last executing test programs: 10m43.980113599s ago: executing program 4 (id=2323): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x2000, 0x0, 0x0, 0x0) 10m43.817183557s ago: executing program 4 (id=2326): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 10m43.558419035s ago: executing program 4 (id=2327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 10m42.638593838s ago: executing program 4 (id=2332): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000bc0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x16000000, 0x0, 0x2}}, 0x20) 10m42.129866676s ago: executing program 4 (id=2335): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x25, 0x4, 0x1, 0x3, 0x7, 0x65, 0x1, 0xa3, 0x1, 0xd, @loopback, @loopback, {[@rr={0x7, 0xf, 0xda, [@multicast2, @remote, @remote]}, @end, @noop, @rr={0x7, 0xf, 0x6e, [@multicast2, @loopback, @broadcast]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xb3, [@broadcast]}, @cipso={0x86, 0x4b, 0x3, [{0x5, 0x12, "fc13f799de26ce6ae000000000050000"}, {0x6, 0x5, "c23204"}, {0x2, 0xc, "e68b627971d5818b6021"}, {0x2, 0x10, "5ba1590c2ecf3e6ce1808be8fb4b"}, {0x0, 0xf, "44ac9836587b999fbf75fad762"}, {0x0, 0x3, 'I'}]}, @lsrr={0x83, 0x7, 0xf2, [@multicast1]}]}}}}}}}, 0x0) 10m41.871578465s ago: executing program 4 (id=2337): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)=@multiplanar_fd={0x6, 0xa, 0x4, 0x100, 0x8, {0x77359400}, {0x5, 0x1, 0x4, 0x3, 0x7, 0x7, '\x00\x00\x00 '}, 0x9, 0x4, {0x0}, 0x2}) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002) (async) r1 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4}) (async) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) io_setup(0x7ff, &(0x7f0000000040)=0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r5, 0x0}]) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) (async) unshare(0x2c060000) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async, rerun: 64) r8 = inotify_init1(0x80000) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) (async, rerun: 64) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f00000003c0)={"cbb5e24b4ff8f7a5b35b2907c2212acf", 0x0, 0x0, {0xffffffffffffffff, 0x1}, {0x6, 0x5}, 0x3fffffffc0000000, [0x4, 0x7, 0x5, 0xf2, 0x1, 0x5, 0xe62, 0x8, 0xffffffffffffcd32, 0x4, 0x8, 0x86, 0xffffffffffffffff, 0x4, 0x0, 0x40874473]}) (rerun: 64) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c09425, &(0x7f0000000480)={"620b6bcffe8395cbb8244535ac402d90", r9, r10, {0x67, 0x101}, {0xbc, 0x5}, 0x1, [0x9, 0x5, 0x6, 0x5, 0xe, 0xff, 0x1, 0x400, 0x7, 0x4, 0xcf8, 0x7, 0x6, 0x5, 0x10100000000000]}) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000080)=r9) syz_io_uring_complete(r2) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f00000000c0)) (async, rerun: 32) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) (async, rerun: 32) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000100)={[{0x6, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0xce8, 0x1, 0x1, 0x45, 0x7, 0x2, 0x45, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x6, 0x84, 0xfc, 0x24, 0x5, 0x0, 0x70, 0x7, 0x5}], 0xffffffff}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000002000010000260000080000000a808000000000080200fc020000000000000000000000000001"], 0x30}}, 0x40000) (async) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @ioapic={0x2000, 0xe41, 0x5, 0x1, 0x0, [{0x5, 0xa6, 0x8, '\x00', 0x5}, {0x3, 0x40, 0xff, '\x00', 0x8}, {0x1, 0x4, 0x3, '\x00', 0x57}, {0x3f, 0x26, 0x12, '\x00', 0x7}, {0x81, 0x0, 0x40, '\x00', 0xdd}, {0x5, 0x50, 0xff, '\x00', 0x4}, {0x2, 0x7, 0xa2, '\x00', 0xe5}, {0x9, 0x7f, 0x9, '\x00', 0x7}, {0x81, 0x4, 0x5, '\x00', 0x1}, {0x5, 0x7, 0x6, '\x00', 0x7}, {0x8, 0x3, 0x8, '\x00', 0x9}, {0x9, 0xff, 0x3, '\x00', 0x9}, {0x5f, 0x3, 0x4d, '\x00', 0xc}, {0x9, 0x8, 0x1, '\x00', 0xff}, {0x1, 0x5, 0x2a}, {0x4, 0x3, 0x2a, '\x00', 0xb}, {0x4, 0x5, 0x9, '\x00', 0x3}, {0x5, 0x64, 0xa}, {0x4, 0x0, 0x10, '\x00', 0x5}, {0x9, 0x1, 0x2}, {0x9, 0xe4, 0xdd, '\x00', 0xff}, {0x8, 0x81}, {0x7, 0xc9}, {0x5, 0x40, 0xfd, '\x00', 0x1}]}}) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 10m26.300063928s ago: executing program 32 (id=2337): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)=@multiplanar_fd={0x6, 0xa, 0x4, 0x100, 0x8, {0x77359400}, {0x5, 0x1, 0x4, 0x3, 0x7, 0x7, '\x00\x00\x00 '}, 0x9, 0x4, {0x0}, 0x2}) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002) (async) r1 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4}) (async) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) io_setup(0x7ff, &(0x7f0000000040)=0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r5, 0x0}]) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) (async) unshare(0x2c060000) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async, rerun: 64) r8 = inotify_init1(0x80000) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) (async, rerun: 64) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f00000003c0)={"cbb5e24b4ff8f7a5b35b2907c2212acf", 0x0, 0x0, {0xffffffffffffffff, 0x1}, {0x6, 0x5}, 0x3fffffffc0000000, [0x4, 0x7, 0x5, 0xf2, 0x1, 0x5, 0xe62, 0x8, 0xffffffffffffcd32, 0x4, 0x8, 0x86, 0xffffffffffffffff, 0x4, 0x0, 0x40874473]}) (rerun: 64) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c09425, &(0x7f0000000480)={"620b6bcffe8395cbb8244535ac402d90", r9, r10, {0x67, 0x101}, {0xbc, 0x5}, 0x1, [0x9, 0x5, 0x6, 0x5, 0xe, 0xff, 0x1, 0x400, 0x7, 0x4, 0xcf8, 0x7, 0x6, 0x5, 0x10100000000000]}) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000080)=r9) syz_io_uring_complete(r2) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f00000000c0)) (async, rerun: 32) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) (async, rerun: 32) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000100)={[{0x6, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0xce8, 0x1, 0x1, 0x45, 0x7, 0x2, 0x45, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x6, 0x84, 0xfc, 0x24, 0x5, 0x0, 0x70, 0x7, 0x5}], 0xffffffff}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000002000010000260000080000000a808000000000080200fc020000000000000000000000000001"], 0x30}}, 0x40000) (async) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @ioapic={0x2000, 0xe41, 0x5, 0x1, 0x0, [{0x5, 0xa6, 0x8, '\x00', 0x5}, {0x3, 0x40, 0xff, '\x00', 0x8}, {0x1, 0x4, 0x3, '\x00', 0x57}, {0x3f, 0x26, 0x12, '\x00', 0x7}, {0x81, 0x0, 0x40, '\x00', 0xdd}, {0x5, 0x50, 0xff, '\x00', 0x4}, {0x2, 0x7, 0xa2, '\x00', 0xe5}, {0x9, 0x7f, 0x9, '\x00', 0x7}, {0x81, 0x4, 0x5, '\x00', 0x1}, {0x5, 0x7, 0x6, '\x00', 0x7}, {0x8, 0x3, 0x8, '\x00', 0x9}, {0x9, 0xff, 0x3, '\x00', 0x9}, {0x5f, 0x3, 0x4d, '\x00', 0xc}, {0x9, 0x8, 0x1, '\x00', 0xff}, {0x1, 0x5, 0x2a}, {0x4, 0x3, 0x2a, '\x00', 0xb}, {0x4, 0x5, 0x9, '\x00', 0x3}, {0x5, 0x64, 0xa}, {0x4, 0x0, 0x10, '\x00', 0x5}, {0x9, 0x1, 0x2}, {0x9, 0xe4, 0xdd, '\x00', 0xff}, {0x8, 0x81}, {0x7, 0xc9}, {0x5, 0x40, 0xfd, '\x00', 0x1}]}}) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 10m16.546127166s ago: executing program 3 (id=2414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c00e}, 0x10) 10m16.343958207s ago: executing program 3 (id=2415): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) socket$inet_tcp(0x2, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0) writev(r2, 0x0, 0x0) userfaultfd(0x80001) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@nested={0x4, 0x138}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8004) close_range(r3, r3, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r6, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x8}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280)={r9, 0x7}, 0x8) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 10m14.722399289s ago: executing program 3 (id=2419): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) r2 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/softnet_stat\x00') pread64(r2, &(0x7f00000000c0)=""/4082, 0xff2, 0x7) 10m14.553346273s ago: executing program 3 (id=2421): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101283) ioctl$SG_IO(r0, 0x2285, &(0x7f00000010c0)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001080)="19be69ae6200", 0x0, 0x1, 0x34, 0x22, 0x0}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) chroot(&(0x7f0000000780)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x16, 0x0, @val=@tracing={0x0, 0x25}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="11003f88d5e47beba367efe35cbdf7b842ef8aa5c85bf6d2693e3d244262c3a3fe61bbff0000000000000000000019ae54f61a213dcd5ffe22310060de8c02c6aebc7b72f2c30d9568e99e347b6854092db1f1b36e66eafabc9bdd451f129378af4d4c067a3c059dc9bee06bc5d42e3586040defad30a93098c70f1727db5f9049629e79bcc5a06c92ff6952e66d389277c60522065439b3e7a1e713b9bd5f901a2256e668c51da3e85900000000000000"]) syz_usb_connect$uac1(0x6, 0xb5, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902a30003010000000904000000010100000a24010000000201020324040000bb0904010000010200000904010101010200000c24020200000000001c00000000b48a122402027f00040004991367e40000ff000725010000000009f3010000010200000904020101016d834e6da2548d0200000b240201ee040d05e4aa2f0b240201dfd5f44809058209000200000007250100000000000000fcbb5c1ee5f0b35da5df48d6f76f461af6a8a4bef55421b28a473c6c19e71a25b15d4305fc820ed2a5cbe1b53e1ec708b5dfb7ab9b1e5dd50ba41be365fead809e36410154536dc6512da79d922494faeb12acbb59ef0e4522c7a9b9d38f94113ab1bdb6ace5e62f9c2d4761d27e1f50ba117322d180490a2b31ea2feb64dab6c5727111b1ce8d9ed5b2ffb27d18fe88866ada86bde54b200600000000000000904224753a1c30100021bc664f983463fedcd38442e1ee71c2e315f1d658610ddcaf220a2ba5688c7e8b3722c517ccc12b12ed27ca46e4908a5c28806e12f7f1abbbe2613a960e8c833d1bfc529f7966ab2a9a0cd04e171f5dc22fb78a31b80943f1e642a37498b0b6dc78d28d422167b6f701b7885dadd1642e80e3e9a7b1e819ca8e77"], 0x0) 10m13.506650971s ago: executing program 3 (id=2423): io_uring_setup(0x1695, &(0x7f0000000000)={0x0, 0x3899, 0x1f, 0x2000001, 0x11f}) (fail_nth: 15) 10m11.514459791s ago: executing program 3 (id=2429): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x23b, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f022}) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0xffffffffffffffff, 0x4, 0xeeaf, 0x8000000000002}, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) syz_usb_connect(0x5, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x33, 0x97, 0x2a, 0x40, 0x12d1, 0xb005, 0x98c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xff, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x0, 0xff, 0x4, 0x1}}]}}]}}, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x33, 0x97, 0x2a, 0x40, 0x12d1, 0xb005, 0x98c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xff, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x0, 0xff, 0x4, 0x1}}]}}]}}, 0x0) 10m10.514483021s ago: executing program 33 (id=2429): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x23b, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f022}) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0xffffffffffffffff, 0x4, 0xeeaf, 0x8000000000002}, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) syz_usb_connect(0x5, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x33, 0x97, 0x2a, 0x40, 0x12d1, 0xb005, 0x98c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xff, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x0, 0xff, 0x4, 0x1}}]}}]}}, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x33, 0x97, 0x2a, 0x40, 0x12d1, 0xb005, 0x98c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xff, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x0, 0xff, 0x4, 0x1}}]}}]}}, 0x0) 8m50.994127788s ago: executing program 5 (id=2643): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x804) socket$packet(0x11, 0xa, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x50, 0x8, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8040) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "f22ada", 0x30, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @time_exceed={0x3, 0x1, 0x0, 0x1, '\x00', {0x2, 0x6, "40a619", 0x40, 0x33, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000ac0)="edc60165058e891023220e8372175765cc7e38", 0x13}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getgroups(0x1, &(0x7f0000007100)=[0xee00]) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000840)='B', 0x1}], 0x1}, 0x40851) 8m50.59052723s ago: executing program 5 (id=2644): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x8) statx(r1, &(0x7f0000000100)='./file0\x00', 0x1000, 0x80, &(0x7f0000000140)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 8m50.366770667s ago: executing program 5 (id=2645): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xaee2, 0x2, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) sendmsg$nl_generic(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x178, 0x3b, 0x300, 0x70bd27, 0x25dfdbfb, {0x1a}, [@nested={0xd, 0x8a, 0x0, 0x1, [@generic="51b26530e6e37b3e44"]}, @nested={0x142, 0x12f, 0x0, 0x1, [@typed={0x14, 0x10f, 0x0, 0x0, @ipv6=@empty}, @generic="1dda0302c74b75dd363140620e61d8957b6fe19f630de730f9a5e15cc37e024f4e725d3cf6f5a5a9eb7cf5fb5a76", @nested={0xf9, 0x6c, 0x0, 0x1, [@nested={0x4, 0xcc}, @typed={0x8, 0x145, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x111, 0x0, 0x0, @fd=r3}, @generic="cf868fd586ee2106a53278ed8895412c40e5e59f68f5262bbed8bb4f597b57ca7e07f2bad75b6b52f037e4ca1ebb6f5bb0cd728add818cafda7376f940f954392a1d2979c1c4afe5bbc149768938c57a6b8367fa666ae7228f0a500eb833045490660bb0a7420e5f5b750724ccf36f5bda5840", @generic="2cd4397ff067cf170aaa114b66ce3a5f97924860011219b231335e05aeeca42fc76f88279d39545c0231d31336f34fa2393c0163669721a7bf9ec7e970c6a4d945f25f3d70981f56506651bd0ccdfa64eec19cc4f2ff148c0a00c8915453a6582872e603ebc3", @generic="ea06084562e81741"]}]}, @typed={0x8, 0x13c, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x3e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x178}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000890) 8m49.335509561s ago: executing program 5 (id=2650): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}}, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="ccb800002ce698e29bc53070463895a2d5e5523a46fde5764f1b90eb5956725c49415a941e759618e9d29523ab15244f8a5cf0b8203b3968b192bab5febf8aa7ae7bf59a7ed5f861589e7d6d659f6795dc6f90e5c6ac6e58fd488d018eee768e", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fbdbdf25160000002400018008000100", @ANYRES32=r2, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000500030000000000140001800800030001000000080003000200000014000180080003000000000008000100", @ANYRES32=r5, @ANYBLOB="300001800800030002000000140002006d61637365633000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0500040000000000050003000000000005000300060000001c000180080003000200000008000300000000000800030001000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4008010}, 0x8811) r13 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r13, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000a40)=""/215, 0xd7}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x2}, 0x1) sendmsg$netlink(r13, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000006c40)=[{&(0x7f00000044c0)={0x1018, 0x21, 0x8, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x1005, 0x138, 0x0, 0x1, [@nested={0x4, 0x112}, @generic="87baa4740d1c33fe3865c2db1d8de34ee871ca3dd265ff62e6c48902e5515860d6ffdb96d7fd1c546a9a09e5eed175c94514f3fc1da21653a77e6d92783514ec30f439be9a4f56543a1d859c62c21857382bed88d17d9c378db307ddcc432bd8ffcd4312", @generic="efbf4c3f0e24b58468e28e3f76012618309f052348cdc06325a36a4a5ef0766dc19435c0fc04b17e8ded89a2ecbc4f9ea83cf5deaa45e53f8713644ef39aed23958e7fea0f35e485b24048e45a4dfb34659927835d92543d9424254611c1a2cc33cd5d9bc90f574b9b2d77d933e3c02ce8c55ba2fcb75b316d7a90f1c58d34c31d0919281de909e00a4f7d01bc294721a35832adfdaa2f07e9d64b7248b696f691494c90cfcb6af548874c0b7b74959d5d195ffe179d596c71fb564ed463de1aeda6a4619a613027221d6444a46e", @generic="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"]}]}, 0x1018}], 0x1, 0x0, 0x0, 0x3a630fc1f7620b5c}, 0x0) 8m48.158339517s ago: executing program 5 (id=2658): r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a0008"], 0xb4}}, 0x24040810) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xff, 0xc], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0x2]}}}}]}, 0x88}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc2c45513, &(0x7f0000000280)={{0xb, 0x0, 0x3, 0x0, 'syz1\x00', 0x4}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40000, 0x0, 0x4, 0x0, 0xfbcc, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x2, 0x0, 0x200000]}) r4 = userfaultfd(0x80001) readv(r4, &(0x7f00000000c0), 0x9) listen(r0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000004c0)={'vlan1\x00', &(0x7f0000000480)=@ethtool_eee={0x2c}}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r0, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000000)="00c881d76049", 0x6, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) write$UHID_INPUT(r8, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) futex_waitv(&(0x7f0000000ac0)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000800)={0x77359400}, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}}], 0x3, 0x2, &(0x7f0000005ec0)={0x0, 0x3938700}) recvfrom(r6, &(0x7f00000000c0)=""/74, 0x4a, 0x10120, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002c8080000000000000056010203010902120001520000000904c305000e010007"], 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r10, 0x6, 0x21, &(0x7f0000000180)=""/162, &(0x7f0000000040)=0xa2) 8m47.873984413s ago: executing program 5 (id=2661): r0 = socket(0x200000000000011, 0x2, 0xd) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000b40), &(0x7f0000000b80)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xef, @remote, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000240)="5f57ea88bca53c95bbfd8835a11f94e7cf4511288e683b69a41eb0797c07b3a3df3c033fb2a94c04f9dd53d46942307fdb6a24b99a737cf34d72ce2f8e1366d4e15371f8f9e6f61b086dee5362be704509bf80fab2b2eec3f5e90419f91d61809ee0f8fa13962ab6f52d1321712c311120422e712de429c4b4cb", 0x7a}, {&(0x7f00000002c0)="763507bdb3c8b77dc3cc705f5be98ebcb5a3d5ed72b10ce5854e9bfd948c33d60bb3296a2dd0f4e3ff003f2c654e039aef3343dbac5849b300cf544228a0bf639570f2aa03ddf7671ee0ecc3cb95d141e2effd6b04f957bcee95b8fa705dac2b523c071dbb462f0446d7021079ac71c9fc583bfae6f0efe6ecd8f79ff1500e5941de41a2e14f9ea4fdb27d5c91919824d5ce1594f2646c67cce7f80f852b847d3b7711dbf685a6d0266b65788f7d88baa9e7e2ab615521f7b08931876ec10446e2a1221a8b95b3b1", 0xc8}, {&(0x7f00000003c0)="db220fae7fc2508dd4be8cf3424168d6d38610049476ea311b136b3f2f39163e8540027f19c9c27dc5a3903c41f2e853d68a067f9cf5cea01d2d0126e0d6baa999dc4f96cc55e70ee7bc94fc1282be4d3d1fde41e58b8c74764fa8382dbfd3b00c3a463356ed00c52e9d64f3daaffa6fb8d3", 0x72}, {&(0x7f0000000440)="71869a819a0600bd4196349de6ac9ccaab850470fd343cdc68eadb332ece84cb2ca33e37e4c42ee387d3b24b792ffa6fdd061978da4cfe20519bf72d2e71c83905d05ec6253fdda6528a98c5933b4f046794409d464e6d9fd87e51471dc507bd311b5afd1936eba31eb683a0c32c148e86911843202efaf88aa912cf311093b208206cbed59a7671dec18d0eb025572338a7df69b4cb1099b4c4792b53a2f5845f3cb0e4be4749987ed723d35cbcb224285eb9772c3cfaa86aa2bb5d36ba7f87cc", 0xc1}, {&(0x7f0000000540)="c8e343e68ef7e230295f70c2cc75aa0b42e79c9a5dc9081b670cdda93229c86259b58ee2089dc7ba2c73410055d09533f7495beb1b82c99a11543f51b86e9ea62797778a0465ef9dccf4487cf283a7ddb00b33e5e6054a0050ec751300b242b738b4b100a8d84a361cbd8b396e0190b0e9f0aab43223d147d8ad06062306704749cf30fe2090c85d7c310bb76c48ac0b1f6ff2de76a6cdc065529fe475593e437b3db58b80c4411cddee06eaad2f865ff770f2da38d7b0f3fe", 0xb9}, {&(0x7f0000000600)="cb8daed48a503240cf8cb98c7ba3d98f0b441b53aec5806349d6607f5fbe7f98027a4ac1b953700e4b31200abdecc7ca5374d1a3492bae158077e6a9fee039ed9c3939affdd20c2113cf1b4adbbf74286eaf18030fe9daf46fbf7e50f22ea55263ee8f36a0f6", 0x66}], 0x6, &(0x7f0000000680)=[@rthdr_2292={{0x54, 0x29, 0x39, {0x3c, 0x8, 0x0, 0x76, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}]}}}, @dstopts_2292={{0x84, 0x29, 0x4, {0x3a, 0xd, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x7, 0xfff7, [0x8, 0x3ff, 0xb, 0x3, 0x4, 0x9, 0x80000000, 0x1, 0x3]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x7fff}, @ra={0x5, 0x2, 0x9}]}}}, @hopopts_2292={{0x9c, 0x29, 0x36, {0x16, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x4cee}, @pad1, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x7f}, @generic={0xdf, 0x6a, "2425547aadeb222a23f9df346de5068921897083dbc7bae8fd44dcdf60690b40938c6bd2ede29bf3baaec2e62d4218900f27f3488c9c793dd0c5aaf9e5ad72ead934cecdcb0317aad5136fc07eb47d5addf7cb96ca269f4c5a6e717d49db6ded9d855ab9b5fdce2e7649"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x144, 0x29, 0x37, {0x8, 0x25, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x1f, 0xfff1, [0xfffffffffffff624, 0x0, 0x7fff]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x6, 0xc3, "70f3b4db17d0d285b142dd565ef8e75b176f2ab40d39ec517d4160cd5dbc62a58f5ca523c7ae44e82e148f7d48e600e5e37b524405123abfab949fe2161cfcac3101f029b8c2f7c092152d769c28331e9c515bced9869d7f33fad82aff023bde2c505851879114a324361909fb48270c752ab0866ae279baa301465992383f6c8594cdc5b3740dceb9572cd6af57286c0c695bcc0e07a47cf7161a2d7a3a4d2c8907aa10379a2384b31bef34fe7cc2642e1cb21ee8a48f167c2decf5e1545944041298"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x10, {0x3, 0x2, 0xf, 0xc, [0x4]}}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0xe}}], 0x2c8}}, {{&(0x7f00000001c0)={0xa, 0x4e21, 0xe034, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000980)="1a78d2d51cbfcd8aaaf34a5f3facab62af43d47d73e50e4980d304b7a6a3490f94f45b1ad2ced670f195e7c7c07f8d3a068163d36020ba9379a1bac2523f4ea5a2d9e6fa7a58ad112b96ab7e36b85d76b90d2aa773d08c610cacfef57379376169cd8bc006", 0x65}, {&(0x7f0000000a00)="eb70ebd78d02", 0x6}], 0x2, &(0x7f0000000a80)=[@hopopts_2292={{0x1c, 0x29, 0x36, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x1}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x3ff}}, @tclass={{0x10, 0x29, 0x43, 0x92ef}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x9}}], 0x4c}}], 0x2, 0x40801) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="e90c610faca20180c20000020800450000240000e000001190780000000000000000f3ffffffff0f9078a20c0001000000008e956448a384fc0a47f0947d53305ee501ccfa476b03eefaeac04e3a78bf348ccbe41d927f06000000b4dd71bd90b8f14c55202b1df71cc73bd4058a2a58edb66b9ec00133819ecac13375240d458be784448636b7ea9ca8b4a6e90a0955a03244387451ba83a76ab9"], 0x0) 8m47.298732664s ago: executing program 34 (id=2661): r0 = socket(0x200000000000011, 0x2, 0xd) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000b40), &(0x7f0000000b80)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xef, @remote, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000240)="5f57ea88bca53c95bbfd8835a11f94e7cf4511288e683b69a41eb0797c07b3a3df3c033fb2a94c04f9dd53d46942307fdb6a24b99a737cf34d72ce2f8e1366d4e15371f8f9e6f61b086dee5362be704509bf80fab2b2eec3f5e90419f91d61809ee0f8fa13962ab6f52d1321712c311120422e712de429c4b4cb", 0x7a}, {&(0x7f00000002c0)="763507bdb3c8b77dc3cc705f5be98ebcb5a3d5ed72b10ce5854e9bfd948c33d60bb3296a2dd0f4e3ff003f2c654e039aef3343dbac5849b300cf544228a0bf639570f2aa03ddf7671ee0ecc3cb95d141e2effd6b04f957bcee95b8fa705dac2b523c071dbb462f0446d7021079ac71c9fc583bfae6f0efe6ecd8f79ff1500e5941de41a2e14f9ea4fdb27d5c91919824d5ce1594f2646c67cce7f80f852b847d3b7711dbf685a6d0266b65788f7d88baa9e7e2ab615521f7b08931876ec10446e2a1221a8b95b3b1", 0xc8}, {&(0x7f00000003c0)="db220fae7fc2508dd4be8cf3424168d6d38610049476ea311b136b3f2f39163e8540027f19c9c27dc5a3903c41f2e853d68a067f9cf5cea01d2d0126e0d6baa999dc4f96cc55e70ee7bc94fc1282be4d3d1fde41e58b8c74764fa8382dbfd3b00c3a463356ed00c52e9d64f3daaffa6fb8d3", 0x72}, {&(0x7f0000000440)="71869a819a0600bd4196349de6ac9ccaab850470fd343cdc68eadb332ece84cb2ca33e37e4c42ee387d3b24b792ffa6fdd061978da4cfe20519bf72d2e71c83905d05ec6253fdda6528a98c5933b4f046794409d464e6d9fd87e51471dc507bd311b5afd1936eba31eb683a0c32c148e86911843202efaf88aa912cf311093b208206cbed59a7671dec18d0eb025572338a7df69b4cb1099b4c4792b53a2f5845f3cb0e4be4749987ed723d35cbcb224285eb9772c3cfaa86aa2bb5d36ba7f87cc", 0xc1}, {&(0x7f0000000540)="c8e343e68ef7e230295f70c2cc75aa0b42e79c9a5dc9081b670cdda93229c86259b58ee2089dc7ba2c73410055d09533f7495beb1b82c99a11543f51b86e9ea62797778a0465ef9dccf4487cf283a7ddb00b33e5e6054a0050ec751300b242b738b4b100a8d84a361cbd8b396e0190b0e9f0aab43223d147d8ad06062306704749cf30fe2090c85d7c310bb76c48ac0b1f6ff2de76a6cdc065529fe475593e437b3db58b80c4411cddee06eaad2f865ff770f2da38d7b0f3fe", 0xb9}, {&(0x7f0000000600)="cb8daed48a503240cf8cb98c7ba3d98f0b441b53aec5806349d6607f5fbe7f98027a4ac1b953700e4b31200abdecc7ca5374d1a3492bae158077e6a9fee039ed9c3939affdd20c2113cf1b4adbbf74286eaf18030fe9daf46fbf7e50f22ea55263ee8f36a0f6", 0x66}], 0x6, &(0x7f0000000680)=[@rthdr_2292={{0x54, 0x29, 0x39, {0x3c, 0x8, 0x0, 0x76, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}]}}}, @dstopts_2292={{0x84, 0x29, 0x4, {0x3a, 0xd, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x7, 0xfff7, [0x8, 0x3ff, 0xb, 0x3, 0x4, 0x9, 0x80000000, 0x1, 0x3]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x7fff}, @ra={0x5, 0x2, 0x9}]}}}, @hopopts_2292={{0x9c, 0x29, 0x36, {0x16, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x4cee}, @pad1, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x7f}, @generic={0xdf, 0x6a, "2425547aadeb222a23f9df346de5068921897083dbc7bae8fd44dcdf60690b40938c6bd2ede29bf3baaec2e62d4218900f27f3488c9c793dd0c5aaf9e5ad72ead934cecdcb0317aad5136fc07eb47d5addf7cb96ca269f4c5a6e717d49db6ded9d855ab9b5fdce2e7649"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x144, 0x29, 0x37, {0x8, 0x25, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x1f, 0xfff1, [0xfffffffffffff624, 0x0, 0x7fff]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x6, 0xc3, "70f3b4db17d0d285b142dd565ef8e75b176f2ab40d39ec517d4160cd5dbc62a58f5ca523c7ae44e82e148f7d48e600e5e37b524405123abfab949fe2161cfcac3101f029b8c2f7c092152d769c28331e9c515bced9869d7f33fad82aff023bde2c505851879114a324361909fb48270c752ab0866ae279baa301465992383f6c8594cdc5b3740dceb9572cd6af57286c0c695bcc0e07a47cf7161a2d7a3a4d2c8907aa10379a2384b31bef34fe7cc2642e1cb21ee8a48f167c2decf5e1545944041298"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x10, {0x3, 0x2, 0xf, 0xc, [0x4]}}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0xe}}], 0x2c8}}, {{&(0x7f00000001c0)={0xa, 0x4e21, 0xe034, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000980)="1a78d2d51cbfcd8aaaf34a5f3facab62af43d47d73e50e4980d304b7a6a3490f94f45b1ad2ced670f195e7c7c07f8d3a068163d36020ba9379a1bac2523f4ea5a2d9e6fa7a58ad112b96ab7e36b85d76b90d2aa773d08c610cacfef57379376169cd8bc006", 0x65}, {&(0x7f0000000a00)="eb70ebd78d02", 0x6}], 0x2, &(0x7f0000000a80)=[@hopopts_2292={{0x1c, 0x29, 0x36, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x1}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x3ff}}, @tclass={{0x10, 0x29, 0x43, 0x92ef}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x9}}], 0x4c}}], 0x2, 0x40801) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="e90c610faca20180c20000020800450000240000e000001190780000000000000000f3ffffffff0f9078a20c0001000000008e956448a384fc0a47f0947d53305ee501ccfa476b03eefaeac04e3a78bf348ccbe41d927f06000000b4dd71bd90b8f14c55202b1df71cc73bd4058a2a58edb66b9ec00133819ecac13375240d458be784448636b7ea9ca8b4a6e90a0955a03244387451ba83a76ab9"], 0x0) 17.146283322s ago: executing program 6 (id=4712): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000280)=r5, 0x4) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033"], 0xfe33) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r5}, 0x1c) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = socket(0x10, 0x803, 0x4) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000d0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0xfe, 0x3, 0xffffffee, 0x40, @private2, @mcast1, 0x10, 0x700, 0x1, 0x9}}) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd2b, 0x25dfdbff, {0x7, r8}, ["", "", "", "", "", "", "", "", "", ""]}, 0x18}}, 0x28004c41) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000090605000000000000000000050000010500010007000000080009400000000902a1070000000800094005000001"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x28084414) mount$fuseblk(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x2010000, &(0x7f0000000780)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}, {@max_read={'max_read', 0x3d, 0x81}}, {@blksize}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@hash}, {@permit_directio}, {@fsname={'fsname', 0x3d, '@'}}, {@obj_user={'obj_user', 0x3d, '['}}, {@seclabel}]}}) sendto$inet(r6, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 13.850194663s ago: executing program 6 (id=4724): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a0008"], 0xb4}}, 0x24040810) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xff, 0xc], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0x2]}}}}]}, 0x88}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc2c45513, &(0x7f0000000280)={{0xb, 0x0, 0x3, 0x0, 'syz1\x00', 0x4}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40000, 0x0, 0x4, 0x0, 0xfbcc, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x2, 0x0, 0x200000]}) r5 = userfaultfd(0x80001) readv(r5, &(0x7f00000000c0), 0x9) listen(r0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000004c0)={'vlan1\x00', &(0x7f0000000480)=@ethtool_eee={0x2c}}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r8 = accept4(r0, 0x0, 0x0, 0x0) sendto(r8, &(0x7f0000000000)="00c881d76049", 0x6, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, 0x0, 0x40) write$UHID_INPUT(r9, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) futex_waitv(&(0x7f0000000ac0)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000800)={0x77359400}, 0x0) recvmmsg(r7, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}}], 0x3, 0x2, &(0x7f0000005ec0)={0x0, 0x3938700}) recvfrom(r7, &(0x7f00000000c0)=""/74, 0x4a, 0x10120, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002c8080000000000000056010203010902120001520000000904c305000e010007"], 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r11, 0x6, 0x21, &(0x7f0000000180)=""/162, &(0x7f0000000040)=0xa2) 10.730277763s ago: executing program 6 (id=4732): r0 = socket$alg(0x26, 0x5, 0x0) shutdown(r0, 0x1) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x200100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4a, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="746172676574205043493a363a03"], 0x15) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}, 0x0) 8.783345903s ago: executing program 1 (id=4736): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x11}, 0xfe4f) 8.476655473s ago: executing program 2 (id=4737): socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902"], 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x40, 0x2, 0x105}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYBLOB], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304efff00"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 8.214816685s ago: executing program 1 (id=4738): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsync(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x5) r3 = eventfd(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x50ced1b1c9c5d066) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x34}, @ipv4=@tcp={{0x9, 0x4, 0x0, 0x3c, 0x38, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}, @local, {[@noop, @timestamp={0x44, 0xc, 0x94, 0x0, 0x7, [0x3, 0x5]}]}}, {{0xc00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x46) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f0000000140), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$cgroup_freezer_state(r9, &(0x7f00000001c0)='THAWED\x00', 0x7) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r3, 0x7, 0x2, r2}) r10 = eventfd2(0x10, 0x80000) r11 = eventfd(0x25) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r11, 0x2, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r10, 0x50, 0x2, r2}) r12 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f0000001ac0)={r1, 0x3, {0x0, 0x0, 0x0, 0x1, 0xfffffffffffffff0, 0x0, 0x1, 0x400200, 0x0, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130ee4d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x6, 0x3]}}) 7.642228699s ago: executing program 6 (id=4742): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a0008"], 0xb4}}, 0x24040810) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xff, 0xc], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0x2]}}}}]}, 0x88}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc2c45513, &(0x7f0000000280)={{0xb, 0x0, 0x3, 0x0, 'syz1\x00', 0x4}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40000, 0x0, 0x4, 0x0, 0xfbcc, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x2, 0x0, 0x200000]}) r5 = userfaultfd(0x80001) readv(r5, &(0x7f00000000c0), 0x9) listen(r0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000004c0)={'vlan1\x00', &(0x7f0000000480)=@ethtool_eee={0x2c}}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r8 = accept4(r0, 0x0, 0x0, 0x0) sendto(r8, &(0x7f0000000000)="00c881d76049", 0x6, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) write$UHID_INPUT(r9, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) futex_waitv(&(0x7f0000000ac0)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000800)={0x77359400}, 0x0) recvmmsg(r7, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}}], 0x3, 0x2, &(0x7f0000005ec0)={0x0, 0x3938700}) recvfrom(r7, &(0x7f00000000c0)=""/74, 0x4a, 0x10120, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002c8080000000000000056010203010902120001520000000904c305000e010007"], 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r11, 0x6, 0x21, &(0x7f0000000180)=""/162, &(0x7f0000000040)=0xa2) 7.004206373s ago: executing program 1 (id=4744): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$kcm(0x10, 0x400000008, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4088, 0xff8}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000c40)=""/105, 0x69}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000140)=""/184, 0xb8}], 0x6}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x2) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x82) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) r4 = io_uring_setup(0x7fb4, &(0x7f0000000300)={0x0, 0x997d, 0x8, 0x1, 0x195}) r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x8c63, 0x0, 0x0, 0xfffffdfc, 0x0, r4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="ce010000d1253c40d11256eddd460102030109022f0001000000000904cf0000ff013700052482"], 0x0) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x181a80) syz_usb_disconnect(r3) r8 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r8, 0xffffffffffffffff, 0x0) close(r2) 6.264250554s ago: executing program 0 (id=4745): r0 = socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x401}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r5, 0xc0745645, &(0x7f0000000000)={0xbcad, [0x0, 0x8001, 0x4, 0xc000, 0x94c, 0x100, 0x1, 0xfde8, 0x6, 0x8, 0x83, 0x400, 0x6, 0x4, 0x5, 0x16, 0x204, 0x2, 0x52, 0x0, 0x7fff, 0x4, 0x80, 0x9, 0x5, 0x5, 0xfff, 0xb12, 0x8, 0x8, 0x0, 0x1000, 0xe, 0xffff, 0x3, 0x10, 0x2, 0xb5e, 0x3, 0x2, 0x3, 0x203, 0x8000, 0x48, 0x8, 0x4, 0x9, 0x4], 0x7}) (async) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x534, &(0x7f0000000740)={[{0xc2, 0x4e00, "eda68eeeb8fed7c85d0ccb1af54aa16dd1d08edd7e074ffe8670f5ebc13de0e439fc39977a784b233398f1ba1ef103700ee5b70e4d07ffbf2227d4c3d3de17f1e5810851efa999f9cd2be63c60f0b1834d9472639062217802ec618ab43e3f94de5db23ce2763c783d5905c4f8400e488b2f1a027b1b31cd6a5a829b6fffce980558d3d7ba616cc2e3a011b79276e3e1d58dd3c33136c83b37e0479465f8805ed7ae9afa18615e8996a0b019d81dd89a9ee063a05c77ef99acd7d51429f2f729bb7d"}, {0x6a, 0x4e00, "7a7ddaa47a7e36093ad0a12cf93fdf6bdfcc7227dbdb7ae1f1f73f60f546ddfc98e1776638351383cf478b8aa09ec00ff4900b4051f7f73320e9ef1bfef186bf88ad355231650353477f34f434f6c87e2f03708377c8c143f10900e876836bd9c58f4e75a6f6a741687c"}, {0x7d, 0x4e00, "925a0b4de1b0444f7e3f669422aef1950a2288dc00e1a7a06fa71600ab64f69f4e526d175b57271e146a5ce51a1dce1037fbb0eda8abe8993e2865f611ef7aa60f33a162b3fbfbc9eedfd41601a98d2c0e569b57f5b6bca7524b291d7369ad7cbfc31fecdf4093a07bd1441938ca6aecd8d8129218bc31d1f838b8bdf6"}, {0x52, 0x4e00, "4a6ec3c9e31014c6dbd60f3a84ef74acebed9201915abaecf7a90f2711cfcbe34150a5d0a7a460c07c7bb1a3ffd4e72b10e855e54addab984412c86d6848d4772b539f3a9941a73c5c7d2b6a9b272b9fd6c9"}, {0xa8, 0x4e00, "d571dce0939f4c4f4c373902796d8e6cd440769e75bf78b507a6d3f3a98e05af90d4a2315b39e8b1481ac20ae669cadd9f35151f73835ea150c4bea4f40c8529d201bac7d57b9ca663cf88be6ebd9b7f26be48cff6d2ba19d0fd7927e446dc4026163320852bdf845230bb8b9fe0c6d82ff4f7a96f0a33142733f2d4b4a248ca1cdaff1f2f61e09af30705199c11c664e85ef576dfcf260ffcfc8b5a93fec7150e95783961cb610e"}, {0xa, 0x4e00, "ea4db8814b3ba3f43a34"}, {0xc5, 0x4e00, "5ac26dfc365e30a721ffac594d8d0334dbd4a95b5118eac2c7a532c5febc381b08947cad8b8757512caa96109d63e899237d8b091023a41c8c693575b8c801d9bc191780a6e7cf25595dd361c8334fdaed044cfa9f31d2fc2e4443b800c63eb62c7c054c60768d6a7461783f2e63bdf698f8e7521a1a19f4f681b5d74800ede86e708e5c47ca0d37b3caa23f5922002d47c77680ad9c57a996e270974f4945fe21d6f4978a0c61cd72cfc74dbea3bc60445b08d4f49a015bd50e604f326e5cda0f5b702986"}, {0x97, 0x4e00, "4dec23765b30a401234c9f9dbf436d5065b2757ca40070660fae96abcd1e4e9d6fc874bca1f99a24bf9aa2654a0695e687e527ba60f32aa9e66bde7066bd974ecb284628c2d8fa85b33238e34eddd4725d2350d45d77dc6d644883b3a855167be309f1d5db532acb8eb7608a336a33daa37a491e00be1a23acb80f5d31d3b278e008de17539cb31200"/151}, {0x28, 0x4e00, "a4d1aa68c17a07c137b334b7479555489b583daf01055627e46580567b5a1e90af51c5d5e3a461ac"}, {0x39, 0x4e00, "57209c91853143236fb363c6409d47129796ca97f556d70358e842cdb84e3af58bdcd6a41c1376b78575a067e0081dbd09198314320a9b3725"}, {0x89, 0x4e00, "fae4b9c312502af8f5c4b0e2b6697933749d06bc65346b614891a94c472896cfa70c09d6e15249ae6bb6b42233cd6a0e9f04f6a45be438f521c5b13633787ddba90760633abbdba84e8f0648c758ea0a6275dc3e9d41ef6671d00b0ec795ff34640d2eaa43b46ab6998c5d50fb01b4fc3430c36ad218fc76dd6919a34ba174985a65435593776b826f"}]}) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="2000007e73695a7911ddb434f502b16c115bbdd600e2ef80ff343e3865160ecc01ebd5d3dfb6f0af0602393b48f47ceb3880976694f4c939152c4344606758c03ec161ad9afc67a0a0b6243488d770852692f5a38642c32e4f7a77e44e78da4b8b612ddbf74cdfa6724b"]) 5.586778833s ago: executing program 7 (id=4747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$isdn(0x22, 0x3, 0x11) unshare(0x2a020480) unshare(0xa020480) 5.465180809s ago: executing program 7 (id=4748): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x8000) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000000)={0x1, 0x4, 0x5, &(0x7f0000000140)={0x1, "fd5a44512b7e1b0020ed2abb4301002700"}}) 5.345640937s ago: executing program 7 (id=4749): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) (fail_nth: 14) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 5.205116604s ago: executing program 0 (id=4750): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000124000/0x1000)=nil, &(0x7f0000839000/0x1000)=nil, 0x4000000, 0x0, 0x0, 0x9, 0x40, 0xe4, 0x0, 0xa}) 5.199971023s ago: executing program 2 (id=4751): syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES8], 0x0) (async) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES8], 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x32) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0x31) socket(0x80000000000000a, 0x2, 0x0) (async) r2 = socket(0x80000000000000a, 0x2, 0x0) unshare(0x400) (async) unshare(0x400) getsockopt$inet_opts(r2, 0x0, 0x0, 0x0, &(0x7f0000000280)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup2(r5, r6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r6, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet_sctp(r7, &(0x7f00000060c0)=[{&(0x7f0000000080)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000002c0)="b5391987f55183540259617b1d2627d0f969fdbbe73bc3559ce5d89894c7eed23dd5658bbf", 0x25}], 0x1, &(0x7f0000000780)=[@dstaddrv4={0x10, 0x84, 0x7, @loopback}], 0x10}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r7, &(0x7f00000060c0)=[{&(0x7f0000000080)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000002c0)="b5391987f55183540259617b1d2627d0f969fdbbe73bc3559ce5d89894c7eed23dd5658bbf", 0x25}], 0x1, &(0x7f0000000780)=[@dstaddrv4={0x10, 0x84, 0x7, @loopback}], 0x10}], 0x1, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01004427bd7000ffdbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a9, 0x50001}}, 0x20}, 0x1, 0x0, 0x0, 0x24040890}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000901040000afb7d0279001fee2b277bdf492471140836692812fa6de91fdf64f14b7ff9f928fd6105d8a88c738916dee4c0178697e0b2e97865faa9efc4e6072668af36e2b73896403bca48061ce1593d3db0a736345bb77c7261d3ace2fa74ef755fd22b6fe1d033f0b0a5e0d79afbc249fa6e99bb0ed75f7b1cc2900978ada3a115543aac6d0b40a0042eeb21a78dbc1bca81519d32e8c4b5dca65bf8b195f12428f"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000901040000afb7d0279001fee2b277bdf492471140836692812fa6de91fdf64f14b7ff9f928fd6105d8a88c738916dee4c0178697e0b2e97865faa9efc4e6072668af36e2b73896403bca48061ce1593d3db0a736345bb77c7261d3ace2fa74ef755fd22b6fe1d033f0b0a5e0d79afbc249fa6e99bb0ed75f7b1cc2900978ada3a115543aac6d0b40a0042eeb21a78dbc1bca81519d32e8c4b5dca65bf8b195f12428f"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="000c000200"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="000c000200"], 0x0, 0x0, 0x0, 0x0, 0x0}) 5.161368861s ago: executing program 0 (id=4752): r0 = socket$alg(0x26, 0x5, 0x0) shutdown(r0, 0x1) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x200100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4a, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="746172676574205043493a363a03"], 0x15) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}, 0x0) 4.578126041s ago: executing program 6 (id=4753): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x22, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1e, 0x4, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r3, 0x0}]) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4.453992149s ago: executing program 7 (id=4754): timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) rt_sigaction(0xe, &(0x7f00000000c0)={&(0x7f0000000000)="f30f1efc66450f2832c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e10043c4e2f923bd6b000000653ed9fa", 0x8000000, 0x0, {[0x8000, 0x1000000]}}, 0x0, 0x8, &(0x7f0000000200)) 3.802819074s ago: executing program 7 (id=4755): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r8], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newchain={0x8a0, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x830, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x8}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x74c, 0x9, 0x0, 0x1, [@m_xt={0x1f0, 0x7, 0x0, 0x0, {{0x7}, {0x16c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0xb7, 0x6, {0xe60b, 'raw\x00', 0x7, 0x9, "168e51211cb0dac1567328a23adecd528e86128d70a7db97853a2c78627cdda91304290adbec04a3a96b3d9e303a29496aa41cfabf6c14c943dc391fa80b8d8b326812c0b47c0e1ad7e6170ebaaccfe1dc20069e4154d85deddbbce8c087b5548d7f25e21fabf5690e19c02b7bb5ec46704f9612da60faae427bc3ffdf74e48fcb47940a8ae09829bbf8a115a6"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TARG={0x8e, 0x6, {0xffff, 'raw\x00', 0xe, 0x1, "0129802a0b60f2b583aff63df8785b506e15fc39b254636b7feaa39c02cb49e0a41da7a8575d4f710ec2db08ab8b34cb582bf22aa732548853e6fe2e5128c273f0ee78e2f0bdec236e6394eef6dac5f305646df0c5c7e7b6bfc848b33baa6334138c8fc9"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x5d, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc509"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x478, 0x1c, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ff2080b, 0x9, 0x9, 0x3, 0x81, 0x1, 0x7, 0x1, 0x1000, 0xfacb, 0x8, 0xfffffff2, 0x7fff, 0x2, 0x4, 0xfffffc00, 0x7, 0x9, 0x784a, 0x7, 0xc, 0xe, 0x8, 0x2, 0x7186, 0x9, 0x8, 0x40000000, 0xb4, 0x60, 0x1, 0x9, 0x9, 0x9, 0x0, 0x7e3, 0x5, 0x0, 0x4, 0x4, 0xfffffe01, 0xa9, 0x8, 0x9, 0x0, 0xfffffffd, 0x1, 0x100, 0x2, 0x1, 0x1, 0x5, 0x9, 0x8, 0x3, 0x5, 0x8, 0x6, 0x10, 0x5, 0x0, 0x8, 0x1000, 0x69b9, 0x8, 0x5635b7f0, 0x9, 0x877, 0x5, 0x5, 0x9, 0x8000, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0xd, 0x5, 0xfff, 0x8, 0xd, 0xfff, 0xffff, 0xd, 0x3ff, 0x8, 0x8, 0x401, 0xb, 0x1, 0xefc9, 0x8001, 0xfffffffa, 0x0, 0x1, 0x7fffffff, 0x7, 0x900, 0x9, 0xa600, 0x9, 0x5, 0x0, 0x0, 0xc9fb, 0x9, 0x2, 0x80000000, 0x3, 0x67e, 0xe53, 0x8, 0x1, 0x80000001, 0xfffeffff, 0x8, 0x7f, 0x622, 0xa, 0x8000, 0x9d, 0x4, 0x101, 0xfffffffd, 0x5, 0x4d, 0x6461, 0xffffffad, 0xc, 0x6, 0x9, 0x3, 0xfffeffff, 0x47, 0x200000, 0x2, 0x7, 0x1, 0x6, 0x68, 0x8, 0x0, 0xcfdb, 0x400, 0x8, 0xd, 0xffffffff, 0x101, 0x1, 0x7, 0x1599, 0x1ff, 0xc, 0x447, 0xfffffffc, 0x1, 0x2, 0x0, 0xfffffff8, 0x8f, 0x3, 0x0, 0x7, 0x9, 0x2, 0xec2, 0x6, 0x3, 0x800, 0x7, 0x6, 0x9, 0x5, 0x4, 0x0, 0x3, 0x8, 0x8be, 0x7fff, 0x2, 0x40, 0x1ff, 0x9, 0xcbe7, 0x7f, 0x8, 0xc08, 0x7, 0x5, 0x4, 0xe, 0x2, 0x7, 0x4, 0x7, 0x1, 0x9, 0xc, 0x9d00, 0x5, 0x80000001, 0x80000001, 0xbec, 0x5c, 0x80000001, 0x7, 0x2, 0x7, 0x3, 0x8, 0x8, 0x1, 0x9, 0x3, 0x7, 0x45b9, 0x0, 0x5, 0xc, 0x9, 0x2, 0x6b06, 0x3, 0x7, 0x8, 0x331, 0x4, 0x2, 0xffffffe6, 0x870b, 0x8, 0xe2ed, 0x5f01, 0x4, 0x9, 0x6, 0xfffffffe, 0xfff, 0x80, 0x3f31, 0xbb, 0x1000, 0x9, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x7, 0x6, 0x4, 0xa]}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0xe0, 0x1f, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xff, 0x5, 0x80, 0x5}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x43f4}, @TCA_MPLS_LABEL={0x8, 0x5, 0x37b99}, @TCA_MPLS_LABEL={0x8, 0x5, 0x30e9}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x80b, 0x8, 0x6, 0x0, 0x5}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x53, 0x6, "96986d955fa653444a3d601379169839058212418f8681f2327b9b105bd5e31418412b10ab51efbf536d6faa7284fcdcbb6732089908467917f254c5f0de058b4c6d1dda345d1da5e7e1ac23a4576a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.732300963s ago: executing program 1 (id=4756): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009fcee14086803006b4830102030dc7f40009050200"/45], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000050000060900010073797a3100000000580004805400018009000100261a54f75d7753086d6574610000000044000280080001400000000c080003400000000d08000240000003ff100001400000000008000240000000010800034000000000080002"], 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x20060814) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502"], 0x7c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r6, 0xc01864cd, &(0x7f0000000580)={0x0, 0x0}) 3.413775552s ago: executing program 0 (id=4757): fsopen(&(0x7f00000000c0)='ocfs2\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40012142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000400)={0x0, 0x2, 0x10100, 0x2, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r3, 0xd81, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(r2, r6, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) inotify_init1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rmdir(&(0x7f0000000100)='./control\x00') ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000640)={0x2, 0x12c, @ioapic={0x2000, 0x73, 0x2, 0x2a, 0x0, [{0x94, 0x4, 0x1, '\x00', 0x1}, {0x6, 0xe5, 0xff, '\x00', 0x5}, {0x4, 0x0, 0x8, '\x00', 0x2}, {0x97, 0xff, 0x8, '\x00', 0x4}, {0x0, 0x40, 0x6, '\x00', 0x7}, {0x0, 0x1, 0x4d, '\x00', 0x2}, {0x7, 0x40, 0x4, '\x00', 0x7f}, {0x6, 0x6, 0x4, '\x00', 0x5}, {0x22, 0x80, 0x1, '\x00', 0x7}, {0x9, 0x40, 0xd8, '\x00', 0x9}, {0x41, 0x3, 0x3, '\x00', 0xff}, {0x7, 0x8, 0x78, '\x00', 0x8}, {0xe6, 0xf0, 0x6, '\x00', 0x6c}, {0xba, 0x8, 0x77, '\x00', 0x7}, {0xf9, 0x90, 0xf1, '\x00', 0x8}, {0x9, 0xff, 0x4, '\x00', 0xd7}, {0xcd, 0x1, 0x0, '\x00', 0x8}, {0x53, 0x6, 0x80, '\x00', 0x7}, {0x4, 0x2, 0x0, '\x00', 0x2}, {0x4, 0x7, 0xff, '\x00', 0xa}, {0x5, 0x4, 0x3, '\x00', 0x9}, {0x2, 0x3, 0x7f, '\x00', 0x1}, {0x8, 0x9, 0x64}, {0x8, 0x9}]}}) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@deltfilter={0x38, 0x2d, 0x204, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xfff1, 0xffe0}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x38}}, 0x0) bind$can_raw(r7, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003d00)) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, 0x0, 0x0) listen(r8, 0x7) 2.563997554s ago: executing program 7 (id=4758): socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f0000003400)={0x3, 0x0, 0x7, 0x4, 0x8, 0xda53, 0xffffffffffffff01, 0x8}, &(0x7f0000003440)={0x8, 0x64, 0x297c7d26, 0x8, 0x9, 0x8, 0x1, 0xffffffff}, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000008700c0af00000000000010902240001000000000904000001030000000921000000012205000905810300000000009ed982cb858f87bec2a06b6e7b0a"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) write$sysctl(r4, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.523938874s ago: executing program 0 (id=4759): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0xf, 0x803, 0x9) r3 = syz_clone(0x60218000, &(0x7f0000000440)="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", 0xdf0, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)="95b50510ad87f1d6641f2fb25d5eba1220d63a1ce5dbd7a2d876a408fab3a622a1ab57ec6f19fea855f92e238f68d4fe2ad46aff43a6f982e5ebcacd08221fe6b2bb64304fd338d18793bc7e23e67ba39aa43e813ddbafb8876dc5153e154ed659a1b5f358052e2027b172d7b5349a764db335fe54bfbf3702e497c1b704b7bd0e16789b4b1750727de727931c919bbd116809664fb1a3c8ad32d4") sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r4, 0x5402) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r6, 0x10000) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000440)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r8 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @auto=[0x33, 0x62, 0x32, 0x35, 0x39, 0x36, 0x62, 0x0, 0x62, 0x61, 0x36, 0x65, 0x64, 0x38, 0x65, 0x64]}, &(0x7f0000000340)={0x0, "ccb9490a299cd16d4bb6b1878b185d761fe6ef51f2fd0b4230da9e08134e22912f729cdb1b6f015a62c8ed3d596854d654201d7909d8f3933c1e69c07d17b758", 0x1a}, 0x48, 0xfffffffffffffffa) keyctl$instantiate(0xc, 0x0, &(0x7f0000000140)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '/dev/sequencer2\x00', 0x20, 0x6, 0x20, [0x66, 0x33, 0x65, 0x37, 0x6e, 0xe, 0x62, 0x66]}, 0x44, r8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xc3, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f00ef005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1.798209066s ago: executing program 2 (id=4760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"/517], 0x78}}, 0x40814) 1.459246649s ago: executing program 2 (id=4761): r0 = socket(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x2, 0x3) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) write(r0, &(0x7f0000000240)="2600000011003f20000000bf8a9d719797efcee3130000000d39036892f3f77156c2aea30a4b", 0x26) r2 = syz_io_uring_setup(0x17e0, &(0x7f0000000040)={0x0, 0xab0f, 0x1, 0x0, 0x1c1}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r2, 0x2c9c, 0x1f6f, 0x0, &(0x7f0000000140)={[0x5, 0x1]}, 0x8) 1.458984919s ago: executing program 6 (id=4762): ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000000)) 1.184265242s ago: executing program 2 (id=4763): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) time(&(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fcntl$getown(r1, 0x9) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$inet(r4, 0x0, 0x0, 0x40000021, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x32344d59, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0xffffffff}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f00000000c0)=""/24, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010020d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="21120000000000002000128008000100736974001400028006000d000500000008000300ac1414aa"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 629.708313ms ago: executing program 0 (id=4764): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="000a560000005609001c0000004dc2396935f3a7492c149b1d079fe8e7d9a354f0f1a3458343b820cbc64e8e9975696f77242215693cbe64abfe8485dbe73976202bba64d52b3ad10733c244d1f7540d23c29670a628b1f8480000004f53a2cea7c955ab81ff6a0e79a9f04500bf5d22b40d41d75d18aaed3caea19225b04f87183df3822818599ca3175aa5a9d567370a695ba1f76a37997a0cf6b9d99abafdd3c1989e75fd12f468bc2f114184b941f05c22426e85bfea1e69b3c4b25e158c3d55889afa7aec230a681fdc1174c3a517298cff0c56df2c7673c8c72910f716cf9eb07826305fe08bc0fb7b5e"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a80d008100160086dd6000000000140600000000000000000000000000000000010000000000000000000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5410000000"], 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='status\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000002b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000440)={0x80f0f020}) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000306010100000000000000000a000005050001002a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x44814) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r7 = syz_open_pts(r6, 0x141601) fcntl$setstatus(r7, 0x4, 0x102800) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCFLSH(r6, 0x540b, 0x0) syz_usb_connect(0x6, 0xb27, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xe6, 0x4, 0x3, 0x40, 0x81}, 0x28, &(0x7f0000000140)=ANY=[@ANYBLOB="050f28000403100bfd0f01b054000007d2580891aa583ad96ddec00800092b700300010004020700"], 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf}}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 427.573814ms ago: executing program 1 (id=4765): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f40)={0x18, 0x2d, 0xb, 0x70bd26, 0x25dfdbfb, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 27.315374ms ago: executing program 2 (id=4766): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000007cc0)=[{{&(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000280)="d1cc5054599070fbb94f59ea84de69f840a9c6e8084211957fd98a36c31d3beab20cc005520dcb459ae4d823750c03ed285567500438b9d17f91196eee2c813279ec38b4cfb79c7b281dc28c188bf1e173d95252d7a3dc91ec35c494cf25d237df6f5809830d25536bd36eb1eaa01c97be536dcc65e7fe79a0bcffca3bd993fb8837663352a951bcccf67ed380522b66d88ebe04a947baa7213ce53c506b9b189024b5964c7e2217807bda5c5d18ed432f0461be8cd0eb0fa0146c1bc3c4dfe8a6b03861962454fe971a6d1556f77e13a05fd6a483551971476f6179b4633e5894f3e2abd064fa150165490e70118d80880a09d654f3a5d2", 0xf8}, {&(0x7f0000000500)="65e1146fff98d6cf3065822691221e2bfe7bc7fff34272aae72b36e6354bb5aecfb7f258a4883251af3d1b8d2d47087cb46b9c1ee1d8794d1b0abcac7b5176d2be53cd0576fc2df50da75a86005fc878560d69e76c2bb54d3b20619e7387b4d8973edb3e362464ccabe372ac8714", 0x6e}, {&(0x7f0000000700)="4c5eb8f7556c05d0b021160edcb319b5aaa2fa25319e45fb44bfdf1e4441624e2d6982ffb1429ea2e3", 0x29}, {&(0x7f0000000380)="6402cb59bf5cf80e987be4ff7a16527794fc78d6a780f11e3bd662fa17a60ec3cb80ff72fed61e8acf12877a5289c37519787271497ee4c56d8081ac109490d723bdff39121c1a34e80d8478ab99f42f65cbf35e44a19298a2e1410ca1e860d2ae967de32ec100b01ba966ec5db2d85d8ee59d4040aaba4bebcd6784530a0000000000000000000000aec28af05f8df06adb4165196124d41d0666ca918d965f84d496f57aec783d77bc7715221688a98c1ea7cc877170062f5ed942d781a5973d03f739f1c97a79d8fa6fdd2c08ba9c39c3daea0fae651fe38031e620c76541a42ada2f8b", 0xe5}, {&(0x7f0000000e80)="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", 0x34c}], 0x5}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r8, 0x0) process_vm_writev(0x0, &(0x7f0000001900)=[{0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f40)=ANY=[@ANYBLOB="180000002d000b0026bd7000fbdbdf250400220004001980"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 0s ago: executing program 1 (id=4767): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f40)={0x18, 0x2d, 0xb, 0x70bd26, 0x25dfdbfb, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) (fail_nth: 1) kernel console output (not intermixed with test programs): 1120.727811][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1120.748541][ T12] net_ratelimit: 23 callbacks suppressed [ 1120.748562][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 1120.872688][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1120.921285][T24388] input: syz0 as /devices/virtual/input/input95 [ 1120.942689][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.958032][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.969234][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1120.988512][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.002329][ T10] usb 2-1: config 0 descriptor?? [ 1121.023302][T19200] bond2: (slave macvlan2): failed to get link speed/duplex [ 1121.158190][ T3175] bond2: (slave macvlan2): failed to get link speed/duplex [ 1121.296520][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1121.440334][T19200] bond2: (slave macvlan2): failed to get link speed/duplex [ 1121.452850][ T10] hid-led 0003:04D8:F372.0065: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 1121.587999][ T165] bond2: (slave macvlan2): failed to get link speed/duplex [ 1121.614630][ T10] hid-led 0003:04D8:F372.0065: Greynut Luxafor initialized [ 1121.686458][ T10] usb 2-1: USB disconnect, device number 82 [ 1121.700489][ T165] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1121.712121][ T165] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1121.722680][ T165] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1121.731006][ T3175] bond2: (slave macvlan2): failed to get link speed/duplex [ 1121.740064][ T165] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1121.751429][ T36] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1121.762629][ T36] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1121.772076][ T36] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1121.782014][T19200] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1121.792064][T19200] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1121.802290][ T165] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1121.816840][ T165] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1121.826254][ T165] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1121.838034][ T165] bond2: (slave macvlan2): failed to get link speed/duplex [ 1121.845529][ T165] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1121.855911][ T165] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1121.866264][ T36] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1121.879095][T19200] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1121.891481][ T165] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1121.901181][ T36] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1121.949846][T19200] bond2: (slave macvlan2): failed to get link speed/duplex [ 1122.298696][T24409] : renamed from lo [ 1122.901154][T24423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4418'. [ 1122.910311][T24423] bridge_slave_1: left allmulticast mode [ 1122.915998][T24423] bridge_slave_1: left promiscuous mode [ 1122.922152][T24423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.963262][T24423] bridge_slave_0: left allmulticast mode [ 1122.972397][T24423] bridge_slave_0: left promiscuous mode [ 1122.986607][T24423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.624267][T24433] FAULT_INJECTION: forcing a failure. [ 1124.624267][T24433] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.637180][T24433] CPU: 0 UID: 0 PID: 24433 Comm: syz.7.4421 Not tainted syzkaller #0 PREEMPT(full) [ 1124.637213][T24433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1124.637225][T24433] Call Trace: [ 1124.637233][T24433] [ 1124.637242][T24433] dump_stack_lvl+0x189/0x250 [ 1124.637270][T24433] ? __pfx____ratelimit+0x10/0x10 [ 1124.637290][T24433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1124.637311][T24433] ? __pfx__printk+0x10/0x10 [ 1124.637345][T24433] ? __pfx___might_resched+0x10/0x10 [ 1124.637361][T24433] ? fs_reclaim_acquire+0x7d/0x100 [ 1124.637383][T24433] should_fail_ex+0x414/0x560 [ 1124.637413][T24433] should_failslab+0xa8/0x100 [ 1124.637438][T24433] __kmalloc_cache_noprof+0x70/0x3d0 [ 1124.637460][T24433] ? vlan_vid_add+0x313/0x760 [ 1124.637484][T24433] vlan_vid_add+0x313/0x760 [ 1124.637502][T24433] ? vlan_dev_set_egress_priority+0x123/0x380 [ 1124.637529][T24433] register_vlan_dev+0x9e/0x800 [ 1124.637550][T24433] ? vlan_changelink+0x4c1/0x560 [ 1124.637571][T24433] ? vlan_check_real_dev+0x148/0x380 [ 1124.637595][T24433] vlan_newlink+0x4b2/0x610 [ 1124.637621][T24433] ? __pfx_vlan_newlink+0x10/0x10 [ 1124.637648][T24433] rtnl_newlink_create+0x310/0xb00 [ 1124.637682][T24433] ? __lock_acquire+0xab9/0xd20 [ 1124.637712][T24433] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1124.637738][T24433] ? __pfx___mutex_lock+0x10/0x10 [ 1124.637765][T24433] ? full_name_hash+0x89/0xe0 [ 1124.637783][T24433] ? netdev_name_node_lookup+0x32/0x120 [ 1124.637814][T24433] rtnl_newlink+0x16d6/0x1c70 [ 1124.637852][T24433] ? __pfx_rtnl_newlink+0x10/0x10 [ 1124.637891][T24433] ? __lock_acquire+0xab9/0xd20 [ 1124.637929][T24433] ? __lock_acquire+0xab9/0xd20 [ 1124.637974][T24433] ? is_bpf_text_address+0x26/0x2b0 [ 1124.638005][T24433] ? is_bpf_text_address+0x292/0x2b0 [ 1124.638028][T24433] ? is_bpf_text_address+0x26/0x2b0 [ 1124.638061][T24433] ? __lock_acquire+0xab9/0xd20 [ 1124.638113][T24433] ? __pfx_rtnl_newlink+0x10/0x10 [ 1124.638131][T24433] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1124.638150][T24433] ? __lock_acquire+0xab9/0xd20 [ 1124.638173][T24433] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1124.638197][T24433] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1124.638235][T24433] netlink_rcv_skb+0x205/0x470 [ 1124.638253][T24433] ? __lock_acquire+0xab9/0xd20 [ 1124.638278][T24433] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1124.638298][T24433] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1124.638331][T24433] ? netlink_deliver_tap+0x2e/0x1b0 [ 1124.638359][T24433] netlink_unicast+0x82f/0x9e0 [ 1124.638394][T24433] ? __pfx_netlink_unicast+0x10/0x10 [ 1124.638421][T24433] ? netlink_sendmsg+0x642/0xb30 [ 1124.638438][T24433] ? skb_put+0x11b/0x210 [ 1124.638468][T24433] netlink_sendmsg+0x805/0xb30 [ 1124.638499][T24433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1124.638522][T24433] ? __import_iovec+0x5d4/0x7f0 [ 1124.638543][T24433] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1124.638564][T24433] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1124.638583][T24433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1124.638604][T24433] __sock_sendmsg+0x219/0x270 [ 1124.638635][T24433] ____sys_sendmsg+0x505/0x830 [ 1124.638664][T24433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1124.638699][T24433] ___sys_sendmsg+0x21f/0x2a0 [ 1124.638721][T24433] ? __pfx____sys_sendmsg+0x10/0x10 [ 1124.638781][T24433] ? __fget_files+0x2a/0x420 [ 1124.638796][T24433] ? __fget_files+0x3a0/0x420 [ 1124.638822][T24433] __sys_sendmsg+0x164/0x220 [ 1124.638846][T24433] ? __pfx___sys_sendmsg+0x10/0x10 [ 1124.638887][T24433] ? lockdep_hardirqs_on+0x9c/0x150 [ 1124.638911][T24433] __do_fast_syscall_32+0xb6/0x2b0 [ 1124.638933][T24433] ? lockdep_hardirqs_on+0x9c/0x150 [ 1124.638955][T24433] do_fast_syscall_32+0x34/0x80 [ 1124.638976][T24433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1124.638997][T24433] RIP: 0023:0xf70ee539 [ 1124.639014][T24433] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1124.639029][T24433] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1124.639049][T24433] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000840 [ 1124.639062][T24433] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1124.639073][T24433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1124.639083][T24433] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1124.639094][T24433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1124.639124][T24433] [ 1125.540605][T24450] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4428'. [ 1125.758055][ T12] net_ratelimit: 13 callbacks suppressed [ 1125.758079][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 1125.887578][ T3175] bond2: (slave macvlan2): failed to get link speed/duplex [ 1126.027639][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 1126.148331][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1126.348993][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1126.459929][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1126.567718][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 1126.627873][T24456] FAULT_INJECTION: forcing a failure. [ 1126.627873][T24456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.642662][T24456] CPU: 0 UID: 0 PID: 24456 Comm: syz.1.4431 Not tainted syzkaller #0 PREEMPT(full) [ 1126.642680][T24456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1126.642687][T24456] Call Trace: [ 1126.642692][T24456] [ 1126.642697][T24456] dump_stack_lvl+0x189/0x250 [ 1126.642715][T24456] ? __pfx____ratelimit+0x10/0x10 [ 1126.642728][T24456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1126.642748][T24456] ? __pfx__printk+0x10/0x10 [ 1126.642766][T24456] ? iomap_write_begin+0x1824/0x1c70 [ 1126.642784][T24456] should_fail_ex+0x414/0x560 [ 1126.642802][T24456] copy_folio_from_iter_atomic+0x325/0x1910 [ 1126.642828][T24456] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1126.642842][T24456] ? iomap_iter_advance+0x282/0x2f0 [ 1126.642854][T24456] ? fault_in_readable+0xdd/0x130 [ 1126.642869][T24456] ? fault_in_iov_iter_readable+0x1b4/0x2f0 [ 1126.642882][T24456] iomap_file_buffered_write+0x4d1/0x9b0 [ 1126.642904][T24456] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1126.642933][T24456] ? generic_write_checks+0xa6/0x110 [ 1126.642946][T24456] fuse_file_write_iter+0xbdf/0x10a0 [ 1126.642962][T24456] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 1126.642979][T24456] ? rcu_read_lock_any_held+0xb3/0x120 [ 1126.642991][T24456] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1126.643010][T24456] vfs_write+0x5c9/0xb30 [ 1126.643027][T24456] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 1126.643038][T24456] ? __pfx_vfs_write+0x10/0x10 [ 1126.643057][T24456] ? __fget_files+0x2a/0x420 [ 1126.643072][T24456] ksys_write+0x145/0x250 [ 1126.643086][T24456] ? __pfx_ksys_write+0x10/0x10 [ 1126.643101][T24456] ? lockdep_hardirqs_on+0x9c/0x150 [ 1126.643114][T24456] __do_fast_syscall_32+0xb6/0x2b0 [ 1126.643127][T24456] ? lockdep_hardirqs_on+0x9c/0x150 [ 1126.643139][T24456] do_fast_syscall_32+0x34/0x80 [ 1126.643151][T24456] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1126.643163][T24456] RIP: 0023:0xf706e539 [ 1126.643173][T24456] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1126.643183][T24456] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1126.643194][T24456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 1126.643201][T24456] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000000 [ 1126.643208][T24456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1126.643214][T24456] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1126.643220][T24456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1126.643235][T24456] [ 1126.905400][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 1127.035424][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1127.170378][T19200] bond2: (slave macvlan2): failed to get link speed/duplex [ 1127.237676][ T24] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1127.253765][ T30] audit: type=1804 audit(1759041299.844:2022): pid=24466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4435" name="/newroot/366/file1" dev="fuse" ino=1 res=1 errno=0 [ 1127.418075][ T24] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1127.426201][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.467416][ T24] usb 1-1: config 0 has no interface number 0 [ 1127.492477][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1127.519477][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.530049][ T24] usb 1-1: Product: syz [ 1127.534661][ T24] usb 1-1: Manufacturer: syz [ 1127.540176][ T24] usb 1-1: SerialNumber: syz [ 1127.553318][ T24] usb 1-1: config 0 descriptor?? [ 1127.578445][ T24] ims_pcu 1-1:0.41: Zero length descriptor [ 1127.602074][ T24] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 1127.806359][T24478] binder: 24477:24478 ioctl 4018620d 0 returned -22 [ 1127.814946][T24478] binder: 24477:24478 unknown command 0 [ 1127.821051][T24478] binder: 24477:24478 ioctl c0306201 80000080 returned -22 [ 1127.839236][T24478] binder: 24477:24478 unknown command 0 [ 1127.844960][T24478] binder: 24477:24478 ioctl c0306201 80000440 returned -22 [ 1127.854272][T24478] binder: 24477:24478 ioctl c0401273 800002c0 returned -22 [ 1127.862474][T24478] binder: 24477:24478 ioctl 3b80 800001c0 returned -22 [ 1127.884530][T24480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.894439][T24480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.877636][T21569] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1129.037508][T21569] usb 3-1: Using ep0 maxpacket: 16 [ 1129.050598][T21569] usb 3-1: config 252 has an invalid descriptor of length 13, skipping remainder of the config [ 1129.073867][T21569] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 1129.084410][T21569] usb 3-1: New USB device found, idVendor=2b48, idProduct=382d, bcdDevice=d4.cd [ 1129.094608][T21569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.344668][ T24] usb 3-1: USB disconnect, device number 70 [ 1129.452654][T24512] FAULT_INJECTION: forcing a failure. [ 1129.452654][T24512] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.465833][T24512] CPU: 1 UID: 0 PID: 24512 Comm: syz.7.4451 Not tainted syzkaller #0 PREEMPT(full) [ 1129.465850][T24512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1129.465857][T24512] Call Trace: [ 1129.465862][T24512] [ 1129.465867][T24512] dump_stack_lvl+0x189/0x250 [ 1129.465885][T24512] ? __pfx____ratelimit+0x10/0x10 [ 1129.465897][T24512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1129.465908][T24512] ? __pfx__printk+0x10/0x10 [ 1129.465925][T24512] ? __pfx___might_resched+0x10/0x10 [ 1129.465938][T24512] should_fail_ex+0x414/0x560 [ 1129.465956][T24512] ? xfrm_user_rcv_msg_compat+0x478/0x1460 [ 1129.465966][T24512] should_failslab+0xa8/0x100 [ 1129.465982][T24512] __kvmalloc_node_noprof+0x161/0x5f0 [ 1129.465996][T24512] ? xfrm_user_rcv_msg_compat+0x478/0x1460 [ 1129.466009][T24512] xfrm_user_rcv_msg_compat+0x478/0x1460 [ 1129.466027][T24512] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 1129.466058][T24512] ? xfrm_get_translator+0x1b/0x240 [ 1129.466072][T24512] ? xfrm_get_translator+0x1b/0x240 [ 1129.466089][T24512] xfrm_user_rcv_msg+0x285/0xab0 [ 1129.466107][T24512] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1129.466139][T24512] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1129.466153][T24512] ? rcu_is_watching+0x15/0xb0 [ 1129.466164][T24512] ? trace_contention_end+0x39/0x120 [ 1129.466175][T24512] ? __mutex_lock+0x335/0x1350 [ 1129.466191][T24512] netlink_rcv_skb+0x205/0x470 [ 1129.466203][T24512] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1129.466218][T24512] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1129.466236][T24512] ? netlink_deliver_tap+0x2e/0x1b0 [ 1129.466247][T24512] ? netlink_deliver_tap+0x2e/0x1b0 [ 1129.466258][T24512] xfrm_netlink_rcv+0x79/0x90 [ 1129.466272][T24512] netlink_unicast+0x82f/0x9e0 [ 1129.466292][T24512] ? __pfx_netlink_unicast+0x10/0x10 [ 1129.466308][T24512] ? netlink_sendmsg+0x642/0xb30 [ 1129.466317][T24512] ? skb_put+0x11b/0x210 [ 1129.466331][T24512] netlink_sendmsg+0x805/0xb30 [ 1129.466347][T24512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1129.466359][T24512] ? __import_iovec+0x5d4/0x7f0 [ 1129.466371][T24512] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1129.466383][T24512] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1129.466394][T24512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1129.466405][T24512] __sock_sendmsg+0x219/0x270 [ 1129.466423][T24512] ____sys_sendmsg+0x505/0x830 [ 1129.466439][T24512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1129.466460][T24512] ___sys_sendmsg+0x21f/0x2a0 [ 1129.466474][T24512] ? __pfx____sys_sendmsg+0x10/0x10 [ 1129.466506][T24512] ? __fget_files+0x2a/0x420 [ 1129.466514][T24512] ? __fget_files+0x3a0/0x420 [ 1129.466534][T24512] __sys_sendmsg+0x164/0x220 [ 1129.466548][T24512] ? __pfx___sys_sendmsg+0x10/0x10 [ 1129.466570][T24512] ? lockdep_hardirqs_on+0x9c/0x150 [ 1129.466582][T24512] __do_fast_syscall_32+0xb6/0x2b0 [ 1129.466595][T24512] ? lockdep_hardirqs_on+0x9c/0x150 [ 1129.466607][T24512] do_fast_syscall_32+0x34/0x80 [ 1129.466619][T24512] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1129.466631][T24512] RIP: 0023:0xf70ee539 [ 1129.466641][T24512] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1129.466650][T24512] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1129.466662][T24512] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1129.466669][T24512] RDX: 0000000000000804 RSI: 0000000000000000 RDI: 0000000000000000 [ 1129.466675][T24512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1129.466681][T24512] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1129.466687][T24512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1129.466702][T24512] [ 1129.968014][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1130.072084][T24517] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4452'. [ 1130.082387][T24517] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4452'. [ 1130.268251][T24517] dummy0: entered promiscuous mode [ 1130.277115][T24517] team0: entered promiscuous mode [ 1130.283252][T24517] team_slave_0: entered promiscuous mode [ 1130.323119][T24517] team_slave_1: entered promiscuous mode [ 1130.344082][T24517] hsr2: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 1130.354281][T24517] hsr2: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 1130.418359][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.433496][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.443440][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1130.482686][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.497966][ T24] usb 1-1: USB disconnect, device number 58 [ 1130.539180][ T10] usb 2-1: config 0 descriptor?? [ 1130.997704][T19200] net_ratelimit: 25 callbacks suppressed [ 1130.997726][T19200] bond2: (slave macvlan2): failed to get link speed/duplex [ 1131.109886][T19200] bond2: (slave macvlan2): failed to get link speed/duplex [ 1131.227573][ T78] bond2: (slave macvlan2): failed to get link speed/duplex [ 1131.255970][ T10] hid-led 0003:04D8:F372.0066: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 1131.415280][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1131.499298][ T10] hid-led 0003:04D8:F372.0066: Greynut Luxafor initialized [ 1131.565066][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1131.710271][ T10] usb 2-1: USB disconnect, device number 83 [ 1131.809592][ T78] bond2: (slave macvlan2): failed to get link speed/duplex [ 1131.823464][T19200] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1131.836282][T19200] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1131.903576][ T36] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1131.937550][ T3175] bond2: (slave macvlan2): failed to get link speed/duplex [ 1131.989312][T19200] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1132.054670][T19200] bond2: (slave macvlan2): failed to get link speed/duplex [ 1132.070801][ T36] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1132.088025][T19200] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1132.120584][ T36] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1132.157799][ T36] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1132.197539][T19200] bond2: (slave macvlan2): failed to get link speed/duplex [ 1132.319755][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1132.349336][ T3175] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1132.383162][ T3175] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1132.402482][ T3175] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1132.443856][ T78] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1132.468793][ T78] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1132.488440][ T78] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1132.529408][ T36] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1132.548306][ T36] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1132.591656][ T36] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1132.618447][ T36] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1132.790342][T24550] FAULT_INJECTION: forcing a failure. [ 1132.790342][T24550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1132.810822][T24550] CPU: 0 UID: 0 PID: 24550 Comm: syz.7.4463 Not tainted syzkaller #0 PREEMPT(full) [ 1132.810848][T24550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1132.810859][T24550] Call Trace: [ 1132.810867][T24550] [ 1132.810876][T24550] dump_stack_lvl+0x189/0x250 [ 1132.810903][T24550] ? __pfx____ratelimit+0x10/0x10 [ 1132.810923][T24550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1132.810944][T24550] ? __pfx__printk+0x10/0x10 [ 1132.810981][T24550] should_fail_ex+0x414/0x560 [ 1132.811013][T24550] _copy_to_user+0x31/0xb0 [ 1132.811038][T24550] simple_read_from_buffer+0xe1/0x170 [ 1132.811069][T24550] proc_fail_nth_read+0x1b3/0x220 [ 1132.811093][T24550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1132.811117][T24550] ? rw_verify_area+0x2a6/0x4d0 [ 1132.811138][T24550] ? __lock_acquire+0xab9/0xd20 [ 1132.811160][T24550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1132.811183][T24550] vfs_read+0x200/0xa30 [ 1132.811218][T24550] ? fdget_pos+0x247/0x320 [ 1132.811239][T24550] ? __pfx___mutex_lock+0x10/0x10 [ 1132.811260][T24550] ? __pfx_vfs_read+0x10/0x10 [ 1132.811284][T24550] ? __fget_files+0x2a/0x420 [ 1132.811305][T24550] ? __fget_files+0x3a0/0x420 [ 1132.811320][T24550] ? __fget_files+0x2a/0x420 [ 1132.811346][T24550] ksys_read+0x145/0x250 [ 1132.811372][T24550] ? __pfx_ksys_read+0x10/0x10 [ 1132.811399][T24550] ? lockdep_hardirqs_on+0x9c/0x150 [ 1132.811423][T24550] __do_fast_syscall_32+0xb6/0x2b0 [ 1132.811444][T24550] ? lockdep_hardirqs_on+0x9c/0x150 [ 1132.811467][T24550] do_fast_syscall_32+0x34/0x80 [ 1132.811488][T24550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1132.811509][T24550] RIP: 0023:0xf70ee539 [ 1132.811525][T24550] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1132.811540][T24550] RSP: 002b:00000000f54bd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1132.811566][T24550] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000f54bd620 [ 1132.811578][T24550] RDX: 000000000000000f RSI: 00000000f7485ff4 RDI: 0000000000000000 [ 1132.811590][T24550] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1132.811600][T24550] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1132.811612][T24550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1132.811641][T24550] [ 1133.237456][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1133.338912][T24565] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4468'. [ 1133.367532][ T10] usb 2-1: device descriptor read/64, error -71 [ 1133.390489][T24568] netlink: 'syz.0.4469': attribute type 6 has an invalid length. [ 1133.607832][T21569] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1133.617610][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1133.747454][T21569] usb 3-1: device descriptor read/64, error -71 [ 1133.757548][ T10] usb 2-1: device descriptor read/64, error -71 [ 1133.867853][ T10] usb usb2-port1: attempt power cycle [ 1133.988106][T21569] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1134.117641][T21569] usb 3-1: device descriptor read/64, error -71 [ 1134.209936][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1134.241110][T21569] usb usb3-port1: attempt power cycle [ 1134.253740][ T10] usb 2-1: device descriptor read/8, error -71 [ 1134.487782][ T24] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1134.519079][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1134.541064][ T10] usb 2-1: device descriptor read/8, error -71 [ 1134.612105][T21569] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1134.638456][T21569] usb 3-1: device descriptor read/8, error -71 [ 1134.651241][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1134.661307][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1134.668049][ T10] usb usb2-port1: unable to enumerate USB device [ 1134.675287][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1134.692288][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.877542][T21569] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1134.898139][T21569] usb 3-1: device descriptor read/8, error -71 [ 1134.906365][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 1134.912223][ T24] usbtmc 1-1:16.0: can't read capabilities [ 1135.011266][T21569] usb usb3-port1: unable to enumerate USB device [ 1135.228973][T21569] usb 1-1: USB disconnect, device number 59 [ 1136.058493][T19200] net_ratelimit: 31 callbacks suppressed [ 1136.058514][T19200] bond2: (slave macvlan2): failed to get link speed/duplex [ 1136.810619][T24578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1136.927615][ T78] bond2: (slave macvlan2): failed to get link speed/duplex [ 1137.037714][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1137.159788][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1137.278591][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1137.379218][T24618] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4485'. [ 1137.427650][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1137.604095][T19200] bond2: (slave macvlan2): failed to get link speed/duplex [ 1137.610781][T24622] binder: 24621:24622 ioctl c0306201 0 returned -14 [ 1137.628167][T24622] binder: 24621:24622 unknown command 0 [ 1137.633985][T24622] binder: 24621:24622 ioctl c0306201 80000440 returned -22 [ 1137.644555][T24622] binder: 24621:24622 ioctl c0401273 800002c0 returned -22 [ 1137.654694][T24622] binder: 24621:24622 ioctl 3b80 800001c0 returned -22 [ 1137.697665][T21569] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1137.736806][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1137.990440][T21569] usb 3-1: device descriptor read/64, error -71 [ 1137.996870][ T1337] bond2: (slave macvlan2): failed to get link speed/duplex [ 1138.209257][ T1337] bond2: (slave macvlan2): failed to get link speed/duplex [ 1138.302992][T21569] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1138.350916][T24639] tipc: Started in network mode [ 1138.355975][T24639] tipc: Node identity b9, cluster identity 4711 [ 1138.368815][T24639] tipc: Node number set to 185 [ 1138.477660][T21569] usb 3-1: device descriptor read/64, error -71 [ 1138.613634][T21569] usb usb3-port1: attempt power cycle [ 1138.709664][T24644] FAULT_INJECTION: forcing a failure. [ 1138.709664][T24644] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.728321][T24644] CPU: 0 UID: 0 PID: 24644 Comm: syz.0.4495 Not tainted syzkaller #0 PREEMPT(full) [ 1138.728344][T24644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1138.728350][T24644] Call Trace: [ 1138.728356][T24644] [ 1138.728361][T24644] dump_stack_lvl+0x189/0x250 [ 1138.728378][T24644] ? __pfx____ratelimit+0x10/0x10 [ 1138.728390][T24644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1138.728402][T24644] ? __pfx__printk+0x10/0x10 [ 1138.728419][T24644] ? __pfx___might_resched+0x10/0x10 [ 1138.728432][T24644] should_fail_ex+0x414/0x560 [ 1138.728450][T24644] should_failslab+0xa8/0x100 [ 1138.728466][T24644] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1138.728481][T24644] ? __alloc_skb+0x112/0x2d0 [ 1138.728492][T24644] ? do_fast_syscall_32+0x34/0x80 [ 1138.728506][T24644] __alloc_skb+0x112/0x2d0 [ 1138.728520][T24644] netlink_dump+0x1b7/0xe90 [ 1138.728538][T24644] ? __pfx_netlink_dump+0x10/0x10 [ 1138.728558][T24644] ? kmem_cache_free+0x18f/0x400 [ 1138.728574][T24644] netlink_recvmsg+0x676/0xa30 [ 1138.728590][T24644] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1138.728608][T24644] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1138.728620][T24644] sock_recvmsg_nosec+0x186/0x1c0 [ 1138.728632][T24644] ____sys_recvmsg+0x3aa/0x460 [ 1138.728650][T24644] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1138.728661][T24644] ? get_compat_msghdr+0x37e/0x4a0 [ 1138.728680][T24644] ? rcu_is_watching+0x15/0xb0 [ 1138.728690][T24644] ? ___sys_recvmsg+0x1c4/0x510 [ 1138.728706][T24644] ___sys_recvmsg+0x1b5/0x510 [ 1138.728722][T24644] ? __pfx____sys_recvmsg+0x10/0x10 [ 1138.728748][T24644] ? __fget_files+0x3a0/0x420 [ 1138.728763][T24644] do_recvmmsg+0x36a/0x770 [ 1138.728781][T24644] ? __pfx_do_recvmmsg+0x10/0x10 [ 1138.728800][T24644] ? __pfx_vfs_write+0x10/0x10 [ 1138.728829][T24644] __sys_recvmmsg+0x19d/0x280 [ 1138.728843][T24644] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1138.728856][T24644] ? ksys_write+0x22a/0x250 [ 1138.728875][T24644] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1138.728889][T24644] __do_fast_syscall_32+0xb6/0x2b0 [ 1138.728901][T24644] ? lockdep_hardirqs_on+0x9c/0x150 [ 1138.728914][T24644] do_fast_syscall_32+0x34/0x80 [ 1138.728926][T24644] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1138.728938][T24644] RIP: 0023:0xf6ffe539 [ 1138.728948][T24644] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1138.728957][T24644] RSP: 002b:00000000f53ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1138.728969][T24644] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800015c0 [ 1138.728976][T24644] RDX: 0000000000000008 RSI: 0000000000000040 RDI: 0000000000000000 [ 1138.728983][T24644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1138.728989][T24644] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1138.728995][T24644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1138.729009][T24644] [ 1139.133163][T21569] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1139.158971][T21569] usb 3-1: device descriptor read/8, error -71 [ 1139.189724][T24647] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4494'. [ 1139.397697][T21569] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1139.424614][T21569] usb 3-1: device descriptor read/8, error -71 [ 1139.618999][T21569] usb usb3-port1: unable to enumerate USB device [ 1139.668717][T24655] FAULT_INJECTION: forcing a failure. [ 1139.668717][T24655] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.686599][T24655] CPU: 1 UID: 0 PID: 24655 Comm: syz.0.4498 Not tainted syzkaller #0 PREEMPT(full) [ 1139.686624][T24655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1139.686634][T24655] Call Trace: [ 1139.686641][T24655] [ 1139.686650][T24655] dump_stack_lvl+0x189/0x250 [ 1139.686675][T24655] ? __pfx____ratelimit+0x10/0x10 [ 1139.686695][T24655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1139.686715][T24655] ? __pfx__printk+0x10/0x10 [ 1139.686742][T24655] ? __pfx___might_resched+0x10/0x10 [ 1139.686765][T24655] ? fs_reclaim_acquire+0x7d/0x100 [ 1139.686785][T24655] should_fail_ex+0x414/0x560 [ 1139.686812][T24655] should_failslab+0xa8/0x100 [ 1139.686849][T24655] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1139.686874][T24655] ? skb_clone+0x212/0x3a0 [ 1139.686898][T24655] skb_clone+0x212/0x3a0 [ 1139.686916][T24655] ? nfnetlink_rcv+0x486/0x2520 [ 1139.686958][T24655] nfnetlink_rcv+0x4b4/0x2520 [ 1139.686983][T24655] ? is_bpf_text_address+0x26/0x2b0 [ 1139.687011][T24655] ? kernel_text_address+0xa5/0xe0 [ 1139.687034][T24655] ? __kernel_text_address+0xd/0x40 [ 1139.687056][T24655] ? unwind_get_return_address+0x4d/0x90 [ 1139.687075][T24655] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1139.687095][T24655] ? arch_stack_walk+0xfc/0x150 [ 1139.687131][T24655] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1139.687192][T24655] ? __lock_acquire+0xab9/0xd20 [ 1139.687227][T24655] ? netlink_deliver_tap+0x2e/0x1b0 [ 1139.687264][T24655] netlink_unicast+0x82f/0x9e0 [ 1139.687296][T24655] ? __pfx_netlink_unicast+0x10/0x10 [ 1139.687322][T24655] ? netlink_sendmsg+0x642/0xb30 [ 1139.687343][T24655] ? skb_put+0x11b/0x210 [ 1139.687363][T24655] netlink_sendmsg+0x805/0xb30 [ 1139.687390][T24655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1139.687411][T24655] ? __import_iovec+0x5d4/0x7f0 [ 1139.687430][T24655] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1139.687450][T24655] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1139.687469][T24655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1139.687489][T24655] __sock_sendmsg+0x219/0x270 [ 1139.687518][T24655] ____sys_sendmsg+0x505/0x830 [ 1139.687544][T24655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1139.687583][T24655] ___sys_sendmsg+0x21f/0x2a0 [ 1139.687607][T24655] ? __pfx____sys_sendmsg+0x10/0x10 [ 1139.687664][T24655] ? __fget_files+0x2a/0x420 [ 1139.687680][T24655] ? __fget_files+0x3a0/0x420 [ 1139.687707][T24655] __sys_sendmsg+0x164/0x220 [ 1139.687731][T24655] ? __pfx___sys_sendmsg+0x10/0x10 [ 1139.687776][T24655] ? lockdep_hardirqs_on+0x9c/0x150 [ 1139.687799][T24655] __do_fast_syscall_32+0xb6/0x2b0 [ 1139.687820][T24655] ? lockdep_hardirqs_on+0x9c/0x150 [ 1139.687843][T24655] do_fast_syscall_32+0x34/0x80 [ 1139.687863][T24655] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1139.687884][T24655] RIP: 0023:0xf6ffe539 [ 1139.687900][T24655] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1139.687916][T24655] RSP: 002b:00000000f53ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1139.687936][T24655] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1139.687949][T24655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1139.687959][T24655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1139.687970][T24655] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1139.687981][T24655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1139.688008][T24655] [ 1140.017211][ C1] vkms_vblank_simulate: vblank timer overrun [ 1140.419705][T24666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4502'. [ 1140.480213][T24667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.502755][T24667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.667572][T24673] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 1140.674223][T24673] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1140.685499][T24673] vhci_hcd vhci_hcd.0: Device attached [ 1140.697466][ T24] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1140.720995][T24673] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(17) [ 1140.727636][T24673] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1140.735990][T24673] vhci_hcd vhci_hcd.0: Device attached [ 1140.746752][T24673] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(21) [ 1140.753404][T24673] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1140.762060][T24673] vhci_hcd vhci_hcd.0: Device attached [ 1140.769565][T24673] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1140.780959][T24673] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(25) [ 1140.787704][T24673] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1140.796673][T24673] vhci_hcd vhci_hcd.0: Device attached [ 1140.804155][T24673] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1140.817880][T21569] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1140.830984][T24683] vhci_hcd: connection closed [ 1140.831299][ T36] vhci_hcd: stop threads [ 1140.833897][T24677] vhci_hcd: connection closed [ 1140.836157][T24681] vhci_hcd: connection closed [ 1140.840588][ T36] vhci_hcd: release socket [ 1140.855436][T24674] vhci_hcd: connection closed [ 1140.855743][ T36] vhci_hcd: disconnect device [ 1140.865840][ T36] vhci_hcd: stop threads [ 1140.871524][ T36] vhci_hcd: release socket [ 1140.876159][ T36] vhci_hcd: disconnect device [ 1140.879399][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.881718][ T36] vhci_hcd: stop threads [ 1140.896593][ T36] vhci_hcd: release socket [ 1140.901748][ T36] vhci_hcd: disconnect device [ 1140.907128][ T36] vhci_hcd: stop threads [ 1140.911903][ T36] vhci_hcd: release socket [ 1140.916506][ T36] vhci_hcd: disconnect device [ 1140.952754][ T5938] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 1140.960629][ T5938] usb 35-1: enqueue for inactive port 0 [ 1140.966704][ T24] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1140.976281][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.977566][T21569] usb 3-1: Using ep0 maxpacket: 16 [ 1140.989066][ T24] usb 1-1: config 0 descriptor?? [ 1141.002301][ T24] usb 1-1: bad CDC descriptors [ 1141.004246][T21569] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice= 6.8a [ 1141.093227][T24689] netdevsim netdevsim7: Direct firmware load for . [ 1141.093227][T24689] failed with error -2 [ 1141.112276][T24689] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1141.112276][T24689] [ 1141.122225][ T165] net_ratelimit: 18 callbacks suppressed [ 1141.122244][ T165] bond2: (slave macvlan2): failed to get link speed/duplex [ 1141.128403][T21569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.138240][ T5938] vhci_hcd: vhci_device speed not set [ 1141.164162][T21569] usb 3-1: Product: syz [ 1141.171763][T21569] usb 3-1: Manufacturer: syz [ 1141.176743][T21569] usb 3-1: SerialNumber: syz [ 1141.186136][T21569] usb 3-1: config 0 descriptor?? [ 1141.195182][T21569] mcba_usb 3-1:0.0: Can't find endpoints [ 1141.201846][ T24] usb 1-1: USB disconnect, device number 60 [ 1141.279597][T19200] bond2: (slave macvlan2): failed to get link speed/duplex [ 1141.388450][ T78] bond2: (slave macvlan2): failed to get link speed/duplex [ 1141.507748][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1141.523251][ T24] usb 3-1: USB disconnect, device number 79 [ 1141.638218][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1141.980222][ T1337] bond2: (slave macvlan2): failed to get link speed/duplex [ 1142.143521][T24705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4511'. [ 1142.157557][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1142.314763][T19200] bond2: (slave macvlan2): failed to get link speed/duplex [ 1142.451599][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1142.577494][ T78] bond2: (slave macvlan2): failed to get link speed/duplex [ 1143.413155][T24723] netlink: 'syz.2.4517': attribute type 4 has an invalid length. [ 1143.449740][T24723] netlink: 'syz.2.4517': attribute type 17 has an invalid length. [ 1144.576499][T24741] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4524'. [ 1144.779553][T24743] fuse: Bad value for 'user_id' [ 1144.833296][T24743] fuse: Bad value for 'user_id' [ 1144.910337][T24748] FAULT_INJECTION: forcing a failure. [ 1144.910337][T24748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1144.923781][T24748] CPU: 1 UID: 0 PID: 24748 Comm: syz.7.4527 Not tainted syzkaller #0 PREEMPT(full) [ 1144.923806][T24748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1144.923817][T24748] Call Trace: [ 1144.923826][T24748] [ 1144.923835][T24748] dump_stack_lvl+0x189/0x250 [ 1144.923860][T24748] ? __pfx____ratelimit+0x10/0x10 [ 1144.923881][T24748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1144.923902][T24748] ? __pfx__printk+0x10/0x10 [ 1144.923939][T24748] should_fail_ex+0x414/0x560 [ 1144.923970][T24748] _copy_to_user+0x31/0xb0 [ 1144.923996][T24748] simple_read_from_buffer+0xe1/0x170 [ 1144.924026][T24748] proc_fail_nth_read+0x1b3/0x220 [ 1144.924050][T24748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1144.924074][T24748] ? rw_verify_area+0x2a6/0x4d0 [ 1144.924094][T24748] ? __lock_acquire+0xab9/0xd20 [ 1144.924117][T24748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1144.924139][T24748] vfs_read+0x200/0xa30 [ 1144.924160][T24748] ? fdget_pos+0x247/0x320 [ 1144.924180][T24748] ? __pfx___mutex_lock+0x10/0x10 [ 1144.924202][T24748] ? __pfx_vfs_read+0x10/0x10 [ 1144.924226][T24748] ? __fget_files+0x2a/0x420 [ 1144.924247][T24748] ? __fget_files+0x3a0/0x420 [ 1144.924262][T24748] ? __fget_files+0x2a/0x420 [ 1144.924288][T24748] ksys_read+0x145/0x250 [ 1144.924314][T24748] ? __pfx_ksys_read+0x10/0x10 [ 1144.924334][T24748] ? __secure_computing+0xe2/0x2a0 [ 1144.924363][T24748] __do_fast_syscall_32+0xb6/0x2b0 [ 1144.924384][T24748] ? lockdep_hardirqs_on+0x9c/0x150 [ 1144.924408][T24748] do_fast_syscall_32+0x34/0x80 [ 1144.924429][T24748] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1144.924466][T24748] RIP: 0023:0xf70ee539 [ 1144.924482][T24748] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1144.924496][T24748] RSP: 002b:00000000f54de590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1144.924514][T24748] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54de620 [ 1144.924526][T24748] RDX: 000000000000000f RSI: 00000000f7485ff4 RDI: 0000000000000000 [ 1144.924538][T24748] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1144.924549][T24748] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1144.924560][T24748] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1144.924590][T24748] [ 1145.154734][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.247881][T21569] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1145.397512][T21569] usb 3-1: Using ep0 maxpacket: 16 [ 1145.490641][T21569] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 1145.500380][T21569] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1145.547606][T21569] usb 3-1: Product: syz [ 1145.562269][T21569] usb 3-1: SerialNumber: syz [ 1145.598609][T21569] usb 3-1: config 0 descriptor?? [ 1145.609142][T21569] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1145.643249][T21569] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1145.658240][T21569] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1145.664796][T21569] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1145.832583][T24743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4525'. [ 1145.863587][T21569] usb 3-1: USB disconnect, device number 80 [ 1146.178802][ T13] net_ratelimit: 28 callbacks suppressed [ 1146.178823][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 1146.328907][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1146.438504][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 1146.525659][T24769] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4535'. [ 1146.585982][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 1146.707888][ T1337] bond2: (slave macvlan2): failed to get link speed/duplex [ 1146.799905][T24775] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4536'. [ 1146.817731][ T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1146.838763][ T1337] bond2: (slave macvlan2): failed to get link speed/duplex [ 1146.957528][ T1337] bond2: (slave macvlan2): failed to get link speed/duplex [ 1146.957599][ T24] usb 3-1: device descriptor read/64, error -71 [ 1147.069357][ T1337] bond2: (slave macvlan2): failed to get link speed/duplex [ 1147.187466][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1147.257259][ T24] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1147.351940][ T1337] bond2: (slave macvlan2): failed to get link speed/duplex [ 1147.399055][ T24] usb 3-1: device descriptor read/64, error -71 [ 1147.517763][ T24] usb usb3-port1: attempt power cycle [ 1147.857554][ T24] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1147.877948][ T24] usb 3-1: device descriptor read/8, error -71 [ 1148.077504][ T5938] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1148.117621][ T24] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1148.138270][ T24] usb 3-1: device descriptor read/8, error -71 [ 1148.227438][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 1148.234255][ T5938] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 1148.243197][ T5938] usb 2-1: config 254 has no interface number 0 [ 1148.250174][ T24] usb usb3-port1: unable to enumerate USB device [ 1148.256663][ T5938] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 237, changing to 7 [ 1148.269257][ T5938] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid maxpacket 42803, setting to 1024 [ 1148.280864][ T5938] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1148.291441][ T5938] usb 2-1: config 254 interface 235 has no altsetting 0 [ 1148.301122][ T5938] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1148.310302][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.318362][ T5938] usb 2-1: Product: syz [ 1148.322539][ T5938] usb 2-1: Manufacturer: syz [ 1148.327122][ T5938] usb 2-1: SerialNumber: syz [ 1148.515391][T24797] binder: 24796:24797 unknown command 0 [ 1148.523321][T24797] binder: 24796:24797 ioctl c0306201 80000440 returned -22 [ 1148.536837][T24797] binder: 24796:24797 ioctl c0401273 800002c0 returned -22 [ 1148.545198][T24797] binder: 24796:24797 ioctl 3b80 800001c0 returned -22 [ 1148.546583][ T5938] usbtest 2-1:254.235: couldn't get endpoints, -71 [ 1148.565272][ T5938] usbtest 2-1:254.235: probe with driver usbtest failed with error -71 [ 1148.590206][ T5938] usb 2-1: USB disconnect, device number 88 [ 1148.839864][T24804] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4545'. [ 1148.917811][ T24] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1148.935280][T24809] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4547'. [ 1149.055643][ T30] audit: type=1326 audit(1759041321.644:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24812 comm="syz.7.4549" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x0 [ 1149.077494][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1149.080341][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.099975][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.111096][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1149.130907][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1149.142696][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.160628][ T24] usb 1-1: config 0 descriptor?? [ 1149.191612][T24817] tipc: Enabled bearer , priority 0 [ 1149.199730][T24817] syzkaller0: entered promiscuous mode [ 1149.205386][T24817] syzkaller0: entered allmulticast mode [ 1149.231657][T24817] tipc: Resetting bearer [ 1149.246039][T24816] tipc: Resetting bearer [ 1149.272043][T24816] tipc: Disabling bearer [ 1149.604691][ T24] microsoft 0003:045E:07DA.0067: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1149.640918][ T24] microsoft 0003:045E:07DA.0067: no inputs found [ 1149.647306][ T24] microsoft 0003:045E:07DA.0067: could not initialize ff, continuing anyway [ 1149.769378][T24829] binder: 24828:24829 unknown command 0 [ 1149.780454][T24829] binder: 24828:24829 ioctl c0306201 80000440 returned -22 [ 1149.795882][T24829] binder: 24828:24829 ioctl c0401273 800002c0 returned -22 [ 1149.807660][T24829] binder: 24828:24829 ioctl 3b80 800001c0 returned -22 [ 1149.867794][T21569] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1149.881914][ T1211] usb 1-1: USB disconnect, device number 61 [ 1149.946325][T24832] tipc: Started in network mode [ 1149.952511][T24832] tipc: Node identity ac14144, cluster identity 4711 [ 1149.962675][T24832] tipc: Enabled bearer , priority 10 [ 1150.042145][T21569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1150.074795][T21569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.100575][T21569] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1150.120287][T21569] usb 2-1: New USB device found, idVendor=045e, idProduct=008e, bcdDevice= 0.00 [ 1150.133155][T21569] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.145589][T21569] usb 2-1: config 0 descriptor?? [ 1150.461858][T24839] fuse: Unknown parameter 'fd90x000000000000000a' [ 1150.617438][T21569] hid-generic 0003:045E:008E.0068: unbalanced collection at end of report description [ 1150.756099][T21569] hid-generic 0003:045E:008E.0068: probe with driver hid-generic failed with error -22 [ 1150.939660][T24845] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4559'. [ 1151.264839][ T1211] tipc: Node number set to 2886997056 [ 1151.275543][T19200] net_ratelimit: 33 callbacks suppressed [ 1151.275578][T19200] bond2: (slave macvlan2): failed to get link speed/duplex [ 1151.407507][T19200] bond2: (slave macvlan2): failed to get link speed/duplex [ 1151.528464][ T1337] bond2: (slave macvlan2): failed to get link speed/duplex [ 1151.649493][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1151.777738][ T1337] bond2: (slave macvlan2): failed to get link speed/duplex [ 1151.893893][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 1152.018743][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 1152.147611][T19200] bond2: (slave macvlan2): failed to get link speed/duplex [ 1152.267561][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 1152.630233][ T1337] bond2: (slave macvlan2): failed to get link speed/duplex [ 1153.933140][ T1211] usb 2-1: USB disconnect, device number 89 [ 1154.407498][ T1211] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 1154.537453][ T1211] usb 2-1: device descriptor read/64, error -71 [ 1154.656695][T24883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4571'. [ 1154.754232][T24887] random: crng reseeded on system resumption [ 1154.777641][ T1211] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1154.919954][ T1211] usb 2-1: device descriptor read/64, error -71 [ 1155.047861][ T1211] usb usb2-port1: attempt power cycle [ 1155.425886][ T1211] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1155.461474][ T1211] usb 2-1: device descriptor read/8, error -71 [ 1155.492845][T24904] fuse: Bad value for 'fd' [ 1155.718024][ T1211] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1155.738139][ T1211] usb 2-1: device descriptor read/8, error -71 [ 1155.777518][ T5938] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1155.850767][ T1211] usb usb2-port1: unable to enumerate USB device [ 1155.917509][ T24] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1155.927570][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 1155.938872][ T5938] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.953053][ T5938] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1155.966144][ T5938] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1155.983682][ T5938] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1155.996352][ T5938] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1156.014615][ T5938] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1156.034554][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1156.057419][ T5938] usb 1-1: SerialNumber: syz [ 1156.078345][T24904] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1156.087140][ T5938] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1156.109056][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1156.120873][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1156.135308][ T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1156.174024][ T5938] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 1156.194872][ T24] usb 3-1: config 1 has no interface number 1 [ 1156.210172][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1156.223231][ T24] usb 3-1: too many endpoints for config 1 interface 2 altsetting 210: 96, using maximum allowed: 30 [ 1156.310791][ T24] usb 3-1: config 1 interface 2 altsetting 210 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1156.373716][ T13] net_ratelimit: 29 callbacks suppressed [ 1156.373737][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 1156.386970][ T24] usb 3-1: config 1 interface 2 has no altsetting 0 [ 1156.401868][ T24] usb 3-1: string descriptor 0 read error: -22 [ 1156.411546][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1156.423938][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.498569][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 1156.617833][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 1156.643913][T24907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.658543][T24907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.685419][T24907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.694500][T24907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.715582][ T30] audit: type=1326 audit(1759041329.304:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24906 comm="syz.2.4578" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x0 [ 1156.759528][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 1156.878274][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 1156.998554][ T4600] bond2: (slave macvlan2): failed to get link speed/duplex [ 1157.111388][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 1157.230004][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 1157.359023][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 1157.488161][T19200] bond2: (slave macvlan2): failed to get link speed/duplex [ 1158.381420][T21569] usb 1-1: USB disconnect, device number 62 [ 1158.625738][T24933] fuse: Unknown parameter 'd ' [ 1158.644750][T24933] fuse: Unknown parameter '0x0000000000000004tlIs6ȰF瑦(&@.'.{tV?d [ 1158.644750][T24933] 9ţ;a539bղ*qrI"@h*Jia? [ 1158.644750][T24933] k|N;$@J2JST&!ߚa. *Cn_ ln?U>PC' [ 1158.703394][ T24] usb 3-1: USB disconnect, device number 85 [ 1158.857527][T21569] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1159.047507][ T5938] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1159.067407][T21569] usb 1-1: Using ep0 maxpacket: 8 [ 1159.073992][T21569] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1159.082741][T21569] usb 1-1: config 0 has no interface number 0 [ 1159.089595][T21569] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1159.104941][T21569] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1159.117252][T21569] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1159.174449][T21569] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1159.191754][T21569] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1159.202412][T21569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.209401][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1159.221922][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1159.236724][ T5938] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 1159.291341][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.307259][T21569] usb 1-1: config 0 descriptor?? [ 1159.329183][ T5938] usb 2-1: config 0 descriptor?? [ 1159.346177][T24938] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1159.368070][T21569] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1159.911616][T24938] bond0: (slave bond_slave_0): Releasing backup interface [ 1159.955831][T24938] bond0: (slave bond_slave_1): Releasing backup interface [ 1159.993295][ T5938] smartjoyplus 0003:0925:8866.0069: hidraw0: USB HID vff.fa Device [HID 0925:8866] on usb-dummy_hcd.1-1/input0 [ 1160.115339][ T5938] smartjoyplus 0003:0925:8866.0069: Force feedback for SmartJoy PLUS PS2/USB adapter [ 1160.160882][T24938] team0: Port device team_slave_0 removed [ 1160.264546][T24938] team0: Port device team_slave_1 removed [ 1160.272320][T24938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.365137][T24938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.506773][T24938] bond1: (slave geneve2): Releasing backup interface [ 1160.588812][T24938] bond2: (slave ip6gretap1): Removing an active aggregator [ 1160.598595][T24938] bond2: (slave ip6gretap1): Releasing backup interface [ 1160.613045][T24938] bond2: (slave ip6gretap1): the permanent HWaddr of slave - a6:a2:cf:cb:1e:05 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1160.693810][T24938] bond2: (slave macvlan2): Removing an active aggregator [ 1160.706676][T24938] bond2: (slave macvlan2): Releasing backup interface [ 1160.753713][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1160.805615][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1160.899691][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1160.945376][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1161.062931][T21569] usb 2-1: USB disconnect, device number 94 [ 1161.476173][ T5938] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1161.525715][ T10] usb 1-1: USB disconnect, device number 63 [ 1161.568301][ T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1161.647564][ T5938] usb 3-1: Using ep0 maxpacket: 8 [ 1161.658552][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.720930][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.765152][ T5938] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1161.800735][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.844772][ T5938] usb 3-1: config 0 descriptor?? [ 1162.157507][T21569] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1162.363263][T21569] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1162.372815][T21569] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1162.385058][T21569] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 222, changing to 7 [ 1162.415013][T21569] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 49569, setting to 1024 [ 1162.443214][T21569] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1162.485471][T21569] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1162.562482][T21569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.597564][ T10] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1162.640201][T21569] usb 1-1: config 0 descriptor?? [ 1162.663252][T21569] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1162.747633][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1162.754756][ T10] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1162.869851][ T10] usb 2-1: config 0 has no interface number 0 [ 1162.885616][ T10] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.904187][ T10] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.914556][ T10] usb 2-1: config 0 interface 128 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1162.955416][ T10] usb 2-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 1162.984725][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.030971][ T10] usb 2-1: config 0 descriptor?? [ 1163.583197][T24979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4598'. [ 1163.825583][ T10] usbhid 2-1:0.128: can't add hid device: -71 [ 1163.832065][ T10] usbhid 2-1:0.128: probe with driver usbhid failed with error -71 [ 1163.885728][ T10] usb 2-1: USB disconnect, device number 95 [ 1164.072828][ T5938] usbhid 3-1:0.0: can't add hid device: -71 [ 1164.081380][ T5938] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1164.125907][ T5938] usb 3-1: USB disconnect, device number 86 [ 1164.188818][T24985] loop2: detected capacity change from 0 to 7 [ 1164.205233][T24985] Dev loop2: unable to read RDB block 7 [ 1164.216156][T24985] loop2: unable to read partition table [ 1164.222606][T24985] loop2: partition table beyond EOD, truncated [ 1164.231888][T24985] loop_reread_partitions: partition scan of loop2 (被xڬdƤݡ [ 1164.231888][T24985] ) failed (rc=-5) [ 1164.697589][T24990] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4602'. [ 1164.706750][T24990] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4602'. [ 1164.716317][T24990] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4602'. [ 1165.078864][ T5938] usb 1-1: USB disconnect, device number 64 [ 1165.499243][ T24] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1165.902921][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1165.944517][ T24] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.993839][ T24] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1166.035210][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1166.072591][ T24] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1166.137315][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.199026][ T24] usb 3-1: config 0 descriptor?? [ 1166.314916][ T30] audit: type=1326 audit(1759041338.904:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25012 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1166.426408][ T30] audit: type=1326 audit(1759041338.934:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25012 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1166.478390][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 1166.487499][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1166.497472][ T30] audit: type=1326 audit(1759041338.934:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25012 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1166.566332][ T24] usb 3-1: USB disconnect, device number 87 [ 1166.728485][ T30] audit: type=1326 audit(1759041338.934:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25012 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1167.003977][ T30] audit: type=1326 audit(1759041338.934:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25012 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1167.120630][ T30] audit: type=1326 audit(1759041338.934:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25012 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=347 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1167.184659][ T30] audit: type=1326 audit(1759041338.934:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25012 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1167.218695][ T30] audit: type=1326 audit(1759041338.934:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25012 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1167.242053][ T30] audit: type=1326 audit(1759041338.934:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25012 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1167.270891][ T30] audit: type=1326 audit(1759041338.934:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25012 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1168.283002][T25037] FAULT_INJECTION: forcing a failure. [ 1168.283002][T25037] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.360338][T25037] CPU: 1 UID: 0 PID: 25037 Comm: syz.2.4617 Not tainted syzkaller #0 PREEMPT(full) [ 1168.360364][T25037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1168.360375][T25037] Call Trace: [ 1168.360383][T25037] [ 1168.360392][T25037] dump_stack_lvl+0x189/0x250 [ 1168.360418][T25037] ? __pfx____ratelimit+0x10/0x10 [ 1168.360438][T25037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.360459][T25037] ? __pfx__printk+0x10/0x10 [ 1168.360489][T25037] ? __pfx___might_resched+0x10/0x10 [ 1168.360506][T25037] ? fs_reclaim_acquire+0x7d/0x100 [ 1168.360530][T25037] should_fail_ex+0x414/0x560 [ 1168.360559][T25037] should_failslab+0xa8/0x100 [ 1168.360586][T25037] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1168.360615][T25037] ? ep_ptable_queue_proc+0x5c/0x200 [ 1168.360638][T25037] ep_ptable_queue_proc+0x5c/0x200 [ 1168.360656][T25037] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1168.360674][T25037] pipe_poll+0x16f/0x470 [ 1168.360702][T25037] ? __pfx_pipe_poll+0x10/0x10 [ 1168.360725][T25037] ep_insert+0x115e/0x19e0 [ 1168.360767][T25037] ? __pfx_ep_insert+0x10/0x10 [ 1168.360790][T25037] ? __pfx___mutex_lock+0x10/0x10 [ 1168.360810][T25037] ? __fget_files+0x2a/0x420 [ 1168.360827][T25037] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1168.360843][T25037] ? __fget_files+0x3a0/0x420 [ 1168.360857][T25037] ? __fget_files+0x2a/0x420 [ 1168.360883][T25037] do_epoll_ctl+0x7f4/0xe80 [ 1168.360917][T25037] __ia32_sys_epoll_ctl+0x15d/0x1a0 [ 1168.360945][T25037] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 1168.360975][T25037] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.360997][T25037] __do_fast_syscall_32+0xb6/0x2b0 [ 1168.361018][T25037] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.361042][T25037] do_fast_syscall_32+0x34/0x80 [ 1168.361062][T25037] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1168.361084][T25037] RIP: 0023:0xf70ae539 [ 1168.361100][T25037] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1168.361115][T25037] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff [ 1168.361134][T25037] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000001 [ 1168.361147][T25037] RDX: 0000000000000004 RSI: 0000000080000040 RDI: 0000000000000000 [ 1168.361158][T25037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1168.361169][T25037] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1168.361180][T25037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1168.361209][T25037] [ 1168.958909][ T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1169.119564][ T10] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 1169.129186][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.143394][ T10] usb 2-1: config 0 has no interface number 0 [ 1169.155898][ T10] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1169.200925][ T10] usb 2-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 1169.249622][ T10] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1169.279972][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.308660][ T10] usb 2-1: config 0 descriptor?? [ 1169.368317][ T10] HFC-S_USB 2-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1169.560072][ T24] usb 2-1: USB disconnect, device number 96 [ 1169.976124][T25049] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4624'. [ 1170.242652][T25056] FAULT_INJECTION: forcing a failure. [ 1170.242652][T25056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.284351][T25056] CPU: 0 UID: 0 PID: 25056 Comm: syz.7.4626 Not tainted syzkaller #0 PREEMPT(full) [ 1170.284377][T25056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1170.284389][T25056] Call Trace: [ 1170.284397][T25056] [ 1170.284406][T25056] dump_stack_lvl+0x189/0x250 [ 1170.284433][T25056] ? __pfx____ratelimit+0x10/0x10 [ 1170.284453][T25056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1170.284482][T25056] ? __pfx__printk+0x10/0x10 [ 1170.284519][T25056] should_fail_ex+0x414/0x560 [ 1170.284550][T25056] _copy_to_user+0x31/0xb0 [ 1170.284575][T25056] __copy_siginfo_to_user32+0xa2/0x110 [ 1170.284598][T25056] ? __pfx___copy_siginfo_to_user32+0x10/0x10 [ 1170.284616][T25056] ? get_sigframe+0x596/0x7d0 [ 1170.284652][T25056] ? posixtimer_deliver_signal+0x305/0x410 [ 1170.284684][T25056] ia32_setup_rt_frame+0x6b0/0xb70 [ 1170.284723][T25056] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 1170.284753][T25056] arch_do_signal_or_restart+0x40f/0x750 [ 1170.284785][T25056] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1170.284824][T25056] ? exit_to_user_mode_loop+0x40/0x110 [ 1170.284853][T25056] exit_to_user_mode_loop+0x75/0x110 [ 1170.284877][T25056] ? asm_int80_emulation+0x1a/0x20 [ 1170.284899][T25056] do_int80_emulation+0x2a0/0x390 [ 1170.284921][T25056] ? clear_bhb_loop+0x60/0xb0 [ 1170.284938][T25056] ? clear_bhb_loop+0x60/0xb0 [ 1170.284959][T25056] asm_int80_emulation+0x1a/0x20 [ 1170.284976][T25056] RIP: 0023:0xf70ee537 [ 1170.284993][T25056] Code: 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1170.285009][T25056] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 1170.285029][T25056] RAX: 0000000000000174 RBX: 0000000000000004 RCX: 0000000080000100 [ 1170.285041][T25056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1170.285052][T25056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1170.285063][T25056] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1170.285074][T25056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1170.285103][T25056] [ 1170.837534][ T5938] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1171.015620][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.027355][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.168525][ T5938] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1171.207492][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.271768][ T5938] usb 2-1: config 0 descriptor?? [ 1171.335428][ T24] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1171.537617][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1171.552831][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.563803][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.574875][ T24] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1171.603337][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.615232][ T24] usb 3-1: config 0 descriptor?? [ 1171.928075][ T5938] hid-led 0003:04D8:F372.006A: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 1172.253221][ T5938] hid-led 0003:04D8:F372.006A: Greynut Luxafor initialized [ 1172.536158][ T5938] usb 2-1: USB disconnect, device number 97 [ 1172.592162][ T1337] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1172.623455][ T1337] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1172.847724][ T78] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1173.448833][ T165] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1173.532380][T25095] fuse: Unknown parameter '' [ 1173.875867][ T165] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1173.885783][ T165] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1173.914279][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 1173.943238][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1174.033075][ T4600] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1174.039444][ T24] usb 3-1: USB disconnect, device number 88 [ 1174.081701][ T4600] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1174.115915][T19200] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1174.158933][T19200] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1174.186492][ T165] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1174.197009][ T165] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1174.207274][T19200] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1174.220709][ T165] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1174.235107][T19200] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1174.246216][ T165] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1174.286448][ T4600] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1174.367742][ T4600] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1174.552816][T25105] FAULT_INJECTION: forcing a failure. [ 1174.552816][T25105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.579562][T25107] fuse: Bad value for 'user_id' [ 1174.584648][T25107] fuse: Bad value for 'user_id' [ 1174.606604][T25105] CPU: 1 UID: 0 PID: 25105 Comm: syz.7.4640 Not tainted syzkaller #0 PREEMPT(full) [ 1174.606628][T25105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1174.606638][T25105] Call Trace: [ 1174.606643][T25105] [ 1174.606648][T25105] dump_stack_lvl+0x189/0x250 [ 1174.606666][T25105] ? __pfx____ratelimit+0x10/0x10 [ 1174.606679][T25105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1174.606690][T25105] ? __pfx__printk+0x10/0x10 [ 1174.606705][T25105] ? __might_fault+0xb0/0x130 [ 1174.606725][T25105] should_fail_ex+0x414/0x560 [ 1174.606743][T25105] _copy_from_user+0x2d/0xb0 [ 1174.606757][T25105] get_compat_msghdr+0xad/0x4a0 [ 1174.606774][T25105] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1174.606787][T25105] ? rcu_is_watching+0x15/0xb0 [ 1174.606797][T25105] ? ___sys_recvmsg+0x1c4/0x510 [ 1174.606814][T25105] ___sys_recvmsg+0x17f/0x510 [ 1174.606830][T25105] ? __pfx____sys_recvmsg+0x10/0x10 [ 1174.606855][T25105] ? __fget_files+0x3a0/0x420 [ 1174.606870][T25105] do_recvmmsg+0x36a/0x770 [ 1174.606887][T25105] ? __pfx_do_recvmmsg+0x10/0x10 [ 1174.606906][T25105] ? __pfx_vfs_write+0x10/0x10 [ 1174.606927][T25105] __sys_recvmmsg+0x19d/0x280 [ 1174.606942][T25105] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1174.606953][T25105] ? ksys_write+0x22a/0x250 [ 1174.606971][T25105] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1174.606985][T25105] __do_fast_syscall_32+0xb6/0x2b0 [ 1174.606998][T25105] ? lockdep_hardirqs_on+0x9c/0x150 [ 1174.607011][T25105] do_fast_syscall_32+0x34/0x80 [ 1174.607022][T25105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1174.607035][T25105] RIP: 0023:0xf70ee539 [ 1174.607045][T25105] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1174.607054][T25105] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1174.607066][T25105] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800066c0 [ 1174.607074][T25105] RDX: 0000000000000a0d RSI: 0000000000000000 RDI: 0000000000000000 [ 1174.607080][T25105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1174.607086][T25105] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1174.607091][T25105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1174.607106][T25105] [ 1174.831835][ C1] vkms_vblank_simulate: vblank timer overrun [ 1174.917519][ T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1175.057698][ T24] usb 1-1: device descriptor read/64, error -71 [ 1175.307517][ T24] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1175.317465][ T980] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1175.354429][T25118] netlink: 'syz.7.4648': attribute type 21 has an invalid length. [ 1175.447627][ T24] usb 1-1: device descriptor read/64, error -71 [ 1175.457483][ T5938] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1175.477489][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 1175.484007][ T980] usb 2-1: config 0 has no interfaces? [ 1175.496658][ T980] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1175.509154][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.517183][ T980] usb 2-1: Product: syz [ 1175.522990][ T980] usb 2-1: Manufacturer: syz [ 1175.534243][ T980] usb 2-1: SerialNumber: syz [ 1175.542185][ T980] usb 2-1: config 0 descriptor?? [ 1175.561082][ T24] usb usb1-port1: attempt power cycle [ 1175.610741][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.649656][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.704912][ T5938] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1175.761745][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.775961][ T980] usb 2-1: USB disconnect, device number 98 [ 1175.778465][ T5938] usb 3-1: config 0 descriptor?? [ 1175.957435][ T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1175.978090][ T24] usb 1-1: device descriptor read/8, error -71 [ 1176.202258][ T5938] hid-led 0003:04D8:F372.006B: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0 [ 1176.217717][ T24] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1176.252860][ T24] usb 1-1: device descriptor read/8, error -71 [ 1176.335159][ T5938] hid-led 0003:04D8:F372.006B: Greynut Luxafor initialized [ 1176.377761][ T24] usb usb1-port1: unable to enumerate USB device [ 1176.574742][ T24] usb 3-1: USB disconnect, device number 89 [ 1176.600764][ T4600] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1176.671497][ T4600] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1176.681186][ T4600] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1176.690862][ T4600] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1176.701951][ T4600] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1176.711771][ T4600] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1176.723395][ T36] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1176.736926][ T36] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1176.751379][ T36] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1176.786556][ T36] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1176.806725][T19200] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1176.829729][ T36] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1176.851207][T19200] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1176.880453][T19200] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1176.901699][ T36] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1176.918091][T19200] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1176.939546][T19200] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1176.956014][T19200] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1177.044946][T25139] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4654'. [ 1177.054142][T25139] net_ratelimit: 21 callbacks suppressed [ 1177.054154][T25139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1177.167469][ T980] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1177.337722][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 1177.345924][ T980] usb 2-1: config 9 has an invalid interface number: 8 but max is 3 [ 1177.354698][ T980] usb 2-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 1177.363966][ T980] usb 2-1: config 9 has an invalid interface number: 149 but max is 3 [ 1177.372797][ T980] usb 2-1: config 9 has an invalid interface number: 244 but max is 3 [ 1177.381434][ T980] usb 2-1: config 9 has an invalid interface number: 56 but max is 3 [ 1177.390075][ T980] usb 2-1: config 9 has no interface number 0 [ 1177.396326][ T980] usb 2-1: config 9 has no interface number 1 [ 1177.427777][ T980] usb 2-1: config 9 has no interface number 2 [ 1177.434046][ T980] usb 2-1: config 9 has no interface number 3 [ 1177.441007][ T980] usb 2-1: config 9 interface 8 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1177.452263][ T980] usb 2-1: config 9 interface 8 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1177.473981][ T980] usb 2-1: config 9 interface 8 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1177.490384][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.496700][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.509780][ T980] usb 2-1: config 9 interface 8 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1177.522103][ T980] usb 2-1: config 9 interface 8 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 1177.540467][ T980] usb 2-1: config 9 interface 8 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1177.552595][ T980] usb 2-1: config 9 interface 8 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1177.570346][ T980] usb 2-1: config 9 interface 8 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1177.677552][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1177.716127][ T980] usb 2-1: config 9 interface 8 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1177.797400][ T980] usb 2-1: config 9 interface 149 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1177.827570][ T980] usb 2-1: config 9 interface 149 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1177.861017][ T980] usb 2-1: config 9 interface 149 altsetting 7 has an endpoint descriptor with address 0x49, changing to 0x9 [ 1177.888003][ T980] usb 2-1: config 9 interface 149 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 1177.912306][ T10] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.963417][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1177.975761][ T980] usb 2-1: config 9 interface 149 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 1178.006413][ T980] usb 2-1: config 9 interface 149 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 1178.020975][ T10] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1178.044086][ T980] usb 2-1: config 9 interface 149 altsetting 7 endpoint 0xA has invalid maxpacket 2047, setting to 1024 [ 1178.059920][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1178.101368][ T980] usb 2-1: config 9 interface 149 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1024 [ 1178.120880][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.161969][T25154] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(15) [ 1178.168178][ T980] usb 2-1: config 9 interface 149 altsetting 7 has an endpoint descriptor with address 0x43, changing to 0x3 [ 1178.168596][T25154] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1178.188828][T25154] vhci_hcd vhci_hcd.0: Device attached [ 1178.201924][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1178.288099][T25154] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(17) [ 1178.294745][T25154] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1178.323608][T25159] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(22) [ 1178.330288][T25159] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1178.348458][ T10] usb 3-1: invalid MIDI out EP 0 [ 1178.351973][T25154] vhci_hcd vhci_hcd.0: Device attached [ 1178.386946][T25162] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(19) [ 1178.391671][ T980] usb 2-1: config 9 interface 149 altsetting 7 endpoint 0x3 has an invalid bInterval 211, changing to 11 [ 1178.393578][T25162] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1178.429387][ T980] usb 2-1: config 9 interface 149 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 1178.440279][T21569] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 1178.477208][T25162] vhci_hcd vhci_hcd.0: Device attached [ 1178.493222][T25159] vhci_hcd vhci_hcd.0: Device attached [ 1178.498917][ T980] usb 2-1: config 9 interface 149 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 1178.511472][T25154] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(27) [ 1178.518105][T25154] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1178.561781][ T980] usb 2-1: config 9 interface 149 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 1178.618451][ T980] usb 2-1: config 9 interface 149 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 1178.618655][T25154] vhci_hcd vhci_hcd.0: Device attached [ 1178.634909][ T980] usb 2-1: config 9 interface 149 altsetting 7 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 1178.666879][ T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1178.689600][ T980] usb 2-1: config 9 interface 244 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1178.724641][ T980] usb 2-1: config 9 interface 244 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 1178.744789][ T980] usb 2-1: config 9 interface 244 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 1178.775998][ T980] usb 2-1: config 9 interface 244 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 1178.792057][ T980] usb 2-1: config 9 interface 244 altsetting 4 has a duplicate endpoint with address 0x8E, skipping [ 1178.803312][ T980] usb 2-1: config 9 interface 244 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1178.814231][ T980] usb 2-1: config 9 interface 56 altsetting 13 has a duplicate endpoint with address 0xF, skipping [ 1178.825966][T25159] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1178.841277][ T980] usb 2-1: config 9 interface 56 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 1178.842985][T25160] vhci_hcd: connection closed [ 1178.852212][T25163] vhci_hcd: connection closed [ 1178.886194][ T980] usb 2-1: config 9 interface 149 has no altsetting 0 [ 1178.888862][T25155] vhci_hcd: connection reset by peer [ 1178.891530][T25157] vhci_hcd: connection closed [ 1178.903460][ T4600] vhci_hcd: stop threads [ 1178.904113][ T980] usb 2-1: config 9 interface 244 has no altsetting 0 [ 1178.916200][T25169] vhci_hcd: connection closed [ 1178.937973][ T4600] vhci_hcd: release socket [ 1178.947248][ T4600] vhci_hcd: disconnect device [ 1178.954267][ T980] usb 2-1: config 9 interface 56 has no altsetting 0 [ 1178.955247][ T4600] vhci_hcd: stop threads [ 1178.967970][ T980] usb 2-1: Dual-Role OTG device on HNP port [ 1178.974640][ T980] usb 2-1: New USB device found, idVendor=1199, idProduct=9063, bcdDevice=d9.08 [ 1178.975167][ T4600] vhci_hcd: release socket [ 1178.989513][ T4600] vhci_hcd: disconnect device [ 1178.990703][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.994470][ T4600] vhci_hcd: stop threads [ 1179.006428][ T980] usb 2-1: Product: ࠇ [ 1179.007837][ T4600] vhci_hcd: release socket [ 1179.013107][ T980] usb 2-1: Manufacturer: 㰊 [ 1179.015274][ T4600] vhci_hcd: disconnect device [ 1179.019961][ T980] usb 2-1: SerialNumber: ㌵鸄ᶳ饬溅Ꮫ㞂ಬ⏚능ᮎ翱 [ 1179.032621][ T4600] vhci_hcd: stop threads [ 1179.037108][ T4600] vhci_hcd: release socket [ 1179.048081][ T4600] vhci_hcd: disconnect device [ 1179.053137][ T4600] vhci_hcd: stop threads [ 1179.077433][ T4600] vhci_hcd: release socket [ 1179.083152][ T4600] vhci_hcd: disconnect device [ 1179.167645][ T24] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1179.267153][T25136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.281677][T25136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.293225][T25136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.302806][T25136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.313280][T25136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.323485][T25136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.325402][ T24] usb 1-1: config 0 has no interfaces? [ 1179.343280][ T24] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1179.354647][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.364666][ T24] usb 1-1: Product: syz [ 1179.369233][ T24] usb 1-1: Manufacturer: syz [ 1179.374102][ T24] usb 1-1: SerialNumber: syz [ 1179.391839][ T24] usb 1-1: config 0 descriptor?? [ 1179.433999][ T980] usb 2-1: USB disconnect, device number 99 [ 1179.698275][ T24] usb 1-1: USB disconnect, device number 69 [ 1180.111907][T25189] xt_policy: neither incoming nor outgoing policy selected [ 1180.686840][ T5938] usb 3-1: USB disconnect, device number 90 [ 1181.387427][ T980] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1181.702638][ T980] usb 3-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 1181.737302][ T980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1181.832554][ T980] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1181.957789][ T980] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1181.987232][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.007684][ T980] usb 3-1: Product: syz [ 1182.011944][ T980] usb 3-1: Manufacturer: syz [ 1182.017533][ T980] usb 3-1: SerialNumber: syz [ 1182.262305][ T980] usb 3-1: config 0 descriptor?? [ 1182.344432][ T980] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 1182.702660][T25201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1182.712115][T25201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.120774][T25213] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(15) [ 1183.127404][T25213] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1183.173111][T25213] vhci_hcd vhci_hcd.0: Device attached [ 1183.225991][T25217] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(18) [ 1183.232613][T25217] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1183.261112][T25217] vhci_hcd vhci_hcd.0: Device attached [ 1183.323354][T25213] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(21) [ 1183.330003][T25213] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1183.377834][T25213] vhci_hcd vhci_hcd.0: Device attached [ 1183.385850][T25217] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(24) [ 1183.392494][T25217] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1183.446699][T25217] vhci_hcd vhci_hcd.0: Device attached [ 1183.456790][T25213] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(23) [ 1183.463430][T25213] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1183.490059][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1183.490076][ T30] audit: type=1326 audit(1759041356.084:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25224 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1183.513101][T25213] vhci_hcd vhci_hcd.0: Device attached [ 1183.533803][T25217] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1183.566766][T25229] vhci_hcd: connection closed [ 1183.567088][ T165] vhci_hcd: stop threads [ 1183.574491][ T30] audit: type=1326 audit(1759041356.084:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25224 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1183.583211][ T165] vhci_hcd: release socket [ 1183.612551][T25226] vhci_hcd: connection closed [ 1183.614333][T25218] vhci_hcd: connection closed [ 1183.615562][ T165] vhci_hcd: disconnect device [ 1183.634660][ T30] audit: type=1326 audit(1759041356.084:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25224 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1183.650358][T25214] vhci_hcd: connection reset by peer [ 1183.656801][ C1] vkms_vblank_simulate: vblank timer overrun [ 1183.667801][T25222] vhci_hcd: connection closed [ 1183.676002][ T165] vhci_hcd: stop threads [ 1183.685204][ T165] vhci_hcd: release socket [ 1183.693478][ T165] vhci_hcd: disconnect device [ 1183.702040][ T165] vhci_hcd: stop threads [ 1183.706457][ T165] vhci_hcd: release socket [ 1183.712741][ T165] vhci_hcd: disconnect device [ 1183.727516][ T24] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1183.746401][ T30] audit: type=1326 audit(1759041356.084:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25224 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1183.770384][ T30] audit: type=1326 audit(1759041356.084:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25224 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1183.800507][ T165] vhci_hcd: stop threads [ 1183.804785][ T165] vhci_hcd: release socket [ 1183.809485][ T165] vhci_hcd: disconnect device [ 1183.815645][ T165] vhci_hcd: stop threads [ 1183.820817][ T165] vhci_hcd: release socket [ 1183.828234][ T165] vhci_hcd: disconnect device [ 1183.840961][ T30] audit: type=1326 audit(1759041356.084:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25224 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1183.870014][ T30] audit: type=1326 audit(1759041356.124:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25224 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1183.893004][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1183.898684][ T30] audit: type=1326 audit(1759041356.124:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25224 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1183.910558][T21569] vhci_hcd: vhci_device speed not set [ 1183.922857][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1183.933569][ T30] audit: type=1326 audit(1759041356.124:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25224 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1183.967462][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 1183.977004][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.991204][ T24] usb 1-1: Product: syz [ 1183.995739][ T30] audit: type=1326 audit(1759041356.124:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25224 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1184.021075][ T24] usb 1-1: SerialNumber: syz [ 1184.154227][ T5938] usb 3-1: USB disconnect, device number 91 [ 1184.515637][ T24] usbhid 1-1:1.0: can't add hid device: -71 [ 1184.537864][ T24] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1184.595504][ T24] usb 1-1: USB disconnect, device number 70 [ 1184.679152][T25255] vlan2: entered allmulticast mode [ 1185.738128][T25272] tipc: Enabling of bearer rejected, failed to enable media [ 1186.066153][T25277] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(15) [ 1186.072788][T25277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1186.119826][T25277] vhci_hcd vhci_hcd.0: Device attached [ 1186.207106][T25280] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(18) [ 1186.213726][T25280] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1186.248756][T25280] vhci_hcd vhci_hcd.0: Device attached [ 1186.255261][T25277] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(22) [ 1186.261916][T25277] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1186.300548][T25281] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(25) [ 1186.307208][T25281] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1186.324708][T25277] vhci_hcd vhci_hcd.0: Device attached [ 1186.358009][ T24] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 1186.383965][T25281] vhci_hcd vhci_hcd.0: Device attached [ 1186.391326][T25280] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(24) [ 1186.397979][T25280] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1186.412117][T25277] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1186.424075][T25280] vhci_hcd vhci_hcd.0: Device attached [ 1186.466717][T25292] vhci_hcd: connection closed [ 1186.468888][ T4600] vhci_hcd: stop threads [ 1186.478733][ T4600] vhci_hcd: release socket [ 1186.483737][T25283] vhci_hcd: connection closed [ 1186.489497][T25282] vhci_hcd: connection closed [ 1186.489673][T25286] vhci_hcd: connection closed [ 1186.501111][T25278] vhci_hcd: connection reset by peer [ 1186.512297][ T4600] vhci_hcd: disconnect device [ 1186.534063][ T4600] vhci_hcd: stop threads [ 1186.545413][ T4600] vhci_hcd: release socket [ 1186.577281][ T4600] vhci_hcd: disconnect device [ 1186.595646][ T4600] vhci_hcd: stop threads [ 1186.609089][ T4600] vhci_hcd: release socket [ 1186.617500][ T5938] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1186.627835][ T4600] vhci_hcd: disconnect device [ 1186.632700][ T4600] vhci_hcd: stop threads [ 1186.645656][ T4600] vhci_hcd: release socket [ 1186.679012][ T4600] vhci_hcd: disconnect device [ 1186.701296][ T4600] vhci_hcd: stop threads [ 1186.746323][ T4600] vhci_hcd: release socket [ 1186.756274][ T4600] vhci_hcd: disconnect device [ 1186.767639][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 1186.797656][ T5938] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1186.806361][ T5938] usb 1-1: config 0 has no interface number 0 [ 1186.819536][ T5938] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1186.867983][ T5938] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1186.920380][ T5938] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1187.024303][ T5938] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1187.050746][T25299] netlink: 'syz.2.4695': attribute type 8 has an invalid length. [ 1187.077630][ T5938] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1187.102809][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.116242][ T5938] usb 1-1: config 0 descriptor?? [ 1187.147756][ T5938] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1187.929583][ T5938] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1188.165507][ T5938] usb 2-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 1188.181116][ T5938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1188.194834][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1188.244335][ T5938] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1188.253881][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.631730][ T5938] usb 2-1: Product: syz [ 1188.642755][ T5938] usb 2-1: Manufacturer: syz [ 1188.654281][ T5938] usb 2-1: SerialNumber: syz [ 1188.729649][ T5938] usb 2-1: config 0 descriptor?? [ 1188.772744][ T5938] usb 2-1: Found UVC 34.00 device syz (8086:0b5b) [ 1188.792420][ T5938] usb 2-1: No valid video chain found. [ 1189.280355][T25334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4702'. [ 1189.388367][T21569] usb 1-1: USB disconnect, device number 71 [ 1189.426733][T21569] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1190.047541][ T5938] usb 2-1: USB disconnect, device number 100 [ 1190.087666][T21569] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1190.483677][T21569] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1190.598313][T21569] usb 1-1: config 7 has an invalid interface number: 93 but max is 2 [ 1190.606441][T21569] usb 1-1: config 7 has an invalid interface number: 73 but max is 2 [ 1190.623584][T21569] usb 1-1: config 7 has an invalid interface number: 133 but max is 2 [ 1190.641140][T21569] usb 1-1: config 7 has an invalid interface number: 96 but max is 2 [ 1190.651218][T21569] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.666137][T21569] usb 1-1: config 7 has 4 interfaces, different from the descriptor's value: 3 [ 1190.677085][T21569] usb 1-1: config 7 has no interface number 0 [ 1190.751185][T21569] usb 1-1: config 7 has no interface number 1 [ 1190.775159][T21569] usb 1-1: config 7 has no interface number 2 [ 1190.781423][T21569] usb 1-1: config 7 has no interface number 3 [ 1190.787751][T21569] usb 1-1: config 7 interface 93 altsetting 9 bulk endpoint 0xA has invalid maxpacket 1023 [ 1190.861396][T21569] usb 1-1: config 7 interface 93 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1191.191378][T21569] usb 1-1: config 7 interface 93 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1191.202572][T21569] usb 1-1: config 7 interface 93 altsetting 9 bulk endpoint 0x4 has invalid maxpacket 0 [ 1191.212923][T21569] usb 1-1: config 7 interface 73 altsetting 232 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1191.237477][T21569] usb 1-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x4, skipping [ 1191.254405][T21569] usb 1-1: config 7 interface 73 altsetting 232 has an invalid descriptor for endpoint zero, skipping [ 1191.277407][T21569] usb 1-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x4, skipping [ 1191.351674][T21569] usb 1-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x6, skipping [ 1191.362923][T21569] usb 1-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x8, skipping [ 1191.377542][T21569] usb 1-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x2, skipping [ 1191.388412][T21569] usb 1-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x2, skipping [ 1191.399256][T21569] usb 1-1: config 7 interface 73 altsetting 232 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1191.410535][T21569] usb 1-1: config 7 interface 73 altsetting 232 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1191.421796][T21569] usb 1-1: config 7 interface 73 altsetting 232 has 13 endpoint descriptors, different from the interface descriptor's value: 14 [ 1191.435562][T21569] usb 1-1: too many endpoints for config 7 interface 133 altsetting 229: 92, using maximum allowed: 30 [ 1191.456245][T21569] usb 1-1: config 7 interface 133 altsetting 229 has a duplicate endpoint with address 0x6, skipping [ 1191.477383][T21569] usb 1-1: config 7 interface 133 altsetting 229 has 1 endpoint descriptor, different from the interface descriptor's value: 92 [ 1191.478053][ T24] vhci_hcd: vhci_device speed not set [ 1191.520276][T21569] usb 1-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 1191.618960][T21569] usb 1-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 1191.742215][T21569] usb 1-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 1191.871581][T21569] usb 1-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 1191.945644][T21569] usb 1-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x82, skipping [ 1191.972517][ T5938] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1192.045891][T21569] usb 1-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 1192.113274][T21569] usb 1-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 1192.117506][ T5938] usb 3-1: device descriptor read/64, error -71 [ 1192.161928][T21569] usb 1-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 1192.178325][T21569] usb 1-1: config 7 interface 93 has no altsetting 0 [ 1192.185285][T21569] usb 1-1: config 7 interface 73 has no altsetting 0 [ 1192.192636][T21569] usb 1-1: config 7 interface 133 has no altsetting 0 [ 1192.200000][T21569] usb 1-1: config 7 interface 96 has no altsetting 0 [ 1192.212003][T21569] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=a6.54 [ 1192.222178][T21569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.235513][T21569] usb 1-1: Product: syz [ 1192.240066][T21569] usb 1-1: Manufacturer: syz [ 1192.244989][T21569] usb 1-1: SerialNumber: syz [ 1192.258881][ T1211] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1192.267660][T25346] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1192.377860][ T5938] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1192.427574][ T1211] usb 2-1: Using ep0 maxpacket: 16 [ 1192.449281][T21569] qmi_wwan 1-1:7.93: probe with driver qmi_wwan failed with error -22 [ 1192.471871][ T1211] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1192.485755][ T1211] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.501036][T21569] usb 1-1: selecting invalid altsetting 0 [ 1192.503587][ T1211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1192.506807][T21569] usb 1-1: Could not set interface, error -22 [ 1192.527565][ T5938] usb 3-1: device descriptor read/64, error -71 [ 1192.550656][ T1211] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1192.553082][T21569] usbhid 1-1:7.96: couldn't find an input interrupt endpoint [ 1192.564476][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.576925][ T1211] usb 2-1: Product: syz [ 1192.586954][ T1211] usb 2-1: Manufacturer: syz [ 1192.594279][ T1211] usb 2-1: SerialNumber: syz [ 1192.602005][T21569] usb 1-1: USB disconnect, device number 72 [ 1192.648185][ T5938] usb usb3-port1: attempt power cycle [ 1192.987603][ T5938] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1193.008193][ T5938] usb 3-1: device descriptor read/8, error -71 [ 1193.015691][ T1211] usb 2-1: 0:2 : does not exist [ 1193.223068][T25379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.240956][T25379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.260511][ T5938] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1193.288648][ T5938] usb 3-1: device descriptor read/8, error -71 [ 1193.417962][ T5938] usb usb3-port1: unable to enumerate USB device [ 1193.694933][ T1211] usb 2-1: 1:0: bogus dB values (-12637/-11528), disabling dB reporting [ 1193.717992][ T1211] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1193.755863][ T1211] usb 2-1: USB disconnect, device number 101 [ 1194.067808][T21569] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1194.217448][T21569] usb 1-1: Using ep0 maxpacket: 8 [ 1194.224720][T21569] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.237883][T21569] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.248208][T21569] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1194.259590][T21569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.271115][T21569] usb 1-1: config 0 descriptor?? [ 1194.350297][T25392] batman_adv: batadv0: Adding interface: ip6gretap2 [ 1194.360123][T25392] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1194.394547][T25392] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 1194.856475][ T1211] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1195.147557][ T1211] usb 2-1: Using ep0 maxpacket: 16 [ 1195.163712][ T1211] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.191129][ T1211] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1195.210114][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.243081][ T1211] usb 2-1: Product: syz [ 1195.255053][ T1211] usb 2-1: Manufacturer: syz [ 1195.263074][ T1211] usb 2-1: SerialNumber: syz [ 1195.280436][ T1211] usb 2-1: config 0 descriptor?? [ 1195.291368][ T1211] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1195.302872][ T1211] gspca_stv06xx: st6422 sensor detected [ 1195.493377][T25394] fuse: Unknown parameter 'roo' [ 1195.570596][ T1211] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 1195.585561][ T1211] usb 2-1: USB disconnect, device number 102 [ 1195.939331][ T1211] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1196.499430][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.514818][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.527252][ T1211] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1196.542153][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.584303][ T1211] usb 2-1: config 0 descriptor?? [ 1196.643363][T21569] usbhid 1-1:0.0: can't add hid device: -71 [ 1196.676991][T21569] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1196.698768][T21569] usb 1-1: USB disconnect, device number 73 [ 1197.016750][ T1211] cp2112 0003:10C4:EA90.006C: unknown main item tag 0x0 [ 1197.024058][ T1211] cp2112 0003:10C4:EA90.006C: unknown main item tag 0x0 [ 1197.027626][T21569] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1197.031707][ T1211] cp2112 0003:10C4:EA90.006C: unknown main item tag 0x0 [ 1197.046253][ T1211] cp2112 0003:10C4:EA90.006C: unknown main item tag 0x0 [ 1197.054150][ T1211] cp2112 0003:10C4:EA90.006C: unknown main item tag 0x0 [ 1197.061506][ T1211] cp2112 0003:10C4:EA90.006C: unknown main item tag 0x0 [ 1197.068562][ T1211] cp2112 0003:10C4:EA90.006C: unknown main item tag 0x0 [ 1197.080128][ T1211] cp2112 0003:10C4:EA90.006C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1197.199403][T21569] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1197.210609][T21569] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1197.223968][T21569] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 1197.233877][T21569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.244919][T21569] usb 1-1: config 0 descriptor?? [ 1197.251632][T25420] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1198.070135][T25427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.079689][T25427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.311776][T25423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.369957][T25423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.517834][T25430] veth0_vlan: left promiscuous mode [ 1198.534032][T25430] veth0_vlan: entered promiscuous mode [ 1199.646248][ T1211] cp2112 0003:10C4:EA90.006C: error requesting version [ 1199.723249][ T1211] cp2112 0003:10C4:EA90.006C: probe with driver cp2112 failed with error -71 [ 1199.842515][ T1211] usb 2-1: USB disconnect, device number 103 [ 1199.894464][T25442] input: syz1 as /devices/virtual/input/input97 [ 1200.328917][T21569] usbhid 1-1:0.0: can't add hid device: -71 [ 1200.344050][T21569] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1200.360600][T21569] usb 1-1: USB disconnect, device number 74 [ 1200.497629][ T10] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1200.562167][T25451] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1200.601615][T25451] input: syz1 as /devices/virtual/input/input98 [ 1200.679767][ T10] usb 3-1: config 0 has no interfaces? [ 1200.702188][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1200.721814][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.740724][T25457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4741'. [ 1200.839587][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1200.839599][ T30] audit: type=1326 audit(1759041373.424:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25453 comm="syz.0.4741" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffe539 code=0x0 [ 1200.891429][ T10] usb 3-1: Product: syz [ 1200.927960][ T10] usb 3-1: Manufacturer: syz [ 1200.956326][ T10] usb 3-1: SerialNumber: syz [ 1201.064846][ T10] usb 3-1: config 0 descriptor?? [ 1201.100726][T25447] syzkaller1: entered promiscuous mode [ 1201.106394][T25447] syzkaller1: entered allmulticast mode [ 1201.420714][T25463] vlan3: entered promiscuous mode [ 1201.425808][T25463] veth0: entered promiscuous mode [ 1201.977564][ T1211] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1202.611794][ T1211] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1202.627484][ T1211] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1202.654498][ T1211] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1202.673247][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1202.693530][ T1211] usb 2-1: Product: syz [ 1202.702491][ T1211] usb 2-1: Manufacturer: syz [ 1202.717625][ T1211] usb 2-1: SerialNumber: syz [ 1202.740129][ T1211] usb 2-1: config 0 descriptor?? [ 1202.765173][ T1211] usb 2-1: selecting invalid altsetting 0 [ 1203.045043][T25469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.062124][T25469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.158369][ T1211] usb 2-1: USB disconnect, device number 104 [ 1203.247401][ T5938] usb 3-1: USB disconnect, device number 96 [ 1203.259885][T25487] FAULT_INJECTION: forcing a failure. [ 1203.259885][T25487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.297390][T25487] CPU: 0 UID: 0 PID: 25487 Comm: syz.7.4749 Not tainted syzkaller #0 PREEMPT(full) [ 1203.297416][T25487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1203.297427][T25487] Call Trace: [ 1203.297435][T25487] [ 1203.297442][T25487] dump_stack_lvl+0x189/0x250 [ 1203.297468][T25487] ? __pfx____ratelimit+0x10/0x10 [ 1203.297488][T25487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1203.297506][T25487] ? __pfx__printk+0x10/0x10 [ 1203.297529][T25487] ? __might_fault+0xb0/0x130 [ 1203.297562][T25487] should_fail_ex+0x414/0x560 [ 1203.297591][T25487] copy_fpstate_to_sigframe+0xa18/0xce0 [ 1203.297620][T25487] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 1203.297650][T25487] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1203.297696][T25487] ? fpu__alloc_mathframe+0xad/0x130 [ 1203.297719][T25487] get_sigframe+0x58d/0x7d0 [ 1203.297746][T25487] ? __pfx_get_sigframe+0x10/0x10 [ 1203.297769][T25487] ? posixtimer_deliver_signal+0x305/0x410 [ 1203.297799][T25487] ia32_setup_rt_frame+0x106/0xb70 [ 1203.297819][T25487] ? _raw_spin_unlock_irq+0x23/0x50 [ 1203.297833][T25487] ? lockdep_hardirqs_on+0x9c/0x150 [ 1203.297850][T25487] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1203.297864][T25487] ? get_signal+0x1151/0x1340 [ 1203.297886][T25487] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 1203.297914][T25487] arch_do_signal_or_restart+0x40f/0x750 [ 1203.297947][T25487] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1203.297970][T25487] ? __sys_recvmmsg+0x19d/0x280 [ 1203.298009][T25487] ? exit_to_user_mode_loop+0x40/0x110 [ 1203.298038][T25487] exit_to_user_mode_loop+0x75/0x110 [ 1203.298059][T25487] ? asm_int80_emulation+0x1a/0x20 [ 1203.298075][T25487] do_int80_emulation+0x2a0/0x390 [ 1203.298095][T25487] ? clear_bhb_loop+0x60/0xb0 [ 1203.298112][T25487] ? clear_bhb_loop+0x60/0xb0 [ 1203.298132][T25487] asm_int80_emulation+0x1a/0x20 [ 1203.298148][T25487] RIP: 0023:0xf70ee537 [ 1203.298165][T25487] Code: 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1203.298180][T25487] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1203.298199][T25487] RAX: 0000000000000151 RBX: 0000000000000003 RCX: 00000000800028c0 [ 1203.298211][T25487] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000000000000000 [ 1203.298222][T25487] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1203.298232][T25487] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1203.298241][T25487] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1203.298268][T25487] [ 1203.648795][T25492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.657781][T25492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.929724][ T5938] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1204.067469][ T5938] usb 3-1: device descriptor read/64, error -71 [ 1204.497816][ T5938] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1204.650074][ T5938] usb 3-1: device descriptor read/64, error -71 [ 1204.779323][ T5938] usb usb3-port1: attempt power cycle [ 1204.987405][ T1211] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1205.014676][T25510] hub 9-0:1.0: USB hub found [ 1205.077226][T25510] hub 9-0:1.0: 1 port detected [ 1205.137438][ T5938] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1205.168288][ T1211] usb 2-1: Using ep0 maxpacket: 32 [ 1205.187270][ T1211] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1205.210319][ T5938] usb 3-1: device descriptor read/8, error -71 [ 1205.227685][ T1211] usb 2-1: config 0 has no interface number 0 [ 1205.244322][ T1211] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1205.268973][ T1211] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1205.305176][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.331002][ T1211] usb 2-1: Product: syz [ 1205.342510][ T1211] usb 2-1: Manufacturer: syz [ 1205.359219][ T1211] usb 2-1: SerialNumber: syz [ 1205.377855][ T1211] usb 2-1: config 0 descriptor?? [ 1205.407235][ T1211] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1205.458275][ T1211] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1205.507661][ T5938] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1205.583993][ T5938] usb 3-1: device descriptor read/8, error -71 [ 1205.709281][ T5938] usb usb3-port1: unable to enumerate USB device [ 1206.040435][T25507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.072038][T25522] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4759'. [ 1206.129263][T25507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.233540][ T1211] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1206.619328][T25525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4756'. [ 1206.735666][T25525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.888024][T25525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1207.113661][T25531] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4761'. [ 1207.400205][ T1211] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1207.411251][ T1211] em28xx 2-1:0.89: board has no eeprom [ 1207.677537][ T1211] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1207.689383][ T1211] em28xx 2-1:0.89: analog set to bulk mode. [ 1207.701095][ T5938] em28xx 2-1:0.89: Registering V4L2 extension [ 1207.778155][ T5938] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1207.942676][ T5938] em28xx 2-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 1207.985500][ T10] usb 2-1: USB disconnect, device number 105 [ 1207.986332][ T5938] em28xx 2-1:0.89: reading from i2c device at 0x42 failed (error=-19) [ 1207.993120][ T10] em28xx 2-1:0.89: Disconnecting em28xx [ 1208.033252][ T5938] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1208.054606][ T5938] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1208.074196][ T5938] em28xx 2-1:0.89: No AC97 audio processor [ 1208.157908][ T5938] usb 2-1: Decoder not found [ 1208.163850][ T5938] em28xx 2-1:0.89: failed to create media graph [ 1208.197752][T21569] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1208.203068][ T5938] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1208.481276][ T5938] em28xx 2-1:0.89: Registering snapshot button... [ 1208.483134][T25543] ================================================================== [ 1208.495817][T25543] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 1208.503212][T25543] Read of size 8 at addr ffff88807c4ec740 by task v4l_id/25543 [ 1208.510742][T25543] [ 1208.513060][T25543] CPU: 0 UID: 0 PID: 25543 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1208.513074][T25543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1208.513080][T25543] Call Trace: [ 1208.513088][T25543] [ 1208.513094][T25543] dump_stack_lvl+0x189/0x250 [ 1208.513110][T25543] ? rcu_is_watching+0x15/0xb0 [ 1208.513121][T25543] ? __kasan_check_byte+0x12/0x40 [ 1208.513136][T25543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1208.513146][T25543] ? rcu_is_watching+0x15/0xb0 [ 1208.513156][T25543] ? lock_release+0x4b/0x3e0 [ 1208.513171][T25543] ? __virt_addr_valid+0x1c8/0x5c0 [ 1208.513190][T25543] ? __virt_addr_valid+0x4a5/0x5c0 [ 1208.513208][T25543] print_report+0xca/0x240 [ 1208.513223][T25543] ? v4l2_fh_open+0xc7/0x430 [ 1208.513238][T25543] kasan_report+0x118/0x150 [ 1208.513259][T25543] ? v4l2_fh_open+0xc7/0x430 [ 1208.513276][T25543] v4l2_fh_open+0xc7/0x430 [ 1208.513293][T25543] em28xx_v4l2_open+0x157/0x9a0 [ 1208.513321][T25543] v4l2_open+0x20f/0x360 [ 1208.513336][T25543] chrdev_open+0x4c9/0x5e0 [ 1208.513346][T25543] ? __pfx_chrdev_open+0x10/0x10 [ 1208.513355][T25543] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1208.513372][T25543] ? __pfx_chrdev_open+0x10/0x10 [ 1208.513380][T25543] do_dentry_open+0x950/0x13f0 [ 1208.513393][T25543] vfs_open+0x3b/0x340 [ 1208.513402][T25543] ? path_openat+0x2ecd/0x3830 [ 1208.513414][T25543] path_openat+0x2ee5/0x3830 [ 1208.513425][T25543] ? arch_stack_walk+0xfc/0x150 [ 1208.513441][T25543] ? stack_depot_save_flags+0x40/0x860 [ 1208.513459][T25543] ? __pfx_path_openat+0x10/0x10 [ 1208.513470][T25543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.513484][T25543] do_filp_open+0x1fa/0x410 [ 1208.513495][T25543] ? __lock_acquire+0xab9/0xd20 [ 1208.513509][T25543] ? __pfx_do_filp_open+0x10/0x10 [ 1208.513525][T25543] ? _raw_spin_unlock+0x28/0x50 [ 1208.513534][T25543] ? alloc_fd+0x64c/0x6c0 [ 1208.513549][T25543] do_sys_openat2+0x121/0x1c0 [ 1208.513560][T25543] ? __pfx_do_sys_openat2+0x10/0x10 [ 1208.513570][T25543] ? exc_page_fault+0x76/0xf0 [ 1208.513581][T25543] ? do_user_addr_fault+0xc8a/0x1390 [ 1208.513591][T25543] __x64_sys_openat+0x138/0x170 [ 1208.513603][T25543] do_syscall_64+0xfa/0x3b0 [ 1208.513614][T25543] ? lockdep_hardirqs_on+0x9c/0x150 [ 1208.513624][T25543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.513633][T25543] ? clear_bhb_loop+0x60/0xb0 [ 1208.513651][T25543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.513661][T25543] RIP: 0033:0x7faef6ea7407 [ 1208.513672][T25543] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1208.513682][T25543] RSP: 002b:00007ffda82bf850 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1208.513694][T25543] RAX: ffffffffffffffda RBX: 00007faef75e9880 RCX: 00007faef6ea7407 [ 1208.513701][T25543] RDX: 0000000000000000 RSI: 00007ffda82bff1c RDI: ffffffffffffff9c [ 1208.513709][T25543] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1208.513715][T25543] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1208.513721][T25543] R13: 00007ffda82bfaa0 R14: 00007faef7750000 R15: 0000556d141ce4d8 [ 1208.513731][T25543] [ 1208.513735][T25543] [ 1208.821343][T25543] Allocated by task 5938: [ 1208.825654][T25543] kasan_save_track+0x3e/0x80 [ 1208.830319][T25543] __kasan_kmalloc+0x93/0xb0 [ 1208.834896][T25543] __kmalloc_cache_noprof+0x230/0x3d0 [ 1208.840260][T25543] em28xx_v4l2_init+0x10b/0x2e70 [ 1208.845202][T25543] em28xx_init_extension+0x120/0x1c0 [ 1208.850479][T25543] process_scheduled_works+0xade/0x17b0 [ 1208.856032][T25543] worker_thread+0x8a0/0xda0 [ 1208.860634][T25543] kthread+0x711/0x8a0 [ 1208.864689][T25543] ret_from_fork+0x439/0x7d0 [ 1208.869283][T25543] ret_from_fork_asm+0x1a/0x30 [ 1208.874035][T25543] [ 1208.876337][T25543] Freed by task 5938: [ 1208.880297][T25543] kasan_save_track+0x3e/0x80 [ 1208.884958][T25543] kasan_save_free_info+0x46/0x50 [ 1208.889962][T25543] __kasan_slab_free+0x5b/0x80 [ 1208.894707][T25543] kfree+0x18e/0x440 [ 1208.898583][T25543] em28xx_v4l2_init+0x1683/0x2e70 [ 1208.903595][T25543] em28xx_init_extension+0x120/0x1c0 [ 1208.908880][T25543] process_scheduled_works+0xade/0x17b0 [ 1208.914407][T25543] worker_thread+0x8a0/0xda0 [ 1208.918976][T25543] kthread+0x711/0x8a0 [ 1208.923024][T25543] ret_from_fork+0x439/0x7d0 [ 1208.927593][T25543] ret_from_fork_asm+0x1a/0x30 [ 1208.932345][T25543] [ 1208.934649][T25543] The buggy address belongs to the object at ffff88807c4ec000 [ 1208.934649][T25543] which belongs to the cache kmalloc-8k of size 8192 [ 1208.948683][T25543] The buggy address is located 1856 bytes inside of [ 1208.948683][T25543] freed 8192-byte region [ffff88807c4ec000, ffff88807c4ee000) [ 1208.962643][T25543] [ 1208.964965][T25543] The buggy address belongs to the physical page: [ 1208.971393][T25543] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c4e8 [ 1208.980148][T25543] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1208.988638][T25543] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1208.996615][T25543] page_type: f5(slab) [ 1209.000617][T25543] raw: 00fff00000000040 ffff88801a442280 ffffea0000a93400 0000000000000005 [ 1209.009207][T25543] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1209.017780][T25543] head: 00fff00000000040 ffff88801a442280 ffffea0000a93400 0000000000000005 [ 1209.026442][T25543] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1209.035102][T25543] head: 00fff00000000003 ffffea0001f13a01 00000000ffffffff 00000000ffffffff [ 1209.043761][T25543] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1209.052416][T25543] page dumped because: kasan: bad access detected [ 1209.058846][T25543] page_owner tracks the page as allocated [ 1209.064541][T25543] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 25249, tgid 25248 (syz.7.4681), ts 1184472483332, free_ts 1184335063036 [ 1209.086249][T25543] post_alloc_hook+0x240/0x2a0 [ 1209.091011][T25543] get_page_from_freelist+0x21e4/0x22c0 [ 1209.096535][T25543] __alloc_frozen_pages_noprof+0x181/0x370 [ 1209.102336][T25543] alloc_pages_mpol+0x232/0x4a0 [ 1209.107167][T25543] allocate_slab+0x8a/0x370 [ 1209.111649][T25543] ___slab_alloc+0xbeb/0x1420 [ 1209.116306][T25543] __kmalloc_cache_noprof+0x296/0x3d0 [ 1209.121663][T25543] audit_log_d_path+0xb5/0x190 [ 1209.126444][T25543] audit_log_d_path_exe+0x42/0x70 [ 1209.131461][T25543] audit_log_task+0x2b3/0x3c0 [ 1209.136125][T25543] audit_seccomp+0x86/0x190 [ 1209.140610][T25543] __seccomp_filter+0x87e/0x1a40 [ 1209.145572][T25543] syscall_trace_enter+0xaa/0x160 [ 1209.150594][T25543] __do_fast_syscall_32+0x99/0x2b0 [ 1209.155741][T25543] do_fast_syscall_32+0x34/0x80 [ 1209.160577][T25543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1209.166909][T25543] page last free pid 18138 tgid 18138 stack trace: [ 1209.173433][T25543] __free_frozen_pages+0xbc4/0xd30 [ 1209.178545][T25543] __put_partials+0x156/0x1a0 [ 1209.183213][T25543] put_cpu_partial+0x17c/0x250 [ 1209.187973][T25543] __slab_free+0x2d5/0x3c0 [ 1209.192383][T25543] qlist_free_all+0x97/0x140 [ 1209.196959][T25543] kasan_quarantine_reduce+0x148/0x160 [ 1209.202402][T25543] __kasan_slab_alloc+0x22/0x80 [ 1209.207238][T25543] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1209.212699][T25543] alloc_empty_file+0x55/0x1d0 [ 1209.217443][T25543] alloc_file_pseudo+0x13d/0x210 [ 1209.222364][T25543] sock_alloc_file+0xb8/0x2e0 [ 1209.227036][T25543] __sys_socket+0x13d/0x1b0 [ 1209.231518][T25543] __ia32_compat_sys_socketcall+0x6df/0x9c0 [ 1209.237398][T25543] __do_fast_syscall_32+0xb6/0x2b0 [ 1209.242495][T25543] do_fast_syscall_32+0x34/0x80 [ 1209.247338][T25543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1209.253659][T25543] [ 1209.255963][T25543] Memory state around the buggy address: [ 1209.261575][T25543] ffff88807c4ec600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1209.269620][T25543] ffff88807c4ec680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1209.277667][T25543] >ffff88807c4ec700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1209.285709][T25543] ^ [ 1209.291882][T25543] ffff88807c4ec780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1209.299924][T25543] ffff88807c4ec800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1209.307963][T25543] ================================================================== [ 1209.341892][T25546] FAULT_INJECTION: forcing a failure. [ 1209.341892][T25546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1209.364091][ T5938] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input99 [ 1209.379927][T25546] CPU: 1 UID: 0 PID: 25546 Comm: syz.1.4767 Not tainted syzkaller #0 PREEMPT(full) [ 1209.379953][T25546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1209.379965][T25546] Call Trace: [ 1209.379973][T25546] [ 1209.379981][T25546] dump_stack_lvl+0x189/0x250 [ 1209.380007][T25546] ? __pfx____ratelimit+0x10/0x10 [ 1209.380027][T25546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1209.380048][T25546] ? __pfx__printk+0x10/0x10 [ 1209.380072][T25546] ? __might_fault+0xb0/0x130 [ 1209.380107][T25546] should_fail_ex+0x414/0x560 [ 1209.380138][T25546] _copy_from_user+0x2d/0xb0 [ 1209.380161][T25546] get_compat_msghdr+0xad/0x4a0 [ 1209.380189][T25546] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1209.380223][T25546] ___sys_sendmsg+0x193/0x2a0 [ 1209.380247][T25546] ? __pfx____sys_sendmsg+0x10/0x10 [ 1209.380304][T25546] ? __fget_files+0x2a/0x420 [ 1209.380320][T25546] ? __fget_files+0x3a0/0x420 [ 1209.380348][T25546] __sys_sendmsg+0x164/0x220 [ 1209.380371][T25546] ? __pfx___sys_sendmsg+0x10/0x10 [ 1209.380407][T25546] ? lockdep_hardirqs_on+0x9c/0x150 [ 1209.380432][T25546] __do_fast_syscall_32+0xb6/0x2b0 [ 1209.380453][T25546] ? lockdep_hardirqs_on+0x9c/0x150 [ 1209.380476][T25546] do_fast_syscall_32+0x34/0x80 [ 1209.380496][T25546] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1209.380517][T25546] RIP: 0023:0xf706e539 [ 1209.380533][T25546] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1209.380548][T25546] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1209.380567][T25546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1209.380579][T25546] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 1209.380589][T25546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1209.380600][T25546] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1209.380610][T25546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1209.380637][T25546] [ 1209.588329][T25543] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1209.595552][T25543] CPU: 0 UID: 0 PID: 25543 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1209.604776][T25543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1209.615038][T25543] Call Trace: [ 1209.618329][T25543] [ 1209.621277][T25543] dump_stack_lvl+0x99/0x250 [ 1209.625875][T25543] ? __asan_memcpy+0x40/0x70 [ 1209.630455][T25543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1209.635700][T25543] ? __pfx__printk+0x10/0x10 [ 1209.640291][T25543] vpanic+0x281/0x750 [ 1209.644277][T25543] ? preempt_schedule+0xae/0xc0 [ 1209.649128][T25543] ? __pfx_vpanic+0x10/0x10 [ 1209.653625][T25543] ? preempt_schedule_common+0x83/0xd0 [ 1209.659190][T25543] ? preempt_schedule+0xae/0xc0 [ 1209.664040][T25543] ? __pfx_preempt_schedule+0x10/0x10 [ 1209.669433][T25543] panic+0xb9/0xc0 [ 1209.673152][T25543] ? __pfx_panic+0x10/0x10 [ 1209.677568][T25543] ? __pfx_panic+0x10/0x10 [ 1209.681976][T25543] ? v4l2_fh_open+0xc7/0x430 [ 1209.686560][T25543] check_panic_on_warn+0x89/0xb0 [ 1209.691495][T25543] ? v4l2_fh_open+0xc7/0x430 [ 1209.696074][T25543] end_report+0x78/0x160 [ 1209.700312][T25543] kasan_report+0x129/0x150 [ 1209.704812][T25543] ? v4l2_fh_open+0xc7/0x430 [ 1209.709395][T25543] v4l2_fh_open+0xc7/0x430 [ 1209.713800][T25543] em28xx_v4l2_open+0x157/0x9a0 [ 1209.718677][T25543] v4l2_open+0x20f/0x360 [ 1209.722910][T25543] chrdev_open+0x4c9/0x5e0 [ 1209.727324][T25543] ? __pfx_chrdev_open+0x10/0x10 [ 1209.732269][T25543] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1209.738608][T25543] ? __pfx_chrdev_open+0x10/0x10 [ 1209.743566][T25543] do_dentry_open+0x950/0x13f0 [ 1209.748327][T25543] vfs_open+0x3b/0x340 [ 1209.752388][T25543] ? path_openat+0x2ecd/0x3830 [ 1209.757147][T25543] path_openat+0x2ee5/0x3830 [ 1209.761729][T25543] ? arch_stack_walk+0xfc/0x150 [ 1209.766576][T25543] ? stack_depot_save_flags+0x40/0x860 [ 1209.772036][T25543] ? __pfx_path_openat+0x10/0x10 [ 1209.776967][T25543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.783032][T25543] do_filp_open+0x1fa/0x410 [ 1209.787528][T25543] ? __lock_acquire+0xab9/0xd20 [ 1209.792398][T25543] ? __pfx_do_filp_open+0x10/0x10 [ 1209.797441][T25543] ? _raw_spin_unlock+0x28/0x50 [ 1209.802287][T25543] ? alloc_fd+0x64c/0x6c0 [ 1209.806611][T25543] do_sys_openat2+0x121/0x1c0 [ 1209.811280][T25543] ? __pfx_do_sys_openat2+0x10/0x10 [ 1209.816469][T25543] ? exc_page_fault+0x76/0xf0 [ 1209.821135][T25543] ? do_user_addr_fault+0xc8a/0x1390 [ 1209.826426][T25543] __x64_sys_openat+0x138/0x170 [ 1209.831286][T25543] do_syscall_64+0xfa/0x3b0 [ 1209.835783][T25543] ? lockdep_hardirqs_on+0x9c/0x150 [ 1209.840974][T25543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.847027][T25543] ? clear_bhb_loop+0x60/0xb0 [ 1209.851692][T25543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.857578][T25543] RIP: 0033:0x7faef6ea7407 [ 1209.861985][T25543] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1209.881586][T25543] RSP: 002b:00007ffda82bf850 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1209.890007][T25543] RAX: ffffffffffffffda RBX: 00007faef75e9880 RCX: 00007faef6ea7407 [ 1209.897969][T25543] RDX: 0000000000000000 RSI: 00007ffda82bff1c RDI: ffffffffffffff9c [ 1209.905930][T25543] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1209.913893][T25543] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1209.921850][T25543] R13: 00007ffda82bfaa0 R14: 00007faef7750000 R15: 0000556d141ce4d8 [ 1209.929814][T25543] [ 1209.933104][T25543] Kernel Offset: disabled [ 1209.937412][T25543] Rebooting in 86400 seconds..