last executing test programs: 4m30.972405096s ago: executing program 2 (id=650): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x40080c1) shutdown(0xffffffffffffffff, 0x1) syz_usb_connect(0x0, 0x63, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004080) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xac, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="2e7ddbb0d288cc377b0b7380609a3b9dcf9b9af9312f68acefecd07861a828adbe33f9b45ea7161e564643d4081c8e9a439995122d6860d3af26a5da60e8614854d17aac742edd33c6f9e9167718dbfec2c0edab1e4de0d409a1103f311937db880f975d7e260883dd49022925a0d078cec14faeaeb8fcfb805bf308bbf31ef65307b8f09f2dd4ab5faba9f197aed32f4ce2c661abbc36fced74c78642acbad7b05aa3ca573c20681c6a5cdaeb6b435997b2f8b3c57358f5594050743a961c6f65f3ed0a2c0fae069d59ac506f63a71a6c2d5a8a9da8461386bb94739d0d6b3b0f8dc361837dd2a8c093c831ecaa4f97", 0xf0, r3) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f00000001c0)=0x1, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) 4m26.89553332s ago: executing program 2 (id=664): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x1}}, 0x10) 4m26.698119804s ago: executing program 2 (id=667): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend', 0x149a82, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800, 0x0, 0xfc, 0x0, 0x4}, 0x20) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f00000000c0)={0x1, 0xfdfffffe, @value=0x2}) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="97020000000000005c00128009000100626f6e64000000004c00028008000a00000000001800088000000000e00000017f000001640101020000000005000100000000000800070001000000080009"], 0x8c}}, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000240)) syz_usb_control_io(r5, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000000300)={0x2ef, 0x7, 0x0, {0x9, @pix={0xfffffffc, 0x10001, 0x20385655, 0x8, 0x8, 0x7, 0x2, 0x2f57, 0x1, 0x7, 0x1, 0x6}}, 0x4}) 4m23.710230829s ago: executing program 2 (id=681): syz_usb_connect(0x7, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000fc4c0100000024019f3a0102030109022400ec42b6b0030004000002c55bef00090504030000000000090502020000000000a065b09ab5519872be36ab576def860e16200a00392508299d8f484337c88b6d13c39c2ba7542b2a6eedb3715eb526729a6e4b35113a177dbc3a0218"], 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='2$'], 0x0, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e7400"], 0x0) socket$qrtr(0x2a, 0x2, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00006dbffc)=0x40, 0x25) syz_usb_connect$uac1(0x3, 0x84, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r7) 4m20.443001356s ago: executing program 2 (id=690): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004070000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd255985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8c7049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8504000000000000004fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290c7536fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba8425b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d2c5a01bf1ee6b28169fef18df13c759e767d3442ae6598106496f42b73074bb804e8763915c3e04400ad44e9f3130e904062d204d385c026722a094255db1572d66e7a4917bba2a0f6a1a57482cdb4070de8dd60fd65dacb9ec5003fb1cca05ce1c9f924cc2ec45e8d5adf7c89e3b0b8da35c1aa7fbbee6f839a8f05294a6c02281afb7601252611583408f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x12}, 0x0) 4m19.859729521s ago: executing program 2 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="2c000180"], 0x44}}, 0x0) (fail_nth: 7) 4m19.246004341s ago: executing program 32 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="2c000180"], 0x44}}, 0x0) (fail_nth: 7) 10.045944291s ago: executing program 5 (id=1926): fsopen(&(0x7f0000000100)='proc\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffff7fffffff]}, 0x8) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x100000000000, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f00000000c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4f24, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x24) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000002480), 0x20402, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10042, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) unshare(0x24020400) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f00000001c0)='./file0\x00', 0x6ebcafc71754228f) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44010000100001000000000000000000fe88000000646b5b2bc328c1c3b2db0000000000000000000001fe80000000000000000000000000000000000000000000000a0020005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000033000000fc0200000000000000000000000000010000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000a000480000000004c001400736d330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800160000000000"], 0x144}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 9.25536516s ago: executing program 1 (id=1928): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c5c0)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000300)="80bb93a892fecf090dff2d55de9a00f5e816dd7f8a01348b025e71613d821e7aa6bafed954f1bf9e89074240afa9b0f86477da175df3e5e6f3c718a7a06c17540ae92d6f9b9cc5744540b40499d33dfe1565105368f655466324ab5f68dbb6018df0256a651c42ff1c4a7745e19e8ca0333a3a3e66f402aad9fa2ab5ddc27a6d54b29c1feaffdf769d8f9208a2bfa261cf278eeca8164cc5d762dacfab34031cc48177b64c86fba377ba1227ea8d8131938e85b6690639006bd7aec63879c45a477941945ac4a2b579305d9a379611c49a7227bf54fdce3355605945980e89adabd24234cecd598bb10c2f06ce8a98", 0xef}], 0x1, 0x0, 0x0, 0x4048010}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000240)="66911ede5eb7cf7bd924ceb0929caf2b8e8f9da15fcb81157cb6facfc2b78987aa2ae5ba0958b3d47f82584710df8d12d46729eb9c0b2bcd9cb2f7531ea4d1b9f08583003d7cc4c4cd52db994a935bcb4fd79bc8fa2b51fc989507021004e330ad32e00c", 0x64}, {&(0x7f0000000bc0)="ff21e1301093451a789b20da3793d94dfb4412f8b7dde41b7b02b2485626e8d4ce1bb995e84b85e4c39aaa79c51c329b178508a0ffef093252487644ff4ddc685f26e9e9680687966a27d3cb78", 0x4d}, {&(0x7f0000000a40)="c0a70d656557fc3aa2b85e5a0fd34aebfef28cafaae3618fbc247df4b40d3db395ae294389b238a0e907ffca0add8d99bfdcd32e4660cb3582733162da5955", 0x3f}, {&(0x7f0000000a80)="facc1ecd9f2e8c68c36807f617c55b372b0c531b5bb9b6355f9a6059887b82b1fea006428c32ea8e36909c4f418c928516d0664c6cabe2277fc8b8dc40242b4b1a0e885032c8a20f70af585dd94b0ced866e11a2", 0x54}, {&(0x7f0000000b00)="9c83fe60c880bb2161b123ea89ca4fef73e2d66ad1082a7f51772f07f8f81bc1af37341598eeeabf605f634f8a3a001952ef1299d61ce18f3bf4bca9b0415bf6935fa62e3d1ab0ed76bb", 0x4a}], 0x5, &(0x7f0000000d00)=[@rights={{0xc}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90, 0x5}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000dc0)="d43975de6f509dc73168956e6eef79d2939c794068b066710394641b048b40e395d271552fd249835144ddca05ab244a3bca624361d050de65661f29", 0x3c}, {&(0x7f0000000e00)="3ebe6a170b3226e2805bea36c04b968e7de930e7c4f9ed72f5565f1fd6153a20402476b584159af31e3a1f3340c6d96dc05dc44a160d5fc1880c48543f5393e24b602994f7281935fd2e0f00dc400afca45f7e0534f893bafa1df726a18bb2a771f1c2967ea4799033de9b68cb749af85d8d2fb941746e23e65ef5e043144fd009c4dfeda8a49edcfff4c5ef9c8b43ad77807619a16ae760488ba27028682611a65f333d5a13f5", 0xa7}, {&(0x7f0000003340)="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", 0x1080}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000002ec0)="ae24f3120619465e5a6164973f685018776139b751116bbeedb44a9c893e435d89035cf87c17b84f3cfdcb183b80c33d3074e63f91bec6d798cf260b89754f5c41fd499cf8a9322c11879da931c4a0a442245383f54c2ecb3320a0b8d3eb6a3d7a", 0x61}, {&(0x7f0000002f40)="495c376a6dea888cb48b3fb277f5d786d30ae836818c31a1839298b1fd0c5d9323fa223a33c3b0c2b31ef2feaa46469b927b4dc3fc37fc644d1e3ffca8320f6fcc94d8210e21fe2d19f3305994f67140b5ca4d34f64b968d224034298c626eb67d8ed27f0451e45010d7ab70f4fb042605f11ab6b4ef53c6433a73ed5cefe41d06354f97fbe574b280b85b92d62c9bca11dc03460a9748", 0x97}, {&(0x7f0000003000)="ee63619e84db02832fa4cd9be712f3243117f4ed572b6d38bbb0c93b0dc88ddce4107b660d02f44bc5fc7512", 0x2c}], 0x7, &(0x7f0000003280)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0, 0x1}}], 0x3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) gettid() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) 9.182143227s ago: executing program 5 (id=1929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 8.82621316s ago: executing program 5 (id=1933): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) open(&(0x7f0000000040)='./bus\x00', 0x2, 0x101) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201390b71d7d801020301090224000105094019ffffffffffffffff980905eb02200002020509058412ff03080923ede9386c4a3dc0824ed1544f3da14f97f0a9349d5fde39d169dbe44ff6fc2000ac0aaa1649b961226bb80b879897320d27107287"], 0x0) 7.949970198s ago: executing program 0 (id=1937): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x1884, &(0x7f0000000200)={0x0, 0x739c, 0x10100, 0x0, 0x400002f9}, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') openat$binfmt(0xffffff9c, r4, 0x41, 0x1ff) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x2000000, 0x2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40150000000900020073797a31000000000900010073797a300000000008000540000000150c00098008000140ff"], 0x98}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r7 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440)=r6, 0x1) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0xe}) 7.744519218s ago: executing program 0 (id=1938): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000100)={0x0, 0x50565559, 0x780, 0x438, 0x0, @stepwise}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000280)=""/216) connect$inet6(0xffffffffffffffff, 0x0, 0x17) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x6c27, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, r1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, 0x0, 0x0, 0x571, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9cc, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00001900599c"], 0xfe33) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x40, r8, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf8d220e, 0x49}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4}) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x100013ff, 0x0, 0x0, 0xfffffffffffffecd, 0x0, 0xfff, 0x2, 0xfffffffc, 0x0, 0x0}) move_pages(r10, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) 7.489532364s ago: executing program 1 (id=1940): write$nbd(0xffffffffffffffff, 0x0, 0x40) r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x10) 7.229057624s ago: executing program 1 (id=1941): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f000087d000/0x1000)=nil, 0x1000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 7.0662126s ago: executing program 1 (id=1942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0xb, 0x1, 0x0, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x1d, 0x2, 0x6) unshare(0x2c020400) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0x0) close(0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0x7, 0xffffffffffffffca, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x8, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r5, 0xae80, 0xf000) 5.581225271s ago: executing program 4 (id=1946): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x700, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x178, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x80, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x7}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}]}]}, 0x178}}, 0x4040000) 5.291784683s ago: executing program 0 (id=1947): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f00000006c0)="8d3b", 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="4b979fc5100000dd46b001fe944e827bf253fea4540545", 0x17}, {&(0x7f0000000180)="e3", 0x1}, {&(0x7f00000002c0)="d8fa34bdc8", 0x5}, {&(0x7f0000000440)='6', 0x1}], 0x4}}], 0x1, 0x24008804) recvmmsg(r2, &(0x7f0000007440)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000db1264087d0000000904250000302b4000091301000062bd870009040002000000008e9978dc6fb1f9e4e3661afea1ac689062caec3e839fee93b28615e00688af29f97783367685ad715a3daf37c2d44b625ebee099946185c2d484d610ab"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 5.222089074s ago: executing program 4 (id=1948): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200800, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f0000000080)=""/50, 0x32, 0x8) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc3400000000001090224"], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) 5.2211807s ago: executing program 5 (id=1949): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}}, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000001c0)={0x3ace403d1942a782, 0x0, "8ade4afe2aea04b5cd61cd3c742f0f02"}) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x1f\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v2*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\xc95\xcc\xb6\xf6\xe8o\xfd\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60k2\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Lo\x12\x00\xa2\xa5$9\x05O\xfe\x0e\xd2N\x98\x84\x10\x01\x89\xaa)\x118\xcd\xf8>\xab\xd9\xbd\xcfH\xa5\x8e\x14\x12\xb0OF\x80\xbb\xb6B\x80Q \x85\'w\xc8D\xf9\xfa\fq\x9e\x83I\xe5\n\xae8\xb7\f\xab#\x85Y\xeeH\x98\x84\x8cRv\xdcZ<\x80\xbd\x8d~\n\x88-\xa1\x97\xaf2e\xa6\'\x8aQ\x85}\xf1\rJF\f\x8c_\x01\xbe\'\v1\xccL\x0e\x05\xbdIa\x85\xb8\x14\xe0;}\xb7\x11\xb5\xfa\xeb\x13\xd3\x92\x8a\xe47\xf9\x12\xd9\xd5\x99\xf4\t\xdf\x058\xc4]\xf7\x16J\xf9\xce\xf0zG\xe6i\xf1~\xaaL\xa5\xd5\xe5L\xban?\'\x11B\xeav\xbf|\xc6\xc9>\xfc\x14\xbe7T\x00\x05\x05\x13}', 0xf) fcntl$setstatus(r2, 0x4, 0x42000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f9, &(0x7f00000000c0)={'bond_slave_0\x00', @random="2e2e014010ff"}) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000100001f5ffffff00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040808) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @dev}, 0x2}}, 0x2e) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6, 0x12, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b0400000000000000007a000000", @ANYRES32=r0, @ANYBLOB="000000000000000014004080"], 0x60}}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004010) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) 4.722517314s ago: executing program 1 (id=1950): syz_usb_connect(0x0, 0x24, &(0x7f0000002e80)=ANY=[@ANYBLOB="1201090212000100020000090400000003540500"/36], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x2}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7fff, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x80000) 3.253382256s ago: executing program 3 (id=1954): r0 = socket$kcm(0xa, 0x2, 0x73) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x208400, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1], 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xb1, 0x3}, {0xfffe, 0xb1, 0xe}, {0x2}, {0x6, 0x0, 0x3e}]}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x10, 0x29, 0x32}}, @ip_pktinfo={{0x18, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x40}, 0x0) 3.116809738s ago: executing program 3 (id=1955): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x178, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x80, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x7}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}]}]}, 0x178}}, 0x4040000) (fail_nth: 8) 2.984642851s ago: executing program 3 (id=1956): socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newneigh={0x1c, 0x1c, 0x200, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x10, 0x80, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x24018095}, 0x4000000) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/255, 0xff}], 0x1, &(0x7f0000000980)=""/210, 0xd2}, 0xce}], 0x1, 0x40002002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=r0, @ANYBLOB="ed"], 0x20) 2.922289081s ago: executing program 5 (id=1957): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000002, 0x7, &(0x7f0000006680)) r0 = gettid() r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000044080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xa1ffffff, 0x101}}]}]}]}, 0x5c}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000180)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) rt_sigqueueinfo(r0, 0x21, &(0x7f00000000c0)={0x4, 0x4}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = msgget$private(0x0, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) msgsnd(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="03"], 0x8, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x8, 0x5, 0x570, 0x294, 0x0, 0xffffffff, 0x380, 0x380, 0x4a8, 0x4a8, 0xffffffff, 0x4a8, 0x4a8, 0x5, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, [], [], 'gretap0\x00', 'wg2\x00'}, 0x0, 0x10c, 0x154, 0x0, {}, [@common=@hl={{0x24}}, @common=@unspec=@helper={{0x44}, {0x73, 'sane-20000\x00'}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv4=@multicast1, @ipv6=@mcast1, @gre_key=0x1, @gre_key=0x1}}}, {{@ipv6={@local, @dev, [], [], 'bond_slave_0\x00', 'veth0_to_team\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x68}, {0x2, 0xdf}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xbd7, 0x4, 0x2}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@private, @ipv4=@multicast2, @gre_key=0xe, @port=0x4e24}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, [], [], 'veth1_to_hsr\x00', 'veth0_vlan\x00'}, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@loopback, @gre_key=0x3, @icmp_id}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d4], 0x6, 0x10, 0x2}}, @common=@srh={{0x2c}, {0x89, 0x82, 0x80, 0x31, 0x2, 0x241d, 0x128}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffffffff, 0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5cc) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.606164617s ago: executing program 3 (id=1958): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000100)={0x0, 0x50565559, 0x780, 0x438, 0x0, @stepwise}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000280)=""/216) connect$inet6(0xffffffffffffffff, 0x0, 0x17) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x6c27, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, r1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, 0x0, 0x0, 0x571, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9cc, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00001900599c"], 0xfe33) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x40, r8, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf8d220e, 0x49}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4}) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x100013ff, 0x0, 0x0, 0xfffffffffffffecd, 0x0, 0xfff, 0x2, 0xfffffffc, 0x0, 0x0}) move_pages(r10, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) 2.238051056s ago: executing program 4 (id=1959): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x8, 0x201, 0xfffffff7, 0x60000}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="d9", 0xffe0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback={0x800000000000000}}, 0x1c) 1.974389501s ago: executing program 0 (id=1960): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x44040) syz_emit_ethernet(0x1f, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff00007a6a001ac6ea170c9ef85a76a8"], 0x0) 1.846244612s ago: executing program 4 (id=1961): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x41000000, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) 1.545046766s ago: executing program 1 (id=1962): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c5c0)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000300)="80bb93a892fecf090dff2d55de9a00f5e816dd7f8a01348b025e71613d821e7aa6bafed954f1bf9e89074240afa9b0f86477da175df3e5e6f3c718a7a06c17540ae92d6f9b9cc5744540b40499d33dfe1565105368f655466324ab5f68dbb6018df0256a651c42ff1c4a7745e19e8ca0333a3a3e66f402aad9fa2ab5ddc27a6d54b29c1feaffdf769d8f9208a2bfa261cf278eeca8164cc5d762dacfab34031cc48177b64c86fba377ba1227ea8d8131938e85b6690639006bd7aec63879c45a477941945ac4a2b579305d9a379611c49a7227bf54fdce3355605945980e89adabd24234cecd598bb10c2f06ce8a98", 0xef}], 0x1, 0x0, 0x0, 0x4048010}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000240)="66911ede5eb7cf7bd924ceb0929caf2b8e8f9da15fcb81157cb6facfc2b78987aa2ae5ba0958b3d47f82584710df8d12d46729eb9c0b2bcd9cb2f7531ea4d1b9f08583003d7cc4c4cd52db994a935bcb4fd79bc8fa2b51fc989507021004e330ad32e00c", 0x64}, {&(0x7f0000000bc0)="ff21e1301093451a789b20da3793d94dfb4412f8b7dde41b7b02b2485626e8d4ce1bb995e84b85e4c39aaa79c51c329b178508a0ffef093252487644ff4ddc685f26e9e9680687966a27d3cb78", 0x4d}, {&(0x7f0000000a40)="c0a70d656557fc3aa2b85e5a0fd34aebfef28cafaae3618fbc247df4b40d3db395ae294389b238a0e907ffca0add8d99bfdcd32e4660cb3582733162da5955", 0x3f}, {&(0x7f0000000a80)="facc1ecd9f2e8c68c36807f617c55b372b0c531b5bb9b6355f9a6059887b82b1fea006428c32ea8e36909c4f418c928516d0664c6cabe2277fc8b8dc40242b4b1a0e885032c8a20f70af585dd94b0ced866e11a2", 0x54}, {&(0x7f0000000b00)="9c83fe60c880bb2161b123ea89ca4fef73e2d66ad1082a7f51772f07f8f81bc1af37341598eeeabf605f634f8a3a001952ef1299d61ce18f3bf4bca9b0415bf6935fa62e3d1ab0ed76bb", 0x4a}], 0x5, &(0x7f0000000d00)=[@rights={{0xc}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90, 0x5}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000dc0)="d43975de6f509dc73168956e6eef79d2939c794068b066710394641b048b40e395d271552fd249835144ddca05ab244a3bca624361d050de65661f29", 0x3c}, {&(0x7f0000000e00)="3ebe6a170b3226e2805bea36c04b968e7de930e7c4f9ed72f5565f1fd6153a20402476b584159af31e3a1f3340c6d96dc05dc44a160d5fc1880c48543f5393e24b602994f7281935fd2e0f00dc400afca45f7e0534f893bafa1df726a18bb2a771f1c2967ea4799033de9b68cb749af85d8d2fb941746e23e65ef5e043144fd009c4dfeda8a49edcfff4c5ef9c8b43ad77807619a16ae760488ba27028682611a65f333d5a13f5", 0xa7}, {&(0x7f0000003340)="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", 0x1080}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000002ec0)="ae24f3120619465e5a6164973f685018776139b751116bbeedb44a9c893e435d89035cf87c17b84f3cfdcb183b80c33d3074e63f91bec6d798cf260b89754f5c41fd499cf8a9322c11879da931c4a0a442245383f54c2ecb3320a0b8d3eb6a3d7a", 0x61}, {&(0x7f0000002f40)="495c376a6dea888cb48b3fb277f5d786d30ae836818c31a1839298b1fd0c5d9323fa223a33c3b0c2b31ef2feaa46469b927b4dc3fc37fc644d1e3ffca8320f6fcc94d8210e21fe2d19f3305994f67140b5ca4d34f64b968d224034298c626eb67d8ed27f0451e45010d7ab70f4fb042605f11ab6b4ef53c6433a73ed5cefe41d06354f97fbe574b280b85b92d62c9bca11dc03460a9748", 0x97}, {&(0x7f0000003000)="ee63619e84db02832fa4cd9be712f3243117f4ed572b6d38bbb0c93b0dc88ddce4107b660d02f44bc5fc7512", 0x2c}], 0x7, &(0x7f0000003280)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000000c4c0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0xb4, 0x20000021}}], 0x4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) gettid() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) 1.527435537s ago: executing program 0 (id=1963): write$nbd(0xffffffffffffffff, 0x0, 0x40) r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) 1.275775709s ago: executing program 0 (id=1964): sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d462", 0x4, 0x40000, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8442, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x200}) sched_setaffinity(0x0, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000ff6d5c8b9b"]) ioctl$TUNGETFILTER(r2, 0x801054db, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0xb, 0x0, 0x20, 0x0, 0x0, 0x2004c5, 0x8000000, 0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0, 0x3, 0x4000000000000004, 0x2], 0xeeef0000}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x1, 0x3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x14c2, &(0x7f0000000880)={0x0, 0x4, 0x2, 0x3, 0x162}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x100, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2008) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(r7, 0xab2, 0x6ce0, 0x5, 0x0, 0x57) clock_nanosleep(0x448f863cc4c5137d, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.167709657s ago: executing program 3 (id=1965): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRESHEX, @ANYRESOCT=r2, @ANYRES64=r1, @ANYRESOCT, @ANYRESHEX], 0x9) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000040), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r9 = socket(0x11, 0xa, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2803, {0x5, 0x2, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback=0xac14140f}, "0000b50800000000"}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r10], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in=@empty, 0x4e23, 0x6, 0x4e24, 0x0, 0xa, 0x80, 0x80, 0x6, r11, 0xffffffffffffffff}, {0xffffffff, 0x3, 0x9, 0x3, 0x0, 0x4, 0x9, 0x6}, {0x0, 0x6, 0x5, 0x5}, 0xfffffffd, 0x6e6bc0, 0x0, 0x0, 0x1, 0x3}, {{@in6=@private1, 0x4d2, 0x3c}, 0x2, @in=@remote, 0x3501, 0x0, 0x2, 0x0, 0x1000, 0x3, 0xe1}}, 0xe4) 610.064764ms ago: executing program 3 (id=1966): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) socket$inet6(0xa, 0x3, 0x8000000003c) (async) userfaultfd(0x801) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x801) r3 = socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = socket$kcm(0x11, 0xa, 0x300) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) (async) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002400)=""/4098, 0x1000}], 0x3a}, 0x0) (async) bind$can_raw(r3, &(0x7f0000000000), 0x10) (async) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a0000000000000005000000"], 0x4c}}, 0x0) (async) openat$kvm(0x0, 0x0, 0x10b500, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r6 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x20005) 213.047785ms ago: executing program 4 (id=1967): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000004300"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x54) 767.103µs ago: executing program 5 (id=1968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x345, 0x0, 0x2ac}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x2e9b, &(0x7f0000000580)={0x0, 0xd3bb, 0x6, 0x3, 0x234}, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000080)={0x9, 0x3, 0x60, 0x4, "df296dba7b0921fd4cd429cb94c879ce13a0d5c4f5b5ae3d3ce96a09f950eb6d"}) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000440)=""/247, 0x26) 0s ago: executing program 4 (id=1969): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="640000000206050000000000000000000000000115000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015000300000005000500020000000500010006000000aa3e3f80a0734c0e5c5592610e29f9ae7d8e5d454b000e1f653cf0317aab141ef76cd3d09cbd954b0000e3b3fddc7b48e66052259bcae1abb8e4b79de1a747"], 0x64}}, 0x0) syz_emit_ethernet(0x106, &(0x7f0000000880)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0xd0, 0x3a, 0x0, @remote, @local, {[@dstopts={0x3a, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @jumbo]}, @routing={0x3c, 0x8, 0x2, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x31}, @empty, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}]}], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x33}]}], "fb36eeca6fad507a13864d03afcf57ed64b375a22a584d16ca5578ee9e5856cce0d46ba63699517cb8b532de46c495ef"}}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r7 = syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2df0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 254028][T11177] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1579'. [ 461.258889][ T5874] gspca_cpia1: usb_control_msg 05, error -71 [ 461.304645][ T5874] cpia1 6-1:0.0: unexpected systemstate: 00 [ 461.314040][ T5874] usb 6-1: USB disconnect, device number 45 [ 461.417693][T11182] usb usb7: usbfs: process 11182 (syz.4.1579) did not claim interface 0 before use [ 461.586214][ T5877] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 461.774222][T11187] fuse: root generation should be zero [ 461.823907][ T5877] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 461.832477][ T5877] usb 2-1: config 0 has no interface number 0 [ 461.921905][ T5877] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 461.932224][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.940348][ T5877] usb 2-1: Product: syz [ 461.952168][ T5877] usb 2-1: Manufacturer: syz [ 461.964895][ T5877] usb 2-1: SerialNumber: syz [ 461.986317][ T5877] usb 2-1: config 0 descriptor?? [ 462.045993][T11194] netlink: 'syz.3.1584': attribute type 21 has an invalid length. [ 462.054054][T11194] netlink: 'syz.3.1584': attribute type 1 has an invalid length. [ 462.064588][T11194] netlink: 'syz.3.1584': attribute type 21 has an invalid length. [ 462.072536][T11194] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1584'. [ 462.154097][T11194] usb usb7: usbfs: process 11194 (syz.3.1584) did not claim interface 0 before use [ 462.326456][ T5874] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 462.527754][ T5874] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 462.536986][ T5874] usb 1-1: config 0 has an invalid interface number: 2 but max is -1 [ 462.604902][ T5874] usb 1-1: config 0 has an invalid interface number: 2 but max is -1 [ 462.640485][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.671187][ T5874] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 462.890137][ T5874] usb 1-1: config 0 has no interface number 0 [ 462.913037][ T5874] usb 1-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 462.948796][ T5874] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.960913][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.981551][ T5874] usb 1-1: Product: syz [ 463.009858][ T5874] usb 1-1: Manufacturer: syz [ 463.019264][ T5874] usb 1-1: SerialNumber: syz [ 463.044974][ T5874] usb 1-1: config 0 descriptor?? [ 463.231469][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1588'. [ 463.273796][ T5874] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 463.293063][ T5874] usb 1-1: MIDIStreaming interface descriptor not found [ 463.400080][ T5874] usb 1-1: USB disconnect, device number 80 [ 463.832292][ T5912] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 463.998017][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 464.048302][ T5912] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 464.113542][ T5912] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 464.179015][ T5912] usb 4-1: config 1 interface 0 has no altsetting 0 [ 464.222317][ T5874] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 464.231949][ T5912] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 464.244558][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.270651][ T5912] usb 4-1: Product: syz [ 464.275073][ T5912] usb 4-1: Manufacturer: syz [ 464.281197][ T5912] usb 4-1: SerialNumber: syz [ 464.284705][ T5877] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 464.300330][T11222] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 464.302187][ T5877] usb 2-1: No valid video chain found. [ 464.354664][ T5877] usb 2-1: USB disconnect, device number 74 [ 464.402106][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 464.412923][ T5874] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 464.452269][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.489770][ T5874] usb 1-1: Product: syz [ 464.494544][ T5874] usb 1-1: Manufacturer: syz [ 464.500362][ T5874] usb 1-1: SerialNumber: syz [ 464.513860][ T5874] r8152-cfgselector 1-1: Unknown version 0x0000 [ 464.520628][ T5874] r8152-cfgselector 1-1: config 0 descriptor?? [ 464.556580][T11222] syz.5.1592 (11222): drop_caches: 0 [ 464.739827][ T5874] r8152-cfgselector 1-1: Unknown version 0x0000 [ 464.740017][ T5874] r8152-cfgselector 1-1: bad CDC descriptors [ 464.935315][ T5877] r8152-cfgselector 1-1: USB disconnect, device number 81 [ 465.197105][T11235] bond0: entered allmulticast mode [ 465.693687][T11248] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x9 [ 465.929497][T11254] netlink: 'syz.4.1599': attribute type 21 has an invalid length. [ 465.951325][T11254] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 465.964759][T11254] netlink: 'syz.4.1599': attribute type 21 has an invalid length. [ 465.978528][T11254] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1599'. [ 465.992582][ T47] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 466.152426][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 466.159729][ T47] usb 1-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 466.170514][ T47] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.193014][ T47] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 466.205624][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.214025][ T47] usb 1-1: Product: syz [ 466.221012][ T47] usb 1-1: Manufacturer: syz [ 466.226157][ T47] usb 1-1: SerialNumber: syz [ 466.491390][ T47] usb 1-1: 0:2 : does not exist [ 466.537610][ T5912] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 466.552001][ T47] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 466.569689][ T5912] usb 4-1: USB disconnect, device number 68 [ 466.671972][ T47] usb 1-1: USB disconnect, device number 82 [ 466.920500][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.039114][T11267] netlink: 'syz.3.1603': attribute type 1 has an invalid length. [ 467.132180][ T5912] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 467.207637][T11267] bond2: entered promiscuous mode [ 467.221801][T11267] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.282201][T11274] netlink: 'syz.0.1604': attribute type 21 has an invalid length. [ 467.290918][T11274] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1604'. [ 467.292575][ T5912] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 467.308798][ T5912] usb 6-1: config 0 has an invalid interface number: 2 but max is -1 [ 467.317138][ T5912] usb 6-1: config 0 has an invalid interface number: 2 but max is -1 [ 467.325416][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.335977][ T5912] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 467.346326][ T5912] usb 6-1: config 0 has no interface number 0 [ 467.352745][ T5912] usb 6-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.376084][ T5912] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 467.395561][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.412137][ T5912] usb 6-1: Product: syz [ 467.422212][ T5912] usb 6-1: Manufacturer: syz [ 467.426861][ T5912] usb 6-1: SerialNumber: syz [ 467.443435][ T5912] usb 6-1: config 0 descriptor?? [ 467.528461][T11278] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 467.676247][ T5912] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 467.686106][ T5912] usb 6-1: MIDIStreaming interface descriptor not found [ 467.709332][T11270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.744185][T11270] bond2: (slave bond3): making interface the new active one [ 467.753944][T11270] bond3: entered promiscuous mode [ 467.787959][ T5912] usb 6-1: USB disconnect, device number 46 [ 467.820344][T11270] bond2: (slave bond3): Enslaving as an active interface with an up link [ 467.901558][T11274] netlink: 'syz.0.1604': attribute type 5 has an invalid length. [ 467.910193][T11274] netlink: 'syz.0.1604': attribute type 6 has an invalid length. [ 467.922882][T11274] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1604'. [ 468.312186][ T5874] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 468.361423][T11287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1607'. [ 468.494099][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.523555][ T5874] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 468.809721][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.905756][ T5912] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 468.918240][ T5874] usb 5-1: config 0 descriptor?? [ 469.181878][ T5912] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 469.385166][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.471027][ T5912] usb 2-1: Product: syz [ 469.487480][ T5912] usb 2-1: Manufacturer: syz [ 469.498382][ T5912] usb 2-1: SerialNumber: syz [ 469.670080][ T5912] usb 2-1: config 0 descriptor?? [ 469.893286][ T5877] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 469.943889][T11292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.954390][T11292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.039202][T11292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.049810][T11292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.083154][ T5875] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 470.104474][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.115561][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.140703][ T5877] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 470.162474][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.183749][ T5877] usb 1-1: config 0 descriptor?? [ 470.239224][ T5875] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 470.260643][ T5912] airspy 2-1:0.0: Board ID: 05 [ 470.268713][ T5912] airspy 2-1:0.0: Firmware version:  [ 470.285960][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.312077][ T5875] usb 4-1: Product: syz [ 470.316383][ T5875] usb 4-1: Manufacturer: syz [ 470.321038][ T5875] usb 4-1: SerialNumber: syz [ 470.361567][ T5875] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 470.395653][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 470.462095][T11292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.472414][T11292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.531920][ T5912] airspy 2-1:0.0: usb_control_msg() failed -71 request 11 [ 470.560634][ T5912] airspy 2-1:0.0: Registered as swradio24 [ 470.567554][ T5912] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 470.583626][ T5912] usb 2-1: USB disconnect, device number 75 [ 470.633024][ T5877] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 470.663584][ T5877] pyra 0003:1E7D:2CF6.000F: item fetching failed at offset 4/7 [ 470.672499][ T5877] pyra 0003:1E7D:2CF6.000F: parse failed [ 470.692185][ T5877] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -22 [ 470.808952][ T5912] usb 4-1: USB disconnect, device number 69 [ 470.864665][ T5877] usb 1-1: USB disconnect, device number 83 [ 471.175638][ T5874] usbhid 5-1:0.0: can't add hid device: -71 [ 471.213852][ T5874] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 471.245815][ T5874] usb 5-1: USB disconnect, device number 63 [ 471.442994][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 471.472777][ T10] ath9k_htc: Failed to initialize the device [ 471.547424][ T5912] usb 4-1: ath9k_htc: USB layer deinitialized [ 471.642459][ T5823] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 471.839073][ T5823] usb 2-1: config 0 has no interfaces? [ 471.886276][ T5823] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 471.906203][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.947328][ T5823] usb 2-1: Product: syz [ 471.951683][ T5823] usb 2-1: Manufacturer: syz [ 471.957063][ T5823] usb 2-1: SerialNumber: syz [ 471.971237][ T5823] usb 2-1: config 0 descriptor?? [ 471.977342][T11330] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 472.096764][T11333] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 472.109258][T11333] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 472.188200][T11314] @: renamed from vlan0 (while UP) [ 472.602277][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 472.784284][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.815537][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 472.832218][ T5875] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 472.848015][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.873581][ T10] usb 4-1: config 0 descriptor?? [ 473.012321][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 473.027850][ T5875] usb 1-1: too many endpoints for config 0 interface 0 altsetting 1: 112, using maximum allowed: 30 [ 473.070022][ T5875] usb 1-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 473.132679][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 473.169792][ T5875] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 473.209685][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.272905][ T5875] usb 1-1: config 0 descriptor?? [ 473.488616][ T5875] usb 1-1: string descriptor 0 read error: -71 [ 473.532757][ T5875] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 473.550336][ T5875] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 473.571132][ T5875] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 473.580657][ T5875] usb 1-1: media controller created [ 473.642858][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.675924][ T5875] set interface failed [ 473.675998][ T5875] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 473.689357][ T5875] error writing reg: 0xff, val: 0x00 [ 473.757916][ T5875] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 473.805483][ T5875] usb 1-1: USB disconnect, device number 84 [ 474.285500][ T5823] usb 2-1: USB disconnect, device number 76 [ 474.674394][T11367] @ÿÿ: renamed from team0 (while UP) [ 474.926785][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1634'. [ 474.950993][T11368] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.960808][T11368] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.969841][T11368] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.978691][T11368] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.999576][T11368] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.008807][T11368] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.017971][T11368] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.027005][T11368] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.456756][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 475.469568][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 475.498410][ T10] usb 4-1: USB disconnect, device number 70 [ 475.666370][T11386] FAULT_INJECTION: forcing a failure. [ 475.666370][T11386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.701486][ T5875] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 475.737740][T11386] CPU: 0 UID: 0 PID: 11386 Comm: syz.4.1643 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 475.737770][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 475.737786][T11386] Call Trace: [ 475.737794][T11386] [ 475.737803][T11386] dump_stack_lvl+0x189/0x250 [ 475.737840][T11386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.737867][T11386] ? __pfx__printk+0x10/0x10 [ 475.737898][T11386] should_fail_ex+0x414/0x560 [ 475.737935][T11386] _copy_to_user+0x31/0xb0 [ 475.737964][T11386] __copy_siginfo_to_user32+0xa2/0x110 [ 475.737987][T11386] ? __pfx___copy_siginfo_to_user32+0x10/0x10 [ 475.738006][T11386] ? get_sigframe+0x596/0x7d0 [ 475.738047][T11386] ia32_setup_rt_frame+0x6b1/0xb70 [ 475.738089][T11386] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 475.738123][T11386] arch_do_signal_or_restart+0x421/0x780 [ 475.738147][T11386] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 475.738181][T11386] ? local_irq_enable_exit_to_user+0x5/0x10 [ 475.738214][T11386] syscall_exit_to_user_mode+0x8b/0x120 [ 475.738236][T11386] do_int80_emulation+0x12c/0x200 [ 475.738257][T11386] ? clear_bhb_loop+0x45/0xa0 [ 475.738278][T11386] ? clear_bhb_loop+0x45/0xa0 [ 475.738301][T11386] asm_int80_emulation+0x1a/0x20 [ 475.738320][T11386] RIP: 0023:0xf706e537 [ 475.738336][T11386] Code: 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 475.738354][T11386] RSP: 002b:00000000f505e55c EFLAGS: 00000206 ORIG_RAX: 000000000000013c [ 475.738375][T11386] RAX: 000000000000013c RBX: 0000000000000003 RCX: 0000000080000400 [ 475.738388][T11386] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000000000000000 [ 475.738399][T11386] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.738411][T11386] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 475.738423][T11386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.738452][T11386] [ 475.938411][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.072827][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 476.087278][ T5875] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 476.095416][ T5875] usb 2-1: config 0 has no interface number 0 [ 476.101535][ T5875] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 476.112513][ T5875] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 476.121585][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.162744][ T5875] usb 2-1: config 0 descriptor?? [ 476.182554][ T5875] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 476.253680][ T10] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 476.412737][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 476.420224][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 476.435743][ T10] usb 4-1: config 0 has no interface number 0 [ 476.448447][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 476.459356][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.471206][ T10] usb 4-1: Product: syz [ 476.485969][T11407] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1639'. [ 476.498309][ T10] usb 4-1: Manufacturer: syz [ 476.540302][ T10] usb 4-1: SerialNumber: syz [ 476.569003][ T10] usb 4-1: config 0 descriptor?? [ 476.588433][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 476.809234][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 476.899096][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 477.252380][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 477.260345][ T10] usb 4-1: USB disconnect, device number 71 [ 477.272186][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 477.296276][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 477.327556][ T10] quatech2 4-1:0.51: device disconnected [ 477.374477][ T5874] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 477.556920][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 477.578725][ T5874] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 477.596612][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.620525][ T5874] usb 6-1: Product: syz [ 477.628211][ T5874] usb 6-1: Manufacturer: syz [ 477.684242][ T5874] usb 6-1: SerialNumber: syz [ 477.719710][ T5874] usb 6-1: config 0 descriptor?? [ 477.930639][ T5874] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 478.055899][ T47] usb 2-1: USB disconnect, device number 77 [ 478.517421][T11426] can: request_module (can-proto-5) failed. [ 479.262197][ T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 479.546710][ T5874] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 479.721508][ T10] usb 2-1: config 0 has no interfaces? [ 479.763304][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 479.775825][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.777379][ T5874] usb 6-1: USB disconnect, device number 47 [ 479.790765][ T10] usb 2-1: Product: syz [ 479.799567][ T10] usb 2-1: Manufacturer: syz [ 479.980138][ T10] usb 2-1: SerialNumber: syz [ 480.006822][ T10] usb 2-1: config 0 descriptor?? [ 480.662285][ T5875] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 480.832603][ T5875] usb 6-1: config 0 has no interfaces? [ 480.840949][ T5875] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 480.879493][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.922560][ T5875] usb 6-1: Product: syz [ 480.926800][ T5875] usb 6-1: Manufacturer: syz [ 480.931505][ T5875] usb 6-1: SerialNumber: syz [ 480.945014][ T5875] usb 6-1: config 0 descriptor?? [ 481.034425][ T47] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 481.069306][ T47] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 481.382389][ T47] usb 1-1: new low-speed USB device number 85 using dummy_hcd [ 481.534560][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 481.551469][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.615767][ T47] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 481.647995][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.692954][ T47] usb 1-1: config 0 descriptor?? [ 482.162871][ T47] steelseries 0003:1038:1410.0011: unbalanced delimiter at end of report description [ 482.211869][ T47] steelseries 0003:1038:1410.0011: parse failed [ 482.246302][ T47] steelseries 0003:1038:1410.0011: probe with driver steelseries failed with error -22 [ 482.305406][ T5875] usb 2-1: USB disconnect, device number 78 [ 482.364672][T11461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.392740][T11461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.412347][ T47] usb 1-1: USB disconnect, device number 85 [ 482.421781][T11469] tipc: Started in network mode [ 482.442536][T11469] tipc: Node identity _, cluster identity 4711 [ 482.442601][T11469] tipc: Enabling of bearer rejected, failed to enable media [ 482.482315][ T5877] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 482.654224][ T5877] usb 5-1: config 0 has no interfaces? [ 482.665237][ T5877] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 482.678434][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.688030][ T5877] usb 5-1: Product: syz [ 482.694331][ T5877] usb 5-1: Manufacturer: syz [ 482.698966][ T5877] usb 5-1: SerialNumber: syz [ 482.707641][ T5877] usb 5-1: config 0 descriptor?? [ 482.742205][ T5875] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 482.832279][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 482.912389][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 482.922686][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 482.937829][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 482.948002][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 482.965661][ T5875] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e [ 482.976290][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.985154][ T5875] usb 4-1: Product: syz [ 483.001546][ T5875] usb 4-1: Manufacturer: syz [ 483.008811][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.024149][ T5875] usb 4-1: SerialNumber: syz [ 483.028899][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.046094][ T5875] usb 4-1: config 0 descriptor?? [ 483.059120][ T5875] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 483.072663][ T10] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 483.085226][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 483.102585][ T10] usb 2-1: SerialNumber: syz [ 483.116435][ T10] usb 2-1: config 0 descriptor?? [ 483.311045][ T5875] usb 6-1: USB disconnect, device number 48 [ 483.336916][T11468] netlink: 'syz.3.1666': attribute type 6 has an invalid length. [ 483.347342][T11474] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1668'. [ 483.429930][T11468] netlink: 'syz.3.1666': attribute type 1 has an invalid length. [ 483.458982][T11468] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1666'. [ 483.496077][ T5874] usb 4-1: USB disconnect, device number 72 [ 484.171749][T11487] @ÿÿ: renamed from team0 (while UP) [ 484.663865][ T5875] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 484.836922][ T5875] usb 4-1: config 0 has no interfaces? [ 484.849130][ T5875] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 484.859025][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.867779][ T5875] usb 4-1: Product: syz [ 484.872768][ T5875] usb 4-1: Manufacturer: syz [ 484.877458][ T5875] usb 4-1: SerialNumber: syz [ 484.886817][ T5875] usb 4-1: config 0 descriptor?? [ 485.186125][ T5877] usb 4-1: USB disconnect, device number 73 [ 485.231666][T11496] netlink: 'syz.5.1673': attribute type 3 has an invalid length. [ 485.316539][ T5875] usb 5-1: USB disconnect, device number 64 [ 485.651375][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 485.658254][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 485.677943][ T10] usb 2-1: USB disconnect, device number 79 [ 486.112397][ T10] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 486.120589][T11512] FAULT_INJECTION: forcing a failure. [ 486.120589][T11512] name failslab, interval 1, probability 0, space 0, times 0 [ 486.136155][T11512] CPU: 0 UID: 0 PID: 11512 Comm: syz.3.1680 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 486.136185][T11512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 486.136199][T11512] Call Trace: [ 486.136207][T11512] [ 486.136216][T11512] dump_stack_lvl+0x189/0x250 [ 486.136253][T11512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.136283][T11512] ? __pfx__printk+0x10/0x10 [ 486.136315][T11512] ? __pfx___might_resched+0x10/0x10 [ 486.136352][T11512] should_fail_ex+0x414/0x560 [ 486.136389][T11512] should_failslab+0xa8/0x100 [ 486.136418][T11512] kmem_cache_alloc_noprof+0x73/0x3c0 [ 486.136443][T11512] ? mas_alloc_nodes+0x2e9/0x8e0 [ 486.136469][T11512] mas_alloc_nodes+0x2e9/0x8e0 [ 486.136498][T11512] mas_preallocate+0x542/0x8b0 [ 486.136577][T11512] ? __pfx_mas_preallocate+0x10/0x10 [ 486.136621][T11512] ? __mas_set_range+0x12f/0x3c0 [ 486.136650][T11512] __split_vma+0x315/0x9b0 [ 486.136684][T11512] ? __pfx___split_vma+0x10/0x10 [ 486.136725][T11512] vms_gather_munmap_vmas+0x4ab/0x12b0 [ 486.136766][T11512] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 486.136789][T11512] ? __pfx___might_resched+0x10/0x10 [ 486.136839][T11512] do_vmi_align_munmap+0x25d/0x420 [ 486.136881][T11512] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 486.136926][T11512] ? mas_find+0x962/0xc10 [ 486.136951][T11512] do_vmi_munmap+0x253/0x2e0 [ 486.136979][T11512] move_vma+0x113b/0x1850 [ 486.137021][T11512] ? __pfx_move_vma+0x10/0x10 [ 486.137050][T11512] ? shmem_get_unmapped_area+0x2cd/0x910 [ 486.137083][T11512] ? security_mmap_addr+0x71/0x270 [ 486.137114][T11512] ? __get_unmapped_area+0x3e4/0x450 [ 486.137146][T11512] ? vrm_set_new_addr+0x1a7/0x1f0 [ 486.137170][T11512] mremap_to+0x7e7/0x8b0 [ 486.137212][T11512] ? __pfx_mremap_to+0x10/0x10 [ 486.137238][T11512] ? __pfx_down_write_killable+0x10/0x10 [ 486.137274][T11512] __se_sys_mremap+0x8ac/0xc00 [ 486.137313][T11512] ? __pfx___se_sys_mremap+0x10/0x10 [ 486.137331][T11512] ? ksys_write+0x1f0/0x250 [ 486.137362][T11512] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 486.137386][T11512] ? __ia32_sys_mremap+0x20/0xc0 [ 486.137409][T11512] __do_fast_syscall_32+0xb4/0x110 [ 486.137432][T11512] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.137456][T11512] do_fast_syscall_32+0x34/0x80 [ 486.137478][T11512] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 486.137502][T11512] RIP: 0023:0xf7f04539 [ 486.137528][T11512] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 486.137546][T11512] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 486.137585][T11512] RAX: ffffffffffffffda RBX: 000000008054e000 RCX: 0000000000001000 [ 486.137601][T11512] RDX: 0000000000003000 RSI: 0000000000000003 RDI: 000000008022c000 [ 486.137615][T11512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.137641][T11512] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 486.137653][T11512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.137683][T11512] [ 486.442154][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.577049][T11515] sg_write: data in/out 1824923927/14 bytes for SCSI command 0x0-- guessing data in; [ 486.577049][T11515] program syz.0.1682 not setting count and/or reply_len properly [ 486.604496][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 486.613655][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.624320][ T10] usb 2-1: config 0 descriptor?? [ 486.635380][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 486.769644][T11519] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1683'. [ 486.867856][T11506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.914149][T11506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.941504][ T10] gspca_sn9c20x: Write register 1000 failed -71 [ 486.959676][ T10] gspca_sn9c20x: Device initialization failed [ 486.981403][ T10] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 487.009397][ T10] usb 2-1: USB disconnect, device number 80 [ 487.292137][ T1214] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 487.456744][ T1214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.470509][ T1214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.483205][ T1214] usb 1-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 487.495967][ T1214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.508202][ T1214] usb 1-1: config 0 descriptor?? [ 487.549568][T11536] FAULT_INJECTION: forcing a failure. [ 487.549568][T11536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.563129][T11536] CPU: 1 UID: 0 PID: 11536 Comm: syz.1.1688 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 487.563157][T11536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 487.563171][T11536] Call Trace: [ 487.563179][T11536] [ 487.563188][T11536] dump_stack_lvl+0x189/0x250 [ 487.563219][T11536] ? __lock_acquire+0xaac/0xd20 [ 487.563248][T11536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.563276][T11536] ? __pfx__printk+0x10/0x10 [ 487.563297][T11536] ? __might_fault+0xb0/0x130 [ 487.563333][T11536] should_fail_ex+0x414/0x560 [ 487.563388][T11536] _copy_from_iter+0x1db/0x15a0 [ 487.563444][T11536] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 487.563467][T11536] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 487.563494][T11536] ? __pfx__copy_from_iter+0x10/0x10 [ 487.563521][T11536] ? __build_skb_around+0x257/0x3e0 [ 487.563546][T11536] ? netlink_sendmsg+0x642/0xb30 [ 487.563565][T11536] ? skb_put+0x11b/0x210 [ 487.563590][T11536] netlink_sendmsg+0x6b2/0xb30 [ 487.563619][T11536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.563642][T11536] ? __import_iovec+0x5d4/0x7f0 [ 487.563667][T11536] ? aa_sock_msg_perm+0x94/0x160 [ 487.563691][T11536] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.563714][T11536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.563735][T11536] __sock_sendmsg+0x219/0x270 [ 487.563767][T11536] ____sys_sendmsg+0x505/0x830 [ 487.563796][T11536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.563837][T11536] ___sys_sendmsg+0x21f/0x2a0 [ 487.563862][T11536] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.563923][T11536] ? __fget_files+0x2a/0x420 [ 487.563948][T11536] ? __fget_files+0x3a0/0x420 [ 487.563984][T11536] __sys_sendmsg+0x164/0x220 [ 487.564010][T11536] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.564049][T11536] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 487.564072][T11536] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.564094][T11536] __do_fast_syscall_32+0xb4/0x110 [ 487.564117][T11536] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.564141][T11536] do_fast_syscall_32+0x34/0x80 [ 487.564164][T11536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 487.564189][T11536] RIP: 0023:0xf7fc4539 [ 487.564207][T11536] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 487.564224][T11536] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 487.564245][T11536] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 487.564259][T11536] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 487.564271][T11536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 487.564284][T11536] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 487.564296][T11536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 487.564326][T11536] [ 488.070437][ T1214] hid-generic 0003:05AC:4262.0012: unknown main item tag 0x0 [ 488.085360][ T1214] hid-generic 0003:05AC:4262.0012: unknown main item tag 0x0 [ 488.118449][ T1214] hid-generic 0003:05AC:4262.0012: collection stack underflow [ 488.147631][ T1214] hid-generic 0003:05AC:4262.0012: item 0 0 0 12 parsing failed [ 488.173550][ T1214] hid-generic 0003:05AC:4262.0012: probe with driver hid-generic failed with error -22 [ 488.247308][ T10] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 488.419048][T11548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1687'. [ 488.428325][T11548] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1687'. [ 488.452532][T11548] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1687'. [ 488.461932][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 488.478846][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.495847][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.510472][T11548] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 488.526437][ T10] usb 5-1: New USB device found, idVendor=1477, idProduct=100e, bcdDevice= 0.00 [ 488.535988][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.548191][ T10] usb 5-1: config 0 descriptor?? [ 488.758514][T11542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.767653][T11542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.812198][ T5823] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 488.974055][ T5823] usb 6-1: Using ep0 maxpacket: 8 [ 488.986588][ T5823] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 489.002255][ T5823] usb 6-1: config 0 has no interface number 0 [ 489.011269][ T5823] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 489.020656][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.030794][ T5823] usb 6-1: Product: syz [ 489.046758][ T5823] usb 6-1: Manufacturer: syz [ 489.051522][ T5823] usb 6-1: SerialNumber: syz [ 489.059819][T11542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.081556][ T5823] usb 6-1: config 0 descriptor?? [ 489.129148][T11556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.129483][T11542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.176518][T11556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.232835][ T1214] usb 1-1: USB disconnect, device number 86 [ 489.286383][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 489.295423][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 489.331953][ T10] usb 5-1: USB disconnect, device number 65 [ 489.500825][T11571] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1698'. [ 489.511636][T11571] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1698'. [ 489.530845][T11571] netlink: 'syz.1.1698': attribute type 5 has an invalid length. [ 489.544044][T11571] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1698'. [ 489.681141][T11576] fuse: Unknown parameter 'rooTode' [ 489.686781][ T1214] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 489.857416][ T1214] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 489.870252][ T1214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.893192][ T1214] usb 1-1: config 0 descriptor?? [ 489.908804][ T1214] gspca_main: spca508-2.14.0 probing 8086:0110 [ 490.624142][ T1214] gspca_spca508: reg_read err -110 [ 490.637850][ T1214] gspca_spca508: reg_read err -32 [ 490.651941][ T1214] gspca_spca508: reg_read err -32 [ 490.669005][ T1214] gspca_spca508: reg_read err -32 [ 490.680309][ T1214] gspca_spca508: reg write: error -32 [ 490.693312][ T1214] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 490.863829][ T5874] usb 1-1: USB disconnect, device number 87 [ 490.982081][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 490.982103][ T30] audit: type=1326 audit(1745709517.515:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.4.1707" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x0 [ 491.051536][T11601] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 491.063810][T11601] bond0: (slave lo): Error: Device can not be enslaved while up [ 491.673359][ T5874] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 491.717541][T11613] FAULT_INJECTION: forcing a failure. [ 491.717541][T11613] name failslab, interval 1, probability 0, space 0, times 0 [ 491.758142][T11613] CPU: 0 UID: 0 PID: 11613 Comm: syz.3.1711 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 491.758174][T11613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 491.758187][T11613] Call Trace: [ 491.758195][T11613] [ 491.758205][T11613] dump_stack_lvl+0x189/0x250 [ 491.758240][T11613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.758268][T11613] ? __pfx__printk+0x10/0x10 [ 491.758289][T11613] ? __pfx___might_resched+0x10/0x10 [ 491.758320][T11613] ? fs_reclaim_acquire+0x7d/0x100 [ 491.758353][T11613] should_fail_ex+0x414/0x560 [ 491.758388][T11613] should_failslab+0xa8/0x100 [ 491.758416][T11613] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 491.758441][T11613] ? __alloc_skb+0x112/0x2d0 [ 491.758459][T11613] ? __page_table_check_zero+0xba/0x510 [ 491.758488][T11613] __alloc_skb+0x112/0x2d0 [ 491.758512][T11613] alloc_skb_with_frags+0xca/0x890 [ 491.758537][T11613] ? get_page_from_freelist+0x21ce/0x22b0 [ 491.758576][T11613] sock_alloc_send_pskb+0x857/0x990 [ 491.758621][T11613] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 491.758645][T11613] ? cgroup_rstat_updated+0x144/0xb50 [ 491.758678][T11613] ? cgroup_rstat_updated+0x144/0xb50 [ 491.758717][T11613] tun_get_user+0x9c9/0x3c20 [ 491.758763][T11613] ? aa_file_perm+0x11f/0xed0 [ 491.758786][T11613] ? __pfx_tun_get_user+0x10/0x10 [ 491.758811][T11613] ? aa_file_perm+0x11f/0xed0 [ 491.758833][T11613] ? aa_file_perm+0x3e7/0xed0 [ 491.758868][T11613] ? ref_tracker_alloc+0x318/0x460 [ 491.758891][T11613] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 491.758918][T11613] ? tun_get+0x1c/0x2f0 [ 491.758950][T11613] ? tun_get+0x1c/0x2f0 [ 491.758975][T11613] ? tun_get+0x1c/0x2f0 [ 491.759005][T11613] tun_chr_write_iter+0x113/0x200 [ 491.759035][T11613] vfs_write+0x548/0xa90 [ 491.759070][T11613] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 491.759097][T11613] ? __pfx_vfs_write+0x10/0x10 [ 491.759129][T11613] ? __fget_files+0x2a/0x420 [ 491.759163][T11613] ksys_write+0x145/0x250 [ 491.759188][T11613] ? __pfx_ksys_write+0x10/0x10 [ 491.759212][T11613] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 491.759235][T11613] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.759258][T11613] __do_fast_syscall_32+0xb4/0x110 [ 491.759280][T11613] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.759304][T11613] do_fast_syscall_32+0x34/0x80 [ 491.759326][T11613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 491.759351][T11613] RIP: 0023:0xf7f04539 [ 491.759368][T11613] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 491.759387][T11613] RSP: 002b:00000000f5026520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 491.759408][T11613] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000000 [ 491.759423][T11613] RDX: 000000000000fdef RSI: 00000000f7392ff4 RDI: 0000000000000000 [ 491.759436][T11613] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.759448][T11613] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 491.759461][T11613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.759490][T11613] [ 492.219907][ T5823] usb 6-1: USB disconnect, device number 49 [ 492.292227][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 492.366059][ T5874] usb 1-1: unable to get BOS descriptor or descriptor too short [ 492.381782][ T5874] usb 1-1: config 8 has an invalid interface number: 64 but max is 0 [ 492.400391][ T5874] usb 1-1: config 8 has an invalid descriptor of length 55, skipping remainder of the config [ 492.447768][ T5874] usb 1-1: config 8 has no interface number 0 [ 492.465985][ T5874] usb 1-1: config 8 interface 64 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 492.502160][ T5874] usb 1-1: config 8 interface 64 has no altsetting 0 [ 492.519836][ T5874] usb 1-1: New USB device found, idVendor=19d2, idProduct=64c6, bcdDevice= e.34 [ 492.529801][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.538854][ T5874] usb 1-1: Product: syz [ 492.554920][ T5874] usb 1-1: Manufacturer: syz [ 492.559570][ T5874] usb 1-1: SerialNumber: syz [ 492.662723][ T1214] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 492.840777][ T1214] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 492.875147][ T1214] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 492.917237][ T1214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.927887][ T1214] usb 2-1: Product: syz [ 492.935330][ T1214] usb 2-1: Manufacturer: syz [ 492.940057][ T1214] usb 2-1: SerialNumber: syz [ 493.190112][T11644] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 493.193952][ T1214] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 493.208654][T11644] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 493.232375][ T1214] usb 2-1: USB disconnect, device number 81 [ 493.492452][ T5877] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 493.506496][T11647] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1724'. [ 493.673976][ T5877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 493.713381][ T5877] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 493.728808][ T1214] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 493.759681][ T5877] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.796664][ T5877] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 493.818766][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.838116][ T5877] usb 4-1: Product: syz [ 493.847932][ T5877] usb 4-1: Manufacturer: syz [ 493.859654][ T5877] usb 4-1: SerialNumber: syz [ 493.933094][ T1214] usb 2-1: Using ep0 maxpacket: 8 [ 493.941547][ T1214] usb 2-1: config index 0 descriptor too short (expected 301, got 59) [ 493.960112][ T1214] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 493.984171][ T1214] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 494.005519][ T1214] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 494.032433][ T1214] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 2304, setting to 1024 [ 494.057228][ T1214] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 494.081207][ T1214] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.113428][ T1214] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 494.134059][ T5877] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 494.155133][ T1214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.396493][ T1214] usb 2-1: usb_control_msg returned -32 [ 494.419300][ T1214] usbtmc 2-1:16.0: can't read capabilities [ 494.428632][ T5874] usb 1-1: bad CDC descriptors [ 494.499039][T11644] usblp0:failed reading printer status (-71) [ 494.517812][ T1214] usb 4-1: USB disconnect, device number 74 [ 494.537455][ T5874] usb 1-1: USB disconnect, device number 88 [ 494.602660][T11655] usblp0: removed [ 494.867060][ T30] audit: type=1326 audit(1745709521.415:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11663 comm="syz.0.1726" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ee539 code=0x0 [ 494.888552][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.953378][T11661] batadv_slave_0: entered promiscuous mode [ 494.959258][T11661] batadv_slave_0: entered allmulticast mode [ 494.971252][T11661] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 495.072340][ T5874] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 495.230943][ T5874] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 495.266495][ T5874] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 495.282348][ T10] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 495.303118][ T5874] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 495.362552][ T5874] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 495.384801][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.439252][ T5874] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 495.472138][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 495.484632][ T10] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 495.495191][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.564434][ T10] usb 6-1: Product: syz [ 495.589655][ T10] usb 6-1: Manufacturer: syz [ 495.613851][ T5874] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 495.643528][T11660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.659238][T11660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.674022][ T10] usb 6-1: SerialNumber: syz [ 495.692539][ T10] usb 6-1: config 0 descriptor?? [ 495.924278][T11674] input: syz0 as /devices/virtual/input/input43 [ 496.033760][ T1214] usb 2-1: USB disconnect, device number 82 [ 496.345675][ T10] peak_usb 6-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 496.522842][ T10] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 496.570677][ T10] usb 6-1: USB disconnect, device number 50 [ 497.660777][T11694] futex_wake_op: syz.0.1737 tries to shift op by 144; fix this program [ 497.846317][ T5874] usb 5-1: USB disconnect, device number 66 [ 498.513786][ T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 498.517499][ T30] audit: type=1326 audit(1745709525.065:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11707 comm="syz.5.1742" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0 [ 498.641777][T11714] netlink: 'syz.0.1743': attribute type 21 has an invalid length. [ 498.662981][T11714] netlink: 'syz.0.1743': attribute type 1 has an invalid length. [ 498.691288][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 498.706566][T11715] netlink: 'syz.0.1743': attribute type 21 has an invalid length. [ 498.715217][T11715] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1743'. [ 498.726930][ T10] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 498.742114][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.771840][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.781199][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.795470][T11716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.826312][ T10] usb 5-1: Product: 零 [ 498.841459][ T10] usb 5-1: Manufacturer: Ы [ 498.913219][T11714] usb usb7: usbfs: process 11714 (syz.0.1743) did not claim interface 0 before use [ 498.934636][ T10] usb 5-1: SerialNumber: Р [ 499.209616][ T10] usb 5-1: 0:2 : does not exist [ 499.322548][ T10] usb 5-1: USB disconnect, device number 67 [ 499.479111][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.552099][ T5874] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 499.703697][T11726] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1744'. [ 499.728207][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 499.738368][ T5874] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 499.772087][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 499.799553][ T5874] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 499.809145][ T5874] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 499.822525][ T5874] usb 2-1: Manufacturer: syz [ 499.830120][ T5874] usb 2-1: config 0 descriptor?? [ 499.851551][ T5874] smsusb:smsusb_probe: board id=9, interface number 0 [ 499.886859][ T5874] smsusb:smsusb_probe: Device initialized with return code -19 [ 500.026288][T11738] netlink: 'syz.0.1752': attribute type 23 has an invalid length. [ 500.035935][T11738] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1752'. [ 500.056603][T11735] netlink: 'syz.5.1753': attribute type 1 has an invalid length. [ 500.101392][ T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 500.124171][T11735] bond2: entered promiscuous mode [ 500.144723][T11735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 500.270945][T11741] 8021q: adding VLAN 0 to HW filter on device bond3 [ 500.308564][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 500.350964][ T10] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 500.373536][T11741] bond2: (slave bond3): making interface the new active one [ 500.398396][T11741] bond3: entered promiscuous mode [ 500.411377][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.428045][T11741] bond2: (slave bond3): Enslaving as an active interface with an up link [ 500.445133][ T10] usb 4-1: config 0 descriptor?? [ 500.689611][T11757] netlink: 'syz.0.1756': attribute type 21 has an invalid length. [ 500.697871][T11757] netlink: 'syz.0.1756': attribute type 1 has an invalid length. [ 500.710419][T11757] netlink: 'syz.0.1756': attribute type 21 has an invalid length. [ 500.718349][T11757] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1756'. [ 500.849999][T11758] usb usb7: usbfs: process 11758 (syz.0.1756) did not claim interface 0 before use [ 500.925305][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 500.948585][ T10] asix 4-1:0.0: probe with driver asix failed with error -71 [ 500.991614][ T10] usb 4-1: USB disconnect, device number 75 [ 501.462740][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.469310][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.580478][T11776] netlink: 'syz.3.1760': attribute type 21 has an invalid length. [ 501.588778][T11776] netlink: 'syz.3.1760': attribute type 1 has an invalid length. [ 501.598503][T11776] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1760'. [ 501.716493][T11776] usb usb7: usbfs: process 11776 (syz.3.1760) did not claim interface 0 before use [ 502.246502][T11783] program syz.0.1761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.359530][ T5874] usb 2-1: USB disconnect, device number 83 [ 502.803386][T11793] FAULT_INJECTION: forcing a failure. [ 502.803386][T11793] name failslab, interval 1, probability 0, space 0, times 0 [ 502.822272][ T5875] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 502.852163][T11793] CPU: 0 UID: 0 PID: 11793 Comm: syz.3.1765 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 502.852193][T11793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 502.852205][T11793] Call Trace: [ 502.852212][T11793] [ 502.852221][T11793] dump_stack_lvl+0x189/0x250 [ 502.852262][T11793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.852289][T11793] ? __pfx__printk+0x10/0x10 [ 502.852312][T11793] ? __pfx___might_resched+0x10/0x10 [ 502.852338][T11793] ? fs_reclaim_acquire+0x7d/0x100 [ 502.852371][T11793] should_fail_ex+0x414/0x560 [ 502.852406][T11793] should_failslab+0xa8/0x100 [ 502.852431][T11793] kmem_cache_alloc_noprof+0x73/0x3c0 [ 502.852453][T11793] ? getname_flags+0xb8/0x540 [ 502.852491][T11793] getname_flags+0xb8/0x540 [ 502.852518][T11793] __ia32_sys_link+0x5c/0x90 [ 502.852541][T11793] __do_fast_syscall_32+0xb4/0x110 [ 502.852561][T11793] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.852582][T11793] do_fast_syscall_32+0x34/0x80 [ 502.852602][T11793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.852623][T11793] RIP: 0023:0xf7f04539 [ 502.852638][T11793] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 502.852653][T11793] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 502.852672][T11793] RAX: ffffffffffffffda RBX: 0000000080003040 RCX: 0000000000000000 [ 502.852685][T11793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.852695][T11793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.852706][T11793] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 502.852717][T11793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.852743][T11793] [ 503.152178][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 503.159991][ T5875] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 503.170723][ T5875] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.185714][ T5875] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 503.195103][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.203270][ T5875] usb 2-1: Product: 零 [ 503.207471][ T5875] usb 2-1: Manufacturer: Ы [ 503.212046][ T5875] usb 2-1: SerialNumber: Р [ 503.314872][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1764'. [ 503.362171][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1764'. [ 503.448838][ T5875] usb 2-1: 0:2 : does not exist [ 503.527159][ T5875] usb 2-1: USB disconnect, device number 84 [ 504.334539][T11808] futex_wake_op: syz.4.1770 tries to shift op by 144; fix this program [ 505.492348][ T5874] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 505.710941][T11836] validate_nla: 1 callbacks suppressed [ 505.710970][T11836] netlink: 'syz.3.1776': attribute type 21 has an invalid length. [ 505.724744][T11836] netlink: 'syz.3.1776': attribute type 1 has an invalid length. [ 505.735420][T11836] netlink: 'syz.3.1776': attribute type 21 has an invalid length. [ 505.743343][T11836] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1776'. [ 505.864833][ T5874] usb 6-1: Using ep0 maxpacket: 32 [ 505.893608][ T5874] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 505.902255][ T5874] usb 6-1: config 0 has no interface number 0 [ 505.911960][ T5874] usb 6-1: config 0 interface 12 has no altsetting 0 [ 505.964617][T11836] usb usb7: usbfs: process 11836 (syz.3.1776) did not claim interface 0 before use [ 505.984166][ T5874] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 505.994026][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.008980][ T5874] usb 6-1: Product: syz [ 506.015724][ T5874] usb 6-1: Manufacturer: syz [ 506.024764][ T5874] usb 6-1: SerialNumber: syz [ 506.043332][ T5874] usb 6-1: config 0 descriptor?? [ 506.092206][ T5912] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 506.323601][ T5912] usb 5-1: device descriptor read/64, error -71 [ 506.572434][ T5912] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 506.722728][ T5912] usb 5-1: device descriptor read/64, error -71 [ 506.749611][T11856] ip6gretap1: entered allmulticast mode [ 506.836968][ T5912] usb usb5-port1: attempt power cycle [ 506.880528][T11861] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1784'. [ 506.897936][T11861] netlink: 'syz.1.1784': attribute type 10 has an invalid length. [ 506.906706][T11861] bridge0: port 2(team0) entered blocking state [ 506.915023][T11861] bridge0: port 2(team0) entered disabled state [ 506.921943][T11861] team0: entered allmulticast mode [ 506.932583][T11861] team0: entered promiscuous mode [ 507.117989][T11867] netlink: 'syz.3.1786': attribute type 1 has an invalid length. [ 507.192299][ T5912] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 507.208387][T11867] bond4: entered promiscuous mode [ 507.217546][T11867] 8021q: adding VLAN 0 to HW filter on device bond4 [ 507.260999][ T5912] usb 5-1: device descriptor read/8, error -71 [ 507.262221][ T1214] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 507.281246][T11871] 8021q: adding VLAN 0 to HW filter on device bond5 [ 507.309170][T11871] bond4: (slave bond5): making interface the new active one [ 507.316863][T11871] bond5: entered promiscuous mode [ 507.327736][T11871] bond4: (slave bond5): Enslaving as an active interface with an up link [ 507.422090][ T1214] usb 1-1: Using ep0 maxpacket: 8 [ 507.436510][ T1214] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 507.446648][ T1214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.457522][T11878] bridge0: port 1(syz_tun) entered disabled state [ 507.458604][ T1214] usb 1-1: config 0 descriptor?? [ 507.497737][T11878] syz_tun (unregistering): left allmulticast mode [ 507.505771][T11878] syz_tun (unregistering): left promiscuous mode [ 507.514738][T11878] bridge0: port 1(syz_tun) entered disabled state [ 507.542203][ T5912] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 507.567110][ T5912] usb 5-1: device descriptor read/8, error -71 [ 507.621393][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1790'. [ 507.630885][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1790'. [ 507.683994][ T5912] usb usb5-port1: unable to enumerate USB device [ 507.697662][ T5875] usb 1-1: USB disconnect, device number 89 [ 507.993060][ T1214] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 508.164889][ T1214] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 508.177990][ T1214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.193247][ T1214] usb 4-1: config 0 descriptor?? [ 508.202786][ T1214] cp210x 4-1:0.0: cp210x converter detected [ 508.454654][T11891] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1794'. [ 508.608741][ T1214] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 508.650336][ T1214] usb 4-1: cp210x converter now attached to ttyUSB0 [ 508.670767][ T5875] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 508.859800][ T10] usb 4-1: USB disconnect, device number 76 [ 508.867046][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 508.903352][ T5875] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 508.963634][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 508.971610][ T5874] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 508.980039][ T5874] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 508.992091][ T5875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.026854][ T5874] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 509.059638][ T10] cp210x 4-1:0.0: device disconnected [ 509.067386][ T5875] usb 1-1: config 0 has no interface number 0 [ 509.089286][ T5874] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 509.095625][ T5875] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 509.136998][ T5875] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 509.149639][ T5875] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 509.162035][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.171625][ T5875] usb 1-1: Product: syz [ 509.175949][ T5875] usb 1-1: Manufacturer: syz [ 509.180739][ T5875] usb 1-1: SerialNumber: syz [ 509.192892][ T5875] usb 1-1: config 0 descriptor?? [ 509.211797][T11889] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 509.220332][ T5874] usb 6-1: USB disconnect, device number 51 [ 509.252387][T11889] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 509.281598][ T5875] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 509.573473][ T5874] usb 1-1: USB disconnect, device number 90 [ 509.860860][T11910] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1801'. [ 510.323394][ T30] audit: type=1326 audit(1745709536.865:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11909 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000 [ 510.345491][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.382194][ T30] audit: type=1326 audit(1745709536.865:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11909 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000 [ 510.452165][ T30] audit: type=1326 audit(1745709536.865:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11909 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000 [ 510.496437][ T5875] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 510.521233][ T30] audit: type=1326 audit(1745709536.865:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11909 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000 [ 510.543440][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.564302][ T30] audit: type=1326 audit(1745709536.865:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11909 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000 [ 510.591676][ T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 510.603799][ T30] audit: type=1326 audit(1745709536.865:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11909 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000 [ 510.629744][ T30] audit: type=1326 audit(1745709536.865:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11909 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000 [ 510.658175][ T30] audit: type=1326 audit(1745709536.865:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11909 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000 [ 510.689380][ T5875] usb 4-1: device descriptor read/64, error -71 [ 510.697420][ T30] audit: type=1326 audit(1745709536.865:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11909 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000 [ 510.729014][ T30] audit: type=1326 audit(1745709536.865:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11909 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000 [ 510.782892][ T10] usb 5-1: too many configurations: 209, using maximum allowed: 8 [ 510.800920][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 510.810037][ T10] usb 5-1: can't read configurations, error -61 [ 510.822126][ T5874] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 510.942448][ T5875] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 510.962547][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 510.992712][ T5874] usb 1-1: config 252 has an invalid interface number: 251 but max is 0 [ 511.001173][ T5874] usb 1-1: config 252 has no interface number 0 [ 511.032178][ T5874] usb 1-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 511.052090][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.090584][ T5874] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 511.102639][ T5875] usb 4-1: device descriptor read/64, error -71 [ 511.149289][ T10] usb 5-1: too many configurations: 209, using maximum allowed: 8 [ 511.164318][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 511.179644][ T10] usb 5-1: can't read configurations, error -61 [ 511.186530][ T10] usb usb5-port1: attempt power cycle [ 511.222603][ T5875] usb usb4-port1: attempt power cycle [ 511.293940][T11931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.306855][T11931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.468789][T11933] Invalid logical block size (21760) [ 511.548522][ T5874] gspca_sn9c20x: Write register 1001 failed -71 [ 511.562279][ T10] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 511.572410][ T5874] gspca_sn9c20x: Device initialization failed [ 511.578599][ T5874] gspca_sn9c20x 1-1:252.251: probe with driver gspca_sn9c20x failed with error -71 [ 511.578627][ T5875] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 511.622174][ T5874] usb 1-1: USB disconnect, device number 91 [ 511.654731][ T10] usb 5-1: too many configurations: 209, using maximum allowed: 8 [ 511.669547][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 511.683106][ T10] usb 5-1: can't read configurations, error -61 [ 511.706385][ T5875] usb 4-1: device descriptor read/8, error -71 [ 511.767375][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 511.822299][ T10] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 511.857415][ T10] usb 5-1: too many configurations: 209, using maximum allowed: 8 [ 511.873577][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 511.887260][ T10] usb 5-1: can't read configurations, error -61 [ 511.902399][ T10] usb usb5-port1: unable to enumerate USB device [ 511.986936][ T5875] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 512.012868][ T5875] usb 4-1: device descriptor read/8, error -71 [ 512.143155][ T5875] usb usb4-port1: unable to enumerate USB device [ 512.422146][ T5874] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 512.572254][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 512.579585][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 512.595275][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 512.673005][ T5874] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 512.684867][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.753622][ T5874] usb 2-1: Product: syz [ 512.787332][ T5874] usb 2-1: Manufacturer: syz [ 512.827226][ T5874] usb 2-1: SerialNumber: syz [ 512.877713][ T5874] usb 2-1: config 0 descriptor?? [ 513.177837][T11946] input: syz0 as /devices/virtual/input/input44 [ 513.222972][ T5874] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 513.224908][ T5874] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 513.299174][T11951] bond2: (slave bond3): Releasing backup interface [ 513.306303][T11951] bond3: left promiscuous mode [ 513.316908][ T5874] usb 2-1: USB disconnect, device number 85 [ 513.337455][T11953] dummy0: mtu less than device minimum [ 513.392838][ T10] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 513.578970][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.597860][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 513.610996][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.639761][ T10] usb 4-1: config 0 descriptor?? [ 513.772309][ T5875] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 513.922355][ T5875] usb 6-1: device descriptor read/64, error -71 [ 513.998271][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1823'. [ 514.075971][T11969] dummy0: entered promiscuous mode [ 514.081392][T11969] vlan0: entered promiscuous mode [ 514.092657][ T5877] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 514.182505][ T5875] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 514.243060][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 514.257539][ T5877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 514.273862][ T5877] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 514.292247][ T5877] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.305085][ T5877] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 514.315163][ T5877] usb 5-1: config 1 has no interface number 1 [ 514.318451][T11977] FAULT_INJECTION: forcing a failure. [ 514.318451][T11977] name failslab, interval 1, probability 0, space 0, times 0 [ 514.321440][ T5877] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 514.339628][T11977] CPU: 1 UID: 0 PID: 11977 Comm: syz.0.1827 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 514.339655][T11977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 514.339670][T11977] Call Trace: [ 514.339679][T11977] [ 514.339689][T11977] dump_stack_lvl+0x189/0x250 [ 514.339729][T11977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.339760][T11977] ? __pfx__printk+0x10/0x10 [ 514.339783][T11977] ? __pfx___might_resched+0x10/0x10 [ 514.339816][T11977] ? fs_reclaim_acquire+0x7d/0x100 [ 514.339852][T11977] should_fail_ex+0x414/0x560 [ 514.339890][T11977] should_failslab+0xa8/0x100 [ 514.339928][T11977] __kmalloc_noprof+0xcb/0x4f0 [ 514.339953][T11977] ? tomoyo_encode+0x28b/0x550 [ 514.339982][T11977] tomoyo_encode+0x28b/0x550 [ 514.340012][T11977] tomoyo_realpath_from_path+0x58d/0x5d0 [ 514.340049][T11977] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 514.340082][T11977] tomoyo_path_number_perm+0x1e8/0x5a0 [ 514.340118][T11977] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 514.340217][T11977] ? __fget_files+0x2a/0x420 [ 514.340256][T11977] ? __fget_files+0x3a0/0x420 [ 514.340283][T11977] ? __fget_files+0x2a/0x420 [ 514.340315][T11977] security_file_ioctl_compat+0xcb/0x2d0 [ 514.340350][T11977] __ia32_compat_sys_ioctl+0x128/0x840 [ 514.340379][T11977] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 514.340403][T11977] ? __fget_files+0x3a0/0x420 [ 514.340438][T11977] ? fput+0xa0/0xd0 [ 514.340470][T11977] ? ksys_write+0x1f0/0x250 [ 514.340502][T11977] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 514.340527][T11977] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.340551][T11977] __do_fast_syscall_32+0xb4/0x110 [ 514.340575][T11977] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.340602][T11977] do_fast_syscall_32+0x34/0x80 [ 514.340626][T11977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 514.340652][T11977] RIP: 0023:0xf70ee539 [ 514.340673][T11977] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 514.340692][T11977] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 514.340717][T11977] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0445609 [ 514.340733][T11977] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.340746][T11977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.340760][T11977] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 514.340773][T11977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.340805][T11977] [ 514.340829][T11977] ERROR: Out of memory at tomoyo_realpath_from_path. [ 514.347429][ T5875] usb 6-1: device descriptor read/64, error -71 [ 514.363470][T11975] kernel profiling enabled (shift: 9) [ 514.369428][ T5877] usb 5-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1E, changing to 0xE [ 514.636198][ T5877] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 514.658008][ T5877] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.667369][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.675567][ T5877] usb 5-1: Product: syz [ 514.679789][ T5877] usb 5-1: Manufacturer: syz [ 514.684474][ T5877] usb 5-1: SerialNumber: syz [ 514.752360][ T5875] usb usb6-port1: attempt power cycle [ 515.022239][ T5874] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 515.092980][ T5875] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 515.125989][ T5875] usb 6-1: device descriptor read/8, error -71 [ 515.182091][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 515.194751][ T5874] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.210769][ T5874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 515.238055][ T5874] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 515.254359][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.265614][ T5874] usb 2-1: Product: syz [ 515.269969][ T5874] usb 2-1: Manufacturer: syz [ 515.274990][ T5874] usb 2-1: SerialNumber: syz [ 515.382436][ T5875] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 515.414558][ T5875] usb 6-1: device descriptor read/8, error -71 [ 515.497773][T11981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.508065][T11981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.519353][ T30] kauditd_printk_skb: 1291 callbacks suppressed [ 515.519398][ T30] audit: type=1326 audit(1745709542.065:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.1.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 515.548425][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.555640][ T5875] usb usb6-port1: unable to enumerate USB device [ 515.565494][ T30] audit: type=1326 audit(1745709542.065:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.1.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 516.034852][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'. [ 516.334124][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 516.340240][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 516.356537][ T10] usb 4-1: USB disconnect, device number 81 [ 516.498889][T12007] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1840'. [ 516.538858][ T5877] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 516.592495][ T5877] usb 5-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 516.652388][ T5877] usb 5-1: found format II with max.bitrate = 0, frame size=39301 [ 516.676789][ T5877] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 516.708085][ T5877] usb 5-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 516.742141][ T5877] usb 5-1: found format II with max.bitrate = 0, frame size=39301 [ 516.892437][ T5877] usb 5-1: USB disconnect, device number 76 [ 516.904407][ T5874] usb 2-1: 0:2 : does not exist [ 516.968471][ T5874] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 517.009474][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1842'. [ 517.048789][ T5874] usb 2-1: USB disconnect, device number 86 [ 517.072427][ T5912] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 517.181547][T12014] netlink: 'syz.1.1843': attribute type 1 has an invalid length. [ 517.225783][T12014] bond1: entered promiscuous mode [ 517.232430][T12014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.254475][ T5912] usb 6-1: Using ep0 maxpacket: 32 [ 517.270566][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 517.330641][ T5912] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 517.358069][ T5912] usb 6-1: config 0 has no interface number 0 [ 517.373178][T12017] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.400524][ T5912] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 517.416563][T12017] bond1: (slave bond2): making interface the new active one [ 517.432680][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.453245][ T5912] usb 6-1: Product: syz [ 517.456994][T12017] bond2: entered promiscuous mode [ 517.461162][ T5912] usb 6-1: Manufacturer: syz [ 517.468682][T12017] bond1: (slave bond2): Enslaving as an active interface with an up link [ 517.487642][ T5912] usb 6-1: SerialNumber: syz [ 517.559114][ T5912] usb 6-1: config 0 descriptor?? [ 517.594749][ T5912] smsc95xx v2.0.0 [ 517.690742][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1846'. [ 517.792254][ T5877] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 517.975541][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 517.987696][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 518.022125][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 518.029923][ T5877] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 518.051708][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.068152][ T5877] usb 5-1: config 0 descriptor?? [ 518.107933][T12025] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 518.184263][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.204308][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 518.224045][ T10] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 518.234187][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.248450][ T10] usb 2-1: config 0 descriptor?? [ 518.405376][ T5912] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 518.593474][ T5877] usbhid 5-1:0.0: can't add hid device: -71 [ 518.617728][ T5877] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 518.637881][ T5877] usb 5-1: USB disconnect, device number 77 [ 518.662627][ T10] Bluetooth: Can't get state to change to load configuration err [ 518.683661][ T10] Bluetooth: Loading sysconfig file failed [ 518.695724][ T10] ath3k 2-1:0.0: probe with driver ath3k failed with error -16 [ 518.738046][ T10] usb 2-1: USB disconnect, device number 87 [ 518.822117][ T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 519.002307][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 519.024801][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 519.039861][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 519.052166][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.060340][ T9] usb 4-1: Product: syz [ 519.065047][ T9] usb 4-1: Manufacturer: syz [ 519.069696][ T9] usb 4-1: SerialNumber: syz [ 519.083610][ T9] usb 4-1: config 0 descriptor?? [ 519.094643][ T9] gs_usb 4-1:0.0: Required endpoints not found [ 519.402058][T12010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.449708][T12010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.475478][T12055] FAULT_INJECTION: forcing a failure. [ 519.475478][T12055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.526999][T12055] CPU: 0 UID: 0 PID: 12055 Comm: syz.4.1853 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 519.527027][T12055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 519.527039][T12055] Call Trace: [ 519.527048][T12055] [ 519.527057][T12055] dump_stack_lvl+0x189/0x250 [ 519.527086][T12055] ? __lock_acquire+0xaac/0xd20 [ 519.527114][T12055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.527140][T12055] ? __pfx__printk+0x10/0x10 [ 519.527159][T12055] ? __might_fault+0xb0/0x130 [ 519.527193][T12055] should_fail_ex+0x414/0x560 [ 519.527227][T12055] _copy_from_user+0x2d/0xb0 [ 519.527252][T12055] get_compat_msghdr+0xad/0x4a0 [ 519.527278][T12055] ? __pfx_get_compat_msghdr+0x10/0x10 [ 519.527309][T12055] ___sys_sendmsg+0x193/0x2a0 [ 519.527351][T12055] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.527409][T12055] ? __fget_files+0x2a/0x420 [ 519.527433][T12055] ? __fget_files+0x3a0/0x420 [ 519.527468][T12055] __sys_sendmsg+0x164/0x220 [ 519.527494][T12055] ? __pfx___sys_sendmsg+0x10/0x10 [ 519.527531][T12055] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 519.527553][T12055] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.527575][T12055] __do_fast_syscall_32+0xb4/0x110 [ 519.527597][T12055] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.527621][T12055] do_fast_syscall_32+0x34/0x80 [ 519.527643][T12055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 519.527666][T12055] RIP: 0023:0xf706e539 [ 519.527682][T12055] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 519.527699][T12055] RSP: 002b:00000000f505e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 519.527720][T12055] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800006c0 [ 519.527740][T12055] RDX: 0000000000000044 RSI: 0000000000000000 RDI: 0000000000000000 [ 519.527753][T12055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 519.527765][T12055] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 519.527778][T12055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 519.527805][T12055] [ 519.740605][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.152317][ T9] usb 4-1: USB disconnect, device number 82 [ 520.387522][T12075] netlink: 'syz.1.1859': attribute type 21 has an invalid length. [ 520.431354][T12075] netlink: 'syz.1.1859': attribute type 1 has an invalid length. [ 520.466237][T12076] netlink: 'syz.1.1859': attribute type 21 has an invalid length. [ 520.474438][T12076] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1859'. [ 520.603732][ T47] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 520.688491][ T5912] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 520.711854][ T5912] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 520.784741][ T47] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 520.824366][ T47] usb 5-1: config 5 has no interface number 0 [ 520.852161][ T47] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 520.891894][ T5912] usb 6-1: USB disconnect, device number 56 [ 520.919170][T12081] netlink: 'syz.3.1862': attribute type 10 has an invalid length. [ 520.939545][ T47] usb 5-1: config 5 interface 123 has no altsetting 0 [ 520.962148][T12081] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1862'. [ 520.980957][ T47] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 521.044543][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.065734][ T47] usb 5-1: Product: syz [ 521.069951][ T47] usb 5-1: Manufacturer: syz [ 521.078991][ T47] usb 5-1: SerialNumber: syz [ 521.442374][ T5912] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 521.611841][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 521.634046][ T5912] usb 1-1: config index 0 descriptor too short (expected 1042, got 18) [ 521.662259][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.686256][ T5912] usb 1-1: config 0 has no interfaces? [ 521.714369][ T5912] usb 1-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c [ 521.742211][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.756400][ T5912] usb 1-1: Product: syz [ 521.760713][ T5912] usb 1-1: Manufacturer: syz [ 521.777004][ T5912] usb 1-1: SerialNumber: syz [ 521.819853][ T5912] usb 1-1: config 0 descriptor?? [ 521.892989][ T47] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 521.948422][ T47] usb 5-1: USB disconnect, device number 78 [ 522.093166][ T5823] usb 1-1: USB disconnect, device number 92 [ 522.224328][T12091] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 522.322169][ T47] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 522.480301][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.519225][ T47] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 522.625608][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.702776][ T47] usb 5-1: config 0 descriptor?? [ 522.861945][ T30] audit: type=1326 audit(1745709549.405:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 522.926716][ T30] audit: type=1326 audit(1745709549.435:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 522.932321][T12115] IPVS: length: 123 != 8 [ 523.031398][ T30] audit: type=1326 audit(1745709549.435:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 523.166936][ T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 523.246941][ T30] audit: type=1326 audit(1745709549.435:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 523.339899][ T30] audit: type=1326 audit(1745709549.435:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 523.362006][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.390045][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1874'. [ 523.399379][T12121] bridge_slave_0: default FDB implementation only supports local addresses [ 523.412407][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 523.423286][ T30] audit: type=1326 audit(1745709549.445:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 523.445373][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.458881][ T30] audit: type=1326 audit(1745709549.445:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 523.492743][ T9] usb 4-1: config index 0 descriptor too short (expected 27684, got 36) [ 523.506193][ T9] usb 4-1: config 103 has too many interfaces: 97, using maximum allowed: 32 [ 523.516888][ T9] usb 4-1: config 103 has an invalid descriptor of length 32, skipping remainder of the config [ 523.534236][ T9] usb 4-1: config 103 has 0 interfaces, different from the descriptor's value: 97 [ 523.546814][ T30] audit: type=1326 audit(1745709549.445:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 523.575017][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 523.586125][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.602597][ T30] audit: type=1326 audit(1745709549.455:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 523.624631][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.640734][ T30] audit: type=1326 audit(1745709549.455:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 523.662829][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.790735][T12125] netlink: 'syz.0.1875': attribute type 1 has an invalid length. [ 523.931446][T12125] bond3: entered promiscuous mode [ 523.962930][T12125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.096270][T12127] 8021q: adding VLAN 0 to HW filter on device bond4 [ 524.245967][T12127] bond3: (slave bond4): making interface the new active one [ 524.256000][T12127] bond4: entered promiscuous mode [ 524.368237][T12127] bond3: (slave bond4): Enslaving as an active interface with an up link [ 524.837625][T12143] netlink: 'syz.0.1877': attribute type 21 has an invalid length. [ 524.846060][T12143] netlink: 'syz.0.1877': attribute type 1 has an invalid length. [ 524.856450][T12143] netlink: 'syz.0.1877': attribute type 21 has an invalid length. [ 524.864753][T12143] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1877'. [ 525.182424][T12143] usb usb7: usbfs: process 12143 (syz.0.1877) did not claim interface 0 before use [ 525.253628][ T9] usb 4-1: string descriptor 0 read error: -71 [ 525.268292][ T9] usb 4-1: USB disconnect, device number 83 [ 525.352872][ T47] usbhid 5-1:0.0: can't add hid device: -71 [ 525.358934][ T47] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 525.378464][ T47] usb 5-1: USB disconnect, device number 79 [ 526.589320][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'. [ 526.816455][T12173] netlink: 'syz.3.1890': attribute type 10 has an invalid length. [ 526.845342][T12173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1890'. [ 526.892314][T12173] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 526.963870][T12171] netlink: 'syz.1.1889': attribute type 1 has an invalid length. [ 527.047801][T12171] bond3: entered promiscuous mode [ 527.064389][T12171] 8021q: adding VLAN 0 to HW filter on device bond3 [ 527.230369][T12174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 527.253854][T12174] bond3: (slave bond4): making interface the new active one [ 527.261462][T12174] bond4: entered promiscuous mode [ 527.277436][T12174] bond3: (slave bond4): Enslaving as an active interface with an up link [ 527.422154][ T5912] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 527.587784][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.606387][ T5912] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 527.617570][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.625730][ T47] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 527.656063][ T5912] usb 1-1: config 0 descriptor?? [ 527.676465][ T5912] pwc: Askey VC010 type 2 USB webcam detected. [ 527.776592][T12201] fuse: Bad value for 'fd' [ 527.792074][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 527.800789][ T47] usb 6-1: config index 0 descriptor too short (expected 27684, got 36) [ 527.809705][ T47] usb 6-1: config 103 has too many interfaces: 97, using maximum allowed: 32 [ 527.822109][ T47] usb 6-1: config 103 has an invalid descriptor of length 32, skipping remainder of the config [ 527.840579][ T47] usb 6-1: config 103 has 0 interfaces, different from the descriptor's value: 97 [ 527.867586][ T5912] pwc: send_video_command error -71 [ 527.877594][ T5912] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 527.885654][ T47] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 527.895194][ T5912] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 527.912124][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.932140][ T5912] usb 1-1: USB disconnect, device number 93 [ 528.072830][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 528.255512][ T9] usb 4-1: config index 0 descriptor too short (expected 64800, got 72) [ 528.281306][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 528.313004][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.408012][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 528.408034][ T30] audit: type=1326 audit(1745709554.895:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12209 comm="syz.4.1905" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e539 code=0x0 [ 528.438114][ T9] usb 4-1: Product: syz [ 528.442276][ T5912] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 528.523916][ T9] usb 4-1: Manufacturer: syz [ 528.558113][ T9] usb 4-1: SerialNumber: syz [ 528.584073][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 528.602371][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 528.634852][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.702069][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 529.723409][ T5912] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 529.750049][ T10] ath9k_htc: Failed to initialize the device [ 529.858041][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.904360][ T5912] usb 1-1: config 0 descriptor?? [ 529.938015][ T47] usb 6-1: string descriptor 0 read error: -71 [ 529.951808][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 529.998792][T12205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.014850][T12205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.033640][ T5912] pwc: Askey VC010 type 2 USB webcam detected. [ 530.050304][ T47] usb 6-1: USB disconnect, device number 57 [ 530.243741][ T5912] pwc: send_video_command error -71 [ 530.259506][ T5912] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 530.289032][ T5912] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 530.339841][ T5912] usb 1-1: USB disconnect, device number 94 [ 531.218842][ T5912] usb 4-1: USB disconnect, device number 84 [ 531.301354][T12251] FAULT_INJECTION: forcing a failure. [ 531.301354][T12251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.383300][T12254] FAULT_INJECTION: forcing a failure. [ 531.383300][T12254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.427894][T12254] CPU: 1 UID: 0 PID: 12254 Comm: syz.3.1916 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 531.427924][T12254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 531.427937][T12254] Call Trace: [ 531.427945][T12254] [ 531.427953][T12254] dump_stack_lvl+0x189/0x250 [ 531.427990][T12254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.428019][T12254] ? __pfx__printk+0x10/0x10 [ 531.428051][T12254] should_fail_ex+0x414/0x560 [ 531.428087][T12254] _copy_to_user+0x31/0xb0 [ 531.428116][T12254] fb_cmap_to_user+0x24e/0x4d0 [ 531.428145][T12254] fb_compat_ioctl+0x6ac/0x780 [ 531.428180][T12254] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 531.428226][T12254] ? __fget_files+0x2a/0x420 [ 531.428256][T12254] ? __fget_files+0x3a0/0x420 [ 531.428279][T12254] ? __fget_files+0x2a/0x420 [ 531.428307][T12254] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 531.428337][T12254] __ia32_compat_sys_ioctl+0x551/0x840 [ 531.428361][T12254] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 531.428383][T12254] ? __fget_files+0x3a0/0x420 [ 531.428422][T12254] ? fput+0xa0/0xd0 [ 531.428450][T12254] ? ksys_write+0x1f0/0x250 [ 531.428479][T12254] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 531.428503][T12254] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.428524][T12254] __do_fast_syscall_32+0xb4/0x110 [ 531.428547][T12254] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.428570][T12254] do_fast_syscall_32+0x34/0x80 [ 531.428592][T12254] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 531.428616][T12254] RIP: 0023:0xf7f04539 [ 531.428633][T12254] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 531.428650][T12254] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 531.428671][T12254] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004604 [ 531.428684][T12254] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.428697][T12254] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 531.428709][T12254] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 531.428721][T12254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 531.428749][T12254] [ 531.662056][T12251] CPU: 0 UID: 0 PID: 12251 Comm: syz.5.1913 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 531.662084][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 531.662097][T12251] Call Trace: [ 531.662105][T12251] [ 531.662113][T12251] dump_stack_lvl+0x189/0x250 [ 531.662148][T12251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.662175][T12251] ? __pfx__printk+0x10/0x10 [ 531.662205][T12251] should_fail_ex+0x414/0x560 [ 531.662239][T12251] _copy_to_user+0x31/0xb0 [ 531.662265][T12251] simple_read_from_buffer+0xe1/0x170 [ 531.662294][T12251] proc_fail_nth_read+0x1df/0x250 [ 531.662323][T12251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.662351][T12251] ? rw_verify_area+0x258/0x650 [ 531.662385][T12251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.662412][T12251] vfs_read+0x1fd/0x980 [ 531.662437][T12251] ? __pfx___mutex_lock+0x10/0x10 [ 531.662457][T12251] ? __pfx_vfs_read+0x10/0x10 [ 531.662478][T12251] ? __fget_files+0x2a/0x420 [ 531.662506][T12251] ? __fget_files+0x3a0/0x420 [ 531.662528][T12251] ? __fget_files+0x2a/0x420 [ 531.662559][T12251] ksys_read+0x145/0x250 [ 531.662581][T12251] ? __pfx_ksys_read+0x10/0x10 [ 531.662604][T12251] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 531.662624][T12251] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.662645][T12251] __do_fast_syscall_32+0xb4/0x110 [ 531.662665][T12251] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.662687][T12251] do_fast_syscall_32+0x34/0x80 [ 531.662707][T12251] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 531.662730][T12251] RIP: 0023:0xf710e539 [ 531.662746][T12251] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 531.662761][T12251] RSP: 002b:00000000f50dd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 531.662781][T12251] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f50dd620 [ 531.662794][T12251] RDX: 000000000000000f RSI: 00000000f7472ff4 RDI: 0000000000000000 [ 531.662806][T12251] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 531.662817][T12251] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 531.662828][T12251] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 531.662855][T12251] [ 531.915394][T12256] netlink: 'syz.4.1917': attribute type 1 has an invalid length. [ 531.982882][T12256] bond1: entered promiscuous mode [ 532.034161][T12256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 532.180017][T12261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 532.193565][T12261] bond1: (slave bond2): making interface the new active one [ 532.201294][T12261] bond2: entered promiscuous mode [ 532.208606][T12261] bond1: (slave bond2): Enslaving as an active interface with an up link [ 532.224663][T12268] netlink: 'syz.1.1919': attribute type 21 has an invalid length. [ 532.287072][T12269] netlink: 'syz.1.1919': attribute type 21 has an invalid length. [ 532.295065][T12269] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1919'. [ 532.398644][T12268] netlink: 'syz.1.1919': attribute type 1 has an invalid length. [ 532.553134][T12268] usb usb7: usbfs: process 12268 (syz.1.1919) did not claim interface 0 before use [ 533.240001][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1924'. [ 533.505131][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 533.547069][T12293] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1926'. [ 533.872120][ T9] usb 5-1: device descriptor read/64, error -71 [ 534.122176][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 534.273089][ T9] usb 5-1: device descriptor read/64, error -71 [ 534.382509][ T9] usb usb5-port1: attempt power cycle [ 534.650294][T12316] usb usb8: usbfs: process 12316 (syz.0.1932) did not claim interface 0 before use [ 534.762123][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 534.793005][ T9] usb 5-1: device descriptor read/8, error -71 [ 535.003102][ T47] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 535.045683][ T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 535.082786][ T9] usb 5-1: device descriptor read/8, error -71 [ 535.142540][ T47] usb 6-1: device descriptor read/64, error -71 [ 535.202567][ T9] usb usb5-port1: unable to enumerate USB device [ 535.393264][ T47] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 535.487061][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1937'. [ 535.572156][ T47] usb 6-1: device descriptor read/64, error -71 [ 535.697729][ T47] usb usb6-port1: attempt power cycle [ 535.845451][T12339] netlink: 'syz.0.1938': attribute type 21 has an invalid length. [ 535.853741][T12339] netlink: 'syz.0.1938': attribute type 1 has an invalid length. [ 535.906333][T12342] netlink: 'syz.0.1938': attribute type 21 has an invalid length. [ 535.914805][T12342] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1938'. [ 536.028921][T12342] usb usb7: usbfs: process 12342 (syz.0.1938) did not claim interface 0 before use [ 536.042296][ T47] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 536.084918][ T47] usb 6-1: device descriptor read/8, error -71 [ 536.336535][ T47] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 536.373120][ T47] usb 6-1: device descriptor read/8, error -71 [ 536.518246][ T47] usb usb6-port1: unable to enumerate USB device [ 536.890577][T12356] FAULT_INJECTION: forcing a failure. [ 536.890577][T12356] name failslab, interval 1, probability 0, space 0, times 0 [ 536.921112][T12356] CPU: 0 UID: 0 PID: 12356 Comm: syz.4.1944 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 536.921140][T12356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 536.921152][T12356] Call Trace: [ 536.921159][T12356] [ 536.921167][T12356] dump_stack_lvl+0x189/0x250 [ 536.921196][T12356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.921218][T12356] ? __pfx__printk+0x10/0x10 [ 536.921237][T12356] ? __pfx___might_resched+0x10/0x10 [ 536.921260][T12356] ? fs_reclaim_acquire+0x7d/0x100 [ 536.921291][T12356] should_fail_ex+0x414/0x560 [ 536.921318][T12356] should_failslab+0xa8/0x100 [ 536.921339][T12356] __kmalloc_cache_noprof+0x70/0x3d0 [ 536.921358][T12356] ? nfnetlink_rcv+0xf0f/0x2530 [ 536.921391][T12356] nfnetlink_rcv+0xf0f/0x2530 [ 536.921430][T12356] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 536.921481][T12356] ? skb_clone+0x246/0x3a0 [ 536.921509][T12356] ? netlink_deliver_tap+0x2e/0x1b0 [ 536.921531][T12356] ? netlink_deliver_tap+0x2e/0x1b0 [ 536.921557][T12356] netlink_unicast+0x758/0x8d0 [ 536.921585][T12356] netlink_sendmsg+0x805/0xb30 [ 536.921605][T12356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.921621][T12356] ? __import_iovec+0x5d4/0x7f0 [ 536.921638][T12356] ? aa_sock_msg_perm+0x94/0x160 [ 536.921654][T12356] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 536.921670][T12356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.921684][T12356] __sock_sendmsg+0x219/0x270 [ 536.921707][T12356] ____sys_sendmsg+0x505/0x830 [ 536.921728][T12356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.921756][T12356] ___sys_sendmsg+0x21f/0x2a0 [ 536.921774][T12356] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.921816][T12356] ? __fget_files+0x2a/0x420 [ 536.921834][T12356] ? __fget_files+0x3a0/0x420 [ 536.921859][T12356] __sys_sendmsg+0x164/0x220 [ 536.921882][T12356] ? __pfx___sys_sendmsg+0x10/0x10 [ 536.921908][T12356] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 536.921924][T12356] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.921940][T12356] __do_fast_syscall_32+0xb4/0x110 [ 536.921956][T12356] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.921980][T12356] do_fast_syscall_32+0x34/0x80 [ 536.922001][T12356] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.922025][T12356] RIP: 0023:0xf706e539 [ 536.922042][T12356] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 536.922059][T12356] RSP: 002b:00000000f505e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 536.922079][T12356] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 536.922091][T12356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.922102][T12356] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.922114][T12356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 536.922125][T12356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.922155][T12356] [ 537.205628][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.573577][T12359] vivid-000: ================= START STATUS ================= [ 537.581363][T12359] vivid-000: Generate PTS: true [ 537.606485][T12359] vivid-000: Generate SCR: true [ 537.611474][T12359] tpg source WxH: 720x576 (Y'CbCr) [ 537.617903][T12359] tpg field: 4 [ 537.622325][T12359] tpg crop: (0,8)/16x16 [ 537.713180][T12359] tpg compose: (0,0)/16x16 [ 537.727754][T12359] tpg colorspace: 1 [ 537.731615][T12359] tpg transfer function: 0/1 [ 537.788755][T12359] tpg Y'CbCr encoding: 0/2 [ 537.793484][T12359] tpg quantization: 0/2 [ 537.797738][T12359] tpg RGB range: 0/1 [ 537.801718][T12359] vivid-000: ================== END STATUS ================== [ 538.502132][ T5912] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 538.514131][ T5877] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 538.572766][ T5874] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 538.652198][ T5877] usb 1-1: device descriptor read/64, error -71 [ 538.653147][ T5912] usb 6-1: Using ep0 maxpacket: 8 [ 538.684074][ T5912] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.699818][ T5912] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 538.709814][ T5912] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 538.723547][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 538.733088][ T5874] usb 5-1: config index 0 descriptor too short (expected 27684, got 36) [ 538.743568][ T5912] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 538.754971][ T5874] usb 5-1: config 103 has too many interfaces: 97, using maximum allowed: 32 [ 538.764537][ T5912] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 538.774239][ T5874] usb 5-1: config 103 has an invalid descriptor of length 32, skipping remainder of the config [ 538.785305][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.794002][ T5874] usb 5-1: config 103 has 0 interfaces, different from the descriptor's value: 97 [ 538.807152][ T5874] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 538.823995][ T5912] hub 6-1:1.0: bad descriptor, ignoring hub [ 538.839030][ T5912] hub 6-1:1.0: probe with driver hub failed with error -5 [ 538.846731][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.858738][ T5912] cdc_wdm 6-1:1.0: skipping garbage [ 538.878893][ T5912] cdc_wdm 6-1:1.0: skipping garbage [ 538.892213][ T5877] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 538.917621][ T5912] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 538.932273][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 538.950707][ T5912] cdc_wdm 6-1:1.0: Unknown control protocol [ 539.052320][ T5877] usb 1-1: device descriptor read/64, error -71 [ 539.062199][ T9] usb 2-1: device descriptor read/64, error -71 [ 539.109116][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1949'. [ 539.162810][ T5877] usb usb1-port1: attempt power cycle [ 539.302152][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 539.310300][T12383] netlink: 'syz.5.1949': attribute type 64 has an invalid length. [ 539.409402][T12383] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1949'. [ 539.466179][T12371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.481330][T12371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.522242][ T9] usb 2-1: device descriptor read/64, error -71 [ 539.604544][ T5877] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 539.632709][ T9] usb usb2-port1: attempt power cycle [ 539.645582][ T5877] usb 1-1: device descriptor read/8, error -71 [ 539.733910][ T10] usb 6-1: USB disconnect, device number 62 [ 539.932124][ T5877] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 539.973053][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 539.981551][ T5877] usb 1-1: device descriptor read/8, error -71 [ 540.013211][ T9] usb 2-1: device descriptor read/8, error -71 [ 540.108219][ T5877] usb usb1-port1: unable to enumerate USB device [ 540.221129][T12392] FAULT_INJECTION: forcing a failure. [ 540.221129][T12392] name failslab, interval 1, probability 0, space 0, times 0 [ 540.234795][T12392] CPU: 1 UID: 0 PID: 12392 Comm: syz.3.1955 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 540.234827][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 540.234839][T12392] Call Trace: [ 540.234848][T12392] [ 540.234858][T12392] dump_stack_lvl+0x189/0x250 [ 540.234892][T12392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.234920][T12392] ? __pfx__printk+0x10/0x10 [ 540.234939][T12392] ? rhashtable_lookup+0x667/0x6b0 [ 540.234962][T12392] ? __pfx_xfrm_pol_bin_cmp+0x10/0x10 [ 540.234982][T12392] ? __pfx_rhashtable_lookup+0x10/0x10 [ 540.235004][T12392] should_fail_ex+0x414/0x560 [ 540.235040][T12392] should_failslab+0xa8/0x100 [ 540.235068][T12392] __kmalloc_cache_noprof+0x70/0x3d0 [ 540.235092][T12392] ? xfrm_policy_inexact_alloc_bin+0x3a5/0x15b0 [ 540.235112][T12392] ? xfrm_policy_inexact_alloc_bin+0x1a5/0x15b0 [ 540.235133][T12392] ? xfrm_policy_inexact_alloc_bin+0x1a5/0x15b0 [ 540.235153][T12392] xfrm_policy_inexact_alloc_bin+0x3a5/0x15b0 [ 540.235182][T12392] ? __lock_acquire+0xaac/0xd20 [ 540.235218][T12392] ? __pfx_xfrm_policy_inexact_alloc_bin+0x10/0x10 [ 540.235240][T12392] ? __get_hash_thresh+0x10e/0x420 [ 540.235261][T12392] ? policy_hash_bysel+0x191/0x6e0 [ 540.235291][T12392] xfrm_policy_inexact_insert+0x1e/0x180 [ 540.235322][T12392] xfrm_policy_insert+0xd2/0x890 [ 540.235358][T12392] xfrm_add_policy+0x2e2/0x800 [ 540.235394][T12392] ? __pfx_xfrm_add_policy+0x10/0x10 [ 540.235429][T12392] ? __nla_parse+0x40/0x60 [ 540.235457][T12392] xfrm_user_rcv_msg+0x7a0/0xab0 [ 540.235491][T12392] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 540.235561][T12392] ? __mutex_trylock_common+0x153/0x260 [ 540.235585][T12392] ? __pfx___mutex_trylock_common+0x10/0x10 [ 540.235615][T12392] netlink_rcv_skb+0x219/0x490 [ 540.235648][T12392] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 540.235678][T12392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 540.235732][T12392] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.235773][T12392] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.235804][T12392] xfrm_netlink_rcv+0x79/0x90 [ 540.235838][T12392] netlink_unicast+0x758/0x8d0 [ 540.235875][T12392] netlink_sendmsg+0x805/0xb30 [ 540.235902][T12392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.235923][T12392] ? __import_iovec+0x5d4/0x7f0 [ 540.235945][T12392] ? aa_sock_msg_perm+0x94/0x160 [ 540.235966][T12392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 540.235987][T12392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.236006][T12392] __sock_sendmsg+0x219/0x270 [ 540.236036][T12392] ____sys_sendmsg+0x505/0x830 [ 540.236063][T12392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.236100][T12392] ___sys_sendmsg+0x21f/0x2a0 [ 540.236124][T12392] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.236178][T12392] ? __fget_files+0x2a/0x420 [ 540.236201][T12392] ? __fget_files+0x3a0/0x420 [ 540.236234][T12392] __sys_sendmsg+0x164/0x220 [ 540.236256][T12392] ? __pfx___sys_sendmsg+0x10/0x10 [ 540.236289][T12392] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 540.236309][T12392] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.236329][T12392] __do_fast_syscall_32+0xb4/0x110 [ 540.236351][T12392] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.236373][T12392] do_fast_syscall_32+0x34/0x80 [ 540.236393][T12392] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.236416][T12392] RIP: 0023:0xf7f04539 [ 540.236432][T12392] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 540.236447][T12392] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 540.236467][T12392] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 540.236479][T12392] RDX: 0000000004040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 540.236490][T12392] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.236500][T12392] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 540.236511][T12392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.236538][T12392] [ 540.262129][ T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 540.264853][ T5874] usb 5-1: string descriptor 0 read error: -71 [ 540.306364][ T9] usb 2-1: device descriptor read/8, error -71 [ 540.320577][ T5874] usb 5-1: USB disconnect, device number 84 [ 540.471722][ T53] tipc: Subscription rejected, illegal request [ 540.668439][ T9] usb usb2-port1: unable to enumerate USB device [ 540.782497][ T5912] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 540.850123][T12401] netlink: 'syz.3.1958': attribute type 21 has an invalid length. [ 540.860838][T12401] netlink: 'syz.3.1958': attribute type 1 has an invalid length. [ 540.875230][T12401] netlink: 'syz.3.1958': attribute type 21 has an invalid length. [ 540.884748][T12401] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1958'. [ 540.999624][ T5912] usb 6-1: Using ep0 maxpacket: 32 [ 541.018059][ T5912] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 541.026436][ T5912] usb 6-1: config 0 has no interface number 0 [ 541.036793][T12401] usb usb7: usbfs: process 12401 (syz.3.1958) did not claim interface 0 before use [ 541.046205][ T5912] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 541.059018][ T5912] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 541.068429][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.076874][ T5912] usb 6-1: Product: syz [ 541.081108][ T5912] usb 6-1: Manufacturer: syz [ 541.109458][ T5912] usb 6-1: SerialNumber: syz [ 541.150236][ T5912] usb 6-1: config 0 descriptor?? [ 541.182571][ T5912] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 541.204621][ T5912] em28xx 6-1:0.132: Video interface 132 found: [ 541.631285][ T5912] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 541.644789][T12396] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 541.680530][T12396] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 542.214356][ T5912] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 542.260716][ T5912] em28xx 6-1:0.132: board has no eeprom [ 542.394906][T12419] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1965'. [ 542.427821][ T30] audit: type=1326 audit(1745709568.975:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 542.461295][ T30] audit: type=1326 audit(1745709568.975:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 542.488754][ T30] audit: type=1326 audit(1745709568.975:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 542.510849][ C0] vkms_vblank_simulate: vblank timer overrun [ 542.517650][ T30] audit: type=1326 audit(1745709568.975:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 542.667249][ T30] audit: type=1326 audit(1745709568.975:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 542.722191][ T5912] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 542.730080][ T5912] em28xx 6-1:0.132: analog set to bulk mode. [ 542.754347][ T47] em28xx 6-1:0.132: Registering V4L2 extension [ 542.793472][ T30] audit: type=1326 audit(1745709568.975:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 542.888633][ T47] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 542.902132][ T30] audit: type=1326 audit(1745709569.175:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 542.903787][ T5912] usb 6-1: USB disconnect, device number 63 [ 542.924297][ C0] vkms_vblank_simulate: vblank timer overrun [ 542.988713][ T47] em28xx 6-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 543.046501][ T47] em28xx 6-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 543.063656][ T5912] em28xx 6-1:0.132: Disconnecting em28xx [ 543.072365][ T30] audit: type=1326 audit(1745709569.175:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 543.094436][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.416474][ T47] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 543.443539][ T47] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 543.467358][ T47] em28xx 6-1:0.132: No AC97 audio processor [ 543.493515][T12441] netlink: 'syz.4.1969': attribute type 1 has an invalid length. [ 543.569530][T12441] bond3: entered promiscuous mode [ 543.575353][ T47] usb 6-1: Decoder not found [ 543.612563][ T47] em28xx 6-1:0.132: failed to create media graph [ 543.619478][T12441] 8021q: adding VLAN 0 to HW filter on device bond3 [ 543.669880][ T47] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 543.683187][ T47] em28xx 6-1:0.132: Remote control support is not available for this card. [ 543.692552][ T5912] em28xx 6-1:0.132: Closing input extension [ 543.698525][ T5912] ================================================================== [ 543.706602][ T5912] BUG: KASAN: slab-use-after-free in media_device_unregister+0x141/0x400 [ 543.715034][ T5912] Read of size 8 at addr ffff888030fc0210 by task kworker/1:5/5912 [ 543.722928][ T5912] [ 543.725294][ T5912] CPU: 1 UID: 0 PID: 5912 Comm: kworker/1:5 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 543.725316][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 543.725329][ T5912] Workqueue: usb_hub_wq hub_event [ 543.725355][ T5912] Call Trace: [ 543.725363][ T5912] [ 543.725371][ T5912] dump_stack_lvl+0x189/0x250 [ 543.725397][ T5912] ? __virt_addr_valid+0x18c/0x540 [ 543.725419][ T5912] ? rcu_is_watching+0x15/0xb0 [ 543.725444][ T5912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.725466][ T5912] ? rcu_is_watching+0x15/0xb0 [ 543.725489][ T5912] ? lock_release+0x4b/0x3e0 [ 543.725515][ T5912] ? __virt_addr_valid+0x18c/0x540 [ 543.725535][ T5912] ? __virt_addr_valid+0x469/0x540 [ 543.725555][ T5912] print_report+0xb4/0x290 [ 543.725575][ T5912] ? media_device_unregister+0x141/0x400 [ 543.725597][ T5912] kasan_report+0x118/0x150 [ 543.725619][ T5912] ? media_device_unregister+0x141/0x400 [ 543.725645][ T5912] media_device_unregister+0x141/0x400 [ 543.725671][ T5912] em28xx_release_resources+0xac/0x240 [ 543.725699][ T5912] em28xx_usb_disconnect+0x19f/0x2f0 [ 543.725715][ T5912] usb_unbind_interface+0x26b/0x8f0 [ 543.725742][ T5912] ? __pfx_usb_unbind_interface+0x10/0x10 [ 543.725766][ T5912] device_release_driver_internal+0x4d6/0x7c0 [ 543.725790][ T5912] bus_remove_device+0x34d/0x410 [ 543.725817][ T5912] device_del+0x511/0x8e0 [ 543.725835][ T5912] ? kfree+0x193/0x440 [ 543.725854][ T5912] ? __pfx_device_del+0x10/0x10 [ 543.725871][ T5912] ? kobject_put+0x446/0x480 [ 543.725893][ T5912] usb_disable_device+0x3e9/0x8a0 [ 543.725917][ T5912] usb_disconnect+0x330/0x910 [ 543.725940][ T5912] hub_event+0x1cdb/0x4a00 [ 543.725966][ T5912] ? __lock_acquire+0xaac/0xd20 [ 543.725990][ T5912] ? do_raw_spin_lock+0x121/0x290 [ 543.726013][ T5912] ? __lock_acquire+0xaac/0xd20 [ 543.726036][ T5912] ? __pfx_hub_event+0x10/0x10 [ 543.726056][ T5912] ? process_scheduled_works+0x9ec/0x17a0 [ 543.726083][ T5912] ? _raw_spin_unlock_irq+0x23/0x50 [ 543.726107][ T5912] ? process_scheduled_works+0x9ec/0x17a0 [ 543.726130][ T5912] ? process_scheduled_works+0x9ec/0x17a0 [ 543.726154][ T5912] process_scheduled_works+0xadb/0x17a0 [ 543.726189][ T5912] ? __pfx_process_scheduled_works+0x10/0x10 [ 543.726220][ T5912] worker_thread+0x8a0/0xda0 [ 543.726235][ T5912] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 543.726270][ T5912] ? __kthread_parkme+0x7b/0x200 [ 543.726289][ T5912] kthread+0x70e/0x8a0 [ 543.726310][ T5912] ? __pfx_worker_thread+0x10/0x10 [ 543.726325][ T5912] ? __pfx_kthread+0x10/0x10 [ 543.726343][ T5912] ? __pfx_kthread+0x10/0x10 [ 543.726360][ T5912] ? _raw_spin_unlock_irq+0x23/0x50 [ 543.726384][ T5912] ? lockdep_hardirqs_on+0x9c/0x150 [ 543.726400][ T5912] ? __pfx_kthread+0x10/0x10 [ 543.726418][ T5912] ret_from_fork+0x4b/0x80 [ 543.726434][ T5912] ? __pfx_kthread+0x10/0x10 [ 543.726452][ T5912] ret_from_fork_asm+0x1a/0x30 [ 543.726473][ T5912] [ 543.726480][ T5912] [ 544.010673][ T5912] Allocated by task 47: [ 544.014835][ T5912] kasan_save_track+0x3e/0x80 [ 544.019519][ T5912] __kasan_kmalloc+0x93/0xb0 [ 544.024119][ T5912] __kmalloc_cache_noprof+0x230/0x3d0 [ 544.029499][ T5912] em28xx_v4l2_init+0x10b/0x2e70 [ 544.034438][ T5912] em28xx_init_extension+0x11d/0x1c0 [ 544.039823][ T5912] process_scheduled_works+0xadb/0x17a0 [ 544.045376][ T5912] worker_thread+0x8a0/0xda0 [ 544.049963][ T5912] kthread+0x70e/0x8a0 [ 544.054031][ T5912] ret_from_fork+0x4b/0x80 [ 544.058449][ T5912] ret_from_fork_asm+0x1a/0x30 [ 544.063222][ T5912] [ 544.065542][ T5912] Freed by task 47: [ 544.069340][ T5912] kasan_save_track+0x3e/0x80 [ 544.074021][ T5912] kasan_save_free_info+0x46/0x50 [ 544.079053][ T5912] __kasan_slab_free+0x62/0x70 [ 544.083821][ T5912] kfree+0x193/0x440 [ 544.087718][ T5912] em28xx_v4l2_init+0x1683/0x2e70 [ 544.092741][ T5912] em28xx_init_extension+0x11d/0x1c0 [ 544.098022][ T5912] process_scheduled_works+0xadb/0x17a0 [ 544.103572][ T5912] worker_thread+0x8a0/0xda0 [ 544.108160][ T5912] kthread+0x70e/0x8a0 [ 544.112226][ T5912] ret_from_fork+0x4b/0x80 [ 544.116635][ T5912] ret_from_fork_asm+0x1a/0x30 [ 544.121407][ T5912] [ 544.123740][ T5912] The buggy address belongs to the object at ffff888030fc0000 [ 544.123740][ T5912] which belongs to the cache kmalloc-8k of size 8192 [ 544.137790][ T5912] The buggy address is located 528 bytes inside of [ 544.137790][ T5912] freed 8192-byte region [ffff888030fc0000, ffff888030fc2000) [ 544.151677][ T5912] [ 544.154005][ T5912] The buggy address belongs to the physical page: [ 544.160424][ T5912] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30fc0 [ 544.169186][ T5912] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 544.177684][ T5912] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 544.185658][ T5912] page_type: f5(slab) [ 544.189650][ T5912] raw: 00fff00000000040 ffff88801a042280 0000000000000000 dead000000000001 [ 544.198240][ T5912] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 544.206831][ T5912] head: 00fff00000000040 ffff88801a042280 0000000000000000 dead000000000001 [ 544.215509][ T5912] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 544.224177][ T5912] head: 00fff00000000003 ffffea0000c3f001 00000000ffffffff 00000000ffffffff [ 544.232852][ T5912] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 544.241522][ T5912] page dumped because: kasan: bad access detected [ 544.248377][ T5912] page_owner tracks the page as allocated [ 544.254089][ T5912] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5496, tgid 5496 (dhcpcd), ts 51838026091, free_ts 51795187874 [ 544.274755][ T5912] post_alloc_hook+0x1d8/0x230 [ 544.279529][ T5912] get_page_from_freelist+0x21ce/0x22b0 [ 544.285081][ T5912] __alloc_frozen_pages_noprof+0x181/0x370 [ 544.290892][ T5912] alloc_pages_mpol+0x232/0x4a0 [ 544.295764][ T5912] allocate_slab+0x8a/0x3b0 [ 544.300307][ T5912] ___slab_alloc+0xbfc/0x1480 [ 544.304988][ T5912] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 544.311407][ T5912] kmalloc_reserve+0x136/0x290 [ 544.316262][ T5912] __alloc_skb+0x142/0x2d0 [ 544.320680][ T5912] netlink_dump+0x1eb/0xe70 [ 544.325198][ T5912] netlink_recvmsg+0x67b/0xe00 [ 544.329959][ T5912] sock_recvmsg+0x229/0x270 [ 544.334467][ T5912] ____sys_recvmsg+0x1c9/0x460 [ 544.339236][ T5912] ___sys_recvmsg+0x1b5/0x510 [ 544.343915][ T5912] __x64_sys_recvmsg+0x198/0x260 [ 544.349298][ T5912] do_syscall_64+0xf6/0x210 [ 544.353891][ T5912] page last free pid 5495 tgid 5495 stack trace: [ 544.360213][ T5912] __free_frozen_pages+0xb0e/0xcd0 [ 544.365332][ T5912] __slab_free+0x326/0x400 [ 544.369833][ T5912] qlist_free_all+0x9a/0x140 [ 544.374421][ T5912] kasan_quarantine_reduce+0x148/0x160 [ 544.379876][ T5912] __kasan_slab_alloc+0x22/0x80 [ 544.384730][ T5912] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 544.390215][ T5912] vm_area_dup+0x2b/0x5c0 [ 544.394579][ T5912] copy_mm+0xbe1/0x2100 [ 544.398736][ T5912] copy_process+0x16d3/0x3b80 [ 544.403415][ T5912] kernel_clone+0x21e/0x870 [ 544.407919][ T5912] __x64_sys_clone+0x18b/0x1e0 [ 544.412678][ T5912] do_syscall_64+0xf6/0x210 [ 544.417174][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.423104][ T5912] [ 544.425424][ T5912] Memory state around the buggy address: [ 544.431048][ T5912] ffff888030fc0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 544.439106][ T5912] ffff888030fc0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 544.447173][ T5912] >ffff888030fc0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 544.455231][ T5912] ^ [ 544.459811][ T5912] ffff888030fc0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 544.467978][ T5912] ffff888030fc0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 544.476054][ T5912] ================================================================== [ 544.569747][T12445] 8021q: adding VLAN 0 to HW filter on device bond4 [ 544.580087][T12445] bond3: (slave bond4): making interface the new active one [ 544.606703][T12445] bond4: entered promiscuous mode [ 544.616503][T12445] bond3: (slave bond4): Enslaving as an active interface with an up link [ 544.742172][ T5912] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 544.749428][ T5912] CPU: 1 UID: 0 PID: 5912 Comm: kworker/1:5 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 544.761516][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 544.771581][ T5912] Workqueue: usb_hub_wq hub_event [ 544.776622][ T5912] Call Trace: [ 544.779913][ T5912] [ 544.782852][ T5912] dump_stack_lvl+0x99/0x250 [ 544.787458][ T5912] ? __asan_memcpy+0x40/0x70 [ 544.792056][ T5912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.797296][ T5912] ? __pfx__printk+0x10/0x10 [ 544.801902][ T5912] panic+0x2db/0x790 [ 544.805806][ T5912] ? __pfx_panic+0x10/0x10 [ 544.810230][ T5912] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 544.816164][ T5912] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 544.822505][ T5912] ? print_memory_metadata+0x314/0x400 [ 544.827974][ T5912] ? media_device_unregister+0x141/0x400 [ 544.833622][ T5912] check_panic_on_warn+0x89/0xb0 [ 544.838570][ T5912] ? media_device_unregister+0x141/0x400 [ 544.844211][ T5912] end_report+0x78/0x160 [ 544.848547][ T5912] kasan_report+0x129/0x150 [ 544.853076][ T5912] ? media_device_unregister+0x141/0x400 [ 544.858754][ T5912] media_device_unregister+0x141/0x400 [ 544.864239][ T5912] em28xx_release_resources+0xac/0x240 [ 544.869799][ T5912] em28xx_usb_disconnect+0x19f/0x2f0 [ 544.875093][ T5912] usb_unbind_interface+0x26b/0x8f0 [ 544.880405][ T5912] ? __pfx_usb_unbind_interface+0x10/0x10 [ 544.886142][ T5912] device_release_driver_internal+0x4d6/0x7c0 [ 544.892228][ T5912] bus_remove_device+0x34d/0x410 [ 544.897176][ T5912] device_del+0x511/0x8e0 [ 544.901506][ T5912] ? kfree+0x193/0x440 [ 544.905581][ T5912] ? __pfx_device_del+0x10/0x10 [ 544.910438][ T5912] ? kobject_put+0x446/0x480 [ 544.915065][ T5912] usb_disable_device+0x3e9/0x8a0 [ 544.920103][ T5912] usb_disconnect+0x330/0x910 [ 544.924793][ T5912] hub_event+0x1cdb/0x4a00 [ 544.929223][ T5912] ? __lock_acquire+0xaac/0xd20 [ 544.934082][ T5912] ? do_raw_spin_lock+0x121/0x290 [ 544.939114][ T5912] ? __lock_acquire+0xaac/0xd20 [ 544.943988][ T5912] ? __pfx_hub_event+0x10/0x10 [ 544.948770][ T5912] ? process_scheduled_works+0x9ec/0x17a0 [ 544.954544][ T5912] ? _raw_spin_unlock_irq+0x23/0x50 [ 544.959755][ T5912] ? process_scheduled_works+0x9ec/0x17a0 [ 544.965502][ T5912] ? process_scheduled_works+0x9ec/0x17a0 [ 544.971235][ T5912] process_scheduled_works+0xadb/0x17a0 [ 544.976800][ T5912] ? __pfx_process_scheduled_works+0x10/0x10 [ 544.982793][ T5912] worker_thread+0x8a0/0xda0 [ 544.987400][ T5912] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 544.993748][ T5912] ? __kthread_parkme+0x7b/0x200 [ 544.998689][ T5912] kthread+0x70e/0x8a0 [ 545.002769][ T5912] ? __pfx_worker_thread+0x10/0x10 [ 545.007881][ T5912] ? __pfx_kthread+0x10/0x10 [ 545.012471][ T5912] ? __pfx_kthread+0x10/0x10 [ 545.017063][ T5912] ? _raw_spin_unlock_irq+0x23/0x50 [ 545.022269][ T5912] ? lockdep_hardirqs_on+0x9c/0x150 [ 545.027467][ T5912] ? __pfx_kthread+0x10/0x10 [ 545.032061][ T5912] ret_from_fork+0x4b/0x80 [ 545.036477][ T5912] ? __pfx_kthread+0x10/0x10 [ 545.041071][ T5912] ret_from_fork_asm+0x1a/0x30 [ 545.045847][ T5912] [ 545.049231][ T5912] Kernel Offset: disabled [ 545.053560][ T5912] Rebooting in 86400 seconds..