last executing test programs: 2m34.9169694s ago: executing program 1 (id=8454): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(r4, 0x0, &(0x7f0000000500)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upd'], 0x1a, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) 2m33.687581449s ago: executing program 1 (id=8460): flistxattr(0xffffffffffffffff, &(0x7f00000000c0)=""/61, 0x3d) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100eb22174a20b4041f86d6f900000001090212000100000000090400007bfb8ab400"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000740)={0x18, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newqdisc={0x274, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff1, 0xffff}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x2, "90075f6223ebceccb7ddebce5d404215"}}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x7f, 0xd7, 0x5, 0x1, 0x9, 0x10001, 0x5}}, {0xe, 0x2, [0x7, 0x5, 0x1ff, 0x3, 0x1]}}, {{0x1c, 0x1, {0x6, 0x9, 0x7, 0x4, 0x1, 0x8, 0x101, 0x6}}, {0x10, 0x2, [0x3, 0x1, 0x0, 0x86a, 0x8001, 0xffff]}}, {{0x1c, 0x1, {0x7, 0xd8, 0xfffb, 0x0, 0x0, 0x9, 0x7, 0x4}}, {0xc, 0x2, [0x401, 0xfa94, 0x101, 0x9]}}, {{0x1c, 0x1, {0x9, 0xa, 0xd38e, 0x4, 0x2, 0x4, 0x5, 0x9}}, {0x16, 0x2, [0xf1, 0xe7f, 0x2, 0x8, 0x6, 0x3, 0x7, 0x5, 0x5]}}, {{0x1c, 0x1, {0x4, 0x3c, 0x7fff, 0x5, 0x0, 0x4, 0x7fffffff, 0x6}}, {0x10, 0x2, [0xbfe, 0x4, 0x7, 0x5, 0x2, 0x10]}}, {{0x1c, 0x1, {0x6, 0xf, 0x2, 0x6, 0x0, 0x7f, 0x97, 0xa}}, {0x18, 0x2, [0x2, 0x0, 0x6b6, 0x2, 0x1, 0x2, 0x6, 0x7, 0x80, 0x1a4]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x8}]}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7ff}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2, 0x8, 0x1, 0x2, 0x1, 0x5, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}, {{0x1c, 0x1, {0xc, 0x92, 0xa, 0x6, 0x1, 0x718, 0x5, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x3, 0xe, 0x8, 0x1, 0x3, 0x8, 0x18000000, 0x9}}, {0x16, 0x2, [0x3, 0x6, 0x580, 0x800, 0x80, 0x986, 0x8, 0x1ff, 0x17b7]}}, {{0x1c, 0x1, {0x6, 0x4, 0x0, 0x40, 0x0, 0x7, 0x8, 0x6}}, {0x10, 0x2, [0x3, 0x8, 0xc29b, 0x2, 0xd522, 0x9]}}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 2m29.807859851s ago: executing program 1 (id=8476): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000009c0)=@IORING_OP_MSG_RING={0x28, 0x32, 0x0, r4, 0x1, &(0x7f0000000040)="5b0526a74d31f432d421d863af45725e7429eaa59d1a4c3e3a078b17874359f20ac3", 0x22, 0x0, 0x1}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x401, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_PORT_SELF={0x4}, @IFLA_MTU={0x8, 0x4, 0x13a}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x40}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth0_macvtap\x00', &(0x7f0000004440)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 2m27.444930342s ago: executing program 1 (id=8484): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x35, {0x9, 0x0, 0x2000000, 0x3, 0xfffffffd, 0xfffffffe}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x40000100) 2m26.974436176s ago: executing program 1 (id=8486): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x1d4, 0x0, 0x200, 0x70bd25, 0x240, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2cb4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf501}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4cd}, @TIPC_NLA_NODE_ID={0x24, 0x3, "6e8070c38de0408d33655e6cc3ef1251e04438bff49bcab6e481b8fc83450147"}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x756}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7848859b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40085}, 0xc000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x3}, 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) openat$dsp(0xffffff9c, &(0x7f0000000000), 0x40001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x48, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2m26.392703817s ago: executing program 1 (id=8487): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x2}, 0x8000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0xd9}, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x15555555, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040906097c0c5bc900"], 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m11.189790459s ago: executing program 32 (id=8487): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x2}, 0x8000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0xd9}, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x15555555, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040906097c0c5bc900"], 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 44.328959755s ago: executing program 3 (id=8779): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="010000"], 0x3c}}, 0x0) 43.895508353s ago: executing program 3 (id=8780): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x9c4722ca153b3a7d, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3a}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (fail_nth: 1) 43.398383312s ago: executing program 3 (id=8781): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100005bd30a20f0031d58a3200102030109021b0002000000000904250000ff0116000904"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x294}}, 0x4048010) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x9, 0x2000, 0x1b, &(0x7f0000000240)="621c765f396efb3d9eb5d3c42f2402135861f12022d119a70daeb5"}], 0x1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x41}]}) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r7, 0xa, 0x13) fcntl$setlease(r7, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) rt_sigprocmask(0x2, &(0x7f0000000180)={[0x1, 0x1ff]}, &(0x7f00000001c0), 0x8) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000500)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x2, 0x6, 0x7, 0x40, 0x8}, 0x150, &(0x7f0000000800)={0x5, 0xf, 0x150, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x84, 0x2, 0xa, 0xa3, 0x6}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0xad06, 0x0, 0x2, [0x3f00, 0xf, 0x0, 0xff00de, 0xff003f]}, @generic={0x41, 0x10, 0x2, "188813efdf685f0c8c2312df89b4ff78b90be706a022603b71f96250898ded7d49f0f7f275e2be941d4d27de14fe47e4b7050109f247ff793eb4e951da4b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x10, 0x6}, @generic={0xb5, 0x10, 0x2, "2153d348b2f2e401d4fcbcb1f23bbe102c1d2172c50503f277dd5c9c32e734d969fd7003fc5929f1a95c3eff1ea0efb900b98fa5976ae8f7693bf3ab07f9abb0961d5f5102bfaeee2882c9cee3a125af221f25bb13ffa2c4dbf82d85a88ace862c2d8a7df2116313fdf046e06a29fe2a09036a41d555aaa748b6eb81c6e51708e70339c085046a60b1304c54ee0b88d26d63d89b0c13475d2248342afc71e81cd2b5738f4c43a1db68c80118aa80ca0c6c43"}, @ssp_cap={0x20, 0x10, 0xa, 0x80, 0x5, 0x200, 0xf00f, 0x5, [0xff0f, 0xff0000, 0x8080cf, 0xc000, 0xc0]}]}, 0x4, [{0x69, &(0x7f0000000440)=ANY=[@ANYBLOB="69032f8bf243be5b0adc3c71790006c17b24a496673eb345573aee5ac3ab086d179d6818df2e4fe3fcb347cbe8caea55881a9e6e8ab8929fca506aec69cade587755000000d37f262240e5d65d4fe381a8139a2d060ec655c184f3204813468d5ecf7671"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x5d}}, {0xcf, &(0x7f00000006c0)=@string={0xcf, 0x3, "6a8102531c7cde576fd52cf67dbe81139badf72abbdc4e9a3a3c9bd1d0a67d89ed3c84e7e3d895b454243a2e87e4b5e8c3198fc439354beed0dc01436b13e0ccb033d4d269390f3e7049e9e58cf764b31a49c7909094964932aff0092c3ba2d5d4e84398e95936e71db790435263076d4b73389f2e9113f21c5bccb5b18cdf8cdc0b2be21f235e67340b8628a65c08b314ae05f57805bc071e14ae388ffb56a8e8642ed6cd7ebdefe7bb5b81a0f21d2f4c5cbfd3eefa8a730a8892577a71bf33c12b8bdbe6cc1b67e6649adcf6"}}]}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r4, 0x0) ftruncate(r2, 0xb) 39.816246682s ago: executing program 3 (id=8790): clock_nanosleep(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0xca, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@noop, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) syz_usb_connect$uac1(0x2, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002000a000a00040c240202030202508000090111240605020507002e130a004ef10200000924030102020505f50904010000010200000904010101010200000905010920009301050725010003480f090402000001020000090402010101ff00000905820920"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$kcm(0xa, 0x3, 0x87) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000340)={@l2tp={0x2, 0x0, @broadcast, 0x2}, {&(0x7f0000000080)=""/227, 0xe3}, &(0x7f00000001c0), 0x2}, 0xa0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 37.524429929s ago: executing program 3 (id=8797): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x8917, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x56, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x9, 0x8, 0x4}]}}}}}}}}, 0x0) 37.319710156s ago: executing program 3 (id=8799): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0xa9d3aadc22d8e346, 0x6, 0x1, 0x0, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x80) (fail_nth: 1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) writev(r2, &(0x7f0000000700)=[{&(0x7f00000004c0)="cc4eab423e0b5cc1c5a332de6ceaf983109cff683a219016aa0ff39242513fd480cdbe69e1d471a1da30c614a70f25a3ba0c047df1f9ca8c543303", 0x3b}, {&(0x7f0000000200)="574f076866b95e8746d56e13cd9da77c18aea4fdccd47ee1e5e8af3cfc718835602f075000e804ec09d5296cee", 0x2d}, {&(0x7f0000000540)="5c015053fbdd3835c2e55e64852f320cb5d779f5dbc8a1ebd37d3b6fe4e4dad0c54de4ff7d2631e84a67a1fda59e982004ed17a092bed1f1", 0x38}, {&(0x7f0000000580)="60350f18f18b10042287ff8cda922eeec73f3d098972f11f374f2164da4d6748135bb59b334c96465d724476f48271fb4084dbd6cab653f43f499f45806c6ca7d2418042d5493ae991011609f3492427e8a6722118a6550c91eaeceff4a9afdac1d6aed2768b158d2f66a74886542ed3524b3add9a41f0dcb2c28649929cdd2b758f809991cfff5f64e8767fbd60a972f90dfb1ed8c0f76fc2f31a", 0x9b}, {&(0x7f0000000640)="4f6f7237e0645f35bdbd05b4ab3f4fdad95a9e612d844e3ec86f8e5f5e68bc62c3f75cf71f389c0437b088", 0x2b}, {&(0x7f0000001780)="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", 0xff8}, {&(0x7f00000006c0)}], 0x7) 24.029284052s ago: executing program 2 (id=8828): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000880)={0x3, 0x0, 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000003000)=[{0x0, 0x1, 0x0, &(0x7f0000001ec0), &(0x7f0000000300)}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x3, 0x887]}, {0x5, 0x1, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000640)=""/171, 0xab}, {0x0}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000000800)=""/97, 0x61}, {&(0x7f0000000180)=""/14, 0xe}], &(0x7f0000000a80)}, {0x5, 0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000b00)=""/138, 0x8a}, {0x0}, {&(0x7f0000000cc0)=""/24, 0x18}, {0x0}], &(0x7f0000001d40)}, {0x0, 0x1, 0x0, 0x0, &(0x7f00000002c0)=[0x40000001, 0x659, 0x1, 0x3]}, {0x0, 0x1, 0x0, &(0x7f0000002380), 0x0}, {0x0, 0x1, 0x0, 0x0, &(0x7f0000000180)}, {0x1, 0x1, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c80)=""/85, 0x55}], &(0x7f0000000300)=[0x2]}, {0x1, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/152, 0x98}], &(0x7f0000000380)=[0x5, 0xb5b5]}, {0x4, 0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/80, 0x50}, {&(0x7f0000000980)=""/142, 0x8e}, {&(0x7f0000000480)=""/35, 0x23}, {&(0x7f0000000a40)=""/142, 0x8e}], &(0x7f0000000c00)=[0x1, 0xff, 0x8, 0x9, 0x23, 0x8001, 0x7f, 0x9]}, {0x3, 0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001d40)=""/4096, 0x1026}, {&(0x7f0000002d40)=""/224, 0xe0}, {&(0x7f0000000c40)=""/5, 0x5}], &(0x7f0000002e40)}, {0x2, 0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002e80)=""/176, 0xb0}, {&(0x7f0000002f40)=""/12, 0xc}], &(0x7f0000002fc0)=[0x0, 0x1, 0x3, 0x6, 0x4, 0x1, 0x800, 0xa6d]}], 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000001000000010000006cdbdb983c44c278d442000000000000000c737c08ca69bb4a853ff0a1d322a662e4a658c2b45b4e028aea8fff9764830c956f0954dfc148ed9eb7baf87e91b3f6"], 0x10}, 0x20040001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 21.243429616s ago: executing program 2 (id=8833): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0xdd52, 0xc, 0x40, 0x3}, 0x0, 0x2, 0x0, 0x10, 0x0, 0x6}}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x8}, {0x8, 0x3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0xca, 0x4, 0xfffffff9, 0x2, 0x2b4f, 0xffffffff, 0x8001, 0x3}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=@newtfilter={0x554, 0x2c, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0x3}, {0xf, 0x4}, {0x9, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4e0, 0x2, [@TCA_BPF_POLICE={0x494, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1c000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfff, 0x5075, 0x7, 0x214, 0x7ff, 0x400, 0x100, 0x7, 0xfffffbff, 0xffff, 0x7, 0xe0000000, 0xfffffff9, 0x0, 0x101, 0x7, 0x7, 0x7, 0x7fff, 0xf749, 0xb65, 0x3, 0xe, 0x885, 0xd, 0xf, 0x3, 0x3, 0x3, 0x8, 0x4, 0xffff, 0xfff, 0x1, 0xfffffffe, 0xfffffff3, 0x8, 0x1, 0x7fff, 0x3, 0x800, 0x7, 0x8, 0xf4e, 0x9, 0x90, 0x7, 0x2, 0xb118, 0x9, 0x4, 0xb, 0x4, 0x80000000, 0xa, 0x9, 0x1, 0x4, 0xbad, 0xfffffff8, 0x6, 0x4, 0x7, 0x3ff, 0x40, 0xd07d, 0x0, 0x2, 0x0, 0x3, 0x92, 0x2261, 0x1000, 0x2, 0xc928, 0xfffffff7, 0x0, 0x4, 0x200, 0x80, 0x1, 0x1a0, 0xa, 0x9c, 0xc9, 0x6, 0xffffffff, 0x81, 0x3ff, 0xe, 0xe, 0x3, 0x4, 0x1, 0xfb, 0x1, 0x1000, 0x7, 0xae, 0x9, 0x8000, 0x7, 0xf29, 0xffffffae, 0x6, 0x9, 0x6, 0x4, 0x7f, 0x5, 0x4, 0x7, 0x5, 0x0, 0x9, 0x2, 0xbbbc, 0x9, 0x800, 0xbe85, 0xbd, 0x8, 0x18f42ff4, 0x3, 0x1310, 0x9, 0x200, 0x40, 0xa, 0xfa, 0x1, 0x7, 0xafde, 0x6, 0x9, 0x400, 0x7f, 0x1b63, 0xfff, 0xad, 0xffff5969, 0x9, 0xe, 0xfffffff8, 0x9, 0x1, 0x5, 0x3ff, 0xefb3, 0x7, 0x0, 0x8, 0x8, 0x8, 0x2, 0x1000, 0x4, 0x61e5, 0x4, 0x3, 0x6019be0b, 0x4, 0xff, 0x3ff, 0x23b5, 0x81, 0x8, 0x5, 0x3, 0x4fd5, 0x3, 0x9, 0x6, 0xd, 0xdfe, 0x6, 0x1, 0x7, 0x8, 0x65516e00, 0x8, 0x0, 0xcaf051d, 0xfffffbff, 0x0, 0x915, 0x7fffffff, 0x7, 0x8, 0x6, 0x7, 0x5, 0x5, 0x9eb3, 0x8000, 0x2, 0xfff, 0x6, 0x7f, 0xf, 0xa, 0x5, 0x62fa, 0x7, 0xf, 0x1, 0xc1ba, 0x7, 0x5, 0x831b, 0x8, 0x3, 0xf0, 0xcfab, 0x0, 0x4, 0x800, 0xe, 0x8, 0x4, 0x3, 0x4, 0xffffffff, 0x9, 0x5, 0x4, 0x7a5, 0x2, 0x46, 0x7c4, 0x80000001, 0x3, 0x200, 0xe4, 0x4, 0x7f, 0x3, 0x8, 0x9, 0x2, 0xd191, 0x8, 0x3, 0x6, 0x2, 0x0, 0x1, 0xaed, 0x8, 0x1, 0xfffffff7, 0x9, 0xe6fe, 0xb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0xa, 0x4, 0x0, {0x3, 0x0, 0x3, 0x0, 0xf801, 0x4}, {0x67, 0x0, 0x2, 0x5, 0x1, 0x2}, 0x5b, 0x1, 0x8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0xfffffffa, 0x10000, 0x4, {0x8, 0x2, 0x7ff, 0x7, 0x8001, 0x8}, {0x7, 0x2, 0x2e7, 0xe, 0x5, 0x200}, 0x1, 0x1, 0x81}}]}, @TCA_BPF_POLICE={0x30, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x2f, 0xfa}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x200}, @TCA_FLOW_RSHIFT={0x8}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0x85c322457bf8509f}]}}]}, 0x554}, 0x1, 0x0, 0x0, 0x20000800}, 0x4012) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40246608, &(0x7f00000001c0)={0x2, 0x3, 0x6, 0x401, 0x0, 0x1}) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x8b22, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r10) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3f) 16.088265678s ago: executing program 4 (id=8836): syz_open_dev$usbfs(0x0, 0x8c1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x4, 0x141141) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x10, 0x8000000, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="010004001000000000000002"]) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) getdents(r6, 0x0, 0x0) r7 = fsopen(&(0x7f0000000100)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r9 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, 0x0, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r10, &(0x7f00000000c0)={0x38, 0x0, 0x10000002, 0xf, 0x9, 0x7d2a, 0xff, 0x8, 0x7, 0xfffff801}, 0x0) 15.772026713s ago: executing program 2 (id=8838): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/118, 0x76}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000002f00)=""/268, 0x10c}, {&(0x7f0000002d00)=""/118, 0x76}, {&(0x7f0000000400)=""/60, 0x3c}], 0xa}, 0x10}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1008}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) 13.255140634s ago: executing program 4 (id=8840): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x8917, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}}, 0xb4}}, 0x4c050) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x56, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x9, 0x8, 0x4}]}}}}}}}}, 0x0) 13.183576288s ago: executing program 4 (id=8841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0xfffffffffffffd94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x7}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) close(0x3) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000010000000400000006000000010000"]) mlock(&(0x7f0000a38000/0x1000)=nil, 0x1000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') r6 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, 0x0) 12.178325364s ago: executing program 5 (id=8842): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x10, 0x8000000, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="010004001000000000000002"]) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_pidfd_open(0xffffffffffffffff, 0x0) process_mrelease(r4, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) getdents(r5, &(0x7f0000000280)=""/209, 0xd1) r6 = fsopen(&(0x7f0000000100)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x41, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0x9df}, 0x1) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r9, &(0x7f0000001900)=[{&(0x7f0000001600)=""/247, 0xf7}], 0x1, &(0x7f0000001e40)=[{0x0}, {&(0x7f00000019c0)=""/215, 0xd7}], 0x2, 0x0) sched_setattr(r9, &(0x7f00000000c0)={0x38, 0x0, 0x10000002, 0xf, 0x9, 0x7d2a, 0xff, 0x8, 0x7, 0xfffff801}, 0x0) fsmount(r6, 0x0, 0x0) 11.433798991s ago: executing program 2 (id=8843): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000009c0)=@IORING_OP_MSG_RING={0x28, 0x32, 0x0, r3, 0x1, &(0x7f0000000040)="5b0526a74d31f432d421d863af45725e7429eaa59d1a4c3e3a078b17874359f20ac3", 0x22, 0x0, 0x1}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x401, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_PORT_SELF={0x4}, @IFLA_MTU={0x8, 0x4, 0x13a}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x40}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'veth0_macvtap\x00', &(0x7f0000004440)=@ethtool_gstrings={0x1b, 0x1}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 9.260758825s ago: executing program 5 (id=8844): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000200da2763320040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002", @ANYBLOB="f0a331150c31b22615454fc11a786faf039bdf0df5242f5c7dbdf5bdc79fdf"], 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000180)=[{0x7d71, 0x8, 0x7, 0x7}]}, 0x8) (async, rerun: 64) syz_usb_connect(0x4, 0xe3, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x1f, 0x11, 0x13, 0x10, 0xa5c, 0x2033, 0xcc14, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x2, 0x7, 0x4, 0xe0, 0xb, [{{0x9, 0x4, 0x5d, 0x9, 0x1, 0xc0, 0xf6, 0xcb, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x5}, [@mixer_unit={0x6, 0x24, 0x4, 0x4, 0x2, 'P'}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x303, 0x1, 0x2, 0x4}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0x4, "f83c"}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x2, 0x4, [0x6, 0x3, 0x9, 0x8]}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x0, 0x3, 0x81, 0x7, 0x4, 0x6}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x4, 0x8, "ed1a6a"}]}, @uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9ad, 0x6, 0x7, '1'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xb, 0x4, 0x6, 0xf9, "9103df", "8a51"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x3, 0x9, 0x0, 'n8w'}, @as_header={0x7, 0x24, 0x1, 0x0, 0x3, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x2, 0xfa, 0x63}]}], [{{0x9, 0x5, 0x3, 0x10, 0x0, 0x4, 0x6, 0x8, [@generic={0x21, 0x8, "d18251fbdc24ed260eed29b8c3d79377d12f0036204954d103eb9ec8c7e12e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x72, 0x5}]}}]}}, {{0x9, 0x4, 0x45, 0x7, 0x0, 0x96, 0xfa, 0x8, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0xb40, 0x1}, [@selector_unit={0x7, 0x24, 0x5, 0x2, 0x3, "371e"}]}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0xd6, 0x3, 0x7, 0x10, 0xbe}, 0x19, &(0x7f00000004c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "9a764b8b7d9908c50bef6b63d469737e"}]}, 0x7, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x860}}, {0xec, &(0x7f0000000540)=@string={0xec, 0x3, "93e5cc1a48b4e1afafdcc60a11dbe937c118784946e493a62b26d182d8c2f174d5fe4f5d937d7c5c349bdca4e87acef58019dcd1efef9671febc2e4c769f22b1260f2b5bad6e54578f21b0e9d641834595a61afdb36f468daaeac4c5121b77108345b72b38301044c008866d6da3b7a47430cc641ef8dfa752fc7273d743f06ce4b26276685c83c1f427b91d49d0eafe16aadf5b376093eced40df2db916db5c15059a5b9b4e2c8db135bfe9e1e5d43d5f2328391815d51c5fff8606ada055cb7c95234d9a43f6ca3b20d470b69af9c474e97e461ab75a4641836d9269cdb987936257a6801901e7577c"}}, {0xc3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]}, {0x2f, &(0x7f0000000740)=@string={0x2f, 0x3, "2ec5fdbcb26bdf3335b6d729feebf01a4682e9f19bbe6b37547d5cedb6991e10b6823843e7780f00fc7ffe7b2f"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xf947e3791782d365}}, {0x90, &(0x7f0000000a40)=@string={0x90, 0x3, "e8b83d394ee6dcbe9c7704a33f80680473ac4f9b8c24a818a94a242a73ea6f1439d23c53081be73de65ca3bff0f185e46e92a2413ddd69cc10d467958496f490e1c6e02356744b51b3da18a81c6c9b57acfec7cf5f83f992d7d26f40627560ad3e106fd628c33ff7498f9be6a78d5d4e74d31653ba18eea4c650281dec2fc3dfa3b9392fea770068c8b78be54483"}}]}) (async, rerun: 64) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) (async) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@local}) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r8, 0x7b1, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x2, 0x1, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r10}) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r11) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r12) (async) r13 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 9.198085991s ago: executing program 4 (id=8846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0xdd52, 0xc, 0x40, 0x3}, 0x0, 0x2, 0x0, 0x10, 0x0, 0x6}}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x8}, {0x8, 0x3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0xca, 0x4, 0xfffffff9, 0x2, 0x2b4f, 0xffffffff, 0x8001, 0x3}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=@newtfilter={0x560, 0x2c, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0x3}, {0xf, 0x4}, {0x9, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4ec, 0x2, [@TCA_BPF_POLICE={0x494, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1c000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfff, 0x5075, 0x7, 0x214, 0x7ff, 0x400, 0x100, 0x7, 0xfffffbff, 0xffff, 0x7, 0xe0000000, 0xfffffff9, 0x0, 0x101, 0x7, 0x7, 0x7, 0x7fff, 0xf749, 0xb65, 0x3, 0xe, 0x885, 0xd, 0xf, 0x3, 0x3, 0x3, 0x8, 0x4, 0xffff, 0xfff, 0x1, 0xfffffffe, 0xfffffff3, 0x8, 0x1, 0x7fff, 0x3, 0x800, 0x7, 0x8, 0xf4e, 0x9, 0x90, 0x7, 0x2, 0xb118, 0x9, 0x4, 0xb, 0x4, 0x80000000, 0xa, 0x9, 0x1, 0x4, 0xbad, 0xfffffff8, 0x6, 0x4, 0x7, 0x3ff, 0x40, 0xd07d, 0x0, 0x2, 0x0, 0x3, 0x92, 0x2261, 0x1000, 0x2, 0xc928, 0xfffffff7, 0x0, 0x4, 0x200, 0x80, 0x1, 0x1a0, 0xa, 0x9c, 0xc9, 0x6, 0xffffffff, 0x81, 0x3ff, 0xe, 0xe, 0x3, 0x4, 0x1, 0xfb, 0x1, 0x1000, 0x7, 0xae, 0x9, 0x8000, 0x7, 0xf29, 0xffffffae, 0x6, 0x9, 0x6, 0x4, 0x7f, 0x5, 0x4, 0x7, 0x5, 0x0, 0x9, 0x2, 0xbbbc, 0x9, 0x800, 0xbe85, 0xbd, 0x8, 0x18f42ff4, 0x3, 0x1310, 0x9, 0x200, 0x40, 0xa, 0xfa, 0x1, 0x7, 0xafde, 0x6, 0x9, 0x400, 0x7f, 0x1b63, 0xfff, 0xad, 0xffff5969, 0x9, 0xe, 0xfffffff8, 0x9, 0x1, 0x5, 0x3ff, 0xefb3, 0x7, 0x0, 0x8, 0x8, 0x8, 0x2, 0x1000, 0x4, 0x61e5, 0x4, 0x3, 0x6019be0b, 0x4, 0xff, 0x3ff, 0x23b5, 0x81, 0x8, 0x5, 0x3, 0x4fd5, 0x3, 0x9, 0x6, 0xd, 0xdfe, 0x6, 0x1, 0x7, 0x8, 0x65516e00, 0x8, 0x0, 0xcaf051d, 0xfffffbff, 0x0, 0x915, 0x7fffffff, 0x7, 0x8, 0x6, 0x7, 0x5, 0x5, 0x9eb3, 0x8000, 0x2, 0xfff, 0x6, 0x7f, 0xf, 0xa, 0x5, 0x62fa, 0x7, 0xf, 0x1, 0xc1ba, 0x7, 0x5, 0x831b, 0x8, 0x3, 0xf0, 0xcfab, 0x0, 0x4, 0x800, 0xe, 0x8, 0x4, 0x3, 0x4, 0xffffffff, 0x9, 0x5, 0x4, 0x7a5, 0x2, 0x46, 0x7c4, 0x80000001, 0x3, 0x200, 0xe4, 0x4, 0x7f, 0x3, 0x8, 0x9, 0x2, 0xd191, 0x8, 0x3, 0x6, 0x2, 0x0, 0x1, 0xaed, 0x8, 0x1, 0xfffffff7, 0x9, 0xe6fe, 0xb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0xa, 0x4, 0x0, {0x3, 0x0, 0x3, 0x0, 0xf801, 0x4}, {0x67, 0x0, 0x2, 0x5, 0x1, 0x2}, 0x5b, 0x1, 0x8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0xfffffffa, 0x10000, 0x4, {0x8, 0x2, 0x7ff, 0x7, 0x8001, 0x8}, {0x7, 0x2, 0x2e7, 0xe, 0x5, 0x200}, 0x1, 0x1, 0x81}}]}, @TCA_BPF_POLICE={0x30, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x2f, 0xfa}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x200}, @TCA_FLOW_RSHIFT={0x8}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0x85c322457bf8509f}]}}]}, 0x560}, 0x1, 0x0, 0x0, 0x20000800}, 0x4012) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40246608, &(0x7f00000001c0)={0x2, 0x3, 0x6, 0x401, 0x0, 0x1}) r9 = syz_open_dev$loop(0x0, 0x8, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x8b22, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r10) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3f) 7.958844891s ago: executing program 0 (id=8847): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x12c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xe4, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd0, 0x1, [@m_simple={0x90, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x5b, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x3c, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x37b31}]}, {0x6, 0x6, "df76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 6.326268173s ago: executing program 5 (id=8848): clock_nanosleep(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0xca, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@noop, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) syz_usb_connect$uac1(0x2, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002000a000a00040c240202030202508000090111240605020507002e130a004ef10200000924030102020505f50904010000010200000904010101010200000905010920009301050725010003480f090402000001020000090402010101ff00000905820920"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$kcm(0xa, 0x3, 0x87) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000340)={@l2tp={0x2, 0x0, @broadcast, 0x2}, {&(0x7f0000000080)=""/227, 0xe3}, &(0x7f00000001c0), 0x2}, 0xa0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 6.227753875s ago: executing program 2 (id=8849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xf95a, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902"], 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x22, 0xa, 0x4b380000) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x7871, 0x700, 0x9, 0xffffffff, {{0x14, 0x4, 0x3, 0x16, 0x50, 0x64, 0x0, 0x80, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x7, 0xf0, [@multicast2]}, @timestamp_prespec={0x44, 0x24, 0xc6, 0x3, 0x8, [{@multicast2}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x7}, {@multicast1, 0xf236}]}, @noop, @ssrr={0x89, 0xb, 0xc9, [@multicast1, @dev={0xac, 0x14, 0x14, 0x12}]}, @end, @noop]}}}}}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, 0x0) chmod(&(0x7f00000003c0)='./file0\x00', 0x1) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 6.220857186s ago: executing program 0 (id=8850): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000080), 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000680)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000180)) read(r1, &(0x7f00000000c0)=""/66, 0x42) ioctl$sock_qrtr_TIOCINQ(r1, 0x8917, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r5, 0x0, 0x0) listen(r0, 0x0) syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x56, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x9, 0x8, 0x4}]}}}}}}}}, 0x0) 6.101540692s ago: executing program 4 (id=8851): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000), 0x4) writev(r2, &(0x7f0000000700)=[{&(0x7f00000004c0)="cc4eab423e0b5cc1c5a332de6ceaf983109cff683a219016aa0ff39242513fd480cdbe69e1d471a1da30c614a7", 0x2d}, {&(0x7f0000000200)="574f076866b95e8746d56e13cd9da77c18aea4fdccd47ee1e5e8af3cfc718835602f075000e804ec09d5296cee", 0x2d}, {&(0x7f0000000540)="5c015053fbdd3835c2e55e64852f320cb5d779f5dbc8a1ebd37d3b6fe4e4dad0c54de4ff7d2631e84a67a1fda59e982004ed17a092bed1f1", 0x38}, {&(0x7f0000000580)="60350f18f18b10042287ff8cda922eeec73f3d098972f11f374f2164da4d6748135bb59b334c96465d724476f48271fb4084dbd6cab653f43f499f45806c6ca7d2418042d5493ae991011609f3492427e8a6722118a6550c91eaeceff4a9afdac1d6aed2768b158d2f66a74886542ed3524b3add9a41f0dcb2c28649929cdd2b758f809991cfff5f64e8767fbd60a972f90dfb1ed8c0f76fc2f31a", 0x9b}, {&(0x7f0000000640)="4f6f7237e0645f35bdbd05b4ab3f4fdad95a9e612d844e3ec86f8e5f5e68bc62c3f75cf71f389c0437b088", 0x2b}, {&(0x7f0000001780)="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", 0xff8}, {&(0x7f00000006c0)}], 0x7) 5.64481241s ago: executing program 0 (id=8853): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0xfff0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r2, 0x1, 0x40000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) 5.298116966s ago: executing program 0 (id=8854): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x401, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_PORT_SELF={0x4}, @IFLA_MTU={0x8, 0x4, 0x13a}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x40}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'veth0_macvtap\x00', &(0x7f0000004440)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d69883c073ec10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b950600009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079229c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b7b67aa0b28d69a74ffdea61be892f0f9ff9468e42aea53ee0cb83ff180aa18b625d1667459c7cba77cff9dc8c2772fe552fecfcd1778b08381000000c0b8e14631d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9400010000ca11d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da2097f57020dd4f1f4f15edd7a0b1e24c6f79e1ea72a29c773f40f5bd9a6d7926c5c741f5aa85405273c7967d2c1a14efe0d5322cdcf2bc058ff9acb481926312f04008b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c7810ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e408910000000000f784583b63fcd46293e1ea56bd87915783a144d41669cd2c52dbb03e2b7384f100000000000000000090bd4fa6a2d30dafd3a04d373eaf151dfbbb744f0f1ce962217b32ad159f41671f002c3a25b4efbc3b193e0954f71c7f240a7cdc5bf9be12ca0e82d2a408c8f882760331612a7c3d74386b3268e0c2a95396f6d16b8309cc192295fea2d0ce983baef6deecca6b6268b6cc965f2623bac861e31026a6aba7ebf78a614092257e3a4e52b7b1628dc33a425dce56fc939b96fbb66e131ba7651b542c86650336735d315c26bae977ff5a619b2534a5d1479e9090447aa860b81b905ded2f52ab9c741fc3a05030476b159690a811416d59f9d92c84fcbf0146be0330e1127cc4bb4e4c94d603f449279874e44113e9de94fbc14891af08e20a4701f0f8788b357815cf4ca3da2066ee6604ac6ab6ec54a111bd5b1887e74eb854010cc2dc95b06ceddfbc1b914be267fc29e6cf2301291ca8de0eed796d9e5e356861349b0fc217592e962360e714bb93a2e936f70873e773b9b6c056f28a36185bb8ecdcd3332528ab2d05be93bc69a373ac9d20fa087015481cfba74612d93104db153f89d03d6ce620f1f25be68b9cb2d225711c1b288ec6464111db1b40dbce06fd1bd887d7254476c9c70fe79be0fb7810e054b6e2205c2b4b27f13751639c581dac83889ed6eea54c798f2287c9d5345b0c49f78b9aa27a9c96ce5e43b6ca11bb6375ed390773315d19b596a60500330115bb100d0ea1511e29720d5f712eedd8e165af0c1d591fdbbd84e654b0e60c338c530a9e8ae1316a889134204f9db96e870bc1c5ffc1bdb2394d77e6c751f9d87ef42f6d53293f31ff4b60912fa0777c59db1ff74ba90026eed627e0f8ab250c8c6d51d86030e6be4a8982684c12c1c435d586ce106d0b4cd0f5fabcc5fbe30db5e715646867122ef50f767e215f92d407ad1c6575eccfe25f76aaf388008ec2217c9ba0f807edebe686b420287b6e0c6f14a48c82ec45f1aa7ac2508932d0e3a5834a1a4e20bc9bb2a802304900d6bef57bd9c081b45520e7bd491a0ef1bfec4721cc70962f4d55f01bae699cb3fe31c179f00dc79140333fa4e85ec393dd01bdc5bf79677453a30c63d1561a35c5e94e3cad80136e753052b08901965293bcf5f9de9c8019a1fdebddb255427326deea4506d2cc2949df6a5c13fbcc36cbcd0f0d35602668c3bc7c7264457f161a51"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 3.026191398s ago: executing program 0 (id=8855): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.02565196s ago: executing program 4 (id=8856): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="4888", 0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x100001, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @multicast2}, &(0x7f0000000200)=0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r6, 0x1) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sendmmsg$inet(r5, &(0x7f0000000140), 0x0, 0xc884) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) sync() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r8}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc6983, 0x0) close(r9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 2.92245661s ago: executing program 5 (id=8857): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000009c0)=@IORING_OP_MSG_RING={0x28, 0x32, 0x0, r3, 0x1, &(0x7f0000000040)="5b0526a74d31f432d421d863af45725e7429eaa59d1a4c3e3a078b17874359f20ac3", 0x22, 0x0, 0x1}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x401, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_PORT_SELF={0x4}, @IFLA_MTU={0x8, 0x4, 0x13a}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x40}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'veth0_macvtap\x00', &(0x7f0000004440)=@ethtool_gstrings={0x1b, 0x1}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 278.699462ms ago: executing program 2 (id=8858): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000009c0)=@IORING_OP_MSG_RING={0x28, 0x32, 0x0, r3, 0x1, &(0x7f0000000040)="5b0526a74d31f432d421d863af45725e7429eaa59d1a4c3e3a078b17874359f20ac3", 0x22, 0x0, 0x1}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x401, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_PORT_SELF={0x4}, @IFLA_MTU={0x8, 0x4, 0x13a}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x40}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'veth0_macvtap\x00', &(0x7f0000004440)=@ethtool_gstrings={0x1b, 0x1}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 276.707105ms ago: executing program 0 (id=8867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0xfffffffffffffd94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x7}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) close(0x3) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000010000000400000006000000010000"]) mlock(&(0x7f0000a38000/0x1000)=nil, 0x1000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') r6 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, 0x0) 224.082831ms ago: executing program 5 (id=8859): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x8917, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}}, 0xb4}}, 0x4c050) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x56, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x9, 0x8, 0x4}]}}}}}}}}, 0x0) 0s ago: executing program 5 (id=8860): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0xdd52, 0xc, 0x40, 0x3}, 0x0, 0x2, 0x0, 0x10, 0x0, 0x6}}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x8}, {0x8, 0x3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0xca, 0x4, 0xfffffff9, 0x2, 0x2b4f, 0xffffffff, 0x8001, 0x3}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=@newtfilter={0x554, 0x2c, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0x3}, {0xf, 0x4}, {0x9, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4e0, 0x2, [@TCA_BPF_POLICE={0x494, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1c000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfff, 0x5075, 0x7, 0x214, 0x7ff, 0x400, 0x100, 0x7, 0xfffffbff, 0xffff, 0x7, 0xe0000000, 0xfffffff9, 0x0, 0x101, 0x7, 0x7, 0x7, 0x7fff, 0xf749, 0xb65, 0x3, 0xe, 0x885, 0xd, 0xf, 0x3, 0x3, 0x3, 0x8, 0x4, 0xffff, 0xfff, 0x1, 0xfffffffe, 0xfffffff3, 0x8, 0x1, 0x7fff, 0x3, 0x800, 0x7, 0x8, 0xf4e, 0x9, 0x90, 0x7, 0x2, 0xb118, 0x9, 0x4, 0xb, 0x4, 0x80000000, 0xa, 0x9, 0x1, 0x4, 0xbad, 0xfffffff8, 0x6, 0x4, 0x7, 0x3ff, 0x40, 0xd07d, 0x0, 0x2, 0x0, 0x3, 0x92, 0x2261, 0x1000, 0x2, 0xc928, 0xfffffff7, 0x0, 0x4, 0x200, 0x80, 0x1, 0x1a0, 0xa, 0x9c, 0xc9, 0x6, 0xffffffff, 0x81, 0x3ff, 0xe, 0xe, 0x3, 0x4, 0x1, 0xfb, 0x1, 0x1000, 0x7, 0xae, 0x9, 0x8000, 0x7, 0xf29, 0xffffffae, 0x6, 0x9, 0x6, 0x4, 0x7f, 0x5, 0x4, 0x7, 0x5, 0x0, 0x9, 0x2, 0xbbbc, 0x9, 0x800, 0xbe85, 0xbd, 0x8, 0x18f42ff4, 0x3, 0x1310, 0x9, 0x200, 0x40, 0xa, 0xfa, 0x1, 0x7, 0xafde, 0x6, 0x9, 0x400, 0x7f, 0x1b63, 0xfff, 0xad, 0xffff5969, 0x9, 0xe, 0xfffffff8, 0x9, 0x1, 0x5, 0x3ff, 0xefb3, 0x7, 0x0, 0x8, 0x8, 0x8, 0x2, 0x1000, 0x4, 0x61e5, 0x4, 0x3, 0x6019be0b, 0x4, 0xff, 0x3ff, 0x23b5, 0x81, 0x8, 0x5, 0x3, 0x4fd5, 0x3, 0x9, 0x6, 0xd, 0xdfe, 0x6, 0x1, 0x7, 0x8, 0x65516e00, 0x8, 0x0, 0xcaf051d, 0xfffffbff, 0x0, 0x915, 0x7fffffff, 0x7, 0x8, 0x6, 0x7, 0x5, 0x5, 0x9eb3, 0x8000, 0x2, 0xfff, 0x6, 0x7f, 0xf, 0xa, 0x5, 0x62fa, 0x7, 0xf, 0x1, 0xc1ba, 0x7, 0x5, 0x831b, 0x8, 0x3, 0xf0, 0xcfab, 0x0, 0x4, 0x800, 0xe, 0x8, 0x4, 0x3, 0x4, 0xffffffff, 0x9, 0x5, 0x4, 0x7a5, 0x2, 0x46, 0x7c4, 0x80000001, 0x3, 0x200, 0xe4, 0x4, 0x7f, 0x3, 0x8, 0x9, 0x2, 0xd191, 0x8, 0x3, 0x6, 0x2, 0x0, 0x1, 0xaed, 0x8, 0x1, 0xfffffff7, 0x9, 0xe6fe, 0xb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0xa, 0x4, 0x0, {0x3, 0x0, 0x3, 0x0, 0xf801, 0x4}, {0x67, 0x0, 0x2, 0x5, 0x1, 0x2}, 0x5b, 0x1, 0x8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0xfffffffa, 0x10000, 0x4, {0x8, 0x2, 0x7ff, 0x7, 0x8001, 0x8}, {0x7, 0x2, 0x2e7, 0xe, 0x5, 0x200}, 0x1, 0x1, 0x81}}]}, @TCA_BPF_POLICE={0x30, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x2f, 0xfa}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x200}, @TCA_FLOW_RSHIFT={0x8}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0x85c322457bf8509f}]}}]}, 0x554}, 0x1, 0x0, 0x0, 0x20000800}, 0x4012) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40246608, &(0x7f00000001c0)={0x2, 0x3, 0x6, 0x401, 0x0, 0x1}) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x8b22, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r10) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3f) kernel console output (not intermixed with test programs): 730.110565][T32586] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2730.204868][T19999] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2730.271518][T32586] usb 4-1: too many configurations: 10, using maximum allowed: 8 [ 2730.403607][ T5872] appleir 0003:05AC:8243.014A: unknown main item tag 0x0 [ 2730.484742][ T5872] appleir 0003:05AC:8243.014A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 2730.507740][T32586] usb 4-1: config 0 has no interfaces? [ 2730.516536][T32586] usb 4-1: config 0 has no interfaces? [ 2730.523651][T32586] usb 4-1: config 0 has no interfaces? [ 2730.530809][T32586] usb 4-1: config 0 has no interfaces? [ 2730.545568][T32586] usb 4-1: config 0 has no interfaces? [ 2730.558443][T32586] usb 4-1: config 0 has no interfaces? [ 2730.579679][T32586] usb 4-1: config 0 has no interfaces? [ 2730.599094][T32586] usb 4-1: config 0 has no interfaces? [ 2730.633703][T32586] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 2730.680519][T32586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2730.700713][ T5872] usb 3-1: USB disconnect, device number 85 [ 2730.702763][T32586] usb 4-1: Product: syz [ 2730.711794][T32586] usb 4-1: Manufacturer: syz [ 2730.719004][T32586] usb 4-1: SerialNumber: syz [ 2730.727938][T32586] usb 4-1: config 0 descriptor?? [ 2731.055262][ T6433] fido_id[6433]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2731.254426][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8622'. [ 2731.366965][T32586] usb 4-1: USB disconnect, device number 49 [ 2731.853157][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8628'. [ 2731.920121][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8628'. [ 2732.327681][ T6458] netlink: 'syz.2.8628': attribute type 21 has an invalid length. [ 2732.337223][ T6458] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8628'. [ 2732.348122][ T6458] netlink: 'syz.2.8628': attribute type 4 has an invalid length. [ 2732.356004][ T6458] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8628'. [ 2733.126582][ T6482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8631'. [ 2733.610315][ T6488] macvlan1: entered promiscuous mode [ 2734.293421][ T6510] netlink: 'syz.3.8636': attribute type 9 has an invalid length. [ 2734.332251][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 2734.501903][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2734.513217][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2734.549277][ T6518] dns_resolver: Unsupported server list version (0) [ 2734.603164][ T6519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2734.608535][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2734.633667][ T6518] netlink: 'syz.4.8637': attribute type 1 has an invalid length. [ 2734.723278][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2734.750520][ T6518] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8637'. [ 2735.007200][ T10] usb 6-1: usb_control_msg returned -32 [ 2735.081971][ T10] usbtmc 6-1:16.0: can't read capabilities [ 2735.341094][ T6540] tipc: Enabled bearer , priority 0 [ 2735.680555][ T6548] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2735.715642][ T6551] syzkaller0: entered promiscuous mode [ 2735.770906][ T6551] syzkaller0: entered allmulticast mode [ 2735.786335][ T6553] tipc: Resetting bearer [ 2736.283473][ T6540] tipc: Enabling of bearer rejected, already enabled [ 2736.343331][ T6527] tipc: Resetting bearer [ 2736.776267][ T6527] tipc: Disabling bearer [ 2736.984465][ T5872] usb 6-1: USB disconnect, device number 8 [ 2738.250575][ T5872] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2738.365961][ T6606] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 2738.471863][ T5872] usb 4-1: device descriptor read/64, error -71 [ 2738.730482][ T5872] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2738.890475][ T5872] usb 4-1: device descriptor read/64, error -71 [ 2739.011019][ T5872] usb usb4-port1: attempt power cycle [ 2739.494820][ T5872] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2739.534682][ T5872] usb 4-1: device descriptor read/8, error -71 [ 2740.235695][ T6657] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2740.334271][ T5872] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2740.413851][ T5872] usb 4-1: device descriptor read/8, error -71 [ 2740.541454][ T5872] usb usb4-port1: unable to enumerate USB device [ 2740.572350][ T6610] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2740.590513][ T6610] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2740.818037][ T6610] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2740.863758][ T6610] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 2741.428998][ T6610] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2741.490104][ T6610] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2741.581978][ T6689] vivid-000: ================= START STATUS ================= [ 2741.590527][ T6689] vivid-000: Test Pattern: 75% Colorbar [ 2741.598136][ T6689] vivid-000: Fill Percentage of Frame: 100 [ 2741.605758][ T6689] vivid-000: Horizontal Movement: No Movement [ 2741.612508][ T6689] vivid-000: Vertical Movement: No Movement [ 2741.619235][ T6689] vivid-000: OSD Text Mode: All [ 2741.626158][ T6689] vivid-000: Show Border: false [ 2741.641347][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8656'. [ 2741.652328][ T6689] vivid-000: Show Square: false [ 2741.657440][ T6689] vivid-000: Sensor Flipped Horizontally: false [ 2741.665342][ T6689] vivid-000: Sensor Flipped Vertically: false [ 2741.671998][ T6689] vivid-000: Insert SAV Code in Image: false [ 2741.678874][ T6689] vivid-000: Insert EAV Code in Image: false [ 2741.701303][ T6706] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.8659'. [ 2741.720484][ T6689] vivid-000: Insert Video Guard Band: false [ 2741.854219][ T6689] vivid-000: Reduced Framerate: false [ 2741.864107][ T6689] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 015-0 [ 2741.921138][ T6689] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 2741.931279][ T6689] vivid-000: Enable Capture Cropping: true [ 2741.941029][ T6689] vivid-000: Enable Capture Composing: true [ 2741.970991][ T6689] vivid-000: Enable Capture Scaler: true [ 2742.027205][ T6689] vivid-000: Timestamp Source: End of Frame [ 2742.033323][ T6689] vivid-000: Colorspace: Rec. 709 [ 2742.038485][ T6689] vivid-000: Transfer Function: None [ 2742.044857][ T6689] vivid-000: Y'CbCr Encoding: Default [ 2742.051010][ T6689] vivid-000: HSV Encoding: Hue 0-179 [ 2742.056502][ T6689] vivid-000: Quantization: Default [ 2742.063001][ T6689] vivid-000: Apply Alpha To Red Only: false [ 2742.069022][ T6689] vivid-000: Standard Aspect Ratio: 4x3 [ 2742.075231][ T6689] vivid-000: DV Timings Signal Mode: Current DV Timings [ 2742.082538][ T6689] vivid-000: DV Timings: 640x480p59 inactive [ 2742.088627][ T6689] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2742.096110][ T6689] vivid-000: Maximum EDID Blocks: 2 [ 2742.103901][ T6689] vivid-000: Limited RGB Range (16-235): true [ 2742.112941][ T6689] vivid-000: Rx RGB Quantization Range: Automatic [ 2742.130585][ T6689] vivid-000: Power Present: 0x00000001 [ 2742.142587][ T6689] tpg source WxH: 1280x720 (R'G'B) [ 2742.148371][ T6689] tpg field: 1 [ 2742.151892][ T6689] tpg crop: (0,0)/1280x720 [ 2742.156363][ T6689] tpg compose: (8,464)/1024x256 [ 2742.161313][ T6689] tpg colorspace: 3 [ 2742.165160][ T6689] tpg transfer function: 5/2 [ 2742.169795][ T6689] tpg quantization: 0/1 [ 2742.174077][ T6689] tpg RGB range: 0/1 [ 2742.178027][ T6689] vivid-000: ================== END STATUS ================== [ 2742.348380][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8660'. [ 2742.415971][ T6733] FAULT_INJECTION: forcing a failure. [ 2742.415971][ T6733] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.445490][ T6733] CPU: 0 UID: 0 PID: 6733 Comm: syz.3.8660 Not tainted syzkaller #0 PREEMPT(full) [ 2742.445508][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2742.445514][ T6733] Call Trace: [ 2742.445519][ T6733] [ 2742.445526][ T6733] dump_stack_lvl+0x189/0x250 [ 2742.445544][ T6733] ? __pfx____ratelimit+0x10/0x10 [ 2742.445560][ T6733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2742.445572][ T6733] ? __pfx__printk+0x10/0x10 [ 2742.445589][ T6733] ? __pfx___might_resched+0x10/0x10 [ 2742.445599][ T6733] ? fs_reclaim_acquire+0x7d/0x100 [ 2742.445618][ T6733] should_fail_ex+0x414/0x560 [ 2742.445635][ T6733] should_failslab+0xa8/0x100 [ 2742.445651][ T6733] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 2742.445665][ T6733] ? __d_alloc+0x36/0x7a0 [ 2742.445680][ T6733] __d_alloc+0x36/0x7a0 [ 2742.445702][ T6733] d_alloc_parallel+0xe5/0x15e0 [ 2742.445734][ T6733] ? __lock_acquire+0xab9/0xd20 [ 2742.445763][ T6733] ? __pfx_d_alloc_parallel+0x10/0x10 [ 2742.445780][ T6733] ? __raw_spin_lock_init+0x45/0x100 [ 2742.445794][ T6733] ? __init_waitqueue_head+0xa9/0x150 [ 2742.445809][ T6733] __lookup_slow+0x116/0x3d0 [ 2742.445823][ T6733] ? __pfx___lookup_slow+0x10/0x10 [ 2742.445839][ T6733] ? d_lookup+0x8a/0xa0 [ 2742.445850][ T6733] ? lookup_noperm+0x112/0x220 [ 2742.445863][ T6733] simple_start_creating+0xfd/0x1e0 [ 2742.445879][ T6733] ? __pfx_simple_start_creating+0x10/0x10 [ 2742.445900][ T6733] start_creating+0x10f/0x180 [ 2742.445917][ T6733] __debugfs_create_file+0x79/0x4f0 [ 2742.445934][ T6733] debugfs_create_file_full+0x3f/0x60 [ 2742.445951][ T6733] ref_tracker_dir_debugfs+0x14e/0x270 [ 2742.445965][ T6733] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2742.446000][ T6733] ? rcu_is_watching+0x15/0xb0 [ 2742.446010][ T6733] ? alloc_netdev_mqs+0xa3/0x11b0 [ 2742.446027][ T6733] ? __raw_spin_lock_init+0x45/0x100 [ 2742.446040][ T6733] alloc_netdev_mqs+0x26f/0x11b0 [ 2742.446051][ T6733] ? __pfx_vlan_setup+0x10/0x10 [ 2742.446065][ T6733] rtnl_create_link+0x31f/0xd10 [ 2742.446081][ T6733] rtnl_newlink_create+0x25c/0xb00 [ 2742.446096][ T6733] ? __mutex_lock+0x5bb/0x1350 [ 2742.446114][ T6733] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2742.446126][ T6733] ? __pfx___mutex_lock+0x10/0x10 [ 2742.446147][ T6733] ? ns_capable+0x8a/0xf0 [ 2742.446160][ T6733] rtnl_newlink+0x16d6/0x1c70 [ 2742.446175][ T6733] ? netlink_sendmsg+0x805/0xb30 [ 2742.446198][ T6733] ? __pfx_rtnl_newlink+0x10/0x10 [ 2742.446225][ T6733] ? kasan_quarantine_put+0xdd/0x220 [ 2742.446237][ T6733] ? lockdep_hardirqs_on+0x9c/0x150 [ 2742.446256][ T6733] ? nlmon_xmit+0xb0/0x100 [ 2742.446266][ T6733] ? kmem_cache_free+0x18f/0x400 [ 2742.446284][ T6733] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2742.446294][ T6733] ? lockdep_hardirqs_on+0x9c/0x150 [ 2742.446308][ T6733] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2742.446317][ T6733] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2742.446330][ T6733] ? __dev_queue_xmit+0x27b/0x3b50 [ 2742.446342][ T6733] ? __dev_queue_xmit+0x27b/0x3b50 [ 2742.446352][ T6733] ? __dev_queue_xmit+0x27b/0x3b50 [ 2742.446364][ T6733] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2742.446378][ T6733] ? __lock_acquire+0xab9/0xd20 [ 2742.446406][ T6733] ? __pfx_rtnl_newlink+0x10/0x10 [ 2742.446420][ T6733] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2742.446442][ T6733] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2742.446464][ T6733] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2742.446483][ T6733] ? ref_tracker_free+0x63a/0x7d0 [ 2742.446508][ T6733] ? __asan_memcpy+0x40/0x70 [ 2742.446518][ T6733] ? __pfx_ref_tracker_free+0x10/0x10 [ 2742.446538][ T6733] netlink_rcv_skb+0x208/0x470 [ 2742.446553][ T6733] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2742.446569][ T6733] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2742.446589][ T6733] ? netlink_deliver_tap+0x2e/0x1b0 [ 2742.446608][ T6733] netlink_unicast+0x82f/0x9e0 [ 2742.446627][ T6733] ? __pfx_netlink_unicast+0x10/0x10 [ 2742.446641][ T6733] ? netlink_sendmsg+0x642/0xb30 [ 2742.446654][ T6733] ? skb_put+0x11b/0x210 [ 2742.446666][ T6733] netlink_sendmsg+0x805/0xb30 [ 2742.446686][ T6733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2742.446702][ T6733] ? __import_iovec+0x5d4/0x7f0 [ 2742.446713][ T6733] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2742.446723][ T6733] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2742.446735][ T6733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2742.446751][ T6733] __sock_sendmsg+0x21c/0x270 [ 2742.446767][ T6733] ____sys_sendmsg+0x505/0x830 [ 2742.446781][ T6733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2742.446804][ T6733] ___sys_sendmsg+0x21f/0x2a0 [ 2742.446825][ T6733] ? __pfx____sys_sendmsg+0x10/0x10 [ 2742.446875][ T6733] ? __fget_files+0x2a/0x420 [ 2742.446891][ T6733] ? __fget_files+0x3a0/0x420 [ 2742.446911][ T6733] __sys_sendmsg+0x164/0x220 [ 2742.446923][ T6733] ? __pfx___sys_sendmsg+0x10/0x10 [ 2742.446943][ T6733] ? lockdep_hardirqs_on+0x9c/0x150 [ 2742.446958][ T6733] __do_fast_syscall_32+0xb6/0x2b0 [ 2742.446973][ T6733] ? lockdep_hardirqs_on+0x9c/0x150 [ 2742.446994][ T6733] do_fast_syscall_32+0x34/0x80 [ 2742.447009][ T6733] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2742.447022][ T6733] RIP: 0023:0xf7f48539 [ 2742.447032][ T6733] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2742.447040][ T6733] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2742.447052][ T6733] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000080000280 [ 2742.447060][ T6733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2742.447065][ T6733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2742.447071][ T6733] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2742.447077][ T6733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2742.447092][ T6733] [ 2743.003590][ T6733] vlan0: entered promiscuous mode [ 2743.008753][ T6733] team0: entered promiscuous mode [ 2743.013911][ T6733] team_slave_0: entered promiscuous mode [ 2743.019834][ T6733] team_slave_1: entered promiscuous mode [ 2743.725857][ T6610] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2743.741055][ T6610] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2744.682440][ T10] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2744.850584][ T10] usb 5-1: device descriptor read/64, error -71 [ 2745.106595][ T6756] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2745.271173][ T10] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2745.610522][ T10] usb 5-1: device descriptor read/64, error -71 [ 2745.715555][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8663'. [ 2745.744421][ T10] usb usb5-port1: attempt power cycle [ 2746.170574][ T10] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2746.263527][ T10] usb 5-1: device descriptor read/8, error -71 [ 2746.554003][ T10] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2746.591594][ T10] usb 5-1: device descriptor read/8, error -71 [ 2747.112032][ T10] usb usb5-port1: unable to enumerate USB device [ 2747.264233][ T6804] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2747.512105][ T5872] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 2747.613297][ T6810] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2747.688509][ T5872] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2747.742300][ T5872] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2747.836088][ T5872] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2747.881623][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2748.175376][ T5872] usb 6-1: usb_control_msg returned -32 [ 2748.210558][ T5872] usbtmc 6-1:16.0: can't read capabilities [ 2749.404297][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8674'. [ 2749.887167][ T6831] vlan2: entered promiscuous mode [ 2749.898740][ T6831] team0: entered promiscuous mode [ 2749.908985][ T6831] team_slave_0: entered promiscuous mode [ 2750.038614][ T6831] team_slave_1: entered promiscuous mode [ 2750.305034][ T10] usb 6-1: USB disconnect, device number 9 [ 2750.840876][ T6849] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.8675'. [ 2750.889419][ T6848] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.8675'. [ 2751.524220][ T6861] dummy0: entered promiscuous mode [ 2751.529554][ T6861] vlan2: entered promiscuous mode [ 2751.679319][ T6865] FAULT_INJECTION: forcing a failure. [ 2751.679319][ T6865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2751.732184][ T6865] CPU: 1 UID: 0 PID: 6865 Comm: syz.3.8678 Not tainted syzkaller #0 PREEMPT(full) [ 2751.732210][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2751.732222][ T6865] Call Trace: [ 2751.732231][ T6865] [ 2751.732240][ T6865] dump_stack_lvl+0x189/0x250 [ 2751.732266][ T6865] ? __pfx____ratelimit+0x10/0x10 [ 2751.732289][ T6865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2751.732309][ T6865] ? __pfx__printk+0x10/0x10 [ 2751.732331][ T6865] ? __might_fault+0xb0/0x130 [ 2751.732363][ T6865] should_fail_ex+0x414/0x560 [ 2751.732390][ T6865] _copy_from_user+0x2d/0xb0 [ 2751.732410][ T6865] get_compat_msghdr+0xad/0x4a0 [ 2751.732435][ T6865] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2751.732465][ T6865] ___sys_sendmsg+0x193/0x2a0 [ 2751.732486][ T6865] ? __pfx____sys_sendmsg+0x10/0x10 [ 2751.732539][ T6865] ? __fget_files+0x2a/0x420 [ 2751.732560][ T6865] ? __fget_files+0x3a0/0x420 [ 2751.732593][ T6865] __sys_sendmsg+0x164/0x220 [ 2751.732614][ T6865] ? __pfx___sys_sendmsg+0x10/0x10 [ 2751.732648][ T6865] ? lockdep_hardirqs_on+0x9c/0x150 [ 2751.732673][ T6865] __do_fast_syscall_32+0xb6/0x2b0 [ 2751.732697][ T6865] ? lockdep_hardirqs_on+0x9c/0x150 [ 2751.732722][ T6865] do_fast_syscall_32+0x34/0x80 [ 2751.732745][ T6865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2751.732765][ T6865] RIP: 0023:0xf7f48539 [ 2751.732782][ T6865] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2751.732796][ T6865] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2751.732816][ T6865] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000280 [ 2751.732827][ T6865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2751.732835][ T6865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2751.732843][ T6865] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2751.732850][ T6865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2751.732873][ T6865] [ 2751.939484][ C1] vkms_vblank_simulate: vblank timer overrun [ 2752.123973][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8671'. [ 2752.801349][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 2752.801365][ T30] audit: type=1326 audit(1756144865.150:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.4.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7fc00000 [ 2754.010839][ T4727] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 2754.212411][ T4727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2754.258307][ T4727] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2754.320081][ T4727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 2754.364948][ T4727] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2754.380730][ T4727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2754.490488][ T4727] usb 4-1: Product: syz [ 2754.515563][ T6948] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2754.628027][ T4727] usb 4-1: Manufacturer: syz [ 2754.635138][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8686'. [ 2754.641630][ T4727] usb 4-1: SerialNumber: syz [ 2754.693412][ T4727] usb 4-1: config 0 descriptor?? [ 2754.727693][ T6874] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2754.772255][ T6874] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2754.792650][ T6955] fuse: Bad value for 'fd' [ 2754.808546][ T4727] usb 4-1: ucan: probing device on interface #0 [ 2755.076378][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2755.152127][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2755.200477][T32586] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2755.263151][ T6975] geneve2: entered promiscuous mode [ 2755.347590][ T4727] usb 4-1: ucan: could not read protocol version, ret=-71 [ 2755.377076][ T4727] usb 4-1: ucan: probe failed; try to update the device firmware [ 2755.387633][T32586] usb 6-1: Using ep0 maxpacket: 16 [ 2755.400577][ T5872] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 2755.420878][T32586] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 2755.434502][ T4727] usb 4-1: USB disconnect, device number 54 [ 2755.449077][T32586] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 2755.485605][T32586] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 2755.506037][T32586] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 2755.540858][T32586] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 2755.573072][T32586] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2755.595594][T32586] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2755.624902][T32586] usb 6-1: Product: syz [ 2755.641373][T32586] usb 6-1: Manufacturer: syz [ 2755.668200][ T5872] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2755.686744][T32586] usb 6-1: SerialNumber: syz [ 2755.703420][T32586] usb 6-1: config 0 descriptor?? [ 2755.726409][ T6962] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2755.735896][ T6962] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2755.744105][ T5872] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2755.802028][ T5872] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2755.828693][T32586] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 2755.828821][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 2755.828953][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 2756.112092][ T5872] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2756.129583][ T5872] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2756.152121][ T5872] usb 1-1: Manufacturer: syz [ 2756.165205][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2756.202488][ T5872] usb 1-1: SerialNumber: syz [ 2756.207771][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2756.251604][ T6969] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 2756.269824][T30925] usb 6-1: USB disconnect, device number 10 [ 2756.278157][T30925] mcba_usb 6-1:0.0 can0: device disconnected [ 2756.510494][T32586] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2756.598268][ T5872] yealink 1-1:36.0: invalid payload size 64, expected 16 [ 2756.623898][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8694'. [ 2756.634438][ T5872] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input160 [ 2756.666977][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.674029][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.680964][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.687890][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.692065][T32586] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2756.694839][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.710504][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.717453][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.724370][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.731336][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2756.738141][ C1] yealink 1-1:36.0: unexpected response 0 [ 2756.744113][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.751062][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2756.757819][ C1] yealink 1-1:36.0: unexpected response 0 [ 2756.763720][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.770669][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2756.777441][ C1] yealink 1-1:36.0: unexpected response 0 [ 2756.783355][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.790311][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2756.797193][ C1] yealink 1-1:36.0: unexpected response 0 [ 2756.803345][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.810342][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2756.817121][ C1] yealink 1-1:36.0: unexpected response 0 [ 2756.823087][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.830174][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2756.836957][ C1] yealink 1-1:36.0: unexpected response 0 [ 2756.841544][T32586] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2756.843061][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.858787][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2756.865544][ C1] yealink 1-1:36.0: unexpected response 0 [ 2756.871696][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.878633][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2756.885394][ C1] yealink 1-1:36.0: unexpected response 0 [ 2756.891324][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.898301][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2756.905069][ C1] yealink 1-1:36.0: unexpected response 0 [ 2756.910968][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.917923][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2756.924701][ C1] yealink 1-1:36.0: unexpected response 0 [ 2756.930640][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.937603][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2756.944482][ C1] yealink 1-1:36.0: unexpected response 0 [ 2756.950435][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.957419][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2756.964200][ C1] yealink 1-1:36.0: unexpected response 0 [ 2756.970098][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.977073][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2756.983849][ C1] yealink 1-1:36.0: unexpected response 0 [ 2756.991815][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2756.998846][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.005618][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.011883][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.018971][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.025747][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.032305][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.039264][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.046071][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.051988][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.058962][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.065796][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.071730][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.078711][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.085469][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.091398][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.098346][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.105107][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.110993][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.117907][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.124659][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.130614][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.137540][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.144289][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.150630][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.157587][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.164504][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.170394][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.177315][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.184058][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.189931][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.197160][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.203926][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.209803][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.216727][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.223486][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.229442][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.236373][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.243115][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.248994][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.256001][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.263115][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.269090][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.276041][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.282797][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.288712][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.295654][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.302400][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.308330][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.315325][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.322068][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.327969][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.334997][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.341826][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.347840][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.354788][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.361566][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.367464][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.374427][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.381175][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.387084][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.394051][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.400793][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.406715][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.413652][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.420397][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.426314][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.433256][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.439995][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.445888][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.452825][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.459567][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.465598][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.472553][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.479387][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.485501][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.492646][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.499423][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.505364][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.511570][T32586] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 2757.512484][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.529995][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.540553][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.547566][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.554358][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.560432][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.567452][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.574423][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.584695][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.592005][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.598775][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.604678][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.611625][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.618371][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.624276][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.631235][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.638005][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.643886][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.650826][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.657588][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.663474][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.670405][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.677170][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.683265][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.690192][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.696940][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.702826][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.709744][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.716488][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.722477][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.729453][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.736251][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.742268][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.749262][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.756051][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.762093][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.769058][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.775867][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.782351][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.789377][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.790500][T32586] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 2757.796148][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.796387][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 2757.820080][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 2757.826843][ C1] yealink 1-1:36.0: unexpected response 0 [ 2757.832544][ C1] yealink 1-1:36.0: urb_irq_callback - usb_submit_urb failed -19 [ 2757.840563][ T5872] usb 1-1: USB disconnect, device number 80 [ 2757.936569][T32586] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2757.968754][T32586] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2758.011509][T32586] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 2758.031993][T32586] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 2758.052962][T32586] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2758.059779][ T7023] netlink: 'syz.4.8693': attribute type 1 has an invalid length. [ 2758.111190][T19999] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2758.129142][T32586] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2758.172056][T32586] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 2758.226037][T32586] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 2758.279196][T32586] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2758.310749][T19999] usb 4-1: Using ep0 maxpacket: 16 [ 2758.328712][T32586] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2758.330274][T19999] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2758.420841][T19999] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2758.421982][T32586] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 2758.448258][T19999] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2758.460341][T19999] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2758.509759][T19999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2758.547582][T19999] usb 4-1: config 0 descriptor?? [ 2758.558611][T32586] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 2758.591340][T32586] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2758.608425][T32586] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2758.719980][T32586] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 2758.740777][T32586] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 2758.760943][ T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2758.773790][T32586] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2758.786024][T32586] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2758.801435][T32586] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 2758.834046][T32586] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 2758.845766][T21565] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2759.215432][T19999] nzxt-smart2 0003:1E71:2009.014B: unknown main item tag 0x0 [ 2759.221714][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2759.243488][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2759.250440][T19999] nzxt-smart2 0003:1E71:2009.014B: unknown main item tag 0x0 [ 2759.315795][T19999] nzxt-smart2 0003:1E71:2009.014B: unknown main item tag 0x0 [ 2759.315795][T32586] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2759.316949][ T10] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 2759.344102][T32586] usb 3-1: unable to read config index 6 descriptor/start: -71 [ 2759.352647][T32586] usb 3-1: can't read configurations, error -71 [ 2759.369678][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2759.378864][T19999] nzxt-smart2 0003:1E71:2009.014B: unknown main item tag 0x0 [ 2759.387092][T21565] usb 5-1: Using ep0 maxpacket: 32 [ 2759.414283][T21565] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2759.428855][T21565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2759.468935][T21565] usb 5-1: config 0 descriptor?? [ 2759.481257][T19999] nzxt-smart2 0003:1E71:2009.014B: unknown main item tag 0x0 [ 2759.484538][ T10] usb 1-1: config 0 descriptor?? [ 2759.503744][T21565] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2759.544292][T19999] nzxt-smart2 0003:1E71:2009.014B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 2759.934879][T19999] usb 4-1: USB disconnect, device number 55 [ 2759.984967][ T10] aquacomputer_d5next 0003:0C70:F0BD.014C: unknown main item tag 0x0 [ 2760.022864][ T10] aquacomputer_d5next 0003:0C70:F0BD.014C: unknown main item tag 0x0 [ 2760.043371][ T10] aquacomputer_d5next 0003:0C70:F0BD.014C: unknown main item tag 0x0 [ 2760.072564][ T10] aquacomputer_d5next 0003:0C70:F0BD.014C: item fetching failed at offset 3/5 [ 2760.138015][ T10] aquacomputer_d5next 0003:0C70:F0BD.014C: probe with driver aquacomputer_d5next failed with error -22 [ 2760.262085][ T10] usb 1-1: USB disconnect, device number 81 [ 2760.355344][ T7102] fido_id[7102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2760.973873][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8705'. [ 2760.997624][ T7141] netlink: 112 bytes leftover after parsing attributes in process `syz.5.8703'. [ 2761.240763][T21565] gspca_sunplus: reg_w_riv err -110 [ 2761.246210][T21565] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 2761.267380][ T7146] vivid-000: ================= START STATUS ================= [ 2761.287615][ T7146] vivid-000: Test Pattern: 75% Colorbar [ 2761.293697][ T7146] vivid-000: Fill Percentage of Frame: 100 [ 2761.312097][ T7146] vivid-000: Horizontal Movement: No Movement [ 2761.326676][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8704'. [ 2761.337535][ T7146] vivid-000: Vertical Movement: No Movement [ 2761.344395][ T7146] vivid-000: OSD Text Mode: All [ 2761.387370][ T7146] vivid-000: Show Border: false [ 2761.477143][ T7146] vivid-000: Show Square: false [ 2761.485701][ T7146] vivid-000: Sensor Flipped Horizontally: false [ 2761.492637][ T7146] vivid-000: Sensor Flipped Vertically: false [ 2761.499170][ T7146] vivid-000: Insert SAV Code in Image: false [ 2761.507999][ T7146] vivid-000: Insert EAV Code in Image: false [ 2761.523968][ T7146] vivid-000: Insert Video Guard Band: false [ 2761.587249][ T7146] vivid-000: Reduced Framerate: false [ 2761.653493][ T7146] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 015-0 [ 2761.661696][ T7146] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 2761.669798][ T7146] vivid-000: Enable Capture Cropping: true [ 2761.859599][ T7146] vivid-000: Enable Capture Composing: true [ 2761.995352][ T7146] vivid-000: Enable Capture Scaler: true [ 2762.129081][ T7146] vivid-000: Timestamp Source: End of Frame [ 2762.137076][ T7146] vivid-000: Colorspace: Rec. 709 [ 2762.145655][ T7146] vivid-000: Transfer Function: None [ 2762.154663][ T7146] vivid-000: Y'CbCr Encoding: Default [ 2762.161942][ T7146] vivid-000: HSV Encoding: Hue 0-179 [ 2762.169664][ T7146] vivid-000: Quantization: Default [ 2762.180653][ T7146] vivid-000: Apply Alpha To Red Only: false [ 2762.188384][ T7146] vivid-000: Standard Aspect Ratio: 4x3 [ 2762.195541][ T7146] vivid-000: DV Timings Signal Mode: Current DV Timings [ 2762.204429][ T7146] vivid-000: DV Timings: 640x480p59 inactive [ 2762.259514][T21565] usb 5-1: USB disconnect, device number 121 [ 2762.292145][ T7168] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8709'. [ 2762.321589][ T7146] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2762.370583][ T7146] vivid-000: Maximum EDID Blocks: 2 [ 2762.380836][ T7146] vivid-000: Limited RGB Range (16-235): true [ 2762.454411][ T7146] vivid-000: Rx RGB Quantization Range: Automatic [ 2762.462725][ T7146] vivid-000: Power Present: 0x00000001 [ 2762.468736][ T7146] tpg source WxH: 1280x720 (R'G'B) [ 2762.474605][ T7146] tpg field: 1 [ 2762.478390][ T7146] tpg crop: (0,0)/1280x720 [ 2762.483306][ T7146] tpg compose: (8,464)/1024x256 [ 2762.488689][ T7146] tpg colorspace: 3 [ 2762.493042][ T7146] tpg transfer function: 5/2 [ 2762.498174][ T7146] tpg quantization: 0/1 [ 2762.502847][ T7146] tpg RGB range: 0/1 [ 2762.507239][ T7146] vivid-000: ================== END STATUS ================== [ 2762.591412][ T7181] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8710'. [ 2762.681139][T19999] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2762.933060][T30925] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2763.119511][T19999] usb 6-1: Using ep0 maxpacket: 16 [ 2763.125052][T30925] usb 5-1: Using ep0 maxpacket: 16 [ 2763.141689][T30925] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 2763.153163][T30925] usb 5-1: config 0 has no interface number 0 [ 2763.160184][T19999] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 2763.168991][T19999] usb 6-1: config 0 has no interface number 0 [ 2763.184735][T30925] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2763.201421][T19999] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2763.236448][T30925] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2763.250960][T19999] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2763.288852][T30925] usb 5-1: config 0 interface 41 has no altsetting 0 [ 2763.305368][T19999] usb 6-1: config 0 interface 41 has no altsetting 0 [ 2763.357601][T30925] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2763.376681][T19999] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2763.390453][T30925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2763.407365][T19999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2763.421424][T30925] usb 5-1: Product: syz [ 2763.436074][T30925] usb 5-1: Manufacturer: syz [ 2763.442747][T19999] usb 6-1: Product: syz [ 2763.453766][T30925] usb 5-1: SerialNumber: syz [ 2763.460710][T19999] usb 6-1: Manufacturer: syz [ 2763.477441][T19999] usb 6-1: SerialNumber: syz [ 2763.488008][T30925] usb 5-1: config 0 descriptor?? [ 2763.562795][T19999] usb 6-1: config 0 descriptor?? [ 2763.574071][ T7181] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2763.583385][ T7181] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2763.607949][ T7168] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2763.628406][ T7168] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2763.827565][T30925] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 2763.914365][T30925] usb 5-1: USB disconnect, device number 122 [ 2764.059047][T19999] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 2764.157122][T19999] usb 6-1: USB disconnect, device number 11 [ 2764.454696][ T7189] syz.3.8712 (7189): drop_caches: 3 [ 2765.048078][ T7236] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2766.837477][ T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2766.975745][T32586] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2767.039494][ T7282] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2767.063204][ T10] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 2767.073782][ T10] usb 3-1: config 0 has no interface number 0 [ 2767.267450][ T10] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 2767.277169][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2767.288509][ T10] usb 3-1: Product: syz [ 2767.293144][ T10] usb 3-1: Manufacturer: syz [ 2767.297879][ T10] usb 3-1: SerialNumber: syz [ 2767.312921][ T10] usb 3-1: config 0 descriptor?? [ 2767.330802][T32586] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 2767.344294][T32586] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2767.353746][T32586] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2767.366477][ T10] peak_usb 3-1:0.246: probe with driver peak_usb failed with error 246 [ 2767.388824][T32586] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2767.420225][T32586] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2767.461502][T32586] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2767.500197][T32586] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2767.980284][T32586] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2768.035755][T32586] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2768.090419][T32586] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2768.120093][T32586] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2768.144450][T32586] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2768.187740][T32586] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2768.211824][T32586] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2768.230579][T32586] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2768.290715][T32586] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2768.332272][T32586] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2768.346370][T32586] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2768.400524][T32586] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2768.468196][T32586] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2768.499474][T32586] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2768.502371][ T7310] delete_channel: no stack [ 2768.533150][T32586] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2768.554359][T32586] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2768.583971][T32586] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2768.632000][T32586] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2768.658942][T32586] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2768.668440][T21565] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2768.681240][T32586] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2768.716571][T32586] usb 4-1: Product: syz [ 2768.737710][T32586] usb 4-1: Manufacturer: syz [ 2768.766407][T32586] usb 4-1: SerialNumber: syz [ 2768.832236][T32586] usb 4-1: config 0 descriptor?? [ 2768.841093][T21565] usb 5-1: device descriptor read/64, error -71 [ 2768.859460][ T7319] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8736'. [ 2768.888691][T32586] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 2768.962924][ T958] usb 3-1: USB disconnect, device number 88 [ 2769.011614][T19999] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2769.090558][T21565] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2769.265368][T19999] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2769.270676][T21565] usb 5-1: device descriptor read/64, error -71 [ 2769.308191][T19999] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2769.350668][T19999] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2769.359930][T19999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2769.395726][ T7314] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 2769.420651][T19999] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2769.440548][T32586] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2769.451184][T21565] usb usb5-port1: attempt power cycle [ 2769.634092][ T958] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2769.634139][T32586] usb 6-1: Using ep0 maxpacket: 32 [ 2769.809365][T32586] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2769.830773][T21565] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2769.874598][ T5872] usb 4-1: USB disconnect, device number 56 [ 2769.890447][ T958] usb 3-1: Using ep0 maxpacket: 16 [ 2769.901278][T21565] usb 5-1: device descriptor read/8, error -71 [ 2769.909224][ T5872] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 2770.010001][T32586] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2770.042654][T32586] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2770.071940][ T958] usb 3-1: config 0 has no interfaces? [ 2770.104904][ T958] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2770.134925][ T958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2770.160556][T21565] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2770.182427][T32586] usb 6-1: Product: syz [ 2770.199204][T32586] usb 6-1: Manufacturer: syz [ 2770.210604][T32586] usb 6-1: SerialNumber: syz [ 2770.222107][T21565] usb 5-1: device descriptor read/8, error -71 [ 2770.232298][T32586] usb 6-1: config 0 descriptor?? [ 2770.246082][ T958] usb 3-1: Product: syz [ 2770.252617][T32586] usb 6-1: no audio or video endpoints found [ 2770.313554][ T958] usb 3-1: Manufacturer: syz [ 2770.340994][T21565] usb usb5-port1: unable to enumerate USB device [ 2770.392364][ T958] usb 3-1: SerialNumber: syz [ 2770.558240][ T958] usb 3-1: config 0 descriptor?? [ 2771.010678][ T958] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2771.208703][ T958] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2771.232718][ T958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2771.257213][ T958] usb 4-1: Product: syz [ 2771.277791][ T958] usb 4-1: Manufacturer: syz [ 2771.294629][ T958] usb 4-1: SerialNumber: syz [ 2771.327438][ T958] usb 4-1: config 0 descriptor?? [ 2771.623905][T30925] usb 6-1: USB disconnect, device number 12 [ 2771.800556][T32586] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2771.966444][ T3096] usb 1-1: USB disconnect, device number 82 [ 2772.026385][T32586] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2772.044540][T32586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2772.136041][T32586] usb 5-1: config 0 descriptor?? [ 2772.208828][T32586] cp210x 5-1:0.0: cp210x converter detected [ 2772.366771][T32586] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2772.388039][T32586] cp210x 5-1:0.0: querying part number failed [ 2772.432505][T32586] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2772.574325][T32586] usb 5-1: USB disconnect, device number 127 [ 2772.595182][T32586] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2772.651494][T32586] cp210x 5-1:0.0: device disconnected [ 2772.696045][ T3096] usb 3-1: USB disconnect, device number 89 [ 2772.879215][ T958] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 2773.008732][ T958] usb 4-1: USB disconnect, device number 57 [ 2773.073558][ T7431] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2773.224700][ T958] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 2773.423892][ T5532] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 2773.538896][ T958] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 2773.808947][ T7474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8747'. [ 2773.964969][ T7482] bridge1: entered allmulticast mode [ 2774.321393][ T7492] netlink: 'syz.5.8749': attribute type 10 has an invalid length. [ 2774.592828][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8749'. [ 2775.066141][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8750'. [ 2775.694508][ T3096] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2775.732482][ T7526] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2776.124137][ T7529] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2776.160575][ T3096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2776.190507][ T3096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2776.200288][ T3096] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2776.238030][ T3096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2776.255686][ T3096] usb 4-1: config 0 descriptor?? [ 2777.097746][ T7539] FAULT_INJECTION: forcing a failure. [ 2777.097746][ T7539] name failslab, interval 1, probability 0, space 0, times 0 [ 2777.132787][ T3096] sony 0003:054C:024B.014D: unexpected long global item [ 2777.177855][ T3096] sony 0003:054C:024B.014D: parse failed [ 2777.230662][ T3096] sony 0003:054C:024B.014D: probe with driver sony failed with error -22 [ 2777.262057][ T7539] CPU: 0 UID: 0 PID: 7539 Comm: syz.5.8755 Not tainted syzkaller #0 PREEMPT(full) [ 2777.262085][ T7539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2777.262096][ T7539] Call Trace: [ 2777.262105][ T7539] [ 2777.262114][ T7539] dump_stack_lvl+0x189/0x250 [ 2777.262144][ T7539] ? __pfx____ratelimit+0x10/0x10 [ 2777.262170][ T7539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2777.262191][ T7539] ? __pfx__printk+0x10/0x10 [ 2777.262219][ T7539] ? __pfx___might_resched+0x10/0x10 [ 2777.262244][ T7539] ? fs_reclaim_acquire+0x7d/0x100 [ 2777.262284][ T7539] should_fail_ex+0x414/0x560 [ 2777.262314][ T7539] should_failslab+0xa8/0x100 [ 2777.262340][ T7539] __kmalloc_noprof+0xcb/0x4f0 [ 2777.262360][ T7539] ? kfree+0x4d/0x440 [ 2777.262377][ T7539] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2777.262401][ T7539] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2777.262420][ T7539] ? tomoyo_domain+0xd9/0x130 [ 2777.262441][ T7539] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2777.262461][ T7539] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2777.262484][ T7539] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2777.262520][ T7539] ? __lock_acquire+0xab9/0xd20 [ 2777.262558][ T7539] ? __fget_files+0x2a/0x420 [ 2777.262584][ T7539] ? __fget_files+0x3a0/0x420 [ 2777.262602][ T7539] ? __fget_files+0x2a/0x420 [ 2777.262625][ T7539] security_file_ioctl_compat+0xcb/0x2d0 [ 2777.262650][ T7539] __ia32_compat_sys_ioctl+0x128/0x840 [ 2777.262674][ T7539] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2777.262695][ T7539] ? __fget_files+0x3a0/0x420 [ 2777.262725][ T7539] ? fput+0xa0/0xd0 [ 2777.262743][ T7539] ? ksys_write+0x22a/0x250 [ 2777.262774][ T7539] ? lockdep_hardirqs_on+0x9c/0x150 [ 2777.262801][ T7539] __do_fast_syscall_32+0xb6/0x2b0 [ 2777.262825][ T7539] ? lockdep_hardirqs_on+0x9c/0x150 [ 2777.262852][ T7539] do_fast_syscall_32+0x34/0x80 [ 2777.262880][ T7539] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2777.262902][ T7539] RIP: 0023:0xf7f54539 [ 2777.262918][ T7539] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2777.262933][ T7539] RSP: 002b:00000000f53f055c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2777.262954][ T7539] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005402 [ 2777.262966][ T7539] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2777.262978][ T7539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2777.262988][ T7539] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2777.263000][ T7539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2777.263032][ T7539] [ 2777.841522][ T7539] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2778.099558][ T3096] usb 4-1: USB disconnect, device number 58 [ 2778.689164][ T7570] netlink: 'syz.0.8761': attribute type 10 has an invalid length. [ 2778.841370][ T3096] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2778.910949][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8761'. [ 2778.933528][ T7579] FAULT_INJECTION: forcing a failure. [ 2778.933528][ T7579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2779.020681][ T7579] CPU: 0 UID: 0 PID: 7579 Comm: syz.3.8763 Not tainted syzkaller #0 PREEMPT(full) [ 2779.020708][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2779.020720][ T7579] Call Trace: [ 2779.020728][ T7579] [ 2779.020735][ T7579] dump_stack_lvl+0x189/0x250 [ 2779.020761][ T7579] ? __pfx____ratelimit+0x10/0x10 [ 2779.020784][ T7579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2779.020803][ T7579] ? __pfx__printk+0x10/0x10 [ 2779.020825][ T7579] ? __might_fault+0xb0/0x130 [ 2779.020857][ T7579] should_fail_ex+0x414/0x560 [ 2779.020884][ T7579] _copy_from_user+0x2d/0xb0 [ 2779.020904][ T7579] get_compat_msghdr+0xad/0x4a0 [ 2779.020929][ T7579] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2779.020959][ T7579] ___sys_sendmsg+0x193/0x2a0 [ 2779.020995][ T7579] ? __pfx____sys_sendmsg+0x10/0x10 [ 2779.021047][ T7579] ? __fget_files+0x2a/0x420 [ 2779.021068][ T7579] ? __fget_files+0x3a0/0x420 [ 2779.021096][ T7579] __sys_sendmsg+0x164/0x220 [ 2779.021115][ T7579] ? __pfx___sys_sendmsg+0x10/0x10 [ 2779.021147][ T7579] ? lockdep_hardirqs_on+0x9c/0x150 [ 2779.021174][ T7579] __do_fast_syscall_32+0xb6/0x2b0 [ 2779.021196][ T7579] ? lockdep_hardirqs_on+0x9c/0x150 [ 2779.021219][ T7579] do_fast_syscall_32+0x34/0x80 [ 2779.021241][ T7579] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2779.021260][ T7579] RIP: 0023:0xf7f48539 [ 2779.021275][ T7579] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2779.021288][ T7579] RSP: 002b:00000000f544555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2779.021307][ T7579] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000080000280 [ 2779.021320][ T7579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2779.021337][ T7579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2779.021352][ T7579] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2779.021363][ T7579] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2779.021390][ T7579] [ 2779.448961][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2779.455599][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2779.545281][ T3096] usb 3-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 2779.561604][ T3096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2779.623245][ T7582] team_slave_0: entered promiscuous mode [ 2779.628989][ T7582] team_slave_1: entered promiscuous mode [ 2779.631608][ T3096] usb 3-1: Product: syz [ 2779.649283][ T3096] usb 3-1: Manufacturer: syz [ 2779.675170][ T3096] usb 3-1: SerialNumber: syz [ 2779.714419][ T3096] usb 3-1: config 0 descriptor?? [ 2779.732325][ T3096] f81232 3-1:0.0: f81232 converter detected [ 2779.744570][ T3096] usb 3-1: f81232 converter now attached to ttyUSB0 [ 2779.801193][ T7582] vlan2: entered promiscuous mode [ 2779.808694][ T7582] team0: entered promiscuous mode [ 2779.950996][ T958] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2779.999939][ T3096] usb 3-1: USB disconnect, device number 90 [ 2780.082477][ T3096] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 2780.103346][ T3096] f81232 3-1:0.0: device disconnected [ 2780.160430][ T958] usb 4-1: Using ep0 maxpacket: 16 [ 2780.224920][ T958] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2780.280164][ T958] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 2780.303722][ T30] audit: type=1326 audit(1756144892.660:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.8766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 2780.327000][ T958] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2780.349073][ T958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2780.407031][ T30] audit: type=1326 audit(1756144892.680:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.8766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 2780.452730][ T958] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2780.487812][ T958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2780.539034][ T958] usb 4-1: Product: syz [ 2780.543691][ T30] audit: type=1326 audit(1756144892.720:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.8766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 2780.581746][ T958] usb 4-1: Manufacturer: syz [ 2780.586350][ T958] usb 4-1: SerialNumber: syz [ 2780.641911][ T958] usb 4-1: config 0 descriptor?? [ 2780.683437][ T30] audit: type=1326 audit(1756144892.720:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.8766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 2780.812100][ T30] audit: type=1326 audit(1756144892.720:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.8766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 2780.836023][ T30] audit: type=1326 audit(1756144892.770:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.8766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 2780.858068][ T30] audit: type=1326 audit(1756144892.770:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.8766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 2780.884302][ T30] audit: type=1326 audit(1756144892.770:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.8766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 2780.909823][ T958] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input161 [ 2780.919224][ T30] audit: type=1326 audit(1756144892.770:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.8766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 2780.949147][ T5222] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 2780.968421][ T30] audit: type=1326 audit(1756144892.770:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.8766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 2781.092236][ T6650] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 2781.176505][ T5222] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 2781.248644][ T7623] syz.3.8765 (7623): drop_caches: 2 [ 2781.392244][ T7623] syz.3.8765 (7623): drop_caches: 2 [ 2781.398018][ T5222] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 2781.467786][ T5222] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 2781.478979][ T7623] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 2781.578442][ T5222] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 2782.684021][ T3096] usb 4-1: USB disconnect, device number 59 [ 2783.677463][ T7679] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8775'. [ 2783.697703][ T7681] ..@ÿ: renamed from bond_slave_0 (while UP) [ 2783.819931][ T7687] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8777'. [ 2784.120919][T21565] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2784.328858][ T5872] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2784.502270][ T7706] netlink: 'syz.3.8779': attribute type 1 has an invalid length. [ 2784.511828][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 2784.520463][T21565] usb 3-1: Using ep0 maxpacket: 16 [ 2784.522452][ T5872] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 2784.534674][T21565] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 2784.543355][T21565] usb 3-1: config 0 has no interface number 0 [ 2784.549468][T21565] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2784.566609][T21565] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2784.580281][T21565] usb 3-1: config 0 interface 41 has no altsetting 0 [ 2784.600869][T21565] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2784.601973][ T958] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2784.617655][ T5872] usb 1-1: config 0 has no interface number 0 [ 2784.629195][T21565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2784.637504][ T5872] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2784.637534][ T5872] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2784.637557][ T5872] usb 1-1: config 0 interface 41 has no altsetting 0 [ 2784.641255][ T5872] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2784.685795][ T7706] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 2784.710039][T21565] usb 3-1: Product: syz [ 2784.735124][T21565] usb 3-1: Manufacturer: syz [ 2784.739748][T21565] usb 3-1: SerialNumber: syz [ 2784.780507][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2784.796436][T21565] usb 3-1: config 0 descriptor?? [ 2784.809251][ T7687] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2784.820277][ T7687] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2784.837735][ T5872] usb 1-1: Product: syz [ 2784.847905][ T5872] usb 1-1: Manufacturer: syz [ 2784.852646][ T958] usb 6-1: Using ep0 maxpacket: 16 [ 2784.862319][ T958] usb 6-1: config 0 has no interfaces? [ 2784.867823][ T958] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 2784.887154][ T5872] usb 1-1: SerialNumber: syz [ 2784.911528][ T5872] usb 1-1: config 0 descriptor?? [ 2784.918976][ T958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2784.932049][ T7718] FAULT_INJECTION: forcing a failure. [ 2784.932049][ T7718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2784.945765][ T7686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2784.955091][ T958] usb 6-1: config 0 descriptor?? [ 2784.960986][ T7686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2785.013238][ T7718] CPU: 0 UID: 0 PID: 7718 Comm: syz.3.8780 Not tainted syzkaller #0 PREEMPT(full) [ 2785.013260][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2785.013266][ T7718] Call Trace: [ 2785.013272][ T7718] [ 2785.013277][ T7718] dump_stack_lvl+0x189/0x250 [ 2785.013296][ T7718] ? __pfx____ratelimit+0x10/0x10 [ 2785.013318][ T7718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2785.013338][ T7718] ? __pfx__printk+0x10/0x10 [ 2785.013359][ T7718] ? __might_fault+0xb0/0x130 [ 2785.013393][ T7718] should_fail_ex+0x414/0x560 [ 2785.013411][ T7718] _copy_from_user+0x2d/0xb0 [ 2785.013424][ T7718] get_compat_msghdr+0xad/0x4a0 [ 2785.013438][ T7718] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2785.013455][ T7718] ___sys_sendmsg+0x193/0x2a0 [ 2785.013476][ T7718] ? __pfx____sys_sendmsg+0x10/0x10 [ 2785.013530][ T7718] ? __fget_files+0x2a/0x420 [ 2785.013551][ T7718] ? __fget_files+0x3a0/0x420 [ 2785.013571][ T7718] __sys_sendmsg+0x164/0x220 [ 2785.013582][ T7718] ? __pfx___sys_sendmsg+0x10/0x10 [ 2785.013601][ T7718] ? lockdep_hardirqs_on+0x9c/0x150 [ 2785.013625][ T7718] __do_fast_syscall_32+0xb6/0x2b0 [ 2785.013650][ T7718] ? lockdep_hardirqs_on+0x9c/0x150 [ 2785.013675][ T7718] do_fast_syscall_32+0x34/0x80 [ 2785.013695][ T7718] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2785.013708][ T7718] RIP: 0023:0xf7f48539 [ 2785.013717][ T7718] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2785.013732][ T7718] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2785.013744][ T7718] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 2785.013752][ T7718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2785.013762][ T7718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2785.013772][ T7718] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2785.013783][ T7718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2785.013810][ T7718] [ 2785.451181][ T7687] FAULT_INJECTION: forcing a failure. [ 2785.451181][ T7687] name failslab, interval 1, probability 0, space 0, times 0 [ 2785.481589][ T5872] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 2785.526610][ T7687] CPU: 0 UID: 0 PID: 7687 Comm: syz.2.8777 Not tainted syzkaller #0 PREEMPT(full) [ 2785.526636][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2785.526648][ T7687] Call Trace: [ 2785.526656][ T7687] [ 2785.526664][ T7687] dump_stack_lvl+0x189/0x250 [ 2785.526699][ T7687] ? __pfx____ratelimit+0x10/0x10 [ 2785.526723][ T7687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2785.526742][ T7687] ? __pfx__printk+0x10/0x10 [ 2785.526769][ T7687] ? __pfx___might_resched+0x10/0x10 [ 2785.526786][ T7687] ? fs_reclaim_acquire+0x7d/0x100 [ 2785.526815][ T7687] should_fail_ex+0x414/0x560 [ 2785.526841][ T7687] should_failslab+0xa8/0x100 [ 2785.526865][ T7687] __kmalloc_noprof+0xcb/0x4f0 [ 2785.526884][ T7687] ? kfree+0x4d/0x440 [ 2785.526901][ T7687] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2785.526924][ T7687] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2785.526944][ T7687] ? tomoyo_domain+0xd9/0x130 [ 2785.526966][ T7687] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2785.526988][ T7687] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2785.527012][ T7687] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2785.527051][ T7687] ? __lock_acquire+0xab9/0xd20 [ 2785.527095][ T7687] ? __fget_files+0x2a/0x420 [ 2785.527123][ T7687] ? __fget_files+0x3a0/0x420 [ 2785.527144][ T7687] ? __fget_files+0x2a/0x420 [ 2785.527169][ T7687] security_file_ioctl_compat+0xcb/0x2d0 [ 2785.527194][ T7687] __ia32_compat_sys_ioctl+0x128/0x840 [ 2785.527217][ T7687] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2785.527239][ T7687] ? __fget_files+0x3a0/0x420 [ 2785.527267][ T7687] ? fput+0xa0/0xd0 [ 2785.527285][ T7687] ? ksys_write+0x22a/0x250 [ 2785.527315][ T7687] ? lockdep_hardirqs_on+0x9c/0x150 [ 2785.527341][ T7687] __do_fast_syscall_32+0xb6/0x2b0 [ 2785.527364][ T7687] ? lockdep_hardirqs_on+0x9c/0x150 [ 2785.527390][ T7687] do_fast_syscall_32+0x34/0x80 [ 2785.527412][ T7687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2785.527432][ T7687] RIP: 0023:0xf7f35539 [ 2785.527447][ T7687] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2785.527461][ T7687] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2785.527480][ T7687] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000005393 [ 2785.527492][ T7687] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2785.527504][ T7687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2785.527514][ T7687] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2785.527525][ T7687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2785.527553][ T7687] [ 2785.527640][ T7687] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2785.617964][ T5872] usb 1-1: USB disconnect, device number 83 [ 2785.857501][T21565] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 2785.923225][T21565] usb 3-1: USB disconnect, device number 91 [ 2785.948440][ T7700] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8778'. [ 2786.070882][ T958] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2786.490623][ T958] usb 4-1: Using ep0 maxpacket: 32 [ 2786.498068][ T958] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 2786.523252][ T958] usb 4-1: config 0 has no interface number 1 [ 2786.559161][ T958] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 2786.641172][ T958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2786.723612][ T958] usb 4-1: Product: syz [ 2786.749148][ T958] usb 4-1: Manufacturer: syz [ 2786.776103][ T958] usb 4-1: SerialNumber: syz [ 2786.810249][ T958] usb 4-1: config 0 descriptor?? [ 2787.052625][T32586] usb 6-1: USB disconnect, device number 13 [ 2787.166358][ T7726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2787.200847][ T958] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2787.212447][ T7726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2787.315121][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8781'. [ 2787.363461][ T958] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2787.400488][ T30] kauditd_printk_skb: 322 callbacks suppressed [ 2787.400504][ T30] audit: type=1326 audit(1756144899.770:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.3.8781" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x0 [ 2787.437515][ T958] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2787.489464][ T30] audit: type=1326 audit(1756144899.840:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.3.8781" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f48539 code=0x0 [ 2787.523163][ T958] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2787.610668][T32586] usb 4-1: USB disconnect, device number 60 [ 2787.656478][ T958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2787.712619][ T7760] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2787.735009][ T958] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2788.312993][ T7815] FAULT_INJECTION: forcing a failure. [ 2788.312993][ T7815] name failslab, interval 1, probability 0, space 0, times 0 [ 2788.376698][ T7815] CPU: 0 UID: 0 PID: 7815 Comm: syz.5.8789 Not tainted syzkaller #0 PREEMPT(full) [ 2788.376725][ T7815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2788.376736][ T7815] Call Trace: [ 2788.376744][ T7815] [ 2788.376753][ T7815] dump_stack_lvl+0x189/0x250 [ 2788.376781][ T7815] ? __pfx____ratelimit+0x10/0x10 [ 2788.376805][ T7815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2788.376824][ T7815] ? __pfx__printk+0x10/0x10 [ 2788.376853][ T7815] ? __pfx___might_resched+0x10/0x10 [ 2788.376869][ T7815] ? fs_reclaim_acquire+0x7d/0x100 [ 2788.376899][ T7815] should_fail_ex+0x414/0x560 [ 2788.376927][ T7815] should_failslab+0xa8/0x100 [ 2788.376952][ T7815] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2788.376973][ T7815] ? fuse_get_req+0x7b9/0x10b0 [ 2788.377023][ T7815] fuse_get_req+0x7b9/0x10b0 [ 2788.377038][ T7815] ? is_bpf_text_address+0x26/0x2b0 [ 2788.377069][ T7815] ? is_bpf_text_address+0x292/0x2b0 [ 2788.377097][ T7815] ? __pfx_fuse_get_req+0x10/0x10 [ 2788.377114][ T7815] ? __kernel_text_address+0xd/0x40 [ 2788.377135][ T7815] ? unwind_get_return_address+0x4d/0x90 [ 2788.377155][ T7815] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2788.377174][ T7815] ? arch_stack_walk+0xfc/0x150 [ 2788.377203][ T7815] __fuse_simple_request+0x2aa/0x18d0 [ 2788.377229][ T7815] ? __pfx___fuse_simple_request+0x10/0x10 [ 2788.377261][ T7815] ? __lock_acquire+0xab9/0xd20 [ 2788.377297][ T7815] fuse_do_getattr+0x33b/0x620 [ 2788.377324][ T7815] ? __pfx_fuse_do_getattr+0x10/0x10 [ 2788.377344][ T7815] ? __page_table_check_zero+0xba/0x530 [ 2788.377420][ T7815] ? __page_table_check_zero+0x406/0x530 [ 2788.377455][ T7815] ? get_page_from_freelist+0x21e4/0x22c0 [ 2788.377504][ T7815] fuse_update_get_attr+0x518/0x1040 [ 2788.377539][ T7815] ? __pfx_fuse_update_get_attr+0x10/0x10 [ 2788.377570][ T7815] ? __lock_acquire+0xab9/0xd20 [ 2788.377603][ T7815] ? __might_fault+0xb0/0x130 [ 2788.377627][ T7815] ? _parse_integer_limit+0x1ae/0x1f0 [ 2788.377659][ T7815] ? __lock_acquire+0xab9/0xd20 [ 2788.377689][ T7815] ? fuse_file_llseek+0x11d/0x650 [ 2788.377712][ T7815] ? __lock_acquire+0xab9/0xd20 [ 2788.377739][ T7815] ? down_write+0x162/0x1f0 [ 2788.377757][ T7815] ? __pfx_down_write+0x10/0x10 [ 2788.377770][ T7815] ? __mutex_trylock_common+0x153/0x260 [ 2788.377791][ T7815] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2788.377816][ T7815] fuse_file_llseek+0x12d/0x650 [ 2788.377838][ T7815] ? __mutex_lock+0x335/0x1350 [ 2788.377864][ T7815] ? __pfx_fuse_file_llseek+0x10/0x10 [ 2788.377888][ T7815] ? fdget_pos+0x247/0x320 [ 2788.377909][ T7815] ? __pfx___mutex_lock+0x10/0x10 [ 2788.377942][ T7815] ? __fget_files+0x2a/0x420 [ 2788.377962][ T7815] ? __fget_files+0x3a0/0x420 [ 2788.377985][ T7815] ? __fget_files+0x2a/0x420 [ 2788.378017][ T7815] __ia32_compat_sys_lseek+0x156/0x1f0 [ 2788.378043][ T7815] __do_fast_syscall_32+0xb6/0x2b0 [ 2788.378067][ T7815] ? lockdep_hardirqs_on+0x9c/0x150 [ 2788.378093][ T7815] do_fast_syscall_32+0x34/0x80 [ 2788.378115][ T7815] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2788.378133][ T7815] RIP: 0023:0xf7f54539 [ 2788.378150][ T7815] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2788.378164][ T7815] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000013 [ 2788.378182][ T7815] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 2788.378193][ T7815] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 2788.378204][ T7815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2788.378214][ T7815] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2788.378224][ T7815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2788.378253][ T7815] [ 2788.741212][ C0] vkms_vblank_simulate: vblank timer overrun [ 2789.200877][ T5872] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 2789.224059][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8791'. [ 2789.363145][ T5872] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2789.373988][ T5872] usb 4-1: not running at top speed; connect to a high speed hub [ 2789.383752][ T5872] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2789.394143][ T5872] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 2789.407066][ T5872] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 2789.426946][ T5872] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2789.440750][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2789.448953][ T5872] usb 4-1: Product: syz [ 2789.453413][ T5872] usb 4-1: Manufacturer: syz [ 2789.458987][ T5872] usb 4-1: SerialNumber: syz [ 2789.775276][ T3096] usb 3-1: USB disconnect, device number 92 [ 2790.060881][ T5872] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2790.152875][ T5872] usb 4-1: USB disconnect, device number 61 [ 2790.275874][ T3813] udevd[3813]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2790.382110][ T958] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2790.586759][ T7896] FAULT_INJECTION: forcing a failure. [ 2790.586759][ T7896] name failslab, interval 1, probability 0, space 0, times 0 [ 2790.637010][ T7896] CPU: 1 UID: 0 PID: 7896 Comm: syz.5.8796 Not tainted syzkaller #0 PREEMPT(full) [ 2790.637034][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2790.637043][ T7896] Call Trace: [ 2790.637049][ T7896] [ 2790.637055][ T7896] dump_stack_lvl+0x189/0x250 [ 2790.637073][ T7896] ? __pfx____ratelimit+0x10/0x10 [ 2790.637089][ T7896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2790.637101][ T7896] ? __pfx__printk+0x10/0x10 [ 2790.637117][ T7896] ? __pfx___might_resched+0x10/0x10 [ 2790.637126][ T7896] ? fs_reclaim_acquire+0x7d/0x100 [ 2790.637144][ T7896] should_fail_ex+0x414/0x560 [ 2790.637161][ T7896] should_failslab+0xa8/0x100 [ 2790.637177][ T7896] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2790.637190][ T7896] ? getname_flags+0xb8/0x540 [ 2790.637199][ T7896] ? __pfx_vfs_write+0x10/0x10 [ 2790.637214][ T7896] getname_flags+0xb8/0x540 [ 2790.637225][ T7896] do_sys_openat2+0xbc/0x1c0 [ 2790.637244][ T7896] ? __pfx_do_sys_openat2+0x10/0x10 [ 2790.637257][ T7896] ? ksys_write+0x22a/0x250 [ 2790.637273][ T7896] __ia32_compat_sys_openat+0x131/0x160 [ 2790.637287][ T7896] __do_fast_syscall_32+0xb6/0x2b0 [ 2790.637303][ T7896] ? lockdep_hardirqs_on+0x9c/0x150 [ 2790.637318][ T7896] do_fast_syscall_32+0x34/0x80 [ 2790.637333][ T7896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2790.637345][ T7896] RIP: 0023:0xf7f54539 [ 2790.637355][ T7896] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2790.637364][ T7896] RSP: 002b:00000000f5455100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 2790.637375][ T7896] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5455150 [ 2790.637383][ T7896] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73e4ff4 [ 2790.637389][ T7896] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2790.637394][ T7896] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2790.637400][ T7896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2790.637414][ T7896] [ 2791.143008][ T958] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2791.205421][ T958] usb 5-1: config 0 has no interfaces? [ 2791.211323][ T958] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2791.220806][ T958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2791.234355][ T958] usb 5-1: config 0 descriptor?? [ 2791.463315][ T7862] FAULT_INJECTION: forcing a failure. [ 2791.463315][ T7862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2791.476578][ T7862] CPU: 1 UID: 0 PID: 7862 Comm: syz.4.8794 Not tainted syzkaller #0 PREEMPT(full) [ 2791.476594][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2791.476601][ T7862] Call Trace: [ 2791.476606][ T7862] [ 2791.476611][ T7862] dump_stack_lvl+0x189/0x250 [ 2791.476628][ T7862] ? __pfx____ratelimit+0x10/0x10 [ 2791.476643][ T7862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2791.476655][ T7862] ? __pfx__printk+0x10/0x10 [ 2791.476669][ T7862] ? __might_fault+0xb0/0x130 [ 2791.476689][ T7862] should_fail_ex+0x414/0x560 [ 2791.476704][ T7862] _copy_from_user+0x2d/0xb0 [ 2791.476717][ T7862] get_compat_msghdr+0xad/0x4a0 [ 2791.476730][ T7862] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2791.476746][ T7862] ___sys_sendmsg+0x193/0x2a0 [ 2791.476758][ T7862] ? __pfx____sys_sendmsg+0x10/0x10 [ 2791.476786][ T7862] ? __fget_files+0x2a/0x420 [ 2791.476801][ T7862] ? __fget_files+0x3a0/0x420 [ 2791.476821][ T7862] __sys_sendmmsg+0x28e/0x430 [ 2791.476834][ T7862] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2791.476848][ T7862] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2791.476873][ T7862] ? ksys_write+0x22a/0x250 [ 2791.476892][ T7862] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2791.476903][ T7862] __do_fast_syscall_32+0xb6/0x2b0 [ 2791.476918][ T7862] ? lockdep_hardirqs_on+0x9c/0x150 [ 2791.476934][ T7862] do_fast_syscall_32+0x34/0x80 [ 2791.476948][ T7862] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2791.476960][ T7862] RIP: 0023:0xf710e539 [ 2791.476970][ T7862] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2791.476978][ T7862] RSP: 002b:00000000f54fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2791.476990][ T7862] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 0000000080000440 [ 2791.476997][ T7862] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2791.477003][ T7862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2791.477009][ T7862] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2791.477014][ T7862] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2791.477028][ T7862] [ 2791.479539][ T958] usb 5-1: USB disconnect, device number 2 [ 2792.740593][T19999] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2793.081609][T19999] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2793.218271][T19999] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2793.244365][ T7960] FAULT_INJECTION: forcing a failure. [ 2793.244365][ T7960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2793.266661][T19999] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2793.291218][T19999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2793.300038][ T7960] CPU: 1 UID: 0 PID: 7960 Comm: syz.2.8805 Not tainted syzkaller #0 PREEMPT(full) [ 2793.300064][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2793.300075][ T7960] Call Trace: [ 2793.300084][ T7960] [ 2793.300092][ T7960] dump_stack_lvl+0x189/0x250 [ 2793.300117][ T7960] ? __pfx____ratelimit+0x10/0x10 [ 2793.300142][ T7960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2793.300161][ T7960] ? __pfx__printk+0x10/0x10 [ 2793.300183][ T7960] ? __might_fault+0xb0/0x130 [ 2793.300216][ T7960] should_fail_ex+0x414/0x560 [ 2793.300244][ T7960] _copy_from_user+0x2d/0xb0 [ 2793.300265][ T7960] get_compat_msghdr+0xad/0x4a0 [ 2793.300290][ T7960] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2793.300320][ T7960] ___sys_sendmsg+0x193/0x2a0 [ 2793.300345][ T7960] ? __pfx____sys_sendmsg+0x10/0x10 [ 2793.300391][ T7960] ? __fget_files+0x2a/0x420 [ 2793.300413][ T7960] ? __fget_files+0x3a0/0x420 [ 2793.300442][ T7960] __sys_sendmsg+0x164/0x220 [ 2793.300461][ T7960] ? __pfx___sys_sendmsg+0x10/0x10 [ 2793.300493][ T7960] ? lockdep_hardirqs_on+0x9c/0x150 [ 2793.300517][ T7960] __do_fast_syscall_32+0xb6/0x2b0 [ 2793.300540][ T7960] ? lockdep_hardirqs_on+0x9c/0x150 [ 2793.300565][ T7960] do_fast_syscall_32+0x34/0x80 [ 2793.300588][ T7960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2793.300608][ T7960] RIP: 0023:0xf7f35539 [ 2793.300622][ T7960] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2793.300637][ T7960] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2793.300655][ T7960] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 2793.300667][ T7960] RDX: 0000000004000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 2793.300678][ T7960] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2793.300687][ T7960] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2793.300697][ T7960] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2793.300723][ T7960] [ 2793.553665][ T7939] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2793.587846][T19999] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2793.990115][ T7978] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 2794.011424][T19999] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2794.156626][ T5872] usb 6-1: USB disconnect, device number 14 [ 2794.699821][T19999] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2794.716672][T19999] usb 1-1: config 0 has no interfaces? [ 2794.743683][T19999] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2794.779279][T19999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2794.814052][T19999] usb 1-1: config 0 descriptor?? [ 2795.033427][ T7974] FAULT_INJECTION: forcing a failure. [ 2795.033427][ T7974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2795.046713][ T7974] CPU: 1 UID: 0 PID: 7974 Comm: syz.0.8807 Not tainted syzkaller #0 PREEMPT(full) [ 2795.046729][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2795.046736][ T7974] Call Trace: [ 2795.046741][ T7974] [ 2795.046747][ T7974] dump_stack_lvl+0x189/0x250 [ 2795.046765][ T7974] ? __pfx____ratelimit+0x10/0x10 [ 2795.046781][ T7974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2795.046792][ T7974] ? __pfx__printk+0x10/0x10 [ 2795.046806][ T7974] ? __might_fault+0xb0/0x130 [ 2795.046826][ T7974] should_fail_ex+0x414/0x560 [ 2795.046843][ T7974] _copy_from_user+0x2d/0xb0 [ 2795.046856][ T7974] get_compat_msghdr+0xad/0x4a0 [ 2795.046870][ T7974] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2795.046885][ T7974] ___sys_sendmsg+0x193/0x2a0 [ 2795.046898][ T7974] ? __pfx____sys_sendmsg+0x10/0x10 [ 2795.046925][ T7974] ? __fget_files+0x2a/0x420 [ 2795.046939][ T7974] ? __fget_files+0x3a0/0x420 [ 2795.046959][ T7974] __sys_sendmmsg+0x28e/0x430 [ 2795.046972][ T7974] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2795.046987][ T7974] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2795.047011][ T7974] ? ksys_write+0x22a/0x250 [ 2795.047029][ T7974] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2795.047040][ T7974] __do_fast_syscall_32+0xb6/0x2b0 [ 2795.047055][ T7974] ? lockdep_hardirqs_on+0x9c/0x150 [ 2795.047071][ T7974] do_fast_syscall_32+0x34/0x80 [ 2795.047085][ T7974] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2795.047097][ T7974] RIP: 0023:0xf7fe8539 [ 2795.047107][ T7974] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2795.047116][ T7974] RSP: 002b:00000000f550655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2795.047127][ T7974] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000440 [ 2795.047135][ T7974] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2795.047140][ T7974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2795.047146][ T7974] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2795.047152][ T7974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2795.047166][ T7974] [ 2795.541714][ T5373] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2795.565476][ T3096] usb 1-1: USB disconnect, device number 84 [ 2795.582827][ T5373] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2795.593307][ T5373] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2795.609454][ T5373] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2795.619241][ T5373] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2795.740615][ T3316] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2795.765208][ T3316] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2795.776098][ T3316] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2795.784463][ T3316] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2795.792290][ T3316] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2795.911227][ T8084] FAULT_INJECTION: forcing a failure. [ 2795.911227][ T8084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2795.973910][ T8084] CPU: 1 UID: 0 PID: 8084 Comm: syz.4.8811 Not tainted syzkaller #0 PREEMPT(full) [ 2795.973936][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2795.973948][ T8084] Call Trace: [ 2795.973956][ T8084] [ 2795.973964][ T8084] dump_stack_lvl+0x189/0x250 [ 2795.973990][ T8084] ? __pfx____ratelimit+0x10/0x10 [ 2795.974015][ T8084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2795.974034][ T8084] ? __pfx__printk+0x10/0x10 [ 2795.974056][ T8084] ? __might_fault+0xb0/0x130 [ 2795.974087][ T8084] should_fail_ex+0x414/0x560 [ 2795.974113][ T8084] _copy_from_user+0x2d/0xb0 [ 2795.974133][ T8084] get_compat_msghdr+0xad/0x4a0 [ 2795.974155][ T8084] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2795.974183][ T8084] ___sys_sendmsg+0x193/0x2a0 [ 2795.974203][ T8084] ? __pfx____sys_sendmsg+0x10/0x10 [ 2795.974250][ T8084] ? __fget_files+0x2a/0x420 [ 2795.974271][ T8084] ? __fget_files+0x3a0/0x420 [ 2795.974300][ T8084] __sys_sendmsg+0x164/0x220 [ 2795.974319][ T8084] ? __pfx___sys_sendmsg+0x10/0x10 [ 2795.974347][ T8084] ? lockdep_hardirqs_on+0x9c/0x150 [ 2795.974372][ T8084] __do_fast_syscall_32+0xb6/0x2b0 [ 2795.974394][ T8084] ? lockdep_hardirqs_on+0x9c/0x150 [ 2795.974417][ T8084] do_fast_syscall_32+0x34/0x80 [ 2795.974440][ T8084] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2795.974460][ T8084] RIP: 0023:0xf710e539 [ 2795.974475][ T8084] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2795.974490][ T8084] RSP: 002b:00000000f54fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2795.974509][ T8084] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2795.974521][ T8084] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2795.974531][ T8084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2795.974541][ T8084] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2795.974551][ T8084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2795.974578][ T8084] [ 2796.386086][ T8092] FAULT_INJECTION: forcing a failure. [ 2796.386086][ T8092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2796.399550][ T8092] CPU: 1 UID: 0 PID: 8092 Comm: syz.2.8814 Not tainted syzkaller #0 PREEMPT(full) [ 2796.399574][ T8092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2796.399585][ T8092] Call Trace: [ 2796.399618][ T8092] [ 2796.399625][ T8092] dump_stack_lvl+0x189/0x250 [ 2796.399652][ T8092] ? __pfx____ratelimit+0x10/0x10 [ 2796.399675][ T8092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2796.399695][ T8092] ? __pfx__printk+0x10/0x10 [ 2796.399718][ T8092] ? __might_fault+0xb0/0x130 [ 2796.399751][ T8092] should_fail_ex+0x414/0x560 [ 2796.399778][ T8092] _copy_from_user+0x2d/0xb0 [ 2796.399798][ T8092] get_compat_msghdr+0xad/0x4a0 [ 2796.399822][ T8092] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2796.399852][ T8092] ___sys_sendmsg+0x193/0x2a0 [ 2796.399874][ T8092] ? __pfx____sys_sendmsg+0x10/0x10 [ 2796.399934][ T8092] ? __fget_files+0x2a/0x420 [ 2796.399957][ T8092] ? __fget_files+0x3a0/0x420 [ 2796.399989][ T8092] __sys_sendmmsg+0x28e/0x430 [ 2796.400013][ T8092] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2796.400042][ T8092] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2796.400080][ T8092] ? ksys_write+0x22a/0x250 [ 2796.400113][ T8092] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2796.400134][ T8092] __do_fast_syscall_32+0xb6/0x2b0 [ 2796.400158][ T8092] ? lockdep_hardirqs_on+0x9c/0x150 [ 2796.400184][ T8092] do_fast_syscall_32+0x34/0x80 [ 2796.400207][ T8092] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2796.400227][ T8092] RIP: 0023:0xf7f35539 [ 2796.400243][ T8092] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2796.400258][ T8092] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2796.400277][ T8092] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2796.400291][ T8092] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2796.400302][ T8092] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2796.400313][ T8092] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2796.400324][ T8092] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2796.400351][ T8092] [ 2796.839164][ T8098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2796.885289][ T8099] input: syz0 as /devices/virtual/input/input162 [ 2797.312707][ T8126] FAULT_INJECTION: forcing a failure. [ 2797.312707][ T8126] name failslab, interval 1, probability 0, space 0, times 0 [ 2797.325868][ T8126] CPU: 0 UID: 0 PID: 8126 Comm: syz.5.8816 Not tainted syzkaller #0 PREEMPT(full) [ 2797.325891][ T8126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2797.325902][ T8126] Call Trace: [ 2797.325911][ T8126] [ 2797.325920][ T8126] dump_stack_lvl+0x189/0x250 [ 2797.325947][ T8126] ? __pfx____ratelimit+0x10/0x10 [ 2797.325971][ T8126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2797.325991][ T8126] ? __pfx__printk+0x10/0x10 [ 2797.326019][ T8126] ? __pfx___might_resched+0x10/0x10 [ 2797.326035][ T8126] ? fs_reclaim_acquire+0x7d/0x100 [ 2797.326064][ T8126] should_fail_ex+0x414/0x560 [ 2797.326092][ T8126] should_failslab+0xa8/0x100 [ 2797.326116][ T8126] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2797.326138][ T8126] ? getname_flags+0xb8/0x540 [ 2797.326153][ T8126] ? __pfx_vfs_write+0x10/0x10 [ 2797.326177][ T8126] getname_flags+0xb8/0x540 [ 2797.326198][ T8126] do_sys_openat2+0xbc/0x1c0 [ 2797.326220][ T8126] ? __pfx_do_sys_openat2+0x10/0x10 [ 2797.326242][ T8126] ? ksys_write+0x22a/0x250 [ 2797.326270][ T8126] __ia32_compat_sys_openat+0x131/0x160 [ 2797.326295][ T8126] __do_fast_syscall_32+0xb6/0x2b0 [ 2797.326354][ T8126] do_fast_syscall_32+0x34/0x80 [ 2797.326378][ T8126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2797.326399][ T8126] RIP: 0023:0xf7f54539 [ 2797.326414][ T8126] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2797.326429][ T8126] RSP: 002b:00000000f543455c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 2797.326449][ T8126] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 2797.326462][ T8126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2797.326473][ T8126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2797.326483][ T8126] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2797.326494][ T8126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2797.326521][ T8126] [ 2797.832862][ T5373] Bluetooth: hci6: command tx timeout [ 2799.831680][ T8164] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2799.910975][ T5373] Bluetooth: hci6: command tx timeout [ 2800.118402][ T8172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8819'. [ 2800.158749][ T8172] openvswitch: netlink: Flow key attr not present in new flow. [ 2800.988892][ T7369] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2801.947744][ T7369] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2802.028663][ T5373] Bluetooth: hci6: command tx timeout [ 2802.096609][ T8188] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2803.658150][ T7369] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2804.070635][ T5373] Bluetooth: hci6: command tx timeout [ 2804.084870][ T8249] batadv0: entered promiscuous mode [ 2804.124253][ T8249] vlan3: entered promiscuous mode [ 2804.714057][ T7369] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2804.942604][T19999] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2805.110679][T19999] usb 6-1: device descriptor read/64, error -71 [ 2805.163588][ T8085] chnl_net:caif_netlink_parms(): no params data found [ 2805.480527][T19999] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2805.710909][ T7369] bridge_slave_1: left allmulticast mode [ 2805.740118][ T7369] bridge_slave_1: left promiscuous mode [ 2805.795314][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state [ 2806.000283][ T7369] bridge_slave_0: left allmulticast mode [ 2806.020669][ T7369] bridge_slave_0: left promiscuous mode [ 2806.026450][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state [ 2806.300458][T19999] usb 6-1: device descriptor read/64, error -71 [ 2806.882510][T19999] usb usb6-port1: attempt power cycle [ 2807.240963][T19999] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2807.281413][T19999] usb 6-1: device descriptor read/8, error -71 [ 2807.573315][T19999] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2807.802953][ T8347] block nbd0: Attempted send on invalid socket [ 2807.809148][ T8347] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2807.938249][T19999] usb 6-1: device descriptor read/8, error -71 [ 2808.130176][T19999] usb usb6-port1: unable to enumerate USB device [ 2808.369110][ T8358] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2808.369110][ T8358] program syz.5.8834 not setting count and/or reply_len properly [ 2809.400624][T21565] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 2809.612556][T21565] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2809.626922][T21565] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2809.666376][T21565] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2809.700546][T21565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2809.969661][T21565] usb 1-1: usb_control_msg returned -32 [ 2809.980513][T21565] usbtmc 1-1:16.0: can't read capabilities [ 2810.330751][ T7369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2810.352758][ T7369] bond0 (unregistering): Released all slaves [ 2810.365897][ T8385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2810.877253][ T7369] bond1 (unregistering): Released all slaves [ 2811.430450][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2812.212972][ T7369] bond2 (unregistering): Released all slaves [ 2812.228254][T19999] usb 1-1: USB disconnect, device number 85 [ 2812.398168][ T8326] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2813.111198][ T8433] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2813.540113][T19999] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2814.658428][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state [ 2814.686975][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 2814.729494][T19999] usb 3-1: Using ep0 maxpacket: 32 [ 2814.738642][ T8085] bridge_slave_0: entered allmulticast mode [ 2814.779256][ T8085] bridge_slave_0: entered promiscuous mode [ 2814.840626][T19999] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2814.870178][ T8450] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2815.592990][T19999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2815.617966][T19999] usb 3-1: config 0 descriptor?? [ 2815.654481][T19999] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2815.725058][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state [ 2815.866957][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 2815.896727][ T8085] bridge_slave_1: entered allmulticast mode [ 2816.015630][ T8085] bridge_slave_1: entered promiscuous mode [ 2816.247909][T19999] gspca_vc032x: reg_w err -71 [ 2816.258096][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2816.300510][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2816.305835][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2816.443399][ T4933] syz.1.8487: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2816.718345][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2816.720539][ T4933] CPU: 0 UID: 0 PID: 4933 Comm: syz.1.8487 Not tainted syzkaller #0 PREEMPT(full) [ 2816.720564][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2816.720575][ T4933] Call Trace: [ 2816.720584][ T4933] [ 2816.720593][ T4933] dump_stack_lvl+0x189/0x250 [ 2816.720626][ T4933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2816.720647][ T4933] ? __pfx__printk+0x10/0x10 [ 2816.720671][ T4933] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2816.720694][ T4933] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2816.720716][ T4933] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2816.720740][ T4933] warn_alloc+0x214/0x310 [ 2816.720771][ T4933] ? __pfx_warn_alloc+0x10/0x10 [ 2816.720805][ T4933] ? __get_vm_area_node+0x28f/0x300 [ 2816.720829][ T4933] ? relay_open_buf+0x210/0xe50 [ 2816.720852][ T4933] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 2816.720907][ T4933] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2816.720937][ T4933] ? rcu_is_watching+0x15/0xb0 [ 2816.720957][ T4933] ? relay_open_buf+0x210/0xe50 [ 2816.720975][ T4933] ? relay_open_buf+0x210/0xe50 [ 2816.720992][ T4933] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 2816.721016][ T4933] ? relay_open_buf+0x210/0xe50 [ 2816.721033][ T4933] ? trace_kmalloc+0x1f/0xd0 [ 2816.721053][ T4933] ? relay_open_buf+0x17f/0xe50 [ 2816.721076][ T4933] relay_open_buf+0x210/0xe50 [ 2816.721113][ T4933] relay_open+0x427/0x920 [ 2816.721138][ T4933] do_blk_trace_setup+0x561/0x980 [ 2816.721286][ T4933] blk_trace_setup+0x116/0x1f0 [ 2816.721316][ T4933] ? __pfx_blk_trace_setup+0x10/0x10 [ 2816.721364][ T4933] ? __lock_acquire+0xab9/0xd20 [ 2816.721391][ T4933] sg_ioctl+0xaf3/0x2230 [ 2816.721422][ T4933] ? __pfx_sg_ioctl+0x10/0x10 [ 2816.721441][ T4933] ? __fget_files+0x2a/0x420 [ 2816.721472][ T4933] ? __fget_files+0x3a0/0x420 [ 2816.721494][ T4933] ? __fget_files+0x2a/0x420 [ 2816.721521][ T4933] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2816.721547][ T4933] __ia32_compat_sys_ioctl+0x540/0x840 [ 2816.721574][ T4933] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2816.721603][ T4933] ? __se_sys_futex_time32+0x360/0x3e0 [ 2816.721644][ T4933] ? lockdep_hardirqs_on+0x9c/0x150 [ 2816.721672][ T4933] __do_fast_syscall_32+0xb6/0x2b0 [ 2816.721706][ T4933] do_fast_syscall_32+0x34/0x80 [ 2816.721729][ T4933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2816.721750][ T4933] RIP: 0023:0xf702e539 [ 2816.721768][ T4933] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2816.721784][ T4933] RSP: 002b:00000000f53dc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2816.721805][ T4933] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c0481273 [ 2816.721818][ T4933] RDX: 0000000080000b40 RSI: 0000000000000000 RDI: 0000000000000000 [ 2816.721829][ T4933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2816.721840][ T4933] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2816.721851][ T4933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2816.721880][ T4933] [ 2816.721888][ T4933] Mem-Info: [ 2816.736668][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2816.810803][ T3096] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2817.070651][ T4933] active_anon:3023 inactive_anon:44 isolated_anon:0 [ 2817.070651][ T4933] active_file:17186 inactive_file:399 isolated_file:0 [ 2817.070651][ T4933] unevictable:768 dirty:282 writeback:0 [ 2817.070651][ T4933] slab_reclaimable:8309 slab_unreclaimable:138393 [ 2817.070651][ T4933] mapped:40531 shmem:779 pagetables:3867 [ 2817.070651][ T4933] sec_pagetables:0 bounce:0 [ 2817.070651][ T4933] kernel_misc_reclaimable:0 [ 2817.070651][ T4933] free:92317 free_pcp:31672 free_cma:0 [ 2817.116337][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2817.121775][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2817.127143][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2817.133277][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2817.138583][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2817.151234][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2817.156579][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2817.161915][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2817.167461][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2817.172875][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2817.200488][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2817.206430][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2817.464260][ T4933] Node 0 active_anon:28kB inactive_anon:128kB active_file:40kB inactive_file:480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134812kB dirty:36kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14256kB pagetables:5148kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 2817.480378][T19999] gspca_vc032x: I2c Bus Busy Wait 00 [ 2817.546245][ T8490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2817.859486][ T8526] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2817.886762][T19999] gspca_vc032x: Unknown sensor... [ 2817.890787][ T3096] usb 1-1: Using ep0 maxpacket: 16 [ 2817.892368][T19999] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 2817.921356][ T3096] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2817.934840][ T4933] Node 1 active_anon:13120kB inactive_anon:48kB active_file:68704kB inactive_file:1116kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:31228kB dirty:1092kB writeback:0kB shmem:1580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:1272kB pagetables:10336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2817.974215][T19999] usb 3-1: USB disconnect, device number 93 [ 2818.001362][ T7369] hsr_slave_0: left promiscuous mode [ 2818.011404][ T3096] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2818.054841][ T3096] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2818.068160][ T3096] usb 1-1: Product: syz [ 2818.073467][ T3096] usb 1-1: Manufacturer: syz [ 2818.088357][ T3096] usb 1-1: SerialNumber: syz [ 2818.118217][ T4933] Node 0 DMA free:10160kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 2818.278474][ T3096] usb 1-1: config 0 descriptor?? [ 2818.305107][ T3096] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2818.326566][ T3096] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 2818.348875][ T4933] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 2818.375802][ T4933] Node 0 DMA32 free:42720kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:16kB inactive_anon:76kB active_file:40kB inactive_file:292kB unevictable:1536kB writepending:36kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:4408kB local_pcp:2224kB free_cma:0kB [ 2818.749195][ T4933] lowmem_reserve[]: 0 0 1 1 1 [ 2818.758892][ T4933] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:52kB active_file:0kB inactive_file:188kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:12kB free_cma:0kB [ 2818.792146][ T7369] hsr_slave_1: left promiscuous mode [ 2818.798582][ T7369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2818.807935][ T7369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2819.008582][ T3096] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 2819.185919][ T4933] lowmem_reserve[]: 0 0 0 0 0 [ 2819.193780][ T4933] Node 1 Normal free:321276kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15492kB inactive_anon:48kB active_file:68704kB inactive_file:1124kB unevictable:1540kB writepending:1092kB present:4194300kB managed:4111100kB mlocked:4kB bounce:0kB free_pcp:114020kB local_pcp:99480kB free_cma:0kB [ 2819.299026][ T7369] veth1_macvtap: left promiscuous mode [ 2819.317121][ T7369] veth0_macvtap: left promiscuous mode [ 2819.352781][ T4933] lowmem_reserve[]: 0 0 0 0 0 [ 2819.357535][ T4933] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10160kB [ 2819.462636][ T4933] Node 0 DMA32: 440*4kB (UME) 428*8kB (UME) 528*16kB (UME) 293*32kB (UME) 158*64kB (UME) 49*128kB (UM) 7*256kB (UM) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 42720kB [ 2819.514640][ T4933] Node 0 Normal: 2*4kB (U) 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 2819.565020][ T4933] Node 1 Normal: 414*4kB (UME) 221*8kB (UME) 126*16kB (UM) 85*32kB (UME) 30*64kB (UME) 16*128kB (UME) 6*256kB (ME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (U) 76*4096kB (M) = 329568kB [ 2819.634065][ T4933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2819.663283][ T4933] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2819.710759][ T4933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2819.725827][ T7369] pim6reg (unregistering): left allmulticast mode [ 2819.764428][ T4933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2819.788066][ T4933] 21173 total pagecache pages [ 2819.794107][ T4933] 1363 pages in swap cache [ 2819.798630][ T4933] Free swap = 101916kB [ 2819.817442][ T4933] Total swap = 124996kB [ 2819.820627][T21565] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2819.834950][ T4933] 2097051 pages RAM [ 2819.838780][ T4933] 0 pages HighMem/MovableOnly [ 2819.861193][ T4933] 425662 pages reserved [ 2819.865383][ T4933] 0 pages cma reserved [ 2820.146920][ T3096] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2820.171939][ T3096] em28xx 1-1:0.0: board has no eeprom [ 2820.265884][ T3096] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2820.294657][ T3096] em28xx 1-1:0.0: dvb set to bulk mode. [ 2820.320533][ T10] em28xx 1-1:0.0: Binding DVB extension [ 2820.548237][ T10] em28xx 1-1:0.0: Registering input extension [ 2820.638677][ T10] usb 1-1: USB disconnect, device number 86 [ 2820.668217][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 2820.720401][ T10] em28xx 1-1:0.0: Closing input extension [ 2820.809974][ T10] em28xx 1-1:0.0: Freeing device [ 2821.050724][ T7369] team_slave_1 (unregistering): left promiscuous mode [ 2821.058494][ T7369] team0 (unregistering): Port device team_slave_1 removed [ 2821.159678][ T7369] team_slave_0 (unregistering): left promiscuous mode [ 2821.187082][ T7369] team0 (unregistering): Port device team_slave_0 removed [ 2822.280027][ T8085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2822.415162][ T8085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2822.758913][ T8085] team0: Port device team_slave_0 added [ 2822.847043][ T8085] team0: Port device team_slave_1 added [ 2823.042306][ T10] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2823.133189][T21565] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 2823.173598][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2823.215702][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2823.269471][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 2823.301121][ T10] usb 3-1: config 0 has no interfaces? [ 2823.306805][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 2823.370628][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2823.381053][T21565] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2823.412394][T21565] usb 6-1: not running at top speed; connect to a high speed hub [ 2823.490252][ T8085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2823.502534][ T10] usb 3-1: config 0 descriptor?? [ 2823.507586][T21565] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2823.958635][T21565] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 2824.044021][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2824.060496][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2824.090748][T21565] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 2824.110786][ T8085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2824.124384][T21565] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2824.134276][T21565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2824.145720][T21565] usb 6-1: Product: syz [ 2824.149895][T21565] usb 6-1: Manufacturer: syz [ 2824.155985][T21565] usb 6-1: SerialNumber: syz [ 2824.238035][ T8709] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2824.903041][T21565] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2824.983840][ T8085] hsr_slave_0: entered promiscuous mode [ 2825.009624][ T8085] hsr_slave_1: entered promiscuous mode [ 2825.019420][T21565] usb 6-1: USB disconnect, device number 20 [ 2825.049609][ T8085] debugfs: 'hsr0' already exists in 'hsr' [ 2825.070170][ T8085] Cannot create hsr debugfs directory [ 2825.134911][ T8754] tipc: Enabled bearer , priority 0 [ 2825.155116][ T8766] syzkaller0: entered promiscuous mode [ 2825.163453][ T8766] syzkaller0: entered allmulticast mode [ 2826.251001][ T958] tipc: Node number set to 3098257828 [ 2826.599919][ T8854] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2828.051452][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2828.178935][T21565] usb 3-1: USB disconnect, device number 94 [ 2828.189840][ T8659] tipc: Resetting bearer [ 2828.259788][ T10] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2828.273390][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2828.290593][ T10] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2828.311635][ T8659] tipc: Disabling bearer [ 2828.322255][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2828.334952][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2828.388510][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2828.470593][ T10] usb 5-1: invalid MIDI out EP 0 [ 2828.758785][ T10] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2829.035151][ T8929] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2829.916338][ T8897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2830.360963][T32586] usb 5-1: USB disconnect, device number 3 [ 2830.393305][ T8816] delete_channel: no stack [ 2830.401909][ T31] INFO: task syz.1.8487:4936 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2830.487340][ T31] Not tainted syzkaller #0 [ 2830.520831][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2830.581982][ T31] task:syz.1.8487 state:D stack:29416 pid:4936 tgid:4925 ppid:18646 task_flags:0x400040 flags:0x20004004 [ 2830.712513][ T31] Call Trace: [ 2830.715879][ T31] [ 2830.718794][ T31] __schedule+0x1798/0x4cc0 [ 2830.770644][ T31] ? __pfx___schedule+0x10/0x10 [ 2830.775596][ T31] ? schedule+0x91/0x360 [ 2830.889095][ T31] schedule+0x165/0x360 [ 2830.916093][ T31] schedule_preempt_disabled+0x13/0x30 [ 2830.938829][ T31] __mutex_lock+0x7e6/0x1350 [ 2830.964638][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2830.969459][ T31] ? blk_trace_remove+0x20/0x40 [ 2830.980471][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2830.985627][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2831.027282][ T31] ? __lock_acquire+0xab9/0xd20 [ 2831.040616][ T31] blk_trace_remove+0x20/0x40 [ 2831.045339][ T31] sg_ioctl+0x47b/0x2230 [ 2831.049893][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 2831.080398][ T31] ? __fget_files+0x2a/0x420 [ 2831.089477][ T31] ? __fget_files+0x3a0/0x420 [ 2831.120606][ T31] ? __fget_files+0x2a/0x420 [ 2831.125252][ T31] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2831.160691][ T31] __ia32_compat_sys_ioctl+0x540/0x840 [ 2831.166205][ T31] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2831.190885][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2831.196136][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2831.220437][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2831.225689][ T31] ? __ia32_compat_sys_rt_sigprocmask+0x2a7/0x310 [ 2831.250424][ T31] ? __pfx___ia32_compat_sys_rt_sigprocmask+0x10/0x10 [ 2831.280422][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 2831.285413][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2831.300441][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 2831.305603][ T31] do_fast_syscall_32+0x34/0x80 [ 2831.320406][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2831.326796][ T31] RIP: 0023:0xf702e539 [ 2831.340423][ T31] RSP: 002b:00000000f4fb955c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2831.348871][ T31] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001276 [ 2831.380462][ T31] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2831.388928][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2831.420659][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2831.428675][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2831.490463][ T31] [ 2831.500520][ T31] [ 2831.500520][ T31] Showing all locks held in the system: [ 2831.508256][ T31] 3 locks held by kworker/0:1/10: [ 2831.540467][ T31] 1 lock held by khungtaskd/31: [ 2831.545349][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2831.580432][ T31] 2 locks held by dhcpcd/5532: [ 2831.585229][ T31] #0: ffff88807ec296d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xbd/0xe90 [ 2831.620452][ T31] #1: ffffffff8f5387c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 2831.629323][ T31] 2 locks held by getty/5626: [ 2831.660437][ T31] #0: ffff888033c3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2831.690400][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2831.710616][ T31] 1 lock held by syz.4.8373/4031: [ 2831.715671][ T31] #0: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 2831.790471][ T31] 1 lock held by syz.0.8436/4560: [ 2831.795536][ T31] #0: ffffffff8efa7488 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x328/0x640 [ 2831.830434][ T31] 2 locks held by syz.1.8487/4933: [ 2831.835582][ T31] 1 lock held by syz.1.8487/4936: [ 2831.860391][ T31] #0: ffff888025839cc8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove+0x20/0x40 [ 2831.870205][ T31] 7 locks held by syz-executor/8085: [ 2831.900439][ T31] #0: ffff88807f4ba428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 2831.909399][ T31] #1: ffff8881959fd888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 2831.970420][ T31] #2: ffff888144f9c5a8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 2832.000403][ T31] #3: ffffffff8edaf368 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x12c/0x6f0 [ 2832.040435][ T31] #4: ffff888032d320e8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 2832.049820][ T31] #5: ffff888032d33250 (&devlink->lock_key#17){+.+.}-{4:4}, at: nsim_drv_probe+0xc2/0xba0 [ 2832.110471][ T31] #6: ffffffff8f5387c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 2832.119950][ T31] 1 lock held by syz.2.8858/8929: [ 2832.150529][ T31] #0: ffffffff8f5387c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 2832.159576][ T31] 3 locks held by syz.0.8867/8897: [ 2832.190442][ T31] #0: ffff88804e3ce208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 2832.220424][ T31] #1: ffffffff8f59c270 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 2832.260385][ T31] #2: ffff88807d5c48d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640 [ 2832.290457][ T31] 2 locks held by syz.0.8867/8928: [ 2832.295601][ T31] #0: ffffffff8f5387c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 2832.340386][ T31] #1: ffff88807d5c48d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_netdev_event+0xad/0x160 [ 2832.390811][ T31] 3 locks held by syz.0.8867/8933: [ 2832.395958][ T31] #0: ffff88804af05c08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 2832.430462][ T31] #1: ffffffff8f59c270 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 2832.450573][ T31] #2: ffff88807d5c48d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640 [ 2832.490426][ T31] 1 lock held by syz.5.8860/8922: [ 2832.495488][ T31] #0: ffffffff8e13f840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2832.530423][ T31] 1 lock held by syz.5.8860/8924: [ 2832.535483][ T31] #0: ffffffff8f5387c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 2832.560808][ T31] 1 lock held by syz.5.8860/8930: [ 2832.565855][ T31] #0: ffffffff8f5387c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 2832.610415][ T31] 1 lock held by syz.5.8860/8939: [ 2832.615477][ T31] #0: ffffffff8f5387c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 2832.650466][ T31] [ 2832.682747][ T31] ============================================= [ 2832.682747][ T31] [ 2832.740882][ T31] NMI backtrace for cpu 1 [ 2832.740904][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2832.740924][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2832.740935][ T31] Call Trace: [ 2832.740943][ T31] [ 2832.740952][ T31] dump_stack_lvl+0x189/0x250 [ 2832.740988][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2832.741008][ T31] ? __pfx__printk+0x10/0x10 [ 2832.741043][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2832.741067][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2832.741090][ T31] ? __pfx__printk+0x10/0x10 [ 2832.741115][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2832.741215][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2832.741238][ T31] watchdog+0xf93/0xfe0 [ 2832.741266][ T31] ? watchdog+0x1de/0xfe0 [ 2832.741292][ T31] kthread+0x70e/0x8a0 [ 2832.741316][ T31] ? __pfx_watchdog+0x10/0x10 [ 2832.741336][ T31] ? __pfx_kthread+0x10/0x10 [ 2832.741357][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2832.741378][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2832.741399][ T31] ? __pfx_kthread+0x10/0x10 [ 2832.741419][ T31] ret_from_fork+0x3f9/0x770 [ 2832.741441][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2832.741465][ T31] ? __switch_to_asm+0x39/0x70 [ 2832.741484][ T31] ? __switch_to_asm+0x33/0x70 [ 2832.741502][ T31] ? __pfx_kthread+0x10/0x10 [ 2832.741523][ T31] ret_from_fork_asm+0x1a/0x30 [ 2832.741559][ T31] [ 2832.741566][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2832.891959][ C0] NMI backtrace for cpu 0 [ 2832.891977][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2832.891995][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2832.892005][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2832.892046][ C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 86 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2832.892060][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 2832.892075][ C0] RAX: dfad52bb6d169c00 RBX: ffffffff819683c8 RCX: dfad52bb6d169c00 [ 2832.892087][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b77c5 RDI: ffffffff8be33680 [ 2832.892098][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 2832.892110][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38930 [ 2832.892121][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 2832.892132][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 2832.892145][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2832.892156][ C0] CR2: 00005569e7c53730 CR3: 000000000df36000 CR4: 00000000003526f0 [ 2832.892171][ C0] Call Trace: [ 2832.892178][ C0] [ 2832.892185][ C0] default_idle+0x13/0x20 [ 2832.892199][ C0] default_idle_call+0x74/0xb0 [ 2832.892215][ C0] do_idle+0x1e8/0x510 [ 2832.892234][ C0] ? __pfx_do_idle+0x10/0x10 [ 2832.892256][ C0] cpu_startup_entry+0x44/0x60 [ 2832.892270][ C0] rest_init+0x2de/0x300 [ 2832.892286][ C0] start_kernel+0x3a9/0x410 [ 2832.892393][ C0] x86_64_start_reservations+0x24/0x30 [ 2832.892436][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2832.892455][ C0] common_startup_64+0x13e/0x147 [ 2832.892482][ C0] [ 2833.073782][ C0] vkms_vblank_simulate: vblank timer overrun [ 2833.521602][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2833.528522][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2833.537644][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2833.547719][ T31] Call Trace: [ 2833.551009][ T31] [ 2833.553948][ T31] dump_stack_lvl+0x99/0x250 [ 2833.558556][ T31] ? __asan_memcpy+0x40/0x70 [ 2833.563159][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2833.568375][ T31] ? __pfx__printk+0x10/0x10 [ 2833.572995][ T31] vpanic+0x281/0x750 [ 2833.576993][ T31] ? __pfx_vpanic+0x10/0x10 [ 2833.581500][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 2833.587056][ T31] ? preempt_schedule+0xae/0xc0 [ 2833.591928][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2833.597406][ T31] panic+0xb9/0xc0 [ 2833.601136][ T31] ? __pfx_panic+0x10/0x10 [ 2833.605556][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2833.610942][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2833.617111][ T31] watchdog+0xfd2/0xfe0 [ 2833.621294][ T31] ? watchdog+0x1de/0xfe0 [ 2833.625646][ T31] kthread+0x70e/0x8a0 [ 2833.629726][ T31] ? __pfx_watchdog+0x10/0x10 [ 2833.634412][ T31] ? __pfx_kthread+0x10/0x10 [ 2833.639027][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2833.644245][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2833.649459][ T31] ? __pfx_kthread+0x10/0x10 [ 2833.654063][ T31] ret_from_fork+0x3f9/0x770 [ 2833.658667][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2833.663779][ T31] ? __switch_to_asm+0x39/0x70 [ 2833.668555][ T31] ? __switch_to_asm+0x33/0x70 [ 2833.673324][ T31] ? __pfx_kthread+0x10/0x10 [ 2833.677914][ T31] ret_from_fork_asm+0x1a/0x30 [ 2833.682684][ T31] [ 2833.686212][ T31] Kernel Offset: disabled [ 2833.690532][ T31] Rebooting in 86400 seconds..