last executing test programs: 9.146840391s ago: executing program 1 (id=645): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="856b", 0x2}], 0x1) syz_usb_control_io$uac1(r0, &(0x7f00000013c0)={0x14, &(0x7f0000001280)={0x40, 0x3, 0x7b, {0x7b, 0x24, "d344ce15eab55c934757c04302b09b0e3e0da3e2b73fa7f386570a1fa2624b217885dc5d1fa800306b0d7c2c77497b239d41dd611eaa6f865f791c13899e85e7214eb58b79cf11f6562d8e850f472ba150b13dd01d37d06909c71356d1246d4f33a922f01f9b8de5633974b3fc19f323b26c6b9dc391a92c93"}}, &(0x7f0000001340)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "93cdf6ed60c861af94b25fcaa8810546b720651e17fe33b169eda3c5d3b2f720777c3a3c433c8d2c8bc47da68cc85d3f6d36e6f9a92847e67f63ad42c3ffcee4e5976eac7d992689d08a59d6d7230b5f4c754cf99323e829908a"}}}, &(0x7f00000016c0)={0x44, &(0x7f0000001400)={0x20, 0x1, 0xd4, "6c21efb13637e6e4c249cc5524c296be5128662afd7ed5d62c1543a97ddab37997d775931b589ca23655b9396859a3b71eeefdec69eee99193ce3e2600fd893e92b9339f27d670ead975805dcd45daac2028500e2322782967c070a99d73bf352b8bcd9b33867fabb0ac5146398f30c2f02a4d57dc2b4581f4ce80ea5be78c38296eb692c9f7427bd21a92de09045a4d4ab45ad761872d8e0dc18f76c0a658dede5d7ebc0564a05271963139d23e9abb1ee4ae73b1b6d3459e7adcae135f043348671c330c7dd935373240661c7b860f844d114a"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001580)={0x20, 0x81, 0x1, "92"}, &(0x7f00000015c0)={0x20, 0x82, 0x2, '8%'}, &(0x7f0000001600)={0x20, 0x83, 0x1, "dc"}, &(0x7f0000001640)={0x20, 0x84, 0x4, "6e0ef2bb"}, &(0x7f0000001680)={0x20, 0x85, 0x3, "5f1740"}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000090601010000000098a0535d882bcdda0900020073797a31000000000500010007000000040008809d06be5307e52ff972dc340e686627fbdcd47c336edb12d8d1dd604ecd0110ffb5baba78d5d3900f677dce4d60d7c72c4004daaccdb937a0acf92dc62cfe886851f6f54a31b753393998095b3d4e8187b14ca8493187889b878dbb9fbff39f47f33c8e09f97f9c18d8ccc04d42660d606fbf7c57cdfd2c263553d98a87181aee9e3e91324421c251f31c63494d4b57b14c4c"], 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x28142, 0x8) fcntl$setlease(r3, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x170) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) unshare(0x20000400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x3ff, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x28, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x8007f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4001, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0xfffffffe, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 7.534076548s ago: executing program 3 (id=655): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000502000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x8, 0x328}) syz_emit_ethernet(0x82, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010600, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x8005, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x2e72, 0x4005, 0x5}, 0x14) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 7.281559048s ago: executing program 4 (id=656): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept$unix(r0, &(0x7f0000000400), &(0x7f0000000180)=0x6e) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0xc4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r5 = getpid() sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x10000008, 0x2, 0x1, 0x6, 0x395400000000000, 0xfc3, 0x7, 0x5504}, 0x0) syz_80211_join_ibss(&(0x7f00000001c0)='wlan0\x00', &(0x7f0000000240)=@random="eea9a581b04e13db62ffa30d165ad32f9115cd164d7174c62448f215dbc95054", 0x20, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000c046}, 0x4000084) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) 7.238942424s ago: executing program 3 (id=657): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x4, 0xbd04, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110201"], 0x7c}}, 0x4004010) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaacaaa18810018001a1f4b6cd872d2de48cb00451f00280067000007019078e000fec0465347b2cc6d067ad7cd40bb000297e2fb9b1d3b7023c025ac1414bb0d0090780006009f00000002000000080000000a"], 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x70bd26, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_simple={0x34, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x7, 0x6, "82afd8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x10000084) r6 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) fsmount(r6, 0x0, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r7 = getpid() sched_setattr(r7, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.421962038s ago: executing program 0 (id=658): openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x2, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x87}, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x209, 0xffffffffffffffff, 0x69d0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0xee01, 0xb8}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1000ff, 0x2, 0x0, 0x0, 0x4}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18200000, 0x0, 0x9, 0xd0b, 0x8, 0x80000001, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) socket(0x10, 0x3, 0x0) r5 = msgget$private(0x0, 0x3ac) msgsnd(r5, 0x0, 0x1fa, 0x800) msgrcv(r5, 0x0, 0x0, 0x0, 0x5800) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r6, &(0x7f00000001c0)=[{{&(0x7f0000000080)=@phonet={0x23, 0xff, 0x57, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x7ff}}], 0x18}}], 0x1, 0x40001) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6.257106666s ago: executing program 4 (id=659): syz_usb_connect(0x4, 0xba1, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xbe, 0x27, 0x4a, 0x8, 0x1186, 0x3e04, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8f, 0x4, 0x4, 0xc, 0x70, 0x0, [{{0x9, 0x4, 0x3a, 0x81, 0x1, 0x4e, 0xa9, 0x5a, 0x3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "9a86"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x80, 0x5, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}, @country_functional={0x8, 0x24, 0x7, 0x8, 0x1, [0x2]}, @mdlm_detail={0xb5, 0x24, 0x13, 0x5, "4dbfb841c8e3d33182c4a6afc8d59a86ce520e9eb1f84df2d7ebfebc70ee59c36830b78ebbfb37e49f1c249e514871690251aac31a2356bd8aa8e1e2a37e6cc09ed19d70866dcdfe87b959840f77d3e9d726f531151117bc06498f15a956ad3e328bbd4afb8e5225c534ea22e980dc3caccc650b7908a506f5d4de03bca9e3952d5e07d6b051d6514ef1fe9680040f4c19d909476c37dc0008bd25035f4baa4890d5add0805d0778cac80475ee6bb91d89"}, @acm={0x4}, @acm={0x4}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x7, 0x81, 0x8}}], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x30, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x7c35}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x58, 0x8}]}}]}}, {{0x9, 0x4, 0xa2, 0x8, 0xe, 0xc1, 0x72, 0x49, 0x5, [@generic={0x9f, 0x21, "5a1323f985cb3a99e93222dbcf2bd06ef8dd13f7f971b563d4bf2b9ffd7ed4ae7c6e6a02523d7ec120d5d2d526b6c1312430c5cb0e2c670f4bfdc5b21b6d25f5387be463cb91a3a36eb60c1de6f59d48bec63aed257b4a3f8dd962b6db461511bd669d953882dae93e5d744fa7505c425dae8a9a3065a8a657a7bdd7ef04a81539a8a571dab9fb223406d55d851ead60fc30685a3f332af06eda9e4905"}], [{{0x9, 0x5, 0xa, 0x0, 0x20, 0x2, 0x40, 0x2, [@generic={0xb7, 0x22, "96127550ab7832dcd609a7cf78a122b10983de8534cc08978d9a05de05e7603e309857910f7eef01ac41c6c0b0a2636c29f0bd9a16aa6a34c4c090ad4cf74e54533952f5b967459345627b91dc689cdc06cdb64eff4099faf77656f9237d968e0b44ec48a161912f1af8c1e704660b29653936dd9be5be271a478fb812dbe74be921cbb610f02ea1431fdc0bf692a8025230c9195dfdf3c584f1cfccc43df0dc4b04e28294cfa282b9631978a0cf08622be85e470e"}, @generic={0xc5, 0x5, "a769279240375a7d855a6467ba8432061d0f58f6472b07ed20ca87da6dd238876a439ca036403ce715723aeaf44dd1bad6262593867a436d08d32a57f62b5bf1ae1936481ee762516e5ac5029f74a517668336179d89433e179a697fd3682fab24ed01f31ae226bd0c274215fada35afe30c0ce182e40bf2462239771e037ee854b8758cc97fab7b8041376fcc03618e6a5abfdded33572b8aa274b8b212d262319ba1434467fd64c9fb8ac20d102f4523dcc3b678ff4b9f6d26553fc87f406825bbdb"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x1, 0x0, 0x1, [@generic={0x59, 0x4, "038f1fce95afc13ec5a250e8d6bcba465753fa41803738c8f50e390ab469671f68e4a6366dabed1520596d3435bfa746a57b4a0d80d4e07a6b8201722488ebcf75a32ce86dcf0b1af64ea430c21c807fc9c07828153009"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x7, 0x8, 0x7, [@generic={0xfd, 0x10, "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"}, @generic={0xab, 0x5, "42cbc765c1d6073270782d7e81632ce807d2956594269ad9b17bad11879e93f03c5a8a5672a6fc69a766c317fcb8f620c4b8a06d1e88050d57af538e5b967bf76ac8e74be6902db06286d7bf064886a7f2af7682fffc9bf924b243904019fd55ecc9e6f19b8471849a421eae4bc3c392c7a79e0a1dbe321a7d7cd8bfe7a9f2280ce085e6c68f7b4b91a42901d63bd0349f274d24551bee07981fe7d52d0da4cacd3dc1deba828862ea"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0xe, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xa}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x7, 0x83, 0x80, [@generic={0x28, 0x24, "cdb3a5d0a9613c8b280c4e29f92a399770dbcc56d6a13b4aff002ded612fe8c66ef3b5bb4d6e"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x8, 0xe, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0xa6, 0x2, 0x5f}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x7, 0xfa, 0x0, [@generic={0x96, 0x7, "92aa556e4e2bfcc7795190845ee6685104002e36c84bca71063e95284c15106b339469a67af5df3cd63439a0d5c767ea6555f4cfa7a995514dbd2abb9a355a914c90a14235f7edd86e0abe59d81a2e82df4ac780244ade78f64263037ce9087f37bca306fcc3b04c92deeb5fe8068902269ff008e523500fdfed5f9f987d823bbdcd7bd7aefe02541d82dbeb4d3a47a4c0b954fd"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xc}]}}, {{0x9, 0x5, 0x4, 0x3, 0x2dc514226a62f922, 0x23, 0x4, 0xd}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x10, 0xfb, 0x3}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0xc0, 0x1, 0xff}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x9, 0xd2, 0x9}}, {{0x9, 0x5, 0xd, 0x1, 0x218, 0x6, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x55, 0x3}, @generic={0x33, 0xe, "64107b825525eb9c0b5d6d375679a655e22e4f21fee9029f4543a73901b7258e85836e606f137dd249c6ee8f0a9ef294b3"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x94, 0x3, 0x7}}]}}, {{0x9, 0x4, 0xa0, 0x7f, 0xa, 0x2f, 0x53, 0xb1, 0x1, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "b05988d4f9b8"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x503, 0x3, 0x5}, [@country_functional={0x8, 0x24, 0x7, 0x7, 0x25, [0x9]}, @mdlm_detail={0x76, 0x24, 0x13, 0xfb, "396ae6dc7ab61a70c4eb361acd23b0cf38a447d0fc9cf3329f3f104f04fba8706f6b5be4d90d4e9a9c7706064aeee391091a0f10508dc65d7a6f94ee87d2f0991015a9b748be7c863801385ba5ffe5193091fe4929a9f0aeaafca7b83d4b6c8ced42beb6c5393c388af0775681bb65a78a4f"}, @mdlm_detail={0x65, 0x24, 0x13, 0x8, "e0222ceb77385a3618086db10bf3e683708518ecc271aa039c80542f3a04d94c0393ab4e8c7314adc96a79131e2a5056e37e4423135fbc68f730fc858236adc093d39b463050d6939fb66e80276d69784d885efe416fabbde8f4668d54194129f7"}, @mdlm_detail={0x83, 0x24, 0x13, 0x3, "7d3b777a87dbab7fa49e9e3d992951b6cff11e4fa2f5f717bcd9a612555f1a65cd971d7359baf7d26542b0ad7c258648c9835dbb6ac7a307bf17cad0851ec45010485770d55f21aa3899662d6a5460532470cd0a2ad30737c64e8638fc50902eb2942786851682344042b41c0e897fe6aa2852bd4e7092aa34056778a4fe49"}, @country_functional={0xe, 0x24, 0x7, 0x9b, 0x1, [0x1, 0x6, 0x6, 0x1]}, @country_functional={0x6, 0x24, 0x7, 0x8, 0x1}]}], [{{0x9, 0x5, 0x9, 0x4, 0x200, 0x4, 0x80, 0x3}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x7, 0xff, 0x8, [@generic={0x66, 0xc, "15d6099bb9994c72619d86b352f7e9ab8b1bd99db08a66d0c3a76da9f1f8831c2e0b2d655e2df16b6a7dba327047b250012c1f2de26f0edd4a8f47557e0b63b847b970cf9458ce5295d88f78ccb18e7adce590647fbeaf712116a7539889944b9b7e9b8e"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0xff, 0x81}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xff, 0x2, 0x3, [@generic={0xcc, 0xa, "312582069930410bf0e0c028765171811896d8e79cf521a2127a99c01f281df96d82edf33105325570f677479c3ee776b8f650a27288d3fd54eade718610ad83041e807bd1fbbeeb7cc735222b79b795957282637b0dbd0479c0ca89da6272fe41274b6fd56fbe3d72c64c38a73b09bd8c0c3fb23934d2478a50d34b19e690f526a14335b45d37bb1a735b72973a595c8449dd72157eca3a232aa14338d338d9e0c1b50a550d9a65daf53579e3dfb423e81d1db7cc9405834d60c0181bcef626b95b3c058494041810cb"}]}}, {{0x9, 0x5, 0xf, 0x1c, 0x10, 0x9, 0x10, 0x5}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x8, 0xa, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x2}, @generic={0xfc, 0x22, "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"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x10, 0x7, 0x1}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x5, 0x9b, 0x12}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x7, 0x7, 0x2}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x0, 0xd, 0x7}}]}}, {{0x9, 0x4, 0x50, 0x8, 0x7, 0xa9, 0x38, 0xb8, 0x20, [], [{{0x9, 0x5, 0xa, 0xc, 0x20, 0x1, 0x8, 0x1}}, {{0x9, 0x5, 0xa, 0x4, 0x0, 0xfc, 0x60, 0xe2}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x40, 0x3, 0x41}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0x6, 0x6, 0x7f}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x6, 0xf8, 0x9, [@generic={0x12, 0xc, "6e2705ed757f4d640f771f91e6000664"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x7, 0xc1, 0x3, [@generic={0x2c, 0x4, "d0549118029bcf6ea519490579f54393a214529cd7d8650fea5736dd98104aa96129547906ba2cfae146"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x81}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x9, 0x3, 0xa}}]}}]}}]}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 5.729532808s ago: executing program 1 (id=660): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x4, 0x7, 0x80005, 0x700, 0x0, 0x1, '&\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xc, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe}) 5.550220026s ago: executing program 4 (id=661): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008400}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x30}], 0x1}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x6, 0x9, 0x0, 0x2, "100056f200"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_newroute={0x20, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x3, 0xff, 0x9}, [@RTA_METRICS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x0) (fail_nth: 4) 4.945205062s ago: executing program 0 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r2, 0x1, 0x0, 0x60000000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x24}}, 0x0) 4.934012334s ago: executing program 3 (id=663): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0xfffffedb, 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_delneigh={0x5c, 0x1d, 0x300, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x20, 0x12, 0x6}, [@NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_SRC_VNI={0x8, 0xb, 0x3}, @NDA_SRC_VNI={0x8, 0xb, 0x5}, @NDA_VLAN={0x6, 0x5, 0xfffc}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010102}, @NDA_NH_ID={0x8, 0xd, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 4.831334954s ago: executing program 0 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4a3b450b207339c8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000340)="b8000005000000003b974f58bd2b", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002c4ad634056d2011596c88e5e6fc6319b5ffecfe8f402030109090196795c0709058103ef03060e0700000000"], 0x0) 4.830275994s ago: executing program 3 (id=665): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept$inet6(r0, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getneightbl={0x14, 0x42, 0x100, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x885) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0xef, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) 4.761600687s ago: executing program 1 (id=666): r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000010101010000000000000000020000003c0001800c00028005ba01003a0000002c000180140003000000000000000000000000000000000014000400ff0200000000000000000000000000010c00198008000100cd"], 0x5c}}, 0xc1) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x80, @loopback, 0xfffffffc}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xffffffff}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3b90, 0x4) sendto$inet6(r0, &(0x7f0000000b80)='f', 0x1, 0x4040801, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0xa, 0x3a, {0x3a, 0x21, "97aa815508d6a9df01f37c5ed36fedbbcdb3aa0f79ac8404481d606ff502a261953f5969b1f91bd21a23a62b6b46a5901781304db9553ea1"}}, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb4}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000025c0)=[@in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={r8, 0x7f, 0x8, 0x80000001, 0x8}, 0x14) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f00000002c0)="f9a9ae18ddca972226a7877a82131a0fab165aabb758546d842b5a5b0437031a59bd93b65b0fdd580a4ec251bf10fa64a8d07f93", 0x34}], 0x3}, 0x400c01d) 4.70517557s ago: executing program 3 (id=667): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) ioctl(r1, 0x3, &(0x7f0000000400)="9301a9a794a4693f55724dd21487868cbc118f2881477c764b0563a5c43de2abf3e61a37c482a075c56bcbf3471fa7c72203b0534e7589867c2faa1fc33f3a702cd93cdb5efa8d43eabafc7e8e88a2450f824300e872a96f9d705f7670cfb940950c532fb4028e377a5aeeedd24c755fab16d0910b20afe30433ec5da1af460b5ed9c57f03330cd26a679080dc0d86a084a6f47de85ab37b6ea38d1062f58b9c64cf750c1bbaf1098c89dd0cdde6553fdee465345d6cdb3a0541d234c3fd8adedd3f8dc59ab402d6c4bea6ba54e4d2ffeb992a5daf9ab464d87f48fd01131a34c5ab5209923a3d50f571a3a1314812cdc1ba170da3775edd541b2b184d688b66acf32e08627e4e03848ca07f68cc9238fa91d44024f43604f8620cb785f594d473e75eaffdd5f4e2a577b8d7abc154b1ab3006505eb814bfe1cff5a69ab37c811eef196677cf7021b9b78ed6a8513ffa8a9fe1e8e7c0336e11c792d584f6a50f7455017facbef03c1e32ab39dc7fbc935f0dbf642014720854b32e37cba969b8412b260ad825b557a97f21188d238a809be2e337ef50d35ec5df57142d00908156a2046151a1b2a3de8e7a0ce56d435ebcd16d08276ee8bfafa0dd3c89f77988d9e31f39690bf15350bceae13c961e48a7c83232d91f32cb4be02b9850e234b65cdfd4c67847a0df7e5b5cdf789fe8974a416dd4a018a03b05c46216909bc5e30745976138fc7ba8946fd754ed2942a3281f865a2e1bee8fa6f555624bc840ccca151f6481d7cbd2511e218e63c3f36f97a05aff9ef15ad43797de80916c1ddc8001887765ecd970e3391a85e961ef40fdbc9b1dcc7638469189d2a113abead3fb3446768d500089e15f9aa65c0a826220037e82c628343c4181d86f76bf2aaf79794584e6c18a38741fa6755672718cbcf27e747f62ab3286549fe457c894b75ad7bd41327c93be18c25de69dd0469f0399a2edd3fb114f133d04ebdb9eaed86b1000220bb5a5621a9d8eaf88fe57259faa752a5919eff5873c1a8c9182a27d226c483665e5f29d32db6008a6d683b85d515cbd202bc30e830b6cbfd5043c4d66c04e888f92212cc5e2d140fde5daa3c76d7af4cd143780ea66a39b5178071fe3b6e4200e31f1b34d4cafaa471dc82c65f473ceff353ca4529a1b22a27ef7b91beaaaed3adb424f45da380fc8a43adf96970f2ceec3ca2e8b0e5168ee74c79b342cc5fe9b1a79bcd232093b6ea6e4e464d0746b6bc355f8ebed161f9bf1def6497eb37b57bb0bdab3fa598330cb70d6e07fcaa33dfb806c086ac64129d2f38f7cd558f644f08365e9152b473697c21e563bc0a50265eba485aa98e2dc43dfbaf504194fabc4382f82bf76e16a97320de62b7421367ebef91549d55a59f2b79950c5b54d4f0f719875a854a7af1c023d6005a437863944b77c8af08e083757d95a61b2ae5fd2cfa19cfd18512c1863f91ed4c975f67752d0cda21f5b38776eb486e6a6e400bf67873dd448df3270c1aee815e8be4041fc3d9379e5008d7bd4250c3abaeb169f14ba00af7a94c28b1542fb88be4b05da164714a8f1c8aa8e8742252df948286a6b5f9d63633f913018efbaba86f4198aa91fb228955403ae72aefa8334f5423696a6160c7b7ae28f617697a47e516db28f4272927beaf04ea8f1d768f72f90166b63a522f0afa21813f14c17f2246c7c3615efbcb63ff3206abe529db14df602efcc041f51f4ec5fa5ffbe7386e077e00179b15a2eeda09447ab872baf5ae2c0b63319bcbe2cccca7f738bcf3a35b0fb41f8ed148dac6f43d35c151e46d7b419f75c7ada708d5e4ed65b73fd4e86a97022e3dfa1e9f4f0daf1cf091ff6d52b9cd96c6e5b52a75a909c0e5ffb1100fdefb5eec45861d962d4ede31b314c4ea332df2f18f4818bd61034317668f7db17daae98c66c6e4f99fed87c0249114edd2707db2ae5e8eeae85314faf9f22c75c5feb56c541ffb5b79850fba59fdb95250b3df76c61d2dc72ccdbd7a36d52342b7fdae941322f1ef8da487c604191b82daf01d51daaa2448f2a2d3e89e695e6f25b44f772f78bde2469b4471e11158e3fe6390948f8f724e5d705ce8ec7081d104bfadaba1a3eede6cb55ef7e71eede9b83bbb5740ade5fb9116b282b51cfec56632cbf9edffde8ffc059fc48e4c57e2534612b0d185cc44332622a98d5c3493d9fbe7d0712bc4cd03d09cc5f8d4cfa4be29fa4a25582538c22e8d7fa7d412c53ea96efb543b6ab9a1129edd41449610f6f882a97190010f565124ee8c068d287e7e95bb9098289c22eea8e93281757ade67b4a96debe9b68fdf7f750ccbf08c530f8d47e4a4021651d3ab83556832287c3e7292a0e213225784739118e5d1bd72248d1715261605847f1e7125d5869d3403ada98bbc7f1a90e1c43041f8d979343f7157d0e734cd2166c536b822ebd515ebae15bd6361c0e3c596f02a5052f19e906eb31dd4dfbd35886ff52c3bc4b53a7f211e73694207c4741ec94fcc35b902ac52d47eff4ceae6102429123805f03c1c7d1e18e8fa00012b2a6133b0832fb5c4950e8c3574fe5aef0b4c74a22b94b2c6cc29c5907a9ac763dc73fe66dc4da4c5b50fed04322e8d3ce7002aad824ec0a1dafac746f82751984b5bd0e4af95d5167753f25c56f54c9c2276c2f971dec7f4463362a96e1d899895e8be2afc1c7d0c95beb7fd2af7559cc011746a1eba49f9c6630d0f19ab1022c99b3475681113cb2ab818be88307135b626a5ddc014eb65161c6f2dd38718c7867500a39704382d80047070b60f0828a1f8d166d6bbe9a1f22fb66fc22d203651cf28d4a8a1c3cb480235b8bedb45e37ff0fde3a2b3b56e1724d04babfc7ae30296ca5f7e7ca2e90334416548dfac4c3a22e25b5f00a9200e2d7e93384f9dc9f8b29260a73ba47b93ac86c6cb409b55ad1b829ca481834659249e0e83d26ea7d7f7bcf673304460626ddda46ed750166bb392dc408479501d05add30fd3354fcf9c2d1962e8719c9bc8fa95c6f43cf15cc99838d6f2ebe7d748e9be909a2b6f45afc3078d4bcaafc4c76f377671ee165e9ebd8dcfaa366746bb16dd35fd25e30c77f5873f4d53a8f51aae67c8bacdaf000aefda866f09a674ac4819cdee819624422d32f64e938120a6b497ca0675c1b0c906761e656bfcc6edf06a2735de879dbeb4c1e339bb66f9e6c3c87623f0cbb9b7275b0d24e0366df8e448eb166fc97488d6cfa114d842752c5af641306b9954286c50fcb28040929ef0b08fd9b1708c8c1bbbd493402a87ef04a36059a662f0b0e58e35bd274291510ff897bf063255d76be59e3311f20967096dbbb95aceacf42381abbdbf758ee5c72fbc234b7eefab8fc8954330cc349bf4facde5e36968d1c423199f04feaab4a1f4a5d81f6762908a1b588cb780f6538e5eacfb7936bbba51fe9c400296c99a57d9d23dd5ba9a4cf589cb746ffb7733cf490bc33a0ce3271577c60fef3e93bc51a69f1a4308fad0ff8f605b8580fa66f89f1f1a7aa41ce73b9f01be32e9c4835022a553af0bba7ee3f2928b7201ab8eeb2b518cc2ae990228c38c2d2371d9f6e5dd638656ba66fe2c9f7c20e01afe76b76c795c5c25e02a56a6e48c79ee6ee44a2e7d69f7f20e54cc035524d00055030fb6cf87f253695de2e277be35424a3e4ed6d09090082219959e3009887f54c709cec3eda2863343bb0e9943a12926e9a2a56a36ac5d557753a20e5e96b2b9c05b1fff687f8591d206ded94e633ef9a33f3d3a5bafec1c0b427b6ece1aa89b318b7d35312dcc72e53d2eacebd300a5846202210ba3412e78b0c53ee0b074f4973ec6a13244417e2d29361e34d48d012516cf1c4102f9a900408860479c8af79e52189acc1bafd29309c6824c435cc9e41599293a79c053effeb8eadc6e07a123cac6948369fdaa67fcb39cd8f2c8ccb26c1118776fcf168e995800efc6289c885eae98213556c546c8b2fe75c754b73680854b0af270681d5d5ce5780daa95137c0434e32ba8cb14dada68c121a6fe456d36ecae0f90121e2fd62c23252f290df6b4fac15c59cf5974a2b3104fe668391ff4e533a7170f0a036c237196165571dff3e5d5cff075c1d840548eaf2951aa80daf9a0d8fc11bd9ddb621968eb1e0e56af96e0ce90ad018988288610abf9ab2a133c3b738393decacb61beddec77aef21dcb7bda404551fa6c72ee663f6acbb6fae9fca133ecfdf5ce894f010918f62fd4a50faa7bdb7d335a177536473fa982f7f0ba237e305cbe625339cd39b05832b284a271358aa5de9af8fd63279208fd9cf47a4e044a9ff1c8280cc46a0c8c0b77e4427452f63c065f57f01e69e4ee2eedc8eb3a3037b4c6390e83f6c1bbbfd5af9fc5bf0f6793bc5f1b2861c22de5461157d3fed627bf177d65eac2dd35d960ceb3bf4c98a23ad1abf34fa50f261eeb6a4b518bc357fbe8f0c3a33b3e5d2fa599413159974165b0f7f8ad5ff50a9fa05d5dddd7de5531c52d75348ef42c51514062ec04324a04a00599a75bb3295cd5273026f8f0ba32afb981a10565730369fe00deb1a6c75eed641f02e7f4c62a545c5467d93fc7a90408bb09a1100fb5dbb65369724305e3cccf0cfc7e0abc58336a2044ebc6771de89218321dd178cb16b8391e76a6636d8b5b5e364a72ce126a63ce27e39fae3b7b1d7bb96257ced0cf9ecf48cbbc3173d6100cfc99d58f135b27b8e73c1d6346b46696f47b15f83706c9b9e48b0cc3418b488551d0c0a5d1490eea198602ff665c973b792012e5e8bbea94c1d1a94e1462a44658a39f9f91ea7936237e63273b92e28bc968318784cd839b70a8510a10aee7668af7e274edb4e09443b1b1a49ec2966ff647f51876a3d530898692f3301c3dfea6db7d3999984dee628c165079dacc28ced684b12011dff89c80b84a3ed552d9d1877d9e82f85f21a7f5c0b0dabb00d5a5293d76962e3a2224684ef19fe968876a32f2ba8090c5673c55940093bf3ed875e79c0902f7ca4afee588d800a6012828ee078ca2de42f3bc921a752e38ed1a3c12c211c03025ef987828f1a8a7ee0be1e8dd2385dbb99b707ca8aa27325f5f0df5b2cbbee7f0276353178a9690dbebdd3bbabf8b3f0773ed52cb6971b3de82529b9128e883dda15b4f10b8ddf145949ea0c21be385a064e2d61c394fdc8ab11ac2a01b9b19cecbba86749f2d9afad2aa234d2fb672866ec5a0e005d059bd6b6d5cb3925a8d44b65353294550fdddbec1c875ea5e880bb93f5fae420aad7218b1741156aa584bfd2b0b2e512215de1bddcdfc93ac8a5d21845fd8b4332fa8f6051fe49d342c49808b3f373661c2b3be35aa23dd16f37c080a02cd70c6cd6e9d165e6f541bc0f3b16b7eaf98a0a958d6342900e8ee3a27f143ef9fcb77ba37a22d8e511af6a0df21b5636969529247e00230e8ec662c949db8d83fd1f5a162f7bcf1e8830f4c3f130dc3828c76e63f5bdd08a20b0f1918451329da356338b90df9aeb475d6437815ea83b638e4dd0204dcc569b3835c41f594faed4c23eb7cfef6f67fa2eb8244f920af07801f5fd9874ae051b366c2c2b607d7e9bb439421ef5dc02b8426802c7af9d274218118df0f4c3df284eb59775e4c66428f91f82956eee4be5e96392cdd8ad89dc2a4bef3cacc5103b331239e7f7b9e2269e404a197840f5571512025ddd9d559f9531a9623fdf784c24224c09d423ce3d5f90832b9f62ab29a80ec34059e9cf5fd8d04bc05789387f8ec59af564d81cf19637cd217bcb8ea210abe32c4720c39dea") syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140a, 0x1, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000014) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x5) accept(r3, 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f0000000280)=0xfffffffffffffe70) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, 0x0, 0x20000004) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$inet6(0xa, 0x3, 0xff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) splice(r6, 0x0, r7, 0x0, 0x2, 0x2) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmmsg$inet6(r5, &(0x7f0000002bc0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 4.597968838s ago: executing program 4 (id=668): mprotect(&(0x7f00004b5000/0x1000)=nil, 0x1000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f00000005c0), &(0x7f0000000680)=""/151}, 0x20) r3 = accept4(r0, &(0x7f0000000100)=@sco={0x1f, @none}, 0x0, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x3) r4 = syz_open_dev$sg(&(0x7f0000000240), 0xff, 0x1000) ioctl$SG_EMULATED_HOST(r4, 0x2203, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x20049009}, 0x2000c000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="340000001100010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c0000000001406001400350077673200"/28], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) 3.397848239s ago: executing program 4 (id=670): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="856b", 0x2}], 0x1) syz_usb_control_io$uac1(r0, &(0x7f00000013c0)={0x14, &(0x7f0000001280)={0x40, 0x3, 0x7b, {0x7b, 0x24, "d344ce15eab55c934757c04302b09b0e3e0da3e2b73fa7f386570a1fa2624b217885dc5d1fa800306b0d7c2c77497b239d41dd611eaa6f865f791c13899e85e7214eb58b79cf11f6562d8e850f472ba150b13dd01d37d06909c71356d1246d4f33a922f01f9b8de5633974b3fc19f323b26c6b9dc391a92c93"}}, &(0x7f0000001340)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "93cdf6ed60c861af94b25fcaa8810546b720651e17fe33b169eda3c5d3b2f720777c3a3c433c8d2c8bc47da68cc85d3f6d36e6f9a92847e67f63ad42c3ffcee4e5976eac7d992689d08a59d6d7230b5f4c754cf99323e829908a"}}}, &(0x7f00000016c0)={0x44, &(0x7f0000001400)={0x20, 0x1, 0xd4, "6c21efb13637e6e4c249cc5524c296be5128662afd7ed5d62c1543a97ddab37997d775931b589ca23655b9396859a3b71eeefdec69eee99193ce3e2600fd893e92b9339f27d670ead975805dcd45daac2028500e2322782967c070a99d73bf352b8bcd9b33867fabb0ac5146398f30c2f02a4d57dc2b4581f4ce80ea5be78c38296eb692c9f7427bd21a92de09045a4d4ab45ad761872d8e0dc18f76c0a658dede5d7ebc0564a05271963139d23e9abb1ee4ae73b1b6d3459e7adcae135f043348671c330c7dd935373240661c7b860f844d114a"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001580)={0x20, 0x81, 0x1, "92"}, &(0x7f00000015c0)={0x20, 0x82, 0x2, '8%'}, &(0x7f0000001600)={0x20, 0x83, 0x1, "dc"}, &(0x7f0000001640)={0x20, 0x84, 0x4, "6e0ef2bb"}, &(0x7f0000001680)={0x20, 0x85, 0x3, "5f1740"}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000090601010000000098a0535d882bcdda0900020073797a31000000000500010007000000040008809d06be5307e52ff972dc340e686627fbdcd47c336edb12d8d1dd604ecd0110ffb5baba78d5d3900f677dce4d60d7c72c4004daaccdb937a0acf92dc62cfe886851f6f54a31b753393998095b3d4e8187b14ca8493187889b878dbb9fbff39f47f33c8e09f97f9c18d8ccc04d42660d606fbf7c57cdfd2c263553d98a87181aee9e3e91324421c251f31c63494d4b57b14c4c"], 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x28142, 0x8) fcntl$setlease(r3, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x170) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) unshare(0x20000400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x3ff, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x28, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x8007f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4001, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0xfffffffe, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.346329358s ago: executing program 2 (id=671): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x2, 0x3, 0xff) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x802) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02", 0x13, 0x6000000000000000, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a00"], 0x1c}], 0x1}, 0x4000080) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x1000}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r6, 0xff, 0x7, 0x68, 0xe6, 0x97}, &(0x7f0000000140)=0x14) recvmmsg(r2, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x65942126f3d7b6a8, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000e11000/0x2000)=nil) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4000045, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x8, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0xa, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x1ff, 0x4, 0x1, 0xfffffffa, 0x5, 0x3e, 0x8f, 0x200, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x10000000, 0x0, 0x6, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0x2, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0xd, 0x3, 0x3, 0x9, 0x1, 0x8, 0x0, 0x0, 0xd0b8, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffff6, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x203, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xbf, 0xffffffff, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffc, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x19, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xa, 0xaf, 0x8, 0x57b4, 0x226, 0x5, 0x5, 0x8, 0x4, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x57, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.532123789s ago: executing program 1 (id=672): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x1000000, 0x20000801}, 0x4041080) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758", 0xe) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) 2.472469287s ago: executing program 2 (id=673): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000001e65b20d039d6cda2a69ea", @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0d00358f0700000004000000ffffff0f010000f546d049fcd00a4954d4a0792f1e89526f3fa2d4f784ba445133c69d80e8a97fa6647a7074eebedd229bb127e23b3e375f7e42dd3b360fc133b30fdba6901025186102a570738d9d8dfd1de38b5b9051475e08a9249458762ba82f5e1a1212b34b34cdb6ecbb397293592b1ba07d2ab8dcc9d2f9f9d4cac09ca7ea52d88ef5e250b71de92c3fb0646eae2af0f11ff5c070fc616aac28593b5c188369e12e2ce335ea5f5c1ffae4d06cdc678d2fd20faedfd61cfeff62bf0f8e15eaaedb638bf28b7fc5f6ae81dc4deeb2000000000000000000f99626facaa5e41b8c924f3aa521fe8f7e4f6b0dfcaee99feb13bd827e3a115f85c2f680fe76e2de66b0370e9900401a93cca525a64cd4dd62158c8e83e89e42881d50724f1b51d758ebd3992a0509e3e3cece3f472bb367f841ebe72f2f081af7cbb86f4bce85023acaad5637c896bae29f74a186ea3a46b55873e9a3730bd607d89bf0a4c802f498cca01699cd", @ANYRES32=r0], 0x50) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x177) r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x100}, 0x6e) sendmmsg$unix(r5, &(0x7f000000c300)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)="e30b443f", 0x4}], 0x1, &(0x7f0000002cc0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r4, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}], 0xe0, 0x4008800}}, {{&(0x7f0000006200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000007880)=[{&(0x7f0000000c00)}, {&(0x7f0000006280)="78682d3cf1d699e5f2bb9d291ea3fb74ead509f600a6635dfc272c731330025f8553fc0e40aa9ce1dc0605644c1f7e6ad13e57029b240ed6da338c2dd3db9d1986f6b6daa3bf0561aa2c40d3de3b57b6dec2d9e2b986b2ba583b4ac5dae6f34ef0f9ac565e7278b222a8312470266f6cc16c84648daa98319577f9250a2f3eeed05dc456348f9e18e30878b0ff086689b50e42b0a56ccf98e8f6eaf344ccc1fe8acae5d416d607d01eaa38819a81913a43928636ddc9ae3dfc590fc499d12a1bef9f96668051ee18b9e34a47c0f66956f09cf0ca84162fc7c9a391025e4793daa8c7db699cc82f701c50545aefef61b81030ee", 0xf3}, {&(0x7f0000006380)="cd5bcafaca6a10935baecf4bc41adf59405f", 0x12}, {&(0x7f00000063c0)="8f3306ae33735d825334473db8f9f67e762af64250a36cd16e8540f0c78700dadb66d4e17f64469bbdb05d6ee899cae6e065688ff04a9d0361582de94c7d3bb5e074c3016409a766caf8ddf74efbc89da992157a799d0adaae96d1d9227fda99d490efaa5d54c63b86d6d05177b89516f7b45eab29b6810c385b8d4413147cd9eab162f5d38b63c37948f16bbff54af350d3d4c26892c579922b5c7655b58749e9f301d6117ff69f0ab53cbf4785b2d7bdc93c46772e95470275adc902fa674901827fbe4f40", 0xc6}, {&(0x7f00000064c0)="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", 0x1000}, {&(0x7f00000074c0)="a603c2f1c507d73c5aa497073301c6a44e2377928f5f9b88bf254d8c7ffc8ecb9b9a41c49448532af3663c561a9a1b9f42f4e2a0378aac7aaadaafa0847a7dc05d5cd7dc7cc4295d33ada1542f0587037e772171296e1fba9c0d0cb86fa03c0fcd92de4d47f204", 0x67}, {&(0x7f0000007540)="e8ecdd3181037c167b8296735acb2f9e8b3ecb27dcda5c806a2fb3ee75695fe8a250a704d4f493230d3de93d0d9fbf91a7ae21963ac4a46259c9dacff08fda5a152e15dc4a9f11753d7520598a31c3f34148597b2f42e69bd8d8d599e51977aa10e029b0e993a71634321723", 0x6c}, {&(0x7f00000075c0)="63dfe3b328300749fd3b269e92892d855d5425bc7ebaf4847d988c4cb33c30bd441fee1c2ef1aeb804bffc3ae05f8325168d7f04c6728f02fb1ca3297ee3658f8d4fd911f1195c57ea31f92f7d52d46f71a470fa8a196b6b7cceb3d45e7199f80a4c5d094fc36a2785ae1efd351b0f692b4b846deef265c1f9385d7ab4d174b310aa84476fd0d8f7512158ee004ae9b95f4eb31cbec64015640ecb3aebf3fb2e7a550c813caec04f8ca428074e2d92e928e846e25244dc40a5bacfbc543a634b67a112a56134fc1292", 0xc9}, {&(0x7f00000076c0)="3ca4c31653ddbed8e1971e192987b09c1edee41f26e2deb551d70802f3dd6e1f10c6acece9eb005e6a1872a3f3bef49f49a77724e61bdfc9bcca105c12b52aaa8cd6d04bfb9f93045d86ad4a838d21003b1fb722a224ccf4cc7c19aff7eee42037bc3cc132447865826cbddeec70a265e69b6363aae0fa44e1be341c095a9f1804304a4014710f6e4156263bb925c88ed6702a8bf9e21e176a312c491accd97200559f959470072b08f9f9ca433397", 0xaf}, {&(0x7f0000007780)="44e3e456e532af55986984eafe6452f12c194a18dd850e141ffc6ee3b0b78a880a0e07ecceafab8a62da5728a2148e15e7626ad06fa69ddbf0b5312ddcb2b4c8d76c99c86dc05f13a23817813794e6b26e10ecbcd1172d65b373340366fdcef640d1220c4d5f15f065b1f776cfa3a068e3510813c00f3754541e7e7573e27adbf64a7727b6273a4474f20d2271e215b30760c637c2e39db15e3369509e68b72c9561f3a9c12a3e212a0fa34d67f0f1cbf91237d039a83e6b8d8eed6d0f3eaa687f30037a9df395c55359b6c5", 0xcc}], 0xa, &(0x7f0000007940)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000007980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007b00)=[{&(0x7f0000007a00)="b780ba682329cf9f6a6b0a2e68122e095ef77bb278e658c917f6dfa90bfd0085270df1afc8dabf6a08027563502a11cec33103b81e365bb2c5d49b7174fbec665b657fba710440", 0x47}, {&(0x7f0000007a80)="05958cf26648b7b0a020d5290b255606c9bfc2b1ba979c975da61495fcbdf7a3e1c2a67cc10f0cc51e33bd09096c178519addddfc61d78fe6e01d9dc241899c3f070f800db0c7b42e93eb282a2c15c3a549754ea86ced5eb20f41586", 0x5c}], 0x2, &(0x7f0000007c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}], 0x130, 0x45}}, {{0x0, 0x0, &(0x7f0000007f00)=[{&(0x7f0000007e00)="d0d820de0c445c2f13d810e6d1a284e73d3e8582ee6c3a1f9737ee99efcdf57c2190288510cd07c8b1e3b581b6289373a14e13c019d48a9adb972bd299a7544850acf3415a24c40d10508b3bc4e332ca79f0196d1785ff21b09f98df3ef38a5c9f57a6b593d674f070d5994528e657a7c80ac70d3238f999cf2d873c3c4cf8ca434db37a1f34c77b0d8d1681492227835f8139809d", 0x95}, {&(0x7f0000007ec0)}], 0x2, &(0x7f0000007f40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48, 0x44010}}, {{&(0x7f0000007fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a200)=[{&(0x7f0000008040)="ffd4731a83", 0x5}, {&(0x7f0000008080)="189e709754c2a7a537b94cc660ee82e42ea57d2991283b4a0d2849aa9d25377bcd844de695691b21c68de7612324887f80fc57fad348909f0d047155bfd2dcadf2773b7bfe59b7fe77da5320421d7f1b3495a11c37bf1faa20245620fc26940e29b245586f34c575667e48cbe1e877d1ac54ce1014d4d8a9994e814bc6d4c429b26c2889ae6cffbfc603a347cac204d184a6fab1433f8e0ba8f1cee33694242202d42da9d3ac6c3d1edae2ba1351206c4a8cd6f8cc7f07a8e603c75a7a2c7812754a291c16349cb478efa7afeba7ebf1749dcc35", 0xd4}, {&(0x7f0000008180)="4079532994266f8a44a04e965ccae62a5b61496b6e210f873c05f26ea800ea54ff9e6f5d0390cf08266ddbedbe8449", 0x2f}, {&(0x7f00000081c0)="a357d9f1676731ecfaef8357aa7e292816874176296f1c3239beb8ef6c4b4dee3e52291fb888d31ff684bec2dbbc3e821192866fea2519cb3fb2cdcfcbd9", 0x3e}], 0x4, &(0x7f000000a280)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48, 0x40080}}], 0x5, 0x40815) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000c40)={0x1}) r8 = io_uring_setup(0x111b, &(0x7f0000000280)={0x0, 0xb71a, 0x400, 0x1, 0x3d7}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r8, 0x19, &(0x7f0000000380)={0x1, 0x3, 0x3}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x3, 0x0, 0x200000, 0x0, 0xb47, 0x9, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r9, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc080) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f00000003c0)={0x9, @output={0x1000, 0x0, {0xc47, 0x80000000}, 0x4, 0xfffff800}}) r11 = io_uring_setup(0x7538, &(0x7f00000003c0)={0x0, 0xbcda, 0x80, 0x0, 0x46, 0x0, r2}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0xd) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701) ioctl$USBDEVFS_FREE_STREAMS(r12, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200ff03100005000500000002000020d3"]) close_range(r11, 0xffffffffffffffff, 0x0) 1.733325812s ago: executing program 0 (id=674): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x4, 0xbd04, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110201"], 0x7c}}, 0x4004010) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaacaaa18810018001a1f4b6cd872d2de48cb00451f00280067000007019078e000fec0465347b2cc6d067ad7cd40bb000297e2fb9b1d3b7023c025ac1414bb0d0090780006009f00000002000000080000000a"], 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x70bd26, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_simple={0x34, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x7, 0x6, "82afd8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x10000084) r6 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) fsmount(r6, 0x0, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r7 = getpid() sched_setattr(r7, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 935.893282ms ago: executing program 2 (id=675): r0 = syz_open_dev$video4linux(&(0x7f0000000200), 0x1, 0x80280) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0xc41, 0x8, 0x19, 0x6752}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r1, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) 828.343496ms ago: executing program 2 (id=676): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0xfffffedb, 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 717.412887ms ago: executing program 1 (id=677): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x80004, 0x0, 0x0, 0xe, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded105e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba197772fd29f35239d200", "24431a1e77a68e174f000000000000000000e200000000001e00000000000001", [0x0, 0x4000000000000000]}}) prctl$PR_SET_THP_DISABLE(0x44, 0x200000000003) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r3 = socket$inet6(0xa, 0x3, 0xa5) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x3a, 0x1, 0x0, 0x0) r4 = openat(r2, &(0x7f0000000440)='./file1\x00', 0x0, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) readlinkat(r4, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)=""/18, 0x12) 535.796112ms ago: executing program 2 (id=678): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0xb00) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x4, 0x3002, 0x1, 0xc, 0x0, 0x1, 0x4}}) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08030700000004000000000000000600142603600e120800110000810401110016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ed2f31b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 407.622324ms ago: executing program 0 (id=679): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000280)={r2, 0xfff, 0x1, "d6"}, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000a00)=0xfc0d, 0x4) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000500)={@multicast2, @loopback, 0x1}, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x17c, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x2e}}}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000040)={0x70c, r8, 0x1, 0x70bd25, 0x25dfdc02, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x6d6, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xb}, @device_a, @device_a, @from_mac=@broadcast, {0x9, 0x8}}, 0x0, 0x1, 0x2b, @val={0x10, 0x1, 0x89}, [{0xdd, 0xb8, "52a47f10dbbb3f9ac0a4758bb1fe94e40c11ee5660abba978b0786f01747a59f7a7a378dc394eb35bccd4424dc9e5a848c11c03dfb52309121b1ff76f9c9289816187e3ea9c9ec9b881e449460fbcffdf1bbb88520a2581caa4c67ac768b4326c22f042783e9ae8549f7fa90b92b429703b2c30c5a7c3496c2d42bf0f78e09c8f8e38b9b830239217ad635ca925bd656c9f95e124086d5ebbfb798c811e828ded58e75f3e43633a6cd72fb1b2b778177125a6562325b10fb"}, {0xdd, 0xe9, "0eb05cc41751eb3cc7395b66eda5a3f45ec41b3bae4ffce01214de2f9e8d264ca6a910a2b867a07bb2e8702e0412ae8f91f150a8ca6eb47b40464ad3fe8a98442920d4b7a3bf130bd0a1dd239c00ca6cc87b7573116cc72b5588807e069b49c5fd2f0b55412fd20c75c9ee9b27bbffd97106687f3ba6ec817f7509ad2f60761c30b0d013776c836042bccfc9685e6aa07ff9ad99baa309965c240ea3f4f035a6d915a3028a7f5d30335d78e3c2993f6d08dd86796fea6d465175e552bbfd0412f19dd4e4bad9ac6a4e405fb918c2192644fad512f49740322934ff01f67522682f316524abd5bf2c52"}, {0xdd, 0xee, "7b99dd5007a8bfb094e74dc38f5e1d88102fe561f3ed316590f3d4f3ef65f042fbbb1edf8ecbddc5e3e7f09a3571d195149882858c0098121ed5257685a82b29edb4215854f0f54d4c3483a7f64fb6556a0418ad514190e54dfb6dc857b930f49837f144482c1a7a032be6a07020d77835e776868da24356c7f08a4e1e39830eb3d2a960585ee4f25d64366df2aeef03b5e63f899b32dd9709587275408f2a9ffc699f61fe0e84e0cf0859e256abb1197bda9030d51d6972eb5e2219711863a9649866c157d8aa880e9c6db490de180f6fc9202f85508226f4e922fb09e5601a0f884129ee90f85870cb9ae965a1"}, {0xdd, 0x45, "cac190200e226e280d167fdbf2219b8a15bab7c82a016316678e454df58f8fb5c70189c793ebe673c3eb7547780da2d2082a761b1e2fc96842b6e04d6b9a8704d0e70ed71c"}, {0xdd, 0xf0, "c6738c1e38abf20feace4c18e8d7efdc183337b60b7d16e8a44ce9693c18d322dba9778b2d825d22dc0033d9c9c307f7a760d0fab3c92cd8b8d1fff4a4f131cbee68add9cc87c41dd8dcd54aa9ddf2a5c4d09d63fc68219cda1e500a69019c59fedfe85563dcf4156475d17becdaa705bed4b2bc8a63292a94aec981d2c5279fe2142a8333ce4d19464658ab4a917bdeb28978a1f2966944ad5d63f1632decb8e1a9e27d7f7a40ca6fa39235eecfbecce06ba2701393907b86a571d9bfa46fc5f42bdca6346ad94f466a4189cda7dc1132a372a3ea96168bc0bb94cc6c2d8ce27497c1a2c5d85129f43509674e0c5bd1"}, {0xdd, 0xb3, "ea2ccbc89fd61b1c13ef03e9a214ad0420ad25b2491ef72c08ad2ec93dfff99dc11d3aa2683253fe7e7d0c83c49b45866e2916f9afc6f5549228edadbb709e38d5a8b5938c083df3210a2e54fbcb9a5035eaf5c5e7f7985fcbd26ad419bb899e1fab619b5d9f5d68d5e3bbfcc7cb3b55468e2656d5be327240ffb64ed0dda5d5370cb846f82e12c6130cd127a373862b6cec7ffb611bd9f6f59c4dc8538583844b5bab033590ccd4faefa1586b6901a7b22501"}, {0xdd, 0xf0, "0db6c2d5558a50ee4e9b916d822f260af93ec41385d9173f55ab319bb28ff91be7a47f5d9f74781ed68187584ee6b3df76405ff340933b344b158b0793faaff181136c76f53c284f2828a0bad4481b4923ba59ea740045f3dc14224b46da51e10009ad0b4873b53dfe12a6919e017d0baf173b2b1b57d6537ed58fe3b8c4b723e91c297fe022ea53e1927bfdb8cbc1b04fbde77d0e6171a7e5e6b1e24b889bb77e581250d49797b1ace8bbcf71fa96cf056f7ca078299b8c48a7d6ca9e71862cec7650add29814fb02f161c4a50ffb22a79caf59d3d9297a543003b969db23f961eb8fd614c9cf034381de361957b432"}, {0xdd, 0x6d, "e6cd18b7bb335c51d220c9dc1165167dd8e1461d3b0664a41b479e255a3f181fc371af882fd7a4ff6d6197949bdb742b9fba8b98ebf2123694c4dd24a8e4697645853f578d4959b556a6682cfa38228bf06e1f45c4aded082271d7a80d5572769a62ad1dd132a5a71afa9fb7be"}, {0xdd, 0xaa, "29a840e0b0964d27b6dbc260f753d9c9527b0d67e019a547116aee47e84d39e5e3082d897ac622bf26f9448473b7b589560cc29782148358544fe2bff6bab70bf3d9e0427be4d0127cabea5fb7d39148153976ab44b6cd95e082bb198dfb0e1caa69b528942909c5116c06a3da2a6af35d3097345981711b77bd55d5f07739c49d068e49c7b22ad9b84cf6e360ec82f6be2b0f956a54796bd4fc014f4c91e79f06bbe7d440595207b26e"}, {0xdd, 0x1f, "7a3bf939d4a91158904cf3ca711d5c58cd8017d512428d2e050eb0b8b45ac5"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70c}, 0x1, 0x0, 0x0, 0x40051}, 0x48000) 289.97525ms ago: executing program 2 (id=680): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) syz_open_procfs$userns(r4, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 283.987748ms ago: executing program 4 (id=681): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x4, 0xfff, 0x5, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x113c}}, 0x8004) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) r7 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r7) r8 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$kcm(0x29, 0x7, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, 0x0, &(0x7f0000000600)) recvmsg$kcm(r10, &(0x7f0000000400)={&(0x7f0000000240)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/4, 0x4}, {&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000640)=""/23, 0x17}], 0x4}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 192.346735ms ago: executing program 1 (id=682): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f000046c000/0x1000)=nil, 0x1000) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x20, 0x1, 0x0, 0x105, {{0x33, 0x4, 0x3, 0x3, 0xcc, 0x6bff, 0x0, 0x3, 0x29, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x97, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb97}, {@broadcast, 0x1ff}]}, @ssrr={0x89, 0x27, 0x27, [@multicast1, @empty, @private=0xa010102, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x10}, @remote, @multicast1]}, @lsrr={0x83, 0xb, 0xb5, [@loopback, @private=0xa010101]}, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x33, [@empty, @broadcast, @local, @loopback, @empty]}, @timestamp_addr={0x44, 0x24, 0x9a, 0x1, 0x5, [{@loopback, 0x6a7e}, {@remote, 0x9}, {@empty, 0x96b}, {@private=0xa010102, 0x1}]}, @generic={0x7, 0x4, "c33c"}, @timestamp_addr={0x44, 0x24, 0x14, 0x1, 0xa, [{@broadcast, 0xa4}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x2}, {@empty, 0x7}, {@private=0xa010100, 0x7ff}]}]}}}}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES64=0x0, @ANYBLOB="0500"], 0x20) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 190.264447ms ago: executing program 3 (id=683): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x2, 0x3, 0xff) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x802) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02", 0x13, 0x6000000000000000, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a00"], 0x1c}], 0x1}, 0x4000080) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x1000}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r6, 0xff, 0x7, 0x68, 0xe6, 0x97}, &(0x7f0000000140)=0x14) recvmmsg(r2, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x65942126f3d7b6a8, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000e11000/0x2000)=nil) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4000045, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x8, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0xa, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x1ff, 0x4, 0x1, 0xfffffffa, 0x5, 0x3e, 0x8f, 0x200, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x10000000, 0x0, 0x6, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0x2, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0xd, 0x3, 0x3, 0x9, 0x1, 0x8, 0x0, 0x0, 0xd0b8, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffff6, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x203, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xbf, 0xffffffff, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffc, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x19, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xa, 0xaf, 0x8, 0x57b4, 0x226, 0x5, 0x5, 0x8, 0x4, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x57, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=684): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) preadv(r0, &(0x7f0000000140), 0x0, 0x0, 0x72c085ae) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x510) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000001c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xb, 0x3a, '\\x0\x01\xe29\x00\x00\x00\x00\x00\x00', 0x3a, ':dev/bus/usbF30#/00#\x00', 0x3a, './file0'}, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r8, 0xae80, 0x0) kernel console output (not intermixed with test programs): 0000 [ 132.925950][ T6779] vivid-007: ================== END STATUS ================== [ 133.103367][ T6775] vivid-000: reconnect [ 133.117142][ T9] usb 3-1: USB disconnect, device number 5 [ 133.421095][ T6792] loop7: detected capacity change from 0 to 1 [ 133.460981][ T5837] Dev loop7: unable to read RDB block 1 [ 133.467195][ T5837] loop7: unable to read partition table [ 133.473229][ T5837] loop7: partition table beyond EOD, truncated [ 133.482695][ T6793] Dev loop7: unable to read RDB block 1 [ 133.555200][ T6793] loop7: unable to read partition table [ 133.561332][ T6793] loop7: partition table beyond EOD, truncated [ 133.591316][ T6793] loop_reread_partitions: partition scan of loop7 (ݷU@:B${Wɴ) failed (rc=-5) [ 133.625756][ T6102] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 133.806223][ T6102] usb 2-1: Using ep0 maxpacket: 16 [ 133.827834][ T6796] netlink: 140 bytes leftover after parsing attributes in process `syz.3.256'. [ 133.889041][ T6102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.935753][ T6102] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 133.963370][ T6102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.993081][ T6102] usb 2-1: config 0 descriptor?? [ 134.000682][ T30] audit: type=1326 audit(1768392287.419:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d658f749 code=0x7ffc0000 [ 134.125643][ T30] audit: type=1326 audit(1768392287.419:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d658f749 code=0x7ffc0000 [ 134.239097][ T30] audit: type=1326 audit(1768392287.429:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4d658f749 code=0x7ffc0000 [ 134.272682][ T6808] program syz.0.258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.305997][ T5879] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.328391][ T30] audit: type=1326 audit(1768392287.429:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d658f749 code=0x7ffc0000 [ 134.444263][ T6811] FAULT_INJECTION: forcing a failure. [ 134.444263][ T6811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.457478][ T6811] CPU: 1 UID: 0 PID: 6811 Comm: syz.3.261 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.457506][ T6811] Tainted: [L]=SOFTLOCKUP [ 134.457512][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.457522][ T6811] Call Trace: [ 134.457531][ T6811] [ 134.457540][ T6811] dump_stack_lvl+0xe8/0x150 [ 134.457565][ T6811] should_fail_ex+0x414/0x560 [ 134.457585][ T6811] _copy_to_user+0x31/0xb0 [ 134.457598][ T6811] simple_read_from_buffer+0xe1/0x170 [ 134.457612][ T6811] proc_fail_nth_read+0x1b3/0x220 [ 134.457625][ T6811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.457645][ T6811] ? rw_verify_area+0x2a6/0x4d0 [ 134.457669][ T6811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.457688][ T6811] vfs_read+0x200/0xa30 [ 134.457703][ T6811] ? fdget_pos+0x247/0x320 [ 134.457722][ T6811] ? __pfx___mutex_lock+0x10/0x10 [ 134.457733][ T6811] ? __pfx_vfs_read+0x10/0x10 [ 134.457743][ T6811] ? __fget_files+0x2a/0x420 [ 134.457756][ T6811] ? __fget_files+0x3a0/0x420 [ 134.457766][ T6811] ? __fget_files+0x2a/0x420 [ 134.457787][ T6811] ksys_read+0x145/0x250 [ 134.457806][ T6811] ? __pfx_ksys_read+0x10/0x10 [ 134.457821][ T6811] ? __pfx_seccomp_notify_ioctl+0x10/0x10 [ 134.457849][ T6811] do_syscall_64+0xec/0xf80 [ 134.457867][ T6811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.457875][ T6811] ? trace_irq_disable+0x37/0x100 [ 134.457887][ T6811] ? clear_bhb_loop+0x60/0xb0 [ 134.457898][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.457907][ T6811] RIP: 0033:0x7f1b0138e15c [ 134.457917][ T6811] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 134.457926][ T6811] RSP: 002b:00007f1b022b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.457945][ T6811] RAX: ffffffffffffffda RBX: 00007f1b015e6090 RCX: 00007f1b0138e15c [ 134.457958][ T6811] RDX: 000000000000000f RSI: 00007f1b022b50a0 RDI: 0000000000000005 [ 134.457968][ T6811] RBP: 00007f1b022b5090 R08: 0000000000000000 R09: 0000000000000000 [ 134.457979][ T6811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.457989][ T6811] R13: 00007f1b015e6128 R14: 00007f1b015e6090 R15: 00007f1b0170fa28 [ 134.458016][ T6811] [ 134.596751][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 134.736203][ T30] audit: type=1326 audit(1768392287.429:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d658f749 code=0x7ffc0000 [ 134.781572][ T6808] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 134.805274][ T30] audit: type=1326 audit(1768392287.459:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4d658f749 code=0x7ffc0000 [ 134.876873][ T30] audit: type=1326 audit(1768392287.459:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d658f749 code=0x7ffc0000 [ 134.943755][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.268407][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.278784][ T30] audit: type=1326 audit(1768392287.459:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4d658f749 code=0x7ffc0000 [ 135.340034][ T30] audit: type=1326 audit(1768392287.459:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d658f749 code=0x7ffc0000 [ 135.473979][ T5879] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 135.593057][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.594173][ T30] audit: type=1326 audit(1768392287.459:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc4d658f749 code=0x7ffc0000 [ 135.691845][ T5879] usb 3-1: config 0 descriptor?? [ 136.123265][ T5879] savu 0003:1E7D:2D5A.0005: unbalanced collection at end of report description [ 136.175926][ T5879] savu 0003:1E7D:2D5A.0005: parse failed [ 136.278529][ T5879] savu 0003:1E7D:2D5A.0005: probe with driver savu failed with error -22 [ 136.318450][ T6804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.259'. [ 136.458718][ T6102] usbhid 2-1:0.0: can't add hid device: -71 [ 136.484461][ T6102] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 136.525253][ T6102] usb 2-1: USB disconnect, device number 18 [ 136.643059][ T6825] syzkaller1: entered promiscuous mode [ 136.661506][ T6825] syzkaller1: entered allmulticast mode [ 136.946238][ T6832] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 137.042157][ T6836] netlink: 88 bytes leftover after parsing attributes in process `syz.0.266'. [ 137.274613][ T6838] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 137.512593][ T6850] netlink: 140 bytes leftover after parsing attributes in process `syz.0.270'. [ 138.039568][ T6856] random: crng reseeded on system resumption [ 138.068867][ T6102] usb 3-1: USB disconnect, device number 6 [ 138.257250][ T5920] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 138.425119][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 138.516237][ T5920] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 138.526684][ T5920] usb 1-1: config 4 has no interface number 0 [ 138.537444][ T5920] usb 1-1: config 4 interface 51 has no altsetting 0 [ 138.552390][ T5920] usb 1-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b [ 138.574290][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.615745][ T5920] usb 1-1: Product: syz [ 138.619950][ T5920] usb 1-1: Manufacturer: syz [ 138.626695][ T5920] usb 1-1: SerialNumber: syz [ 138.757062][ T5920] upd78f0730 1-1:4.51: upd78f0730 converter detected [ 138.790889][ T5920] usb 1-1: upd78f0730 converter now attached to ttyUSB0 [ 138.827037][ T6878] FAULT_INJECTION: forcing a failure. [ 138.827037][ T6878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.904773][ T6878] CPU: 0 UID: 0 PID: 6878 Comm: syz.2.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.904801][ T6878] Tainted: [L]=SOFTLOCKUP [ 138.904808][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.904817][ T6878] Call Trace: [ 138.904825][ T6878] [ 138.904832][ T6878] dump_stack_lvl+0xe8/0x150 [ 138.904859][ T6878] should_fail_ex+0x414/0x560 [ 138.904888][ T6878] _copy_from_user+0x2d/0xb0 [ 138.904916][ T6878] do_sys_poll+0x242/0x1070 [ 138.904945][ T6878] ? __lock_acquire+0x6b6/0x2cf0 [ 138.904965][ T6878] ? __pfx_do_sys_poll+0x10/0x10 [ 138.904988][ T6878] ? aa_file_perm+0x139/0x1530 [ 138.905096][ T6878] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.905115][ T6878] ? set_user_sigmask+0xc1/0x250 [ 138.905138][ T6878] ? __pfx_set_user_sigmask+0x10/0x10 [ 138.905156][ T6878] ? __fget_files+0x3a0/0x420 [ 138.905183][ T6878] __se_sys_ppoll+0x1ff/0x260 [ 138.905204][ T6878] ? __pfx___se_sys_ppoll+0x10/0x10 [ 138.905222][ T6878] ? __pfx_ksys_write+0x10/0x10 [ 138.905244][ T6878] ? __x64_sys_ppoll+0x20/0xc0 [ 138.905265][ T6878] do_syscall_64+0xec/0xf80 [ 138.905282][ T6878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.905298][ T6878] ? trace_irq_disable+0x37/0x100 [ 138.905316][ T6878] ? clear_bhb_loop+0x60/0xb0 [ 138.905336][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.905352][ T6878] RIP: 0033:0x7f13ea38f749 [ 138.905368][ T6878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.905381][ T6878] RSP: 002b:00007f13eb1e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 138.905400][ T6878] RAX: ffffffffffffffda RBX: 00007f13ea5e6180 RCX: 00007f13ea38f749 [ 138.905413][ T6878] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 138.905424][ T6878] RBP: 00007f13eb1e6090 R08: 0000000000000000 R09: 0000000000000000 [ 138.905435][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.905445][ T6878] R13: 00007f13ea5e6218 R14: 00007f13ea5e6180 R15: 00007f13ea70fa28 [ 138.905473][ T6878] [ 139.302368][ T6858] FAULT_INJECTION: forcing a failure. [ 139.302368][ T6858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.352692][ T6858] CPU: 1 UID: 0 PID: 6858 Comm: syz.0.272 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.352720][ T6858] Tainted: [L]=SOFTLOCKUP [ 139.352726][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.352735][ T6858] Call Trace: [ 139.352743][ T6858] [ 139.352751][ T6858] dump_stack_lvl+0xe8/0x150 [ 139.352772][ T6858] should_fail_ex+0x414/0x560 [ 139.352802][ T6858] _copy_to_user+0x31/0xb0 [ 139.352825][ T6858] simple_read_from_buffer+0xe1/0x170 [ 139.352851][ T6858] proc_fail_nth_read+0x1b3/0x220 [ 139.352869][ T6858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.352896][ T6858] ? rw_verify_area+0x2a6/0x4d0 [ 139.352921][ T6858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.352941][ T6858] vfs_read+0x200/0xa30 [ 139.352956][ T6858] ? fdget_pos+0x247/0x320 [ 139.352979][ T6858] ? __pfx___mutex_lock+0x10/0x10 [ 139.353005][ T6858] ? __pfx_vfs_read+0x10/0x10 [ 139.353023][ T6858] ? __fget_files+0x2a/0x420 [ 139.353046][ T6858] ? __fget_files+0x3a0/0x420 [ 139.353058][ T6858] ? __fget_files+0x2a/0x420 [ 139.353073][ T6858] ksys_read+0x145/0x250 [ 139.353083][ T6858] ? __pfx_ksys_read+0x10/0x10 [ 139.353097][ T6858] do_syscall_64+0xec/0xf80 [ 139.353114][ T6858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.353122][ T6858] ? trace_irq_disable+0x37/0x100 [ 139.353134][ T6858] ? clear_bhb_loop+0x60/0xb0 [ 139.353148][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.353157][ T6858] RIP: 0033:0x7fc4d658e15c [ 139.353167][ T6858] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 139.353175][ T6858] RSP: 002b:00007fc4d73b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.353186][ T6858] RAX: ffffffffffffffda RBX: 00007fc4d67e5fa0 RCX: 00007fc4d658e15c [ 139.353193][ T6858] RDX: 000000000000000f RSI: 00007fc4d73b10a0 RDI: 0000000000000009 [ 139.353199][ T6858] RBP: 00007fc4d73b1090 R08: 0000000000000000 R09: 0000000000000000 [ 139.353205][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.353211][ T6858] R13: 00007fc4d67e6038 R14: 00007fc4d67e5fa0 R15: 00007fc4d690fa28 [ 139.353226][ T6858] [ 139.701474][ T5879] usb 1-1: USB disconnect, device number 5 [ 139.747586][ T5879] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 139.824384][ T5879] upd78f0730 1-1:4.51: device disconnected [ 140.140441][ T6891] netlink: 140 bytes leftover after parsing attributes in process `syz.2.282'. [ 140.676946][ T6902] vivid-007: ================= START STATUS ================= [ 140.684694][ T6902] vivid-007: Enable Output Cropping: true [ 140.690532][ T6902] vivid-007: Enable Output Composing: true [ 140.696450][ T6902] vivid-007: Enable Output Scaler: true [ 140.702674][ T6902] vivid-007: Tx RGB Quantization Range: Automatic [ 140.709218][ T6902] vivid-007: Transmit Mode: HDMI [ 140.714243][ T6902] vivid-007: Hotplug Present: 0x00000000 [ 140.720102][ T6902] vivid-007: RxSense Present: 0x00000000 [ 140.726863][ T6902] vivid-007: EDID Present: 0x00000000 [ 140.784622][ T6904] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 140.819021][ T6902] vivid-007: ================== END STATUS ================== [ 141.089860][ T6909] netlink: 84 bytes leftover after parsing attributes in process `syz.4.286'. [ 141.961463][ T6914] FAULT_INJECTION: forcing a failure. [ 141.961463][ T6914] name failslab, interval 1, probability 0, space 0, times 0 [ 142.036481][ T6914] CPU: 0 UID: 0 PID: 6914 Comm: syz.4.288 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.036499][ T6914] Tainted: [L]=SOFTLOCKUP [ 142.036503][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.036508][ T6914] Call Trace: [ 142.036513][ T6914] [ 142.036518][ T6914] dump_stack_lvl+0xe8/0x150 [ 142.036535][ T6914] should_fail_ex+0x414/0x560 [ 142.036553][ T6914] should_failslab+0xa8/0x100 [ 142.036566][ T6914] kmem_cache_alloc_noprof+0x88/0x710 [ 142.036581][ T6914] ? skb_clone+0x212/0x3a0 [ 142.036596][ T6914] skb_clone+0x212/0x3a0 [ 142.036609][ T6914] __netlink_deliver_tap+0x404/0x850 [ 142.036628][ T6914] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.036641][ T6914] netlink_deliver_tap+0x19c/0x1b0 [ 142.036662][ T6914] netlink_sendskb+0x68/0x140 [ 142.036674][ T6914] netlink_unicast+0x397/0x9e0 [ 142.036684][ T6914] ? __asan_memcpy+0x40/0x70 [ 142.036701][ T6914] ? __pfx_netlink_unicast+0x10/0x10 [ 142.036716][ T6914] netlink_rcv_skb+0x28c/0x470 [ 142.036729][ T6914] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.036741][ T6914] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.036758][ T6914] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.036773][ T6914] netlink_unicast+0x82f/0x9e0 [ 142.036788][ T6914] ? __pfx_netlink_unicast+0x10/0x10 [ 142.036798][ T6914] ? __alloc_skb+0x198/0x3a0 [ 142.036808][ T6914] ? netlink_sendmsg+0x642/0xb30 [ 142.036819][ T6914] ? skb_put+0x11b/0x210 [ 142.036831][ T6914] netlink_sendmsg+0x805/0xb30 [ 142.036847][ T6914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.036860][ T6914] ? aa_sock_msg_perm+0xf1/0x1b0 [ 142.036874][ T6914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.036883][ T6914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.036895][ T6914] __sock_sendmsg+0x21c/0x270 [ 142.036914][ T6914] ____sys_sendmsg+0x52d/0x820 [ 142.036928][ T6914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.036943][ T6914] ? import_iovec+0x74/0xa0 [ 142.036957][ T6914] ___sys_sendmsg+0x21f/0x2a0 [ 142.036969][ T6914] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.036979][ T6914] ? __lock_acquire+0x6b6/0x2cf0 [ 142.036991][ T6914] ? kstrtouint+0x6e/0xe0 [ 142.037024][ T6914] __sys_sendmmsg+0x227/0x430 [ 142.037039][ T6914] ? __pfx___sys_sendmmsg+0x10/0x10 [ 142.037049][ T6914] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 142.037072][ T6914] ? ksys_write+0x22a/0x250 [ 142.037082][ T6914] ? __pfx_ksys_write+0x10/0x10 [ 142.037094][ T6914] __x64_sys_sendmmsg+0xa0/0xc0 [ 142.037107][ T6914] do_syscall_64+0xec/0xf80 [ 142.037117][ T6914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.037126][ T6914] ? trace_irq_disable+0x37/0x100 [ 142.037138][ T6914] ? clear_bhb_loop+0x60/0xb0 [ 142.037149][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.037158][ T6914] RIP: 0033:0x7feac858f749 [ 142.037167][ T6914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.037175][ T6914] RSP: 002b:00007feac93c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.037187][ T6914] RAX: ffffffffffffffda RBX: 00007feac87e5fa0 RCX: 00007feac858f749 [ 142.037194][ T6914] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 000000000000000d [ 142.037200][ T6914] RBP: 00007feac93c6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.037206][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.037212][ T6914] R13: 00007feac87e6038 R14: 00007feac87e5fa0 R15: 00007feac890fa28 [ 142.037227][ T6914] [ 143.893373][ T6944] netlink: 140 bytes leftover after parsing attributes in process `syz.4.295'. [ 143.992230][ T6949] FAULT_INJECTION: forcing a failure. [ 143.992230][ T6949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.032061][ T6949] CPU: 0 UID: 0 PID: 6949 Comm: syz.4.296 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.032091][ T6949] Tainted: [L]=SOFTLOCKUP [ 144.032097][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.032108][ T6949] Call Trace: [ 144.032115][ T6949] [ 144.032123][ T6949] dump_stack_lvl+0xe8/0x150 [ 144.032150][ T6949] should_fail_ex+0x414/0x560 [ 144.032180][ T6949] _copy_to_user+0x31/0xb0 [ 144.032203][ T6949] simple_read_from_buffer+0xe1/0x170 [ 144.032229][ T6949] proc_fail_nth_read+0x1b3/0x220 [ 144.032251][ T6949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.032275][ T6949] ? rw_verify_area+0x2a6/0x4d0 [ 144.032299][ T6949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.032318][ T6949] vfs_read+0x200/0xa30 [ 144.032334][ T6949] ? fdget_pos+0x247/0x320 [ 144.032364][ T6949] ? __pfx___mutex_lock+0x10/0x10 [ 144.032384][ T6949] ? __pfx_vfs_read+0x10/0x10 [ 144.032402][ T6949] ? __fget_files+0x2a/0x420 [ 144.032427][ T6949] ? __fget_files+0x3a0/0x420 [ 144.032446][ T6949] ? __fget_files+0x2a/0x420 [ 144.032474][ T6949] ksys_read+0x145/0x250 [ 144.032489][ T6949] ? __fget_files+0x3a0/0x420 [ 144.032510][ T6949] ? __pfx_ksys_read+0x10/0x10 [ 144.032526][ T6949] ? __pfx_sg_ioctl+0x10/0x10 [ 144.032553][ T6949] do_syscall_64+0xec/0xf80 [ 144.032572][ T6949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.032588][ T6949] ? trace_irq_disable+0x37/0x100 [ 144.032607][ T6949] ? clear_bhb_loop+0x60/0xb0 [ 144.032628][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.032645][ T6949] RIP: 0033:0x7feac858e15c [ 144.032662][ T6949] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.032676][ T6949] RSP: 002b:00007feac93c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.032696][ T6949] RAX: ffffffffffffffda RBX: 00007feac87e5fa0 RCX: 00007feac858e15c [ 144.032709][ T6949] RDX: 000000000000000f RSI: 00007feac93c60a0 RDI: 0000000000000004 [ 144.032720][ T6949] RBP: 00007feac93c6090 R08: 0000000000000000 R09: 0000000000000000 [ 144.032732][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.032743][ T6949] R13: 00007feac87e6038 R14: 00007feac87e5fa0 R15: 00007feac890fa28 [ 144.032772][ T6949] [ 144.785210][ T911] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 144.946421][ T911] usb 5-1: Using ep0 maxpacket: 32 [ 144.954160][ T911] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.001655][ T911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.020533][ T911] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 145.031763][ T6964] FAULT_INJECTION: forcing a failure. [ 145.031763][ T6964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.045096][ T911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.047504][ T911] usb 5-1: config 0 descriptor?? [ 145.085177][ T6964] CPU: 1 UID: 0 PID: 6964 Comm: syz.0.303 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.085203][ T6964] Tainted: [L]=SOFTLOCKUP [ 145.085209][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.085218][ T6964] Call Trace: [ 145.085225][ T6964] [ 145.085233][ T6964] dump_stack_lvl+0xe8/0x150 [ 145.085258][ T6964] should_fail_ex+0x414/0x560 [ 145.085288][ T6964] _copy_to_user+0x31/0xb0 [ 145.085312][ T6964] simple_read_from_buffer+0xe1/0x170 [ 145.085337][ T6964] proc_fail_nth_read+0x1b3/0x220 [ 145.085359][ T6964] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.085380][ T6964] ? rw_verify_area+0x2a6/0x4d0 [ 145.085404][ T6964] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.085424][ T6964] vfs_read+0x200/0xa30 [ 145.085439][ T6964] ? fdget_pos+0x247/0x320 [ 145.085463][ T6964] ? __pfx___mutex_lock+0x10/0x10 [ 145.085484][ T6964] ? __pfx_vfs_read+0x10/0x10 [ 145.085511][ T6964] ? __fget_files+0x2a/0x420 [ 145.085536][ T6964] ? __fget_files+0x3a0/0x420 [ 145.085554][ T6964] ? __fget_files+0x2a/0x420 [ 145.085582][ T6964] ksys_read+0x145/0x250 [ 145.085598][ T6964] ? __fget_files+0x3a0/0x420 [ 145.085618][ T6964] ? __pfx_ksys_read+0x10/0x10 [ 145.085634][ T6964] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 145.085665][ T6964] do_syscall_64+0xec/0xf80 [ 145.085683][ T6964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.085700][ T6964] ? clear_bhb_loop+0x60/0xb0 [ 145.085721][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.085737][ T6964] RIP: 0033:0x7fc4d658e15c [ 145.085753][ T6964] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.085768][ T6964] RSP: 002b:00007fc4d73b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.085788][ T6964] RAX: ffffffffffffffda RBX: 00007fc4d67e5fa0 RCX: 00007fc4d658e15c [ 145.085801][ T6964] RDX: 000000000000000f RSI: 00007fc4d73b10a0 RDI: 0000000000000007 [ 145.085813][ T6964] RBP: 00007fc4d73b1090 R08: 0000000000000000 R09: 0000000000000000 [ 145.085824][ T6964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.085835][ T6964] R13: 00007fc4d67e6038 R14: 00007fc4d67e5fa0 R15: 00007fc4d690fa28 [ 145.085866][ T6964] [ 145.644572][ T6975] fuse: Bad value for 'fd' [ 145.658615][ T6975] netlink: 40 bytes leftover after parsing attributes in process `syz.4.297'. [ 145.749859][ T6974] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 146.035236][ T6962] vivid-007: ================= START STATUS ================= [ 146.042962][ T6962] vivid-007: Enable Output Cropping: true [ 146.048880][ T6962] vivid-007: Enable Output Composing: true [ 146.054773][ T6962] vivid-007: Enable Output Scaler: true [ 146.060520][ T6962] vivid-007: Tx RGB Quantization Range: Automatic [ 146.070788][ T6962] vivid-007: Transmit Mode: HDMI [ 146.076430][ T6962] vivid-007: Hotplug Present: 0x00000000 [ 146.082182][ T6962] vivid-007: RxSense Present: 0x00000000 [ 146.087939][ T6962] vivid-007: EDID Present: 0x00000000 [ 146.094203][ T6962] vivid-007: ================== END STATUS ================== [ 146.153198][ T6981] netlink: 140 bytes leftover after parsing attributes in process `syz.0.306'. [ 148.093420][ T7006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.312'. [ 148.166151][ T7007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.309'. [ 148.281095][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 148.281106][ T30] audit: type=1326 audit(1768392301.699:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.1.312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ca2b8f749 code=0x0 [ 148.446425][ T911] usbhid 5-1:0.0: can't add hid device: -71 [ 148.469646][ T911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 148.543214][ T911] usb 5-1: USB disconnect, device number 9 [ 149.005068][ T911] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 149.169066][ T7021] netlink: 140 bytes leftover after parsing attributes in process `syz.0.317'. [ 149.186768][ T911] usb 5-1: Using ep0 maxpacket: 16 [ 149.206248][ T911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.225171][ T911] usb 5-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 149.255109][ T911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.300650][ T911] usb 5-1: config 0 descriptor?? [ 149.784421][ T7040] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 149.824313][ T911] apple 0003:05AC:026C.0006: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.4-1/input0 [ 150.985070][ T911] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 151.145126][ T911] usb 4-1: Using ep0 maxpacket: 16 [ 151.211273][ T911] usb 4-1: config 0 has no interfaces? [ 151.249199][ T911] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 151.259025][ T911] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 151.267462][ T911] usb 4-1: Manufacturer: syz [ 151.276421][ T911] usb 4-1: config 0 descriptor?? [ 151.658105][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.328'. [ 151.746091][ T6102] usb 5-1: USB disconnect, device number 10 [ 151.992649][ T7071] netlink: 140 bytes leftover after parsing attributes in process `syz.4.329'. [ 152.302321][ T7076] netlink: 136 bytes leftover after parsing attributes in process `syz.4.330'. [ 152.838697][ T7093] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 152.857815][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 152.875131][ T30] audit: type=1400 audit(1768392306.289:194): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="s" pid=7083 comm="syz.2.334" [ 153.100849][ T7098] nft_compat: unsupported protocol 129 [ 153.636935][ T5920] usb 4-1: USB disconnect, device number 10 [ 153.815258][ T7104] netlink: 140 bytes leftover after parsing attributes in process `syz.3.340'. [ 154.350511][ T7120] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 154.357256][ T7120] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 154.396931][ T7120] vhci_hcd vhci_hcd.0: Device attached [ 154.415114][ T6102] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 154.575191][ T6102] usb 3-1: Using ep0 maxpacket: 32 [ 154.588455][ T6102] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 154.598870][ T6102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.641124][ T7121] vhci_hcd: connection closed [ 154.642592][ T6102] usb 3-1: Product: syz [ 154.643505][ T1012] vhci_hcd vhci_hcd.1: stop threads [ 154.647951][ T6102] usb 3-1: Manufacturer: syz [ 154.652494][ T1012] vhci_hcd vhci_hcd.1: release socket [ 154.683821][ T6102] usb 3-1: SerialNumber: syz [ 154.695381][ T5879] usb 36-1: SetAddress Request (2) to port 0 [ 154.701914][ T5879] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 154.719432][ T1012] vhci_hcd vhci_hcd.1: disconnect device [ 154.736613][ T6102] usb 3-1: config 0 descriptor?? [ 154.792101][ T6102] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 155.192328][ T6102] uvcvideo 3-1:0.0: Found UVC 0.00 device syz (0d49:7000) [ 155.219808][ T6102] uvcvideo 3-1:0.0: No valid video chain found. [ 155.532069][ T7135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.581443][ T7133] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 155.654178][ T7137] gretap1: entered promiscuous mode [ 155.763235][ T7137] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 155.855160][ T6144] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 155.931870][ T7137] netlink: 56 bytes leftover after parsing attributes in process `syz.4.347'. [ 156.020092][ T6144] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 156.425232][ T6102] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 156.504789][ T30] audit: type=1400 audit(1768392309.919:195): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="s" pid=7147 comm="syz.4.352" [ 156.529151][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 156.587727][ T6102] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.598685][ T6102] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 156.613892][ T6102] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 156.623480][ T6102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.641854][ T6102] usb 4-1: config 0 descriptor?? [ 156.656137][ T6102] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 156.663266][ T6102] dvb-usb: bulk message failed: -22 (3/0) [ 156.681221][ T6102] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 156.690956][ T6102] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 156.700271][ T6102] usb 4-1: media controller created [ 156.708620][ T6102] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.763094][ T6102] dvb-usb: bulk message failed: -22 (6/0) [ 156.770184][ T6102] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 156.795899][ T6102] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 156.812001][ T6102] dvb-usb: schedule remote query interval to 150 msecs. [ 156.820296][ T6102] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 156.977385][ T6102] dvb-usb: bulk message failed: -22 (1/0) [ 156.995094][ T6102] dvb-usb: error while querying for an remote control event. [ 157.064162][ T6102] usb 3-1: USB disconnect, device number 7 [ 157.162906][ T5920] usb 4-1: USB disconnect, device number 11 [ 157.196797][ T5920] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 157.213230][ T7162] syzkaller0: entered promiscuous mode [ 157.221246][ T7162] syzkaller0: entered allmulticast mode [ 157.239579][ T7162] 0: reclassify loop, rule prio 0, protocol 800 [ 157.275916][ T7164] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 158.182101][ T7178] netlink: 64 bytes leftover after parsing attributes in process `syz.4.359'. [ 158.569679][ T5920] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 158.766506][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 158.777276][ T5920] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 158.846346][ T7194] picdev_read: 77 callbacks suppressed [ 158.846425][ T7194] kvm: pic: non byte read [ 158.871560][ T5920] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.888066][ T5920] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 158.898524][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.907567][ T7194] kvm: pic: non byte read [ 158.912047][ T5920] usb 4-1: Product: syz [ 158.916439][ T5920] usb 4-1: Manufacturer: syz [ 158.921030][ T5920] usb 4-1: SerialNumber: syz [ 158.931789][ T5920] hub 4-1:1.0: bad descriptor, ignoring hub [ 158.938102][ T5920] hub 4-1:1.0: probe with driver hub failed with error -5 [ 158.946947][ T7194] kvm: pic: non byte read [ 158.986835][ T7194] kvm: pic: non byte read [ 158.993563][ T7194] kvm: pic: non byte read [ 159.015554][ T7194] kvm: pic: non byte read [ 159.026730][ T7194] kvm: pic: non byte read [ 159.031733][ T7194] kvm: pic: non byte read [ 159.036434][ T7194] kvm: pic: non byte read [ 159.040909][ T7194] kvm: pic: non byte read [ 159.067737][ T6102] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 159.135642][ T5920] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 159.297733][ T6102] usb 1-1: Using ep0 maxpacket: 32 [ 159.346655][ T6102] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 159.359166][ T6102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.376891][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 159.405870][ T30] audit: type=1400 audit(1768392312.809:196): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="s" pid=7206 comm="syz.2.368" [ 159.429951][ T6102] usb 1-1: Product: syz [ 159.434231][ T6102] usb 1-1: Manufacturer: syz [ 159.442204][ T6102] usb 1-1: SerialNumber: syz [ 159.456025][ T6102] usb 1-1: config 0 descriptor?? [ 159.503345][ T6102] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 159.624610][ T6102] uvcvideo 1-1:0.0: Found UVC 0.00 device syz (0d49:7000) [ 159.643768][ T6102] uvcvideo 1-1:0.0: No valid video chain found. [ 159.752647][ T5879] usb 36-1: device descriptor read/8, error -110 [ 160.166204][ T5879] usb usb36-port1: attempt power cycle [ 160.499813][ T6102] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 160.665146][ T6102] usb 2-1: Using ep0 maxpacket: 16 [ 160.832767][ T5879] usb usb36-port1: unable to enumerate USB device [ 160.924639][ T9] usb 4-1: USB disconnect, device number 12 [ 160.946189][ T9] usblp0: removed [ 160.990828][ T6102] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 161.023949][ T6102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.050871][ T6102] usb 2-1: Product: syz [ 161.076458][ T6102] usb 2-1: Manufacturer: syz [ 161.104466][ T6102] usb 2-1: SerialNumber: syz [ 161.161252][ T6102] r8152-cfgselector 2-1: Unknown version 0x0000 [ 161.168198][ T6102] r8152-cfgselector 2-1: config 0 descriptor?? [ 161.256015][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 161.414017][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.425395][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 161.437522][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 161.455549][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.489067][ T9] usb 4-1: config 0 descriptor?? [ 161.517711][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 161.525138][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 161.549563][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 161.569264][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 161.585292][ T9] usb 4-1: media controller created [ 161.594302][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.612758][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 161.648230][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 161.693090][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 161.736332][ T24] usb 1-1: USB disconnect, device number 6 [ 161.892479][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 161.905571][ T7229] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 161.912126][ T7229] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 161.934406][ T7229] vhci_hcd vhci_hcd.0: Device attached [ 161.965122][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 162.111078][ T7230] vhci_hcd: connection closed [ 162.133028][ T5851] dvb-usb: bulk message failed: -22 (1/0) [ 162.153453][ T3455] vhci_hcd vhci_hcd.2: stop threads [ 162.162963][ T5851] dvb-usb: error while querying for an remote control event. [ 162.173088][ T3455] vhci_hcd vhci_hcd.2: release socket [ 162.190050][ T3455] vhci_hcd vhci_hcd.2: disconnect device [ 162.225655][ T24] usb 38-1: enqueue for inactive port 0 [ 162.315323][ T5851] usb 4-1: USB disconnect, device number 13 [ 162.343527][ T5851] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 162.510322][ T6102] r8152-cfgselector 2-1: Unknown version 0x0000 [ 162.516967][ T6102] r8152-cfgselector 2-1: bad CDC descriptors [ 162.548448][ T6102] r8152-cfgselector 2-1: USB disconnect, device number 19 [ 162.711914][ T7238] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 162.739317][ T24] usb usb38-port1: attempt power cycle [ 163.336012][ T24] usb usb38-port1: unable to enumerate USB device [ 163.497265][ T7248] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 163.517416][ T7251] netlink: 'syz.2.379': attribute type 6 has an invalid length. [ 163.533821][ T7251] netlink: 'syz.2.379': attribute type 7 has an invalid length. [ 163.616777][ T7251] netlink: 'syz.2.379': attribute type 8 has an invalid length. [ 163.876364][ T7257] netlink: 'syz.4.380': attribute type 6 has an invalid length. [ 163.884055][ T7257] netlink: 'syz.4.380': attribute type 7 has an invalid length. [ 163.974770][ T7257] netlink: 'syz.4.380': attribute type 8 has an invalid length. [ 164.107975][ T7263] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 164.325692][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 164.364421][ T30] audit: type=1400 audit(1768392317.779:197): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="s" pid=7258 comm="syz.0.382" [ 165.166987][ T5920] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 165.305208][ T5851] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 165.346872][ T5920] usb 4-1: unable to get BOS descriptor or descriptor too short [ 165.355051][ T5920] usb 4-1: not running at top speed; connect to a high speed hub [ 165.374854][ T5920] usb 4-1: config 1 interface 0 altsetting 217 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.418443][ T5920] usb 4-1: config 1 interface 0 has no altsetting 0 [ 165.442756][ T5920] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 165.474164][ T5851] usb 2-1: Using ep0 maxpacket: 32 [ 165.483901][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.504421][ T5920] usb 4-1: Product: syz [ 165.513730][ T5920] usb 4-1: Manufacturer: syz [ 165.530721][ T5920] usb 4-1: SerialNumber: syz [ 165.535462][ T6102] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 165.548802][ T7283] netlink: 'syz.4.389': attribute type 32 has an invalid length. [ 165.557256][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 165.569219][ T5851] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 165.585369][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.594594][ T5851] usb 2-1: Product: syz [ 165.604047][ T5851] usb 2-1: Manufacturer: syz [ 165.622385][ T5851] usb 2-1: SerialNumber: syz [ 165.638041][ T5851] usb 2-1: config 0 descriptor?? [ 165.660321][ T5851] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 165.693028][ T7283] bond2: Setting coupled_control to off (0) [ 165.731053][ T5851] uvcvideo 2-1:0.0: Found UVC 0.00 device syz (0d49:7000) [ 165.740160][ T6102] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 165.761591][ T5851] uvcvideo 2-1:0.0: No valid video chain found. [ 165.768257][ T6102] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 165.792094][ T6102] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 165.813242][ T6102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.820816][ T5920] usbhid 4-1:1.0: can't add hid device: -71 [ 165.849448][ T7281] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 165.879444][ T5920] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 165.909612][ T5920] usb 4-1: USB disconnect, device number 14 [ 166.197682][ T7295] netlink: 'syz.0.391': attribute type 6 has an invalid length. [ 166.200569][ T7292] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 166.226276][ T7295] netlink: 'syz.0.391': attribute type 7 has an invalid length. [ 166.237404][ T7295] netlink: 'syz.0.391': attribute type 8 has an invalid length. [ 166.671200][ T7315] FAULT_INJECTION: forcing a failure. [ 166.671200][ T7315] name failslab, interval 1, probability 0, space 0, times 0 [ 166.696324][ T6102] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 166.756407][ T6102] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input10 [ 166.763525][ T7315] CPU: 1 UID: 0 PID: 7315 Comm: syz.3.397 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.763555][ T7315] Tainted: [L]=SOFTLOCKUP [ 166.763561][ T7315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.763571][ T7315] Call Trace: [ 166.763578][ T7315] [ 166.763586][ T7315] dump_stack_lvl+0xe8/0x150 [ 166.763612][ T7315] should_fail_ex+0x414/0x560 [ 166.763641][ T7315] should_failslab+0xa8/0x100 [ 166.763663][ T7315] kmem_cache_alloc_noprof+0x88/0x710 [ 166.763686][ T7315] ? __netlink_lookup+0xbd/0x8a0 [ 166.763708][ T7315] ? skb_clone+0x212/0x3a0 [ 166.763733][ T7315] skb_clone+0x212/0x3a0 [ 166.763756][ T7315] __netlink_deliver_tap+0x404/0x850 [ 166.763787][ T7315] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.763809][ T7315] netlink_deliver_tap+0x19c/0x1b0 [ 166.763831][ T7315] netlink_unicast+0x7fa/0x9e0 [ 166.763857][ T7315] ? __pfx_netlink_unicast+0x10/0x10 [ 166.763876][ T7315] ? __alloc_skb+0x198/0x3a0 [ 166.763893][ T7315] ? netlink_sendmsg+0x642/0xb30 [ 166.763912][ T7315] ? skb_put+0x11b/0x210 [ 166.763934][ T7315] netlink_sendmsg+0x805/0xb30 [ 166.763962][ T7315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.763990][ T7315] ? aa_sock_msg_perm+0xf1/0x1b0 [ 166.764013][ T7315] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 166.764029][ T7315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.764050][ T7315] __sock_sendmsg+0x21c/0x270 [ 166.764076][ T7315] ____sys_sendmsg+0x505/0x820 [ 166.764101][ T7315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.764129][ T7315] ? import_iovec+0x74/0xa0 [ 166.764158][ T7315] ___sys_sendmsg+0x21f/0x2a0 [ 166.764180][ T7315] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.764231][ T7315] ? __fget_files+0x2a/0x420 [ 166.764250][ T7315] ? __fget_files+0x3a0/0x420 [ 166.764278][ T7315] __x64_sys_sendmsg+0x19b/0x260 [ 166.764301][ T7315] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.764329][ T7315] ? __pfx_ksys_write+0x10/0x10 [ 166.764356][ T7315] do_syscall_64+0xec/0xf80 [ 166.764374][ T7315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.764389][ T7315] ? trace_irq_disable+0x37/0x100 [ 166.764409][ T7315] ? clear_bhb_loop+0x60/0xb0 [ 166.764429][ T7315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.764445][ T7315] RIP: 0033:0x7f1b0138f749 [ 166.764461][ T7315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.764476][ T7315] RSP: 002b:00007f1b022d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.764495][ T7315] RAX: ffffffffffffffda RBX: 00007f1b015e5fa0 RCX: 00007f1b0138f749 [ 166.764508][ T7315] RDX: 0000000020000080 RSI: 00002000000001c0 RDI: 0000000000000003 [ 166.764519][ T7315] RBP: 00007f1b022d6090 R08: 0000000000000000 R09: 0000000000000000 [ 166.764530][ T7315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.764540][ T7315] R13: 00007f1b015e6038 R14: 00007f1b015e5fa0 R15: 00007f1b0170fa28 [ 166.764568][ T7315] [ 167.407473][ T7318] tipc: Started in network mode [ 167.412610][ T7318] tipc: Node identity ee0fc73c0c65, cluster identity 4711 [ 167.420075][ T7318] tipc: Enabled bearer , priority 0 [ 167.428806][ T7318] syzkaller0: entered promiscuous mode [ 167.434366][ T7318] syzkaller0: entered allmulticast mode [ 167.448531][ T7318] tipc: Resetting bearer [ 167.455526][ T7318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.468324][ T7317] tipc: Resetting bearer [ 167.505792][ T7317] tipc: Disabling bearer [ 167.710224][ T6102] usb 3-1: USB disconnect, device number 8 [ 167.716151][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 167.807052][ T5920] usb 2-1: USB disconnect, device number 20 [ 168.093720][ T7325] netlink: 666 bytes leftover after parsing attributes in process `syz.3.401'. [ 168.407771][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.404'. [ 168.641123][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 168.667326][ T7338] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 168.700534][ T3504] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 168.840710][ T7336] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 168.854936][ T7336] bond1 (unregistering): Released all slaves [ 168.898336][ T3504] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 168.955097][ T5920] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 169.130388][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 169.188302][ T5920] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.210336][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 169.217305][ T5920] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 169.226547][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.257175][ T5920] usb 2-1: config 0 descriptor?? [ 169.318936][ T7362] picdev_read: 77 callbacks suppressed [ 169.318999][ T7362] kvm: pic: non byte read [ 169.337723][ T7362] kvm: pic: non byte read [ 169.416700][ T7362] kvm: pic: non byte read [ 169.421733][ T7362] kvm: pic: non byte read [ 169.500249][ T7362] kvm: pic: non byte read [ 169.519445][ T7362] kvm: pic: non byte read [ 169.524571][ T7362] kvm: pic: non byte read [ 169.548409][ T7362] kvm: pic: non byte read [ 169.586033][ T6102] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.611334][ T7362] kvm: pic: non byte read [ 169.621464][ T7362] kvm: pic: non byte read [ 169.787238][ T7367] fuse: Bad value for 'fd' [ 169.799780][ T7367] netlink: 40 bytes leftover after parsing attributes in process `syz.1.407'. [ 169.808892][ T6102] usb 3-1: Using ep0 maxpacket: 32 [ 169.880170][ T6102] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 169.898271][ T6102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.931020][ T6102] usb 3-1: Product: syz [ 169.953683][ T6102] usb 3-1: Manufacturer: syz [ 169.965095][ T6102] usb 3-1: SerialNumber: syz [ 169.993606][ T6102] usb 3-1: config 0 descriptor?? [ 170.087146][ T7372] binder: 7370:7372 ioctl 4c0a 200000000400 returned -22 [ 170.123957][ T6102] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 170.344117][ T6102] uvcvideo 3-1:0.0: Found UVC 0.00 device syz (0d49:7000) [ 170.387859][ T6102] uvcvideo 3-1:0.0: No valid video chain found. [ 170.591883][ T7380] netlink: 666 bytes leftover after parsing attributes in process `syz.0.415'. [ 170.956434][ T7385] validate_nla: 3 callbacks suppressed [ 170.956454][ T7385] netlink: 'syz.0.416': attribute type 6 has an invalid length. [ 171.137932][ T7385] netlink: 'syz.0.416': attribute type 7 has an invalid length. [ 171.146217][ T7385] netlink: 'syz.0.416': attribute type 8 has an invalid length. [ 172.207940][ T24] usb 3-1: USB disconnect, device number 9 [ 172.292457][ T5920] usbhid 2-1:0.0: can't add hid device: -71 [ 172.365539][ T5920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 172.379558][ T7390] netlink: 40 bytes leftover after parsing attributes in process `syz.2.417'. [ 172.404595][ T5920] usb 2-1: USB disconnect, device number 21 [ 172.418971][ T7390] netlink: 32 bytes leftover after parsing attributes in process `syz.2.417'. [ 173.762827][ T7417] fuse: Bad value for 'fd' [ 173.926216][ T911] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 174.137643][ T7422] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 174.214428][ T911] usb 2-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 174.223856][ T911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.247271][ T911] usb 2-1: Product: syz [ 174.258880][ T911] usb 2-1: Manufacturer: syz [ 174.264425][ T911] usb 2-1: SerialNumber: syz [ 174.276033][ T911] usb 2-1: config 0 descriptor?? [ 174.292595][ T911] gspca_main: touptek-2.14.0 probing 0547:6801 [ 174.430249][ T7428] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 174.601079][ T911] usb 2-1: USB disconnect, device number 22 [ 175.035971][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 175.135288][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 175.215113][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 175.231836][ T9] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.305264][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 175.344460][ T24] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 175.370931][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.389891][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 175.414914][ T24] usb 3-1: Product: syz [ 175.421680][ T24] usb 3-1: Manufacturer: syz [ 175.426805][ T24] usb 3-1: SerialNumber: syz [ 175.456414][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 175.493345][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.496077][ T24] usb 3-1: config 0 descriptor?? [ 175.517801][ T24] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 175.536216][ T9] usb 5-1: config 0 descriptor?? [ 175.666731][ T24] uvcvideo 3-1:0.0: Found UVC 0.00 device syz (0d49:7000) [ 175.674174][ T24] uvcvideo 3-1:0.0: No valid video chain found. [ 175.868228][ T7451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.432'. [ 175.905324][ T7451] netlink: 32 bytes leftover after parsing attributes in process `syz.3.432'. [ 176.358477][ T7457] fuse: Bad value for 'fd' [ 176.370312][ T7457] netlink: 40 bytes leftover after parsing attributes in process `syz.4.428'. [ 176.925157][ T7466] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.938137][ T7466] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 177.149427][ T7466] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.187765][ T7466] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 177.240895][ T7466] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 177.252484][ T7466] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 177.282273][ T7466] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.295275][ T7466] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 177.320547][ T7466] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 177.331648][ T7466] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 177.932469][ T24] usb 3-1: USB disconnect, device number 10 [ 178.060810][ T7481] syzkaller1: entered promiscuous mode [ 178.076741][ T7481] syzkaller1: entered allmulticast mode [ 178.223023][ T7479] picdev_read: 77 callbacks suppressed [ 178.223105][ T7479] kvm: pic: non byte read [ 178.245422][ T7479] kvm: pic: non byte read [ 178.252082][ T7479] kvm: pic: non byte read [ 178.259357][ T7479] kvm: pic: non byte read [ 178.269246][ T7479] kvm: pic: non byte read [ 178.274714][ T7479] kvm: pic: non byte read [ 178.281020][ T7479] kvm: pic: non byte read [ 178.288766][ T7479] kvm: pic: non byte read [ 178.295396][ T7479] kvm: pic: non byte read [ 178.301587][ T7479] kvm: pic: non byte read [ 178.472519][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 178.499979][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 178.528653][ T9] usb 5-1: USB disconnect, device number 11 [ 179.207281][ T7497] : renamed from bridge_slave_0 (while UP) [ 180.772163][ T5920] IPVS: starting estimator thread 0... [ 180.875163][ T7516] IPVS: using max 52 ests per chain, 124800 per kthread [ 181.009600][ T7522] netlink: 32 bytes leftover after parsing attributes in process `syz.1.452'. [ 181.055129][ T5920] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 181.224834][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 181.237966][ T5920] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 181.247235][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.271962][ T5920] usb 1-1: Product: syz [ 181.283114][ T5920] usb 1-1: Manufacturer: syz [ 181.318146][ T5920] usb 1-1: SerialNumber: syz [ 181.337428][ T5920] usb 1-1: config 0 descriptor?? [ 181.359773][ T5920] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 181.432488][ T5920] uvcvideo 1-1:0.0: Found UVC 0.00 device syz (0d49:7000) [ 181.449037][ T5920] uvcvideo 1-1:0.0: No valid video chain found. [ 181.545135][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 181.563765][ T6102] usb 1-1: USB disconnect, device number 7 [ 181.675245][ T9] usb 3-1: device descriptor read/64, error -71 [ 181.915087][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 182.030027][ T7546] netlink: 48 bytes leftover after parsing attributes in process `syz.1.458'. [ 182.041150][ T7546] netlink: 48 bytes leftover after parsing attributes in process `syz.1.458'. [ 182.065168][ T9] usb 3-1: device descriptor read/64, error -71 [ 182.175651][ T9] usb usb3-port1: attempt power cycle [ 182.286924][ T7557] FAULT_INJECTION: forcing a failure. [ 182.286924][ T7557] name failslab, interval 1, probability 0, space 0, times 0 [ 182.313060][ T7557] CPU: 0 UID: 0 PID: 7557 Comm: syz.4.462 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.313089][ T7557] Tainted: [L]=SOFTLOCKUP [ 182.313096][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.313106][ T7557] Call Trace: [ 182.313113][ T7557] [ 182.313122][ T7557] dump_stack_lvl+0xe8/0x150 [ 182.313165][ T7557] should_fail_ex+0x414/0x560 [ 182.313196][ T7557] should_failslab+0xa8/0x100 [ 182.313219][ T7557] kmem_cache_alloc_noprof+0x88/0x710 [ 182.313245][ T7557] ? dst_alloc+0x105/0x170 [ 182.313273][ T7557] dst_alloc+0x105/0x170 [ 182.313300][ T7557] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 182.313328][ T7557] ? ip_route_output_key_hash+0xc1/0x280 [ 182.313349][ T7557] ip_route_output_key_hash+0x174/0x280 [ 182.313370][ T7557] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 182.313405][ T7557] ip_route_output_flow+0x2a/0x150 [ 182.313422][ T7557] ? security_sk_classify_flow+0x70/0x180 [ 182.313450][ T7557] raw_sendmsg+0x1039/0x18b0 [ 182.313470][ T7557] ? __lock_acquire+0x6b6/0x2cf0 [ 182.313501][ T7557] ? __pfx_raw_sendmsg+0x10/0x10 [ 182.313539][ T7557] ? aa_sk_perm+0x7ee/0x920 [ 182.313564][ T7557] ? __pfx_aa_sk_perm+0x10/0x10 [ 182.313583][ T7557] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 182.313609][ T7557] ? sock_rps_record_flow+0x19/0x410 [ 182.313633][ T7557] ? inet_sendmsg+0x2f4/0x370 [ 182.313652][ T7557] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 182.313672][ T7557] __sock_sendmsg+0x19c/0x270 [ 182.313699][ T7557] ____sys_sendmsg+0x505/0x820 [ 182.313726][ T7557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.313755][ T7557] ? import_iovec+0x74/0xa0 [ 182.313779][ T7557] ___sys_sendmsg+0x21f/0x2a0 [ 182.313802][ T7557] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.313856][ T7557] ? __fget_files+0x2a/0x420 [ 182.313876][ T7557] ? __fget_files+0x3a0/0x420 [ 182.313906][ T7557] __x64_sys_sendmsg+0x19b/0x260 [ 182.313930][ T7557] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.313958][ T7557] ? __pfx_ksys_write+0x10/0x10 [ 182.313986][ T7557] do_syscall_64+0xec/0xf80 [ 182.314004][ T7557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.314021][ T7557] ? trace_irq_disable+0x37/0x100 [ 182.314042][ T7557] ? clear_bhb_loop+0x60/0xb0 [ 182.314063][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.314080][ T7557] RIP: 0033:0x7feac858f749 [ 182.314097][ T7557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.314111][ T7557] RSP: 002b:00007feac93c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.314132][ T7557] RAX: ffffffffffffffda RBX: 00007feac87e5fa0 RCX: 00007feac858f749 [ 182.314151][ T7557] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 182.314163][ T7557] RBP: 00007feac93c6090 R08: 0000000000000000 R09: 0000000000000000 [ 182.314174][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.314184][ T7557] R13: 00007feac87e6038 R14: 00007feac87e5fa0 R15: 00007feac890fa28 [ 182.314214][ T7557] [ 182.415076][ T7561] syz_tun: entered allmulticast mode [ 182.555112][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 182.807625][ T9] usb 3-1: device descriptor read/8, error -71 [ 183.052784][ T7566] pimreg: entered allmulticast mode [ 183.060224][ T7561] pimreg: left allmulticast mode [ 183.082493][ T7566] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 183.145196][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 183.175824][ T9] usb 3-1: device descriptor read/8, error -71 [ 183.298286][ T9] usb usb3-port1: unable to enumerate USB device [ 184.030197][ T7566] syz_tun: left allmulticast mode [ 184.463938][ T30] audit: type=1326 audit(1768392337.879:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ea38f749 code=0x7ffc0000 [ 184.486749][ T30] audit: type=1326 audit(1768392337.879:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ea38f749 code=0x7ffc0000 [ 184.622045][ T30] audit: type=1326 audit(1768392337.879:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f13ea38f749 code=0x7ffc0000 [ 184.647559][ T30] audit: type=1326 audit(1768392337.879:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ea38f749 code=0x7ffc0000 [ 184.670299][ T30] audit: type=1326 audit(1768392337.879:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ea38f749 code=0x7ffc0000 [ 184.727263][ T30] audit: type=1326 audit(1768392337.879:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f13ea38f749 code=0x7ffc0000 [ 184.940325][ T30] audit: type=1326 audit(1768392338.339:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ea38f749 code=0x7ffc0000 [ 184.975922][ T30] audit: type=1326 audit(1768392338.339:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ea38f749 code=0x7ffc0000 [ 185.604142][ T7622] syz_tun: entered allmulticast mode [ 185.626314][ T7622] pimreg: entered allmulticast mode [ 186.292179][ T7627] netlink: 14 bytes leftover after parsing attributes in process `syz.2.480'. [ 186.302898][ T7626] vlan2: entered allmulticast mode [ 186.370075][ T7626] bond0: entered allmulticast mode [ 186.414846][ T7626] bond_slave_0: entered allmulticast mode [ 186.436727][ T7626] bond_slave_1: entered allmulticast mode [ 186.506733][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'. [ 186.590456][ T7637] netlink: 72 bytes leftover after parsing attributes in process `syz.3.481'. [ 186.665112][ T5893] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 186.818422][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 186.826904][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.841606][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.872108][ T7637] netlink: 64 bytes leftover after parsing attributes in process `syz.3.481'. [ 186.936563][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.952916][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.008002][ T5851] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 187.033350][ T5893] usb 2-1: Product: syz [ 187.050665][ T5893] usb 2-1: Manufacturer: syz [ 187.061827][ T5893] usb 2-1: SerialNumber: syz [ 187.110472][ T7627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.122341][ T7627] bond_slave_0: left allmulticast mode [ 187.130030][ T7627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.149411][ T7627] bond_slave_1: left allmulticast mode [ 187.173755][ T7627] bond0 (unregistering): Released all slaves [ 187.191530][ T5851] usb 1-1: Using ep0 maxpacket: 16 [ 187.199587][ T5851] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.207776][ T5851] usb 1-1: config 0 has no interface number 0 [ 187.262191][ T5851] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 187.285987][ T7618] syz_tun: left allmulticast mode [ 187.293008][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.332777][ T5851] usb 1-1: Product: syz [ 187.337072][ T5851] usb 1-1: Manufacturer: syz [ 187.341757][ T5851] usb 1-1: SerialNumber: syz [ 187.398600][ T5851] usb 1-1: config 0 descriptor?? [ 187.421219][ T5851] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 187.492817][ T5893] usb 2-1: 0:2 : does not exist [ 187.525436][ T5893] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 187.605288][ T5893] usb 2-1: USB disconnect, device number 23 [ 187.956522][ T5851] gspca_spca1528: reg_w err -110 [ 187.985184][ T5851] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 189.611570][ T7670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.492'. [ 189.621862][ T7670] netlink: 32 bytes leftover after parsing attributes in process `syz.1.492'. [ 189.975668][ T5851] usb 1-1: USB disconnect, device number 8 [ 190.317151][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 190.366449][ T30] audit: type=1400 audit(1768392343.759:206): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="s" pid=7671 comm="syz.4.494" [ 190.845160][ T7687] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 190.937091][ T7687] vxlan0: entered promiscuous mode [ 190.944078][ T7687] vxlan0: entered allmulticast mode [ 191.152701][ T5920] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 191.161224][ T5893] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 191.411713][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 191.415117][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 191.423880][ T5920] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.432303][ T6144] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.512318][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.550464][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.564689][ T6144] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.583633][ T6144] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.609582][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 191.623330][ T5893] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 191.636686][ T6144] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.671620][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.695465][ T5893] usb 3-1: Product: syz [ 191.697399][ T5920] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 191.711208][ T5893] usb 3-1: Manufacturer: syz [ 191.716137][ T5893] usb 3-1: SerialNumber: syz [ 191.723496][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 191.741141][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.746495][ T5893] usb 3-1: config 0 descriptor?? [ 191.763649][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 191.786672][ T5920] usb 4-1: config 0 descriptor?? [ 191.788304][ T5893] radioshark 3-1:0.0: Invalid radioSHARK device [ 191.831945][ T5893] radioshark 3-1:0.0: probe with driver radioshark failed with error -22 [ 191.870280][ T5893] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 192.349877][ T7706] fuse: Bad value for 'fd' [ 192.367094][ T7706] netlink: 40 bytes leftover after parsing attributes in process `syz.3.498'. [ 192.535286][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 192.705068][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 192.713239][ T24] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 192.721691][ T24] usb 2-1: config 2 has no interface number 0 [ 192.728846][ T24] usb 2-1: config 2 interface 31 has no altsetting 0 [ 192.739504][ T24] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 192.749158][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.758963][ T24] usb 2-1: Product: syz [ 192.766723][ T24] usb 2-1: Manufacturer: syz [ 192.783766][ T24] usb 2-1: SerialNumber: syz [ 193.683354][ T5893] usb 3-1: USB disconnect, device number 15 [ 194.232284][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.241068][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.285953][ T5920] usbhid 4-1:0.0: can't add hid device: -71 [ 194.295373][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 194.362309][ T5920] usb 4-1: USB disconnect, device number 15 [ 194.911797][ T7727] FAULT_INJECTION: forcing a failure. [ 194.911797][ T7727] name failslab, interval 1, probability 0, space 0, times 0 [ 194.960727][ T7727] CPU: 0 UID: 0 PID: 7727 Comm: syz.3.511 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.960758][ T7727] Tainted: [L]=SOFTLOCKUP [ 194.960763][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.960772][ T7727] Call Trace: [ 194.960780][ T7727] [ 194.960787][ T7727] dump_stack_lvl+0xe8/0x150 [ 194.960811][ T7727] should_fail_ex+0x414/0x560 [ 194.960840][ T7727] should_failslab+0xa8/0x100 [ 194.960862][ T7727] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 194.960894][ T7727] ? __alloc_skb+0x198/0x3a0 [ 194.960912][ T7727] ? __alloc_skb+0x1dc/0x3a0 [ 194.960928][ T7727] ? __local_bh_enable_ip+0xd0/0x130 [ 194.960947][ T7727] ? __alloc_skb+0x198/0x3a0 [ 194.960966][ T7727] __alloc_skb+0x1dc/0x3a0 [ 194.960988][ T7727] netlink_ack+0x146/0xa50 [ 194.961007][ T7727] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 194.961024][ T7727] ? ref_tracker_free+0x63a/0x7d0 [ 194.961042][ T7727] ? __asan_memcpy+0x40/0x70 [ 194.961063][ T7727] ? __pfx_ref_tracker_free+0x10/0x10 [ 194.961078][ T7727] ? __skb_clone+0x63/0x7a0 [ 194.961107][ T7727] netlink_rcv_skb+0x28c/0x470 [ 194.961128][ T7727] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 194.961147][ T7727] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.961176][ T7727] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.961203][ T7727] netlink_unicast+0x82f/0x9e0 [ 194.961225][ T7727] ? __pfx_netlink_unicast+0x10/0x10 [ 194.961242][ T7727] ? __alloc_skb+0x198/0x3a0 [ 194.961258][ T7727] ? netlink_sendmsg+0x642/0xb30 [ 194.961281][ T7727] ? skb_put+0x11b/0x210 [ 194.961301][ T7727] netlink_sendmsg+0x805/0xb30 [ 194.961330][ T7727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.961353][ T7727] ? aa_sock_msg_perm+0xf1/0x1b0 [ 194.961375][ T7727] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.961390][ T7727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.961412][ T7727] __sock_sendmsg+0x21c/0x270 [ 194.961438][ T7727] ____sys_sendmsg+0x505/0x820 [ 194.961464][ T7727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.961493][ T7727] ? import_iovec+0x74/0xa0 [ 194.961516][ T7727] ___sys_sendmsg+0x21f/0x2a0 [ 194.961538][ T7727] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.961588][ T7727] ? __fget_files+0x2a/0x420 [ 194.961608][ T7727] ? __fget_files+0x3a0/0x420 [ 194.961636][ T7727] __x64_sys_sendmsg+0x19b/0x260 [ 194.961658][ T7727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.961686][ T7727] ? __pfx_ksys_write+0x10/0x10 [ 194.961713][ T7727] do_syscall_64+0xec/0xf80 [ 194.961731][ T7727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.961747][ T7727] ? trace_irq_disable+0x37/0x100 [ 194.961767][ T7727] ? clear_bhb_loop+0x60/0xb0 [ 194.961787][ T7727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.961803][ T7727] RIP: 0033:0x7f1b0138f749 [ 194.961819][ T7727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.961834][ T7727] RSP: 002b:00007f1b022d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.961853][ T7727] RAX: ffffffffffffffda RBX: 00007f1b015e5fa0 RCX: 00007f1b0138f749 [ 194.961866][ T7727] RDX: 0000000008000194 RSI: 0000200000000080 RDI: 0000000000000003 [ 194.961884][ T7727] RBP: 00007f1b022d6090 R08: 0000000000000000 R09: 0000000000000000 [ 194.961895][ T7727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.961905][ T7727] R13: 00007f1b015e6038 R14: 00007f1b015e5fa0 R15: 00007f1b0170fa28 [ 194.961934][ T7727] [ 195.736815][ T24] ch9200 2-1:2.31: probe with driver ch9200 failed with error -71 [ 195.809172][ T24] usb 2-1: USB disconnect, device number 24 [ 196.271371][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 196.334119][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 196.334270][ T30] audit: type=1400 audit(1768392349.719:207): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="s" pid=7747 comm="syz.3.517" [ 196.559912][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 196.573239][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.581921][ T24] usb 1-1: Product: syz [ 196.651996][ T24] usb 1-1: Manufacturer: syz [ 196.661773][ T24] usb 1-1: SerialNumber: syz [ 196.686371][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 196.740498][ T911] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 197.069623][ T7750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.137704][ T7750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.434080][ T7750] : renamed from vlan0 (while UP) [ 197.443054][ T5893] usb 1-1: USB disconnect, device number 9 [ 197.969479][ T7776] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 198.225552][ T911] usb 1-1: Service connection timeout for: 256 [ 198.231777][ T911] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 198.267631][ T911] ath9k_htc: Failed to initialize the device [ 198.289313][ T5893] usb 1-1: ath9k_htc: USB layer deinitialized [ 199.601002][ T7816] netlink: 140 bytes leftover after parsing attributes in process `syz.0.537'. [ 199.954769][ T7823] netlink: 'syz.2.540': attribute type 3 has an invalid length. [ 199.962681][ T7823] netlink: 216 bytes leftover after parsing attributes in process `syz.2.540'. [ 200.229966][ T7846] netlink: 52 bytes leftover after parsing attributes in process `syz.2.545'. [ 200.241371][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.542'. [ 200.290652][ T6102] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 200.291893][ T30] audit: type=1400 audit(1768392353.679:208): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="s" pid=7834 comm="syz.3.542" [ 200.495238][ T6102] usb 1-1: Using ep0 maxpacket: 8 [ 200.504116][ T6102] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 200.514654][ T6102] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.528398][ T6102] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.543631][ T6102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.560698][ T6102] usb 1-1: Product: 䕈䀹쾴훥ର꾞⤁唆祜㵺֬잟㫻軻ᯧ仉儝ᯌ짥䰖䘅뀑㾤ञ튉㻑䇼㛛䓡ᒵ厌 [ 200.604386][ T6102] usb 1-1: Manufacturer: ఊ [ 200.615411][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 200.623511][ T6102] usb 1-1: SerialNumber: syz [ 200.745060][ T24] usb 3-1: device descriptor read/64, error -71 [ 201.030350][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 201.100923][ T6102] usb 1-1: 0:2 : does not exist [ 201.165084][ T24] usb 3-1: device descriptor read/64, error -71 [ 201.169235][ T6102] usb 1-1: USB disconnect, device number 10 [ 201.275498][ T24] usb usb3-port1: attempt power cycle [ 201.436799][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.625103][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 201.657760][ T24] usb 3-1: device descriptor read/8, error -71 [ 201.713964][ T7863] xt_TPROXY: Can be used only with -p tcp or -p udp [ 201.907922][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 201.981623][ T24] usb 3-1: device descriptor read/8, error -71 [ 202.107390][ T24] usb usb3-port1: unable to enumerate USB device [ 202.265223][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 202.475050][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 202.484391][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.495609][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 202.505920][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.516743][ T24] usb 1-1: config 0 descriptor?? [ 202.800051][ T7882] vivid-007: ================= START STATUS ================= [ 202.807962][ T7882] vivid-007: Enable Output Cropping: true [ 202.813748][ T7882] vivid-007: Enable Output Composing: true [ 202.820373][ T7882] vivid-007: Enable Output Scaler: true [ 202.826521][ T7882] vivid-007: Tx RGB Quantization Range: Automatic [ 202.833688][ T7882] vivid-007: Transmit Mode: HDMI [ 202.838877][ T7882] vivid-007: Hotplug Present: 0x00000000 [ 202.844563][ T7882] vivid-007: RxSense Present: 0x00000000 [ 203.155235][ T7882] vivid-007: EDID Present: 0x00000000 [ 203.160681][ T7882] vivid-007: ================== END STATUS ================== [ 203.917409][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 204.003704][ T30] audit: type=1400 audit(1768392357.369:209): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="s" pid=7891 comm="syz.1.558" [ 205.117736][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 205.123852][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 205.142362][ T24] usb 1-1: USB disconnect, device number 11 [ 205.636626][ T7913] FAULT_INJECTION: forcing a failure. [ 205.636626][ T7913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.677835][ T7913] CPU: 1 UID: 0 PID: 7913 Comm: syz.4.564 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.677854][ T7913] Tainted: [L]=SOFTLOCKUP [ 205.677857][ T7913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.677867][ T7913] Call Trace: [ 205.677872][ T7913] [ 205.677878][ T7913] dump_stack_lvl+0xe8/0x150 [ 205.677895][ T7913] should_fail_ex+0x414/0x560 [ 205.677913][ T7913] _copy_from_user+0x2d/0xb0 [ 205.677926][ T7913] dev_ifconf+0xd3/0x2f0 [ 205.677938][ T7913] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 205.677949][ T7913] ? __pfx_dev_ifconf+0x10/0x10 [ 205.677964][ T7913] sock_ioctl+0x1d5/0x790 [ 205.677980][ T7913] ? __pfx_sock_ioctl+0x10/0x10 [ 205.677993][ T7913] ? __fget_files+0x2a/0x420 [ 205.678004][ T7913] ? __fget_files+0x3a0/0x420 [ 205.678015][ T7913] ? __fget_files+0x2a/0x420 [ 205.678027][ T7913] ? bpf_lsm_file_ioctl+0x9/0x20 [ 205.678038][ T7913] ? __pfx_sock_ioctl+0x10/0x10 [ 205.678050][ T7913] __se_sys_ioctl+0xfc/0x170 [ 205.678065][ T7913] do_syscall_64+0xec/0xf80 [ 205.678075][ T7913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.678084][ T7913] ? trace_irq_disable+0x37/0x100 [ 205.678096][ T7913] ? clear_bhb_loop+0x60/0xb0 [ 205.678107][ T7913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.678117][ T7913] RIP: 0033:0x7feac858f749 [ 205.678127][ T7913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.678135][ T7913] RSP: 002b:00007feac93c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.678147][ T7913] RAX: ffffffffffffffda RBX: 00007feac87e5fa0 RCX: 00007feac858f749 [ 205.678154][ T7913] RDX: 0000200000000040 RSI: 0000000000008912 RDI: 0000000000000003 [ 205.678160][ T7913] RBP: 00007feac93c6090 R08: 0000000000000000 R09: 0000000000000000 [ 205.678167][ T7913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.678172][ T7913] R13: 00007feac87e6038 R14: 00007feac87e5fa0 R15: 00007feac890fa28 [ 205.678187][ T7913] [ 205.967516][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 206.145152][ T5893] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 206.295445][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 206.303360][ T5893] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 206.315133][ T6102] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 206.323145][ T5893] usb 2-1: config 0 has no interface number 0 [ 206.374034][ T5893] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 206.389253][ T7931] picdev_read: 77 callbacks suppressed [ 206.389273][ T7931] kvm: pic: non byte read [ 206.401117][ T7931] kvm: pic: non byte read [ 206.410756][ T7931] kvm: pic: non byte read [ 206.416227][ T7931] kvm: pic: non byte read [ 206.422925][ T7931] kvm: pic: non byte read [ 206.429173][ T7931] kvm: pic: non byte read [ 206.435375][ T7931] kvm: pic: non byte read [ 206.440997][ T7931] kvm: pic: non byte read [ 206.447518][ T7931] kvm: pic: non byte read [ 206.453381][ T7931] kvm: pic: non byte read [ 206.580510][ T5893] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 206.590140][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.599226][ T5893] usb 2-1: Product: syz [ 206.603854][ T5893] usb 2-1: Manufacturer: syz [ 206.609734][ T5893] usb 2-1: SerialNumber: syz [ 206.615090][ T6102] usb 4-1: Using ep0 maxpacket: 8 [ 206.623697][ T6102] usb 4-1: config 64 has an invalid interface number: 223 but max is 0 [ 206.632121][ T6102] usb 4-1: config 64 has an invalid interface number: 34 but max is 0 [ 206.641424][ T6102] usb 4-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 206.671417][ T6102] usb 4-1: config 64 has 2 interfaces, different from the descriptor's value: 1 [ 206.681365][ T5893] usb 2-1: config 0 descriptor?? [ 206.695104][ T5893] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 206.705313][ T6102] usb 4-1: config 64 has no interface number 0 [ 206.712276][ T5893] em28xx 2-1:0.132: Video interface 132 found: [ 206.758632][ T6102] usb 4-1: config 64 has no interface number 1 [ 206.768050][ T6102] usb 4-1: config 64 interface 223 altsetting 8 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 206.782726][ T6102] usb 4-1: config 64 interface 223 altsetting 8 bulk endpoint 0xB has invalid maxpacket 32 [ 206.843146][ T6102] usb 4-1: config 64 interface 223 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 12 [ 206.874441][ T6102] usb 4-1: too many endpoints for config 64 interface 34 altsetting 155: 82, using maximum allowed: 30 [ 206.912865][ T6102] usb 4-1: config 64 interface 34 altsetting 155 bulk endpoint 0xF has invalid maxpacket 16 [ 206.941978][ T6102] usb 4-1: config 64 interface 34 altsetting 155 endpoint 0x4 has invalid wMaxPacketSize 0 [ 206.981452][ T6102] usb 4-1: config 64 interface 34 altsetting 155 has a duplicate endpoint with address 0x6, skipping [ 207.009056][ T6102] usb 4-1: config 64 interface 34 altsetting 155 has an invalid descriptor for endpoint zero, skipping [ 207.037872][ T6102] usb 4-1: config 64 interface 34 altsetting 155 has 8 endpoint descriptors, different from the interface descriptor's value: 82 [ 207.063806][ T6102] usb 4-1: config 64 interface 223 has no altsetting 0 [ 207.077957][ T6102] usb 4-1: config 64 interface 34 has no altsetting 0 [ 207.097979][ T6102] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice=ed.fd [ 207.110308][ T6102] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.119542][ T5893] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 207.126779][ T6102] usb 4-1: Product: syz [ 207.131160][ T6102] usb 4-1: Manufacturer: 귽騕炔꛱㧉젳葢Ѣ槏។揦砢鞊ⴐ过渪옖㝶㦏턥猧惗㵫⩟께㏋誣ｹ❼꿘晴谜܎⠶궴ꔚ⎉΃㌱沑獺ڈ巐웷堼맧灭ᅌƵꈅͻẒ薲洐售孕暰礴퐧蘴栓⚈ﰓ䅡뎜 [ 207.166287][ T6102] usb 4-1: SerialNumber: syz [ 207.180537][ T6102] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 207.193946][ T6102] usb 4-1: no configuration chosen from 1 choice [ 208.417965][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'. [ 208.444140][ T30] audit: type=1400 audit(1768392361.859:210): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="s" pid=7951 comm="syz.0.575" [ 208.465421][ T5893] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 208.488387][ T5893] em28xx 2-1:0.132: board has no eeprom [ 208.545133][ T5893] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 208.553125][ T5893] em28xx 2-1:0.132: analog set to bulk mode. [ 208.561671][ T6102] em28xx 2-1:0.132: Registering V4L2 extension [ 208.629047][ T6102] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 208.651062][ T6102] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 208.667159][ T6102] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 208.682118][ T6102] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 208.819074][ T5893] usb 2-1: USB disconnect, device number 25 [ 208.847977][ T5893] em28xx 2-1:0.132: Disconnecting em28xx [ 208.948935][ T7963] fuse: Bad value for 'fd' [ 208.991418][ T6102] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 209.000091][ T6102] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 209.008659][ T6102] em28xx 2-1:0.132: No AC97 audio processor [ 209.053173][ T6102] usb 2-1: Decoder not found [ 209.058787][ T6102] em28xx 2-1:0.132: failed to create media graph [ 209.066840][ T6102] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 209.083348][ T6102] em28xx 2-1:0.132: Remote control support is not available for this card. [ 209.142983][ T5893] em28xx 2-1:0.132: Closing input extension [ 209.191496][ T6102] usb 4-1: USB disconnect, device number 17 [ 209.209216][ T5893] em28xx 2-1:0.132: Freeing device [ 209.225315][ T911] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 209.309810][ T7966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.578'. [ 209.352160][ T7966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.578'. [ 209.387074][ T911] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 209.402316][ T911] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 209.434569][ T911] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.475604][ T911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.506467][ T7963] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 209.528135][ T911] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.591599][ T5893] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 209.737445][ T5851] usb 3-1: USB disconnect, device number 20 [ 209.755599][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 209.779666][ T5893] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.798439][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 209.825336][ T5893] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 209.846597][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.882100][ T5893] usb 2-1: config 0 descriptor?? [ 210.165080][ T5851] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 210.325127][ T5851] usb 4-1: Using ep0 maxpacket: 32 [ 210.343105][ T5851] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 210.358156][ T5851] usb 4-1: config 0 has no interface number 0 [ 210.378064][ T5851] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 210.445120][ T7991] fuse: Bad value for 'fd' [ 210.467717][ T7991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.576'. [ 210.494006][ T5851] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 210.504552][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.539443][ T5851] usb 4-1: Product: syz [ 210.585181][ T5851] usb 4-1: Manufacturer: syz [ 210.596913][ T5851] usb 4-1: SerialNumber: syz [ 210.630963][ T5851] usb 4-1: config 0 descriptor?? [ 210.686029][ T5851] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 210.724412][ T5851] em28xx 4-1:0.132: Video interface 132 found: [ 211.086222][ T5851] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 211.183077][ T8002] binder: 7997:8002 ioctl c018620c 200000000000 returned -22 [ 211.199375][ T8005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.590'. [ 211.211796][ T8005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.590'. [ 212.385361][ T5851] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 212.398127][ T5851] em28xx 4-1:0.132: board has no eeprom [ 212.475128][ T5851] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 212.504493][ T5851] em28xx 4-1:0.132: analog set to bulk mode. [ 212.528178][ T5893] usbhid 2-1:0.0: can't add hid device: -71 [ 212.534264][ T9] em28xx 4-1:0.132: Registering V4L2 extension [ 212.569130][ T5893] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 212.626001][ T5893] usb 2-1: USB disconnect, device number 26 [ 212.763392][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 212.814236][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 212.826318][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 212.838030][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 212.957779][ T24] usb 4-1: USB disconnect, device number 18 [ 212.964706][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x84 (error=-19) [ 212.989410][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x86 (error=-19) [ 213.004385][ T24] em28xx 4-1:0.132: Disconnecting em28xx [ 213.058259][ T8031] pimreg: entered allmulticast mode [ 213.145289][ T8034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.597'. [ 213.158411][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 213.176707][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 213.242049][ T30] audit: type=1400 audit(1768392366.609:211): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="s" pid=8015 comm="syz.1.592" [ 213.285115][ T5893] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 213.333084][ T8037] netlink: 'syz.3.597': attribute type 39 has an invalid length. [ 213.368176][ T8037] mmap: syz.3.597 (8037): VmData 37593088 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 213.435108][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 213.452728][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.472516][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 213.548289][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 213.562268][ T9] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 213.591830][ T9] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 213.612690][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 213.638268][ T9] em28xx 4-1:0.132: No AC97 audio processor [ 213.696474][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.715228][ T9] usb 4-1: Decoder not found [ 213.726117][ T9] em28xx 4-1:0.132: failed to create media graph [ 213.739022][ T9] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 213.749303][ T5893] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 213.875380][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.884541][ T9] em28xx 4-1:0.132: Remote control support is not available for this card. [ 213.895272][ T5893] usb 3-1: Product: syz [ 213.899588][ T5893] usb 3-1: Manufacturer: syz [ 213.904606][ T24] em28xx 4-1:0.132: Closing input extension [ 213.921567][ T5893] usb 3-1: SerialNumber: syz [ 213.968604][ T8042] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 214.049835][ T24] em28xx 4-1:0.132: Freeing device [ 214.068461][ T5893] usb 3-1: config 0 descriptor?? [ 214.114877][ T5893] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 214.383392][ T8029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.345465][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 215.362465][ T5893] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 215.532524][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 215.695265][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 215.725696][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30 [ 215.738814][ T9] usb 1-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 215.786974][ T5893] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.808376][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.818550][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 215.831373][ T9] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 215.841103][ T5893] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 215.850442][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.858612][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.871545][ T9] usb 1-1: config 0 descriptor?? [ 215.887611][ T5893] usb 2-1: config 0 descriptor?? [ 215.974423][ T8057] FAULT_INJECTION: forcing a failure. [ 215.974423][ T8057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.022229][ T8057] CPU: 0 UID: 0 PID: 8057 Comm: syz.4.603 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.022256][ T8057] Tainted: [L]=SOFTLOCKUP [ 216.022262][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.022271][ T8057] Call Trace: [ 216.022278][ T8057] [ 216.022286][ T8057] dump_stack_lvl+0xe8/0x150 [ 216.022308][ T8057] should_fail_ex+0x414/0x560 [ 216.022334][ T8057] _copy_to_user+0x31/0xb0 [ 216.022356][ T8057] simple_read_from_buffer+0xe1/0x170 [ 216.022379][ T8057] proc_fail_nth_read+0x1b3/0x220 [ 216.022398][ T8057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.022417][ T8057] ? rw_verify_area+0x2a6/0x4d0 [ 216.022438][ T8057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.022455][ T8057] vfs_read+0x200/0xa30 [ 216.022468][ T8057] ? fdget_pos+0x247/0x320 [ 216.022490][ T8057] ? __pfx___mutex_lock+0x10/0x10 [ 216.022508][ T8057] ? __pfx_vfs_read+0x10/0x10 [ 216.022524][ T8057] ? __fget_files+0x2a/0x420 [ 216.022547][ T8057] ? __fget_files+0x3a0/0x420 [ 216.022565][ T8057] ? __fget_files+0x2a/0x420 [ 216.022591][ T8057] ksys_read+0x145/0x250 [ 216.022610][ T8057] ? __pfx_ksys_read+0x10/0x10 [ 216.022636][ T8057] do_syscall_64+0xec/0xf80 [ 216.022654][ T8057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.022669][ T8057] ? trace_irq_disable+0x37/0x100 [ 216.022689][ T8057] ? clear_bhb_loop+0x60/0xb0 [ 216.022709][ T8057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.022724][ T8057] RIP: 0033:0x7feac858e15c [ 216.022739][ T8057] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 216.022752][ T8057] RSP: 002b:00007feac93c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.022770][ T8057] RAX: ffffffffffffffda RBX: 00007feac87e5fa0 RCX: 00007feac858e15c [ 216.022789][ T8057] RDX: 000000000000000f RSI: 00007feac93c60a0 RDI: 0000000000000004 [ 216.022800][ T8057] RBP: 00007feac93c6090 R08: 0000000000000000 R09: 0000000000000000 [ 216.022810][ T8057] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 216.022819][ T8057] R13: 00007feac87e6038 R14: 00007feac87e5fa0 R15: 00007feac890fa28 [ 216.022846][ T8057] [ 216.258781][ T5879] usb 3-1: USB disconnect, device number 21 [ 216.390609][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 216.399206][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 216.416955][ T9] usb 1-1: USB disconnect, device number 12 [ 216.594861][ T8069] fuse: Bad value for 'fd' [ 216.609829][ T8069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.599'. [ 216.774737][ T8072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.605'. [ 216.788677][ T8072] netlink: 32 bytes leftover after parsing attributes in process `syz.4.605'. [ 216.845411][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 216.919186][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 217.045478][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 217.078767][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.095163][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 217.101990][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 217.102400][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 217.125139][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.173475][ T9] usb 1-1: config 0 has no interface number 0 [ 217.187575][ T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.188166][ T24] usb 3-1: config 0 descriptor?? [ 217.389957][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 217.411730][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.439179][ T9] usb 1-1: Product: syz [ 217.455370][ T9] usb 1-1: Manufacturer: syz [ 217.464715][ T9] usb 1-1: SerialNumber: syz [ 217.492853][ T9] usb 1-1: config 0 descriptor?? [ 217.543814][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 217.574458][ T9] em28xx 1-1:0.132: Video interface 132 found: [ 218.097278][ T9] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 218.581073][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 218.625099][ T30] audit: type=1400 audit(1768392372.019:212): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="s" pid=8079 comm="syz.3.609" [ 219.212019][ T5893] usbhid 2-1:0.0: can't add hid device: -71 [ 219.230858][ T5893] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 219.294485][ T5893] usb 2-1: USB disconnect, device number 27 [ 219.347671][ T9] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 219.382950][ T9] em28xx 1-1:0.132: board has no eeprom [ 219.456112][ T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 219.471865][ T9] em28xx 1-1:0.132: analog set to bulk mode. [ 219.512909][ T5851] em28xx 1-1:0.132: Registering V4L2 extension [ 219.568114][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 219.574475][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 219.611591][ T24] usb 3-1: USB disconnect, device number 22 [ 219.683798][ T5851] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 219.705915][ T5851] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 219.731246][ T8092] fuse: Unknown parameter 'LЄgroup_id' [ 219.746404][ T5851] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 219.761856][ T5851] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 219.777218][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 219.820256][ T911] usb 1-1: USB disconnect, device number 13 [ 219.848354][ T911] em28xx 1-1:0.132: Disconnecting em28xx [ 219.861458][ T5851] em28xx 1-1:0.132: failed to trigger read from i2c address 0x84 (error=-19) [ 219.962405][ T5851] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 219.978142][ T5851] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 219.995543][ T5851] em28xx 1-1:0.132: No AC97 audio processor [ 220.030186][ T5851] usb 1-1: Decoder not found [ 220.034855][ T5851] em28xx 1-1:0.132: failed to create media graph [ 220.075529][ T5851] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 220.099655][ T5851] em28xx 1-1:0.132: Remote control support is not available for this card. [ 220.162728][ T8108] sit1: entered allmulticast mode [ 220.296466][ T911] em28xx 1-1:0.132: Closing input extension [ 220.315450][ T911] em28xx 1-1:0.132: Freeing device [ 221.628398][ T8133] netlink: 40 bytes leftover after parsing attributes in process `syz.3.620'. [ 221.651427][ T8133] netlink: 32 bytes leftover after parsing attributes in process `syz.3.620'. [ 222.990629][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'. [ 223.135213][ T5851] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 223.405101][ T5851] usb 1-1: Using ep0 maxpacket: 32 [ 223.416479][ T5851] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 223.425363][ T5851] usb 1-1: config 0 has no interface number 0 [ 223.465202][ T5851] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 223.492589][ T5851] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 223.533223][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.554685][ T5851] usb 1-1: Product: syz [ 223.625151][ T5851] usb 1-1: Manufacturer: syz [ 223.632073][ T5851] usb 1-1: SerialNumber: syz [ 223.762385][ T5851] usb 1-1: config 0 descriptor?? [ 223.798900][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 223.910077][ T30] audit: type=1400 audit(1768392377.229:213): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="s" pid=8155 comm="syz.3.628" [ 223.911859][ T5851] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 224.094164][ T5851] em28xx 1-1:0.132: Video interface 132 found: [ 224.416454][ T5851] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 225.285470][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 225.435181][ T9] usb 3-1: device descriptor read/64, error -71 [ 225.575069][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 225.675131][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 225.725105][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 225.732745][ T24] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.745444][ T5851] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 225.768930][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 225.768945][ T5851] em28xx 1-1:0.132: board has no eeprom [ 225.795075][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 225.804152][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.815111][ T9] usb 3-1: device descriptor read/64, error -71 [ 225.825485][ T5851] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 225.827690][ T24] usb 4-1: config 0 descriptor?? [ 225.840456][ T5851] em28xx 1-1:0.132: analog set to bulk mode. [ 225.856068][ T5893] em28xx 1-1:0.132: Registering V4L2 extension [ 225.943740][ T9] usb usb3-port1: attempt power cycle [ 226.042861][ T5893] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 226.090623][ T5893] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 226.111290][ T5893] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 226.120791][ T5851] usb 1-1: USB disconnect, device number 14 [ 226.127353][ T8185] FAULT_INJECTION: forcing a failure. [ 226.127353][ T8185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.141902][ T5851] em28xx 1-1:0.132: Disconnecting em28xx [ 226.155296][ T8185] CPU: 0 UID: 0 PID: 8185 Comm: syz.0.635 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.155322][ T8185] Tainted: [L]=SOFTLOCKUP [ 226.155328][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.155339][ T8185] Call Trace: [ 226.155346][ T8185] [ 226.155354][ T8185] dump_stack_lvl+0xe8/0x150 [ 226.155389][ T8185] should_fail_ex+0x414/0x560 [ 226.155418][ T8185] _copy_from_user+0x2d/0xb0 [ 226.155439][ T8185] ___sys_sendmsg+0x158/0x2a0 [ 226.155463][ T8185] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.155515][ T8185] ? __fget_files+0x2a/0x420 [ 226.155535][ T8185] ? __fget_files+0x3a0/0x420 [ 226.155564][ T8185] __x64_sys_sendmsg+0x19b/0x260 [ 226.155587][ T8185] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.155616][ T8185] ? __pfx_ksys_write+0x10/0x10 [ 226.155643][ T8185] do_syscall_64+0xec/0xf80 [ 226.155671][ T8185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.155687][ T8185] ? trace_irq_disable+0x37/0x100 [ 226.155707][ T8185] ? clear_bhb_loop+0x60/0xb0 [ 226.155728][ T8185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.155744][ T8185] RIP: 0033:0x7fc4d658f749 [ 226.155760][ T8185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.155775][ T8185] RSP: 002b:00007fc4d73b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.155794][ T8185] RAX: ffffffffffffffda RBX: 00007fc4d67e5fa0 RCX: 00007fc4d658f749 [ 226.155808][ T8185] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 226.155817][ T8185] RBP: 00007fc4d73b1090 R08: 0000000000000000 R09: 0000000000000000 [ 226.155827][ T8185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.155837][ T8185] R13: 00007fc4d67e6038 R14: 00007fc4d67e5fa0 R15: 00007fc4d690fa28 [ 226.155864][ T8185] [ 226.435173][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 226.455840][ T9] usb 3-1: device descriptor read/8, error -71 [ 226.480126][ T8188] fuse: Bad value for 'fd' [ 226.485672][ T8190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.636'. [ 226.588626][ T8188] netlink: 40 bytes leftover after parsing attributes in process `syz.3.631'. [ 226.615790][ T5893] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 226.679818][ T5893] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 226.692543][ T5893] em28xx 1-1:0.132: No AC97 audio processor [ 226.713190][ T5893] usb 1-1: Decoder not found [ 226.721177][ T5893] em28xx 1-1:0.132: failed to create media graph [ 226.739674][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 226.750220][ T5893] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 226.815787][ T9] usb 3-1: device descriptor read/8, error -71 [ 226.840433][ T5893] em28xx 1-1:0.132: Remote control support is not available for this card. [ 226.879516][ T5851] em28xx 1-1:0.132: Closing input extension [ 226.916572][ T5851] em28xx 1-1:0.132: Freeing device [ 226.936036][ T9] usb usb3-port1: unable to enumerate USB device [ 227.017737][ T8193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.139280][ T8203] tipc: Started in network mode [ 227.156634][ T8203] tipc: Node identity 0a37d57ae2fd, cluster identity 4711 [ 227.196239][ T911] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 227.215263][ T8203] tipc: Enabled bearer , priority 0 [ 227.241519][ T8204] syzkaller0: entered promiscuous mode [ 227.247785][ T8204] syzkaller0: entered allmulticast mode [ 227.287589][ T8203] syzkaller0: mtu greater than device maximum [ 227.313038][ T8202] tipc: Resetting bearer [ 227.349629][ T8202] tipc: Disabling bearer [ 227.375552][ T911] usb 2-1: Using ep0 maxpacket: 8 [ 227.397813][ T911] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 227.487042][ T911] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 227.499000][ T911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.522323][ T911] usb 2-1: Product: syz [ 227.531632][ T911] usb 2-1: Manufacturer: syz [ 227.645679][ T911] usb 2-1: SerialNumber: syz [ 227.653283][ T911] usb 2-1: config 0 descriptor?? [ 227.679874][ T911] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 227.713812][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 228.005262][ T5851] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 228.103313][ T911] gspca_zc3xx: reg_w_i err -71 [ 228.236291][ T5851] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.250028][ T5851] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.317464][ T8221] netlink: 'syz.2.643': attribute type 6 has an invalid length. [ 228.325971][ T8221] netlink: 'syz.2.643': attribute type 7 has an invalid length. [ 228.333862][ T8221] netlink: 'syz.2.643': attribute type 8 has an invalid length. [ 228.537525][ T5851] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 228.597442][ T30] audit: type=1800 audit(1768392381.979:214): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.641" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=21138 res=0 errno=0 [ 228.693207][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 228.716275][ T911] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 228.722975][ T911] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 228.734307][ T5851] usb 1-1: SerialNumber: syz [ 228.772463][ T911] usb 2-1: USB disconnect, device number 28 [ 228.931550][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 228.939267][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 228.975621][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 228.985637][ T24] usb 4-1: USB disconnect, device number 19 [ 229.031610][ T5851] usb 1-1: 0:2 : does not exist [ 229.099283][ T5851] usb 1-1: USB disconnect, device number 15 [ 229.137023][ T911] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 229.307369][ T911] usb 2-1: Using ep0 maxpacket: 32 [ 229.314240][ T911] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 229.323897][ T911] usb 2-1: config 0 has no interface number 0 [ 229.330330][ T911] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.383386][ T911] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 229.394089][ T911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.424220][ T911] usb 2-1: Product: syz [ 229.436284][ T911] usb 2-1: Manufacturer: syz [ 229.441046][ T911] usb 2-1: SerialNumber: syz [ 229.499858][ T911] usb 2-1: config 0 descriptor?? [ 229.527893][ T911] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 229.567827][ T911] em28xx 2-1:0.132: Video interface 132 found: [ 229.919017][ T911] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 230.175187][ T5906] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 230.387932][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.425295][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 230.545745][ T8269] netlink: 'syz.3.657': attribute type 6 has an invalid length. [ 230.554858][ T8269] netlink: 'syz.3.657': attribute type 7 has an invalid length. [ 230.570109][ T5906] usb 3-1: config 0 has no interfaces? [ 230.586352][ T5906] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 230.596880][ T8269] netlink: 'syz.3.657': attribute type 8 has an invalid length. [ 230.604737][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.614541][ T5906] usb 3-1: config 0 descriptor?? [ 230.654545][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.286706][ T911] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 231.323091][ T911] em28xx 2-1:0.132: board has no eeprom [ 231.395206][ T911] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 231.403070][ T911] em28xx 2-1:0.132: analog set to bulk mode. [ 231.656470][ T5906] em28xx 2-1:0.132: Registering V4L2 extension [ 231.780621][ T5851] usb 2-1: USB disconnect, device number 29 [ 231.806313][ T5851] em28xx 2-1:0.132: Disconnecting em28xx [ 231.933367][ T5906] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 231.941536][ T5906] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 231.949866][ T5906] em28xx 2-1:0.132: No AC97 audio processor [ 231.978972][ T5906] usb 2-1: Decoder not found [ 231.984190][ T5906] em28xx 2-1:0.132: failed to create media graph [ 231.993742][ T5906] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 232.007698][ T5906] em28xx 2-1:0.132: Remote control support is not available for this card. [ 232.017284][ T5851] em28xx 2-1:0.132: Closing input extension [ 232.034102][ T5851] em28xx 2-1:0.132: Freeing device [ 232.123772][ T8292] FAULT_INJECTION: forcing a failure. [ 232.123772][ T8292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.141440][ T8292] CPU: 1 UID: 0 PID: 8292 Comm: syz.4.661 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.141468][ T8292] Tainted: [L]=SOFTLOCKUP [ 232.141474][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.141485][ T8292] Call Trace: [ 232.141492][ T8292] [ 232.141499][ T8292] dump_stack_lvl+0xe8/0x150 [ 232.141527][ T8292] should_fail_ex+0x414/0x560 [ 232.141558][ T8292] _copy_from_iter+0x1cd/0x1630 [ 232.141589][ T8292] ? __pfx__copy_from_iter+0x10/0x10 [ 232.141608][ T8292] ? __build_skb_around+0x22d/0x3c0 [ 232.141630][ T8292] ? __alloc_skb+0x198/0x3a0 [ 232.141648][ T8292] ? netlink_sendmsg+0x642/0xb30 [ 232.141669][ T8292] ? skb_put+0x11b/0x210 [ 232.141691][ T8292] netlink_sendmsg+0x6b2/0xb30 [ 232.141721][ T8292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.141744][ T8292] ? aa_sock_msg_perm+0xf1/0x1b0 [ 232.141767][ T8292] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.141782][ T8292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.141803][ T8292] __sock_sendmsg+0x21c/0x270 [ 232.141828][ T8292] ____sys_sendmsg+0x505/0x820 [ 232.141853][ T8292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.141882][ T8292] ? import_iovec+0x74/0xa0 [ 232.141906][ T8292] ___sys_sendmsg+0x21f/0x2a0 [ 232.141929][ T8292] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.141988][ T8292] ? __fget_files+0x2a/0x420 [ 232.142008][ T8292] ? __fget_files+0x3a0/0x420 [ 232.142037][ T8292] __x64_sys_sendmsg+0x19b/0x260 [ 232.142061][ T8292] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 232.142090][ T8292] ? __pfx_ksys_write+0x10/0x10 [ 232.142117][ T8292] do_syscall_64+0xec/0xf80 [ 232.142136][ T8292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.142150][ T8292] ? trace_irq_disable+0x37/0x100 [ 232.142170][ T8292] ? clear_bhb_loop+0x60/0xb0 [ 232.142191][ T8292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.142208][ T8292] RIP: 0033:0x7feac858f749 [ 232.142224][ T8292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.142239][ T8292] RSP: 002b:00007feac93a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.142258][ T8292] RAX: ffffffffffffffda RBX: 00007feac87e6090 RCX: 00007feac858f749 [ 232.142272][ T8292] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 232.142283][ T8292] RBP: 00007feac93a5090 R08: 0000000000000000 R09: 0000000000000000 [ 232.142295][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.142306][ T8292] R13: 00007feac87e6128 R14: 00007feac87e6090 R15: 00007feac890fa28 [ 232.142335][ T8292] [ 232.965865][ T5851] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 233.095295][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 233.115725][ T5851] usb 1-1: too many configurations: 198, using maximum allowed: 8 [ 233.135727][ T5893] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 233.143942][ T5851] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 233.234782][ T5851] usb 1-1: can't read configurations, error -61 [ 233.305729][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 233.316720][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 233.331180][ T9] usb 4-1: config 0 has no interface number 0 [ 233.343098][ T9] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 233.360655][ T9] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 233.379041][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 233.391866][ T5851] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 233.416629][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.433458][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 233.444048][ T5893] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 233.457340][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.466875][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.476716][ T9] usb 4-1: Product: syz [ 233.490933][ T5893] usb 2-1: config 0 descriptor?? [ 233.497006][ T9] usb 4-1: Manufacturer: syz [ 233.504763][ T9] usb 4-1: SerialNumber: syz [ 233.525758][ T9] usb 4-1: config 0 descriptor?? [ 233.533050][ T8305] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 233.542435][ T8305] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 233.576363][ T5851] usb 1-1: too many configurations: 198, using maximum allowed: 8 [ 233.588251][ T5851] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 233.602208][ T5851] usb 1-1: can't read configurations, error -61 [ 233.615515][ T5851] usb usb1-port1: attempt power cycle [ 233.687394][ T5906] usb 3-1: USB disconnect, device number 27 [ 233.758546][ T8305] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 233.771309][ T8305] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 234.012261][ T5851] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 234.026627][ T5893] razer 0003:1532:010D.0007: unbalanced delimiter at end of report description [ 234.046135][ T5851] usb 1-1: too many configurations: 198, using maximum allowed: 8 [ 234.068143][ T5893] razer 0003:1532:010D.0007: probe with driver razer failed with error -22 [ 234.077332][ T5851] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 234.084952][ T5851] usb 1-1: can't read configurations, error -61 [ 234.216075][ T5851] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 234.238158][ T5851] usb 1-1: too many configurations: 198, using maximum allowed: 8 [ 234.248035][ T5906] usb 2-1: USB disconnect, device number 30 [ 234.248351][ T5851] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 234.263558][ T5851] usb 1-1: can't read configurations, error -61 [ 234.272241][ T5851] usb usb1-port1: unable to enumerate USB device [ 234.375069][ T911] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 234.427497][ T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 234.535098][ T911] usb 5-1: Using ep0 maxpacket: 32 [ 234.542096][ T911] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 234.550441][ T911] usb 5-1: config 0 has no interface number 0 [ 234.556777][ T911] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.570421][ T911] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 234.580045][ T911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.588211][ T911] usb 5-1: Product: syz [ 234.592571][ T911] usb 5-1: Manufacturer: syz [ 234.597280][ T911] usb 5-1: SerialNumber: syz [ 234.604962][ T911] usb 5-1: config 0 descriptor?? [ 234.614457][ T911] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 234.624264][ T911] em28xx 5-1:0.132: Video interface 132 found: [ 235.015482][ T911] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 236.305211][ T911] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 236.523931][ T911] em28xx 5-1:0.132: board has no eeprom [ 236.588553][ T911] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 236.600443][ T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 236.609890][ T911] em28xx 5-1:0.132: analog set to bulk mode. [ 236.620580][ T24] em28xx 5-1:0.132: Registering V4L2 extension [ 236.644916][ T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 236.673114][ T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 236.703997][ T8335] netlink: 'syz.0.674': attribute type 6 has an invalid length. [ 236.743862][ T9] usb 4-1: USB disconnect, device number 20 [ 236.753999][ T8335] netlink: 'syz.0.674': attribute type 7 has an invalid length. [ 236.808993][ T8335] netlink: 'syz.0.674': attribute type 8 has an invalid length. [ 236.824070][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 236.843648][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 236.865356][ T8345] loop6: detected capacity change from 0 to 1024 [ 236.872168][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 236.881557][ T8345] buffer_io_error: 11 callbacks suppressed [ 236.881573][ T8345] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.896645][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 236.905563][ T8345] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.914071][ T8345] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.924936][ T8345] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.955453][ T8345] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.972949][ T8345] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.982487][ T8345] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.991490][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 237.001706][ T8345] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.009935][ T8345] ldm_validate_partition_table(): Disk read failed. [ 237.018768][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 237.030500][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 237.035661][ T8345] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.039742][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 237.083548][ T8352] netlink: 'syz.2.678': attribute type 17 has an invalid length. [ 237.091609][ T8345] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.111586][ T8352] netlink: 148 bytes leftover after parsing attributes in process `syz.2.678'. [ 237.116530][ T8345] Dev loop6: unable to read RDB block 0 [ 237.131939][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 237.142427][ T8345] loop6: unable to read partition table [ 237.144276][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 237.167186][ T8345] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 237.202484][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 237.205744][ T8354] netlink: 'syz.0.679': attribute type 4 has an invalid length. [ 237.214654][ T911] usb 5-1: USB disconnect, device number 12 [ 237.255192][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc6 (error=-19) [ 237.265974][ T911] em28xx 5-1:0.132: Disconnecting em28xx [ 237.307391][ T24] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 237.330731][ T24] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 237.355083][ T24] em28xx 5-1:0.132: No AC97 audio processor [ 237.359533][ T8354] netlink: 'syz.0.679': attribute type 4 has an invalid length. [ 237.386605][ T24] usb 5-1: Decoder not found [ 237.391246][ T24] em28xx 5-1:0.132: failed to create media graph [ 237.473308][ T24] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 237.556787][ T24] em28xx 5-1:0.132: Remote control support is not available for this card. [ 237.557109][ T8364] ================================================================== [ 237.573494][ T8364] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 237.580884][ T8364] Read of size 8 at addr ffff888052fd4740 by task v4l_id/8364 [ 237.588619][ T8364] [ 237.590955][ T8364] CPU: 0 UID: 0 PID: 8364 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 237.590982][ T8364] Tainted: [L]=SOFTLOCKUP [ 237.590989][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.591015][ T8364] Call Trace: [ 237.591023][ T8364] [ 237.591031][ T8364] dump_stack_lvl+0xe8/0x150 [ 237.591054][ T8364] print_report+0xca/0x240 [ 237.591072][ T8364] ? v4l2_fh_open+0xac/0x420 [ 237.591094][ T8364] kasan_report+0x118/0x150 [ 237.591114][ T8364] ? v4l2_fh_open+0xac/0x420 [ 237.591139][ T8364] v4l2_fh_open+0xac/0x420 [ 237.591161][ T8364] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 237.591182][ T8364] em28xx_v4l2_open+0x157/0x9a0 [ 237.591203][ T8364] ? do_raw_spin_lock+0x121/0x290 [ 237.591234][ T8364] v4l2_open+0x1bf/0x3a0 [ 237.591250][ T8364] chrdev_open+0x4cc/0x5e0 [ 237.591269][ T8364] ? __pfx_chrdev_open+0x10/0x10 [ 237.591287][ T8364] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 237.591311][ T8364] ? __pfx_chrdev_open+0x10/0x10 [ 237.591327][ T8364] do_dentry_open+0x7ce/0x1420 [ 237.591353][ T8364] vfs_open+0x3b/0x340 [ 237.591370][ T8364] ? path_openat+0x33f3/0x3dd0 [ 237.591385][ T8364] path_openat+0x340e/0x3dd0 [ 237.591405][ T8364] ? __pfx_stack_trace_save+0x10/0x10 [ 237.591430][ T8364] ? __pfx_filemap_map_pages+0x10/0x10 [ 237.591450][ T8364] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 237.591472][ T8364] ? getname_flags+0xb8/0x540 [ 237.591491][ T8364] ? __pfx_path_openat+0x10/0x10 [ 237.591507][ T8364] ? __lock_acquire+0x6b6/0x2cf0 [ 237.591529][ T8364] do_filp_open+0x1fa/0x410 [ 237.591545][ T8364] ? __pfx_do_filp_open+0x10/0x10 [ 237.591569][ T8364] ? _raw_spin_unlock+0x28/0x50 [ 237.591583][ T8364] ? alloc_fd+0x64c/0x6c0 [ 237.591606][ T8364] do_sys_openat2+0x121/0x200 [ 237.591627][ T8364] ? __pfx_do_sys_openat2+0x10/0x10 [ 237.591647][ T8364] ? exc_page_fault+0x71/0xd0 [ 237.591665][ T8364] ? do_user_addr_fault+0xc85/0x1380 [ 237.591683][ T8364] __x64_sys_openat+0x138/0x170 [ 237.591706][ T8364] do_syscall_64+0xec/0xf80 [ 237.591723][ T8364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.591739][ T8364] ? trace_irq_disable+0x37/0x100 [ 237.591759][ T8364] ? clear_bhb_loop+0x60/0xb0 [ 237.591776][ T8364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.591793][ T8364] RIP: 0033:0x7f38f1aa7407 [ 237.591809][ T8364] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 237.591824][ T8364] RSP: 002b:00007ffde7556c10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 237.591843][ T8364] RAX: ffffffffffffffda RBX: 00007f38f21cf880 RCX: 00007f38f1aa7407 [ 237.591856][ T8364] RDX: 0000000000000000 RSI: 00007ffde7558f1b RDI: ffffffffffffff9c [ 237.591869][ T8364] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 237.591879][ T8364] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 237.591890][ T8364] R13: 00007ffde7556e60 R14: 00007f38f2336000 R15: 000055942426d4d8 [ 237.591910][ T8364] [ 237.591916][ T8364] [ 237.886751][ T8364] Allocated by task 24: [ 237.890902][ T8364] kasan_save_track+0x3e/0x80 [ 237.895568][ T8364] __kasan_kmalloc+0x93/0xb0 [ 237.900155][ T8364] __kmalloc_cache_noprof+0x3e2/0x700 [ 237.905513][ T8364] em28xx_v4l2_init+0x10b/0x2e70 [ 237.910457][ T8364] em28xx_init_extension+0x120/0x1c0 [ 237.915734][ T8364] process_scheduled_works+0xad1/0x1770 [ 237.921263][ T8364] worker_thread+0x8a0/0xda0 [ 237.925844][ T8364] kthread+0x711/0x8a0 [ 237.929910][ T8364] ret_from_fork+0x510/0xa50 [ 237.934482][ T8364] ret_from_fork_asm+0x1a/0x30 [ 237.939243][ T8364] [ 237.941549][ T8364] Freed by task 24: [ 237.945336][ T8364] kasan_save_track+0x3e/0x80 [ 237.950001][ T8364] kasan_save_free_info+0x46/0x50 [ 237.955022][ T8364] __kasan_slab_free+0x5c/0x80 [ 237.959788][ T8364] kfree+0x1c0/0x660 [ 237.963676][ T8364] em28xx_v4l2_init+0x1683/0x2e70 [ 237.968689][ T8364] em28xx_init_extension+0x120/0x1c0 [ 237.973961][ T8364] process_scheduled_works+0xad1/0x1770 [ 237.979490][ T8364] worker_thread+0x8a0/0xda0 [ 237.984151][ T8364] kthread+0x711/0x8a0 [ 237.988557][ T8364] ret_from_fork+0x510/0xa50 [ 237.993198][ T8364] ret_from_fork_asm+0x1a/0x30 [ 237.997949][ T8364] [ 238.000256][ T8364] The buggy address belongs to the object at ffff888052fd4000 [ 238.000256][ T8364] which belongs to the cache kmalloc-8k of size 8192 [ 238.014302][ T8364] The buggy address is located 1856 bytes inside of [ 238.014302][ T8364] freed 8192-byte region [ffff888052fd4000, ffff888052fd6000) [ 238.028872][ T8364] [ 238.031249][ T8364] The buggy address belongs to the physical page: [ 238.037657][ T8364] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52fd0 [ 238.046405][ T8364] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 238.054978][ T8364] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 238.062615][ T8364] page_type: f5(slab) [ 238.066602][ T8364] raw: 00fff00000000040 ffff88813ffa7280 dead000000000122 0000000000000000 [ 238.075272][ T8364] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 238.083856][ T8364] head: 00fff00000000040 ffff88813ffa7280 dead000000000122 0000000000000000 [ 238.092605][ T8364] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 238.101354][ T8364] head: 00fff00000000003 ffffea00014bf401 00000000ffffffff 00000000ffffffff [ 238.110013][ T8364] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 238.118749][ T8364] page dumped because: kasan: bad access detected [ 238.125154][ T8364] page_owner tracks the page as allocated [ 238.130866][ T8364] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8303, tgid 8300 (syz.1.666), ts 234238648461, free_ts 234238375416 [ 238.152129][ T8364] post_alloc_hook+0x234/0x290 [ 238.156885][ T8364] get_page_from_freelist+0x24e0/0x2580 [ 238.162434][ T8364] __alloc_frozen_pages_noprof+0x181/0x370 [ 238.168240][ T8364] alloc_pages_mpol+0x232/0x4a0 [ 238.173086][ T8364] allocate_slab+0x86/0x3b0 [ 238.177583][ T8364] ___slab_alloc+0xe53/0x1820 [ 238.182257][ T8364] __slab_alloc+0x65/0x100 [ 238.186671][ T8364] __kmalloc_node_track_caller_noprof+0x5d4/0x820 [ 238.193131][ T8364] kmalloc_reserve+0x136/0x290 [ 238.197911][ T8364] __alloc_skb+0x204/0x3a0 [ 238.202336][ T8364] nf_tables_commit+0x8f25/0xa350 [ 238.207357][ T8364] nfnetlink_rcv+0x1ac9/0x2590 [ 238.212128][ T8364] netlink_unicast+0x82f/0x9e0 [ 238.216887][ T8364] netlink_sendmsg+0x805/0xb30 [ 238.221657][ T8364] __sock_sendmsg+0x21c/0x270 [ 238.226430][ T8364] ____sys_sendmsg+0x505/0x820 [ 238.231192][ T8364] page last free pid 8303 tgid 8300 stack trace: [ 238.237501][ T8364] __free_frozen_pages+0xbc8/0xd30 [ 238.242597][ T8364] nf_tables_newrule+0x24d9/0x28a0 [ 238.247693][ T8364] nfnetlink_rcv+0x11d9/0x2590 [ 238.252441][ T8364] netlink_unicast+0x82f/0x9e0 [ 238.257373][ T8364] netlink_sendmsg+0x805/0xb30 [ 238.262126][ T8364] __sock_sendmsg+0x21c/0x270 [ 238.266797][ T8364] ____sys_sendmsg+0x505/0x820 [ 238.271546][ T8364] ___sys_sendmsg+0x21f/0x2a0 [ 238.276205][ T8364] __x64_sys_sendmsg+0x19b/0x260 [ 238.281127][ T8364] do_syscall_64+0xec/0xf80 [ 238.285619][ T8364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.291580][ T8364] [ 238.293883][ T8364] Memory state around the buggy address: [ 238.299490][ T8364] ffff888052fd4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 238.307534][ T8364] ffff888052fd4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 238.315579][ T8364] >ffff888052fd4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 238.323617][ T8364] ^ [ 238.329747][ T8364] ffff888052fd4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 238.337792][ T8364] ffff888052fd4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 238.345831][ T8364] ================================================================== [ 238.379100][ T911] em28xx 5-1:0.132: Closing input extension [ 238.616492][ T8375] sit1: entered allmulticast mode [ 238.749309][ T8364] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 238.756547][ T8364] CPU: 0 UID: 0 PID: 8364 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 238.767083][ T8364] Tainted: [L]=SOFTLOCKUP [ 238.771400][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.781442][ T8364] Call Trace: [ 238.784708][ T8364] [ 238.787638][ T8364] vpanic+0x1e0/0x670 [ 238.791611][ T8364] panic+0xb9/0xc0 [ 238.795328][ T8364] ? __pfx_panic+0x10/0x10 [ 238.799751][ T8364] ? preempt_schedule_common+0x83/0xd0 [ 238.805199][ T8364] ? v4l2_fh_open+0xac/0x420 [ 238.809786][ T8364] check_panic_on_warn+0x89/0xb0 [ 238.814711][ T8364] ? v4l2_fh_open+0xac/0x420 [ 238.819292][ T8364] end_report+0x6f/0x140 [ 238.823521][ T8364] kasan_report+0x129/0x150 [ 238.828067][ T8364] ? v4l2_fh_open+0xac/0x420 [ 238.832645][ T8364] v4l2_fh_open+0xac/0x420 [ 238.837065][ T8364] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 238.843067][ T8364] em28xx_v4l2_open+0x157/0x9a0 [ 238.847934][ T8364] ? do_raw_spin_lock+0x121/0x290 [ 238.852961][ T8364] v4l2_open+0x1bf/0x3a0 [ 238.857194][ T8364] chrdev_open+0x4cc/0x5e0 [ 238.861603][ T8364] ? __pfx_chrdev_open+0x10/0x10 [ 238.866622][ T8364] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 238.872949][ T8364] ? __pfx_chrdev_open+0x10/0x10 [ 238.877888][ T8364] do_dentry_open+0x7ce/0x1420 [ 238.882647][ T8364] vfs_open+0x3b/0x340 [ 238.886707][ T8364] ? path_openat+0x33f3/0x3dd0 [ 238.891458][ T8364] path_openat+0x340e/0x3dd0 [ 238.896056][ T8364] ? __pfx_stack_trace_save+0x10/0x10 [ 238.901437][ T8364] ? __pfx_filemap_map_pages+0x10/0x10 [ 238.906900][ T8364] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 238.912530][ T8364] ? getname_flags+0xb8/0x540 [ 238.917234][ T8364] ? __pfx_path_openat+0x10/0x10 [ 238.922174][ T8364] ? __lock_acquire+0x6b6/0x2cf0 [ 238.927114][ T8364] do_filp_open+0x1fa/0x410 [ 238.931616][ T8364] ? __pfx_do_filp_open+0x10/0x10 [ 238.936637][ T8364] ? _raw_spin_unlock+0x28/0x50 [ 238.941470][ T8364] ? alloc_fd+0x64c/0x6c0 [ 238.945791][ T8364] do_sys_openat2+0x121/0x200 [ 238.950460][ T8364] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.955649][ T8364] ? exc_page_fault+0x71/0xd0 [ 238.960314][ T8364] ? do_user_addr_fault+0xc85/0x1380 [ 238.965603][ T8364] __x64_sys_openat+0x138/0x170 [ 238.970461][ T8364] do_syscall_64+0xec/0xf80 [ 238.974959][ T8364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.981284][ T8364] ? trace_irq_disable+0x37/0x100 [ 238.986396][ T8364] ? clear_bhb_loop+0x60/0xb0 [ 238.991062][ T8364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.996953][ T8364] RIP: 0033:0x7f38f1aa7407 [ 239.001444][ T8364] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 239.021087][ T8364] RSP: 002b:00007ffde7556c10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 239.029489][ T8364] RAX: ffffffffffffffda RBX: 00007f38f21cf880 RCX: 00007f38f1aa7407 [ 239.037448][ T8364] RDX: 0000000000000000 RSI: 00007ffde7558f1b RDI: ffffffffffffff9c [ 239.045403][ T8364] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 239.053359][ T8364] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 239.061314][ T8364] R13: 00007ffde7556e60 R14: 00007f38f2336000 R15: 000055942426d4d8 [ 239.069368][ T8364] [ 239.072774][ T8364] Kernel Offset: disabled [ 239.077083][ T8364] Rebooting in 86400 seconds..