2, {"7d0300000000001000"}, 0x0, 0x4, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000f00), r1}}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x10) r4 = inotify_init() r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x5}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r3, 0x1, {0x1, 0xf0}, 0x2}, 0x18) bind$can_j1939(r7, &(0x7f0000000000)={0x1d, r3, 0x1, {}, 0x2}, 0x18) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) 9.036569709s ago: executing program 2 (id=9030): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0xfffb, 0x3, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xffffffff, @mcast1={0xff, 0x7}, 0xc1e1}}, {{0xa, 0x4001, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = dup3(r5, r4, 0x0) accept4$unix(r6, 0xfffffffffffffffe, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x40010, r6, 0xfffffffffffffffd) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000340)={'filter\x00', 0xbb, "bf4f0ed2b7fccd2f2b3c7a767d5bf0bbfa154ffd23f0e0d39a1b98d1386a09afb1ebd36eb113c23a95d35f7b06f1188f7b7b7ba4ee96a9ea77339464e8489c7be140b02991a3cd5bfb07871e59c1edef5beaf6c2f0d4020a69b249eac46eef763b9d8209921e0f0615c3ddd0028b37df9df99f5210a7f22340f7fd2406e08d3b115a25f7d1dc225641091816b2d58a07ce3c5ca27f878dc56fab5e731df1b71f14eecc129594bcf772875518c00340fcfa6d43e04b56b58c052ca7"}, &(0x7f0000000000)=0xdf) 9.030786472s ago: executing program 5 (id=9031): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x40045731, &(0x7f00000002c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000180001"], 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x8854) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000001cc0)=[{{&(0x7f00000000c0)=@isdn, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/196, 0xc4}, {&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/171, 0xab}], 0x5}, 0x1}, {{&(0x7f0000001740)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000240)}], 0x1, &(0x7f0000001800)=""/9, 0x9}, 0x3}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001840)=""/71, 0x47}, {&(0x7f00000018c0)=""/16, 0x10}, {&(0x7f0000001900)=""/196, 0xc4}, {&(0x7f0000001a00)=""/198, 0xc6}, {&(0x7f0000001b00)=""/58, 0x3a}], 0x5, &(0x7f0000001bc0)=""/243, 0xf3}, 0xfffff800}], 0x3, 0x40010002, &(0x7f0000001dc0)={r5, r6+60000000}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) 8.226869189s ago: executing program 2 (id=9032): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x20000, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x5d, 0x0, 0x0, 0x81ef, &(0x7f0000000340)=[r3, 0xffffffffffffffff, r2, r3], 0x4}) io_uring_enter(r3, 0x4cd4, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r3, 0x3bead000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x7) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000900)=[{0x6, 0x1, 0xe, 0x7fff0000}]}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r11 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r11, &(0x7f0000000080)={0x1d, r10}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r11, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r12, 0x0, {0x1, 0x0, 0x2}}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) timer_delete(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x22280, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000000c0)=0xe8) 7.96665767s ago: executing program 6 (id=9033): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000009c0)={@remote, @local, @loopback, 0x1, 0x7, 0x8, 0x400, 0x7, 0x40}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x5fa61dd3, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}}, 0xc0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@empty, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 'bond_slave_0\x00', 'team_slave_1\x00', {0xff}, {}, 0x1, 0x3, 0x40}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xe, 0x93, 0x2, 0xaa78, 'syz1\x00', 'syz0\x00', {0x4}}}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0x0, 0xffffff00, 'netdevsim0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x8, 0x2}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x3, 0x1, 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'veth1_vlan\x00', {0x5911}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000b80)={'macvlan0\x00', &(0x7f0000000a80)=@ethtool_drvinfo={0x3, "7afdff9ea91ccd75067284b4ec745d41b5fc567e6b0c5e218093888bc57d1b06", "44d03590cba41878e4940497e8e6587981251df7c01617fa24d4094dcd378ab3", "578832e36fbadc5c79ae09b32b71c2324154cd33a79bfd8e585e1604239b374f", "ca8a99cb2c837bcb144110ff19e5e5717a731cce9cdcddf43cddfba4802c1a4c", "f8671db4bafedcc2f4b64a141d8da355c1d6187eaf838b775544a5e1418db403", "b0f4214db127631d6e52fe74", 0x8000, 0x5, 0x2, 0x5, 0x9}}) r6 = socket$inet6(0xa, 0x80002, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000980)={0x13, 0x13, 0x4, 0x17, 0x8, 0x2, 0x0, 0xe}) unshare(0x2a020480) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r0, 0x0, 0x10000, 0x0, 0x3, 0x2ca584, 0x27158b}) syz_clone3(&(0x7f0000000780)={0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)=0x0, {0x1f}, &(0x7f0000000680)=""/189, 0xbd, &(0x7f0000000200)=""/101, &(0x7f0000000740)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) sched_setaffinity(r8, 0x8, &(0x7f0000000800)=0x5) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 7.269422885s ago: executing program 0 (id=9034): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0xac, @scatter={0x2, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f00000000c0)=""/19, 0x13}]}, &(0x7f00000003c0)="080000000344", 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0}) 7.188124398s ago: executing program 0 (id=9035): memfd_secret(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019080)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x3c}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000190c0)={0x106, 0xd, &(0x7f0000019380)}) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) unshare(0x2040400) r3 = socket(0x1d, 0x2, 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161942, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000280)={r6, 0x2, 0x2, r6}) dup2(r6, r5) bind$isdn(r3, 0x0, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r7, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000b24000/0x1000)=nil, 0x1000, 0x300000d, 0x4010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.853556966s ago: executing program 5 (id=9036): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd4(r1, &(0x7f0000000040)={[0x10001]}, 0x8, 0x9e3fce895bc79c3c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x5, 0x2) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0xa8}}, 0x24040084) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000500)={0x9, 0x1, 0x2, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc2e00", 0x32315241}) socket$nl_route(0x10, 0x3, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6.28111143s ago: executing program 4 (id=9037): openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010800000000000000000a00000008000240000000010900010073797a300000000020000000000a01040000000000000000070000000900010073797a310000000028000000000a030000000000000000000a00000008000240000000000900010073797a30"], 0x98}}, 0x0) r3 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000280)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) io_uring_enter(r3, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x1fd}) fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) 5.976424245s ago: executing program 6 (id=9038): socket$kcm(0x29, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) select(0x0, 0x0, &(0x7f0000000080)={0x3}, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000722000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0xfffe}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x4e22, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffff8]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd700000000000390000041c005a801800018014000300810000023e1506006841270405000500"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x210, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xe00, 0x55}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4048080) syz_open_dev$video(&(0x7f0000000080), 0x2, 0x0) 4.991072004s ago: executing program 4 (id=9039): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x294}, 0x1, 0x0, 0x0, 0x20008000}, 0x40014) sendto$inet(r0, 0x0, 0x20, 0x48890, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) 4.947658932s ago: executing program 2 (id=9040): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r9, &(0x7f0000005f00)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}, {{&(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x4, 0x3, 0x2, 0x4}}, 0x80, 0x0}}], 0x2, 0x20000084) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r11}, 0x10) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4.695127058s ago: executing program 5 (id=9041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="11072dbd7000fedbdf251100000008000300", @ANYRES32=0x0, @ANYBLOB="cdfac187f528b4788c90a1d0a06d3961912fc620ab1161b2d6f1f0ad7981a7d75636e8a05becd4bb5f60fb863bd52a28f70f2faceeae0495b4c4927125fce4b9b62dbb3c2f647f52303ddc65d2c41edbb0"], 0x1c}}, 0x4040044) 4.688441105s ago: executing program 4 (id=9042): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket(0x400000000010, 0x2, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x7, 0x18, 0x9, 0x3, 0x8, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xe}}]}}]}, 0x3c}}, 0x24044094) (async) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000380)=0x5) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {0xffff, 0xffe0}, {0xf, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0x6}}]}, 0x2c}}, 0x200c8080) (async) r9 = socket$rxrpc(0x21, 0x2, 0xa) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r9, 0xc0389424, &(0x7f0000000040)={0xd03, 0x28, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 4.607769682s ago: executing program 0 (id=9043): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x80, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000475000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0xfffffffe, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0x5, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x0, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x9, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0xffffffff, 0x0, 0x0, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x2009, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0xfffffffc, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000001180)={'syz0\x00', {0xaf0, 0xd033, 0x180}, 0x45, [0xfffffff7, 0x3, 0x2, 0x1, 0x80, 0xaf7, 0x8, 0x6, 0x7fff, 0x9, 0x42, 0x40, 0x3ff, 0xdd0, 0x1, 0x8000, 0x7ff, 0x20000003, 0x5, 0x5, 0x1, 0x4, 0x6, 0x2, 0x6, 0x6, 0x7, 0x1600000, 0xa, 0xfe, 0x3ff, 0xc6, 0xe, 0x8000, 0x1b, 0xd, 0x7, 0x0, 0xff, 0x4, 0x54, 0x6253, 0x7, 0xda, 0x67aa2099, 0xffffffff, 0x7, 0x8, 0x9, 0x9, 0xd, 0x6, 0x5, 0xbf, 0x7, 0x1, 0x7, 0xff, 0x7, 0x800, 0xfffffffa, 0x3, 0x6, 0x3], [0x3, 0x803, 0x7, 0xa, 0x3, 0x3, 0x3, 0x2, 0x2, 0x5, 0x0, 0xfffff283, 0x1ff8, 0x8, 0x100, 0xffffffff, 0x7, 0x3ff, 0xffffffff, 0x0, 0x400000, 0x9, 0x6, 0xe, 0x0, 0x100, 0x1, 0xd, 0x100, 0x800, 0x1, 0x5, 0x5, 0x6, 0x0, 0x3, 0xe, 0x6, 0x81, 0x3, 0x2, 0x8, 0x1, 0x6, 0x8, 0x5, 0xd, 0xfffffff7, 0x2, 0x8e, 0x4, 0x8b7, 0xfffffffa, 0x1, 0xfbfffff9, 0x3, 0x9, 0x7, 0x3, 0x942, 0x4, 0x12000, 0x4fb2adfa, 0xdea0], [0x2, 0x3, 0xfffff001, 0xfffffffd, 0x8, 0xe6, 0x8, 0x2, 0xf441, 0xa, 0xfffffffd, 0x2, 0x10, 0x1000, 0x9, 0x2, 0xffffffff, 0x7, 0x0, 0xf361, 0x7, 0x3, 0x0, 0x5, 0x81, 0xff, 0x81, 0xf, 0x1, 0x9, 0x7, 0x0, 0x10001, 0x8e5c, 0x4, 0x1, 0x6, 0x1, 0x200, 0x7, 0x40, 0x7a2c, 0x200101, 0x9e38, 0x4c88, 0x6, 0xa8, 0x4, 0x8, 0x9, 0x5, 0x6, 0xfffffff7, 0x1, 0x1137, 0x8, 0xae, 0x4d70, 0x400, 0xfaa5, 0xffffff01, 0x15, 0x7a, 0x1], [0x0, 0x8, 0x9, 0x0, 0x6, 0x8, 0x9, 0x4, 0xfffffff8, 0x200, 0xf, 0x5, 0x3, 0x6727, 0x7fff, 0x9, 0x200, 0xfffffff7, 0xe3, 0x400, 0x0, 0x4, 0xdfd2, 0x39, 0x101, 0x9, 0x1, 0x1, 0xa, 0x7, 0x10001, 0x1, 0x6, 0x400, 0x0, 0x8, 0x2, 0x9, 0x9, 0x6, 0x200, 0x0, 0x2334, 0x6, 0x1, 0x2, 0x6f51, 0x81, 0x5, 0x0, 0x7, 0x3, 0x7, 0x34254b70, 0x4ad, 0x3, 0x8b21, 0x1, 0x9, 0x3, 0xc, 0xffff, 0x7, 0x8]}, 0x45c) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000040)={r2}, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="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", 0x175}, {&(0x7f0000000300)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9dd46c823bc89a7cc268e91fff7160521733", 0xa4}, {&(0x7f00000012c0)="8e39308f7428bb361aa0e207e2191e9248da9eac174411869ef60059a981c6a11223cca963f4b365a2419adcb920c2a14965defd6186c5bfc157b6c1c219985ea4badc7bf93f3c939e452c503f86abee100fd05e2367155747876bd524b58bf60f115d5ac1d8bcd3dc85840f8ee47f46c74a4d11f53e68baa8de704b0d9b419407f8ddf3ec6b5dffa0d41dea9381328cacda24d9a3abd058062ad7ad510b02816e20128a7dedd60e86cb5e679599faad3d09e770721f2d5db2e56b1e0972c331f365076d7bdeff03a3ca3f9926227c5a8cd0a4353819b0d37240503464cea7ad56fcdd32a12249d89d50685ff6742a95f669b780b80cfb70e90dee859d9ba7cf3481464ec7c3caefd5c605e66a3d78b6009a7ff6a92ae0fb552ea843ab8f734ffa9d9c09cf3880d8c2fb2d69c43a2f226b82540e3d5ff90a", 0x138}], 0x3, 0x0, 0x0, 0x44000}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r7, 0x1, 0x9, 0x0, &(0x7f0000000040)) close(0x3) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 4.40358935s ago: executing program 5 (id=9044): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x840000000002, 0x3, 0xfa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xf00) 4.20190794s ago: executing program 4 (id=9045): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0xac, @scatter={0x2, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f00000000c0)=""/19, 0x13}]}, &(0x7f00000003c0)="080000000344", 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0}) 3.983998748s ago: executing program 4 (id=9046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0xe5c, 0x80000) r1 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x92, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x2040400) r4 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xf400000000000000) sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a0000000000000000ff0000000000000000640101000000000004000000000000002c0030"], 0x38}}, 0x40408c0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) socket$inet6(0xa, 0x2, 0x0) 3.98303173s ago: executing program 6 (id=9047): mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x71, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) r1 = syz_usb_connect$cdc_ecm(0x1, 0x62, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xb7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x5, 0x30, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0xfd, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x200, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x0, 0x67}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x80, 0x3, 0x9}}}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x5, 0x3f, {0x3f, 0x1, "938c0d7d28ff16546b493f828abe58e5eaa5601873866b658452f32826fef499fe288753e9d053c95fdfa47b9fb2160d79eddf4f5d5e70628361d7b314"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)={0x20, 0x2, 0xb9, "408f8a263aeda4a60e2c88a5752b0ecb180761bd40735650485fb105f3bd578e8e8797350254e83368b2a06dfad1b7c6804a861fb1ca59338e35dda90d2fba52886b434ef741c805aa1b1ff57eb780c0ffc01bea5dad379a56c7e7798c987ebcd6292c5d8078c88f22c993d46808eeb973454b0be908b0782173c93c736306be90e107f5b3387c1e44a6484359ab71b0a0e5487f5f14822f87f42d61bede3b893dabacc673a95c9f4143f1379d60ab773e09f0de8accd4db43"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x73}, &(0x7f0000000280)={0x0, 0x8, 0x1}}) 2.874817856s ago: executing program 2 (id=9048): r0 = socket$kcm(0x10, 0x2, 0x0) (async) pivot_root(&(0x7f0000001080)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7499, 0x400, 0x2, 0x1f7}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x1}) (async) syz_usb_connect(0x4, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) pread64(r5, 0x0, 0x0, 0x20000000) (async) r6 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, 0x0, 0x0) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) write$snddsp(0xffffffffffffffff, &(0x7f0000000200)="a7d4146b7dde6c24c7c129633162ddd57d4e78db0f8a592fff6193f007242b31cdd9f979d4e44ea733", 0x29) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x6}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000300)='1', 0x1) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2.583552243s ago: executing program 4 (id=9049): r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x23e0, 0x40, 0x2, 0xdc}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_NOP={0x0, 0x40}) openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0x402, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) connect$unix(r3, &(0x7f0000000300)=@abs, 0xfffffffffffffec4) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x5, 0xb49, 0x9, 0x8, 0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)=""/116, 0x74}], 0x1, 0x82002001, 0xff) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000000c0)='net/fib_trie\x00') r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume_offset', 0x92000, 0x4) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r6) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r11 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r11, &(0x7f0000000480)=ANY=[@ANYBLOB="1500002065ffff0000000008003950323030302e4c"], 0x15) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="f1c57ac67765c73356461d61fcd5fa5909cb49024a775c5e2d3daf73c484c786a907c49df42c883a8addabe395225660bbda979953bd4a1d73ae0e4d", @ANYRES16=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48050}, 0x4000) 1.201475219s ago: executing program 5 (id=9050): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000180), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0x3, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000380)={0x7}) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="230000040000010000000000000000000000000a58000000060a0b040000000000000000020000000a00048028030180000001006c6f6f6b757000000900010073797a30000000000900020073797a3000000000140000001100010000000000000000000000000a", @ANYRESHEX, @ANYRESHEX=r3, @ANYRESOCT, @ANYRESOCT, @ANYRES32=r0, @ANYRESDEC=r3], 0x80}, 0x1, 0x0, 0x0, 0x20000d5}, 0x4000800) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000440)="050040015ad9b78d49740504803450293ca0b5e4f2ea9d3688a4d9a74d8ad7f2721ec4d5c0257e196c2b95373c", 0x2d, 0x200000000}]) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c0000080002800400130008000300", @ANYRES32=0x0, @ANYBLOB="58ee1f8c0cb82c8902088d6d8c15a7aaca30f8ffffffffffffff42a184e478cd6e96d57b09bf82755cfd2153ad092816e88b3cd891"], 0x40}}, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r9 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r9, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000100)={'syzkaller1\x00', 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) 1.111962655s ago: executing program 0 (id=9051): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty=0x2800, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e0b06c900", @ANYBLOB="795f2afc8775ea83d930e5b7dd0e8cc12739e51fbcca211ceed9bb6cbaa373de22a70078d4fb137d88eccf15a4d6cad31e895136bf5eb8eb46618fbf720a1c147ddf3efc4ac80a23bb9b41c9ab038a521bc8135e9e073c6fab2aa4af49682a57946714", @ANYRES64=r1], 0xe) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) write$FUSE_INTERRUPT(r4, &(0x7f0000000280)={0x10, 0xfffffffffffffffe, r6}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r3, 0x20, 0x1, 0xfffffc01, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40) r7 = syz_open_dev$vcsu(&(0x7f0000000340), 0xf1, 0x6001) fanotify_mark(r7, 0x1, 0x10, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00') 841.240728ms ago: executing program 6 (id=9052): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000024c0)=ANY=[], 0x294}, 0x1, 0x0, 0x0, 0x20008000}, 0x40014) sendto$inet(r0, 0x0, 0x20, 0x48890, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) 664.053859ms ago: executing program 6 (id=9053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa6, 0xa3, 0x5a, 0x8, 0xd46, 0x2012, 0x4d36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x94, 0x0, 0x1, 0x8, 0xca, 0x6d, 0x0, [], [{{0x9, 0x5, 0x7, 0x3, 0x10, 0x7, 0x2f, 0xc}}]}}]}}]}}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000040)={0xfffffffa, "64222219d8d8c980a354fc3d32e3a387e30a180c5bf8c1d0922c454c846de19d", 0x3, 0x80, 0xa4, 0x200, 0x4, 0x2, 0x8, 0x3e}) 160.654754ms ago: executing program 0 (id=9054): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv4_newroute={0x1c, 0x18, 0x400, 0x0, 0x25dfdbf8, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x9, 0x2700}}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x848) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2c1, 0x1c8) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200003, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500200000020"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = memfd_create(&(0x7f0000001dc0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#\xbd\n/\xb2\'\x16X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\x007\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=ANY=[@ANYBLOB="64000000100003040000fcffffffffffffff00008bc497a8faf3c8f70cdcf883b8e6f0e58d6d0323d694fee414a3515c621e996f957f1b1c82fd26b8c7dd5f20de005b1a393da38ca4611dfb360ebb7db27b21f562f9a82aac715ca5f3fc028d1750ae3792", @ANYRESDEC=r3, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) socket$inet(0x2, 0x4000000000000001, 0x0) 0s ago: executing program 5 (id=9055): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0), &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) kernel console output (not intermixed with test programs): ] vmalloc_user_noprof+0xad/0xf0 [ 2431.026629][ T5322] ? xskq_create+0xbf/0x170 [ 2431.026658][ T5322] xskq_create+0xbf/0x170 [ 2431.026692][ T5322] xsk_init_queue+0xb0/0x110 [ 2431.026724][ T5322] xsk_setsockopt+0x4dc/0x8d0 [ 2431.026764][ T5322] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2431.026795][ T5322] ? __pfx_aa_sk_perm+0x10/0x10 [ 2431.026821][ T5322] ? aa_sock_opt_perm+0xff/0x1a0 [ 2431.026850][ T5322] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2431.026881][ T5322] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2431.026910][ T5322] do_sock_setsockopt+0x17c/0x1b0 [ 2431.026941][ T5322] __x64_sys_setsockopt+0x13f/0x1b0 [ 2431.026971][ T5322] do_syscall_64+0xfa/0xf80 [ 2431.026992][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2431.027011][ T5322] ? clear_bhb_loop+0x60/0xb0 [ 2431.027036][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2431.027056][ T5322] RIP: 0033:0x7f55c358f749 [ 2431.027075][ T5322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2431.027092][ T5322] RSP: 002b:00007f55c17d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2431.027114][ T5322] RAX: ffffffffffffffda RBX: 00007f55c37e6090 RCX: 00007f55c358f749 [ 2431.027130][ T5322] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 2431.027143][ T5322] RBP: 00007f55c3613f91 R08: 0000000000000052 R09: 0000000000000000 [ 2431.027156][ T5322] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2431.027170][ T5322] R13: 00007f55c37e6128 R14: 00007f55c37e6090 R15: 00007f55c390fa28 [ 2431.027205][ T5322] [ 2431.027214][ T5322] Mem-Info: [ 2431.081710][ T5321] binder_alloc: 5317: binder_alloc_buf, no vma [ 2431.109002][ T5322] active_anon:11213 inactive_anon:0 isolated_anon:0 [ 2431.109002][ T5322] active_file:22030 inactive_file:4671 isolated_file:0 [ 2431.109002][ T5322] unevictable:2816 dirty:193 writeback:0 [ 2431.109002][ T5322] slab_reclaimable:7126 slab_unreclaimable:116922 [ 2431.109002][ T5322] mapped:38361 shmem:6557 pagetables:1902 [ 2431.109002][ T5322] sec_pagetables:0 bounce:0 [ 2431.109002][ T5322] kernel_misc_reclaimable:0 [ 2431.109002][ T5322] free:1291489 free_pcp:15226 free_cma:0 [ 2431.413065][ T5322] Node 0 active_anon:44952kB inactive_anon:0kB active_file:88092kB inactive_file:18548kB unevictable:5684kB isolated(anon):0kB isolated(file):0kB mapped:149372kB dirty:768kB writeback:0kB shmem:20648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15048kB pagetables:7452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2431.503926][ T1265] usb 6-1: USB disconnect, device number 73 [ 2431.563445][T20408] usb 3-1: Using ep0 maxpacket: 16 [ 2431.594289][ T5322] Node 1 active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:136kB unevictable:5580kB isolated(anon):0kB isolated(file):0kB mapped:4072kB dirty:4kB writeback:0kB shmem:5580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2431.635868][T20408] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2431.656203][T20408] usb 3-1: config 0 has no interface number 0 [ 2431.682798][T20408] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2431.696930][T20408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2431.752740][T20408] usb 3-1: Product: syz [ 2431.757754][T20408] usb 3-1: Manufacturer: syz [ 2431.778052][ T5322] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2431.811421][T20408] usb 3-1: SerialNumber: syz [ 2431.821027][T20408] usb 3-1: config 0 descriptor?? [ 2431.829815][ T5322] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 2431.832500][T20408] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2431.852031][ T5322] [ 2431.860043][ T5322] Node 0 DMA32 free:1266076kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41752kB inactive_anon:0kB active_file:88092kB inactive_file:18548kB unevictable:5684kB writepending:768kB zspages:0kB present:3129332kB managed:2564192kB mlocked:4148kB bounce:0kB free_pcp:43696kB local_pcp:20580kB free_cma:0kB [ 2431.904167][ T5322] lowmem_reserve[]: 0 0 0 0 0 [ 2431.909101][ T5322] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2431.944627][ T5322] lowmem_reserve[]: 0 0 0 0 0 [ 2431.949722][ T5322] Node 1 Normal free:3889164kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:136kB unevictable:5580kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:4044kB bounce:0kB free_pcp:16744kB local_pcp:8716kB free_cma:0kB [ 2431.996878][ T5322] lowmem_reserve[]: 0 0 0 0 0 [ 2432.007380][ T5322] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2432.040371][ T5322] Node 0 DMA32: 1304*4kB (UME) 381*8kB (UME) 159*16kB (UME) 533*32kB (UME) 156*64kB (UME) 107*128kB (UME) 203*256kB (UME) 113*512kB (UME) 78*1024kB (UME) 11*2048kB (ME) 245*4096kB (UM) = 1267288kB [ 2432.072175][ T5322] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2432.093837][ T5322] Node 1 Normal: 4*4kB (UME) 10*8kB (UE) 8*16kB (ME) 131*32kB (UE) 100*64kB (UME) 28*128kB (UME) 12*256kB (UE) 6*512kB (UM) 2*1024kB (UM) 4*2048kB (UME) 942*4096kB (UM) = 3889216kB [ 2432.134417][ T5322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2432.145990][ T5322] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2432.161611][ T5322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2432.175376][ T5322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2432.186056][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 2432.186071][ T30] audit: type=1326 audit(1764968010.224:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.0.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470d18f749 code=0x7ffc0000 [ 2432.219077][ T5322] 33253 total pagecache pages [ 2432.225765][ T5322] 0 pages in swap cache [ 2432.234237][ T5322] Free swap = 124996kB [ 2432.239209][ T5322] Total swap = 124996kB [ 2432.245433][ T30] audit: type=1326 audit(1764968010.254:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.0.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470d18f749 code=0x7ffc0000 [ 2432.269311][ T5322] 2097051 pages RAM [ 2432.275271][ T5322] 0 pages HighMem/MovableOnly [ 2432.280282][ T5322] 424361 pages reserved [ 2432.285324][ T5322] 0 pages cma reserved [ 2432.300721][ T30] audit: type=1326 audit(1764968010.254:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.0.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f470d18f749 code=0x7ffc0000 [ 2432.351636][ T30] audit: type=1326 audit(1764968010.254:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.0.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470d18f749 code=0x7ffc0000 [ 2432.376523][ T30] audit: type=1326 audit(1764968010.254:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.0.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470d18f749 code=0x7ffc0000 [ 2432.463750][ T30] audit: type=1326 audit(1764968010.254:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.0.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f470d18f749 code=0x7ffc0000 [ 2432.508718][ T30] audit: type=1326 audit(1764968010.254:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.0.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470d18f749 code=0x7ffc0000 [ 2432.533676][ T30] audit: type=1326 audit(1764968010.254:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.0.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470d18f749 code=0x7ffc0000 [ 2432.563770][ T30] audit: type=1326 audit(1764968010.254:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.0.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f470d18df90 code=0x7ffc0000 [ 2432.588177][ T30] audit: type=1326 audit(1764968010.254:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.0.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470d18f749 code=0x7ffc0000 [ 2433.645924][T20408] gspca_spca1528: reg_w err -110 [ 2433.651008][T20408] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 2434.205998][ T5364] bond3 (unregistering): Released all slaves [ 2434.550807][ T5385] netlink: 'syz.5.8537': attribute type 29 has an invalid length. [ 2434.558908][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8537'. [ 2435.570480][T20408] usb 3-1: USB disconnect, device number 120 [ 2436.583163][ T1264] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2436.706065][ T3962] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2436.718869][ T3962] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2436.728294][ T3962] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2436.782598][ T3962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2436.795565][ T1264] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2436.808925][ T1264] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2436.819158][ T1264] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2436.828608][ T1264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2436.848619][ T5401] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2436.862099][ T3962] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2436.872139][ T1264] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2437.072006][ T1264] usb 5-1: USB disconnect, device number 96 [ 2437.912721][ T5410] chnl_net:caif_netlink_parms(): no params data found [ 2437.958307][T19311] bridge_slave_1: left allmulticast mode [ 2437.967631][T19311] bridge_slave_1: left promiscuous mode [ 2437.979279][T19311] bridge0: port 2(bridge_slave_1) entered disabled state [ 2438.000758][T19311] bridge_slave_0: left allmulticast mode [ 2438.013610][T19311] bridge_slave_0: left promiscuous mode [ 2438.021213][T19311] bridge0: port 1(bridge_slave_0) entered disabled state [ 2438.465803][T19311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2438.477411][T19311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2438.492880][T19311] bond0 (unregistering): Released all slaves [ 2438.896750][T19311] bond1 (unregistering): Released all slaves [ 2438.940716][ T5431] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2438.972154][T26467] Bluetooth: hci3: command tx timeout [ 2439.053553][ T5919] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2439.235915][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2439.267213][ T5919] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2439.468944][ T5919] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 2439.928466][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2440.184851][ T5919] usb 5-1: config 0 descriptor?? [ 2440.430596][ T5410] bridge0: port 1(bridge_slave_0) entered blocking state [ 2440.453718][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state [ 2440.475983][ T5410] bridge_slave_0: entered allmulticast mode [ 2440.490646][ T5410] bridge_slave_0: entered promiscuous mode [ 2440.569240][ T5410] bridge0: port 2(bridge_slave_1) entered blocking state [ 2440.629222][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state [ 2440.665473][ T5410] bridge_slave_1: entered allmulticast mode [ 2440.687499][ T5410] bridge_slave_1: entered promiscuous mode [ 2441.062218][T26467] Bluetooth: hci3: command tx timeout [ 2441.751382][T19311] hsr_slave_0: left promiscuous mode [ 2441.762084][T19311] hsr_slave_1: left promiscuous mode [ 2441.772200][T19311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2441.810362][T19311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2441.933481][ T1265] usb 5-1: USB disconnect, device number 97 [ 2441.951017][T19311] team0 (unregistering): Port device batadv1 removed [ 2443.131728][T26467] Bluetooth: hci3: command tx timeout [ 2444.429465][T20408] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2444.665506][T20408] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2444.676736][T20408] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2444.687287][T20408] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 2444.727862][T20408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2444.761224][T20408] usb 5-1: config 0 descriptor?? [ 2444.900396][T19311] team0 (unregistering): Port device team_slave_1 removed [ 2445.088272][T19311] team0 (unregistering): Port device team_slave_0 removed [ 2445.198516][T26467] Bluetooth: hci3: command tx timeout [ 2446.901095][ T5919] usb 5-1: USB disconnect, device number 98 [ 2446.920448][ T5410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2446.973416][ T5557] : renamed from batadv_slave_1 [ 2447.001062][ T5410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2447.578799][ T5410] team0: Port device team_slave_0 added [ 2447.650140][ T5410] team0: Port device team_slave_1 added [ 2447.917918][ T5410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2447.925136][ T5410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2447.951748][ T5410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2447.967754][ T5410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2447.984055][ T5410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2448.026630][ T5410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2448.194039][ T5410] hsr_slave_0: entered promiscuous mode [ 2448.201373][ T5410] hsr_slave_1: entered promiscuous mode [ 2448.214491][ T5410] debugfs: 'hsr0' already exists in 'hsr' [ 2448.220365][ T5410] Cannot create hsr debugfs directory [ 2448.254641][T19311] IPVS: stop unused estimator thread 0... [ 2449.642379][ T5410] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2449.704334][ T5410] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2449.774985][ T5410] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2449.927054][ T5629] veth1_to_team: Caught tx_queue_len zero misconfig [ 2450.024239][ T1264] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2450.069796][ T5410] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2450.196410][ T1264] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2450.227433][ T1264] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2450.247951][ T1264] usb 6-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 2450.273844][ T1264] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2450.336954][ T1264] usb 6-1: config 0 descriptor?? [ 2450.981699][ T5410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2451.308138][ T5410] 8021q: adding VLAN 0 to HW filter on device team0 [ 2451.346220][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 2451.353536][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2451.366410][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 2451.373646][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2451.820084][ T5410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2452.026388][ T5410] veth0_vlan: entered promiscuous mode [ 2452.076435][ T5410] veth1_vlan: entered promiscuous mode [ 2452.214995][ T5410] veth0_macvtap: entered promiscuous mode [ 2452.261552][ T5410] veth1_macvtap: entered promiscuous mode [ 2452.408158][ T5410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2452.457738][ T5410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2452.517390][ T5668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8592'. [ 2452.589898][ T1034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2452.601461][ T1034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2452.631559][ T1034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2452.655932][ T5666] netlink: 'syz.4.8592': attribute type 44 has an invalid length. [ 2452.674791][ T4151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2452.857340][ T5677] binder: 5674:5677 unknown command 0 [ 2452.907514][ T5677] binder: 5674:5677 ioctl c0306201 200000000080 returned -22 [ 2452.949616][ T5677] binder: 5674:5677 ioctl c0406618 200000000100 returned -22 [ 2452.972305][T13622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2453.002498][T13622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2453.062354][T19311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2453.075142][T19311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2453.165982][ T1265] usb 6-1: USB disconnect, device number 74 [ 2453.173524][T20408] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 2453.345901][T20408] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2453.362538][T20408] usb 5-1: not running at top speed; connect to a high speed hub [ 2453.435455][T20408] usb 5-1: config 17 has an invalid interface number: 8 but max is 1 [ 2453.444962][T20408] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 2453.454757][T20408] usb 5-1: config 17 has no interface number 0 [ 2453.461019][T20408] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 2453.473436][T20408] usb 5-1: config 17 interface 8 has no altsetting 0 [ 2453.494203][T20408] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 2453.533475][T20408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2453.559259][T20408] usb 5-1: Product: syz [ 2453.579514][T20408] usb 5-1: Manufacturer: syz [ 2453.589760][T20408] usb 5-1: SerialNumber: syz [ 2453.826940][ T1264] hid-generic 0000:0000:0000.00C1: unknown main item tag 0x0 [ 2453.906542][ T1264] hid-generic 0000:0000:0000.00C1: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2453.937717][T20408] usb 5-1: selecting invalid altsetting 0 [ 2454.171030][T20408] usb 5-1: 8:6 : no UAC_FORMAT_TYPE desc [ 2454.177223][T20408] usb 5-1: selecting invalid altsetting 0 [ 2454.235329][ T1264] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2454.408543][T20408] usb 5-1: USB disconnect, device number 99 [ 2454.475322][ T1264] usb 3-1: Using ep0 maxpacket: 16 [ 2454.497126][ T3040] udevd[3040]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2454.531306][ T1264] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2454.574984][ T1264] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2454.644562][ T1264] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2454.674750][ T1264] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2454.685775][ T1264] usb 3-1: Manufacturer: syz [ 2454.710751][ T1264] usb 3-1: config 0 descriptor?? [ 2454.766405][ T5706] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8599'. [ 2454.856910][ T5724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8601'. [ 2455.086457][ T1264] usb 3-1: USB disconnect, device number 121 [ 2455.121056][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8601'. [ 2456.570931][ T5744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8605'. [ 2456.649364][ T5747] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8605'. [ 2456.739601][ T5744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2458.426806][ T5775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8614'. [ 2459.553067][ T5994] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2459.704387][ T5994] usb 5-1: Using ep0 maxpacket: 32 [ 2459.711564][ T5994] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 2459.731103][ T5994] usb 5-1: config 0 has no interface number 0 [ 2459.753510][ T5994] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2459.768496][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2459.787019][ T5994] usb 5-1: Product: syz [ 2459.791237][ T5994] usb 5-1: Manufacturer: syz [ 2459.803324][ T5994] usb 5-1: SerialNumber: syz [ 2459.819517][ T5994] usb 5-1: config 0 descriptor?? [ 2459.844045][ T5994] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2460.052310][ T5994] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2460.088014][ T5994] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2460.473716][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2460.639621][ T1264] usb 5-1: USB disconnect, device number 100 [ 2460.652435][ T1264] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2460.724353][ T1264] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2460.740138][ T1264] quatech2 5-1:0.51: device disconnected [ 2460.811838][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 2460.811861][ T30] audit: type=1326 audit(1764968038.844:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b23d8f749 code=0x7ffc0000 [ 2460.864069][ T30] audit: type=1326 audit(1764968038.884:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8b23d8f749 code=0x7ffc0000 [ 2460.898495][ T30] audit: type=1326 audit(1764968038.884:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b23d8f749 code=0x7ffc0000 [ 2460.921579][ T5796] IPVS: Scheduler module ip_vs_ not found [ 2460.956702][ T30] audit: type=1326 audit(1764968038.884:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b23d8f749 code=0x7ffc0000 [ 2460.990334][ T30] audit: type=1326 audit(1764968038.884:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b23d8f749 code=0x7ffc0000 [ 2461.038157][ T30] audit: type=1326 audit(1764968038.894:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b23d8f749 code=0x7ffc0000 [ 2461.065806][ T30] audit: type=1326 audit(1764968038.894:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b23d8f749 code=0x7ffc0000 [ 2461.092553][ T30] audit: type=1326 audit(1764968038.894:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8b23d8f749 code=0x7ffc0000 [ 2461.193601][ T30] audit: type=1326 audit(1764968038.974:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b23d8f749 code=0x7ffc0000 [ 2461.258838][ T30] audit: type=1326 audit(1764968038.974:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b23d8f749 code=0x7ffc0000 [ 2463.713069][T20408] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2463.879389][T20408] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2463.895931][T20408] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2463.936182][T20408] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2464.102001][T20408] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2464.303817][ T5845] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2464.415567][T20408] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2464.676759][ T5845] fuse: Unknown parameter 'rootmod' [ 2464.864715][ T5866] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8643'. [ 2466.972444][ T5919] usb 3-1: USB disconnect, device number 122 [ 2467.433112][ T5919] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2467.585456][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 2467.616618][ T5919] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2467.665282][ T5919] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 2467.688164][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.694734][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.709703][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2467.718463][ T5919] usb 3-1: Product: syz [ 2467.722762][ T5919] usb 3-1: Manufacturer: syz [ 2467.728922][ T5919] usb 3-1: SerialNumber: syz [ 2467.752669][ T5919] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input129 [ 2467.754881][ T5910] netlink: 'syz.4.8651': attribute type 10 has an invalid length. [ 2467.821992][ T5910] bond0: entered promiscuous mode [ 2467.828822][ T5910] bond_slave_0: entered promiscuous mode [ 2467.837869][ T5910] mac80211_hwsim hwsim52 wlan1: entered promiscuous mode [ 2467.899191][ T5912] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8652'. [ 2468.176442][ T5922] netlink: 108 bytes leftover after parsing attributes in process `syz.5.8654'. [ 2468.192214][ T5188] bcm5974 3-1:1.0: could not read from device [ 2468.210182][ T5188] bcm5974 3-1:1.0: could not read from device [ 2468.224836][ T5919] usb 3-1: USB disconnect, device number 123 [ 2468.957983][ T5936] bond1 (unregistering): Released all slaves [ 2469.008215][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2469.008236][ T30] audit: type=1326 audit(1764968047.044:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.4.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057e38f749 code=0x7ffc0000 [ 2469.179368][ T30] audit: type=1326 audit(1764968047.084:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.4.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057e38f749 code=0x7ffc0000 [ 2469.252820][ T30] audit: type=1326 audit(1764968047.084:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.4.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f057e32b829 code=0x7ffc0000 [ 2469.323602][ T30] audit: type=1326 audit(1764968047.084:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.4.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f057e32b829 code=0x7ffc0000 [ 2469.384623][ T30] audit: type=1326 audit(1764968047.084:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.4.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057e38f749 code=0x7ffc0000 [ 2469.464423][ T30] audit: type=1326 audit(1764968047.094:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.4.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f057e32b829 code=0x7ffc0000 [ 2469.490790][ T1265] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2469.510812][ T30] audit: type=1326 audit(1764968047.094:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.4.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f057e32b829 code=0x7ffc0000 [ 2469.559181][ T30] audit: type=1326 audit(1764968047.094:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.4.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f057e32b829 code=0x7ffc0000 [ 2469.606537][ T30] audit: type=1326 audit(1764968047.094:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.4.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f057e32b829 code=0x7ffc0000 [ 2469.653337][ T1265] usb 6-1: device descriptor read/64, error -71 [ 2469.664813][ T30] audit: type=1326 audit(1764968047.094:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.4.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f057e32b829 code=0x7ffc0000 [ 2469.893552][ T1265] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2469.965028][ T5964] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8666'. [ 2470.033546][ T1265] usb 6-1: device descriptor read/64, error -71 [ 2470.164030][ T1265] usb usb6-port1: attempt power cycle [ 2470.273199][ T5994] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2470.435600][ T5994] usb 5-1: Using ep0 maxpacket: 32 [ 2470.442435][ T5994] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2470.458083][ T5994] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 2470.467407][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2470.475611][ T5994] usb 5-1: Product: syz [ 2470.479904][ T5994] usb 5-1: Manufacturer: syz [ 2470.484630][ T5994] usb 5-1: SerialNumber: syz [ 2470.500700][ T5994] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input130 [ 2470.503458][ T1265] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2470.535002][ T1265] usb 6-1: device descriptor read/8, error -71 [ 2470.773501][ T1265] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2470.804148][ T1265] usb 6-1: device descriptor read/8, error -71 [ 2470.819760][ T5188] bcm5974 5-1:1.0: could not read from device [ 2470.829614][ T5188] bcm5974 5-1:1.0: could not read from device [ 2470.857673][ T5188] bcm5974 5-1:1.0: could not read from device [ 2470.876709][ T5188] bcm5974 5-1:1.0: could not read from device [ 2470.879362][ T5994] usb 5-1: USB disconnect, device number 101 [ 2470.926900][ T1265] usb usb6-port1: unable to enumerate USB device [ 2471.171836][ T5983] bond3 (unregistering): Released all slaves [ 2471.383235][ T1265] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2471.545239][ T1265] usb 3-1: device descriptor read/64, error -71 [ 2471.803780][ T1265] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2472.023467][ T1265] usb 3-1: device descriptor read/64, error -71 [ 2472.133983][ T1265] usb usb3-port1: attempt power cycle [ 2472.194451][ T6005] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8678'. [ 2472.342065][ T6010] binder: 6008:6010 unknown command 0 [ 2472.348095][ T6010] binder: 6008:6010 ioctl c0306201 200000000080 returned -22 [ 2472.353193][ T5994] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 2472.365346][ T6010] binder: 6008:6010 ioctl c0406618 200000000100 returned -22 [ 2472.503783][ T1265] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2472.520605][ T5994] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2472.533841][ T5994] usb 6-1: not running at top speed; connect to a high speed hub [ 2472.534852][ T1265] usb 3-1: device descriptor read/8, error -71 [ 2472.556304][ T5994] usb 6-1: config 5 has an invalid interface number: 246 but max is 0 [ 2472.564863][ T5994] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 2472.582627][ T5994] usb 6-1: config 5 has no interface number 0 [ 2472.589968][ T5994] usb 6-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2472.602207][ T5994] usb 6-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2472.602361][ T6017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8683'. [ 2472.615690][ T5994] usb 6-1: config 5 interface 246 has no altsetting 0 [ 2472.617868][ T5994] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 2472.643299][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2472.651572][ T5994] usb 6-1: Product: syz [ 2472.655943][ T5994] usb 6-1: Manufacturer: syz [ 2472.660761][ T5994] usb 6-1: SerialNumber: syz [ 2472.803576][ T1265] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2472.845494][ T1265] usb 3-1: device descriptor read/8, error -71 [ 2472.897375][ T5994] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2472.901399][ T36] usb 6-1: Failed to submit usb control message: -71 [ 2472.926092][ T36] usb 6-1: unable to send the bmi data to the device: -71 [ 2472.933265][ T5994] usb 6-1: USB disconnect, device number 79 [ 2472.948563][ T36] usb 6-1: unable to get target info from device [ 2472.957729][ T1265] usb usb3-port1: unable to enumerate USB device [ 2472.969549][ T36] usb 6-1: could not get target info (-71) [ 2472.979454][ T36] usb 6-1: could not probe fw (-71) [ 2473.813351][ T714] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2473.993742][ T714] usb 6-1: Using ep0 maxpacket: 16 [ 2474.006655][ T714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2474.009407][ T6050] binder: 6047:6050 unknown command 0 [ 2474.018253][ T714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2474.024187][ T6050] binder: 6047:6050 ioctl c0306201 200000000080 returned -22 [ 2474.062214][ T6050] binder: 6047:6050 ioctl c0406618 200000000100 returned -22 [ 2474.063366][ T714] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2474.113502][ T714] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2474.156280][ T714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2474.182227][ T714] usb 6-1: config 0 descriptor?? [ 2474.521816][ T6058] netlink: 408 bytes leftover after parsing attributes in process `syz.6.8695'. [ 2474.548569][ T6060] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 2474.661247][ T714] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.00C2/input/input131 [ 2474.704112][ T714] microsoft 0003:045E:07DA.00C2: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 2474.963920][ T714] usb 6-1: USB disconnect, device number 80 [ 2475.212776][ T6068] fido_id[6068]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2475.526095][ T1265] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2475.713946][ T1265] usb 3-1: Using ep0 maxpacket: 16 [ 2475.724403][ T1265] usb 3-1: config 0 has no interfaces? [ 2475.745203][ T1265] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2475.943599][ T1265] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2475.968574][ T1265] usb 3-1: Manufacturer: syz [ 2476.035977][ T1265] usb 3-1: config 0 descriptor?? [ 2476.564053][ T1265] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2476.732765][ T1265] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2476.754304][ T1265] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2476.837456][ T6067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2476.897352][ T1265] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2476.920476][ T1265] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2476.942465][ T1265] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2476.958474][ T1265] usb 6-1: config 0 descriptor?? [ 2477.003852][ T6078] netlink: 100 bytes leftover after parsing attributes in process `syz.6.8699'. [ 2477.325197][ T6089] netlink: 'syz.4.8705': attribute type 13 has an invalid length. [ 2477.411966][ T1265] plantronics 0003:047F:FFFF.00C3: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2477.668141][ T5919] usb 6-1: USB disconnect, device number 81 [ 2478.002625][ T6098] binder: 6096:6098 unknown command 0 [ 2478.010006][ T6098] binder: 6096:6098 ioctl c0306201 200000000080 returned -22 [ 2478.069445][ T6099] binder: 6096:6099 ioctl c0406618 200000000100 returned -22 [ 2478.115483][ T5919] usb 3-1: USB disconnect, device number 2 [ 2478.341890][ T6106] netlink: 408 bytes leftover after parsing attributes in process `syz.5.8710'. [ 2478.543225][ T5919] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2478.694965][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2478.709703][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2478.720087][ T5919] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2478.729320][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2478.739938][ T5919] usb 3-1: config 0 descriptor?? [ 2478.897883][ T6108] x_tables: duplicate underflow at hook 2 [ 2479.221650][ T5994] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2479.393094][ T5994] usb 6-1: Using ep0 maxpacket: 32 [ 2479.405883][ T5994] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2479.430953][ T5994] usb 6-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 2479.449069][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2479.459139][ T5919] usbhid 3-1:0.0: can't add hid device: -71 [ 2479.473178][ T5994] usb 6-1: Product: syz [ 2479.477397][ T5994] usb 6-1: Manufacturer: syz [ 2479.490866][ T5919] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2479.499000][ T5994] usb 6-1: SerialNumber: syz [ 2479.510874][ T5919] usb 3-1: USB disconnect, device number 3 [ 2479.528867][ T5994] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input133 [ 2479.747857][ T6134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8720'. [ 2480.093590][ T5919] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2480.243488][ T1265] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2480.263800][ T5919] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2480.284894][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2480.300925][ T5919] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2480.327126][ T5188] bcm5974 6-1:1.0: could not read from device [ 2480.336037][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2480.351838][ T5188] bcm5974 6-1:1.0: could not read from device [ 2480.361606][ T5188] bcm5974 6-1:1.0: could not read from device [ 2480.361778][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2480.380732][ T5994] usb 6-1: USB disconnect, device number 82 [ 2480.401526][ T5919] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2480.424551][ T1265] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2480.451051][ T1265] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2480.484687][ T1265] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 2480.485459][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2480.496016][ T1265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2480.544456][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2480.575539][ T5919] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2480.588016][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2480.602666][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2480.608116][ T1265] usb 5-1: config 0 descriptor?? [ 2480.613801][ T5919] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2480.632231][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2480.654895][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2480.672120][ T5919] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2480.688963][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2480.697320][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2480.707226][ T5919] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2480.721352][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2480.731750][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2480.741187][ T5919] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2480.752494][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2480.761853][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2480.762491][ T6142] binder: 6139:6142 unknown command 0 [ 2480.771487][ T5919] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2480.776356][ T6142] binder: 6139:6142 ioctl c0306201 200000000080 returned -22 [ 2480.800947][ T6142] binder: 6139:6142 ioctl c0406618 200000000100 returned -22 [ 2480.811047][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2480.821236][ T5919] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2480.833061][ T5919] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2480.841719][ T5919] usb 3-1: Product: syz [ 2481.022810][ T6144] netlink: 408 bytes leftover after parsing attributes in process `syz.5.8722'. [ 2481.035859][ T5919] usb 3-1: Manufacturer: syz [ 2481.048983][ T5919] usb 3-1: SerialNumber: syz [ 2481.065405][ T5919] usb 3-1: config 0 descriptor?? [ 2481.097119][ T5919] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 2481.327810][T32474] usb 3-1: USB disconnect, device number 4 [ 2481.335953][T32474] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 2481.537240][ T6150] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8725'. [ 2481.772710][ T6159] bond3 (unregistering): Released all slaves [ 2482.026557][ T6165] loop9: detected capacity change from 0 to 7 [ 2482.045182][ T6165] loop9: [POWERTEC] p1 p2 p3 [ 2482.059868][ T6165] loop9: p1 size 65536 extends beyond EOD, truncated [ 2482.108183][ T6165] loop9: p2 start 779379555 is beyond EOD, truncated [ 2482.130961][ T6165] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 2482.220390][ T5777] udevd[5777]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 2482.245797][ T6065] udevd[6065]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 2482.528749][ T6178] binder: 6176:6178 unknown command 0 [ 2482.542980][ T6178] binder: 6176:6178 ioctl c0306201 200000000080 returned -22 [ 2482.747656][ T1265] usb 5-1: USB disconnect, device number 102 [ 2482.753914][ T6180] netlink: 408 bytes leftover after parsing attributes in process `syz.4.8737'. [ 2483.013401][T32474] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2483.173534][T32474] usb 6-1: Using ep0 maxpacket: 32 [ 2483.181589][T32474] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2483.192480][T32474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2483.207420][T32474] usb 6-1: config 0 descriptor?? [ 2483.221642][T32474] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2483.683181][ T5919] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2483.822506][ T6191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2483.831404][ T1265] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2483.839793][ T6191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2483.845208][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2483.861055][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2483.876629][ T5919] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2483.886664][ T5919] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2483.895174][ T5919] usb 5-1: Manufacturer: syz [ 2483.898844][T32474] gspca_sunplus: reg_r err -71 [ 2483.905295][ T5919] usb 5-1: config 0 descriptor?? [ 2483.910851][T32474] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 2483.951362][T32474] usb 6-1: USB disconnect, device number 83 [ 2483.993611][ T1265] usb 3-1: device descriptor read/64, error -71 [ 2484.253026][ T1265] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2484.282065][ T6209] loop9: detected capacity change from 0 to 7 [ 2484.289878][ T6209] loop9: [POWERTEC] p1 p2 p3 [ 2484.295304][ T6209] loop9: p1 size 65536 extends beyond EOD, truncated [ 2484.304295][ T6209] loop9: p2 start 779379555 is beyond EOD, truncated [ 2484.311134][ T6209] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 2484.412041][ T6065] udevd[6065]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 2484.413546][ T1265] usb 3-1: device descriptor read/64, error -71 [ 2484.433606][ T5779] udevd[5779]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 2484.520830][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8745'. [ 2484.535806][ T6186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2484.549676][ T6186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2484.564071][ T1265] usb usb3-port1: attempt power cycle [ 2484.672304][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8748'. [ 2484.768269][ T5919] uclogic 0003:256C:006D.00C4: failed retrieving string descriptor #200: -71 [ 2484.780045][ T5919] uclogic 0003:256C:006D.00C4: failed retrieving pen parameters: -71 [ 2484.788945][ T5919] uclogic 0003:256C:006D.00C4: failed probing pen v2 parameters: -71 [ 2484.797883][ T5919] uclogic 0003:256C:006D.00C4: failed probing parameters: -71 [ 2484.805881][ T5919] uclogic 0003:256C:006D.00C4: probe with driver uclogic failed with error -71 [ 2484.826376][ T5919] usb 5-1: USB disconnect, device number 103 [ 2484.924488][ T1265] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2484.956975][ T1265] usb 3-1: device descriptor read/8, error -71 [ 2485.203835][ T1265] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2485.223944][ T1265] usb 3-1: device descriptor read/8, error -71 [ 2485.239689][ T6226] binder: 6224:6226 unknown command 0 [ 2485.245500][ T6226] binder: 6224:6226 ioctl c0306201 200000000080 returned -22 [ 2485.334110][ T1265] usb usb3-port1: unable to enumerate USB device [ 2485.603716][ T5919] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 2485.774550][ T5919] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2485.782698][ T5919] usb 5-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 2485.794966][ T5919] usb 5-1: config 0 has no interface number 0 [ 2485.801092][ T5919] usb 5-1: config 0 interface 65 has no altsetting 0 [ 2485.810293][ T5919] usb 5-1: New USB device found, idVendor=045e, idProduct=0448, bcdDevice=ab.ae [ 2485.819585][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2485.827826][ T5919] usb 5-1: Product: syz [ 2485.832054][ T5919] usb 5-1: Manufacturer: syz [ 2485.837104][ T5919] usb 5-1: SerialNumber: syz [ 2485.845517][ T5919] usb 5-1: config 0 descriptor?? [ 2485.943727][T32474] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2486.105996][T32474] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 2486.126588][T32474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2486.140418][T32474] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2486.150289][ T6243] loop9: detected capacity change from 0 to 7 [ 2486.157363][T32474] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2486.166763][T32474] usb 6-1: Manufacturer: syz [ 2486.171435][ T6243] loop9: [POWERTEC] p1 p2 p3 [ 2486.178906][ T6243] loop9: p1 size 65536 extends beyond EOD, truncated [ 2486.187702][T32474] usb 6-1: config 0 descriptor?? [ 2486.195912][ T6243] loop9: p2 start 779379555 is beyond EOD, truncated [ 2486.206004][ T6243] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 2486.296866][ T5896] udevd[5896]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 2486.307479][ T6065] udevd[6065]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 2486.319489][T32474] rc_core: IR keymap rc-hauppauge not found [ 2486.327336][T32474] Registered IR keymap rc-empty [ 2486.337637][T32474] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2486.366439][T32474] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input134 [ 2486.560702][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 2486.560722][ T30] audit: type=1326 audit(1764968064.594:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.8757" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b23d8f749 code=0x0 [ 2486.659785][ C0] igorplugusb 6-1:0.0: receive overflow, at least 13 lost [ 2486.879158][ T5994] usb 6-1: USB disconnect, device number 84 [ 2487.826794][ T6265] FAULT_INJECTION: forcing a failure. [ 2487.826794][ T6265] name failslab, interval 1, probability 0, space 0, times 0 [ 2487.840453][ T6265] CPU: 1 UID: 0 PID: 6265 Comm: syz.4.8763 Tainted: G L syzkaller #0 PREEMPT(full) [ 2487.840486][ T6265] Tainted: [L]=SOFTLOCKUP [ 2487.840494][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2487.840511][ T6265] Call Trace: [ 2487.840519][ T6265] [ 2487.840528][ T6265] dump_stack_lvl+0x189/0x250 [ 2487.840556][ T6265] ? __pfx____ratelimit+0x10/0x10 [ 2487.840585][ T6265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2487.840607][ T6265] ? __pfx__printk+0x10/0x10 [ 2487.840640][ T6265] ? __pfx___might_resched+0x10/0x10 [ 2487.840664][ T6265] ? fs_reclaim_acquire+0x7d/0x100 [ 2487.840696][ T6265] should_fail_ex+0x414/0x560 [ 2487.840731][ T6265] should_failslab+0xa8/0x100 [ 2487.840752][ T6265] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2487.840778][ T6265] ? __alloc_skb+0x255/0x430 [ 2487.840797][ T6265] ? napi_skb_cache_get+0x4a5/0x780 [ 2487.840827][ T6265] ? napi_skb_cache_get+0x151/0x780 [ 2487.840851][ T6265] __alloc_skb+0x255/0x430 [ 2487.840875][ T6265] ? __pfx___alloc_skb+0x10/0x10 [ 2487.840899][ T6265] ? netlink_autobind+0xdb/0x300 [ 2487.840923][ T6265] ? netlink_autobind+0x2c2/0x300 [ 2487.840953][ T6265] netlink_sendmsg+0x5c6/0xb30 [ 2487.840987][ T6265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2487.841015][ T6265] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2487.841039][ T6265] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2487.841067][ T6265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2487.841092][ T6265] __sock_sendmsg+0x21c/0x270 [ 2487.841121][ T6265] ____sys_sendmsg+0x505/0x820 [ 2487.841152][ T6265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2487.841184][ T6265] ? import_iovec+0x74/0xa0 [ 2487.841212][ T6265] ___sys_sendmsg+0x21f/0x2a0 [ 2487.841238][ T6265] ? __pfx____sys_sendmsg+0x10/0x10 [ 2487.841268][ T6265] ? rcu_read_lock_any_held+0xb3/0x120 [ 2487.841325][ T6265] ? __fget_files+0x2a/0x420 [ 2487.841346][ T6265] ? __fget_files+0x3a0/0x420 [ 2487.841380][ T6265] __x64_sys_sendmsg+0x19b/0x260 [ 2487.841409][ T6265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2487.841446][ T6265] ? __pfx_ksys_write+0x10/0x10 [ 2487.841479][ T6265] ? do_syscall_64+0xbe/0xf80 [ 2487.841505][ T6265] do_syscall_64+0xfa/0xf80 [ 2487.841526][ T6265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.841570][ T6265] ? clear_bhb_loop+0x60/0xb0 [ 2487.841595][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.841614][ T6265] RIP: 0033:0x7f057e38f749 [ 2487.841634][ T6265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2487.841652][ T6265] RSP: 002b:00007f057c5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2487.841677][ T6265] RAX: ffffffffffffffda RBX: 00007f057e5e5fa0 RCX: 00007f057e38f749 [ 2487.841692][ T6265] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000004 [ 2487.841707][ T6265] RBP: 00007f057c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2487.841720][ T6265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2487.841732][ T6265] R13: 00007f057e5e6038 R14: 00007f057e5e5fa0 R15: 00007f057e70fa28 [ 2487.841767][ T6265] [ 2488.355954][ T6274] binder: 6272:6274 unknown command 0 [ 2488.361511][ T6274] binder: 6272:6274 ioctl c0306201 200000000080 returned -22 [ 2488.473233][ T1269] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2488.481207][ T5994] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2488.633020][ T1269] usb 3-1: Using ep0 maxpacket: 32 [ 2488.641353][ T1269] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2488.659357][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2488.679273][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2488.701402][ T5994] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2488.712645][ T1269] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 2488.729053][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2488.737626][ T1269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2488.754039][ T5994] usb 6-1: config 0 descriptor?? [ 2488.759302][ T1269] usb 3-1: Product: syz [ 2488.764591][ T1269] usb 3-1: Manufacturer: syz [ 2488.769787][ T1269] usb 3-1: SerialNumber: syz [ 2488.814431][ T1269] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input136 [ 2489.382853][ T5994] hid-led 0003:27B8:01ED.00C5: probe with driver hid-led failed with error -71 [ 2489.566154][ T5994] usb 6-1: USB disconnect, device number 85 [ 2489.829743][ T6283] bond3 (unregistering): Released all slaves [ 2489.870717][ T5188] bcm5974 3-1:1.0: could not read from device [ 2489.879809][ T5188] bcm5974 3-1:1.0: could not read from device [ 2489.888129][ T5188] bcm5974 3-1:1.0: could not read from device [ 2489.907667][ T1269] usb 3-1: USB disconnect, device number 9 [ 2490.183555][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2490.205833][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2490.225536][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2490.243561][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2490.453156][ T1269] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2490.633947][ T1269] usb 6-1: Using ep0 maxpacket: 16 [ 2490.645003][ T1269] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2490.665255][ T1269] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2490.686258][ T1269] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2490.701424][ T1269] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2490.718507][ T1269] usb 6-1: Product: syz [ 2490.728357][ T1269] usb 6-1: Manufacturer: syz [ 2490.737953][ T1269] usb 6-1: SerialNumber: syz [ 2490.878065][ T6309] FAULT_INJECTION: forcing a failure. [ 2490.878065][ T6309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2490.921641][ T6309] CPU: 0 UID: 0 PID: 6309 Comm: syz.4.8775 Tainted: G L syzkaller #0 PREEMPT(full) [ 2490.921677][ T6309] Tainted: [L]=SOFTLOCKUP [ 2490.921685][ T6309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2490.921697][ T6309] Call Trace: [ 2490.921706][ T6309] [ 2490.921715][ T6309] dump_stack_lvl+0x189/0x250 [ 2490.921745][ T6309] ? __pfx____ratelimit+0x10/0x10 [ 2490.921776][ T6309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2490.921799][ T6309] ? __pfx__printk+0x10/0x10 [ 2490.921828][ T6309] ? __might_fault+0xb0/0x130 [ 2490.921868][ T6309] should_fail_ex+0x414/0x560 [ 2490.921904][ T6309] _copy_from_iter+0x1cd/0x1630 [ 2490.921929][ T6309] ? __build_skb_around+0x22d/0x3c0 [ 2490.921957][ T6309] ? __pfx__copy_from_iter+0x10/0x10 [ 2490.921972][ T6309] ? __alloc_skb+0x2f1/0x430 [ 2490.921996][ T6309] ? __pfx___alloc_skb+0x10/0x10 [ 2490.922020][ T6309] ? netlink_sendmsg+0x642/0xb30 [ 2490.922045][ T6309] ? skb_put+0x11b/0x210 [ 2490.922071][ T6309] netlink_sendmsg+0x6b2/0xb30 [ 2490.922117][ T6309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2490.922146][ T6309] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2490.922172][ T6309] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2490.922201][ T6309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2490.922226][ T6309] __sock_sendmsg+0x21c/0x270 [ 2490.922259][ T6309] ____sys_sendmsg+0x505/0x820 [ 2490.922300][ T6309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2490.922334][ T6309] ? import_iovec+0x74/0xa0 [ 2490.922360][ T6309] ___sys_sendmsg+0x21f/0x2a0 [ 2490.922386][ T6309] ? __pfx____sys_sendmsg+0x10/0x10 [ 2490.922419][ T6309] ? rcu_read_lock_any_held+0xb3/0x120 [ 2490.922475][ T6309] ? __fget_files+0x2a/0x420 [ 2490.922494][ T6309] ? __fget_files+0x3a0/0x420 [ 2490.922538][ T6309] __x64_sys_sendmsg+0x19b/0x260 [ 2490.922572][ T6309] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2490.922605][ T6309] ? __pfx_ksys_write+0x10/0x10 [ 2490.922635][ T6309] ? do_syscall_64+0xbe/0xf80 [ 2490.922660][ T6309] do_syscall_64+0xfa/0xf80 [ 2490.922680][ T6309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2490.922700][ T6309] ? clear_bhb_loop+0x60/0xb0 [ 2490.922724][ T6309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2490.922745][ T6309] RIP: 0033:0x7f057e38f749 [ 2490.922764][ T6309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2490.922780][ T6309] RSP: 002b:00007f057c5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2490.922805][ T6309] RAX: ffffffffffffffda RBX: 00007f057e5e5fa0 RCX: 00007f057e38f749 [ 2490.922819][ T6309] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000004 [ 2490.922833][ T6309] RBP: 00007f057c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2490.922845][ T6309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2490.922858][ T6309] R13: 00007f057e5e6038 R14: 00007f057e5e5fa0 R15: 00007f057e70fa28 [ 2490.922890][ T6309] [ 2491.271070][ T1269] usb 6-1: 0:2 : does not exist [ 2491.296209][ T1269] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2491.401684][ T1269] usb 6-1: USB disconnect, device number 86 [ 2491.462224][ T6279] udevd[6279]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2492.158806][ T6329] bond1 (unregistering): Released all slaves [ 2492.188446][ T6332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2492.214111][ T6332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2492.463308][T32474] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2492.673562][T32474] usb 3-1: device descriptor read/64, error -71 [ 2492.680561][ T6347] openvswitch: netlink: Tunnel attr 152 out of range max 16 [ 2492.917668][T32474] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2492.983981][ T714] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 2493.037429][ T6358] netlink: 'syz.6.8790': attribute type 6 has an invalid length. [ 2493.053464][T32474] usb 3-1: device descriptor read/64, error -71 [ 2493.133762][ T714] usb 6-1: device descriptor read/64, error -71 [ 2493.173740][T32474] usb usb3-port1: attempt power cycle [ 2493.373458][ T714] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 2493.463735][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2493.478493][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2493.513837][T32474] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2493.523477][ T714] usb 6-1: device descriptor read/64, error -71 [ 2493.554117][T32474] usb 3-1: device descriptor read/8, error -71 [ 2493.633702][ T714] usb usb6-port1: attempt power cycle [ 2493.793566][T32474] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2493.814270][T32474] usb 3-1: device descriptor read/8, error -71 [ 2493.923715][T32474] usb usb3-port1: unable to enumerate USB device [ 2493.973009][ T714] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 2493.993921][ T714] usb 6-1: device descriptor read/8, error -71 [ 2494.233656][ T714] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 2494.399479][ T714] usb 6-1: device descriptor read/8, error -71 [ 2494.513625][ T714] usb usb6-port1: unable to enumerate USB device [ 2495.372219][ T6379] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 5, id = 0 [ 2495.376800][ T6378] IPVS: stopping backup sync thread 6379 ... [ 2495.401724][ T6378] binder: 6377:6378 ioctl c0306201 200000004a40 returned -22 [ 2495.663026][ T1269] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2495.833185][ T1269] usb 3-1: Using ep0 maxpacket: 16 [ 2495.839671][ T1269] usb 3-1: too many configurations: 98, using maximum allowed: 8 [ 2495.851829][ T1269] usb 3-1: config 6 has no interfaces? [ 2495.859664][ T1269] usb 3-1: config 6 has no interfaces? [ 2495.870770][ T1269] usb 3-1: config 6 has no interfaces? [ 2495.877647][ T1269] usb 3-1: config 6 has no interfaces? [ 2495.885828][ T1269] usb 3-1: config 6 has no interfaces? [ 2495.892181][ T1269] usb 3-1: config 6 has no interfaces? [ 2495.901068][ T1269] usb 3-1: config 6 has no interfaces? [ 2495.908960][ T1269] usb 3-1: config 6 has no interfaces? [ 2495.920602][ T1269] usb 3-1: string descriptor 0 read error: -71 [ 2495.927630][ T1269] usb 3-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 2495.937239][ T1269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154 [ 2495.948193][ T1269] usb 3-1: rejected 8 configurations due to insufficient available bus power [ 2495.957462][ T1269] usb 3-1: no configuration chosen from 8 choices [ 2495.966715][ T1269] usb 3-1: USB disconnect, device number 14 [ 2496.071787][T32474] hid-generic 0003:0003:0000.00C6: unknown main item tag 0x0 [ 2496.080814][T32474] hid-generic 0003:0003:0000.00C6: unknown main item tag 0x0 [ 2496.089170][T32474] hid-generic 0003:0003:0000.00C6: unknown main item tag 0x0 [ 2496.097992][T32474] hid-generic 0003:0003:0000.00C6: unknown main item tag 0x0 [ 2496.112001][ T8082] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2496.122170][T32474] hid-generic 0003:0003:0000.00C6: unknown main item tag 0x0 [ 2496.145906][T32474] hid-generic 0003:0003:0000.00C6: unknown main item tag 0x0 [ 2496.174149][T32474] hid-generic 0003:0003:0000.00C6: unknown main item tag 0x0 [ 2496.187918][T32474] hid-generic 0003:0003:0000.00C6: unknown main item tag 0x0 [ 2496.198495][T32474] hid-generic 0003:0003:0000.00C6: unknown main item tag 0x0 [ 2496.219973][T32474] hid-generic 0003:0003:0000.00C6: unknown main item tag 0x0 [ 2496.250664][T32474] hid-generic 0003:0003:0000.00C6: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 2496.313814][ T8082] usb 6-1: Using ep0 maxpacket: 32 [ 2496.330036][ T8082] usb 6-1: config 0 has an invalid interface number: 96 but max is 2 [ 2496.346116][ T8082] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2496.357697][ T6401] fido_id[6401]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2496.391589][ T8082] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2496.416311][ T8082] usb 6-1: config 0 has no interface number 0 [ 2496.431858][ T8082] usb 6-1: config 0 interface 96 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2496.455933][ T8082] usb 6-1: config 0 interface 96 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2496.468788][ T8082] usb 6-1: config 0 interface 96 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 16 [ 2496.487038][ T8082] usb 6-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=28.cb [ 2496.497115][ T8082] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2496.506383][ T8082] usb 6-1: Product: 塗䶞뻀ჸ螕淰쯕銿ገ䴕藭빙ႝ丟묓℞鳊呲黥ᛑㄉ酱븺蒹╷꧳╒载῵웿펚騄왦엍摵靂ꖛ쵶ು鲻⏈꘠㩘뿅鲅춢㮖㙖願별☒鬐ↇ붲ᏺ鿽쇯톩猪኱뿋ձ͹ᔚᙅᝀ샭၅꬯槳備㞔䆅㋣풳퍊 [ 2496.662227][ T8082] usb 6-1: Manufacturer: 烊飘ᩳ䏯䟵፽溕呀慎ꨗ㓄쮚誆㉴天㞻ꗁ皫浽圬ᡌ䝬渓濱賫厡ܡ붖긃刄Ⲛ゛胶瘥ꣅ뎈榦搣뢼㶨탳ꔥ걔翴忲ƌﾮ☳꥝曍㦉탢爤礮萭ậ℔듳ᰎ惨༎肍寎ꍛ徛큑热ḇ刭곊䍧뗪쒦鯛㆒垰媶ꅯ槈쐧媓䝱鰍ᄻ錁੬藰쿗Ì⌴㳻㼿첕ﻨ饘줄 [ 2496.750856][ T8082] usb 6-1: SerialNumber: 䊒욙쐑芞䡶ﲼ帼弃粜塹ꦻ霰䉼덄㌛컅ࢪⒹ뙢৉蝒㧓À〔㸊胺ཞṬ悲曋ቲ삊뙷酽䨏相灙ᇷተߎ菮、≧כֿᎺ鈎ᐱย᫨﷛빟ܛ郆皣㕋楢꬙㭫⎳䳷໅㧾嬆⢜ׁ蟙榎⡞鐴ῷ䬫濲縷喚襟栈맗ᳬ촻࿦椷鵂ˮ [ 2496.861633][ T8082] usb 6-1: config 0 descriptor?? [ 2497.047676][ T6419] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8808'. [ 2497.249369][ T8082] gspca_main: spca501-2.14.0 probing 1776:501c [ 2497.267901][ T8082] gspca_spca501: reg write: error -71 [ 2497.305164][ T8082] spca501 6-1:0.96: Reg write failed for 0x02,0x07,0x05 [ 2497.323875][ T8082] spca501 6-1:0.96: probe with driver spca501 failed with error -22 [ 2497.365731][ T8082] usb 6-1: USB disconnect, device number 91 [ 2497.624022][ T1269] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2497.807902][ T1269] usb 3-1: device descriptor read/64, error -71 [ 2498.113968][ T1269] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2498.253174][ T1269] usb 3-1: device descriptor read/64, error -71 [ 2498.377828][ T1269] usb usb3-port1: attempt power cycle [ 2498.884776][ T1269] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2499.091134][ T1269] usb 3-1: device descriptor read/8, error -71 [ 2499.380703][ T6459] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8819'. [ 2499.453166][ T1269] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2499.486875][ T1269] usb 3-1: device descriptor read/8, error -71 [ 2499.615207][ T1269] usb usb3-port1: unable to enumerate USB device [ 2501.019211][ T6475] netlink: 136 bytes leftover after parsing attributes in process `syz.4.8822'. [ 2501.031514][ T6475] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 2501.242316][ T6483] tipc: Enabled bearer , priority 0 [ 2501.252056][ T6483] syzkaller0: entered promiscuous mode [ 2501.258518][ T6483] syzkaller0: entered allmulticast mode [ 2502.196072][ T6480] tipc: Resetting bearer [ 2502.506101][ T6480] tipc: Disabling bearer [ 2502.694936][ T1265] tipc: Node number set to 2748722705 [ 2502.989727][ T6508] loop9: detected capacity change from 0 to 7 [ 2502.998128][ T6508] loop9: [POWERTEC] p1 p2 p3 [ 2503.005947][ T6508] loop9: p1 size 65536 extends beyond EOD, truncated [ 2503.143383][ T6508] loop9: p2 start 779379555 is beyond EOD, truncated [ 2503.162860][ T6508] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 2503.336111][ T5777] udevd[5777]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 2503.336663][ T6279] udevd[6279]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 2503.732731][ T6521] FAULT_INJECTION: forcing a failure. [ 2503.732731][ T6521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2503.753736][ T6521] CPU: 1 UID: 0 PID: 6521 Comm: syz.6.8836 Tainted: G L syzkaller #0 PREEMPT(full) [ 2503.753772][ T6521] Tainted: [L]=SOFTLOCKUP [ 2503.753781][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2503.753793][ T6521] Call Trace: [ 2503.753803][ T6521] [ 2503.753812][ T6521] dump_stack_lvl+0x189/0x250 [ 2503.753844][ T6521] ? __pfx____ratelimit+0x10/0x10 [ 2503.753876][ T6521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2503.753901][ T6521] ? __pfx__printk+0x10/0x10 [ 2503.753945][ T6521] should_fail_ex+0x414/0x560 [ 2503.753982][ T6521] _copy_to_user+0x31/0xb0 [ 2503.754008][ T6521] simple_read_from_buffer+0xe1/0x170 [ 2503.754037][ T6521] proc_fail_nth_read+0x1b3/0x220 [ 2503.754072][ T6521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2503.754105][ T6521] ? rw_verify_area+0x2a6/0x4d0 [ 2503.754134][ T6521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2503.754166][ T6521] vfs_read+0x200/0xa30 [ 2503.754192][ T6521] ? fdget_pos+0x247/0x320 [ 2503.754220][ T6521] ? __pfx___mutex_lock+0x10/0x10 [ 2503.754242][ T6521] ? __pfx_vfs_read+0x10/0x10 [ 2503.754273][ T6521] ? __fget_files+0x2a/0x420 [ 2503.754300][ T6521] ? __fget_files+0x3a0/0x420 [ 2503.754321][ T6521] ? __fget_files+0x2a/0x420 [ 2503.754353][ T6521] ksys_read+0x145/0x250 [ 2503.754384][ T6521] ? __pfx_ksys_read+0x10/0x10 [ 2503.754417][ T6521] ? do_syscall_64+0xbe/0xf80 [ 2503.754442][ T6521] do_syscall_64+0xfa/0xf80 [ 2503.754464][ T6521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2503.754485][ T6521] ? clear_bhb_loop+0x60/0xb0 [ 2503.754510][ T6521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2503.754541][ T6521] RIP: 0033:0x7f55c358e15c [ 2503.754563][ T6521] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2503.754581][ T6521] RSP: 002b:00007f55c17f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2503.754605][ T6521] RAX: ffffffffffffffda RBX: 00007f55c37e5fa0 RCX: 00007f55c358e15c [ 2503.754621][ T6521] RDX: 000000000000000f RSI: 00007f55c17f60a0 RDI: 0000000000000005 [ 2503.754640][ T6521] RBP: 00007f55c17f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2503.754654][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2503.754667][ T6521] R13: 00007f55c37e6038 R14: 00007f55c37e5fa0 R15: 00007f55c390fa28 [ 2503.754703][ T6521] [ 2503.793377][ T1265] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2504.216477][ T1265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2504.238156][ T1265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2504.267854][ T1265] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2504.343516][ T1265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2504.367623][ T1265] usb 3-1: config 0 descriptor?? [ 2504.679272][ T6534] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8841'. [ 2504.703506][ T8082] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2504.782313][ T6517] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 2504.814664][ T1265] usbhid 3-1:0.0: can't add hid device: -71 [ 2504.820742][ T1265] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2504.852723][ T1265] usb 3-1: USB disconnect, device number 19 [ 2504.863855][ T8082] usb 6-1: Using ep0 maxpacket: 8 [ 2504.876379][ T8082] usb 6-1: config 0 has an invalid interface number: 166 but max is 0 [ 2504.909700][ T8082] usb 6-1: config 0 has no interface number 0 [ 2504.935512][ T8082] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=79.c0 [ 2504.951561][ T6541] loop9: detected capacity change from 0 to 7 [ 2504.961385][ T6279] loop9: [POWERTEC] p1 p2 p3 [ 2504.963412][ T8082] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2504.966904][ T6279] loop9: p1 size 65536 extends beyond EOD, [ 2504.974718][ T8082] usb 6-1: Product: syz [ 2504.975136][ T6279] truncated [ 2504.980759][ T8082] usb 6-1: Manufacturer: syz [ 2504.994640][ T6279] loop9: p2 start 779379555 is beyond EOD, truncated [ 2505.009235][ T6279] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 2505.013539][ T8082] usb 6-1: SerialNumber: syz [ 2505.035679][ T8082] usb 6-1: config 0 descriptor?? [ 2505.043413][ T6541] loop9: [POWERTEC] p1 p2 p3 [ 2505.057683][ T6541] loop9: p1 size 65536 extends beyond EOD, truncated [ 2505.077799][ T6541] loop9: p2 start 779379555 is beyond EOD, truncated [ 2505.093254][ T6541] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 2505.198081][ T6065] udevd[6065]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 2505.224944][ T6279] udevd[6279]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 2505.259516][ T8082] snd-usb-audio 6-1:0.166: probe with driver snd-usb-audio failed with error -71 [ 2505.270521][ T6279] udevd[6279]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 2505.285852][ T6065] udevd[6065]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 2505.293876][ T8082] usb 6-1: USB disconnect, device number 92 [ 2505.460077][ T6550] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 2505.485081][ T6550] netlink: 'syz.0.8846': attribute type 2 has an invalid length. [ 2505.509650][ T6550] : entered promiscuous mode [ 2505.843750][ T8082] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2506.013388][ T8082] usb 3-1: Using ep0 maxpacket: 8 [ 2506.022740][ T8082] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 2506.033462][ T8082] usb 3-1: config 0 has no interface number 0 [ 2506.043703][ T8082] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 2506.067744][ T8082] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2506.080585][ T8082] usb 3-1: config 0 interface 200 has no altsetting 0 [ 2506.094786][ T6559] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8850'. [ 2506.130641][ T8082] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2506.145973][ T8082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2506.165737][ T8082] usb 3-1: Product: syz [ 2506.172482][ T8082] usb 3-1: Manufacturer: syz [ 2506.179653][ T8082] usb 3-1: SerialNumber: syz [ 2506.197734][ T8082] usb 3-1: config 0 descriptor?? [ 2506.730512][ T6567] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8852'. [ 2506.835475][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2506.855862][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2506.927725][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8854'. [ 2507.213074][ T1269] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2507.373104][ T1269] usb 6-1: Using ep0 maxpacket: 16 [ 2507.386380][ T1269] usb 6-1: config 0 has no interfaces? [ 2507.398175][ T1269] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2507.413617][ T1269] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2507.426469][ T1269] usb 6-1: Manufacturer: syz [ 2507.444686][ T1269] usb 6-1: config 0 descriptor?? [ 2507.778405][ T6573] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2508.466885][ T8082] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input137 [ 2508.496306][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 2508.504034][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 2508.511357][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 2508.522112][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 2508.531060][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 2508.531309][ T8082] usb 3-1: USB disconnect, device number 20 [ 2508.538227][ C1] usb 3-1: hanwang_irq - usb_submit_urb failed with result -19 [ 2509.533593][ T1269] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2509.705554][ T1269] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2509.723824][ T1269] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2509.735207][ T1269] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 2509.744641][ T1269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2509.755992][ T1269] usb 3-1: config 0 descriptor?? [ 2509.815607][ T1269] usb 6-1: USB disconnect, device number 93 [ 2509.949904][ T6604] netlink: 'syz.5.8863': attribute type 10 has an invalid length. [ 2509.970619][ T6604] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8863'. [ 2509.982853][ T6606] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8864'. [ 2510.014328][ T6604] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 2510.061253][ T6604] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 2510.082365][ T6604] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2510.195773][ T6612] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8866'. [ 2511.175608][ T6618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2511.191986][ T6618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2511.573016][ T1269] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2511.703004][ T1269] usb 6-1: device descriptor read/64, error -71 [ 2511.944428][ T1269] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2511.983852][ T1265] usb 3-1: USB disconnect, device number 21 [ 2512.149123][ T1269] usb 6-1: device descriptor read/64, error -71 [ 2512.264046][ T1269] usb usb6-port1: attempt power cycle [ 2512.603018][ T1269] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2512.624481][ T1269] usb 6-1: device descriptor read/8, error -71 [ 2512.863031][ T1269] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2512.884720][ T1269] usb 6-1: device descriptor read/8, error -71 [ 2512.993479][ T1269] usb usb6-port1: unable to enumerate USB device [ 2513.056356][ T6655] random: crng reseeded on system resumption [ 2513.831800][ T6666] kAFS: unable to lookup cell '' [ 2513.840052][ T6666] kAFS: unable to lookup cell '(,c' [ 2513.901552][ T6666] sit0: entered promiscuous mode [ 2513.909056][ T6666] netlink: 'syz.4.8878': attribute type 1 has an invalid length. [ 2515.451597][ T6687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2515.493495][ T6687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2516.477296][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2516.513561][ T1265] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2516.526489][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2516.695295][ T1265] usb 3-1: Using ep0 maxpacket: 32 [ 2516.703384][ T1265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 2516.714811][ T6711] netlink: 'syz.5.8893': attribute type 1 has an invalid length. [ 2516.724318][ T1265] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2516.739121][ T1265] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 2516.747520][ T6711] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8893'. [ 2516.750820][ T1265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2516.760092][ T6711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2516.786969][ T1265] usb 3-1: config 0 descriptor?? [ 2516.809106][ T6711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2516.820701][ T6711] bond1: (slave geneve2): making interface the new active one [ 2516.829696][ T6711] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2516.838734][ T36] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 2516.855621][ T36] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 2516.866380][ T36] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 2516.908834][ T36] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 2516.956564][ T6715] loop9: detected capacity change from 0 to 7 [ 2516.967820][ T6715] loop9: [POWERTEC] p1 p2 p3 [ 2516.973244][ T6715] loop9: p1 size 65536 extends beyond EOD, truncated [ 2516.985984][ T6715] loop9: p2 start 779379555 is beyond EOD, truncated [ 2516.992739][ T6715] loop9: p3 size 2147483648 extends beyond EOD, truncated [ 2517.066401][ T5777] udevd[5777]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 2517.067933][ T6279] udevd[6279]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 2517.223600][ T1265] uclogic 0003:145F:0212.00C7: interface is invalid, ignoring [ 2517.312186][ T6724] veth1_to_bridge: entered promiscuous mode [ 2517.345558][ T6724] veth1_to_bridge: left promiscuous mode [ 2517.445383][ T6697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2517.476415][ T6697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2517.489423][ T1269] usb 3-1: USB disconnect, device number 22 [ 2517.606880][ T1265] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2517.744866][ T1265] usb 6-1: device descriptor read/64, error -71 [ 2517.981514][ T6742] fuse: Bad value for 'group_id' [ 2517.996828][ T6742] fuse: Bad value for 'group_id' [ 2518.036376][ T1265] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2518.193564][ T1265] usb 6-1: device descriptor read/64, error -71 [ 2518.314106][ T1265] usb usb6-port1: attempt power cycle [ 2518.559061][ T6756] netlink: 7 bytes leftover after parsing attributes in process `syz.0.8903'. [ 2518.673565][ T1265] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2518.803829][ T1265] usb 6-1: device descriptor read/8, error -71 [ 2519.083529][ T1265] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2519.104096][ T1265] usb 6-1: device descriptor read/8, error -71 [ 2519.216725][ T1265] usb usb6-port1: unable to enumerate USB device [ 2519.688994][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8905'. [ 2520.633204][ T6789] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2520.660518][ T6789] bond1 (unregistering): Released all slaves [ 2520.954212][T26467] Bluetooth: hci0: command 0x0406 tx timeout [ 2521.047319][ T6793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2521.076242][ T6793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2521.668012][ T6801] QAT: failed to copy from user. [ 2521.885975][ T6809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2521.913777][ T6809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2522.497858][ T6819] netlink: 'syz.6.8921': attribute type 5 has an invalid length. [ 2522.533068][ T6819] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8921'. [ 2522.633270][ T6826] sctp: [Deprecated]: syz.2.8923 (pid 6826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2522.633270][ T6826] Use struct sctp_sack_info instead [ 2522.734600][ T6831] fuse: Unknown parameter '' [ 2522.898665][ T1269] hid_parser_main: 8 callbacks suppressed [ 2522.898684][ T1269] hid-generic 0000:0000:0000.00C8: unknown main item tag 0x0 [ 2522.931817][ T1269] hid-generic 0000:0000:0000.00C8: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2523.187801][ T6839] fido_id[6839]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2523.755393][ T714] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2523.821689][ T6858] cifs: Unknown parameter 'f,' [ 2523.943674][ T714] usb 6-1: device descriptor read/64, error -71 [ 2524.037481][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8935'. [ 2524.186521][ T714] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2524.323342][ T714] usb 6-1: device descriptor read/64, error -71 [ 2524.433608][ T714] usb usb6-port1: attempt power cycle [ 2524.773478][ T714] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 2524.810739][ T714] usb 6-1: device descriptor read/8, error -71 [ 2525.063416][ T714] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 2525.084102][ T714] usb 6-1: device descriptor read/8, error -71 [ 2525.193520][ T714] usb usb6-port1: unable to enumerate USB device [ 2525.867220][ T6870] FAULT_INJECTION: forcing a failure. [ 2525.867220][ T6870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2525.881741][ T6870] CPU: 1 UID: 0 PID: 6870 Comm: syz.6.8938 Tainted: G L syzkaller #0 PREEMPT(full) [ 2525.881776][ T6870] Tainted: [L]=SOFTLOCKUP [ 2525.881784][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2525.881796][ T6870] Call Trace: [ 2525.881805][ T6870] [ 2525.881813][ T6870] dump_stack_lvl+0x189/0x250 [ 2525.881843][ T6870] ? __pfx____ratelimit+0x10/0x10 [ 2525.881874][ T6870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2525.881898][ T6870] ? __pfx__printk+0x10/0x10 [ 2525.881926][ T6870] ? __might_fault+0xb0/0x130 [ 2525.881962][ T6870] should_fail_ex+0x414/0x560 [ 2525.881995][ T6870] _copy_from_user+0x2d/0xb0 [ 2525.882016][ T6870] ___sys_sendmsg+0x158/0x2a0 [ 2525.882043][ T6870] ? __pfx____sys_sendmsg+0x10/0x10 [ 2525.882073][ T6870] ? rcu_read_lock_any_held+0xb3/0x120 [ 2525.882128][ T6870] ? __fget_files+0x2a/0x420 [ 2525.882149][ T6870] ? __fget_files+0x3a0/0x420 [ 2525.882179][ T6870] __x64_sys_sendmsg+0x19b/0x260 [ 2525.882206][ T6870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2525.882239][ T6870] ? __pfx_ksys_write+0x10/0x10 [ 2525.882271][ T6870] ? do_syscall_64+0xbe/0xf80 [ 2525.882295][ T6870] do_syscall_64+0xfa/0xf80 [ 2525.882316][ T6870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2525.882338][ T6870] ? clear_bhb_loop+0x60/0xb0 [ 2525.882363][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2525.882383][ T6870] RIP: 0033:0x7f55c358f749 [ 2525.882403][ T6870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2525.882421][ T6870] RSP: 002b:00007f55c17f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2525.882445][ T6870] RAX: ffffffffffffffda RBX: 00007f55c37e5fa0 RCX: 00007f55c358f749 [ 2525.882459][ T6870] RDX: 0000000000008000 RSI: 0000200000000640 RDI: 0000000000000003 [ 2525.882483][ T6870] RBP: 00007f55c17f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2525.882496][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2525.882510][ T6870] R13: 00007f55c37e6038 R14: 00007f55c37e5fa0 R15: 00007f55c390fa28 [ 2525.882544][ T6870] [ 2525.885292][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8937'. [ 2526.595857][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8942'. [ 2526.615762][ T6885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2526.642369][ T6885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2526.838696][ T6892] netlink: 'syz.5.8944': attribute type 27 has an invalid length. [ 2527.122320][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state [ 2527.130154][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state [ 2527.423518][ T1265] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 2527.425519][ T5919] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 2527.565259][ T6892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2527.663423][ T1265] usb 6-1: Using ep0 maxpacket: 16 [ 2527.699221][ T1265] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2527.725378][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2527.733522][ T1265] usb 6-1: config 0 has no interface number 0 [ 2527.754923][ T6907] FAULT_INJECTION: forcing a failure. [ 2527.754923][ T6907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2527.773571][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2527.791750][ T6892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2527.801378][ T1265] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2527.801753][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2527.836657][ T6907] CPU: 1 UID: 0 PID: 6907 Comm: syz.4.8949 Tainted: G L syzkaller #0 PREEMPT(full) [ 2527.836693][ T6907] Tainted: [L]=SOFTLOCKUP [ 2527.836701][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2527.836714][ T6907] Call Trace: [ 2527.836722][ T6907] [ 2527.836732][ T6907] dump_stack_lvl+0x189/0x250 [ 2527.836767][ T6907] ? __pfx____ratelimit+0x10/0x10 [ 2527.836799][ T6907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2527.836822][ T6907] ? __pfx__printk+0x10/0x10 [ 2527.836868][ T6907] should_fail_ex+0x414/0x560 [ 2527.836904][ T6907] _copy_from_user+0x2d/0xb0 [ 2527.836929][ T6907] __copy_msghdr+0x3c5/0x5b0 [ 2527.836959][ T6907] ___sys_sendmsg+0x1a5/0x2a0 [ 2527.836988][ T6907] ? __pfx____sys_sendmsg+0x10/0x10 [ 2527.837053][ T6907] ? __fget_files+0x2a/0x420 [ 2527.837074][ T6907] ? __fget_files+0x3a0/0x420 [ 2527.837108][ T6907] __x64_sys_sendmsg+0x19b/0x260 [ 2527.837137][ T6907] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2527.837181][ T6907] ? do_syscall_64+0xbe/0xf80 [ 2527.837207][ T6907] do_syscall_64+0xfa/0xf80 [ 2527.837227][ T6907] ? rcu_is_watching+0x15/0xb0 [ 2527.837252][ T6907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2527.837273][ T6907] ? clear_bhb_loop+0x60/0xb0 [ 2527.837298][ T6907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2527.837319][ T6907] RIP: 0033:0x7f057e38f749 [ 2527.837340][ T6907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2527.837357][ T6907] RSP: 002b:00007f057c5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2527.837381][ T6907] RAX: ffffffffffffffda RBX: 00007f057e5e5fa0 RCX: 00007f057e38f749 [ 2527.837397][ T6907] RDX: 0000000000008000 RSI: 0000200000000640 RDI: 0000000000000003 [ 2527.837411][ T6907] RBP: 00007f057c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2527.837424][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2527.837436][ T6907] R13: 00007f057e5e6038 R14: 00007f057e5e5fa0 R15: 00007f057e70fa28 [ 2527.837471][ T6907] [ 2528.046913][ T1265] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2528.055473][ T1265] usb 6-1: Product: syz [ 2528.059835][ T1265] usb 6-1: Manufacturer: syz [ 2528.067848][ T1265] usb 6-1: SerialNumber: syz [ 2528.082926][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2528.130467][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2528.194134][ T5919] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2528.203855][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2528.212635][ T6892] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 2528.220830][ T6892] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 2528.254999][ T5919] usb 3-1: Product: syz [ 2528.259524][ T5919] usb 3-1: Manufacturer: syz [ 2528.282701][ T1265] usb 6-1: config 0 descriptor?? [ 2528.303923][ T5919] usb 3-1: SerialNumber: syz [ 2528.390858][ T5919] usb 3-1: config 0 descriptor?? [ 2528.391837][ T1265] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2528.475479][ T6910] program syz.4.8950 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2528.624830][ T5919] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2528.697927][ T5919] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2528.825616][ T5919] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 2528.833641][ T5919] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2528.880305][ T6894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2528.890280][ T6894] 8021q: adding VLAN 0 to HW filter on device team0 [ 2528.923575][ T1265] gspca_spca1528: reg_w err -110 [ 2528.924131][ T5919] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2528.943540][ T1265] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 2528.973628][ T6894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2528.992411][ T6141] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2529.001978][ T6141] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2529.015621][ T6141] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2529.032051][ T6141] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2529.034711][ T5919] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 2529.063714][ T6141] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2529.073890][ T6141] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2529.094156][ T6141] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2529.103773][ T6141] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2529.121563][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.128156][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.839868][ T5919] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 2529.855135][ T5919] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 2529.897869][ T5919] usb 3-1: USB disconnect, device number 23 [ 2530.192638][ T1269] usb 6-1: USB disconnect, device number 106 [ 2530.342508][ T5919] hid-generic 00A0:0006:0003.00C9: unknown main item tag 0x0 [ 2530.368305][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2530.383576][ T5919] hid-generic 00A0:0006:0003.00C9: unknown main item tag 0x0 [ 2530.396636][ T5919] hid-generic 00A0:0006:0003.00C9: unknown main item tag 0x0 [ 2530.407675][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2530.419919][ T5919] hid-generic 00A0:0006:0003.00C9: unknown main item tag 0x0 [ 2530.428977][ T5919] hid-generic 00A0:0006:0003.00C9: unknown main item tag 0x0 [ 2530.448407][ T5919] hid-generic 00A0:0006:0003.00C9: unknown main item tag 0x0 [ 2530.457519][ T5919] hid-generic 00A0:0006:0003.00C9: unknown main item tag 0x0 [ 2530.492957][ T5919] hid-generic 00A0:0006:0003.00C9: unknown main item tag 0x0 [ 2530.521710][ T5919] hid-generic 00A0:0006:0003.00C9: unknown main item tag 0x0 [ 2530.537402][ T5919] hid-generic 00A0:0006:0003.00C9: unknown main item tag 0x0 [ 2530.580836][ T5919] hid-generic 00A0:0006:0003.00C9: hidraw0: HID v0.05 Device [syz1] on syz0 [ 2530.710402][ T6930] fido_id[6930]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2530.733796][ T1269] usb 6-1: new low-speed USB device number 107 using dummy_hcd [ 2530.895438][ T1269] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2530.905935][ T1269] usb 6-1: config 0 has no interface number 0 [ 2530.912130][ T1269] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2530.934260][ T1269] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2530.952190][ T1269] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2530.970737][ T1269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2530.989782][ T1269] usb 6-1: config 0 descriptor?? [ 2531.003439][ T6927] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 2531.019737][ T1269] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2531.073408][ T714] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2531.166930][ C1] sd 0:0:1:0: [sda] tag#2465 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2531.177583][ C1] sd 0:0:1:0: [sda] tag#2465 CDB: Read(6) 08 00 00 00 03 44 [ 2531.229728][ T1265] usb 6-1: USB disconnect, device number 107 [ 2531.236317][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2531.246899][ T714] usb 3-1: Using ep0 maxpacket: 16 [ 2531.255478][ T714] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2531.269425][ T714] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2531.291391][ T714] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2531.315290][ T714] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2531.325535][ T714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2531.338096][ T714] usb 3-1: Product: syz [ 2531.342574][ T714] usb 3-1: Manufacturer: 󁤹 [ 2531.347971][ T714] usb 3-1: SerialNumber: syz [ 2531.449538][ T6926] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8954'. [ 2531.459720][ T6926] netlink: 'syz.5.8954': attribute type 5 has an invalid length. [ 2531.605408][ T714] usb 3-1: 0:2 : does not exist [ 2531.675208][ T714] usb 3-1: USB disconnect, device number 24 [ 2531.682326][ T6944] binder: BINDER_SET_CONTEXT_MGR already set [ 2531.739605][ T6279] udevd[6279]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2531.763405][ T6944] binder: 6942:6944 ioctl 4018620d 200000000140 returned -16 [ 2532.266925][ T6960] bond1 (unregistering): Released all slaves [ 2532.358624][ T6965] program syz.4.8968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2532.810439][ T6974] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 2533.110748][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8975'. [ 2533.110747][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8975'. [ 2533.509803][ T7000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2533.694755][ T7011] FAULT_INJECTION: forcing a failure. [ 2533.694755][ T7011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2533.733593][ T7011] CPU: 0 UID: 0 PID: 7011 Comm: syz.4.8984 Tainted: G L syzkaller #0 PREEMPT(full) [ 2533.733630][ T7011] Tainted: [L]=SOFTLOCKUP [ 2533.733638][ T7011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2533.733650][ T7011] Call Trace: [ 2533.733661][ T7011] [ 2533.733670][ T7011] dump_stack_lvl+0x189/0x250 [ 2533.733701][ T7011] ? __pfx____ratelimit+0x10/0x10 [ 2533.733728][ T7011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2533.733752][ T7011] ? __pfx__printk+0x10/0x10 [ 2533.733796][ T7011] should_fail_ex+0x414/0x560 [ 2533.733834][ T7011] _copy_to_user+0x31/0xb0 [ 2533.733860][ T7011] simple_read_from_buffer+0xe1/0x170 [ 2533.733889][ T7011] proc_fail_nth_read+0x1b3/0x220 [ 2533.733924][ T7011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2533.733959][ T7011] ? rw_verify_area+0x2a6/0x4d0 [ 2533.733986][ T7011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2533.734018][ T7011] vfs_read+0x200/0xa30 [ 2533.734046][ T7011] ? fdget_pos+0x247/0x320 [ 2533.734074][ T7011] ? __pfx___mutex_lock+0x10/0x10 [ 2533.734097][ T7011] ? __pfx_vfs_read+0x10/0x10 [ 2533.734127][ T7011] ? __fget_files+0x2a/0x420 [ 2533.734155][ T7011] ? __fget_files+0x3a0/0x420 [ 2533.734175][ T7011] ? __fget_files+0x2a/0x420 [ 2533.734207][ T7011] ksys_read+0x145/0x250 [ 2533.734239][ T7011] ? __pfx_ksys_read+0x10/0x10 [ 2533.734272][ T7011] ? do_syscall_64+0xbe/0xf80 [ 2533.734300][ T7011] do_syscall_64+0xfa/0xf80 [ 2533.734322][ T7011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2533.734344][ T7011] ? clear_bhb_loop+0x60/0xb0 [ 2533.734370][ T7011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2533.734391][ T7011] RIP: 0033:0x7f057e38e15c [ 2533.734412][ T7011] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2533.734431][ T7011] RSP: 002b:00007f057c5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2533.734466][ T7011] RAX: ffffffffffffffda RBX: 00007f057e5e5fa0 RCX: 00007f057e38e15c [ 2533.734482][ T7011] RDX: 000000000000000f RSI: 00007f057c5f60a0 RDI: 0000000000000004 [ 2533.734496][ T7011] RBP: 00007f057c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2533.734509][ T7011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2533.734523][ T7011] R13: 00007f057e5e6038 R14: 00007f057e5e5fa0 R15: 00007f057e70fa28 [ 2533.734560][ T7011] [ 2534.007909][ T7013] fuse: Bad value for 'fd' [ 2534.174139][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8987'. [ 2534.545258][ T1265] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2534.703621][ T1265] usb 3-1: Using ep0 maxpacket: 16 [ 2534.711024][ T1265] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2534.721657][ T1265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1792, setting to 1024 [ 2534.733831][ T1265] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2534.746689][ T1265] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 2534.756288][ T1265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2534.764829][ T1265] usb 3-1: Product: syz [ 2534.768996][ T1265] usb 3-1: Manufacturer: syz [ 2534.775403][ T1265] usb 3-1: SerialNumber: syz [ 2534.783495][ T1265] usb 3-1: config 0 descriptor?? [ 2534.789247][ T7020] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2534.797060][ T714] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 2534.803214][ T7020] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2534.955748][ T714] usb 6-1: config 0 has an invalid interface number: 44 but max is 0 [ 2534.964450][ T714] usb 6-1: config 0 has no interface number 0 [ 2534.974376][ T714] usb 6-1: New USB device found, idVendor=06e0, idProduct=f112, bcdDevice=47.4e [ 2534.984752][ T714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2534.993820][ T714] usb 6-1: Product: syz [ 2534.998249][ T714] usb 6-1: Manufacturer: syz [ 2535.004098][ T714] usb 6-1: SerialNumber: syz [ 2535.023826][ T714] usb 6-1: config 0 descriptor?? [ 2535.042531][ T714] ti_usb_3410_5052 6-1:0.44: required endpoints missing [ 2535.117142][ T1265] rc_core: IR keymap rc-hauppauge not found [ 2535.123693][ T1265] Registered IR keymap rc-empty [ 2535.129734][ T1265] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 2535.156256][ T1265] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 2535.185467][ T1265] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2535.215843][ T1265] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input139 [ 2535.232617][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2535.262603][ T1265] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 2535.264226][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2535.293781][ T1265] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 2535.299751][ T1269] usb 6-1: USB disconnect, device number 108 [ 2535.324697][ T1265] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 2535.326480][ T1267] usb 5-1: USB disconnect, device number 104 [ 2535.349002][ T1265] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 2535.384473][ T1265] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 2535.404335][ T1265] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 2535.424315][ T1265] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 2535.443765][ T1265] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 2535.463757][ T1265] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 2535.483697][ T1265] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 2535.522406][ T1265] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 2535.543520][ T1265] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2535.568312][ T1265] usb 3-1: USB disconnect, device number 25 [ 2535.751945][T26467] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2535.778460][T26467] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2535.788201][T26467] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2535.798536][T26467] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2535.809696][T26467] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2536.036161][ T1265] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2536.148908][ T7045] xt_hashlimit: max too large, truncated to 1048576 [ 2536.213528][ T1265] usb 3-1: Using ep0 maxpacket: 8 [ 2536.221325][ T1265] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2536.242056][ T1265] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 2536.269255][ T1265] usb 3-1: config 0 has no interface number 0 [ 2536.285524][ T1265] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2536.314818][ T1265] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2536.336128][ T1265] usb 3-1: config 0 interface 88 has no altsetting 0 [ 2536.341246][ T7039] chnl_net:caif_netlink_parms(): no params data found [ 2536.364321][ T1265] usb 3-1: language id specifier not provided by device, defaulting to English [ 2536.397840][ T1265] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 2536.413501][ T1265] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 2536.427109][ T1265] usb 3-1: Product: syz [ 2536.450166][ T1265] usb 3-1: SerialNumber: syz [ 2536.467512][ T1265] usb 3-1: config 0 descriptor?? [ 2536.485464][ T4501] batman_adv: batadv0: Removing interface: netdevsim0 [ 2536.659337][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state [ 2536.672232][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 2536.681000][ T7039] bridge_slave_0: entered allmulticast mode [ 2536.695804][ T7037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2536.708095][ T7039] bridge_slave_0: entered promiscuous mode [ 2536.719203][ T7037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2536.758417][ T1265] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input140 [ 2536.822825][ T7039] bridge0: port 2(bridge_slave_1) entered blocking state [ 2536.825433][ T1265] usb 3-1: USB disconnect, device number 26 [ 2536.837063][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 2536.849011][ T7039] bridge_slave_1: entered allmulticast mode [ 2536.882197][ T7039] bridge_slave_1: entered promiscuous mode [ 2537.140915][ T7039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2537.153842][ T4501] bridge_slave_1: left allmulticast mode [ 2537.159531][ T4501] bridge_slave_1: left promiscuous mode [ 2537.173694][ T4501] bridge0: port 2(bridge_slave_1) entered disabled state [ 2537.183471][ T4501] bridge_slave_0: left allmulticast mode [ 2537.189127][ T4501] bridge_slave_0: left promiscuous mode [ 2537.213607][ T4501] bridge0: port 1(bridge_slave_0) entered disabled state [ 2537.468763][ T7074] fuse: Bad value for 'fd' [ 2537.839556][ T3962] Bluetooth: hci4: command tx timeout [ 2538.081148][ T4501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2538.090331][ T4501] bond_slave_0: left promiscuous mode [ 2538.098417][ T4501] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2538.108023][ T4501] mac80211_hwsim hwsim52 wlan1: left promiscuous mode [ 2538.115940][ T4501] bond0 (unregistering): Released all slaves [ 2538.131297][ T4501] bond1 (unregistering): Released all slaves [ 2538.329383][ T7082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2538.338653][ T7082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2538.349592][ T7082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2538.377824][ T7081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2538.378101][ T7082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2538.388549][ T7081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2538.397970][ T7082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2538.411529][ T7082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2538.437368][ T4501] bond2 (unregistering): Released all slaves [ 2538.459672][ T7039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2538.469224][ T7081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2538.482389][ T7081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2538.615211][ T30] audit: type=1326 audit(1764968116.654:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.6.9003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c358f749 code=0x7ffc0000 [ 2538.638813][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9003'. [ 2538.642069][ T30] audit: type=1326 audit(1764968116.654:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.6.9003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c358f749 code=0x7ffc0000 [ 2538.660478][ T7086] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9003'. [ 2538.676074][ T30] audit: type=1326 audit(1764968116.684:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.6.9003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55c358f749 code=0x7ffc0000 [ 2538.702815][ T30] audit: type=1326 audit(1764968116.684:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.6.9003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c358f749 code=0x7ffc0000 [ 2538.719508][ T7078] bond2 (unregistering): Released all slaves [ 2538.737062][ T30] audit: type=1326 audit(1764968116.684:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.6.9003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f55c358f749 code=0x7ffc0000 [ 2538.864085][ T4501] @;: left promiscuous mode [ 2538.931148][ T30] audit: type=1326 audit(1764968116.954:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.6.9003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c358f749 code=0x7ffc0000 [ 2538.974089][ T7039] team0: Port device team_slave_0 added [ 2539.075318][ T7098] program syz.0.9004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2539.158230][ T7039] team0: Port device team_slave_1 added [ 2539.191792][ T4501] : left promiscuous mode [ 2539.315291][ T4501] tipc: Left network mode [ 2539.407816][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2539.416960][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2539.718883][ T7039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2539.752681][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2539.798302][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2539.843472][ T7039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2539.918042][ T3962] Bluetooth: hci4: command tx timeout [ 2540.188509][ T7039] hsr_slave_0: entered promiscuous mode [ 2540.209437][ T7039] hsr_slave_1: entered promiscuous mode [ 2540.257842][ T7039] debugfs: 'hsr0' already exists in 'hsr' [ 2540.285111][ T7039] Cannot create hsr debugfs directory [ 2540.534490][ T4501] hsr_slave_0: left promiscuous mode [ 2540.584608][ T4501] hsr_slave_1: left promiscuous mode [ 2540.615542][ T4501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2540.660195][ T4501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2541.095883][ T7134] netlink: 'syz.0.9012': attribute type 1 has an invalid length. [ 2541.256185][ T3962] Bluetooth: hci5: connection err: -111 [ 2541.612401][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9011'. [ 2541.843646][ T30] audit: type=1326 audit(1764968119.874:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.0.9013" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f470d18f749 code=0x0 [ 2542.034056][ T3962] Bluetooth: hci4: command tx timeout [ 2542.076123][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9014'. [ 2542.553373][ T1265] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 2542.764680][ T1265] usb 6-1: Using ep0 maxpacket: 32 [ 2542.774515][ T1265] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2542.785736][ T1265] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2542.801378][ T1265] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 2542.813783][ T1265] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2542.896116][ T1265] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2542.905344][ T1265] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 2542.913713][ T1265] usb 6-1: Product: syz [ 2543.003939][ T1265] usb 6-1: Manufacturer: syz [ 2543.040275][ T1265] usb 6-1: SerialNumber: syz [ 2543.070711][ T1265] usb 6-1: config 0 descriptor?? [ 2543.186768][ T1265] usb 6-1: no audio or video endpoints found [ 2544.073033][ T3962] Bluetooth: hci4: command tx timeout [ 2545.233353][ T1267] usb 6-1: USB disconnect, device number 109 [ 2545.361823][ T7169] fuse: Bad value for 'fd' [ 2545.693107][ T1267] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2545.852420][ T4501] IPVS: stop unused estimator thread 0... [ 2545.859329][ T1267] usb 6-1: device descriptor read/64, error -71 [ 2546.120515][ T1267] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2546.277881][ T1267] usb 6-1: device descriptor read/64, error -71 [ 2546.310232][ T714] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 2546.364323][ C1] sd 0:0:1:0: [sda] tag#2472 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2546.374805][ C1] sd 0:0:1:0: [sda] tag#2472 CDB: Read(6) 08 00 00 00 03 44 [ 2546.413701][ T1267] usb usb6-port1: attempt power cycle [ 2546.497770][ T714] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2546.514139][ T714] usb 3-1: config 0 has no interface number 0 [ 2546.535671][ T714] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2546.561637][ T714] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2546.579208][ T7209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9025'. [ 2546.590270][ T714] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2546.601459][ T7209] sctp: [Deprecated]: syz.0.9025 (pid 7209) Use of int in max_burst socket option deprecated. [ 2546.601459][ T7209] Use struct sctp_assoc_value instead [ 2546.617249][ T714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2546.621409][ T7039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2546.629905][ T714] usb 3-1: config 0 descriptor?? [ 2546.641707][ T7195] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2546.655768][ T7039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2546.679813][ T7039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2546.693860][ T714] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2546.710803][ T7039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2546.773032][ T1267] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2546.806910][ T1267] usb 6-1: device descriptor read/8, error -71 [ 2546.891354][ T714] usb 3-1: USB disconnect, device number 27 [ 2546.897890][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2546.930448][ T7039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2547.000337][ T7039] 8021q: adding VLAN 0 to HW filter on device team0 [ 2547.029041][ T4501] bridge0: port 1(bridge_slave_0) entered blocking state [ 2547.036312][ T4501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2547.053007][ T1267] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2547.059261][T19311] bridge0: port 2(bridge_slave_1) entered blocking state [ 2547.067972][T19311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2547.098738][ T1267] usb 6-1: device descriptor read/8, error -71 [ 2547.225375][ T1267] usb usb6-port1: unable to enumerate USB device [ 2547.242537][ T7039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2547.323663][ T7039] veth0_vlan: entered promiscuous mode [ 2547.346932][ T7039] veth1_vlan: entered promiscuous mode [ 2547.391318][ T7039] veth0_macvtap: entered promiscuous mode [ 2547.405126][ T7039] veth1_macvtap: entered promiscuous mode [ 2547.440111][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2547.468019][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2547.495377][T30412] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2547.511643][T30412] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2547.524246][T30412] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2547.538755][T30412] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2547.695646][T19311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2547.724166][T19311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2547.794282][T19311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2547.812200][T19311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2548.503272][T20408] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2548.673887][ T714] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2548.681765][T20408] usb 5-1: Using ep0 maxpacket: 16 [ 2548.689847][T20408] usb 5-1: config 0 has no interfaces? [ 2548.696796][T20408] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2548.705940][T20408] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2548.714507][T20408] usb 5-1: Manufacturer: syz [ 2548.720984][T20408] usb 5-1: config 0 descriptor?? [ 2548.793339][ T8082] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2548.835263][ T714] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 2548.843862][ T714] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2548.854552][ T714] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 187, using maximum allowed: 30 [ 2548.865504][ T714] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 2548.881443][ T714] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2548.890718][ T714] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2548.899000][ T714] usb 3-1: Manufacturer: syz [ 2548.906454][ T714] usb 3-1: config 0 descriptor?? [ 2548.917423][ T714] igorplugusb 3-1:0.0: incorrect number of endpoints [ 2548.975845][ T8082] usb 6-1: Using ep0 maxpacket: 8 [ 2548.981825][ T7258] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2548.988862][ T8082] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 2549.010906][ T8082] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 2549.020889][ T8082] usb 6-1: Product: syz [ 2549.025581][ T8082] usb 6-1: Manufacturer: syz [ 2549.031063][ T8082] usb 6-1: SerialNumber: syz [ 2549.043482][ T8082] usb 6-1: config 0 descriptor?? [ 2549.052187][ T8082] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 2549.205332][ T1267] usb 3-1: USB disconnect, device number 28 [ 2549.633093][ T1267] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2550.018519][ T8082] gspca_zc3xx: reg_r err -110 [ 2550.042168][ T1267] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 2550.051736][ T1267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2550.062591][ T8082] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 2550.092247][ T1267] usb 3-1: Product: syz [ 2550.106836][ T1267] usb 3-1: Manufacturer: syz [ 2550.129484][ T1267] usb 3-1: SerialNumber: syz [ 2550.155545][ T1267] usb 3-1: config 0 descriptor?? [ 2550.176359][ T3962] Bluetooth: hci2: urb ffff88814cb2d300 submission failed (2) [ 2550.581631][ T1267] usb 6-1: USB disconnect, device number 114 [ 2551.160663][ T1267] usb 5-1: USB disconnect, device number 105 [ 2552.471226][ T1267] usb 3-1: USB disconnect, device number 29 [ 2553.603641][ T1267] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2553.852976][ T1267] usb 6-1: Using ep0 maxpacket: 16 [ 2553.861089][ T1267] usb 6-1: config 0 has no interfaces? [ 2553.868367][ T1267] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2553.878904][ T1267] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2553.894245][ T1267] usb 6-1: Manufacturer: syz [ 2553.923641][ T1267] usb 6-1: config 0 descriptor?? [ 2554.167710][ T7315] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2554.754448][ T7330] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9048'. [ 2554.766024][ T7329] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9048'. [ 2555.663425][T20408] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 2555.836614][T20408] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2555.880414][T20408] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2555.898055][T20408] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2555.911007][T20408] usb 5-1: Product: syz [ 2555.918038][T20408] usb 5-1: Manufacturer: syz [ 2555.925060][T20408] usb 5-1: SerialNumber: syz [ 2555.943168][T20408] usb 5-1: config 0 descriptor?? [ 2555.960189][T20408] usb 5-1: selecting invalid altsetting 0 [ 2556.220167][ T1267] usb 6-1: USB disconnect, device number 115 [ 2557.963452][ T7332] ================================================================== [ 2557.971555][ T7332] BUG: KASAN: slab-out-of-bounds in copy_to_urb+0x261/0x460 [ 2557.978881][ T7332] Write of size 264 at addr ffff8880431c1800 by task syz.4.9049/7332 [ 2557.987232][ T7332] [ 2557.989582][ T7332] CPU: 0 UID: 0 PID: 7332 Comm: syz.4.9049 Tainted: G L syzkaller #0 PREEMPT(full) [ 2557.989611][ T7332] Tainted: [L]=SOFTLOCKUP [ 2557.989619][ T7332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2557.989632][ T7332] Call Trace: [ 2557.989642][ T7332] [ 2557.989651][ T7332] dump_stack_lvl+0x189/0x250 [ 2557.989679][ T7332] ? __virt_addr_valid+0x1c8/0x5c0 [ 2557.989706][ T7332] ? rcu_is_watching+0x15/0xb0 [ 2557.989731][ T7332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2557.989754][ T7332] ? rcu_is_watching+0x15/0xb0 [ 2557.989779][ T7332] ? lock_release+0x4b/0x3b0 [ 2557.989800][ T7332] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 2557.989832][ T7332] ? __virt_addr_valid+0x1c8/0x5c0 [ 2557.989858][ T7332] ? __virt_addr_valid+0x4a5/0x5c0 [ 2557.989885][ T7332] print_report+0xca/0x240 [ 2557.989907][ T7332] ? copy_to_urb+0x261/0x460 [ 2557.989929][ T7332] kasan_report+0x118/0x150 [ 2557.989950][ T7332] ? copy_to_urb+0x261/0x460 [ 2557.989977][ T7332] kasan_check_range+0x2b0/0x2c0 [ 2557.989996][ T7332] ? copy_to_urb+0x261/0x460 [ 2557.990019][ T7332] __asan_memcpy+0x40/0x70 [ 2557.990045][ T7332] copy_to_urb+0x261/0x460 [ 2557.990073][ T7332] prepare_playback_urb+0x953/0x13d0 [ 2557.990111][ T7332] ? __pfx_prepare_playback_urb+0x10/0x10 [ 2557.990134][ T7332] ? finish_task_switch+0x162/0x940 [ 2557.990167][ T7332] ? __pfx_prepare_playback_urb+0x10/0x10 [ 2557.990191][ T7332] prepare_outbound_urb+0x377/0xc50 [ 2557.990218][ T7332] ? finish_task_switch+0x23d/0x940 [ 2557.990249][ T7332] ? finish_task_switch+0x23d/0x940 [ 2557.990278][ T7332] ? _copy_from_iter+0xb2c/0x1630 [ 2557.990298][ T7332] ? __asan_memcpy+0x40/0x70 [ 2557.990323][ T7332] ? __pfx_prepare_outbound_urb+0x10/0x10 [ 2557.990348][ T7332] ? _copy_from_iter+0x11eb/0x1630 [ 2557.990376][ T7332] ? snd_usb_endpoint_start_quirk+0x1f7/0x320 [ 2557.990406][ T7332] snd_usb_endpoint_start+0x4d8/0x14a0 [ 2557.990439][ T7332] ? __pfx_snd_usb_endpoint_start+0x10/0x10 [ 2557.990469][ T7332] ? do_raw_spin_lock+0x121/0x290 [ 2557.990500][ T7332] start_endpoints+0xa1/0x280 [ 2557.990522][ T7332] ? snd_usb_substream_playback_trigger+0x3ce/0x7a0 [ 2557.990548][ T7332] snd_usb_substream_playback_trigger+0x3e0/0x7a0 [ 2557.990576][ T7332] snd_pcm_do_start+0xb7/0x180 [ 2557.990605][ T7332] snd_pcm_action+0xe7/0x240 [ 2557.990631][ T7332] __snd_pcm_lib_xfer+0x1762/0x1ce0 [ 2557.990650][ T7332] ? irqentry_exit+0x5dd/0x660 [ 2557.990673][ T7332] ? __pfx_interleaved_copy+0x10/0x10 [ 2557.990695][ T7332] ? __pfx_default_write_copy+0x10/0x10 [ 2557.990716][ T7332] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 2557.990743][ T7332] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 2557.990769][ T7332] snd_pcm_oss_write3+0x1bc/0x320 [ 2557.990801][ T7332] snd_pcm_plug_write_transfer+0x2cb/0x4c0 [ 2557.990824][ T7332] ? lockdep_hardirqs_on+0x98/0x140 [ 2557.990845][ T7332] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 2557.990868][ T7332] ? snd_pcm_plug_client_channels_buf+0x490/0x640 [ 2557.990893][ T7332] snd_pcm_oss_sync1+0x2f6/0x760 [ 2557.990920][ T7332] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 2557.990940][ T7332] ? __pfx_ima_file_free+0x10/0x10 [ 2557.990968][ T7332] ? __pfx_default_wake_function+0x10/0x10 [ 2557.990991][ T7332] ? __asan_memset+0x22/0x50 [ 2557.991016][ T7332] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 2557.991041][ T7332] snd_pcm_oss_sync+0x86c/0xc30 [ 2557.991074][ T7332] snd_pcm_oss_release+0xff/0x250 [ 2557.991103][ T7332] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 2557.991132][ T7332] __fput+0x44c/0xa70 [ 2557.991159][ T7332] task_work_run+0x1d4/0x260 [ 2557.991190][ T7332] ? __pfx_task_work_run+0x10/0x10 [ 2557.991217][ T7332] ? do_raw_spin_unlock+0x122/0x240 [ 2557.991249][ T7332] do_exit+0x6c5/0x2310 [ 2557.991278][ T7332] ? irqentry_exit+0x5dd/0x660 [ 2557.991299][ T7332] ? __pfx_do_exit+0x10/0x10 [ 2557.991323][ T7332] ? preempt_schedule_common+0x83/0xd0 [ 2557.991360][ T7332] ? preempt_schedule+0xae/0xc0 [ 2557.991390][ T7332] ? __pfx_preempt_schedule+0x10/0x10 [ 2557.991424][ T7332] do_group_exit+0x21c/0x2d0 [ 2557.991455][ T7332] get_signal+0x1285/0x1340 [ 2557.991484][ T7332] arch_do_signal_or_restart+0x9a/0x7a0 [ 2557.991514][ T7332] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2557.991550][ T7332] ? exit_to_user_mode_loop+0x55/0x4f0 [ 2557.991574][ T7332] exit_to_user_mode_loop+0x87/0x4f0 [ 2557.991594][ T7332] ? rcu_is_watching+0x15/0xb0 [ 2557.991620][ T7332] do_syscall_64+0x2e3/0xf80 [ 2557.991641][ T7332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2557.991661][ T7332] ? clear_bhb_loop+0x60/0xb0 [ 2557.991684][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2557.991703][ T7332] RIP: 0033:0x7f4da058f749 [ 2557.991721][ T7332] Code: Unable to access opcode bytes at 0x7f4da058f71f. [ 2557.991732][ T7332] RSP: 002b:00007f4da1415038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2557.991756][ T7332] RAX: 0000000000000116 RBX: 00007f4da07e5fa0 RCX: 00007f4da058f749 [ 2557.991771][ T7332] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000007 [ 2557.991785][ T7332] RBP: 00007f4da0613f91 R08: 0000000000000000 R09: 0000000000000000 [ 2557.991799][ T7332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2557.991812][ T7332] R13: 00007f4da07e6038 R14: 00007f4da07e5fa0 R15: 00007f4da090fa28 [ 2557.991836][ T7332] [ 2557.991843][ T7332] [ 2558.494922][ T7332] Allocated by task 7333: [ 2558.499277][ T7332] kasan_save_track+0x3e/0x80 [ 2558.504166][ T7332] __kasan_kmalloc+0x93/0xb0 [ 2558.509146][ T7332] __kmalloc_noprof+0x411/0x800 [ 2558.514037][ T7332] snd_usb_endpoint_set_params+0x1749/0x2e70 [ 2558.520054][ T7332] snd_usb_hw_params+0xb12/0x1280 [ 2558.525112][ T7332] snd_pcm_hw_params+0x89d/0x1d30 [ 2558.530164][ T7332] snd_pcm_oss_change_params_locked+0x21cb/0x3e40 [ 2558.536701][ T7332] snd_pcm_oss_write+0x2fb/0x1190 [ 2558.541765][ T7332] vfs_write+0x27e/0xb30 [ 2558.546049][ T7332] ksys_write+0x145/0x250 [ 2558.550416][ T7332] do_syscall_64+0xfa/0xf80 [ 2558.554941][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2558.560871][ T7332] [ 2558.563223][ T7332] The buggy address belongs to the object at ffff8880431c1800 [ 2558.563223][ T7332] which belongs to the cache kmalloc-256 of size 256 [ 2558.577311][ T7332] The buggy address is located 0 bytes inside of [ 2558.577311][ T7332] allocated 240-byte region [ffff8880431c1800, ffff8880431c18f0) [ 2558.591321][ T7332] [ 2558.593683][ T7332] The buggy address belongs to the physical page: [ 2558.600204][ T7332] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880431c0a00 pfn:0x431c0 [ 2558.610306][ T7332] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2558.619017][ T7332] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 2558.627560][ T7332] page_type: f5(slab) [ 2558.631576][ T7332] raw: 00fff00000000240 ffff88801a026b40 ffffea0001e07410 ffffea0001172810 [ 2558.640287][ T7332] raw: ffff8880431c0a00 000000000010000b 00000000f5000000 0000000000000000 [ 2558.649087][ T7332] head: 00fff00000000240 ffff88801a026b40 ffffea0001e07410 ffffea0001172810 [ 2558.657792][ T7332] head: ffff8880431c0a00 000000000010000b 00000000f5000000 0000000000000000 [ 2558.666501][ T7332] head: 00fff00000000001 ffffea00010c7001 00000000ffffffff 00000000ffffffff [ 2558.675206][ T7332] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 2558.684165][ T7332] page dumped because: kasan: bad access detected [ 2558.690601][ T7332] page_owner tracks the page as allocated [ 2558.696347][ T7332] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 29132, tgid 29123 (syz.2.6225), ts 1707144574678, free_ts 1691097103978 [ 2558.719475][ T7332] post_alloc_hook+0x234/0x290 [ 2558.724273][ T7332] get_page_from_freelist+0x2365/0x2440 [ 2558.729848][ T7332] __alloc_frozen_pages_noprof+0x181/0x370 [ 2558.735674][ T7332] alloc_pages_mpol+0x232/0x4a0 [ 2558.740548][ T7332] allocate_slab+0x86/0x3b0 [ 2558.745081][ T7332] ___slab_alloc+0xf2b/0x1960 [ 2558.749777][ T7332] __slab_alloc+0x65/0x100 [ 2558.754211][ T7332] __kmalloc_noprof+0x471/0x800 [ 2558.759099][ T7332] io_cache_alloc_new+0x40/0x100 [ 2558.764065][ T7332] __io_prep_rw+0x23f/0xe00 [ 2558.768682][ T7332] io_prep_rwv+0x91/0x3e0 [ 2558.773031][ T7332] io_submit_sqes+0xad3/0x2140 [ 2558.777816][ T7332] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 2558.783380][ T7332] do_syscall_64+0xfa/0xf80 [ 2558.787890][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2558.793876][ T7332] page last free pid 28890 tgid 28889 stack trace: [ 2558.800378][ T7332] __free_frozen_pages+0xbc4/0xd30 [ 2558.805498][ T7332] __put_partials+0x146/0x170 [ 2558.810203][ T7332] put_cpu_partial+0x1f2/0x2d0 [ 2558.814975][ T7332] __slab_free+0x288/0x2a0 [ 2558.819400][ T7332] qlist_free_all+0x97/0x100 [ 2558.823994][ T7332] kasan_quarantine_reduce+0x148/0x160 [ 2558.829476][ T7332] __kasan_slab_alloc+0x22/0x80 [ 2558.834335][ T7332] kmem_cache_alloc_node_noprof+0x433/0x710 [ 2558.840231][ T7332] __alloc_skb+0x255/0x430 [ 2558.844658][ T7332] netlink_ack+0x146/0xa50 [ 2558.849081][ T7332] netlink_rcv_skb+0x28c/0x470 [ 2558.853945][ T7332] netlink_unicast+0x82f/0x9e0 [ 2558.858711][ T7332] netlink_sendmsg+0x805/0xb30 [ 2558.863659][ T7332] __sock_sendmsg+0x21c/0x270 [ 2558.868346][ T7332] ____sys_sendmsg+0x505/0x820 [ 2558.873200][ T7332] ___sys_sendmsg+0x21f/0x2a0 [ 2558.877883][ T7332] [ 2558.880212][ T7332] Memory state around the buggy address: [ 2558.885846][ T7332] ffff8880431c1780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2558.893905][ T7332] ffff8880431c1800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2558.902061][ T7332] >ffff8880431c1880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 2558.910164][ T7332] ^ [ 2558.917886][ T7332] ffff8880431c1900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2558.925959][ T7332] ffff8880431c1980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2558.934058][ T7332] ================================================================== [ 2558.942120][ T7332] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2558.949314][ T7332] CPU: 0 UID: 0 PID: 7332 Comm: syz.4.9049 Tainted: G L syzkaller #0 PREEMPT(full) [ 2558.960165][ T7332] Tainted: [L]=SOFTLOCKUP [ 2558.964533][ T7332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2558.974861][ T7332] Call Trace: [ 2558.978230][ T7332] [ 2558.981257][ T7332] dump_stack_lvl+0x99/0x250 [ 2558.985909][ T7332] ? __asan_memcpy+0x40/0x70 [ 2558.990523][ T7332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2558.995746][ T7332] ? __pfx__printk+0x10/0x10 [ 2559.000354][ T7332] vpanic+0x237/0x6d0 [ 2559.004341][ T7332] ? __pfx_vpanic+0x10/0x10 [ 2559.008854][ T7332] panic+0xb9/0xc0 [ 2559.012584][ T7332] ? __pfx_panic+0x10/0x10 [ 2559.017011][ T7332] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2559.022933][ T7332] ? is_module_address+0x17/0xf0 [ 2559.027884][ T7332] ? copy_to_urb+0x261/0x460 [ 2559.032487][ T7332] check_panic_on_warn+0x89/0xb0 [ 2559.037595][ T7332] ? copy_to_urb+0x261/0x460 [ 2559.042296][ T7332] end_report+0x6f/0x140 [ 2559.046643][ T7332] kasan_report+0x129/0x150 [ 2559.051161][ T7332] ? copy_to_urb+0x261/0x460 [ 2559.055846][ T7332] kasan_check_range+0x2b0/0x2c0 [ 2559.060787][ T7332] ? copy_to_urb+0x261/0x460 [ 2559.065396][ T7332] __asan_memcpy+0x40/0x70 [ 2559.069839][ T7332] copy_to_urb+0x261/0x460 [ 2559.074293][ T7332] prepare_playback_urb+0x953/0x13d0 [ 2559.079595][ T7332] ? __pfx_prepare_playback_urb+0x10/0x10 [ 2559.085323][ T7332] ? finish_task_switch+0x162/0x940 [ 2559.090542][ T7332] ? __pfx_prepare_playback_urb+0x10/0x10 [ 2559.096270][ T7332] prepare_outbound_urb+0x377/0xc50 [ 2559.101478][ T7332] ? finish_task_switch+0x23d/0x940 [ 2559.106706][ T7332] ? finish_task_switch+0x23d/0x940 [ 2559.111913][ T7332] ? _copy_from_iter+0xb2c/0x1630 [ 2559.116939][ T7332] ? __asan_memcpy+0x40/0x70 [ 2559.121538][ T7332] ? __pfx_prepare_outbound_urb+0x10/0x10 [ 2559.127264][ T7332] ? _copy_from_iter+0x11eb/0x1630 [ 2559.132551][ T7332] ? snd_usb_endpoint_start_quirk+0x1f7/0x320 [ 2559.138641][ T7332] snd_usb_endpoint_start+0x4d8/0x14a0 [ 2559.144114][ T7332] ? __pfx_snd_usb_endpoint_start+0x10/0x10 [ 2559.150039][ T7332] ? do_raw_spin_lock+0x121/0x290 [ 2559.155103][ T7332] start_endpoints+0xa1/0x280 [ 2559.159783][ T7332] ? snd_usb_substream_playback_trigger+0x3ce/0x7a0 [ 2559.166812][ T7332] snd_usb_substream_playback_trigger+0x3e0/0x7a0 [ 2559.173238][ T7332] snd_pcm_do_start+0xb7/0x180 [ 2559.178015][ T7332] snd_pcm_action+0xe7/0x240 [ 2559.182614][ T7332] __snd_pcm_lib_xfer+0x1762/0x1ce0 [ 2559.187911][ T7332] ? irqentry_exit+0x5dd/0x660 [ 2559.192712][ T7332] ? __pfx_interleaved_copy+0x10/0x10 [ 2559.198173][ T7332] ? __pfx_default_write_copy+0x10/0x10 [ 2559.203909][ T7332] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 2559.209982][ T7332] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 2559.215537][ T7332] snd_pcm_oss_write3+0x1bc/0x320 [ 2559.220578][ T7332] snd_pcm_plug_write_transfer+0x2cb/0x4c0 [ 2559.226391][ T7332] ? lockdep_hardirqs_on+0x98/0x140 [ 2559.231595][ T7332] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 2559.237932][ T7332] ? snd_pcm_plug_client_channels_buf+0x490/0x640 [ 2559.244352][ T7332] snd_pcm_oss_sync1+0x2f6/0x760 [ 2559.249568][ T7332] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 2559.255036][ T7332] ? __pfx_ima_file_free+0x10/0x10 [ 2559.260164][ T7332] ? __pfx_default_wake_function+0x10/0x10 [ 2559.265981][ T7332] ? __asan_memset+0x22/0x50 [ 2559.270582][ T7332] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 2559.276486][ T7332] snd_pcm_oss_sync+0x86c/0xc30 [ 2559.281349][ T7332] snd_pcm_oss_release+0xff/0x250 [ 2559.286410][ T7332] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 2559.292052][ T7332] __fput+0x44c/0xa70 [ 2559.296045][ T7332] task_work_run+0x1d4/0x260 [ 2559.300647][ T7332] ? __pfx_task_work_run+0x10/0x10 [ 2559.305774][ T7332] ? do_raw_spin_unlock+0x122/0x240 [ 2559.310998][ T7332] do_exit+0x6c5/0x2310 [ 2559.315183][ T7332] ? irqentry_exit+0x5dd/0x660 [ 2559.319967][ T7332] ? __pfx_do_exit+0x10/0x10 [ 2559.324608][ T7332] ? preempt_schedule_common+0x83/0xd0 [ 2559.330182][ T7332] ? preempt_schedule+0xae/0xc0 [ 2559.335048][ T7332] ? __pfx_preempt_schedule+0x10/0x10 [ 2559.340440][ T7332] do_group_exit+0x21c/0x2d0 [ 2559.345128][ T7332] get_signal+0x1285/0x1340 [ 2559.349736][ T7332] arch_do_signal_or_restart+0x9a/0x7a0 [ 2559.355294][ T7332] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2559.361550][ T7332] ? exit_to_user_mode_loop+0x55/0x4f0 [ 2559.367020][ T7332] exit_to_user_mode_loop+0x87/0x4f0 [ 2559.372316][ T7332] ? rcu_is_watching+0x15/0xb0 [ 2559.377097][ T7332] do_syscall_64+0x2e3/0xf80 [ 2559.381691][ T7332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2559.387761][ T7332] ? clear_bhb_loop+0x60/0xb0 [ 2559.392449][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2559.398429][ T7332] RIP: 0033:0x7f4da058f749 [ 2559.402852][ T7332] Code: Unable to access opcode bytes at 0x7f4da058f71f. [ 2559.409886][ T7332] RSP: 002b:00007f4da1415038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2559.418306][ T7332] RAX: 0000000000000116 RBX: 00007f4da07e5fa0 RCX: 00007f4da058f749 [ 2559.426280][ T7332] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000007 [ 2559.434253][ T7332] RBP: 00007f4da0613f91 R08: 0000000000000000 R09: 0000000000000000 [ 2559.442231][ T7332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2559.450204][ T7332] R13: 00007f4da07e6038 R14: 00007f4da07e5fa0 R15: 00007f4da090fa28 [ 2559.458271][ T7332] [ 2559.461773][ T7332] Kernel Offset: disabled [ 2559.466291][ T7332] Rebooting in 86400 seconds..