last executing test programs: 14m17.884073957s ago: executing program 4 (id=5911): r0 = syz_usb_connect(0x5, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63000000000009050300000000000009050cf2000002060209050f000000400000090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)}, 0x2) set_mempolicy(0x2, &(0x7f00000004c0)=0x9, 0x8000) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x101203) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) syz_usb_ep_read(r0, 0x7, 0xffffffffffffffa1, &(0x7f0000000100)=""/176) 14m16.137389967s ago: executing program 4 (id=5923): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000002040)=""/1, 0x1}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x2, &(0x7f00000030c0)=""/164, 0xa4}, 0x5}, {{&(0x7f0000003180)=@isdn, 0x80, &(0x7f0000003640)=[{&(0x7f0000003200)=""/61, 0x3d}, {&(0x7f0000003240)=""/135, 0x87}, {0x0}, {&(0x7f0000003400)=""/185, 0xb9}, {&(0x7f00000034c0)=""/72, 0x48}, {&(0x7f0000003540)=""/157, 0x9d}, {&(0x7f0000003600)=""/12, 0xc}], 0x7, &(0x7f0000003680)=""/182, 0xb6}, 0x8}, {{&(0x7f0000003740)=@nfc, 0x80, &(0x7f0000003800)=[{&(0x7f00000037c0)=""/15, 0xf}], 0x1, &(0x7f0000003840)=""/19, 0x13}, 0x1}, {{&(0x7f0000003880)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003900)=""/144, 0x90}], 0x1, &(0x7f0000003a00)=""/187, 0xbb}, 0x5}, {{&(0x7f0000003ac0)=@pppoe, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003b40)=""/163, 0xa3}, {&(0x7f0000003c00)=""/131, 0x83}, {&(0x7f0000003cc0)=""/87, 0x57}], 0x3, &(0x7f0000003d80)=""/236, 0xec}, 0x6}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0xf, 0x803, 0x9) syz_clone(0x60218000, &(0x7f0000000440)="e68714458dbe2f41550fee05673c93d6121ff040155da0a46f30cccfe21473cd6003014f3ad218f3e88d8a01ea45c528415a48aa67cc7b7b0edf3f2ffc5cfa3bd1073ede1073e97e46ea10d6bb38ffa5f10bfa941500c671d4d59f15eee9757a83d883e4b26677b5390486d462c7e9642d54af3322a2818649ef400814f8b98227f65c8687daacea2d6ecc0386088032a430ae4b84e6313f8af3034e5cb5e82f0fe9d832199caaf05d5dcc5c6ed59c4e4984ab2cb1c2ae76de5940599d92c1c8c76936cd81b2a6b3df648cf6dd1ff7ac17478dd2f8a0ef178575b2738868ab6dac136e26cbfabdc02028545dce821f1b47de88b2b2420002180af3cec398c4c2afb51442047e6910fcfd92802780703c4244e6ece1d90f9fa00c7361b7e294ab220c9c90ad37d6a9cce45a44387e30f1b4de11ec1ba2cacc489bf4254d52b3343343c3eda91ecf5c45341d2321ff9057f970a353d21c9209a9fb686af91daa4b5b21503ce747e1936802ffa1d135bef657dd0386092da01f72900a1be8b54476384a116168e02abbede82dbd3be6f6f4eaaac216cf920348bc9aba83b50d93998f1b4f943bd5d82f4bcd23deec65c83752a0184bcef4b81af2b7c09449ac2f05a320d9cc492acc876972965ec25e10d880208054ea4b2b64d484ab66d24a6da8670301671fe82a23f478abac0a48b7639448f6daceee4388d19a190dcb9f1d080ed7ad69a7434986c542667a8ca58e50ee72716385b8edd60e395abe9fabad104f1a8f20143e69284795a4329e384284cda3bc8f12dd92f49408882f0e5a714d4c3395651d9da44d752f84b47e45dbee9c5c1cbc1b9a1ed65702111759408376de0eb53111015ee7189801d0a68df4bd6a4b61669987eb51c434d1e2b644031ffa592d3e58222089acfd91f560addd85d180f5792ee45b389a2d172a1a3522c8fc2889d389b9104a32cc7175bcb4b384a58aaf64940147ad04eae311c862df4c10d585cbb146a9f11e788c225c32105c595253fb6ecbb01576a97aaa577be037cfdca7082f973658d2a188316e537c11d9154e864d5127b517f8c70862f378c64c6c7a107778dea1e69df687e268ee668dba035e2c55b928e0059c030d4e6e56b9243ff3152c6bcd3b9b2f37dd9657c457dcec87c10455ef9efa082d9a49a6ef973bc9888acf9db31de86656b22d76b92bd5e547a71da0bc5768fe484c43088ba4b19f203b84ab1ad4e9833997ca7dc6bbc5fb960a20a1fef48cf9b8b23b3816c907db0f9e6f30b8351e790960e735b7fd0b4549e022ee6824a122df4714e111c9946d9e98fe40a06db7503929aa8c1b38a07b5bef1cc2ba459b366b9266000ea5f6c697ab7695b0af048cb5478759372a145b8ff852651c82289374d8a0a948a66bb4bcdb99869efea467b5914e70cbe291f3769a33dff2f28c243d3f02ec0b2c28a98a5c268072823ad6b46e2b2aca6765b749052f92d059a6323f34126d918666864d88f8dd239a76645f621d27ee763a792a3e40904051e70202814a3fbfc758440c6feb274a6849a7137552ad3a378e169776ce586f4d36f531f6cf368590d93f8c8bf1a366ffbde38beddb93f6fd151424d8285bba532ea822e445dacce04ae60fd47448e89499be98f0f5bf06b98696eeec3064c5c0bd4e8864d23482eb937162e7846f6498a855a12423037e6de5508938b6d498a37fcfaa7aad216b29edd18d5d4e04db52476bddf886246a5a065c5f1e97c859e480e742f94ba653905752b4b118db121a131ef421b5267ac99be5e3a037d220cb16ce81eab3166df46b647c2fab7d12bf6401e0f2f2869296db8c3e8ba4d3855c664c9e164e783ba0ec30698faf21b149e5c98e72446ec7e4da62f418390e54cc1421bcdb4355f6cb1d42a9c1759963e2d9197155fd5b18d416df925e96a03e422f520a07ee18f9a6b29f8e10556f3e0c43bed899e535c33f94386be24419846c9bc1f0da5b314d1b3d08295144f59655836685b93c0a32a8cdd2a7142a63e6e39cc658e196e45742830e21bd89e481ad271400b5da8c6058d0da187f8741c7cd97f1a2e42caea72f0c068b0ee4d1a88227b86674f773dd312483dcaefe4cf9674cff1e19319dee713616facf4f50fd785e8a482a2f03a45fd6a133d6a08100b33cf2660903c7f00f373a7de1e1d83fd81c4ff82c77cf4f0d70c75499f265c3aef6cf9447f2012b885d7238b52154838ae91b94267086a24ffc7b29bbf5cca3dadc59a12f1c8d143299973e8d9fd70cf834cab30a4b0f3788be94dddca1678bef07175873420988407ea03bb8de09237918e4c03532b9805f5efca4bda326c8e53f83f2ea0777bc29c5e2c164c067b4fad1fa240e014aa7879567476ae184477d5885e7d0f8fbd28aedda41923c74cb308ab03caa8fd11ce5581b85ef16f831b8a3580bd0eb5f1c39975d650a23ee4085b023de7d7723acbd4431deb4699e25d72a499cac4fc3542717345850f6e7e09225e5f013d93756740824022b331511bbc6e6ef1a5eb2ee37d03988b846051aa909dd17890d8235d660c07234b67a7cbea7c7c9a64de2f93cdffe24a29dcdb80a19d4c71b6c5c5b32e5bc91d07d7a3903712b15dfccc317faa1b02d429707e6b6f8d17b57569756b0187c37755fbfa322c7b6b56721b803a3ed3bc4885ab427eff1e8094bf9d59f64cdbc2cdf8c64668ac6b7fb0ead6d596c8fc78c53df546fadaecef53758ce5c968cb9fbfa721534c81b8dd56763f815c5ca3e29bc0344672196c9dbe52c10d0e8697f39d8337bb7fb8295b72ac38977cf84e62bdb5f540574767cf2f005af9eb171023faa24a85adc47a1fd39aec53ee9c56e8223a9fff3a83db003d9b6816c22f9be4882b3ddca7d587ec786f83079d9832ae28c0fb5c338d0c79bc9a6bf0abf12e9b810fa0ed2b19aabc24338b4b242dcecce56055ffca3770e3cc11a2a141ec0bbac22ef9734050a38edf8b85ace9249df8ce1207af2978eb95644e27122ed9bd587cec497ba23a95eda7f1e47a68eea965e194e9f97c072bfe22c3670c6746a41d5b6ee1e621ebf852ffb4c255dfcd706714d330fef4fa55bdd6b9450bc56e8b9838120822f4c074ffe12c46d01f52dca479ad17f0d6893ce9721769b80d459a81bcb248f346e38ef3d1deeb4514e89a53717e157f4cfdf43cae9e344e8d6cb29a4cf01273945f86866fa68c1d8639433660011d8a22cd66baffe83564dd3510dd864a7f17d4b2d2580fbd5880c59fd3b5184f77f0e552e952956571516d2f40919f885416d6691db978729c3f8a11c78f3dcfe3a9482d578283967e472f673bba037f42a3627ed14ba8b846e522b52180ba309d0295aeafa4cc6300fced7b64b0bc0f73236b97d7dd4b4f7d1a8f326248dcdd3de40c401c0e8e801531e074e5dca1494ca5e3f873c65300f2fada5728ee47383a7297cf286a19c58a85843b969d6efc76d13607bbb3aaa2eab4a5e0616fb1b880639271d83a655a91b1e1a726540a75a75a2d51e4835b8da7a3e6e101d31767f4b7f2556413a36f28e181f0ab684c47c48e1bb87da5178573db1789e587d842370d5e814ee9fbfc8c458651d8f2dd91546a1beb9acd313f7991b17127bc9dca90f121415080aac0ca57176d9361385ffae7a90eae6bfeddfcfe49bb920e4784d8ab5e3e384cc9d37c8756aa45c2218845916db23d2b2d7ffa5ce3764f6de4a37e8d374d7f0ed710df1914cea9b9bbf80d44e82d9b18144f7a9e8520198d81b75ba6a068019477b730190bbdcdf3487dca590db6fc304209cb395fbf31db4d073916dd54dc3fe7f5a234d6d601eb1d40ab8ad33b4e07f59f6263aa122464af76aba04a11ad1ff1d1b5199e5338de4bfb24329e386f802c59d50a909b0d07f8e47f235159501746c28a1eea8b0e5d41f94e26a3eab863d865c508bf0257c03b8d36b9787166546e6c81393993122d99d0752bcdd371300642dcab9852f652aff5923af348d50ce49af786e75c02d46ed6bdd7d4b035226f9615ef3fa1b104ef5dcf47e5ad4b5cfa331c7a6b0c45defe5a087d0ad4c497e345f102c099d0b5c34f12785ed47d3d1362d4c7920443c5a863bb534009a58ebc2f91a4b8f873c20933e8f2a7c170208d8590d7cdd5b1b915d5ce221fbe218a1703f6ca3ad33d0bc33c27028655398fc6b050ea909b79355a9fbaab85aea084f83eead4fa0866cc2baa43313972d00a7af68c5fef0ed2e064129a073811fef85f7eec444bf09c15bb89ef3082aa46ee00318bb57f8667be51358a531bd52fb31849bd5476137945857c7bd5e5cc54c22952eb4934559fc6ccb25e6cc1342510f749212719ab02c3d62a4417ada60de68aa7f4be42ceb6f0c8474fcf8ce7dc309a9c3ede67e93f1a3c539ea03d38d3d8919887a7dfeb0a0d4cb3dbdb00634262d26e1e240450842e11355766fe49bec0947f8b7754a99cbe5717a92e63f9a1ae7c8d049648c9b0e1804954ec94909a404f8686b9024c69ac12042b9201462d7efe7a83ea935fd3f93dee712c6047faeb6d839b4d7470956e9418cd94b4b380670fb11d4460eff95de8d91ce1f904ad77a5d7480f9393c222c438ff2b6ec49ae459e595117ff89c5497bfc94a6f39a666af9f87f7f219f3e49385d2fce78eea98f7db7aeb74a151b4c58a5c67b7f80507b8ca7e943a780e868621074f1133c44a618bc6856b68ba4f4d6852a88e6e4426e2bc62bf8a52894ecefa6ce2400d262a405fa295495fc6afd5376a9118dcff22f324ab2969664671138a8a329af59cac3e56a146aa37bb459a836d544c76b7b0cf63a757c7167e2dfe8661253a7f79c513611b23da4afc3ca3e942ac7738f696396413ebf24bae1fc84e1129acc9c309e66565b65ab3514909d15c013f4ca327b21af4fee6e92ed243466b8bf124dfee315e865be7553658bda6812c7931f093c9e488bf48b4b5a1c1942c6cfb9e8369a7377c01080755cb56ad2b96fcdee52879facd52f721a1a22a55d1d90880c3cd6aa669b2cb3f25b710ca885942210ea15958c60b76ede6bc447035e206588d0d36939f789c91442a30d96230c1e14e3f40fdeba5943e591e61e77f8aba7d66a395def0beb0266844d8be3aff8c96fb366bdc15222bb10e17e56f9a86764890076cb089113cd2bbcbfd8f50600eefb7b60f29afe59c3a0e77f7e8f02e887187bef9f08ab102c9ea445842ae0ecb3866046d181f6de2814bc483e3b8cf845379912278427bd52155da7366ee5e62709254a27e0d45a164c0adfce5bc5c6481af7595c03f094f7b074007aaad59c5bff5645dbcd5daf574038d7066d4e5162ad07d20ce7ac178f9a645eb2680b10d95eed2e02df07e4d61b377df724f2ced1a4de3a30dd550a2cb2aef90ab724211037c214105f3ee3350adb9cfee5f4d1cd2881e62769d26fb704bcf8561622ee6b3d022d48ea3230c5eb408532004c0f55cd59824e60f5bae3082e0de2b31eec460e416431dc6f2d8b40afbcaabab127e672fe301d6b789c37d65c3a231c7527e7b4048c1eb44b3993b6941fd04ce61a3c33a2941c5bf0b5e56794be05a817e9cdc987a7b6cb015038c18b94ec524ee1bf162a6641fad68bdb93120fbee84d1ac73766cb5dd91bbe21ba26964fd997943ff1cd0bb43b4a77d5cba5b216a4a08c32c327ed93d18061fbda905d668cfd7d94f8508d568e0b025e1b0a776b3035c2e1cc119e134aa6d0d17096e840c502d7ac09fd53855e45b31aeaabd592b838e698041f00e97fccc39d1ad6e35fc277366f0e1ad7fc751db3", 0x1000, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)="95b50510ad87f1d6641f2fb25d5eba1220d63a1ce5dbd7a2d876a408fab3a622a1ab57ec6f19fea855f92e238f68d4fe2ad46aff43a6f982e5ebcacd08221fe6b2bb64304fd338d18793bc7e23e67ba39aa43e813ddbafb8876dc5153e154ed659a1b5f358052e2027b172d7b5349a764db335fe54bfbf3702e497c1b704b7bd0e16789b4b1750727de727931c919bbd116809664fb1a3c8ad32d4") r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r3, 0x5402) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setattr(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 14m14.78528306s ago: executing program 4 (id=5927): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 14m13.871227167s ago: executing program 4 (id=5932): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x6, 0x1, 0x2, "bf95ec58ce480f701ba0898353f303bf4a078871860c5c774f2348328a4472d0", 0x32314d56}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xfc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) io_setup(0x2, &(0x7f00000000c0)=0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_fuse_handle_req(r3, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0xc940}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x45844}, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000100)={0x50, 0xffffffffffffff8c, 0xffffffffffffffff, {0x7, 0x2b, 0x0, 0x300900, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r2, 0x0, 0x0) 14m10.135661748s ago: executing program 4 (id=5941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0) write$rfkill(r2, &(0x7f0000000080)={0xa, 0x8, 0x3, 0x1, 0xfd}, 0x8) connect$vsock_stream(r1, &(0x7f0000000000), 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) listen(r1, 0xfffffffc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="14f582f6cd00010000000000000000000000000a30000000160a03020000000000000000020000000900020073797a30000000000900010073797a310000000004000380140000001100010000000000000000000000000a"], 0x58}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES16], 0x38}}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[]) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@mpls_getroute={0x24, 0x1a, 0x600, 0x0, 0x4, {0x1c, 0x14}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000040)={0x4, 0x800, 0x0, 0x9}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) lgetxattr(0x0, &(0x7f00000002c0)=@known='user.incfs.size\x00', 0x0, 0x0) 14m7.987642951s ago: executing program 4 (id=5949): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x4, 0xa}, {0x0, 0x4, 0x0, 0x0, 0xfffffffbfffffffd, 0x9, 0x0, 0x8}, {0xcb29, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1502, 0x1, 0x2, 0x0, 0x5, 0xfffffffd, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfe800000}}, 0x1c) 14m6.616980133s ago: executing program 32 (id=5949): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x4, 0xa}, {0x0, 0x4, 0x0, 0x0, 0xfffffffbfffffffd, 0x9, 0x0, 0x8}, {0xcb29, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1502, 0x1, 0x2, 0x0, 0x5, 0xfffffffd, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfe800000}}, 0x1c) 25.20754826s ago: executing program 3 (id=8770): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) syz_emit_ethernet(0x31, &(0x7f00000010c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x1, 0x1, @local, @local, {[@hopopts={0x32}]}}}}}, 0x0) 24.798613582s ago: executing program 3 (id=8773): ioperm(0x5, 0x11, 0xccb) ioprio_get$pid(0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000e00000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x7, 0x4) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect$uac1(0x6, 0xeb, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x3, 0x1, 0x20, 0x170, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x5}, [@extension_unit={0xd, 0x24, 0x8, 0x6, 0x100, 0x2, "86a36b092d49"}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x6, 0x40, "753201d4049c"}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0x5, "b164fce873"}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x3, 0x6, "3ed1f418"}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x81}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x100, 0x1, 0x7f, 0x2, 0x3, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x5d6b, 0x83, "67155dd57f10"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0x2, 0x4, "e5"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x80, 0x1, 0x9, 0x7f, "c4d8e85b46"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x0, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x1bf, 0x80, 0x5, 0x2, {0x7, 0x25, 0x1, 0x3, 0x2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x80, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x5, 0x8e, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x80, 0x5d, {0x7, 0x25, 0x1, 0x2, 0x7, 0x6}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x5, 0x2, 0x7, 0x8}, 0x32, &(0x7f00000002c0)={0x5, 0xf, 0x32, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "150ae8bffa90d467a26d956dc838bd98"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x1, 0xdf, 0x1, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x4, 0x4, 0xedd2, 0x40}, @ptm_cap={0x3}]}, 0x3, [{0x6c, &(0x7f0000000300)=@string={0x6c, 0x3, "1d663da636ceec6651d7a87e4876e7e92d43bd3dfba4353e057b535d6813e2b236eaa8f4388e4f1b498aaea91b9509aeb915c27a4c3880e09f5a88d40aead749803c920b61bea069df4e54620973db2838b3c0fe1f93846838206bf4eeacd56ca6bb43c7096fa42a6d20"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2409}}]}) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000000c0)=r2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x5, 0x3, 0x5}) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 23.645055046s ago: executing program 3 (id=8779): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 23.420338368s ago: executing program 3 (id=8780): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ff0000003030302c757365725f69dfa0643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 23.311065453s ago: executing program 3 (id=8781): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000440)=0x8) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x8, 0xa, 0x5c, 0x0, 0x4, 0xe, 0x7, 0x25, 0x9, 0x0, 0xff, 0x4, 0x0, 0x400, 0x2, 0x81, 0x4, 0xe, 0x61, '\x00', 0x6, 0xffff}) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xf, 0x66a, 0x9, 0x0, 0x1, 0x80a4000, 0xd000, '\x00', 0xd5ad}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x4000000000044) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) write$UHID_SET_REPORT_REPLY(r6, &(0x7f0000000100)={0xe, {0x0, 0x4, 0x81, 0x70, "530ff619875d45534ba4cee5c46930c594e3e01e9de3292d215e43d500dd932b1446c61c87abfbff296ef9064bbffd90723a3db99b9c74f62c9a002c1020aa294ce9e49b5d4ad1e676ae91854a504300acd29d9f97147aaefd02b59568b843bf8ecbde73dd526f9fc06397a011f7848d"}}, 0x7c) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 23.025566062s ago: executing program 3 (id=8783): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, {0x2000, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2}, {0x8080000, 0x3000, 0x4, 0x0, 0x0, 0x1, 0x10, 0xa, 0x26}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0xf0, 0x8, 0xdd00, 0x0, [0xe, 0x0, 0x1]}) fsopen(&(0x7f0000000080)='befs\x00', 0x0) 22.687398858s ago: executing program 33 (id=8783): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, {0x2000, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2}, {0x8080000, 0x3000, 0x4, 0x0, 0x0, 0x1, 0x10, 0xa, 0x26}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0xf0, 0x8, 0xdd00, 0x0, [0xe, 0x0, 0x1]}) fsopen(&(0x7f0000000080)='befs\x00', 0x0) 17.288579545s ago: executing program 0 (id=8796): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="aa00fff5c20000005a"]) 16.978859369s ago: executing program 0 (id=8797): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8042000000000000140003007665008c39", @ANYRES16=r0, @ANYRES8], 0x44}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0xfffffffc, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r4, 0x0, 0x0) socket(0x1e, 0x5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe15) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r4, &(0x7f0000000100), 0x20000000000000ab) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x200, 0x0, 0x3}, 0x18, 0x1) 14.315769021s ago: executing program 0 (id=8806): ioperm(0x5, 0x11, 0xccb) ioprio_get$pid(0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000e00000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x7, 0x4) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect$uac1(0x6, 0xeb, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x3, 0x1, 0x20, 0x170, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x5}, [@extension_unit={0xd, 0x24, 0x8, 0x6, 0x100, 0x2, "86a36b092d49"}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x6, 0x40, "753201d4049c"}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0x5, "b164fce873"}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x3, 0x6, "3ed1f418"}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x81}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x100, 0x1, 0x7f, 0x2, 0x3, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x5d6b, 0x83, "67155dd57f10"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0x2, 0x4, "e5"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x80, 0x1, 0x9, 0x7f, "c4d8e85b46"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x0, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x1bf, 0x80, 0x5, 0x2, {0x7, 0x25, 0x1, 0x3, 0x2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x80, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x5, 0x8e, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x80, 0x5d, {0x7, 0x25, 0x1, 0x2, 0x7, 0x6}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x5, 0x2, 0x7, 0x8}, 0x32, &(0x7f00000002c0)={0x5, 0xf, 0x32, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "150ae8bffa90d467a26d956dc838bd98"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x1, 0xdf, 0x1, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x4, 0x4, 0xedd2, 0x40}, @ptm_cap={0x3}]}, 0x3, [{0x6c, &(0x7f0000000300)=@string={0x6c, 0x3, "1d663da636ceec6651d7a87e4876e7e92d43bd3dfba4353e057b535d6813e2b236eaa8f4388e4f1b498aaea91b9509aeb915c27a4c3880e09f5a88d40aead749803c920b61bea069df4e54620973db2838b3c0fe1f93846838206bf4eeacd56ca6bb43c7096fa42a6d20"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2409}}]}) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000000c0)=r2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x5, 0x3, 0x5}) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 9.89477441s ago: executing program 0 (id=8816): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, 0x0, 0x2040090) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = io_uring_setup(0x3450, &(0x7f0000000080)) r3 = dup(0xffffffffffffffff) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x55}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x659b, 0x55) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1800000015007f089e", 0x9}, {&(0x7f0000000300)="68ca8abda8fbff0200258f2e440bb8", 0xf}], 0x2}, 0x0) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x7d, 0x4) recvfrom$inet(r5, 0x0, 0x0, 0x2043, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 6.909223853s ago: executing program 5 (id=8825): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000040)=0xffffffff, 0x4) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0x6}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x68) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x1e) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000300), 0xc, &(0x7f00000002c0)={&(0x7f0000001580)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x6011}, 0x80) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000440)="a9", 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x4000800}], 0x1, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, &(0x7f00000000c0)={0x0, 0x0, 0xfffd}, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100007b16b3406d04b408320e010203010902120001000000000904"], 0x0) 5.991800471s ago: executing program 6 (id=8827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x2008040) r2 = socket$inet(0x2, 0x3, 0x4) r3 = fsopen(&(0x7f0000000240)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x500}], 0x68000, 0x0) ptrace(0x8, 0x0) unshare(0x22020600) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}, 0x20) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000004, 0x97, 0x4000) 4.859242977s ago: executing program 6 (id=8829): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000040)='H', 0x34000, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) (fail_nth: 30) 4.815014859s ago: executing program 0 (id=8830): syz_emit_ethernet(0x1ce, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x198, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0xf5ffffff, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x0, 0x0, 0x10}, @hopopts={0x0, 0x2b, '\x00', [@ra={0x5, 0x2, 0xffff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4793ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62091716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x19, "8b168e4b48529453d91cea424030c8b200632af95e7c303222"}, @padn={0x1, 0x1, [0x0]}]}]}}}}}}}, 0x0) 4.705107695s ago: executing program 6 (id=8831): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getattr(r2, &(0x7f0000000140)={0x38}, 0x38, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x68, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x68}, 0x1, 0xa00}, 0x0) 4.703210494s ago: executing program 2 (id=8832): mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x101, 0x0, 0x1}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) r5 = syz_io_uring_setup(0xfde, &(0x7f0000000640)={0x0, 0x9985, 0x20, 0x2, 0x201, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x847ba, 0x5000000, 0xe, 0x0, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) 4.676434669s ago: executing program 0 (id=8833): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) getpgrp(0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x1101) pselect6(0x40, &(0x7f0000000040)={0x8, 0x2, 0x0, 0x8, 0x1, 0x9, 0x6}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000680)={0x1, 0x6}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x0, 0x0}, 0x8) 4.438572155s ago: executing program 2 (id=8835): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x3517a1) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 4.27410348s ago: executing program 2 (id=8836): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="24ffef001a005f0214f9f407000904001f00000000000001000a00000800040001000000", 0x24) 4.260474136s ago: executing program 5 (id=8837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = eventfd2(0x2a, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)={0x7, 0xeeee0000, 0x0, r1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x8000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x2, 0x6576, 0xfffffff8}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r7, 0x0, 0xffffffff004) 4.118819432s ago: executing program 2 (id=8838): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = eventfd2(0x2a, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)={0x7, 0xeeee0000, 0x0, r1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x8000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x2, 0x6576, 0xfffffff8}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r6, 0x0, 0xffffffff004) 4.021803489s ago: executing program 1 (id=8839): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80) r1 = socket$kcm(0x1e, 0x4, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 3.746198992s ago: executing program 1 (id=8840): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000004200)=ANY=[@ANYRESDEC=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r3, 0x18000000000002a0, 0x3e, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da19244", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x4c) rt_sigaction(0x7, &(0x7f0000001080)={0x0, 0x48000003, 0x0, {[0x7, 0xbf1]}}, 0x0, 0x8, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1010d5ff17e4f9e8bf7963446d05148dda4876c7db45ea6dde56f33b0a0eaffefe", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) preadv(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}, {0x0}], 0x2, 0x33, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a00000004000000000000005e57000001001f0000000000000000000100000002000000000000000000"], 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000040)="aa1d484ea0fb0000f7fc08fcd111fbdf23eaf9e90ec300000000000000067a0689fff2a41cfb", 0x26}], 0x1) write$tcp_mem(r5, &(0x7f0000000400)={0x9, 0x2d, 0x0, 0x3a, 0x3, 0x2c}, 0x48) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000001c0)={0x4}) 2.987676726s ago: executing program 6 (id=8841): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000f3437b00001e3b"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002180)=""/213, 0xd5}, {&(0x7f0000004dc0)=""/4083, 0xff3}, {&(0x7f0000000c80)=""/160, 0xa0}], 0x3, 0x0, 0xffc3}}], 0x1, 0x62, 0x0) 2.72256602s ago: executing program 6 (id=8842): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000001580)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x4, 0x4) r2 = syz_open_dev$vcsa(&(0x7f0000000200), 0x5da23d53, 0x200300) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000001980)={0x0}) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002000010000000000000000000200001000000000000000000500190033000000"], 0x24}}, 0x48850) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, 0x0, 0x20008040) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f00000015c0)={0x8, @vbi={0x97, 0x3, 0x101, 0x32314142, [0x6, 0x3], [0x3, 0x80], 0x1}}) r11 = epoll_create(0xffffffff) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r2, &(0x7f0000000000)={r11, r0}) syz_emit_ethernet(0x7b, &(0x7f0000000800)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2d080048e9006d006500000206907864010102ac1414bb440c852000000006ffffffff4e204e23", @ANYRES32=0x41424344, @ANYRES32=r3, @ANYBLOB="518003c690780005039b218ba5d51708ec736c16e7522792f0221c1017193f0fcb28f7199f19467c4e7851082a9f6afe7bb5abca134f9c0c35"], 0x0) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=r3, @ANYBLOB="010810009078008efe06e2d4c3d9fe08aec5b4c6425f131248dcd5ebe8a9dadb2dd3b78e29682d487a2f84ed5f4522c0e1991aab080a00000005000000060000be9cf6d2dc4748e76f3285dc39b00af389023158caa1211ea01cb16f95d3ecdc3f7fabae97c270d2e62f8b7b4f108e9ad9fc7e49304734b911bd9a2eab1c4ff93f5519211d872e8db0482a"], 0x419) syz_extract_tcp_res(&(0x7f0000000140)={0x41424344}, 0x2, 0xe) syz_emit_ethernet(0x165, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x1, 0x4, 0x157, 0x6a, 0x0, 0x5, 0x6, 0x0, @empty, @remote, {[@timestamp={0x44, 0x18, 0xe0, 0x0, 0xf, [0x3, 0x3, 0x1d69, 0x4, 0x1a6]}, @timestamp_addr={0x44, 0x14, 0x6d, 0x1, 0x1, [{@multicast2, 0x4}, {@loopback, 0x1007}]}, @end]}}, {{0x4e22, 0x4e22, r3, r12, 0x0, 0x0, 0x6, 0x10, 0xb, 0x0, 0x5, {[@nop, @fastopen={0x22, 0x2}, @nop]}}, {"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"}}}}}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8cffffff) syz_emit_ethernet(0x14a, &(0x7f00000013c0)=ANY=[@ANYBLOB="4b61d084f344037cae8fbc7308004b9f013c00660000070690780a010102e000000100861affffffff050742a32ac578050dcd54853dc87c14a9c4fdb88660000000020512d245085c60bc4b4953b5723498b8f0d501083b519f411071060a76cb5f8950ea7ef00504fc6f050a8d247a47f07d8b8901064376b2ea06020709ffef23e759302806116ab3a1986b2a4351f0ae8d71a4b81c0706bb43d2f54414fbb0c00000000000dba4000000048000000089093dba43a87a870f4e204e22", @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="008000ff907847dc0402131201f000e96fb8807e77f89fdef24461fe02048100fe06e2d4c3d90002040400fe06e2d4c3d9000000d96398e6f610bd7e00f703c1f91ca4812c607c5d34b5e190332433c77f9eb4e1ca1117015e5ce65747f136e29ac76419d5fea127c87d9d21578b96d844e73ce799da9facad52260ab0fc7de14cc5428b729d2a301c9b4458914dfbddf2439c6048baf27feaa34ba471f69e7d4b828fd2e57caf334b1f18718288c18f6e2bba9f5571cc72f11c5e0d6e0ccd8535"], 0x0) pipe(&(0x7f0000000080)) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001180)={0x14, &(0x7f0000001000)=ANY=[@ANYBLOB="4021a5000000a522c431f75bf51af48ef8c744674128e38e524094383ee6edcb3a8c243f8fd0a1ed1c6e7bec5df6ce01cbbfe285b779199286e0b18356d7583ea8c7178283a8e502fabdb3fb6d2767a6841f1375df9b40144ff2f61538d0d078af54ba4917874993bb7ddce600d1edbc691234757d83b3d52350aaf0a6147e5a175d4c67a8341c68f88cf361e15e9b9793f6f6882b2f68b52de8c2f338ea5b3d9ea75bd049e66db8847d00"], &(0x7f00000010c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}, &(0x7f0000001100)={0x0, 0x22, 0x6, {[@main=@item_012={0x1, 0x0, 0x9, '\v'}, @local=@item_012={0x0, 0x2, 0x3}, @main=@item_012={0x2, 0x0, 0x5dfcc226d5eecf51, "eaa2"}]}}, &(0x7f0000001140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x809}}}}, &(0x7f0000001380)={0x18, &(0x7f00000011c0)={0x20, 0x15, 0x2d, "074d830c432356618807221834c000e481d7a783c337c2859c3dcad59dddf983c1fbea8d695b933adde714b299"}, &(0x7f0000001200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001240)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001280)={0x20, 0x1, 0x87, "d62a3ac6608ba1f19b71a6b3a43af7628fe51ba4e1c1961c9a06bdf751d0f22fe8ab731ff88c136dea9bcc30462c0ec6ba93b7e3d853cd0e0bca355d07bc2e53a4d48adf21df4a482e9ecb0e141099c57d227fde567374d2969af3ab84d1d09228db89c7924f9974c71ed2ac79da3440c379caad8b332dfc2f3e5688c75c94fbe06a58d47ebd2c"}, &(0x7f0000001340)={0x20, 0x3, 0x1, 0xa}}) 1.638178628s ago: executing program 1 (id=8843): ioperm(0x5, 0x11, 0xccb) ioprio_get$pid(0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000e00000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x7, 0x4) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect$uac1(0x6, 0xeb, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x3, 0x1, 0x20, 0x170, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x5}, [@extension_unit={0xd, 0x24, 0x8, 0x6, 0x100, 0x2, "86a36b092d49"}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x6, 0x40, "753201d4049c"}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0x5, "b164fce873"}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x3, 0x6, "3ed1f418"}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x81}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x100, 0x1, 0x7f, 0x2, 0x3, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x5d6b, 0x83, "67155dd57f10"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0x2, 0x4, "e5"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x80, 0x1, 0x9, 0x7f, "c4d8e85b46"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x0, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x1bf, 0x80, 0x5, 0x2, {0x7, 0x25, 0x1, 0x3, 0x2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x80, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x5, 0x8e, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x80, 0x5d, {0x7, 0x25, 0x1, 0x2, 0x7, 0x6}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x5, 0x2, 0x7, 0x8}, 0x32, &(0x7f00000002c0)={0x5, 0xf, 0x32, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "150ae8bffa90d467a26d956dc838bd98"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x1, 0xdf, 0x1, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x4, 0x4, 0xedd2, 0x40}, @ptm_cap={0x3}]}, 0x3, [{0x6c, &(0x7f0000000300)=@string={0x6c, 0x3, "1d663da636ceec6651d7a87e4876e7e92d43bd3dfba4353e057b535d6813e2b236eaa8f4388e4f1b498aaea91b9509aeb915c27a4c3880e09f5a88d40aead749803c920b61bea069df4e54620973db2838b3c0fe1f93846838206bf4eeacd56ca6bb43c7096fa42a6d20"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2409}}]}) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000000c0)=r2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x5, 0x3, 0x5}) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getgroups(0x0, 0x0) 1.497537703s ago: executing program 5 (id=8844): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7f) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) (async) capset(0x0, &(0x7f0000000040)={0x200000, 0x220000, 0x8000c, 0x0, 0x2, 0xfffffffe}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8913, &(0x7f0000000040)={'tunl0\x00', @remote}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001300)=@newtaction={0x2d4, 0x30, 0x12f, 0x3, 0x0, {}, [{0x2c0, 0x1, [@m_xt={0x2bc, 0x14, 0x0, 0x0, {{0x7}, {0x198, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x8c, 0x6, {0x5, 'security\x00', 0x7, 0x1000, "4e60dfa858de8c778086c43d5243bdafb941bd572de1ad34ee684eb2da08e75a018562dbf2c300407fed4c22332a281abdfee1d254ac9aa85b14dec71cb08c288173a4d605a098d16e6be42918f68f6d01dae5345350fdb8792c23023d81a8180a5e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x81}, @TCA_IPT_TARG={0xff, 0x6, {0xd28, 'raw\x00', 0x6, 0x9, "33c2bdeaa9cf7ba8a9fb6328b88cd0eaa5365dfaabc1eef4a8d9c4e4912117844bfde9a028d21819a1c8286eb070e4b160ff06e3e9bf2304f840572c2ae843af194ddcee1f162acbd5176da555510f73432d99eabc37b5accff94686fcad4d6883f9b678218c94cf7d9ea1abcab7a5273adce506589a4abc587bfe6bfeff4fa47243dd58537eb09645b6679148c95170ebd3ebaa08579d29d3985fce9e44732891727967e90e84bfe049b27e84490bcba7c7c3a883d4da059cbd1671050065e633d50b8da31bbb0f5e0f53457eb92722e482fccc46"}}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, &(0x7f00000001c0), 0x4) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x1a, 0x2, 0x9d49) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xc}, {0x0, 0xf}}}, 0x24}}, 0x20000000) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {0x0, 0xa}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_ACT={0x58, 0x3, [@m_bpf={0x54, 0x20, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x0, 0x10000000, 0xb, 0x4}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x2000000, 0x8000, 0x0, 0x32d}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) (async) r8 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) (async) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x8000}) fcntl$dupfd(r9, 0x406, r9) (async) socket(0x10, 0x803, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.377650738s ago: executing program 1 (id=8845): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000104000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.153479373s ago: executing program 1 (id=8846): ptrace$cont(0x9, 0x0, 0x5, 0x10001) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xe, 0x84) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000400)=""/17) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020, 0x0, 0x0}, 0x2020) (async, rerun: 64) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c726f6f616d6f64653d3030304830303030303030304f3030343030307365725f69643d000000e900", @ANYRES8=r1, @ANYBLOB="2c67606f75705f682505", @ANYRESDEC=0x0]) (async) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000580)={0x50, 0x0, r7, {0x7, 0x28, 0xffff, 0x200800, 0x0, 0x0, 0x1e0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) (async) syz_fuse_handle_req(r6, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r9, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x86, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa4486dd606b88ef00503a00fc010000000000000000000000000000fe8000000000000000000000780000000060bdd7c300003300000000000000009e0000000000000000000000000000010402000000000000c9100000000000000000000000000000000100000000000000000000000000000000298ac041febf85fc913ded9157623915049adef7f77ecb9c46fa1afd4112e80014e49b9ffa9c497915c6268136efce51882f19569dcf0e5719c2761eaf58e5005005fcc5c31caf45bf49be49f36a7212ff41421ecaec359eece9fac966317de1f9697006b0d5b9cba8b0252c"], 0x0) syz_fuse_handle_req(r6, &(0x7f0000006680)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x1, 0x16, 0x0, 0x9, 0x0, {0x2, 0xa417, 0x3, 0x6, 0x800000000003, 0x100000000000008, 0x80000000, 0x4, 0x6, 0x8000, 0x80000000, r8, r9, 0x0, 0x4c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') write$cgroup_pid(r10, &(0x7f0000000380), 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) lstat(&(0x7f0000000500)='./file1\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r4, &(0x7f00000006c0)={0xa0, 0xfffffffffffffffe, r5, {{0x0, 0x0, 0xd4c, 0x6, 0x4, 0x0, {0x6, 0x7, 0x4000000000000000, 0xffffffff, 0x7, 0xa, 0x1, 0x2bce, 0x3e, 0x4000, 0x6, r8, r11, 0x6, 0x9}}, {0x0, 0x8}}}, 0xa0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000d3603ca5a9e6d3000004000000800400000085000000b74123ebe1"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000004001000040000000500000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2000cc0, r12}, 0x38) (async) socket$igmp6(0xa, 0x3, 0x2) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x0, r12}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x6}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6, 0x0, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x9000) 1.01368641s ago: executing program 5 (id=8847): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001000010025bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="192d0400454402000c002b80050002000c00000008000d"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="acec6caa65fe052131c60836000000520001000000000000000000a6"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000440)={0x9, @pix_mp={0x9, 0x8, 0x33565348, 0x1, 0x7, [{0x32badaa3, 0x1f}, {0x81, 0x3}, {0x7f, 0x9}, {0x6, 0x9}, {0x8000, 0x5}, {0x401, 0x9}, {0x6, 0x3}, {0x1, 0x6}], 0x3, 0x9, 0x6, 0x0, 0x3}}) 1.013303754s ago: executing program 1 (id=8848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002280)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x7}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x3000000, 0x0, 0x10}, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) r7 = syz_open_dev$vim2m(&(0x7f0000000240), 0x41d3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r8, &(0x7f00000001c0), 0x0, 0x55, 0xfffffffc) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e23, 0x3, 'sed\x00', 0x10, 0x60000000, 0xc}, {@empty, 0x4e21, 0x12002, 0xf, 0xe1b2, 0x10001}}, 0x44) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="94000000100003042dbd7000fdffff00000003", @ANYRES32=0x0, @ANYBLOB="0800000000b10000680012800b0001006272696467650000580002800a001400bbbbbbbbbbbb00000c001f00020000000000000005002900010000000800020009000000050017000000000005002600000000000c002300010000000000000008000400050000000800030023000000080040", @ANYRES32], 0x94}}, 0x0) 934.471183ms ago: executing program 5 (id=8849): r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0xc000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r1, 0x7fff}, &(0x7f0000000100)=0x8) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0e05403, &(0x7f0000000140)={{0x1, 0x1, 0x6, 0x3, 0x8}, 0x8, 0x10001, 'id0\x00', 'timer0\x00', 0x0, 0xfffff0ac, 0x8, 0xf, 0xfffffce0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x17, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000002c0)={0x15, 0x110, 0xfa00, {r2, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6bc6}, @in6={0xa, 0x4e24, 0x2, @private0, 0x2}}}, 0x118) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x1, 'ipvlan1\x00', {}, 0x7ff}) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000440)={0xa, {0xa, 0x9, 0x9}}, 0xa) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000480)={r1, 0x1, 0x1, [0x3]}, &(0x7f00000004c0)=0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000540)={r3, 0x38, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x7, @mcast2, 0x5}, @in6={0xa, 0x4e24, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6a9f587d}]}, &(0x7f0000000580)=0xc) r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000640)={0x12, 0x10, 0xfa00, {&(0x7f00000005c0), r2, r5}}, 0x18) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000680)={'\x00', 0x1000, 0x6, 0x3, 0xfffffffffffff800, 0x3ff, 0x0}) fcntl$lock(r5, 0x26, &(0x7f00000006c0)={0x0, 0x1, 0x10001, 0x2, r6}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x13c, 0x14, 0x9, 0x70bd2a, 0x25dfdbff, {0xc0d64faca874b273}, [@INET_DIAG_REQ_BYTECODE={0x39, 0x1, "c4206ebf57c27c21e3873dc19ea7dca87761186e07c4ad041fbc8b9f7245f7e664fbf093189e1c010d590ba3bb8ca79610856b19de"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "2f6205b1"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "bf62452d031b984c6f754c4b67b27063d194f2f6eb56dd77f6d2a09e99d9732b31d2b790c8eff556f0cfed4cbf6da1fbc5b9bbb4500f5fe364422bcaa83f95e9f8e2bbd3cbfa98cbd2a9551819a338e2a51d565b9d4f36ec1ad026aaa14649c7b7532f852fdb7e221b3e36aabbe3b955abcac5437856c718bf653274a59a881a55a8dc6951e9c3a297edaedab353b27af7522d0bbe1522f9b3f8a85c50342d2360682a7958486ed4e9118e8c38fb6e2b40f77bcab14ae37cb6297eef1052b466ceb32df4fa1a622ea341e571f58ea24526aecd673e7db86bf7e79fe031"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) timer_create(0x3, &(0x7f0000000900)={0x0, 0xc, 0x2, @tid=r6}, &(0x7f0000000940)=0x0) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) timer_settime(r7, 0x0, &(0x7f0000000a00)={{r8, r9+10000000}, {r10, r11+10000000}}, &(0x7f0000000a40)) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000a80)={0x0, "7defc4c8a68fd290aaacaab47c58ad5f"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001a80)={0x10, 0x1, {0x6, @struct={0x9, 0x52}, 0x0, 0x5, 0x13e, 0x0, 0x200, 0x7, 0xa2, @usage=0x200, 0x2, 0xffffffff, [0xfffffffffffffffc, 0x5, 0x1000, 0x1, 0x3, 0x8]}, {0x2e, @struct={0x4, 0xfffffffc}, r12, 0x8000000000000001, 0x3800, 0x4, 0xf6812cc, 0xffffffffffffffff, 0x2c, @struct={0x1, 0x9}, 0x9, 0x8, [0x4, 0x5, 0x8001, 0x7, 0x5, 0x8]}, {0x9, @struct={0x1, 0x6}, 0x0, 0x6, 0x2, 0xfff, 0x8725, 0x6, 0x4, @struct={0x10001, 0xffff6ae9}, 0x7, 0x4, [0x401, 0x8000000000000, 0x3, 0x6, 0x5, 0x8]}, {0x7f, 0x0, 0xffffffffffffffd3}}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000001e80)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001ec0)={0x28, 0x1, r13, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x70d}) r14 = inotify_init1(0x0) sendfile(r5, r14, &(0x7f0000001f00)=0x3, 0x8) preadv(r5, &(0x7f00000020c0)=[{&(0x7f0000001f40)=""/236, 0xec}, {&(0x7f0000002040)=""/68, 0x44}], 0x2, 0x3, 0x7f) r15 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r15, 0x84, 0x75, &(0x7f0000002100)={r4, 0x2}, &(0x7f0000002140)=0x8) bind(r15, &(0x7f0000002180)=@isdn={0x22, 0x8, 0x7, 0x0, 0x30}, 0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r15, 0x84, 0x7b, &(0x7f0000002200)={r3, 0x400}, &(0x7f0000002240)=0x8) 844.908052ms ago: executing program 2 (id=8850): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80) r1 = socket$kcm(0x1e, 0x4, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 781.794464ms ago: executing program 5 (id=8851): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getattr(r2, &(0x7f0000000140)={0x38}, 0x38, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x68, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x68}}, 0x0) 650.89019ms ago: executing program 6 (id=8852): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a310000000008000240000000061400", @ANYRES64], 0x50}}, 0x20044084) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={r3, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500100001a00ffff00000000fbdbdf25ff020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0], 0x150}}, 0x0) socket(0xa, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c000280080001", @ANYRES32=r5], 0x78}, 0x1, 0x2000000}, 0x20000800) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffdb3400000000000000fbff0000fc0011907800000000000000334e790de7d73bf3ec"], 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) 0s ago: executing program 2 (id=8853): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000004200)=ANY=[@ANYRESDEC=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r3, 0x18000000000002a0, 0x3e, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da19244", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x4c) rt_sigaction(0x7, &(0x7f0000001080)={0x0, 0x48000003, 0x0, {[0x7, 0xbf1]}}, 0x0, 0x8, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1010d5ff17e4f9e8bf7963446d05148dda4876c7db45ea6dde56f33b0a0eaffefe", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) preadv(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}, {0x0}], 0x2, 0x33, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a00000004000000000000005e57000001001f0000000000000000000100000002000000000000000000"], 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000040)="aa1d484ea0fb0000f7fc08fcd111fbdf23eaf9e90ec300000000000000067a0689fff2a41cfb", 0x26}], 0x1) write$tcp_mem(r5, &(0x7f0000000400)={0x9, 0x2d, 0x0, 0x3a, 0x3, 0x2c}, 0x48) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000001c0)={0x4}) kernel console output (not intermixed with test programs): 4967295 subj=unconfined pid=3548 comm="syz.0.8126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 2225.524129][ T30] audit: type=1326 audit(1759696972.065:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3548 comm="syz.0.8126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 2225.835658][ T30] audit: type=1326 audit(1759696972.385:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3548 comm="syz.0.8126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=448 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 2225.916648][ T30] audit: type=1326 audit(1759696972.395:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3548 comm="syz.0.8126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 2225.931662][ T3563] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8128'. [ 2225.980928][ T30] audit: type=1326 audit(1759696972.395:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3548 comm="syz.0.8126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 2226.215923][ T30] audit: type=1326 audit(1759696972.645:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3548 comm="syz.0.8126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 2226.275071][ T30] audit: type=1326 audit(1759696972.645:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3548 comm="syz.0.8126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 2226.343898][ T30] audit: type=1326 audit(1759696972.645:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3548 comm="syz.0.8126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 2226.401485][ T30] audit: type=1326 audit(1759696972.645:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3548 comm="syz.0.8126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 2226.500099][ T30] audit: type=1326 audit(1759696972.645:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3548 comm="syz.0.8126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 2227.029020][ T3581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8135'. [ 2228.265926][T31784] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2228.429564][T31784] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2228.440054][T31784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.470295][T31784] usb 2-1: config 0 descriptor?? [ 2228.489776][T31784] cp210x 2-1:0.0: cp210x converter detected [ 2228.911882][T31784] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2228.940410][T31784] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2229.105917][T25206] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 2229.256785][T25206] usb 6-1: Using ep0 maxpacket: 8 [ 2229.287975][T25206] usb 6-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 2229.299635][T25206] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2229.337622][T25206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2229.367709][T25206] hub 6-1:32.0: bad descriptor, ignoring hub [ 2229.388589][T25206] hub 6-1:32.0: probe with driver hub failed with error -5 [ 2229.469335][ T897] usb 2-1: USB disconnect, device number 114 [ 2229.519442][ T897] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2229.556541][ T897] cp210x 2-1:0.0: device disconnected [ 2230.596233][T31784] usb 6-1: USB disconnect, device number 108 [ 2231.313545][ T3631] netlink: 'syz.2.8149': attribute type 10 has an invalid length. [ 2231.693663][ T897] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2231.906728][ T897] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2231.926624][ T897] usb 3-1: config 0 has no interfaces? [ 2231.938040][ T897] usb 3-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 2231.952813][ T897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2231.997869][ T897] usb 3-1: Product: syz [ 2232.002111][ T897] usb 3-1: Manufacturer: syz [ 2232.015218][ T897] usb 3-1: SerialNumber: syz [ 2232.077330][ T897] usb 3-1: config 0 descriptor?? [ 2232.468862][ T3632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2232.782310][ T3578] Set syz1 is full, maxelem 65536 reached [ 2233.285972][T25206] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2233.458126][T25206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2233.469960][T25206] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 2233.490820][T25206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.527414][T25206] usb 4-1: config 0 descriptor?? [ 2234.327596][T31458] usb 3-1: USB disconnect, device number 98 [ 2234.342730][T25206] usbhid 4-1:0.0: can't add hid device: -71 [ 2234.482806][T25206] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2234.500407][T25206] usb 4-1: USB disconnect, device number 111 [ 2234.632770][ T3671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8162'. [ 2235.325468][T31458] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2235.500340][T31458] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2235.509716][T31458] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.529774][T31458] usb 2-1: Product: syz [ 2235.534055][T31458] usb 2-1: Manufacturer: syz [ 2235.550236][T31458] usb 2-1: SerialNumber: syz [ 2235.578169][T31458] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2235.629879][ T5943] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2235.827306][ T3678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2235.979824][ C1] usb 2-1: ath9k_htc: invalid pkt_len (b408) [ 2236.719048][ T5943] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2236.726645][ T5943] ath9k_htc: Failed to initialize the device [ 2236.826313][ T5943] usb 2-1: ath9k_htc: USB layer deinitialized [ 2238.023237][T25206] usb 2-1: USB disconnect, device number 115 [ 2238.470644][ T3692] netlink: 196 bytes leftover after parsing attributes in process `syz.1.8166'. [ 2238.637843][ T3689] netlink: 'syz.1.8166': attribute type 8 has an invalid length. [ 2239.379110][ T3694] batadv_slave_0: entered promiscuous mode [ 2239.384988][ T3694] batadv_slave_0: entered allmulticast mode [ 2239.392213][ T3694] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 2239.896626][ T3717] fuse: Bad value for 'group_id' [ 2239.935233][ T3717] fuse: Bad value for 'group_id' [ 2240.535373][ T3739] FAULT_INJECTION: forcing a failure. [ 2240.535373][ T3739] name failslab, interval 1, probability 0, space 0, times 0 [ 2240.546007][T25206] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 2240.549423][ T3739] CPU: 1 UID: 0 PID: 3739 Comm: syz.2.8186 Not tainted syzkaller #0 PREEMPT(full) [ 2240.549456][ T3739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2240.549479][ T3739] Call Trace: [ 2240.549490][ T3739] [ 2240.549501][ T3739] dump_stack_lvl+0x189/0x250 [ 2240.549540][ T3739] ? __pfx____ratelimit+0x10/0x10 [ 2240.549580][ T3739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2240.549610][ T3739] ? __pfx__printk+0x10/0x10 [ 2240.549656][ T3739] ? __pfx___might_resched+0x10/0x10 [ 2240.549683][ T3739] ? fs_reclaim_acquire+0x7d/0x100 [ 2240.549728][ T3739] should_fail_ex+0x414/0x560 [ 2240.549769][ T3739] should_failslab+0xa8/0x100 [ 2240.549810][ T3739] __kmalloc_noprof+0xcb/0x7f0 [ 2240.549859][ T3739] ? tomoyo_encode+0x28b/0x550 [ 2240.549925][ T3739] tomoyo_encode+0x28b/0x550 [ 2240.549977][ T3739] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2240.550014][ T3739] ? tomoyo_domain+0xd9/0x130 [ 2240.550060][ T3739] tomoyo_path2_perm+0x265/0x680 [ 2240.550088][ T3739] ? tomoyo_path2_perm+0x235/0x680 [ 2240.550117][ T3739] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 2240.550207][ T3739] tomoyo_path_rename+0x141/0x190 [ 2240.550249][ T3739] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 2240.550294][ T3739] ? pid_revalidate+0x20d/0x260 [ 2240.550335][ T3739] security_path_rename+0x250/0x490 [ 2240.550378][ T3739] do_renameat2+0x52b/0xa50 [ 2240.550434][ T3739] ? __pfx_do_renameat2+0x10/0x10 [ 2240.550482][ T3739] ? strncpy_from_user+0x150/0x290 [ 2240.550517][ T3739] ? getname_flags+0x1e5/0x540 [ 2240.550546][ T3739] __ia32_sys_renameat2+0xce/0xe0 [ 2240.550588][ T3739] __do_fast_syscall_32+0xb6/0x2b0 [ 2240.550617][ T3739] ? lockdep_hardirqs_on+0x9c/0x150 [ 2240.550647][ T3739] do_fast_syscall_32+0x34/0x80 [ 2240.550673][ T3739] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2240.550704][ T3739] RIP: 0023:0xf704e539 [ 2240.550726][ T3739] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2240.550749][ T3739] RSP: 002b:00000000f543e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 2240.550776][ T3739] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 2240.550795][ T3739] RDX: 0000000000000005 RSI: 0000000080000440 RDI: 0000000000000002 [ 2240.550810][ T3739] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2240.550825][ T3739] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2240.550841][ T3739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2240.550877][ T3739] [ 2240.550955][ T3739] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2240.728042][T25206] usb 6-1: Using ep0 maxpacket: 16 [ 2240.833317][T25206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2240.847323][T25206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2240.861093][T25206] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2240.868984][ T5943] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2240.876318][T25206] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 2240.891843][T25206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.936906][T25206] usb 6-1: config 0 descriptor?? [ 2240.956028][T31784] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 2241.031107][ T3730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2241.048870][ T3730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2241.067743][ T5943] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2241.079506][ T5943] usb 2-1: no configurations [ 2241.084301][ T5943] usb 2-1: can't read configurations, error -22 [ 2241.137885][T31784] usb 4-1: config 0 has an invalid interface number: 248 but max is 0 [ 2241.146701][T31784] usb 4-1: config 0 has no interface number 0 [ 2241.156999][T31784] usb 4-1: New USB device found, idVendor=0af0, idProduct=7501, bcdDevice= 0.00 [ 2241.167046][T31784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2241.176586][T31784] usb 4-1: Product: syz [ 2241.180889][T31784] usb 4-1: Manufacturer: syz [ 2241.187023][T31784] usb 4-1: SerialNumber: syz [ 2241.195039][T31784] usb 4-1: config 0 descriptor?? [ 2241.204614][T31784] hso 4-1:0.248: Not our interface [ 2241.211439][T31784] usb-storage 4-1:0.248: USB Mass Storage device detected [ 2241.392399][T25206] hid-multitouch 0003:0457:07DA.0057: unknown main item tag 0x6 [ 2241.400886][T25206] hid-multitouch 0003:0457:07DA.0057: unknown main item tag 0x0 [ 2241.412923][T25206] hid-multitouch 0003:0457:07DA.0057: unknown main item tag 0x0 [ 2241.421547][T25206] hid-multitouch 0003:0457:07DA.0057: unknown main item tag 0x0 [ 2241.430263][T25206] hid-multitouch 0003:0457:07DA.0057: unknown main item tag 0x0 [ 2241.438846][T25206] hid-multitouch 0003:0457:07DA.0057: unknown main item tag 0x0 [ 2241.447639][T25206] hid-multitouch 0003:0457:07DA.0057: unknown main item tag 0x0 [ 2241.456295][T25206] hid-multitouch 0003:0457:07DA.0057: unknown main item tag 0x0 [ 2241.473305][T31784] usb 4-1: USB disconnect, device number 112 [ 2241.483906][T25206] hid-multitouch 0003:0457:07DA.0057: unknown main item tag 0x0 [ 2241.492787][T25206] hid-multitouch 0003:0457:07DA.0057: unknown main item tag 0x0 [ 2241.512555][T25206] hid-multitouch 0003:0457:07DA.0057: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 2242.158709][ T5943] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2242.341552][ T5943] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2242.362757][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2242.391596][ T5943] usb 2-1: Product: syz [ 2242.407555][ T5943] usb 2-1: Manufacturer: syz [ 2242.420854][ T5943] usb 2-1: SerialNumber: syz [ 2242.463746][ T5943] usb 2-1: config 0 descriptor?? [ 2242.520868][ T5943] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2242.565548][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2242.592815][ T5943] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2242.617700][ T5943] usb 2-1: media controller created [ 2242.709356][T25206] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2242.738845][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2242.895970][T25206] usb 3-1: Using ep0 maxpacket: 8 [ 2242.903422][T25206] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 2242.961367][ T5943] DVB: Unable to find symbol mt352_attach() [ 2242.962494][T25206] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 2242.998117][T25206] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2243.023252][T25206] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2243.051360][ T5943] DVB: Unable to find symbol nxt6000_attach() [ 2243.052493][T25206] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2243.058179][ T5943] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2243.062097][ T5943] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input175 [ 2243.072836][T25206] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 2243.096876][ T5943] dvb-usb: schedule remote query interval to 1000 msecs. [ 2243.104936][ T5943] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2243.117204][ T5943] dvb-usb: bulk message failed: -22 (7/0) [ 2243.119253][T25206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.123726][ T5943] dvb-usb: bulk message failed: -22 (7/0) [ 2243.174931][T25206] usb 3-1: config 0 descriptor?? [ 2243.186323][ T897] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 2243.427018][ T897] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2243.437481][ T897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.450536][ T897] usb 4-1: config 0 descriptor?? [ 2243.479265][ T5848] usb 2-1: USB disconnect, device number 117 [ 2243.567156][ T5848] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2243.703172][T25206] logitech-djreceiver 0003:046D:C53A.0058: hidraw1: USB HID v0.81 Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 2243.924929][T15724] usb 3-1: USB disconnect, device number 99 [ 2243.971300][ T3790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2243.981483][ T3790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.005711][ T897] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 2244.047082][ T897] usb 4-1: USB disconnect, device number 113 [ 2244.094370][ T5943] usb 6-1: USB disconnect, device number 109 [ 2245.180690][ T3805] fuse: Unknown parameter 'ycDmHvEmV; [ 2245.180690][ T3805] 0x0000000000000004' [ 2245.429952][ T3815] tipc: Started in network mode [ 2245.466193][ T3817] FAULT_INJECTION: forcing a failure. [ 2245.466193][ T3817] name failslab, interval 1, probability 0, space 0, times 0 [ 2245.492556][ T3817] CPU: 1 UID: 0 PID: 3817 Comm: syz.5.8206 Not tainted syzkaller #0 PREEMPT(full) [ 2245.492587][ T3817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2245.492599][ T3817] Call Trace: [ 2245.492606][ T3817] [ 2245.492614][ T3817] dump_stack_lvl+0x189/0x250 [ 2245.492638][ T3817] ? __pfx____ratelimit+0x10/0x10 [ 2245.492663][ T3817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2245.492683][ T3817] ? __pfx__printk+0x10/0x10 [ 2245.492711][ T3817] ? __pfx___might_resched+0x10/0x10 [ 2245.492727][ T3817] ? fs_reclaim_acquire+0x7d/0x100 [ 2245.492754][ T3817] should_fail_ex+0x414/0x560 [ 2245.492778][ T3817] should_failslab+0xa8/0x100 [ 2245.492805][ T3817] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2245.492827][ T3817] ? io_fgetxattr_prep+0x18f/0x290 [ 2245.492842][ T3817] ? percpu_counter_add_batch+0x190/0x1e0 [ 2245.492864][ T3817] io_fgetxattr_prep+0x18f/0x290 [ 2245.492882][ T3817] io_submit_sqes+0x932/0x1e60 [ 2245.492924][ T3817] __se_sys_io_uring_enter+0x2df/0x2b20 [ 2245.492957][ T3817] ? ksys_write+0x1cb/0x250 [ 2245.492981][ T3817] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2245.492998][ T3817] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2245.493015][ T3817] ? __pfx_vfs_write+0x10/0x10 [ 2245.493038][ T3817] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2245.493058][ T3817] ? __fget_files+0x3a0/0x420 [ 2245.493087][ T3817] ? fput+0xa0/0xd0 [ 2245.493103][ T3817] ? ksys_write+0x22a/0x250 [ 2245.493131][ T3817] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 2245.493152][ T3817] __do_fast_syscall_32+0xb6/0x2b0 [ 2245.493170][ T3817] ? lockdep_hardirqs_on+0x9c/0x150 [ 2245.493188][ T3817] do_fast_syscall_32+0x34/0x80 [ 2245.493205][ T3817] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2245.493225][ T3817] RIP: 0023:0xf7f45539 [ 2245.493238][ T3817] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2245.493254][ T3817] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 2245.493271][ T3817] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000047bc [ 2245.493282][ T3817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2245.493291][ T3817] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2245.493301][ T3817] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2245.493311][ T3817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2245.493333][ T3817] [ 2245.733726][ T3815] tipc: Node identity 82e798654a7c, cluster identity 4711 [ 2245.986060][ T3815] tipc: Enabled bearer , priority 0 [ 2246.050133][ T3818] syzkaller0: entered promiscuous mode [ 2246.129014][ T3818] syzkaller0: entered allmulticast mode [ 2246.213534][ T3822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8207'. [ 2246.230030][ T3815] tipc: Resetting bearer [ 2246.274772][ T3822] FAULT_INJECTION: forcing a failure. [ 2246.274772][ T3822] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.301856][ T3822] CPU: 1 UID: 0 PID: 3822 Comm: syz.5.8207 Not tainted syzkaller #0 PREEMPT(full) [ 2246.301888][ T3822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2246.301903][ T3822] Call Trace: [ 2246.301913][ T3822] [ 2246.301923][ T3822] dump_stack_lvl+0x189/0x250 [ 2246.301956][ T3822] ? __pfx____ratelimit+0x10/0x10 [ 2246.301991][ T3822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2246.302018][ T3822] ? __pfx__printk+0x10/0x10 [ 2246.302054][ T3822] ? __pfx___might_resched+0x10/0x10 [ 2246.302079][ T3822] ? fs_reclaim_acquire+0x7d/0x100 [ 2246.302117][ T3822] should_fail_ex+0x414/0x560 [ 2246.302150][ T3822] should_failslab+0xa8/0x100 [ 2246.302186][ T3822] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2246.302215][ T3822] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 2246.302246][ T3822] ? device_create+0x12f/0x2f0 [ 2246.302282][ T3822] device_create+0x12f/0x2f0 [ 2246.302315][ T3822] ? timer_init_key+0x171/0x2d0 [ 2246.302349][ T3822] ? __pfx_device_create+0x10/0x10 [ 2246.302380][ T3822] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 2246.302424][ T3822] mac80211_hwsim_new_radio+0x41b/0x5220 [ 2246.302485][ T3822] ? __pfx__printk+0x10/0x10 [ 2246.302524][ T3822] ? rcu_is_watching+0x15/0xb0 [ 2246.302550][ T3822] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2246.302604][ T3822] ? __nla_validate_parse+0x251c/0x2d40 [ 2246.302636][ T3822] ? __sys_sendmsg+0x164/0x220 [ 2246.302673][ T3822] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 2246.302703][ T3822] ? __pfx___nla_validate_parse+0x10/0x10 [ 2246.302751][ T3822] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2246.302781][ T3822] ? rcu_is_watching+0x15/0xb0 [ 2246.302812][ T3822] ? __nla_parse+0x40/0x60 [ 2246.302848][ T3822] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 2246.302891][ T3822] genl_family_rcv_msg_doit+0x215/0x300 [ 2246.302932][ T3822] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2246.302971][ T3822] ? bpf_lsm_capable+0x9/0x20 [ 2246.302989][ T3822] ? security_capable+0x7e/0x2e0 [ 2246.303013][ T3822] genl_rcv_msg+0x60e/0x790 [ 2246.303040][ T3822] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2246.303061][ T3822] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2246.303087][ T3822] netlink_rcv_skb+0x208/0x470 [ 2246.303103][ T3822] ? __lock_acquire+0xab9/0xd20 [ 2246.303119][ T3822] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2246.303142][ T3822] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2246.303173][ T3822] ? down_read+0x1ad/0x2e0 [ 2246.303194][ T3822] genl_rcv+0x28/0x40 [ 2246.303214][ T3822] netlink_unicast+0x82c/0x9e0 [ 2246.303246][ T3822] ? __pfx_netlink_unicast+0x10/0x10 [ 2246.303272][ T3822] ? netlink_sendmsg+0x642/0xb30 [ 2246.303288][ T3822] ? skb_put+0x11b/0x210 [ 2246.303308][ T3822] netlink_sendmsg+0x805/0xb30 [ 2246.303333][ T3822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2246.303352][ T3822] ? __import_iovec+0x5d4/0x7f0 [ 2246.303366][ T3822] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2246.303389][ T3822] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2246.303413][ T3822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2246.303431][ T3822] __sock_sendmsg+0x21c/0x270 [ 2246.303463][ T3822] ____sys_sendmsg+0x505/0x830 [ 2246.303487][ T3822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2246.303519][ T3822] ___sys_sendmsg+0x21f/0x2a0 [ 2246.303540][ T3822] ? __pfx____sys_sendmsg+0x10/0x10 [ 2246.303587][ T3822] ? __fget_files+0x2a/0x420 [ 2246.303610][ T3822] ? __fget_files+0x3a0/0x420 [ 2246.303642][ T3822] __sys_sendmsg+0x164/0x220 [ 2246.303662][ T3822] ? __pfx___sys_sendmsg+0x10/0x10 [ 2246.303694][ T3822] ? lockdep_hardirqs_on+0x9c/0x150 [ 2246.303712][ T3822] __do_fast_syscall_32+0xb6/0x2b0 [ 2246.303729][ T3822] ? lockdep_hardirqs_on+0x9c/0x150 [ 2246.303747][ T3822] do_fast_syscall_32+0x34/0x80 [ 2246.303764][ T3822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2246.303783][ T3822] RIP: 0023:0xf7f45539 [ 2246.303810][ T3822] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2246.303830][ T3822] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2246.303852][ T3822] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 2246.303866][ T3822] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 2246.303878][ T3822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2246.303891][ T3822] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2246.303904][ T3822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2246.303933][ T3822] [ 2246.802416][ T3827] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x32314142, 8, 0, 0, 0) [ 2246.859588][ T3811] tipc: Resetting bearer [ 2246.969975][ T3811] tipc: Disabling bearer [ 2247.026494][T25206] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2247.203889][T25206] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2247.224140][T25206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.261900][T25206] usb 6-1: Product: syz [ 2247.270938][T25206] usb 6-1: Manufacturer: syz [ 2247.278154][T25206] usb 6-1: SerialNumber: syz [ 2247.292405][T25206] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2247.324772][ T5848] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2247.562300][ C0] usb 6-1: ath9k_htc: invalid pkt_len (b408) [ 2248.282029][ T5943] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2248.404855][ T5848] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2248.438761][ T5848] ath9k_htc: Failed to initialize the device [ 2248.465950][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 2248.479459][ T5943] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2248.521484][ T5943] usb 2-1: config 7 has an invalid interface number: 188 but max is 0 [ 2248.541926][ T5848] usb 6-1: ath9k_htc: USB layer deinitialized [ 2248.586057][ T5943] usb 2-1: config 7 has no interface number 0 [ 2248.607198][ T5943] usb 2-1: config 7 interface 188 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 1023 [ 2248.627295][ T5943] usb 2-1: config 7 interface 188 has no altsetting 0 [ 2248.652865][ T5943] usb 2-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=73.76 [ 2248.665045][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2248.673419][ T5943] usb 2-1: Product: syz [ 2248.677684][ T5943] usb 2-1: Manufacturer: syz [ 2248.682313][ T5943] usb 2-1: SerialNumber: syz [ 2248.719729][ T3853] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2249.110464][ T5943] rndis_host 2-1:7.188: invalid descriptor buffer length [ 2249.129633][ T3853] netlink: 'syz.1.8213': attribute type 1 has an invalid length. [ 2249.139920][ T5943] usb 2-1: bad CDC descriptors [ 2249.160034][ T5943] cdc_acm 2-1:7.188: invalid descriptor buffer length [ 2249.197377][ T5943] usb 2-1: USB disconnect, device number 118 [ 2249.685949][T25206] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 2249.848650][T25206] usb 3-1: Invalid ep0 maxpacket: 64 [ 2249.883894][ T5848] usb 6-1: USB disconnect, device number 110 [ 2249.976136][T25206] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 2250.185748][T25206] usb 3-1: Invalid ep0 maxpacket: 64 [ 2250.209302][T25206] usb usb3-port1: attempt power cycle [ 2250.564185][ T3897] ptm ptm19: ldisc open failed (-12), clearing slot 19 [ 2250.571559][T25206] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 2250.627729][T25206] usb 3-1: Invalid ep0 maxpacket: 64 [ 2250.640356][ T3895] fuse: Unknown parameter 'ycDmHvEmV; [ 2250.640356][ T3895] 0x0000000000000004' [ 2250.779236][T25206] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 2250.816852][T25206] usb 3-1: Invalid ep0 maxpacket: 64 [ 2250.826321][T25206] usb usb3-port1: unable to enumerate USB device [ 2251.185964][ T5848] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2251.260623][ T3926] fuse: Unknown parameter '00000000000000000000000' [ 2251.335309][ T5943] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2251.336010][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 2251.349862][ T5848] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 2251.358252][ T5848] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 2251.367727][ T5848] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2251.377601][ T5848] usb 2-1: config 250 has no interface number 0 [ 2251.383920][ T5848] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 2251.396666][ T5848] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2251.409166][ T5848] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2251.420371][ T5848] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 2251.431257][ T5848] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 2251.445756][ T5848] usb 2-1: config 250 interface 228 has no altsetting 0 [ 2251.456766][ T5848] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2251.466643][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2251.474966][ T5848] usb 2-1: Product: syz [ 2251.480008][ T5848] usb 2-1: SerialNumber: syz [ 2251.494157][ T5848] hub 2-1:250.228: bad descriptor, ignoring hub [ 2251.501065][ T5848] hub 2-1:250.228: probe with driver hub failed with error -5 [ 2251.505362][ T5943] usb 4-1: Using ep0 maxpacket: 8 [ 2251.517639][ T5943] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 2251.530401][ T5943] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 2251.542774][ T5943] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 2251.554003][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2251.563947][ T5943] usb 4-1: Product: syz [ 2251.568475][ T5943] usb 4-1: Manufacturer: syz [ 2251.573116][ T5943] usb 4-1: SerialNumber: syz [ 2251.696592][ T5848] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 119 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 2251.796169][ T3923] netlink: 'syz.3.8240': attribute type 9 has an invalid length. [ 2251.817467][ T5943] cytherm 4-1:5.0: Cypress thermometer device now attached [ 2251.829684][ T5943] usb 4-1: USB disconnect, device number 114 [ 2251.837092][ T5943] cytherm 4-1:5.0: Cypress thermometer now disconnected [ 2252.479502][ T5848] usb 2-1: USB disconnect, device number 119 [ 2252.514461][ T5848] usblp0: removed [ 2253.009021][ T3953] netlink: 'syz.3.8250': attribute type 10 has an invalid length. [ 2253.019071][ T3953] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8250'. [ 2253.050737][ T3953] batadv0: entered promiscuous mode [ 2253.065243][ T3953] batadv0: entered allmulticast mode [ 2253.076378][ T3953] bridge0: port 3(batadv0) entered blocking state [ 2253.105915][ T5848] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2253.110398][ T3953] bridge0: port 3(batadv0) entered disabled state [ 2253.128068][ T3953] bridge0: port 3(batadv0) entered blocking state [ 2253.134794][ T3953] bridge0: port 3(batadv0) entered forwarding state [ 2253.305761][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 2253.318129][ T5848] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 2253.345826][ T5848] usb 3-1: config 0 has no interface number 0 [ 2253.352236][ T5848] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2253.406303][T15269] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2253.408380][ T5848] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2253.415669][T15269] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2253.465675][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2253.473739][ T5848] usb 3-1: Product: syz [ 2253.497028][ T5848] usb 3-1: Manufacturer: syz [ 2253.501794][ T5848] usb 3-1: SerialNumber: syz [ 2253.528170][ T5848] usb 3-1: config 0 descriptor?? [ 2253.539834][ T5848] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2253.565667][ T5848] em28xx 3-1:0.132: Video interface 132 found: [ 2253.706972][ T3956] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8251'. [ 2253.762934][ T3951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2253.773224][ T3951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2254.025294][ T5943] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 2254.087002][ T5848] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 2254.199314][ T5943] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2254.230415][ T5943] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2254.262618][ T5943] usb 4-1: string descriptor 0 read error: -22 [ 2254.270565][ T5943] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2254.279865][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.305802][ T5943] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 2254.463216][ T3972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8257'. [ 2254.498236][ T5848] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 2254.521365][ T5848] em28xx 3-1:0.132: board has no eeprom [ 2254.522190][ T5943] usb 4-1: USB disconnect, device number 115 [ 2254.585869][ T5848] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2254.605925][ T5848] em28xx 3-1:0.132: analog set to bulk mode. [ 2254.616615][T25206] em28xx 3-1:0.132: Registering V4L2 extension [ 2254.629937][ T5848] usb 3-1: USB disconnect, device number 104 [ 2254.648132][ T5848] em28xx 3-1:0.132: Disconnecting em28xx [ 2254.715269][T15724] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2254.860837][T25206] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 2254.869501][T25206] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 2254.886885][T25206] em28xx 3-1:0.132: No AC97 audio processor [ 2254.890459][T15724] usb 2-1: Using ep0 maxpacket: 8 [ 2254.901133][T15724] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2254.906985][T25206] usb 3-1: Decoder not found [ 2254.910493][T15724] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2254.913986][T25206] em28xx 3-1:0.132: failed to create media graph [ 2254.914024][T25206] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 2254.924088][T15724] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2254.924121][T15724] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2254.924149][T15724] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2254.924205][T15724] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2254.924231][T15724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2255.003829][T25206] em28xx 3-1:0.132: Remote control support is not available for this card. [ 2255.013410][ T5848] em28xx 3-1:0.132: Closing input extension [ 2255.026410][ T5848] em28xx 3-1:0.132: Freeing device [ 2255.161519][T15724] usb 2-1: usb_control_msg returned -32 [ 2255.177729][T15724] usbtmc 2-1:16.0: can't read capabilities [ 2255.256893][ T3985] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 2255.263486][ T3985] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2255.291424][ T3985] vhci_hcd vhci_hcd.0: Device attached [ 2255.393345][ T3974] fuse: Unknown parameter 'ycDmHvEmV; [ 2255.393345][ T3974] 0x0000000000000004' [ 2255.415810][T25206] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2255.556015][ T5848] usb 38-1: SetAddress Request (2) to port 0 [ 2255.563283][ T5848] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2255.575326][T15724] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2255.575952][T25206] usb 6-1: Using ep0 maxpacket: 16 [ 2255.588922][ T5943] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 2255.603505][T25206] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2255.611004][T25206] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 2255.620671][T25206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2255.633158][T25206] usb 6-1: config 0 descriptor?? [ 2255.657699][ T3995] FAULT_INJECTION: forcing a failure. [ 2255.657699][ T3995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2255.671864][ T3995] CPU: 0 UID: 0 PID: 3995 Comm: syz.0.8262 Not tainted syzkaller #0 PREEMPT(full) [ 2255.671891][ T3995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2255.671904][ T3995] Call Trace: [ 2255.671916][ T3995] [ 2255.671926][ T3995] dump_stack_lvl+0x189/0x250 [ 2255.671957][ T3995] ? __pfx____ratelimit+0x10/0x10 [ 2255.671992][ T3995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2255.672020][ T3995] ? __pfx__printk+0x10/0x10 [ 2255.672053][ T3995] ? __might_fault+0xb0/0x130 [ 2255.672094][ T3995] should_fail_ex+0x414/0x560 [ 2255.672127][ T3995] _copy_from_user+0x2d/0xb0 [ 2255.672151][ T3995] get_compat_msghdr+0xad/0x4a0 [ 2255.672183][ T3995] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2255.672212][ T3995] ? ___sys_sendmsg+0x22f/0x2a0 [ 2255.672237][ T3995] ? kfree+0x4d/0x6d0 [ 2255.672270][ T3995] ___sys_sendmsg+0x193/0x2a0 [ 2255.672300][ T3995] ? __pfx____sys_sendmsg+0x10/0x10 [ 2255.672364][ T3995] ? __fget_files+0x2a/0x420 [ 2255.672396][ T3995] ? __fget_files+0x3a0/0x420 [ 2255.672440][ T3995] __sys_sendmmsg+0x28e/0x430 [ 2255.672473][ T3995] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2255.672511][ T3995] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2255.672571][ T3995] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2255.672620][ T3995] __do_fast_syscall_32+0xb6/0x2b0 [ 2255.672645][ T3995] ? lockdep_hardirqs_on+0x9c/0x150 [ 2255.672672][ T3995] do_fast_syscall_32+0x34/0x80 [ 2255.672697][ T3995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2255.672725][ T3995] RIP: 0023:0xf7f68539 [ 2255.672744][ T3995] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2255.672764][ T3995] RSP: 002b:00000000f541455c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2255.672796][ T3995] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001c00 [ 2255.672813][ T3995] RDX: 0000000000000159 RSI: 0000000000040840 RDI: 0000000000000000 [ 2255.672827][ T3995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2255.672841][ T3995] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2255.672855][ T3995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2255.672887][ T3995] [ 2255.890005][ C0] vkms_vblank_simulate: vblank timer overrun [ 2255.915292][T15724] usb 3-1: Using ep0 maxpacket: 8 [ 2255.923108][T15724] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2255.935748][ T5943] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2255.946274][T15724] usb 3-1: config 57 has too many interfaces: 38, using maximum allowed: 32 [ 2255.955430][ T5943] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 2255.964641][T15724] usb 3-1: config 57 has an invalid interface number: 255 but max is 37 [ 2255.973301][ T5943] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2255.982611][T15724] usb 3-1: config 57 has 1 interface, different from the descriptor's value: 38 [ 2255.991827][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2255.999961][T15724] usb 3-1: config 57 has no interface number 0 [ 2256.007187][T15724] usb 3-1: too many endpoints for config 57 interface 255 altsetting 1: 241, using maximum allowed: 30 [ 2256.021705][T15724] usb 3-1: config 57 interface 255 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 2256.035235][T15724] usb 3-1: config 57 interface 255 has no altsetting 0 [ 2256.045481][T15724] usb 3-1: string descriptor 0 read error: -22 [ 2256.051837][T15724] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 2256.062979][ T5943] usb 4-1: config 0 descriptor?? [ 2256.089488][T15724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2256.337333][ T3990] FAULT_INJECTION: forcing a failure. [ 2256.337333][ T3990] name failslab, interval 1, probability 0, space 0, times 0 [ 2256.357781][ T3990] CPU: 1 UID: 0 PID: 3990 Comm: syz.3.8261 Not tainted syzkaller #0 PREEMPT(full) [ 2256.357814][ T3990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2256.357828][ T3990] Call Trace: [ 2256.357839][ T3990] [ 2256.357849][ T3990] dump_stack_lvl+0x189/0x250 [ 2256.357882][ T3990] ? __pfx____ratelimit+0x10/0x10 [ 2256.357920][ T3990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2256.357946][ T3990] ? __pfx__printk+0x10/0x10 [ 2256.357980][ T3990] ? __pfx___might_resched+0x10/0x10 [ 2256.357998][ T3990] ? fs_reclaim_acquire+0x7d/0x100 [ 2256.358027][ T3990] should_fail_ex+0x414/0x560 [ 2256.358064][ T3990] should_failslab+0xa8/0x100 [ 2256.358101][ T3990] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2256.358131][ T3990] ? security_inode_alloc+0x39/0x330 [ 2256.358157][ T3990] security_inode_alloc+0x39/0x330 [ 2256.358179][ T3990] inode_init_always_gfp+0x9ed/0xdc0 [ 2256.358222][ T3990] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 2256.358251][ T3990] alloc_inode+0x82/0x1b0 [ 2256.358284][ T3990] new_inode+0x22/0x170 [ 2256.358312][ T3990] __debugfs_create_file+0x14d/0x4f0 [ 2256.358337][ T3990] debugfs_create_file_full+0x3f/0x60 [ 2256.358373][ T3990] ref_tracker_dir_debugfs+0x14e/0x270 [ 2256.358404][ T3990] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2256.358456][ T3990] ? trace_kmalloc+0x1f/0xd0 [ 2256.358475][ T3990] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 2256.358508][ T3990] ? __raw_spin_lock_init+0x45/0x100 [ 2256.358543][ T3990] alloc_netdev_mqs+0x272/0x11b0 [ 2256.358572][ T3990] ? __pfx_bond_setup+0x10/0x10 [ 2256.358600][ T3990] rtnl_create_link+0x31f/0xd10 [ 2256.358628][ T3990] rtnl_newlink_create+0x25c/0xb00 [ 2256.358656][ T3990] ? __lock_acquire+0xab9/0xd20 [ 2256.358692][ T3990] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2256.358722][ T3990] ? __pfx___mutex_lock+0x10/0x10 [ 2256.358754][ T3990] ? ns_capable+0x8a/0xf0 [ 2256.358775][ T3990] rtnl_newlink+0x16e4/0x1c80 [ 2256.358792][ T3990] ? netlink_deliver_tap+0x19c/0x1b0 [ 2256.358835][ T3990] ? __pfx_rtnl_newlink+0x10/0x10 [ 2256.358885][ T3990] ? kasan_quarantine_put+0xdd/0x220 [ 2256.358911][ T3990] ? lockdep_hardirqs_on+0x9c/0x150 [ 2256.358931][ T3990] ? nlmon_xmit+0xb0/0x100 [ 2256.358951][ T3990] ? kmem_cache_free+0x19b/0x690 [ 2256.358995][ T3990] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2256.359023][ T3990] ? lockdep_hardirqs_on+0x9c/0x150 [ 2256.359044][ T3990] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2256.359064][ T3990] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2256.359089][ T3990] ? __dev_queue_xmit+0x27b/0x3b50 [ 2256.359115][ T3990] ? __dev_queue_xmit+0x27b/0x3b50 [ 2256.359142][ T3990] ? __dev_queue_xmit+0x27b/0x3b50 [ 2256.359172][ T3990] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2256.359201][ T3990] ? kasan_save_track+0x3e/0x80 [ 2256.359221][ T3990] ? __kasan_slab_alloc+0x6c/0x80 [ 2256.359246][ T3990] ? __lock_acquire+0xab9/0xd20 [ 2256.359292][ T3990] ? __pfx_rtnl_newlink+0x10/0x10 [ 2256.359316][ T3990] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2256.359342][ T3990] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2256.359363][ T3990] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2256.359383][ T3990] ? ref_tracker_free+0x63a/0x7d0 [ 2256.359404][ T3990] ? __asan_memcpy+0x40/0x70 [ 2256.359423][ T3990] ? __pfx_ref_tracker_free+0x10/0x10 [ 2256.359450][ T3990] ? __skb_clone+0x63/0x7a0 [ 2256.359490][ T3990] netlink_rcv_skb+0x208/0x470 [ 2256.359514][ T3990] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2256.359537][ T3990] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2256.359563][ T3990] ? netlink_deliver_tap+0x2e/0x1b0 [ 2256.359588][ T3990] netlink_unicast+0x82c/0x9e0 [ 2256.359635][ T3990] ? __pfx_netlink_unicast+0x10/0x10 [ 2256.359671][ T3990] ? netlink_sendmsg+0x642/0xb30 [ 2256.359697][ T3990] ? skb_put+0x11b/0x210 [ 2256.359718][ T3990] netlink_sendmsg+0x805/0xb30 [ 2256.359746][ T3990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2256.359776][ T3990] ? __import_iovec+0x5d4/0x7f0 [ 2256.359796][ T3990] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2256.359825][ T3990] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2256.359855][ T3990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2256.359873][ T3990] __sock_sendmsg+0x21c/0x270 [ 2256.359905][ T3990] ____sys_sendmsg+0x505/0x830 [ 2256.359941][ T3990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2256.359986][ T3990] ___sys_sendmsg+0x21f/0x2a0 [ 2256.360011][ T3990] ? __pfx____sys_sendmsg+0x10/0x10 [ 2256.360066][ T3990] ? __fget_files+0x2a/0x420 [ 2256.360099][ T3990] ? __fget_files+0x3a0/0x420 [ 2256.360144][ T3990] __sys_sendmsg+0x164/0x220 [ 2256.360166][ T3990] ? __pfx___sys_sendmsg+0x10/0x10 [ 2256.360198][ T3990] ? lockdep_hardirqs_on+0x9c/0x150 [ 2256.360226][ T3990] __do_fast_syscall_32+0xb6/0x2b0 [ 2256.360259][ T3990] do_fast_syscall_32+0x34/0x80 [ 2256.360282][ T3990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2256.360307][ T3990] RIP: 0023:0xf7f68539 [ 2256.360322][ T3990] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2256.360337][ T3990] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2256.360355][ T3990] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800006c0 [ 2256.360373][ T3990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2256.360387][ T3990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2256.360400][ T3990] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2256.360412][ T3990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2256.360444][ T3990] [ 2256.363938][ T3990] debugfs: out of free dentries, can not create file 'netdev@ffff88803c8cc610' [ 2257.086834][ T3990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2257.151679][ T3986] vhci_hcd: connection reset by peer [ 2257.167050][ T5943] usb 4-1: USB disconnect, device number 116 [ 2257.167435][ T1279] vhci_hcd: stop threads [ 2257.180790][ T1279] vhci_hcd: release socket [ 2257.185274][T15724] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.2-1, 00:00:00:00:00:00. [ 2257.220147][ T1279] vhci_hcd: disconnect device [ 2257.477137][ T8538] usb 2-1: USB disconnect, device number 120 [ 2257.490646][ T3993] delete_channel: no stack [ 2257.537232][T15724] usb 3-1: USB disconnect, device number 105 [ 2257.880670][ T4015] netlink: 'syz.2.8264': attribute type 6 has an invalid length. [ 2258.346337][T25206] usbhid 6-1:0.0: can't add hid device: -71 [ 2258.352375][T25206] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2258.381401][T25206] usb 6-1: USB disconnect, device number 111 [ 2258.655479][T15724] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 2258.786771][ T4044] syzkaller1: entered promiscuous mode [ 2258.808070][ T4044] syzkaller1: entered allmulticast mode [ 2258.818579][T15724] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2258.848084][T15724] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 2258.865477][T31458] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2258.899911][T15724] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2258.948956][T15724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.998731][T15724] usb 4-1: config 0 descriptor?? [ 2259.109615][T31458] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2259.129726][T31458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.158965][T31458] usb 3-1: Product: syz [ 2259.169506][T31458] usb 3-1: Manufacturer: syz [ 2259.180004][T31458] usb 3-1: SerialNumber: syz [ 2259.203978][T31458] usb 3-1: config 0 descriptor?? [ 2259.221895][ T4031] bond1: option mode: unable to set because the bond device is up [ 2259.291322][T31458] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2259.310016][T15724] usb 4-1: USB disconnect, device number 117 [ 2259.337106][T31458] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2259.370889][T31458] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2259.392582][T31458] usb 3-1: media controller created [ 2259.434264][T31458] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2259.637023][ T4055] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8270'. [ 2259.680408][T31458] DVB: Unable to find symbol mt352_attach() [ 2259.688878][ T4055] fuse: Bad value for 'user_id' [ 2259.693794][ T4055] fuse: Bad value for 'user_id' [ 2259.813723][T31458] DVB: Unable to find symbol nxt6000_attach() [ 2259.930228][T31458] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2260.029109][T31458] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input178 [ 2260.206814][T31458] dvb-usb: schedule remote query interval to 1000 msecs. [ 2260.214791][T31458] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2260.306082][T31458] dvb-usb: bulk message failed: -22 (7/0) [ 2260.311891][T31458] dvb-usb: bulk message failed: -22 (7/0) [ 2260.338817][ T4064] usb usb8: usbfs: process 4064 (syz.5.8272) did not claim interface 0 before use [ 2260.357332][ T4064] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2260.635811][ T5848] usb 38-1: device descriptor read/8, error -110 [ 2260.815421][T31458] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2260.965210][T31458] usb 6-1: Using ep0 maxpacket: 16 [ 2261.010391][T31458] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2261.037282][ T5848] usb usb38-port1: attempt power cycle [ 2261.052729][T31458] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2261.077487][T31458] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.116220][T31458] usb 6-1: Product: syz [ 2261.142403][T31458] usb 6-1: Manufacturer: syz [ 2261.168170][T31458] usb 6-1: SerialNumber: syz [ 2261.190589][T31458] usb 6-1: config 0 descriptor?? [ 2261.215103][T31458] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2261.238954][T31458] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 2261.275340][T15724] dvb-usb: bulk message failed: -22 (7/0) [ 2261.283625][T15724] dvb-usb: error while querying for an remote control event. [ 2261.472131][T15724] usb 3-1: USB disconnect, device number 106 [ 2261.606697][T15724] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2261.617243][ T5848] usb usb38-port1: unable to enumerate USB device [ 2261.655692][ T8538] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2261.815865][ T8538] usb 4-1: Using ep0 maxpacket: 8 [ 2261.834687][ T8538] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 2261.845524][ T4069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2261.863459][ T8538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.867513][ T4069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2261.879510][ T8538] usb 4-1: Product: syz [ 2261.884138][ T8538] usb 4-1: Manufacturer: syz [ 2261.889550][ T8538] usb 4-1: SerialNumber: syz [ 2261.959012][T31458] em28xx 6-1:0.0: chip ID is em2765 [ 2262.007324][ T5943] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2262.017322][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 2262.017342][ T30] audit: type=1326 audit(1759697008.575:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4097 comm="syz.2.8283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 2262.060907][ T4098] syzkaller1: entered promiscuous mode [ 2262.063495][ T30] audit: type=1326 audit(1759697008.575:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4097 comm="syz.2.8283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 2262.067430][ T4098] syzkaller1: entered allmulticast mode [ 2262.098723][ T30] audit: type=1326 audit(1759697008.605:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4097 comm="syz.2.8283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=47 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 2262.123073][ T30] audit: type=1326 audit(1759697008.605:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4097 comm="syz.2.8283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 2262.146535][ T30] audit: type=1326 audit(1759697008.605:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4097 comm="syz.2.8283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 2262.176688][ T30] audit: type=1326 audit(1759697008.605:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4097 comm="syz.2.8283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 2262.199950][ T30] audit: type=1326 audit(1759697008.605:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4097 comm="syz.2.8283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 2262.208922][ T5943] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2262.230807][ T30] audit: type=1326 audit(1759697008.605:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4097 comm="syz.2.8283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 2262.232947][ T5943] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2262.254853][ T30] audit: type=1326 audit(1759697008.605:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4097 comm="syz.2.8283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 2262.268633][ T5943] usb 2-1: string descriptor 0 read error: -22 [ 2262.288042][ T30] audit: type=1326 audit(1759697008.615:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4097 comm="syz.2.8283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 2262.293203][ T5943] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2262.371855][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.409018][ T4100] netlink: 'syz.2.8284': attribute type 3 has an invalid length. [ 2262.436681][ T8538] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 2262.451624][ T8538] mxuport 4-1:254.0: probe with driver mxuport failed with error -5 [ 2262.491715][ T8538] usb 4-1: USB disconnect, device number 118 [ 2262.550509][ T5943] usb 2-1: reset high-speed USB device number 121 using dummy_hcd [ 2262.572941][T31458] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2262.582110][T31458] em28xx 6-1:0.0: board has no eeprom [ 2262.616678][ T4094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2262.634214][ T4094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2263.193776][ T4116] tipc: New replicast peer: 255.255.255.255 [ 2263.201520][ T4116] tipc: Enabled bearer , priority 10 [ 2263.212433][ T4116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8286'. [ 2263.233384][ T4116] tipc: Disabling bearer [ 2263.285390][ T5943] usb 2-1: device descriptor read/64, error -71 [ 2263.535463][ T5943] usb 2-1: reset high-speed USB device number 121 using dummy_hcd [ 2263.677544][ T4069] em28xx 6-1:0.0: writing to i2c device at 0x8 failed (error=-5) [ 2263.745352][T31458] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2263.753797][T31458] em28xx 6-1:0.0: dvb set to bulk mode. [ 2263.764132][ T4094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2263.774211][T15724] em28xx 6-1:0.0: Binding DVB extension [ 2263.787822][ T4094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2263.799517][T31458] usb 6-1: USB disconnect, device number 112 [ 2263.858990][T31458] em28xx 6-1:0.0: Disconnecting em28xx [ 2263.957852][ T5943] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2263.989406][T15724] em28xx 6-1:0.0: Registering input extension [ 2264.024744][ T5943] usb 2-1: device firmware changed [ 2264.035232][T31458] em28xx 6-1:0.0: Closing input extension [ 2264.071967][ T5943] usb 2-1: USB disconnect, device number 121 [ 2264.092986][T31458] em28xx 6-1:0.0: Freeing device [ 2264.546847][ T5943] usb 2-1: new low-speed USB device number 122 using dummy_hcd [ 2264.695299][ T5943] usb 2-1: device descriptor read/64, error -71 [ 2264.799305][ T5848] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2264.874908][ T4143] loop6: detected capacity change from 0 to 524287999 [ 2264.945248][ T5943] usb 2-1: new low-speed USB device number 123 using dummy_hcd [ 2264.956364][ T5848] usb 6-1: Using ep0 maxpacket: 32 [ 2264.972550][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2265.010979][ T5848] usb 6-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 2265.024640][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.050127][ T5848] usb 6-1: config 0 descriptor?? [ 2265.095620][ T5943] usb 2-1: device descriptor read/64, error -71 [ 2265.245759][ T5943] usb usb2-port1: attempt power cycle [ 2265.268887][ T4151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8296'. [ 2265.278200][T15724] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2265.281052][ T5848] cdc_subset 6-1:0.0: probe with driver cdc_subset failed with error -22 [ 2265.465542][T15724] usb 4-1: Using ep0 maxpacket: 8 [ 2265.477568][ T897] usb 6-1: USB disconnect, device number 113 [ 2265.490759][T15724] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2265.500568][T15724] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2265.511347][T15724] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 2265.524832][T15724] usb 4-1: config 8 interface 0 has no altsetting 0 [ 2265.536910][T15724] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2265.546351][T15724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2265.554425][T15724] usb 4-1: Product: syz [ 2265.559232][T15724] usb 4-1: Manufacturer: syz [ 2265.563928][T15724] usb 4-1: SerialNumber: syz [ 2265.585391][ T5943] usb 2-1: new low-speed USB device number 124 using dummy_hcd [ 2265.606588][ T5943] usb 2-1: device descriptor read/8, error -71 [ 2265.838319][ T4145] fuse: Invalid rootmode [ 2265.855346][ T5943] usb 2-1: new low-speed USB device number 125 using dummy_hcd [ 2265.964748][ T5943] usb 2-1: device descriptor read/8, error -71 [ 2265.978359][T15724] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2266.005260][T15724] usb 4-1: selecting invalid altsetting 0 [ 2266.076334][T15724] snd-usb-audio 4-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 2266.086344][ T5943] usb usb2-port1: unable to enumerate USB device [ 2266.103368][T15724] usb 4-1: USB disconnect, device number 119 [ 2266.194681][ T2518] udevd[2518]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2267.631045][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2267.631068][ T30] audit: type=1326 audit(1759697014.185:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4176 comm="syz.1.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2267.701264][ T30] audit: type=1326 audit(1759697014.185:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4176 comm="syz.1.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2267.724372][ T30] audit: type=1326 audit(1759697014.185:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4176 comm="syz.1.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2267.748537][ T30] audit: type=1326 audit(1759697014.185:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4176 comm="syz.1.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2267.771831][ T30] audit: type=1326 audit(1759697014.185:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4176 comm="syz.1.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2267.796113][ T30] audit: type=1326 audit(1759697014.185:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4176 comm="syz.1.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2267.820375][ T30] audit: type=1326 audit(1759697014.185:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4176 comm="syz.1.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2267.843148][ T30] audit: type=1326 audit(1759697014.185:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4176 comm="syz.1.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2267.914930][ T30] audit: type=1326 audit(1759697014.225:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4176 comm="syz.1.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2267.965668][ T30] audit: type=1326 audit(1759697014.225:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4176 comm="syz.1.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2268.364045][ T4193] 8021q: VLANs not supported on gre0 [ 2268.576786][T15724] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 2268.629151][ T4200] netlink: 'syz.5.8314': attribute type 7 has an invalid length. [ 2268.643307][ T4200] netlink: 'syz.5.8314': attribute type 8 has an invalid length. [ 2268.654911][ T4200] netlink: 'syz.5.8314': attribute type 9 has an invalid length. [ 2268.749515][T15724] usb 2-1: config 5 has an invalid interface number: 141 but max is 1 [ 2268.764699][T15724] usb 2-1: config 5 has an invalid interface number: 34 but max is 1 [ 2268.783056][T15724] usb 2-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 2268.807598][T15724] usb 2-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 2268.835194][T15724] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 2268.855193][T15724] usb 2-1: config 5 has no interface number 0 [ 2268.861438][T15724] usb 2-1: config 5 has no interface number 1 [ 2268.875619][T15724] usb 2-1: config 5 interface 34 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 2268.937547][T15724] usb 2-1: config 5 interface 34 altsetting 0 endpoint 0xD has invalid maxpacket 11909, setting to 64 [ 2268.965757][ T8538] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2268.983796][T15724] usb 2-1: config 5 interface 34 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 13 [ 2269.014580][T15724] usb 2-1: config 5 interface 141 has no altsetting 0 [ 2269.028358][T15724] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=34.14 [ 2269.055216][T15724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2269.085191][T15724] usb 2-1: Product: syz [ 2269.089484][T15724] usb 2-1: Manufacturer: syz [ 2269.094159][T15724] usb 2-1: SerialNumber: syz [ 2269.143116][ T8538] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2269.166001][ T8538] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2269.177746][ T8538] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2269.188731][ T8538] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.205080][ T4203] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2269.225973][ T4208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8316'. [ 2269.272100][ T8538] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2269.317408][ T4208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8316'. [ 2269.517531][ T4203] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 2269.561505][ T8538] usb 6-1: USB disconnect, device number 114 [ 2269.693872][ T4214] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8318'. [ 2269.708222][T15724] usb 2-1: USB disconnect, device number 126 [ 2269.896453][ T4214] gretap0: entered promiscuous mode [ 2270.137960][ T4223] loop6: detected capacity change from 0 to 524287999 [ 2270.442224][ T4227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8324'. [ 2270.475907][ T8538] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2270.615909][ T8538] usb 4-1: device descriptor read/64, error -71 [ 2270.862849][ T8538] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2270.886271][ T5848] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2270.991298][ T4242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8329'. [ 2271.005918][T31784] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2271.013782][ T8538] usb 4-1: device descriptor read/64, error -71 [ 2271.049988][ T4226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2271.067060][ T4226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2271.091698][ T5848] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2271.100394][ T5848] usb 6-1: no configurations [ 2271.105037][ T5848] usb 6-1: can't read configurations, error -22 [ 2271.106976][T15724] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2271.126329][ T8538] usb usb4-port1: attempt power cycle [ 2271.166604][T31784] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2271.184586][T31784] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2271.194379][T31784] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2271.207294][T31784] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2271.217300][T31784] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2271.226982][T31784] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2271.238686][T31784] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2271.247977][T31784] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2271.257669][T31784] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2271.269411][T31784] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2271.277928][T31784] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2271.287640][T31784] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2271.299267][T31784] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2271.305345][T15724] usb 2-1: Using ep0 maxpacket: 16 [ 2271.312210][T31784] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2271.314145][T15724] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 2271.322182][T31784] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2271.331605][T15724] usb 2-1: config 0 has no interface number 0 [ 2271.341941][T31784] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2271.348721][T15724] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2271.369992][T31784] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2271.379229][T15724] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2271.382211][T15724] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 2271.390998][T31784] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2271.399419][T15724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2271.410976][T31784] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2271.418832][T15724] usb 2-1: Product: syz [ 2271.429866][T15724] usb 2-1: Manufacturer: syz [ 2271.434843][T15724] usb 2-1: SerialNumber: syz [ 2271.435097][T31784] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2271.449963][T31784] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2271.456067][T15724] usb 2-1: config 0 descriptor?? [ 2271.462620][T31784] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2271.474782][T31784] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2271.485880][ T8538] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2271.493874][T31784] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2271.506295][T31784] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2271.517122][T31784] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2271.527321][T31784] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2271.537225][ T8538] usb 4-1: device descriptor read/8, error -71 [ 2271.544004][T31784] usb 3-1: Product: syz [ 2271.549325][T31784] usb 3-1: Manufacturer: syz [ 2271.554047][T31784] usb 3-1: SerialNumber: syz [ 2271.564126][T31784] usb 3-1: config 0 descriptor?? [ 2271.579812][T31784] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 2271.688538][T15724] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 2271.713463][T15724] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 2271.748395][T15724] usb 2-1: USB disconnect, device number 127 [ 2271.763069][ T4245] "syz.5.8330" (4245) uses obsolete ecb(arc4) skcipher [ 2271.776099][ T8538] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2271.810684][ T8538] usb 4-1: device descriptor read/8, error -71 [ 2271.812771][ T5943] usb 3-1: USB disconnect, device number 107 [ 2271.839399][ T5943] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 2271.936327][ T8538] usb usb4-port1: unable to enumerate USB device [ 2272.065601][ T4252] netlink: 'syz.5.8333': attribute type 10 has an invalid length. [ 2272.077457][ T4252] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2272.278829][ T4263] loop6: detected capacity change from 0 to 63 [ 2272.291842][ T4263] Buffer I/O error on dev loop6, logical block 0, async page read [ 2272.301312][ T4263] Buffer I/O error on dev loop6, logical block 0, async page read [ 2272.311379][ T5994] Buffer I/O error on dev loop6, logical block 0, async page read [ 2272.326933][ T5994] Buffer I/O error on dev loop6, logical block 0, async page read [ 2272.345437][ T5994] Buffer I/O error on dev loop6, logical block 0, async page read [ 2272.353989][ T5994] Buffer I/O error on dev loop6, logical block 0, async page read [ 2272.363435][ T5994] Buffer I/O error on dev loop6, logical block 0, async page read [ 2272.766740][ T4283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8346'. [ 2272.845344][ T5943] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2272.853018][T15724] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 2273.005330][ T5943] usb 2-1: Using ep0 maxpacket: 8 [ 2273.014019][ T5943] usb 2-1: config 0 has an invalid interface number: 176 but max is 1 [ 2273.016052][ T4267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2273.032363][ T5943] usb 2-1: config 0 has no interface number 1 [ 2273.037021][ T4267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2273.046912][ T5943] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 2273.059988][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.069876][T15724] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2273.088293][T15724] usb 6-1: no configurations [ 2273.096213][ T5943] usb 2-1: config 0 descriptor?? [ 2273.102964][T15724] usb 6-1: can't read configurations, error -22 [ 2273.114979][ T5943] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 2273.148893][ T5943] usb 2-1: unknown number of interfaces: 2 [ 2273.345869][ T4277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8343'. [ 2273.520455][ T8538] usb 2-1: USB disconnect, device number 2 [ 2273.772192][ T4298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8351'. [ 2273.786986][ T4301] FAULT_INJECTION: forcing a failure. [ 2273.786986][ T4301] name failslab, interval 1, probability 0, space 0, times 0 [ 2273.801307][ T4300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8351'. [ 2273.811782][ T4301] CPU: 1 UID: 0 PID: 4301 Comm: syz.5.8352 Not tainted syzkaller #0 PREEMPT(full) [ 2273.811814][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2273.811830][ T4301] Call Trace: [ 2273.811840][ T4301] [ 2273.811850][ T4301] dump_stack_lvl+0x189/0x250 [ 2273.811884][ T4301] ? __pfx____ratelimit+0x10/0x10 [ 2273.811921][ T4301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2273.811949][ T4301] ? __pfx__printk+0x10/0x10 [ 2273.811990][ T4301] ? __pfx___might_resched+0x10/0x10 [ 2273.812021][ T4301] should_fail_ex+0x414/0x560 [ 2273.812056][ T4301] should_failslab+0xa8/0x100 [ 2273.812093][ T4301] __kmalloc_noprof+0xcb/0x7f0 [ 2273.812122][ T4301] ? kfree+0x4d/0x6d0 [ 2273.812146][ T4301] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2273.812184][ T4301] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2273.812217][ T4301] ? tomoyo_domain+0xd9/0x130 [ 2273.812254][ T4301] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2273.812279][ T4301] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2273.812307][ T4301] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2273.812360][ T4301] ? __lock_acquire+0xab9/0xd20 [ 2273.812406][ T4301] ? __fget_files+0x2a/0x420 [ 2273.812445][ T4301] ? __fget_files+0x3a0/0x420 [ 2273.812478][ T4301] ? __fget_files+0x2a/0x420 [ 2273.812516][ T4301] security_file_ioctl_compat+0xcb/0x2d0 [ 2273.812549][ T4301] __ia32_compat_sys_ioctl+0x128/0x840 [ 2273.812583][ T4301] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2273.812612][ T4301] ? __fget_files+0x3a0/0x420 [ 2273.812654][ T4301] ? fput+0xa0/0xd0 [ 2273.812678][ T4301] ? ksys_write+0x22a/0x250 [ 2273.812719][ T4301] ? lockdep_hardirqs_on+0x9c/0x150 [ 2273.812745][ T4301] __do_fast_syscall_32+0xb6/0x2b0 [ 2273.812770][ T4301] ? lockdep_hardirqs_on+0x9c/0x150 [ 2273.812796][ T4301] do_fast_syscall_32+0x34/0x80 [ 2273.812821][ T4301] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2273.812849][ T4301] RIP: 0023:0xf7f45539 [ 2273.812868][ T4301] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2273.812889][ T4301] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2273.812913][ T4301] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05605 [ 2273.812930][ T4301] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 2273.812944][ T4301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2273.812956][ T4301] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2273.812971][ T4301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2273.813003][ T4301] [ 2273.813146][ T4301] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2275.111472][ T4323] wireguard5: entered promiscuous mode [ 2275.117355][ T4323] wireguard5: entered allmulticast mode [ 2275.534023][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8359'. [ 2277.035803][T26242] Bluetooth: hci3: command 0x0405 tx timeout [ 2277.107493][ T4344] fuse: Unknown parameter 'ycDmHvEmV; [ 2277.107493][ T4344] 0x0000000000000006' [ 2277.635226][ T897] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2277.785809][ T897] usb 4-1: Using ep0 maxpacket: 16 [ 2277.851844][ T897] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 2277.860381][ T897] usb 4-1: config 0 has no interface number 0 [ 2277.867041][ T897] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2277.884947][ T897] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 2277.968222][ T897] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2277.985378][ T897] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2277.993522][ T897] usb 4-1: Product: syz [ 2277.998749][ T897] usb 4-1: SerialNumber: syz [ 2278.006406][ T897] usb 4-1: config 0 descriptor?? [ 2278.032325][ T897] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 2278.040973][ T8538] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2278.044167][ T897] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input183 [ 2278.184329][ T4360] : renamed from bond0 [ 2278.228625][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 2278.229666][ T4349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2278.250021][ T4349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2278.269063][ T8538] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2278.285344][ T8538] usb 3-1: no configurations [ 2278.290275][ T8538] usb 3-1: can't read configurations, error -22 [ 2278.425829][ T5848] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2278.470727][ C1] cm109_urb_ctl_callback: 18 callbacks suppressed [ 2278.470751][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2278.474674][ T874] usb 4-1: USB disconnect, device number 124 [ 2278.477228][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2278.508220][ T874] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2278.587834][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2278.599015][ T5848] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 2278.615783][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2278.636626][ T5848] usb 2-1: config 0 descriptor?? [ 2278.904184][ T4375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8374'. [ 2278.913583][ T4375] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8374'. [ 2278.928320][ T4375] netlink: 'syz.2.8374': attribute type 3 has an invalid length. [ 2278.937702][ T4375] netlink: 'syz.2.8374': attribute type 1 has an invalid length. [ 2280.155565][T15724] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2280.345341][T15724] usb 3-1: Using ep0 maxpacket: 8 [ 2280.353956][T15724] usb 3-1: config 0 has no interfaces? [ 2280.361327][T15724] usb 3-1: config 0 has no interfaces? [ 2280.368441][T15724] usb 3-1: config 0 has no interfaces? [ 2280.377623][T15724] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2280.391691][T15724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2280.406388][T15724] usb 3-1: Product: syz [ 2280.415611][T15724] usb 3-1: Manufacturer: syz [ 2280.423083][T15724] usb 3-1: SerialNumber: syz [ 2280.448791][T15724] usb 3-1: config 0 descriptor?? [ 2280.937423][ T874] usb 3-1: USB disconnect, device number 110 [ 2281.238928][ T5848] usbhid 2-1:0.0: can't add hid device: -71 [ 2281.249200][ T5848] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2281.269170][ T5848] usb 2-1: USB disconnect, device number 3 [ 2282.489378][ T4449] ksmbd: Unknown IPC event: 1, ignore. [ 2283.360846][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.368098][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.516577][ T5848] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2283.607500][ T4479] FAULT_INJECTION: forcing a failure. [ 2283.607500][ T4479] name failslab, interval 1, probability 0, space 0, times 0 [ 2283.622011][ T4479] CPU: 1 UID: 0 PID: 4479 Comm: syz.5.8403 Not tainted syzkaller #0 PREEMPT(full) [ 2283.622042][ T4479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2283.622057][ T4479] Call Trace: [ 2283.622067][ T4479] [ 2283.622077][ T4479] dump_stack_lvl+0x189/0x250 [ 2283.622111][ T4479] ? __pfx____ratelimit+0x10/0x10 [ 2283.622146][ T4479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2283.622174][ T4479] ? __pfx__printk+0x10/0x10 [ 2283.622211][ T4479] ? __pfx___might_resched+0x10/0x10 [ 2283.622237][ T4479] ? fs_reclaim_acquire+0x7d/0x100 [ 2283.622276][ T4479] should_fail_ex+0x414/0x560 [ 2283.622310][ T4479] should_failslab+0xa8/0x100 [ 2283.622347][ T4479] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2283.622377][ T4479] ? media_pipeline_add_pad+0xa9/0x6e0 [ 2283.622408][ T4479] media_pipeline_add_pad+0xa9/0x6e0 [ 2283.622438][ T4479] __media_pipeline_start+0x787/0x21b0 [ 2283.622491][ T4479] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 2283.622522][ T4479] media_pipeline_start+0x51/0x70 [ 2283.622561][ T4479] vimc_capture_start_streaming+0x7c/0x410 [ 2283.622590][ T4479] ? do_raw_spin_unlock+0x122/0x240 [ 2283.622622][ T4479] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 2283.622662][ T4479] vb2_start_streaming+0x125/0x460 [ 2283.622699][ T4479] vb2_core_streamon+0x2e0/0x4f0 [ 2283.622735][ T4479] __video_do_ioctl+0xa59/0xc10 [ 2283.622776][ T4479] ? __pfx___video_do_ioctl+0x10/0x10 [ 2283.622823][ T4479] video_usercopy+0x82a/0x1450 [ 2283.622865][ T4479] ? __pfx___video_do_ioctl+0x10/0x10 [ 2283.622895][ T4479] ? __pfx_video_usercopy+0x10/0x10 [ 2283.622946][ T4479] ? __fget_files+0x2a/0x420 [ 2283.622983][ T4479] v4l2_ioctl+0x18a/0x1e0 [ 2283.623020][ T4479] v4l2_compat_ioctl32+0x1d7/0x260 [ 2283.623062][ T4479] __ia32_compat_sys_ioctl+0x543/0x840 [ 2283.623094][ T4479] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2283.623124][ T4479] ? __fget_files+0x3a0/0x420 [ 2283.623165][ T4479] ? fput+0xa0/0xd0 [ 2283.623189][ T4479] ? ksys_write+0x22a/0x250 [ 2283.623230][ T4479] ? lockdep_hardirqs_on+0x9c/0x150 [ 2283.623256][ T4479] __do_fast_syscall_32+0xb6/0x2b0 [ 2283.623281][ T4479] ? lockdep_hardirqs_on+0x9c/0x150 [ 2283.623307][ T4479] do_fast_syscall_32+0x34/0x80 [ 2283.623331][ T4479] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2283.623359][ T4479] RIP: 0023:0xf7f45539 [ 2283.623378][ T4479] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2283.623399][ T4479] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2283.623423][ T4479] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000040045612 [ 2283.623440][ T4479] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2283.623454][ T4479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2283.623468][ T4479] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2283.623481][ T4479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2283.623515][ T4479] [ 2283.698134][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2283.996986][ T5848] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 2283.997022][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2283.999847][ T5848] usb 4-1: config 0 descriptor?? [ 2284.218666][ T4485] ipip0: entered promiscuous mode [ 2284.234199][ T4485] ipip0: entered allmulticast mode [ 2284.298832][ T4490] loop6: detected capacity change from 0 to 63 [ 2284.323524][ T5994] Buffer I/O error on dev loop6, logical block 0, async page read [ 2284.331785][ T5994] Buffer I/O error on dev loop6, logical block 0, async page read [ 2284.352439][ T5994] Buffer I/O error on dev loop6, logical block 0, async page read [ 2284.367414][ T5994] Buffer I/O error on dev loop6, logical block 0, async page read [ 2284.384523][ T5994] Buffer I/O error on dev loop6, logical block 0, async page read [ 2284.394578][ T5994] Buffer I/O error on dev loop6, logical block 0, async page read [ 2284.415935][ T5994] Buffer I/O error on dev loop6, logical block 0, async page read [ 2284.424149][ T5994] Buffer I/O error on dev loop6, logical block 0, async page read [ 2284.433206][ T5994] ldm_validate_partition_table(): Disk read failed. [ 2284.440626][ T5994] Buffer I/O error on dev loop6, logical block 0, async page read [ 2284.461139][ T5994] Buffer I/O error on dev loop6, logical block 0, async page read [ 2284.480995][ T5994] Dev loop6: unable to read RDB block 0 [ 2284.489677][ T5994] loop6: unable to read partition table [ 2284.517801][ T4490] ldm_validate_partition_table(): Disk read failed. [ 2284.525927][ T4490] Dev loop6: unable to read RDB block 0 [ 2284.532597][ T4490] loop6: unable to read partition table [ 2284.545494][ T4490] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 2286.357675][ T5848] usbhid 4-1:0.0: can't add hid device: -71 [ 2286.382193][ T5848] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2286.402926][ T5848] usb 4-1: USB disconnect, device number 125 [ 2286.743680][ T4526] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8413'. [ 2286.862735][ T4526] input: syz1 as /devices/virtual/input/input184 [ 2286.957860][ T4531] FAULT_INJECTION: forcing a failure. [ 2286.957860][ T4531] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2286.972365][ T4531] CPU: 0 UID: 0 PID: 4531 Comm: syz.3.8414 Not tainted syzkaller #0 PREEMPT(full) [ 2286.972388][ T4531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2286.972399][ T4531] Call Trace: [ 2286.972407][ T4531] [ 2286.972415][ T4531] dump_stack_lvl+0x189/0x250 [ 2286.972440][ T4531] ? __pfx____ratelimit+0x10/0x10 [ 2286.972466][ T4531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2286.972485][ T4531] ? __pfx__printk+0x10/0x10 [ 2286.972510][ T4531] ? fs_reclaim_acquire+0x7d/0x100 [ 2286.972541][ T4531] should_fail_ex+0x414/0x560 [ 2286.972567][ T4531] prepare_alloc_pages+0x213/0x610 [ 2286.972597][ T4531] __alloc_frozen_pages_noprof+0x123/0x370 [ 2286.972626][ T4531] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2286.972657][ T4531] ? policy_nodemask+0x27c/0x720 [ 2286.972685][ T4531] alloc_pages_mpol+0x232/0x4a0 [ 2286.972713][ T4531] folio_alloc_mpol_noprof+0x39/0x70 [ 2286.972739][ T4531] shmem_alloc_and_add_folio+0x447/0xf60 [ 2286.972764][ T4531] ? filemap_get_entry+0xad/0x2f0 [ 2286.972788][ T4531] ? filemap_get_entry+0xad/0x2f0 [ 2286.972809][ T4531] ? filemap_get_entry+0xad/0x2f0 [ 2286.972833][ T4531] ? filemap_get_entry+0x28f/0x2f0 [ 2286.972858][ T4531] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2286.972883][ T4531] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 2286.972909][ T4531] shmem_get_folio_gfp+0x59d/0x1660 [ 2286.972942][ T4531] shmem_write_begin+0xf7/0x2b0 [ 2286.972969][ T4531] generic_perform_write+0x2c5/0x900 [ 2286.972996][ T4531] ? __pfx_generic_perform_write+0x10/0x10 [ 2286.973011][ T4531] ? down_write+0x162/0x1f0 [ 2286.973034][ T4531] ? file_update_time+0x2da/0x490 [ 2286.973055][ T4531] shmem_file_write_iter+0xf8/0x120 [ 2286.973079][ T4531] do_iter_readv_writev+0x623/0x8c0 [ 2286.973115][ T4531] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2286.973136][ T4531] ? rcu_read_lock_any_held+0xb3/0x120 [ 2286.973170][ T4531] vfs_writev+0x31a/0x960 [ 2286.973185][ T4531] ? vfs_write+0x956/0xb30 [ 2286.973210][ T4531] ? __pfx_vfs_writev+0x10/0x10 [ 2286.973224][ T4531] ? vfs_write+0x956/0xb30 [ 2286.973270][ T4531] __ia32_compat_sys_pwritev2+0x227/0x320 [ 2286.973299][ T4531] ? __pfx___ia32_compat_sys_pwritev2+0x10/0x10 [ 2286.973327][ T4531] ? lockdep_hardirqs_on+0x9c/0x150 [ 2286.973348][ T4531] __do_fast_syscall_32+0xb6/0x2b0 [ 2286.973366][ T4531] ? lockdep_hardirqs_on+0x9c/0x150 [ 2286.973384][ T4531] do_fast_syscall_32+0x34/0x80 [ 2286.973401][ T4531] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2286.973421][ T4531] RIP: 0023:0xf7f68539 [ 2286.973435][ T4531] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2286.973450][ T4531] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 000000000000017b [ 2286.973467][ T4531] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 2286.973478][ T4531] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 2286.973488][ T4531] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 2286.973497][ T4531] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2286.973506][ T4531] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2286.973528][ T4531] [ 2287.486812][ T4535] FAULT_INJECTION: forcing a failure. [ 2287.486812][ T4535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2287.503234][ T4535] CPU: 0 UID: 0 PID: 4535 Comm: syz.3.8416 Not tainted syzkaller #0 PREEMPT(full) [ 2287.503266][ T4535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2287.503281][ T4535] Call Trace: [ 2287.503290][ T4535] [ 2287.503300][ T4535] dump_stack_lvl+0x189/0x250 [ 2287.503333][ T4535] ? __pfx____ratelimit+0x10/0x10 [ 2287.503369][ T4535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2287.503396][ T4535] ? __pfx__printk+0x10/0x10 [ 2287.503429][ T4535] ? __might_fault+0xb0/0x130 [ 2287.503470][ T4535] should_fail_ex+0x414/0x560 [ 2287.503504][ T4535] _copy_from_user+0x2d/0xb0 [ 2287.503529][ T4535] do_sys_poll+0x242/0x1070 [ 2287.503575][ T4535] ? __pfx_do_sys_poll+0x10/0x10 [ 2287.503682][ T4535] ? rcu_read_lock_any_held+0xb3/0x120 [ 2287.503709][ T4535] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2287.503739][ T4535] ? vfs_write+0x956/0xb30 [ 2287.503786][ T4535] ? set_compat_user_sigmask+0xc1/0x1b0 [ 2287.503811][ T4535] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 2287.503835][ T4535] ? count_memcg_event_mm+0x21/0x260 [ 2287.503870][ T4535] __ia32_compat_sys_ppoll_time32+0x299/0x300 [ 2287.503911][ T4535] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 2287.503952][ T4535] ? lockdep_hardirqs_on+0x9c/0x150 [ 2287.503976][ T4535] __do_fast_syscall_32+0xb6/0x2b0 [ 2287.504001][ T4535] ? lockdep_hardirqs_on+0x9c/0x150 [ 2287.504027][ T4535] do_fast_syscall_32+0x34/0x80 [ 2287.504051][ T4535] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2287.504103][ T4535] RIP: 0023:0xf7f68539 [ 2287.504122][ T4535] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2287.504142][ T4535] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 2287.504166][ T4535] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 2287.504182][ T4535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2287.504195][ T4535] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2287.504208][ T4535] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2287.504222][ T4535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2287.504258][ T4535] [ 2287.957846][ T5848] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2288.125892][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 2288.136131][ T5848] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 2288.148367][ T5848] usb 3-1: config 0 has no interface number 0 [ 2288.165763][ T5848] usb 3-1: config 0 interface 184 has no altsetting 0 [ 2288.186597][ T5848] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2288.201857][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2288.218848][ T5848] usb 3-1: Product: syz [ 2288.231392][ T5848] usb 3-1: Manufacturer: syz [ 2288.245657][ T5848] usb 3-1: SerialNumber: syz [ 2288.256035][ T5848] usb 3-1: config 0 descriptor?? [ 2288.271667][ T5848] smsc75xx v1.0.0 [ 2288.366155][ T4548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8421'. [ 2288.946362][ T5848] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 2288.965822][ T5848] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2289.097749][ T4554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8422'. [ 2289.148212][ T5848] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 2289.161363][ T5848] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 2289.195801][ T5848] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2289.242793][ T4554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2289.258394][ T5848] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 2289.297698][ T5848] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 2289.312821][ T4557] macsec1: entered allmulticast mode [ 2289.347451][ T4557] bond0: entered allmulticast mode [ 2289.399337][ T4557] bond0: left allmulticast mode [ 2289.718877][ T4568] fuse: Unknown parameter 'ycDmHvEmV; [ 2289.718877][ T4568] 0xffffffffffffffff' [ 2290.213794][ T5848] usb 3-1: USB disconnect, device number 111 [ 2291.185940][ T5848] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2291.315304][T15724] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2291.335918][ T5848] usb 4-1: Using ep0 maxpacket: 32 [ 2291.348483][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 2291.361270][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2291.415876][ T5848] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 2291.439652][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2291.457497][ T5848] usb 4-1: config 0 descriptor?? [ 2291.477391][T15724] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2291.489318][T15724] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2291.499855][T15724] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2291.509452][T15724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2291.531631][ T4584] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2291.554863][T15724] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2291.782568][ T897] usb 2-1: USB disconnect, device number 4 [ 2291.946438][T15724] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2292.117323][ T5943] usb 4-1: USB disconnect, device number 126 [ 2292.126658][T15724] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2292.146264][T15724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2292.176043][T15724] usb 3-1: config 0 descriptor?? [ 2292.569085][ T4601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8433'. [ 2292.998859][ T4601] team0 (unregistering): Port device team_slave_0 removed [ 2293.011038][ T4601] team0 (unregistering): Port device team_slave_1 removed [ 2293.014579][ T4609] netlink: 'syz.3.8436': attribute type 10 has an invalid length. [ 2293.059207][ T4609] team0: Port device geneve1 added [ 2293.204966][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8437'. [ 2293.548210][ T5848] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2294.189357][ T4607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2294.199257][ T4607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2294.226052][ T5848] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2294.233821][ T5848] usb 2-1: no configurations [ 2294.239765][ T5848] usb 2-1: can't read configurations, error -22 [ 2294.562110][ T5943] IPVS: starting estimator thread 0... [ 2294.655580][ T4627] IPVS: using max 23 ests per chain, 55200 per kthread [ 2294.675235][ T897] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2294.781717][T15724] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2294.808664][T15724] [drm:udl_init] *ERROR* Selecting channel failed [ 2294.853258][ T897] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2294.868198][T15724] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 2294.885291][ T897] usb 6-1: config 0 has no interfaces? [ 2294.892410][T15724] [drm] Initialized udl on minor 2 [ 2294.898365][ T897] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2294.909420][T15724] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2294.918435][ T897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2294.931022][T15724] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 2294.942261][ T5943] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2294.957245][ T897] usb 6-1: config 0 descriptor?? [ 2294.973535][T15724] usb 3-1: USB disconnect, device number 112 [ 2294.980128][ T5943] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 2295.192300][ T4624] FAULT_INJECTION: forcing a failure. [ 2295.192300][ T4624] name failslab, interval 1, probability 0, space 0, times 0 [ 2295.215238][ T4624] CPU: 1 UID: 0 PID: 4624 Comm: syz.5.8441 Not tainted syzkaller #0 PREEMPT(full) [ 2295.215273][ T4624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2295.215288][ T4624] Call Trace: [ 2295.215297][ T4624] [ 2295.215307][ T4624] dump_stack_lvl+0x189/0x250 [ 2295.215341][ T4624] ? __pfx____ratelimit+0x10/0x10 [ 2295.215377][ T4624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2295.215405][ T4624] ? __pfx__printk+0x10/0x10 [ 2295.215454][ T4624] ? __pfx___might_resched+0x10/0x10 [ 2295.215485][ T4624] should_fail_ex+0x414/0x560 [ 2295.215519][ T4624] should_failslab+0xa8/0x100 [ 2295.215556][ T4624] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 2295.215589][ T4624] ? dh_data_from_key+0x15e/0x280 [ 2295.215626][ T4624] kmemdup_noprof+0x2b/0x70 [ 2295.215652][ T4624] dh_data_from_key+0x15e/0x280 [ 2295.215687][ T4624] __keyctl_dh_compute+0x2c3/0xca0 [ 2295.215728][ T4624] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 2295.215756][ T4624] ? rcu_read_lock_any_held+0xb3/0x120 [ 2295.215785][ T4624] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2295.215816][ T4624] ? vfs_write+0x956/0xb30 [ 2295.215862][ T4624] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2295.215885][ T4624] ? __pfx_vfs_write+0x10/0x10 [ 2295.215919][ T4624] compat_keyctl_dh_compute+0x16e/0x1d0 [ 2295.215949][ T4624] ? __fget_files+0x3a0/0x420 [ 2295.215982][ T4624] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 2295.216015][ T4624] ? fput+0xa0/0xd0 [ 2295.216038][ T4624] ? ksys_write+0x22a/0x250 [ 2295.216079][ T4624] ? __ia32_compat_sys_keyctl+0x3f6/0x630 [ 2295.216112][ T4624] __do_fast_syscall_32+0xb6/0x2b0 [ 2295.216145][ T4624] do_fast_syscall_32+0x34/0x80 [ 2295.216169][ T4624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2295.216196][ T4624] RIP: 0023:0xf7f45539 [ 2295.216215][ T4624] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2295.216236][ T4624] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000120 [ 2295.216260][ T4624] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000080000140 [ 2295.216276][ T4624] RDX: 00000000800000c0 RSI: 00000000fffffe4f RDI: 0000000000000000 [ 2295.216291][ T4624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2295.216305][ T4624] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2295.216318][ T4624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2295.216350][ T4624] [ 2295.218860][T15724] usb 6-1: USB disconnect, device number 119 [ 2295.551555][ T4637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8444'. [ 2295.636904][ T4637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8444'. [ 2296.756494][ T5848] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2296.905890][ T874] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2296.919643][ T4658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2296.935272][ T4658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2296.950342][ T5848] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2296.962846][ T5848] usb 3-1: no configurations [ 2296.971796][ T5848] usb 3-1: can't read configurations, error -22 [ 2297.089888][ T874] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2297.100968][ T874] usb 4-1: config 0 has no interfaces? [ 2297.109599][ T874] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2297.120553][ T874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2297.134954][ T874] usb 4-1: config 0 descriptor?? [ 2297.298108][ T4671] trusted_key: encrypted_key: insufficient parameters specified [ 2297.381930][ T874] usb 4-1: USB disconnect, device number 127 [ 2297.495995][ T4675] netlink: 'syz.5.8456': attribute type 12 has an invalid length. [ 2297.926416][ T4684] fuse: Unknown parameter 'ycDmHvEmV; [ 2297.926416][ T4684] 0x0000000000000006' [ 2297.945292][T15724] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2298.150661][T15724] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2298.157720][T15724] usb 6-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 2298.195358][T15724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2298.222012][T15724] usb 6-1: config 0 descriptor?? [ 2298.691933][T15724] zeroplus 0003:0C12:0005.005A: item fetching failed at offset 0/3 [ 2298.705455][T15724] zeroplus 0003:0C12:0005.005A: parse failed [ 2298.711944][T15724] zeroplus 0003:0C12:0005.005A: probe with driver zeroplus failed with error -22 [ 2298.925423][T15724] usb 6-1: USB disconnect, device number 120 [ 2299.332421][ T4697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8464'. [ 2299.466675][ T4697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8464'. [ 2300.773541][ T4718] : renamed from bond0 [ 2301.085396][ T4728] program syz.2.8473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2301.208074][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 2301.208088][ T30] audit: type=1326 audit(1759697047.765:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.2.8475" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x0 [ 2301.352503][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8472'. [ 2301.576062][ T874] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2301.626106][ T5848] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 2301.671249][ T4742] syzkaller1: entered promiscuous mode [ 2301.679585][ T4742] syzkaller1: entered allmulticast mode [ 2301.735595][ T874] usb 3-1: Using ep0 maxpacket: 32 [ 2301.742388][ T874] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 2301.751027][ T874] usb 3-1: config 0 has no interface number 0 [ 2301.765848][ T874] usb 3-1: config 0 interface 113 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 2301.787849][ T874] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f [ 2301.799478][ T874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.808602][ T874] usb 3-1: Product: syz [ 2301.813153][ T874] usb 3-1: Manufacturer: syz [ 2301.817921][ T5848] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2301.832624][ T874] usb 3-1: SerialNumber: syz [ 2301.842852][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.846140][ T4744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2301.856626][ T874] usb 3-1: config 0 descriptor?? [ 2301.866853][ T5848] usb 4-1: Product: syz [ 2301.871319][ T5848] usb 4-1: Manufacturer: syz [ 2301.876974][ T4734] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2301.884168][ T5848] usb 4-1: SerialNumber: syz [ 2301.901928][ T5848] usb 4-1: config 0 descriptor?? [ 2301.910501][ T4744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2301.913803][ T5848] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2301.932413][ T5848] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2301.952730][ T5848] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 2302.097535][ T4734] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2302.119653][ T874] net1080 3-1:0.113 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, aa:17:70:da:40:02 [ 2302.188174][ T4736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2302.218130][ T4736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2302.357475][ T874] usb 4-1: USB disconnect, device number 2 [ 2302.476771][T15724] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 2302.669217][T15724] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2302.678865][T15724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2302.720535][T15724] usb 6-1: Product: syz [ 2302.734951][T15724] usb 6-1: Manufacturer: syz [ 2302.749674][T15724] usb 6-1: SerialNumber: syz [ 2302.776943][T15724] usb 6-1: config 0 descriptor?? [ 2302.804651][T15724] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2302.818001][T15724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2302.829413][T15724] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2302.849906][T15724] usb 6-1: media controller created [ 2302.881395][T15724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2303.017634][T15724] DVB: Unable to find symbol mt352_attach() [ 2303.068476][T15724] DVB: Unable to find symbol nxt6000_attach() [ 2303.074707][T15724] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2303.128565][T15724] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input185 [ 2303.171225][T15724] dvb-usb: schedule remote query interval to 1000 msecs. [ 2303.201833][T15724] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2303.229486][T15724] dvb-usb: bulk message failed: -22 (7/0) [ 2303.252777][T15724] dvb-usb: bulk message failed: -22 (7/0) [ 2304.002356][ T4776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8484'. [ 2304.148222][T31784] usb 6-1: USB disconnect, device number 121 [ 2304.225014][T31784] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2304.303875][T15724] usb 3-1: USB disconnect, device number 115 [ 2304.316138][T15724] net1080 3-1:0.113 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 2304.885263][T15724] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2305.059721][T15724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2305.077696][T15724] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 2305.115725][T15724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2305.146341][T15724] usb 3-1: config 0 descriptor?? [ 2305.325689][ T4803] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8490'. [ 2305.570760][ T4819] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2305.594700][ T4782] fuse: Bad value for 'fd' [ 2305.641304][T15724] usbhid 3-1:0.0: can't add hid device: -71 [ 2305.651803][T15724] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2305.670338][T15724] usb 3-1: USB disconnect, device number 116 [ 2306.051272][ T4827] fuse: Bad value for 'group_id' [ 2306.190311][ T4827] fuse: Bad value for 'group_id' [ 2306.673729][ T4837] : renamed from bond0 [ 2306.805678][T26242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2306.830700][T26242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2306.842245][T26242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2306.862321][T26242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2306.872496][T26242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2307.236708][ T4841] chnl_net:caif_netlink_parms(): no params data found [ 2307.308272][ T4848] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8500'. [ 2307.329729][ T30] audit: type=1326 audit(1759697053.885:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.5.8500" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f45539 code=0x0 [ 2307.404653][ T4841] bridge0: port 1(bridge_slave_0) entered blocking state [ 2307.412515][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state [ 2307.420221][ T4841] bridge_slave_0: entered allmulticast mode [ 2307.428696][ T4841] bridge_slave_0: entered promiscuous mode [ 2307.437866][ T4841] bridge0: port 2(bridge_slave_1) entered blocking state [ 2307.446330][ T4841] bridge0: port 2(bridge_slave_1) entered disabled state [ 2307.453576][ T4841] bridge_slave_1: entered allmulticast mode [ 2307.461702][ T4841] bridge_slave_1: entered promiscuous mode [ 2307.504596][ T4841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2307.517790][ T4841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2307.556317][ T4841] team0: Port device team_slave_0 added [ 2307.564618][ T4841] team0: Port device team_slave_1 added [ 2307.600079][ T4841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2307.607749][ T4841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2307.635566][ T4841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2307.648407][ T4841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2307.655798][ T4841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2307.683092][ T4841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2307.737402][ T4841] hsr_slave_0: entered promiscuous mode [ 2307.744097][ T4841] hsr_slave_1: entered promiscuous mode [ 2307.751554][ T4841] debugfs: 'hsr0' already exists in 'hsr' [ 2307.758333][ T4841] Cannot create hsr debugfs directory [ 2308.281086][ T4865] FAULT_INJECTION: forcing a failure. [ 2308.281086][ T4865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2308.294673][ T4865] CPU: 0 UID: 0 PID: 4865 Comm: syz.5.8504 Not tainted syzkaller #0 PREEMPT(full) [ 2308.294697][ T4865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2308.294707][ T4865] Call Trace: [ 2308.294714][ T4865] [ 2308.294722][ T4865] dump_stack_lvl+0x189/0x250 [ 2308.294746][ T4865] ? __pfx____ratelimit+0x10/0x10 [ 2308.294772][ T4865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2308.294792][ T4865] ? __pfx__printk+0x10/0x10 [ 2308.294815][ T4865] ? __might_fault+0xb0/0x130 [ 2308.294845][ T4865] should_fail_ex+0x414/0x560 [ 2308.294869][ T4865] _copy_from_iter+0x1de/0x1790 [ 2308.294898][ T4865] ? rcu_is_watching+0x15/0xb0 [ 2308.294919][ T4865] ? kmalloc_reserve+0xbd/0x290 [ 2308.294936][ T4865] ? __pfx__copy_from_iter+0x10/0x10 [ 2308.294961][ T4865] ? __build_skb_around+0x262/0x3f0 [ 2308.294980][ T4865] ? netlink_sendmsg+0x642/0xb30 [ 2308.294997][ T4865] ? skb_put+0x11b/0x210 [ 2308.295017][ T4865] netlink_sendmsg+0x6b2/0xb30 [ 2308.295041][ T4865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2308.295060][ T4865] ? __import_iovec+0x5d4/0x7f0 [ 2308.295074][ T4865] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2308.295104][ T4865] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2308.295134][ T4865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2308.295159][ T4865] __sock_sendmsg+0x21c/0x270 [ 2308.295194][ T4865] ____sys_sendmsg+0x505/0x830 [ 2308.295225][ T4865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2308.295267][ T4865] ___sys_sendmsg+0x21f/0x2a0 [ 2308.295295][ T4865] ? __pfx____sys_sendmsg+0x10/0x10 [ 2308.295354][ T4865] ? __fget_files+0x2a/0x420 [ 2308.295383][ T4865] ? __fget_files+0x3a0/0x420 [ 2308.295423][ T4865] __sys_sendmsg+0x164/0x220 [ 2308.295460][ T4865] ? __pfx___sys_sendmsg+0x10/0x10 [ 2308.295502][ T4865] ? lockdep_hardirqs_on+0x9c/0x150 [ 2308.295527][ T4865] __do_fast_syscall_32+0xb6/0x2b0 [ 2308.295551][ T4865] ? lockdep_hardirqs_on+0x9c/0x150 [ 2308.295576][ T4865] do_fast_syscall_32+0x34/0x80 [ 2308.295599][ T4865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2308.295626][ T4865] RIP: 0023:0xf7f45539 [ 2308.295644][ T4865] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2308.295664][ T4865] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2308.295686][ T4865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 2308.295702][ T4865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2308.295715][ T4865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2308.295728][ T4865] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2308.295741][ T4865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2308.295770][ T4865] [ 2308.559604][ C0] vkms_vblank_simulate: vblank timer overrun [ 2308.957893][T26242] Bluetooth: hci4: command tx timeout [ 2309.099952][ T4841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2309.110646][ T4841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2309.127162][ T4841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2309.148591][ T4841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2309.269747][ T4841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2309.301393][ T4841] 8021q: adding VLAN 0 to HW filter on device team0 [ 2309.317200][T15271] bridge0: port 1(bridge_slave_0) entered blocking state [ 2309.324339][T15271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2309.369442][T15271] bridge0: port 2(bridge_slave_1) entered blocking state [ 2309.376706][T15271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2309.482316][ T4841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2309.583891][ T4841] veth0_vlan: entered promiscuous mode [ 2309.610128][ T4841] veth1_vlan: entered promiscuous mode [ 2309.661170][ T4841] veth0_macvtap: entered promiscuous mode [ 2309.673112][ T4841] veth1_macvtap: entered promiscuous mode [ 2309.704764][ T4841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2309.732491][ T4841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2309.760783][T15276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.791467][T15276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.806776][T15276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.822162][T15276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.957080][ T874] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2310.016587][T31784] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 2310.194744][ T1256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2310.216232][T31784] usb 6-1: Using ep0 maxpacket: 8 [ 2310.223187][ T1256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2310.234856][ T874] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2310.263795][ T1256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2310.272171][ T5943] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2310.286199][ T1256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2310.308417][T31784] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2310.326032][ T874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.340539][T31784] usb 6-1: config 4 interface 0 has no altsetting 0 [ 2310.348996][ T874] usb 2-1: Product: syz [ 2310.354006][ T874] usb 2-1: Manufacturer: syz [ 2310.364442][ T874] usb 2-1: SerialNumber: syz [ 2310.380887][ T874] usb 2-1: config 0 descriptor?? [ 2310.405035][ T874] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2310.424130][ T874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2310.439841][ T874] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2310.450994][ T874] usb 2-1: media controller created [ 2310.480740][T31784] usb 6-1: string descriptor 0 read error: -22 [ 2310.502673][T31784] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2310.523924][ T5943] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2310.527507][ T874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2310.542293][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.542322][T31784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.593534][T31784] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2310.627322][T31784] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2310.652084][T31784] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2310.660788][T31784] usb 6-1: media controller created [ 2310.683209][T31784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2310.704043][ T5943] usb 4-1: Product: syz [ 2310.714261][ T5943] usb 4-1: Manufacturer: syz [ 2310.732511][ T5943] usb 4-1: SerialNumber: syz [ 2310.754882][ T5943] usb 4-1: config 0 descriptor?? [ 2310.804179][ T874] DVB: Unable to find symbol mt352_attach() [ 2310.818153][ T5943] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2310.850797][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2310.880747][ T5943] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2310.917096][ T5943] usb 4-1: media controller created [ 2310.962696][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2310.982265][ T874] DVB: Unable to find symbol nxt6000_attach() [ 2311.001626][ T874] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2311.036532][T26242] Bluetooth: hci4: command tx timeout [ 2311.052614][ T874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input186 [ 2311.083067][ T874] dvb-usb: schedule remote query interval to 1000 msecs. [ 2311.092232][ T874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2311.110188][ T874] dvb-usb: bulk message failed: -22 (7/0) [ 2311.118069][ T874] dvb-usb: bulk message failed: -22 (7/0) [ 2311.210959][ T5943] DVB: Unable to find symbol mt352_attach() [ 2311.268738][ T5943] DVB: Unable to find symbol nxt6000_attach() [ 2311.275685][ T5943] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2311.289875][ T5943] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input187 [ 2311.317121][ T5943] dvb-usb: schedule remote query interval to 1000 msecs. [ 2311.327557][ T5943] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2311.342007][ T5943] dvb-usb: bulk message failed: -22 (7/0) [ 2311.362356][ T5943] dvb-usb: bulk message failed: -22 (7/0) [ 2311.836982][T31784] zl10353_read_register: readreg error (reg=127, ret==0) [ 2311.857185][ T4906] usb 6-1: dvb_usb_au6610: wlen=0, aborting [ 2312.155966][ T874] dvb-usb: bulk message failed: -22 (7/0) [ 2312.169927][ T874] dvb-usb: error while querying for an remote control event. [ 2312.408190][T15724] dvb-usb: bulk message failed: -22 (7/0) [ 2312.421085][T15724] dvb-usb: error while querying for an remote control event. [ 2312.737256][ T4899] usb 2-1: USB disconnect, device number 7 [ 2312.827763][ T4899] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2313.115898][T26242] Bluetooth: hci4: command tx timeout [ 2313.181749][ T5943] usb 4-1: USB disconnect, device number 3 [ 2313.308067][T31784] usb 6-1: USB disconnect, device number 122 [ 2313.419500][ T5943] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2314.353573][ T30] audit: type=1326 audit(1759697060.905:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.5.8523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 2314.378266][ T30] audit: type=1326 audit(1759697060.935:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.5.8523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 2314.422648][ T30] audit: type=1326 audit(1759697060.975:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.5.8523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=328 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 2314.445218][ T30] audit: type=1326 audit(1759697060.975:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.5.8523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 2314.487271][ T30] audit: type=1326 audit(1759697060.975:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.5.8523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 2314.510628][ T30] audit: type=1326 audit(1759697061.025:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.5.8523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 2314.532916][ T30] audit: type=1326 audit(1759697061.025:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.5.8523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 2314.560524][ T30] audit: type=1326 audit(1759697061.025:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.5.8523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 2314.593258][ T4947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8524'. [ 2314.647026][ T4948] netlink: 'syz.1.8524': attribute type 10 has an invalid length. [ 2315.198843][T26242] Bluetooth: hci4: command tx timeout [ 2315.298111][ T4968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8532'. [ 2315.336145][T31784] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2315.488186][T31784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2315.500968][T31784] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 2315.511323][T31784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2315.527022][T31784] usb 2-1: config 0 descriptor?? [ 2315.946915][ T4959] fuse: Bad value for 'fd' [ 2315.987461][T31784] usbhid 2-1:0.0: can't add hid device: -71 [ 2315.993676][T31784] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2316.026673][T31784] usb 2-1: USB disconnect, device number 8 [ 2316.205250][ T5943] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2316.368379][ T5943] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2316.379035][ T5943] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2316.386263][ T5943] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2316.397786][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.412824][ T5943] usb 6-1: config 0 descriptor?? [ 2316.429452][ T5943] pwc: Askey VC010 type 2 USB webcam detected. [ 2316.849227][ T5943] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2316.857994][ T5943] pwc: recv_control_msg error -32 req 02 val 2700 [ 2316.867110][ T5943] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2316.874783][ T5943] pwc: recv_control_msg error -32 req 04 val 1000 [ 2316.883338][ T5943] pwc: recv_control_msg error -32 req 04 val 1300 [ 2316.891274][ T5943] pwc: recv_control_msg error -32 req 04 val 1400 [ 2317.103630][ T5943] pwc: recv_control_msg error -71 req 02 val 2100 [ 2317.121229][ T5943] pwc: recv_control_msg error -71 req 04 val 1500 [ 2317.136902][ T5943] pwc: recv_control_msg error -71 req 02 val 2500 [ 2317.143731][ T5943] pwc: recv_control_msg error -71 req 02 val 2400 [ 2317.151509][ T5943] pwc: recv_control_msg error -71 req 02 val 2600 [ 2317.158544][ T5943] pwc: recv_control_msg error -71 req 02 val 2900 [ 2317.166443][ T5943] pwc: recv_control_msg error -71 req 02 val 2800 [ 2317.173353][ T5943] pwc: recv_control_msg error -71 req 04 val 1100 [ 2317.175958][ T4899] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2317.180399][ T5943] pwc: recv_control_msg error -71 req 04 val 1200 [ 2317.196863][ T5943] pwc: Registered as video103. [ 2317.205546][ T5943] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input188 [ 2317.230439][ T5943] usb 6-1: USB disconnect, device number 123 [ 2317.336610][T31784] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 2317.347245][ T4899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2317.358303][ T4899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2317.371633][ T4899] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2317.381269][ T4899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2317.390053][ T4899] usb 2-1: SerialNumber: syz [ 2317.475896][T31784] usb 4-1: device descriptor read/64, error -71 [ 2317.617237][ T4899] usb 2-1: 0:2 : does not exist [ 2317.622224][ T4899] usb 2-1: unit 5: unexpected type 0x0a [ 2317.644979][ T4899] usb 2-1: USB disconnect, device number 9 [ 2317.726205][T31784] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 2317.794250][ T5005] FAULT_INJECTION: forcing a failure. [ 2317.794250][ T5005] name failslab, interval 1, probability 0, space 0, times 0 [ 2317.810641][ T5005] CPU: 1 UID: 0 PID: 5005 Comm: syz.5.8546 Not tainted syzkaller #0 PREEMPT(full) [ 2317.810674][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2317.810688][ T5005] Call Trace: [ 2317.810698][ T5005] [ 2317.810708][ T5005] dump_stack_lvl+0x189/0x250 [ 2317.810742][ T5005] ? __pfx____ratelimit+0x10/0x10 [ 2317.810776][ T5005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2317.810804][ T5005] ? __pfx__printk+0x10/0x10 [ 2317.810838][ T5005] ? __pfx___might_resched+0x10/0x10 [ 2317.810863][ T5005] ? fs_reclaim_acquire+0x7d/0x100 [ 2317.810901][ T5005] should_fail_ex+0x414/0x560 [ 2317.810935][ T5005] should_failslab+0xa8/0x100 [ 2317.810977][ T5005] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2317.811005][ T5005] ? skb_clone+0x212/0x3a0 [ 2317.811038][ T5005] skb_clone+0x212/0x3a0 [ 2317.811064][ T5005] ? nfnetlink_rcv+0x4ba/0x2590 [ 2317.811101][ T5005] nfnetlink_rcv+0x4ec/0x2590 [ 2317.811140][ T5005] ? is_bpf_text_address+0x26/0x2b0 [ 2317.811170][ T5005] ? unwind_get_return_address+0x4d/0x90 [ 2317.811196][ T5005] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2317.811225][ T5005] ? arch_stack_walk+0xfc/0x150 [ 2317.811264][ T5005] ? stack_trace_save+0x9c/0xe0 [ 2317.811292][ T5005] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2317.811363][ T5005] ? __lock_acquire+0xab9/0xd20 [ 2317.811394][ T5005] ? netlink_deliver_tap+0x2e/0x1b0 [ 2317.811435][ T5005] netlink_unicast+0x82c/0x9e0 [ 2317.811478][ T5005] ? __pfx_netlink_unicast+0x10/0x10 [ 2317.811514][ T5005] ? netlink_sendmsg+0x642/0xb30 [ 2317.811537][ T5005] ? skb_put+0x11b/0x210 [ 2317.811565][ T5005] netlink_sendmsg+0x805/0xb30 [ 2317.811597][ T5005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2317.811624][ T5005] ? __import_iovec+0x5d4/0x7f0 [ 2317.811643][ T5005] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2317.811672][ T5005] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2317.811704][ T5005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2317.811730][ T5005] __sock_sendmsg+0x21c/0x270 [ 2317.811765][ T5005] ____sys_sendmsg+0x505/0x830 [ 2317.811798][ T5005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2317.811841][ T5005] ___sys_sendmsg+0x21f/0x2a0 [ 2317.811882][ T5005] ? __pfx____sys_sendmsg+0x10/0x10 [ 2317.811945][ T5005] ? __fget_files+0x2a/0x420 [ 2317.811986][ T5005] ? __fget_files+0x3a0/0x420 [ 2317.812026][ T5005] __sys_sendmsg+0x164/0x220 [ 2317.812053][ T5005] ? __pfx___sys_sendmsg+0x10/0x10 [ 2317.812096][ T5005] ? lockdep_hardirqs_on+0x9c/0x150 [ 2317.812121][ T5005] __do_fast_syscall_32+0xb6/0x2b0 [ 2317.812144][ T5005] ? lockdep_hardirqs_on+0x9c/0x150 [ 2317.812169][ T5005] do_fast_syscall_32+0x34/0x80 [ 2317.812192][ T5005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2317.812218][ T5005] RIP: 0023:0xf7f45539 [ 2317.812236][ T5005] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2317.812256][ T5005] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2317.812278][ T5005] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2317.812295][ T5005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2317.812308][ T5005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2317.812319][ T5005] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2317.812331][ T5005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2317.812360][ T5005] [ 2318.145618][T31784] usb 4-1: device descriptor read/64, error -71 [ 2318.256265][T31784] usb usb4-port1: attempt power cycle [ 2318.676098][T31784] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 2318.850632][T31784] usb 4-1: device descriptor read/8, error -71 [ 2319.096009][T31784] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 2319.135934][T31784] usb 4-1: device descriptor read/8, error -71 [ 2319.257895][T31784] usb usb4-port1: unable to enumerate USB device [ 2320.294534][ T5045] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2320.545943][T31784] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2320.696904][T31784] usb 2-1: Using ep0 maxpacket: 32 [ 2320.707668][T31784] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2320.727885][T31784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2320.745221][ T5943] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2320.757115][T31784] usb 2-1: config 0 descriptor?? [ 2320.770746][T31784] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2320.885597][ T5943] usb 3-1: device descriptor read/64, error -71 [ 2320.899659][ T5069] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8564'. [ 2321.195281][ T5943] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2321.300780][T31784] gspca_sunplus: reg_w_riv err -110 [ 2321.314772][T31784] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 2321.325792][ T5943] usb 3-1: device descriptor read/64, error -71 [ 2321.355335][T30711] Bluetooth: hci3: command 0x0405 tx timeout [ 2321.445772][ T5943] usb usb3-port1: attempt power cycle [ 2321.815613][ T5943] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2321.846123][ T5943] usb 3-1: device descriptor read/8, error -71 [ 2322.096558][ T5943] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2322.126030][ T5943] usb 3-1: device descriptor read/8, error -71 [ 2322.236215][ T5943] usb usb3-port1: unable to enumerate USB device [ 2322.276479][T15724] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2322.317460][ T5078] netlink: 'syz.0.8567': attribute type 21 has an invalid length. [ 2322.325476][ T5078] IPv6: NLM_F_CREATE should be specified when creating new route [ 2322.437066][T15724] usb 4-1: Using ep0 maxpacket: 8 [ 2322.447795][T15724] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2322.457660][T15724] usb 4-1: config 4 interface 0 has no altsetting 0 [ 2322.473219][T15724] usb 4-1: string descriptor 0 read error: -22 [ 2322.479972][T15724] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2322.490261][T15724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2322.522792][T15724] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2322.532279][ T5081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2322.557492][ T5081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2322.558041][T15724] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2322.585560][T15724] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2322.594117][T15724] usb 4-1: media controller created [ 2322.622542][T15724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2323.192497][ T5091] syzkaller1: entered promiscuous mode [ 2323.198868][ T5091] syzkaller1: entered allmulticast mode [ 2323.680240][T15724] zl10353_read_register: readreg error (reg=127, ret==0) [ 2323.756028][ T5100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8573'. [ 2324.212048][ T5104] netlink: 3672 bytes leftover after parsing attributes in process `syz.2.8576'. [ 2324.781345][T31784] usb 2-1: USB disconnect, device number 10 [ 2325.672582][T31784] usb 4-1: USB disconnect, device number 8 [ 2325.832009][ T5122] : renamed from bond0 (while UP) [ 2326.499332][ T5133] No memory to map [ 2326.526524][ T5133] No memory to map [ 2326.554373][ T5133] No memory to map [ 2326.630341][ T5133] No memory to map [ 2326.649327][ T5133] No memory to map [ 2326.958719][ T5133] No memory to map [ 2326.962814][ T5133] No memory to map [ 2327.493215][ T5148] FAULT_INJECTION: forcing a failure. [ 2327.493215][ T5148] name failslab, interval 1, probability 0, space 0, times 0 [ 2327.506102][ T5148] CPU: 1 UID: 0 PID: 5148 Comm: syz.5.8590 Not tainted syzkaller #0 PREEMPT(full) [ 2327.506131][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2327.506144][ T5148] Call Trace: [ 2327.506153][ T5148] [ 2327.506164][ T5148] dump_stack_lvl+0x189/0x250 [ 2327.506196][ T5148] ? __pfx____ratelimit+0x10/0x10 [ 2327.506233][ T5148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2327.506268][ T5148] ? __pfx__printk+0x10/0x10 [ 2327.506306][ T5148] ? __pfx___might_resched+0x10/0x10 [ 2327.506335][ T5148] should_fail_ex+0x414/0x560 [ 2327.506368][ T5148] should_failslab+0xa8/0x100 [ 2327.506403][ T5148] __kmalloc_noprof+0xcb/0x7f0 [ 2327.506432][ T5148] ? kfree+0x4d/0x6d0 [ 2327.506455][ T5148] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2327.506492][ T5148] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2327.506523][ T5148] ? tomoyo_domain+0xd9/0x130 [ 2327.506559][ T5148] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2327.506583][ T5148] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2327.506610][ T5148] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2327.506652][ T5148] ? __lock_acquire+0xab9/0xd20 [ 2327.506694][ T5148] ? __fget_files+0x2a/0x420 [ 2327.506731][ T5148] ? __fget_files+0x3a0/0x420 [ 2327.506763][ T5148] ? __fget_files+0x2a/0x420 [ 2327.506801][ T5148] security_file_ioctl_compat+0xcb/0x2d0 [ 2327.506828][ T5148] __ia32_compat_sys_ioctl+0x128/0x840 [ 2327.506859][ T5148] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2327.506888][ T5148] ? __fget_files+0x3a0/0x420 [ 2327.506929][ T5148] ? fput+0xa0/0xd0 [ 2327.506953][ T5148] ? ksys_write+0x22a/0x250 [ 2327.506993][ T5148] ? lockdep_hardirqs_on+0x9c/0x150 [ 2327.507019][ T5148] __do_fast_syscall_32+0xb6/0x2b0 [ 2327.507044][ T5148] ? lockdep_hardirqs_on+0x9c/0x150 [ 2327.507069][ T5148] do_fast_syscall_32+0x34/0x80 [ 2327.507091][ T5148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2327.507119][ T5148] RIP: 0023:0xf7f45539 [ 2327.507137][ T5148] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2327.507157][ T5148] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2327.507181][ T5148] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000089f1 [ 2327.507197][ T5148] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 2327.507211][ T5148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2327.507223][ T5148] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2327.507236][ T5148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2327.507274][ T5148] [ 2327.507284][ T5148] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2327.741982][T31784] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 2327.928069][T31784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2327.943580][T31784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2327.979432][T31784] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 2328.006248][T31784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2328.036730][T31784] usb 3-1: config 0 descriptor?? [ 2328.042570][ T5145] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2328.224509][ T5169] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2328.259867][T31784] usbhid 3-1:0.0: can't add hid device: -71 [ 2328.276329][T31784] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2328.308049][T31784] usb 3-1: USB disconnect, device number 121 [ 2328.319979][ T5172] FAULT_INJECTION: forcing a failure. [ 2328.319979][ T5172] name failslab, interval 1, probability 0, space 0, times 0 [ 2328.334978][ T5172] CPU: 1 UID: 0 PID: 5172 Comm: syz.0.8598 Not tainted syzkaller #0 PREEMPT(full) [ 2328.335010][ T5172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2328.335025][ T5172] Call Trace: [ 2328.335034][ T5172] [ 2328.335044][ T5172] dump_stack_lvl+0x189/0x250 [ 2328.335082][ T5172] ? __pfx____ratelimit+0x10/0x10 [ 2328.335117][ T5172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2328.335144][ T5172] ? __pfx__printk+0x10/0x10 [ 2328.335184][ T5172] ? __pfx___might_resched+0x10/0x10 [ 2328.335209][ T5172] ? fs_reclaim_acquire+0x7d/0x100 [ 2328.335248][ T5172] should_fail_ex+0x414/0x560 [ 2328.335283][ T5172] should_failslab+0xa8/0x100 [ 2328.335319][ T5172] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2328.335349][ T5172] ? __do_fast_syscall_32+0xb6/0x2b0 [ 2328.335373][ T5172] ? do_fast_syscall_32+0x34/0x80 [ 2328.335394][ T5172] ? drm_atomic_state_alloc+0xa9/0x100 [ 2328.335436][ T5172] drm_atomic_state_alloc+0xa9/0x100 [ 2328.335473][ T5172] drm_mode_atomic_ioctl+0x437/0xcb0 [ 2328.335517][ T5172] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 2328.335568][ T5172] ? do_raw_spin_unlock+0x122/0x240 [ 2328.335603][ T5172] ? _raw_spin_unlock+0x28/0x50 [ 2328.335634][ T5172] ? drm_is_current_master+0x19f/0x200 [ 2328.335664][ T5172] drm_ioctl_kernel+0x2cf/0x390 [ 2328.335697][ T5172] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 2328.335723][ T5172] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 2328.335766][ T5172] drm_ioctl+0x67f/0xb10 [ 2328.335794][ T5172] ? __lock_acquire+0xab9/0xd20 [ 2328.335819][ T5172] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 2328.335850][ T5172] ? __pfx_drm_ioctl+0x10/0x10 [ 2328.335889][ T5172] ? __fget_files+0x3a0/0x420 [ 2328.335933][ T5172] ? __fget_files+0x2a/0x420 [ 2328.335964][ T5172] ? drm_compat_ioctl+0xa7/0x330 [ 2328.335988][ T5172] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2328.336017][ T5172] __ia32_compat_sys_ioctl+0x543/0x840 [ 2328.336049][ T5172] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2328.336078][ T5172] ? __fget_files+0x3a0/0x420 [ 2328.336116][ T5172] ? fput+0xa0/0xd0 [ 2328.336140][ T5172] ? ksys_write+0x22a/0x250 [ 2328.336178][ T5172] ? lockdep_hardirqs_on+0x9c/0x150 [ 2328.336204][ T5172] __do_fast_syscall_32+0xb6/0x2b0 [ 2328.336228][ T5172] ? lockdep_hardirqs_on+0x9c/0x150 [ 2328.336252][ T5172] do_fast_syscall_32+0x34/0x80 [ 2328.336277][ T5172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2328.336305][ T5172] RIP: 0023:0xf7f68539 [ 2328.336323][ T5172] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2328.336342][ T5172] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2328.336366][ T5172] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c03864bc [ 2328.336382][ T5172] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 2328.336396][ T5172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2328.336410][ T5172] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2328.336424][ T5172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2328.336455][ T5172] [ 2328.635586][ C1] vkms_vblank_simulate: vblank timer overrun [ 2328.651682][T15724] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2328.841025][ T5155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2328.850819][ T5155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2328.872613][T15724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2328.882491][T15724] usb 2-1: no configurations [ 2328.889665][ T5181] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8601'. [ 2328.894455][T15724] usb 2-1: can't read configurations, error -22 [ 2328.903629][ T5183] FAULT_INJECTION: forcing a failure. [ 2328.903629][ T5183] name failslab, interval 1, probability 0, space 0, times 0 [ 2328.918608][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8601'. [ 2328.927950][ T5183] CPU: 1 UID: 0 PID: 5183 Comm: syz.5.8602 Not tainted syzkaller #0 PREEMPT(full) [ 2328.927981][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2328.927995][ T5183] Call Trace: [ 2328.928004][ T5183] [ 2328.928013][ T5183] dump_stack_lvl+0x189/0x250 [ 2328.928045][ T5183] ? __pfx____ratelimit+0x10/0x10 [ 2328.928079][ T5183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2328.928106][ T5183] ? __pfx__printk+0x10/0x10 [ 2328.928142][ T5183] ? __pfx___might_resched+0x10/0x10 [ 2328.928163][ T5183] ? fs_reclaim_acquire+0x7d/0x100 [ 2328.928200][ T5183] should_fail_ex+0x414/0x560 [ 2328.928233][ T5183] should_failslab+0xa8/0x100 [ 2328.928269][ T5183] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2328.928297][ T5183] ? __kmalloc_noprof+0x432/0x7f0 [ 2328.928342][ T5183] ? mpi_alloc+0x52/0x140 [ 2328.928378][ T5183] mpi_alloc+0x52/0x140 [ 2328.928410][ T5183] mpi_read_raw_data+0x139/0x970 [ 2328.928447][ T5183] dh_set_secret+0x1c0/0x310 [ 2328.928490][ T5183] ? __pfx_dh_set_secret+0x10/0x10 [ 2328.928527][ T5183] ? crypto_alloc_tfm_node+0x3c1/0x3f0 [ 2328.928560][ T5183] __keyctl_dh_compute+0x50a/0xca0 [ 2328.928600][ T5183] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 2328.928630][ T5183] ? __lock_acquire+0xab9/0xd20 [ 2328.928662][ T5183] ? __might_fault+0xb0/0x130 [ 2328.928705][ T5183] ? compat_keyctl_dh_compute+0x157/0x1d0 [ 2328.928738][ T5183] compat_keyctl_dh_compute+0x16e/0x1d0 [ 2328.928771][ T5183] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 2328.928808][ T5183] ? ksys_write+0x22a/0x250 [ 2328.928869][ T5183] ? __ia32_compat_sys_keyctl+0x3f6/0x630 [ 2328.928915][ T5183] __do_fast_syscall_32+0xb6/0x2b0 [ 2328.928942][ T5183] ? lockdep_hardirqs_on+0x9c/0x150 [ 2328.928969][ T5183] do_fast_syscall_32+0x34/0x80 [ 2328.928994][ T5183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2328.929022][ T5183] RIP: 0023:0xf7f45539 [ 2328.929041][ T5183] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2328.929059][ T5183] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000120 [ 2328.929081][ T5183] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000080000100 [ 2328.929097][ T5183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000180 [ 2328.929110][ T5183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2328.929123][ T5183] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2328.929136][ T5183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2328.929166][ T5183] [ 2329.183012][ C1] vkms_vblank_simulate: vblank timer overrun [ 2329.246974][ T5848] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2329.427439][ T5848] usb 4-1: config 0 has no interfaces? [ 2329.447503][ T5848] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2329.457972][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2329.492692][ T5848] usb 4-1: Product: syz [ 2329.511757][ T5848] usb 4-1: Manufacturer: syz [ 2329.519691][ T5848] usb 4-1: SerialNumber: syz [ 2329.527566][ T5848] usb 4-1: config 0 descriptor?? [ 2329.851077][ T5209] fuse: Unknown parameter 'ycDmHvEmV; [ 2329.851077][ T5209] 0x0000000000000006' [ 2330.677746][ T5218] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2330.871623][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8613'. [ 2330.918280][ T5231] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8616'. [ 2330.918832][ T5232] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8616'. [ 2331.694584][ T5249] netlink: 4196 bytes leftover after parsing attributes in process `syz.5.8621'. [ 2331.844911][ T5848] usb 4-1: USB disconnect, device number 9 [ 2332.066031][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8626'. [ 2332.146940][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8626'. [ 2332.158154][ T5263] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8626'. [ 2332.683336][ T5272] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2332.751686][ T5275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8629'. [ 2333.066272][ T5271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2333.506237][T15724] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2333.660227][T15724] usb 2-1: Using ep0 maxpacket: 16 [ 2333.668833][T15724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2333.694710][T15724] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2333.704175][T15724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2333.712858][T15724] usb 2-1: Product: syz [ 2333.717479][T15724] usb 2-1: Manufacturer: syz [ 2333.722242][T15724] usb 2-1: SerialNumber: syz [ 2333.744172][T15724] usb 2-1: config 0 descriptor?? [ 2333.753905][T15724] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2333.764147][T15724] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 2334.204237][ T5301] team0 (unregistering): Port device team_slave_0 removed [ 2334.340457][ T5301] team0 (unregistering): Port device team_slave_1 removed [ 2334.357739][ T5301] team0 (unregistering): Port device geneve1 removed [ 2334.366096][T15724] em28xx 2-1:0.0: chip ID is em2874 [ 2334.513950][ T5307] fuse: Bad value for 'fd' [ 2334.523470][ T5308] FAULT_INJECTION: forcing a failure. [ 2334.523470][ T5308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2334.540431][ T5308] CPU: 0 UID: 0 PID: 5308 Comm: syz.5.8639 Not tainted syzkaller #0 PREEMPT(full) [ 2334.540461][ T5308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2334.540475][ T5308] Call Trace: [ 2334.540485][ T5308] [ 2334.540504][ T5308] dump_stack_lvl+0x189/0x250 [ 2334.540537][ T5308] ? __pfx____ratelimit+0x10/0x10 [ 2334.540574][ T5308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2334.540600][ T5308] ? __pfx__printk+0x10/0x10 [ 2334.540634][ T5308] ? __might_fault+0xb0/0x130 [ 2334.540678][ T5308] should_fail_ex+0x414/0x560 [ 2334.540713][ T5308] _copy_from_iter+0x1de/0x1790 [ 2334.540767][ T5308] ? __pfx__copy_from_iter+0x10/0x10 [ 2334.540804][ T5308] ? rcu_is_watching+0x15/0xb0 [ 2334.540831][ T5308] ? trace_kmalloc+0x1f/0xd0 [ 2334.540858][ T5308] ? __kmalloc_noprof+0x432/0x7f0 [ 2334.540885][ T5308] ? rcu_read_lock_any_held+0xb3/0x120 [ 2334.540915][ T5308] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2334.540947][ T5308] kernfs_fop_write_iter+0x19b/0x540 [ 2334.540989][ T5308] vfs_write+0x5c6/0xb30 [ 2334.541024][ T5308] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2334.541061][ T5308] ? __pfx_vfs_write+0x10/0x10 [ 2334.541102][ T5308] ? __fget_files+0x2a/0x420 [ 2334.541147][ T5308] ksys_write+0x145/0x250 [ 2334.541180][ T5308] ? __pfx_ksys_write+0x10/0x10 [ 2334.541215][ T5308] ? lockdep_hardirqs_on+0x9c/0x150 [ 2334.541241][ T5308] __do_fast_syscall_32+0xb6/0x2b0 [ 2334.541266][ T5308] ? lockdep_hardirqs_on+0x9c/0x150 [ 2334.541292][ T5308] do_fast_syscall_32+0x34/0x80 [ 2334.541316][ T5308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2334.541345][ T5308] RIP: 0023:0xf7f45539 [ 2334.541364][ T5308] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2334.541384][ T5308] RSP: 002b:00000000f541555c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2334.541408][ T5308] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000800000c0 [ 2334.541423][ T5308] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 2334.541436][ T5308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2334.541449][ T5308] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2334.541463][ T5308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2334.541504][ T5308] [ 2334.543372][ T5308] __nla_validate_parse: 1 callbacks suppressed [ 2334.543386][ T5308] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8639'. [ 2334.776214][ T5943] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2334.967135][ T5943] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2334.978505][ T5943] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2334.988727][ T5943] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2334.997946][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2335.016480][ T5307] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2335.033787][ T5943] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2335.238897][T15724] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 2335.248774][T15724] em28xx 2-1:0.0: board has no eeprom [ 2335.283560][ T5943] usb 4-1: USB disconnect, device number 10 [ 2336.168330][ T5320] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2336.320184][ T5324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8645'. [ 2336.375951][T15724] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2336.388124][T15724] em28xx 2-1:0.0: dvb set to bulk mode. [ 2336.396456][ T5943] em28xx 2-1:0.0: Binding DVB extension [ 2336.512438][ T5943] em28xx 2-1:0.0: Registering input extension [ 2336.521780][ T5323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8645'. [ 2336.605288][ T5943] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 2336.611964][ T5943] Registered IR keymap rc-empty [ 2336.620416][ T5943] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2336.642807][ T5943] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input189 [ 2336.665932][ T5943] em28xx 2-1:0.0: Input extension successfully initialized [ 2336.788544][ T5943] usb 2-1: USB disconnect, device number 13 [ 2336.795792][ T5943] em28xx 2-1:0.0: Disconnecting em28xx [ 2336.801317][ T5943] em28xx 2-1:0.0: Closing input extension [ 2336.842476][ T5943] em28xx 2-1:0.0: Freeing device [ 2344.799048][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.806245][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2385.815594][ T5943] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2386.023795][ T5943] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 2386.040646][ T5943] usb 4-1: config 0 has no interface number 1 [ 2386.052762][ T5943] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2386.110606][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2386.135264][ T5943] usb 4-1: config 0 descriptor?? [ 2386.174047][ T5943] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2386.198589][ T5943] usb 4-1: MIDIStreaming interface descriptor not found [ 2386.255620][ T5943] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2386.815271][ T5943] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 2386.994456][ T4899] usb 4-1: USB disconnect, device number 11 [ 2387.069291][ T5367] input: syz1 as /devices/virtual/input/input190 [ 2387.643259][ T5375] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8655'. [ 2387.840173][ T5381] fuse: Unknown parameter 'ycDmHvEmV; [ 2387.840173][ T5381] 0x0000000000000006' [ 2388.615489][ T5848] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2388.755917][ T5848] usb 3-1: device descriptor read/64, error -71 [ 2388.826034][ T30] audit: type=1326 audit(1759697135.375:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.8658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f45558 code=0x7ffc0000 [ 2388.860440][ T30] audit: type=1326 audit(1759697135.375:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.8658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f45558 code=0x7ffc0000 [ 2388.915840][ T30] audit: type=1326 audit(1759697135.375:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.8658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 2388.982987][ T30] audit: type=1326 audit(1759697135.375:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.8658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f45558 code=0x7ffc0000 [ 2389.005868][ T5848] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2389.014862][ T30] audit: type=1326 audit(1759697135.375:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.8658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 2389.037667][ T30] audit: type=1326 audit(1759697135.375:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.8658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f45558 code=0x7ffc0000 [ 2389.060229][ T30] audit: type=1326 audit(1759697135.375:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.8658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 2389.083504][ T30] audit: type=1326 audit(1759697135.375:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.8658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 2389.125888][ T30] audit: type=1326 audit(1759697135.375:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.8658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 2389.148870][ T5848] usb 3-1: device descriptor read/64, error -71 [ 2389.158927][ T30] audit: type=1326 audit(1759697135.375:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.8658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f45558 code=0x7ffc0000 [ 2389.277825][ T5848] usb usb3-port1: attempt power cycle [ 2389.625887][ T5848] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2389.646638][ T5848] usb 3-1: device descriptor read/8, error -71 [ 2389.885867][ T5848] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2389.907017][ T5848] usb 3-1: device descriptor read/8, error -71 [ 2390.016293][ T5848] usb usb3-port1: unable to enumerate USB device [ 2390.308803][ T5397] veth0_to_bridge: entered promiscuous mode [ 2390.334021][ T5397] fuse: Unknown parameter 'K۽ t0x0000000000000009' [ 2390.419570][ T5394] veth0_to_bridge: left promiscuous mode [ 2390.584289][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8662'. [ 2390.875650][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2391.586458][ T5423] fuse: Unknown parameter 'ycDmHvEmV; [ 2391.586458][ T5423] 0x0000000000000006' [ 2392.384328][ T5431] bridge0: port 2(bridge_slave_1) entered disabled state [ 2392.391891][ T5431] bridge0: port 1(bridge_slave_0) entered disabled state [ 2392.726820][ T5431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2392.768474][ T5431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2393.026958][ T1279] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2393.039317][ T1279] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2393.049115][ T1279] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2393.072943][ T1279] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2393.089933][ T5438] netlink: 124 bytes leftover after parsing attributes in process `syz.1.8670'. [ 2394.158668][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8676'. [ 2395.055317][T15724] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2395.089947][ T5023] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2395.101083][ T5023] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2395.110398][ T5023] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2395.118677][ T5023] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2395.132736][ T5023] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2395.215183][T15724] usb 4-1: device descriptor read/64, error -71 [ 2395.368067][ T5472] chnl_net:caif_netlink_parms(): no params data found [ 2395.465215][T15724] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2395.695218][T15724] usb 4-1: device descriptor read/64, error -71 [ 2395.828661][T15724] usb usb4-port1: attempt power cycle [ 2396.165272][T15724] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2396.258440][T15724] usb 4-1: device descriptor read/8, error -71 [ 2396.489846][ T5472] bridge0: port 1(bridge_slave_0) entered blocking state [ 2396.497521][T15724] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2396.505460][ T5472] bridge0: port 1(bridge_slave_0) entered disabled state [ 2396.513156][ T5472] bridge_slave_0: entered allmulticast mode [ 2396.523172][ T5472] bridge_slave_0: entered promiscuous mode [ 2396.536531][T15724] usb 4-1: device descriptor read/8, error -71 [ 2396.543750][ T5472] bridge0: port 2(bridge_slave_1) entered blocking state [ 2396.551449][ T5472] bridge0: port 2(bridge_slave_1) entered disabled state [ 2396.558892][ T5472] bridge_slave_1: entered allmulticast mode [ 2396.567279][ T5472] bridge_slave_1: entered promiscuous mode [ 2396.671871][T15724] usb usb4-port1: unable to enumerate USB device [ 2396.720087][ T5472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2396.733586][ T5472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2396.771473][ T5472] team0: Port device team_slave_0 added [ 2396.779690][ T5472] team0: Port device team_slave_1 added [ 2396.810820][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2396.818226][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2396.846010][ T5472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2396.860335][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2396.879053][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2396.906545][ T5472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2397.044583][ T5472] hsr_slave_0: entered promiscuous mode [ 2397.051292][ T5472] hsr_slave_1: entered promiscuous mode [ 2397.057741][ T5472] debugfs: 'hsr0' already exists in 'hsr' [ 2397.063492][ T5472] Cannot create hsr debugfs directory [ 2397.195965][ T5023] Bluetooth: hci2: command tx timeout [ 2397.560431][ T5472] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 2397.845871][ T5848] usb 6-1: new full-speed USB device number 124 using dummy_hcd [ 2398.033123][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 2398.045022][ T5848] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2398.055963][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2398.074360][ T5848] usb 6-1: config 0 descriptor?? [ 2398.129734][T15276] bond1 (unregistering): (slave bridge1): Removing an active aggregator [ 2398.140559][T15276] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 2398.149455][T15276] bridge1 (unregistering): left promiscuous mode [ 2398.157341][T15276] bridge1 (unregistering): left allmulticast mode [ 2398.447203][T15276] bond5 (unregistering): (slave bridge0): Removing an active aggregator [ 2398.456603][T15276] bond5 (unregistering): (slave bridge0): Releasing backup interface [ 2398.468129][T15276] bridge0 (unregistering): left promiscuous mode [ 2398.474523][T15276] bridge0 (unregistering): left allmulticast mode [ 2398.486100][ T874] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2398.658154][ T874] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2398.671852][ T874] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 2398.681626][ T874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2398.707049][ T874] usb 3-1: config 0 descriptor?? [ 2398.809261][T15276]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 2398.823309][T15276]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 2398.833071][T15276]  (unregistering): Released all slaves [ 2399.129764][ T874] hid_parser_main: 3 callbacks suppressed [ 2399.129789][ T874] creative-sb0540 0003:041E:3100.005B: unknown main item tag 0x0 [ 2399.144858][ T5848] ath6kl: Failed to submit usb control message: -110 [ 2399.153784][ T5848] ath6kl: unable to send the bmi data to the device: -110 [ 2399.164051][T15276] bond1 (unregistering): Released all slaves [ 2399.194821][ T5848] ath6kl: Unable to send get target info: -110 [ 2399.237309][ T874] creative-sb0540 0003:041E:3100.005B: hidraw0: USB HID v8.07 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0 [ 2399.252537][ T5848] ath6kl: Failed to init ath6kl core: -110 [ 2399.275570][ T5023] Bluetooth: hci2: command tx timeout [ 2399.298761][ T5848] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 2399.352062][ T874] usb 3-1: USB disconnect, device number 126 [ 2399.452183][ T5515] fido_id[5515]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 2399.562156][T15276] bond2 (unregistering): Released all slaves [ 2399.756791][T15276] bond3 (unregistering): Released all slaves [ 2400.070925][T15276] bond4 (unregistering): (slave veth3): Releasing active interface [ 2400.087748][T15276] bond4 (unregistering): Released all slaves [ 2400.205319][T15724] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2400.275976][T15276] bond5 (unregistering): Released all slaves [ 2400.377980][T15724] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2400.387386][T15724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2400.428786][T15276] tipc: Disabling bearer [ 2400.435223][T15724] usb 4-1: Product: syz [ 2400.440034][T15724] usb 4-1: Manufacturer: syz [ 2400.447385][T15724] usb 4-1: SerialNumber: syz [ 2400.473446][ T874] usb 6-1: USB disconnect, device number 124 [ 2400.490126][T15724] usb 4-1: config 0 descriptor?? [ 2400.511848][T15724] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2400.524772][T15724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2400.545901][T15276] tipc: Left network mode [ 2400.546564][T15724] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2400.600980][T15724] usb 4-1: media controller created [ 2400.607595][ T5472] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2400.657298][ T5527] support for cryptoloop has been removed. Use dm-crypt instead. [ 2400.681597][ T5472] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2400.720041][T15724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2400.811214][ T5472] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2400.915457][T15724] DVB: Unable to find symbol mt352_attach() [ 2401.012561][T15724] DVB: Unable to find symbol nxt6000_attach() [ 2401.021746][T15724] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2401.053297][T15724] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input191 [ 2401.084348][ T5472] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2401.087583][T15724] dvb-usb: schedule remote query interval to 1000 msecs. [ 2401.101057][T15724] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2401.112202][T15724] dvb-usb: bulk message failed: -22 (7/0) [ 2401.124629][T15724] dvb-usb: bulk message failed: -22 (7/0) [ 2401.256165][ T874] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2401.324866][ T5546] tipc: Enabled bearer , priority 0 [ 2401.330190][ T5546] tipc: Resetting bearer [ 2401.353354][ T5545] tipc: Disabling bearer [ 2401.358250][ T5023] Bluetooth: hci2: command tx timeout [ 2401.437646][ T874] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 2401.437679][ T874] usb 3-1: config 0 has no interface number 0 [ 2401.439988][ T874] usb 3-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 2401.440021][ T874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.440046][ T874] usb 3-1: Product: syz [ 2401.440064][ T874] usb 3-1: Manufacturer: syz [ 2401.440082][ T874] usb 3-1: SerialNumber: syz [ 2401.449621][ T874] usb 3-1: config 0 descriptor?? [ 2401.450928][ T5472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2401.473396][ T5472] 8021q: adding VLAN 0 to HW filter on device team0 [ 2401.662294][T15274] bridge0: port 1(bridge_slave_0) entered blocking state [ 2401.662439][T15274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2401.668836][T15274] bridge0: port 2(bridge_slave_1) entered blocking state [ 2401.668916][T15274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2401.854067][ T5472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2401.994501][ T5472] veth0_vlan: entered promiscuous mode [ 2402.087852][ T5472] veth1_vlan: entered promiscuous mode [ 2402.147016][T15276] dummy0: left promiscuous mode [ 2402.158009][ T5943] dvb-usb: bulk message failed: -22 (7/0) [ 2402.164050][ T5943] dvb-usb: error while querying for an remote control event. [ 2402.189478][T15276] hsr_slave_0: left promiscuous mode [ 2402.196159][T15276] hsr_slave_1: left promiscuous mode [ 2402.289815][T15276] pim6reg (unregistering): left allmulticast mode [ 2402.406875][ T4899] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 2402.428687][ T5848] usb 4-1: USB disconnect, device number 16 [ 2402.528435][ T5848] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2402.580383][ T4899] usb 6-1: config index 0 descriptor too short (expected 897, got 27) [ 2402.599945][ T4899] usb 6-1: config 2 has an invalid interface number: 1 but max is -1 [ 2402.609861][ T4899] usb 6-1: config 2 has an invalid interface number: 1 but max is -1 [ 2402.619127][ T4899] usb 6-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 2402.628948][ T4899] usb 6-1: config 2 has no interface number 0 [ 2402.726939][ T4899] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 2402.739579][ T4899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.747972][ T4899] usb 6-1: Product: syz [ 2402.752254][ T4899] usb 6-1: Manufacturer: syz [ 2402.756965][ T4899] usb 6-1: SerialNumber: syz [ 2403.069791][ T30] kauditd_printk_skb: 241 callbacks suppressed [ 2403.069811][ T30] audit: type=1326 audit(1759697149.625:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.0.8701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 2403.119605][ T30] audit: type=1326 audit(1759697149.675:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.0.8701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 2403.141907][ C1] vkms_vblank_simulate: vblank timer overrun [ 2403.150440][ T30] audit: type=1326 audit(1759697149.715:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.0.8701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 2403.172461][ C1] vkms_vblank_simulate: vblank timer overrun [ 2403.191382][ T30] audit: type=1326 audit(1759697149.745:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.0.8701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 2403.214534][ T30] audit: type=1326 audit(1759697149.745:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.0.8701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 2403.237332][ T30] audit: type=1326 audit(1759697149.745:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.0.8701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 2403.259344][ C1] vkms_vblank_simulate: vblank timer overrun [ 2403.267867][ T30] audit: type=1326 audit(1759697149.745:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.0.8701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 2403.289889][ C1] vkms_vblank_simulate: vblank timer overrun [ 2403.299531][ T30] audit: type=1326 audit(1759697149.745:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.0.8701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 2403.321553][ C1] vkms_vblank_simulate: vblank timer overrun [ 2403.328519][ T30] audit: type=1326 audit(1759697149.825:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.0.8701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 2403.351210][ T30] audit: type=1326 audit(1759697149.855:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.0.8701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 2403.373215][ C1] vkms_vblank_simulate: vblank timer overrun [ 2403.435200][ T5023] Bluetooth: hci2: command tx timeout [ 2404.056463][ T874] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in cold state, will try to load a firmware [ 2404.073023][ T874] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2404.087702][ T874] dib0700: firmware download failed at 7 with -22 [ 2404.127316][ T874] usb 3-1: USB disconnect, device number 127 [ 2404.154762][ T4899] cdc_ncm 6-1:2.1: CDC Union missing and no IAD found [ 2404.182160][ T4899] cdc_ncm 6-1:2.1: bind() failure [ 2404.198064][ T4899] usb 6-1: no audio or video endpoints found [ 2404.211433][ T4899] usb 6-1: USB disconnect, device number 125 [ 2404.239626][ T5472] veth0_macvtap: entered promiscuous mode [ 2404.288688][ T5472] veth1_macvtap: entered promiscuous mode [ 2404.313546][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2404.332445][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2404.347167][ T1155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.357564][ T1155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.383847][ T1155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.394983][ T1155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.572311][T15271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2404.590529][T15271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2404.622181][T15271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2404.694946][T15271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2405.745888][ T4899] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2406.107734][ T5593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2406.122191][ T5593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2406.260397][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.266890][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.363321][ T4899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2406.378825][ T4899] usb 3-1: no configurations [ 2406.383469][ T4899] usb 3-1: can't read configurations, error -22 [ 2407.118861][ T5616] binder: 5612:5616 ioctl c0306201 80000540 returned -22 [ 2407.425784][ T5613] fuse: Unknown parameter 'Ld' [ 2408.861678][T15276] IPVS: stop unused estimator thread 0... [ 2408.966084][ T5633] binder: 5632:5633 unknown command 0 [ 2408.984627][ T5633] binder: 5632:5633 ioctl c0306201 80000480 returned -22 [ 2409.166516][ T4899] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2409.341453][ T5638] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2409.349206][ T5638] bridge0: port 3(bond4) entered blocking state [ 2409.358210][ T5638] bridge0: port 3(bond4) entered disabled state [ 2409.364904][ T5638] bond4: entered allmulticast mode [ 2409.375297][ T5638] bond4: entered promiscuous mode [ 2409.387348][ T5637] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 2409.397788][ T5624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2409.416557][ T5624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2410.975936][ T4899] usb 3-1: device descriptor read/64, error -71 [ 2411.027393][T30711] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2411.041467][T30711] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2411.060192][ T5668] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2411.091717][ T5668] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2411.101089][ T5668] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2411.215937][ T4899] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2411.329113][T27730] : (slave syz_tun): Releasing backup interface [ 2411.370475][ T5659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2411.380246][ T5659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2411.404251][ T4899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2411.412897][ T4899] usb 3-1: no configurations [ 2411.418545][ T4899] usb 3-1: can't read configurations, error -22 [ 2411.425637][ T4899] usb usb3-port1: attempt power cycle [ 2411.529184][ T5671] chnl_net:caif_netlink_parms(): no params data found [ 2411.644647][ T5671] bridge0: port 1(bridge_slave_0) entered blocking state [ 2411.653462][ T5671] bridge0: port 1(bridge_slave_0) entered disabled state [ 2411.662117][ T5671] bridge_slave_0: entered allmulticast mode [ 2411.671144][ T5671] bridge_slave_0: entered promiscuous mode [ 2411.694565][ T5671] bridge0: port 2(bridge_slave_1) entered blocking state [ 2411.702151][ T5671] bridge0: port 2(bridge_slave_1) entered disabled state [ 2411.710934][ T5671] bridge_slave_1: entered allmulticast mode [ 2411.720045][ T5671] bridge_slave_1: entered promiscuous mode [ 2411.762152][ T5671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2411.775023][ T5671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2411.837273][ T5671] team0: Port device team_slave_0 added [ 2411.848246][ T5671] team0: Port device team_slave_1 added [ 2411.899089][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2411.906861][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2411.947162][ T5671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2411.975827][ T5943] IPVS: starting estimator thread 0... [ 2411.982781][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2411.994399][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2412.022320][ T5671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2412.065475][ T5686] IPVS: using max 26 ests per chain, 62400 per kthread [ 2412.173454][ T5671] hsr_slave_0: entered promiscuous mode [ 2412.181514][ T5671] hsr_slave_1: entered promiscuous mode [ 2412.188762][ T5671] debugfs: 'hsr0' already exists in 'hsr' [ 2412.194554][ T5671] Cannot create hsr debugfs directory [ 2412.406272][ T8538] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2412.471156][ T5696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8730'. [ 2412.607397][ T8538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2412.620710][ T8538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2412.631416][ T8538] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2412.661138][ T8538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2412.679319][ T8538] usb 2-1: config 0 descriptor?? [ 2412.762669][ T5671] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 2412.946092][ T5671] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2412.961358][ T5671] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2413.007842][ T5671] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2413.032232][ T5671] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2413.120726][ T5668] Bluetooth: hci2: command 0x0405 tx timeout [ 2413.173175][ T5671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2413.176332][ T8538] cp2112 0003:10C4:EA90.005C: unknown main item tag 0x0 [ 2413.205287][T30711] Bluetooth: hci5: command tx timeout [ 2413.206477][ T8538] cp2112 0003:10C4:EA90.005C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 2413.220876][ T5671] 8021q: adding VLAN 0 to HW filter on device team0 [ 2413.238433][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 2413.245710][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2413.314561][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 2413.321751][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2413.349100][ T5716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8733'. [ 2413.396743][ T5716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8733'. [ 2413.521562][ T5671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2413.561479][ T8538] cp2112 0003:10C4:EA90.005C: error requesting version [ 2413.577806][ T8538] cp2112 0003:10C4:EA90.005C: probe with driver cp2112 failed with error -5 [ 2413.603018][ T5671] veth0_vlan: entered promiscuous mode [ 2413.632139][ T5671] veth1_vlan: entered promiscuous mode [ 2413.669088][ T5671] veth0_macvtap: entered promiscuous mode [ 2413.681101][ T5671] veth1_macvtap: entered promiscuous mode [ 2413.701562][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2413.719219][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2413.735463][T15271] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.760893][T15271] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.799899][ T5717] tipc: Started in network mode [ 2413.808124][ T5717] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 2413.829542][ T5717] tipc: Enabling of bearer rejected, failed to enable media [ 2413.849122][T15271] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.859907][T15271] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2414.056738][T15276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2414.064758][T15276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2414.119190][T15274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2414.130959][T15274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2414.573950][ T5729] tmpfs: Unknown parameter 'mMIVMCD'_vZ>iJ6P3!qh/U}x;0>W[o2N|XTZajX1XZ{(Hlə_*)a8|t} Xp$R)RV'9RdXXi'ܣj<}Ka hmJF}x^w' [ 2414.876852][ T8538] usb 6-1: new full-speed USB device number 126 using dummy_hcd [ 2415.253484][ T897] usb 2-1: USB disconnect, device number 14 [ 2415.275799][T30711] Bluetooth: hci5: command tx timeout [ 2415.288985][ T8538] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2415.365164][ T8538] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2415.412191][ T8538] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2415.442880][ T8538] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2415.662698][ T5740] pim6reg9: entered allmulticast mode [ 2415.666730][ T8538] usb 6-1: usb_control_msg returned -32 [ 2415.679436][ T8538] usbtmc 6-1:16.0: can't read capabilities [ 2415.682073][ T5740] ptrace attach of "./syz-executor exec"[4841] was attempted by "./syz-executor exec"[5740] [ 2415.956562][ T897] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2416.019310][ T5747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2416.031637][ T5747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2416.112522][ T5736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2416.126545][ T5736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2416.142085][ T897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2416.155306][ T897] usb 2-1: no configurations [ 2416.166957][ T897] usb 2-1: can't read configurations, error -22 [ 2416.316031][ T8538] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2416.465696][ T8538] usb 4-1: Using ep0 maxpacket: 8 [ 2416.473666][ T8538] usb 4-1: config 99 has an invalid interface number: 178 but max is 0 [ 2416.486602][ T8538] usb 4-1: config 99 contains an unexpected descriptor of type 0x1, skipping [ 2416.496933][ T8538] usb 4-1: config 99 has an invalid descriptor of length 147, skipping remainder of the config [ 2416.508786][ T8538] usb 4-1: config 99 has no interface number 0 [ 2416.515040][ T8538] usb 4-1: config 99 interface 178 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 2416.528086][ T8538] usb 4-1: config 99 interface 178 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 2416.560238][ T8538] usb 4-1: config 99 interface 178 altsetting 0 endpoint 0xF has invalid maxpacket 56936, setting to 1024 [ 2416.581299][ T8538] usb 4-1: config 99 interface 178 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 2416.592374][ T8538] usb 4-1: config 99 interface 178 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 2416.606410][ T8538] usb 4-1: config 99 interface 178 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 2416.618361][ T8538] usb 4-1: config 99 interface 178 altsetting 0 has 10 endpoint descriptors, different from the interface descriptor's value: 15 [ 2416.636448][ T8538] usb 4-1: New USB device found, idVendor=041e, idProduct=4029, bcdDevice=97.a5 [ 2416.650056][ T8538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.659516][ T8538] usb 4-1: Product: я [ 2416.663890][ T8538] usb 4-1: Manufacturer: ч [ 2416.669946][ T8538] usb 4-1: SerialNumber: syz [ 2416.742639][ T5749] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2416.751626][ T5749] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2416.757264][ T30] kauditd_printk_skb: 137 callbacks suppressed [ 2416.757287][ T30] audit: type=1326 audit(1759697163.315:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5759 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 2416.791649][ T30] audit: type=1326 audit(1759697163.315:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5759 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 2416.817096][ T30] audit: type=1326 audit(1759697163.345:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5759 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=80 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 2416.842520][ T30] audit: type=1326 audit(1759697163.345:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5759 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 2416.867379][ T30] audit: type=1326 audit(1759697163.345:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5759 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 2417.199392][ T5749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2417.211079][ T5749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2417.229509][ T8538] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4029 [ 2417.241707][ T8538] gspca_zc3xx: reg_w_i err -71 [ 2417.355260][T30711] Bluetooth: hci5: command tx timeout [ 2417.558116][ T874] usb 6-1: USB disconnect, device number 126 [ 2417.837461][ T8538] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2417.868808][ T8538] gspca_zc3xx 4-1:99.178: probe with driver gspca_zc3xx failed with error -71 [ 2417.902487][ T8538] usb 4-1: USB disconnect, device number 17 [ 2419.435703][ T5668] Bluetooth: hci5: command tx timeout [ 2419.571511][ T8538] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2419.759768][ T30] audit: type=1326 audit(1759697166.315:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.0.8755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 2419.784530][ T30] audit: type=1326 audit(1759697166.345:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.0.8755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 2419.812386][ T8538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2419.844929][ T8538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2419.857578][ T8538] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2419.870900][ T30] audit: type=1326 audit(1759697166.345:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.0.8755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=80 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 2419.915914][ T8538] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 2419.933709][ T8538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2419.942589][ T30] audit: type=1326 audit(1759697166.345:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.0.8755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 2419.970848][ T30] audit: type=1326 audit(1759697166.345:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.0.8755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 2419.995819][ T8538] usb 4-1: config 0 descriptor?? [ 2420.528383][ T8538] ortek 0003:1223:3F07.005D: unknown main item tag 0x0 [ 2420.536042][ T8538] ortek 0003:1223:3F07.005D: unknown main item tag 0x0 [ 2420.559766][ T8538] ortek 0003:1223:3F07.005D: unknown main item tag 0x0 [ 2420.581298][ T8538] ortek 0003:1223:3F07.005D: unknown main item tag 0x0 [ 2420.622715][ T8538] ortek 0003:1223:3F07.005D: unknown main item tag 0x0 [ 2420.651650][ T8538] ortek 0003:1223:3F07.005D: unknown main item tag 0x0 [ 2420.680563][ T8538] ortek 0003:1223:3F07.005D: unknown main item tag 0x0 [ 2420.892088][ T8538] ortek 0003:1223:3F07.005D: unknown main item tag 0x0 [ 2420.925982][ T8538] ortek 0003:1223:3F07.005D: unknown main item tag 0x0 [ 2420.934589][ T8538] ortek 0003:1223:3F07.005D: unknown main item tag 0x0 [ 2420.958764][ T8538] ortek 0003:1223:3F07.005D: item fetching failed at offset 66/69 [ 2420.996418][ T8538] ortek 0003:1223:3F07.005D: probe with driver ortek failed with error -22 [ 2421.516577][ T5668] Bluetooth: hci5: command 0x0405 tx timeout [ 2421.698074][ T5943] usb 4-1: USB disconnect, device number 18 [ 2421.978213][ T30] audit: type=1804 audit(1759697168.525:4444): pid=5843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8766" name="/newroot/66/bus" dev="tmpfs" ino=363 res=1 errno=0 [ 2423.524523][ T5859] FAULT_INJECTION: forcing a failure. [ 2423.524523][ T5859] name failslab, interval 1, probability 0, space 0, times 0 [ 2423.542831][ T5859] CPU: 0 UID: 0 PID: 5859 Comm: syz.5.8772 Not tainted syzkaller #0 PREEMPT(full) [ 2423.542853][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2423.542865][ T5859] Call Trace: [ 2423.542872][ T5859] [ 2423.542879][ T5859] dump_stack_lvl+0x189/0x250 [ 2423.542912][ T5859] ? __pfx____ratelimit+0x10/0x10 [ 2423.542939][ T5859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2423.542958][ T5859] ? __pfx__printk+0x10/0x10 [ 2423.542987][ T5859] ? __pfx___might_resched+0x10/0x10 [ 2423.543004][ T5859] ? fs_reclaim_acquire+0x7d/0x100 [ 2423.543031][ T5859] should_fail_ex+0x414/0x560 [ 2423.543056][ T5859] should_failslab+0xa8/0x100 [ 2423.543082][ T5859] __kmalloc_noprof+0xcb/0x7f0 [ 2423.543103][ T5859] ? tomoyo_encode+0x28b/0x550 [ 2423.543128][ T5859] tomoyo_encode+0x28b/0x550 [ 2423.543152][ T5859] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2423.543175][ T5859] ? tomoyo_domain+0xd9/0x130 [ 2423.543203][ T5859] tomoyo_path2_perm+0x265/0x680 [ 2423.543221][ T5859] ? tomoyo_path2_perm+0x235/0x680 [ 2423.543239][ T5859] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 2423.543294][ T5859] tomoyo_path_rename+0x141/0x190 [ 2423.543319][ T5859] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 2423.543348][ T5859] ? pid_revalidate+0x20d/0x260 [ 2423.543374][ T5859] security_path_rename+0x250/0x490 [ 2423.543400][ T5859] do_renameat2+0x52b/0xa50 [ 2423.543436][ T5859] ? __pfx_do_renameat2+0x10/0x10 [ 2423.543466][ T5859] ? strncpy_from_user+0x150/0x290 [ 2423.543487][ T5859] ? getname_flags+0x1e5/0x540 [ 2423.543506][ T5859] __ia32_sys_renameat2+0xce/0xe0 [ 2423.543531][ T5859] __do_fast_syscall_32+0xb6/0x2b0 [ 2423.543549][ T5859] ? lockdep_hardirqs_on+0x9c/0x150 [ 2423.543567][ T5859] do_fast_syscall_32+0x34/0x80 [ 2423.543583][ T5859] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2423.543603][ T5859] RIP: 0023:0xf7f43539 [ 2423.543616][ T5859] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2423.543631][ T5859] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 2423.543648][ T5859] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 2423.543659][ T5859] RDX: 0000000000000004 RSI: 0000000080000440 RDI: 0000000000000002 [ 2423.543670][ T5859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2423.543679][ T5859] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2423.543688][ T5859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2423.543710][ T5859] [ 2423.543728][ T5859] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2424.299718][ T5873] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8774'. [ 2424.641840][ T5848] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2424.775858][ T30] audit: type=1326 audit(1759697171.335:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.2.8778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 2424.799161][ T8538] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2424.817839][ T30] audit: type=1326 audit(1759697171.375:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.2.8778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 2424.840847][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 2424.847661][ T30] audit: type=1326 audit(1759697171.405:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.2.8778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=80 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 2424.871797][ T5848] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2424.881730][ T5848] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2424.896018][ T30] audit: type=1326 audit(1759697171.405:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.2.8778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 2424.918806][ T5848] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2424.929909][ T5848] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 48416, setting to 1024 [ 2424.942869][ T30] audit: type=1326 audit(1759697171.405:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.2.8778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 2424.966350][ T5848] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2424.977317][ T8538] usb 6-1: Using ep0 maxpacket: 8 [ 2424.983032][ T5848] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2424.999197][ T8538] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2425.008668][ T8538] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2425.019616][ T5848] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2425.029947][ T8538] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2425.041784][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2425.050613][ T8538] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2425.063294][ T8538] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2425.082985][ T8538] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2425.093319][ T8538] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2425.225007][ T5891] fuse: Bad value for 'rootmode' [ 2425.286891][ T5848] usb 2-1: usb_control_msg returned -32 [ 2425.292915][ T5848] usbtmc 2-1:16.0: can't read capabilities [ 2425.347353][ T8538] usb 6-1: usb_control_msg returned -32 [ 2425.353036][ T8538] usbtmc 6-1:16.0: can't read capabilities [ 2425.429826][ T5893] pim6reg: entered allmulticast mode [ 2425.439799][ T5893] pim6reg: left allmulticast mode [ 2425.599847][T15276] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2425.740047][T15276] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2425.834088][T15276] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2425.947829][T15276] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.454615][T15276] bridge0: port 3(batadv0) entered disabled state [ 2426.483036][ T5668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2426.500188][ T5668] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2426.511155][ T5668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2426.521520][ T5668] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2426.531041][ T5668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2426.571083][T15276] bridge_slave_1: left allmulticast mode [ 2426.577760][T15276] bridge_slave_1: left promiscuous mode [ 2426.587338][T15276] bridge0: port 2(bridge_slave_1) entered disabled state [ 2426.657825][T15276] bridge_slave_0: left allmulticast mode [ 2426.663690][T15276] bridge_slave_0: left promiscuous mode [ 2426.670812][T15276] bridge0: port 1(bridge_slave_0) entered disabled state [ 2427.097761][ T5848] usb 2-1: USB disconnect, device number 17 [ 2427.596595][ T874] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2427.616543][T15276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2427.628711][T15276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2427.639939][T15276] bond0 (unregistering): Released all slaves [ 2427.775913][ T874] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2427.786183][ T874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2427.794314][ T874] usb 2-1: Product: syz [ 2427.799240][ T874] usb 2-1: Manufacturer: syz [ 2427.816541][ T874] usb 2-1: SerialNumber: syz [ 2427.824274][ T874] usb 2-1: config 0 descriptor?? [ 2427.854244][ T874] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2427.867860][ T874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2427.898506][ T874] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2427.908682][ T874] usb 2-1: media controller created [ 2427.964756][ T874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2427.976063][T15276] bond1 (unregistering): Released all slaves [ 2428.064744][ T874] DVB: Unable to find symbol mt352_attach() [ 2428.158994][ T8538] usb 6-1: USB disconnect, device number 127 [ 2428.250394][T15276] tipc: Left network mode [ 2428.261222][ T874] DVB: Unable to find symbol nxt6000_attach() [ 2428.336566][ T874] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2428.402982][ T874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input192 [ 2428.503762][ T874] dvb-usb: schedule remote query interval to 1000 msecs. [ 2428.528970][ T874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2428.555894][ T5668] Bluetooth: hci0: command tx timeout [ 2428.566181][ T874] dvb-usb: bulk message failed: -22 (7/0) [ 2428.579365][ T874] dvb-usb: bulk message failed: -22 (7/0) [ 2429.418848][ T5943] usb 2-1: USB disconnect, device number 18 [ 2429.599790][ T5943] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2429.849787][ T5951] netlink: 'syz.5.8791': attribute type 1 has an invalid length. [ 2429.920893][ T5951] batadv_slave_1: entered promiscuous mode [ 2429.946321][ T5951] batadv_slave_1: entered allmulticast mode [ 2430.012287][T15276] hsr_slave_0: left promiscuous mode [ 2430.023201][T15276] hsr_slave_1: left promiscuous mode [ 2430.070067][T15276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2430.114211][T15276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2430.147091][T15276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2430.172489][T15276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2430.330618][T15276] veth1_macvtap: left promiscuous mode [ 2430.369423][T15276] veth0_macvtap: left promiscuous mode [ 2430.389526][T15276] veth1_vlan: left promiscuous mode [ 2430.412597][T15276] veth0_vlan: left promiscuous mode [ 2430.494102][ T30] audit: type=1326 audit(1759697177.055:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 2430.602233][ T30] audit: type=1326 audit(1759697177.055:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 2430.654808][ T5668] Bluetooth: hci0: command tx timeout [ 2430.693908][ T30] audit: type=1326 audit(1759697177.055:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=80 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 2430.718773][ T30] audit: type=1326 audit(1759697177.055:4453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 2430.741842][ T30] audit: type=1326 audit(1759697177.055:4454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 2431.553855][ T5985] program syz.0.8796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2431.661870][ T5987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8797'. [ 2431.713468][ T5988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8797'. [ 2432.527575][ T5912] chnl_net:caif_netlink_parms(): no params data found [ 2432.719499][ T5668] Bluetooth: hci0: command tx timeout [ 2433.117815][ T897] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2433.263449][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 2433.271271][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 2433.279618][ T5912] bridge_slave_0: entered allmulticast mode [ 2433.289951][ T5912] bridge_slave_0: entered promiscuous mode [ 2433.302472][ T897] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2433.314146][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 2433.325298][ T897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2433.333352][ T897] usb 3-1: Product: syz [ 2433.345961][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 2433.363680][ T5912] bridge_slave_1: entered allmulticast mode [ 2433.372870][ T897] usb 3-1: Manufacturer: syz [ 2433.385184][ T897] usb 3-1: SerialNumber: syz [ 2433.393937][ T5912] bridge_slave_1: entered promiscuous mode [ 2433.497651][ T897] usb 3-1: config 0 descriptor?? [ 2433.557169][ T897] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2433.581078][ T897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2433.747434][ T897] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2433.839344][ T897] usb 3-1: media controller created [ 2433.919635][ T897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2433.922592][ T5668] Bluetooth: hci4: command 0x0406 tx timeout [ 2434.538981][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2434.548251][ T897] DVB: Unable to find symbol mt352_attach() [ 2434.564352][T15276] IPVS: stop unused estimator thread 0... [ 2434.570174][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2434.714043][ T5912] team0: Port device team_slave_0 added [ 2434.734287][ T5912] team0: Port device team_slave_1 added [ 2434.794308][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2434.804626][T30711] Bluetooth: hci0: command tx timeout [ 2434.822959][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2434.880249][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2435.013954][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2435.050030][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2435.122799][ T897] DVB: Unable to find symbol nxt6000_attach() [ 2435.132149][ T897] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2435.145281][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2435.171785][ T897] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input193 [ 2435.187802][ T897] dvb-usb: schedule remote query interval to 1000 msecs. [ 2435.194945][ T897] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2435.237957][ T897] dvb-usb: bulk message failed: -22 (7/0) [ 2435.243762][ T897] dvb-usb: bulk message failed: -22 (7/0) [ 2435.297514][ T897] usb 3-1: USB disconnect, device number 7 [ 2435.401984][ T5912] hsr_slave_0: entered promiscuous mode [ 2435.416821][ T5912] hsr_slave_1: entered promiscuous mode [ 2435.431835][ T5912] debugfs: 'hsr0' already exists in 'hsr' [ 2435.443448][ T897] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2435.454733][ T5912] Cannot create hsr debugfs directory [ 2435.732299][ T30] audit: type=1326 audit(1759697182.285:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.1.8803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 2435.763867][ T30] audit: type=1326 audit(1759697182.285:4456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.1.8803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 2435.812593][ T30] audit: type=1326 audit(1759697182.285:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.1.8803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 2435.877217][ C1] vkms_vblank_simulate: vblank timer overrun [ 2436.094551][ T30] audit: type=1326 audit(1759697182.285:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.1.8803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 2436.108773][ T6055] input: syz1 as /devices/virtual/input/input194 [ 2436.228762][ T30] audit: type=1326 audit(1759697182.285:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.1.8803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 2436.749094][ T6068] usb usb8: usbfs: process 6068 (syz.2.8811) did not claim interface 0 before use [ 2437.321259][ T5912] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2437.571280][ T5912] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2437.698495][ T5912] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2437.791523][ T5912] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2438.010292][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2438.041534][ T5912] 8021q: adding VLAN 0 to HW filter on device team0 [ 2438.077301][T15269] bridge0: port 1(bridge_slave_0) entered blocking state [ 2438.084584][T15269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2438.111646][T15269] bridge0: port 2(bridge_slave_1) entered blocking state [ 2438.118885][T15269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2438.226023][ T4899] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2438.234105][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2438.279447][ T5912] veth0_vlan: entered promiscuous mode [ 2438.292795][ T5912] veth1_vlan: entered promiscuous mode [ 2438.327871][ T5912] veth0_macvtap: entered promiscuous mode [ 2438.338135][ T5912] veth1_macvtap: entered promiscuous mode [ 2438.357651][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2438.371946][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2438.400964][T15276] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.502806][T15276] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.541121][T15276] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.568535][T15276] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.579115][ T4899] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 769 [ 2438.629843][ T4899] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2438.647096][ T4899] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2438.662795][ T4899] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 2438.686973][ T4899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2438.729814][ T6079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2438.760454][T15276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2438.787070][T15276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2438.830045][ T4899] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2438.863338][ T4899] usb 2-1: invalid MIDI in EP 0 [ 2438.886132][T15271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2438.919824][T15271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2439.018338][ T5351] udevd[5351]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2439.054016][ T4899] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2439.392614][ T6105] netlink: 6 bytes leftover after parsing attributes in process `syz.6.8784'. [ 2439.422449][ T6105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2439.491535][ T6108] lo: entered promiscuous mode [ 2439.507260][ T6108] tunl0: entered promiscuous mode [ 2439.527913][ T6108] gre0: entered promiscuous mode [ 2439.556319][ T6108] gretap0: entered promiscuous mode [ 2439.584756][ T6108] erspan0: entered promiscuous mode [ 2439.612791][ T6108] ip_vti0: entered promiscuous mode [ 2439.649363][ T6108] ip6_vti0: entered promiscuous mode [ 2439.668907][ T6108] sit0: entered promiscuous mode [ 2439.717094][ T6108] ip6tnl0: entered promiscuous mode [ 2439.746717][ T6108] ip6gre0: entered promiscuous mode [ 2439.769878][ T6108] syz_tun: entered promiscuous mode [ 2439.774667][ T6114] fuse: Unknown parameter 'ycDmHvEmV; [ 2439.774667][ T6114] 0x0000000000000006' [ 2439.850315][ T6108] ip6gretap0: entered promiscuous mode [ 2439.886080][ T6108] bridge0: entered promiscuous mode [ 2439.969163][ T6108] vcan0: entered promiscuous mode [ 2439.986856][ T6108] : entered promiscuous mode [ 2439.991781][ T6108] bond_slave_0: entered promiscuous mode [ 2440.008289][ T6108] bond_slave_1: entered promiscuous mode [ 2440.030699][ T6108] 8021q: adding VLAN 0 to HW filter on device  [ 2440.052022][ T6108] team0: entered promiscuous mode [ 2440.064067][ T6108] team_slave_0: entered promiscuous mode [ 2440.104315][ T6108] team_slave_1: entered promiscuous mode [ 2440.113817][ T6108] 8021q: adding VLAN 0 to HW filter on device team0 [ 2440.194834][ T6108] dummy0: entered promiscuous mode [ 2440.203846][ T6108] nlmon0: entered promiscuous mode [ 2440.292293][ T5943] usb 2-1: USB disconnect, device number 19 [ 2440.298739][ T6108] caif0: entered promiscuous mode [ 2440.310702][ T6108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2440.489023][ T1279] : (slave bond_slave_0): link status definitely down, disabling slave [ 2440.513785][ T1279] : (slave bond_slave_1): link status definitely down, disabling slave [ 2440.554890][ T1279] : now running without any active interface! [ 2441.602138][ T6132] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8824'. [ 2441.633309][ T6134] usb usb8: usbfs: process 6134 (syz.6.8823) did not claim interface 0 before use [ 2442.405339][ T5943] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2442.583398][ T5943] usb 6-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32 [ 2442.721036][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2442.770032][ T5943] usb 6-1: Product: syz [ 2442.774347][ T5943] usb 6-1: Manufacturer: syz [ 2442.835221][ T5943] usb 6-1: SerialNumber: syz [ 2442.849879][ T5943] usb 6-1: config 0 descriptor?? [ 2442.870045][ T5943] pwc: Logitech QuickCam Zoom (new model) USB webcam detected. [ 2443.005889][ T30] audit: type=1326 audit(1759697189.545:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.2.8821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 2443.029697][ T30] audit: type=1326 audit(1759697189.545:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.2.8821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 2443.053138][ T30] audit: type=1326 audit(1759697189.545:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.2.8821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 2443.079174][ T30] audit: type=1326 audit(1759697189.545:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.2.8821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 2443.104139][ T30] audit: type=1326 audit(1759697189.545:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.2.8821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 2443.175559][ T30] audit: type=1326 audit(1759697189.545:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.2.8821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 2443.235651][ T30] audit: type=1326 audit(1759697189.545:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.2.8821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 2443.293694][ T30] audit: type=1326 audit(1759697189.545:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.2.8821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 2443.351448][ T30] audit: type=1326 audit(1759697189.545:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.2.8821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 2443.390073][ T5943] pwc: Failed to set LED on/off time (-71) [ 2443.409455][ T5943] pwc: send_video_command error -71 [ 2443.414724][ T5943] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2443.422809][ T30] audit: type=1326 audit(1759697189.545:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.2.8821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 2443.538755][ T5943] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 2443.585488][ T5943] usb 6-1: USB disconnect, device number 2 [ 2444.017583][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8834'. [ 2444.043475][ T6159] batadv0: entered promiscuous mode [ 2444.051877][ T6159] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2444.097852][ T6159] batadv0: left promiscuous mode [ 2444.906295][ T897] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2445.107545][ T897] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2445.135227][ T897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2445.236429][ T897] usb 3-1: Product: syz [ 2445.240758][ T897] usb 3-1: Manufacturer: syz [ 2445.269472][ T897] usb 3-1: SerialNumber: syz [ 2445.286561][ T897] usb 3-1: config 0 descriptor?? [ 2445.315510][ T897] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2445.357850][ T897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2445.405674][ T897] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2445.436630][ T897] usb 3-1: media controller created [ 2445.504052][ T897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2445.691429][ T897] DVB: Unable to find symbol mt352_attach() [ 2445.887204][ T6196] fuse: Unknown parameter 'ycDmHvEmV; [ 2445.887204][ T6196] 0x0000000000000006' [ 2446.130341][ T897] DVB: Unable to find symbol nxt6000_attach() [ 2446.151962][ T897] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2446.194867][ T897] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input195 [ 2446.247713][ T897] dvb-usb: schedule remote query interval to 1000 msecs. [ 2446.268475][ T897] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2446.297448][ T897] dvb-usb: bulk message failed: -22 (7/0) [ 2446.315873][ T897] dvb-usb: bulk message failed: -22 (7/0) [ 2447.275274][ T5943] dvb-usb: bulk message failed: -22 (7/0) [ 2447.281067][ T5943] dvb-usb: error while querying for an remote control event. [ 2447.289106][ T6206] netlink: 'syz.1.8845': attribute type 12 has an invalid length. [ 2447.307951][ T6206] netlink: 'syz.1.8845': attribute type 29 has an invalid length. [ 2447.324922][ T6206] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8845'. [ 2447.357618][ T6210] netlink: 'syz.1.8845': attribute type 12 has an invalid length. [ 2447.367958][ T6210] netlink: 'syz.1.8845': attribute type 29 has an invalid length. [ 2447.376032][ T6210] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8845'. [ 2447.398618][ T6211] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.8844'. [ 2447.589881][ T6220] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2447.650413][ T874] usb 3-1: USB disconnect, device number 8 [ 2447.752593][ T874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2448.319441][ T6240] loop6: detected capacity change from 0 to 524287999 [ 2448.366266][ T5351] buffer_io_error: 29 callbacks suppressed [ 2448.366283][ T5351] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 2448.398383][ T6237] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8852'. [ 2448.590064][ T6225] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8848'. [ 2449.563335][ T6246] fuse: Unknown parameter 'ycDmHvEmV; [ 2449.563335][ T6246] 0x0000000000000006' [ 2450.071323][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8855'. [ 2450.112126][ T6258] bond0: entered promiscuous mode [ 2450.124402][ T6258] bond_slave_0: entered promiscuous mode [ 2450.140480][ T6258] bond_slave_1: entered promiscuous mode [ 2450.163301][ T6258] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2450.183290][ T6258] bond0: left promiscuous mode [ 2450.197230][ T6258] bond_slave_0: left promiscuous mode [ 2450.210352][ T6258] bond_slave_1: left promiscuous mode [ 2451.772620][ T6286] FAULT_INJECTION: forcing a failure. [ 2451.772620][ T6286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2451.791094][ T6286] CPU: 1 UID: 0 PID: 6286 Comm: syz.5.8859 Not tainted syzkaller #0 PREEMPT(full) [ 2451.791114][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2451.791123][ T6286] Call Trace: [ 2451.791129][ T6286] [ 2451.791136][ T6286] dump_stack_lvl+0x189/0x250 [ 2451.791158][ T6286] ? __pfx____ratelimit+0x10/0x10 [ 2451.791181][ T6286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2451.791198][ T6286] ? __pfx__printk+0x10/0x10 [ 2451.791220][ T6286] ? __might_fault+0xb0/0x130 [ 2451.791247][ T6286] should_fail_ex+0x414/0x560 [ 2451.791269][ T6286] _copy_to_iter+0x404/0x1790 [ 2451.791301][ T6286] ? __pfx__copy_to_iter+0x10/0x10 [ 2451.791325][ T6286] ? rcu_is_watching+0x15/0xb0 [ 2451.791344][ T6286] ? splice_from_pipe_next+0x61d/0x670 [ 2451.791365][ T6286] ? page_copy_sane+0x4e/0x280 [ 2451.791387][ T6286] copy_page_to_iter+0x10c/0x1c0 [ 2451.791412][ T6286] pipe_to_user+0xa8/0x140 [ 2451.791427][ T6286] __splice_from_pipe+0x34d/0x920 [ 2451.791457][ T6286] ? __pfx_pipe_to_user+0x10/0x10 [ 2451.791473][ T6286] __se_sys_vmsplice+0x316/0x10d0 [ 2451.791494][ T6286] ? get_pid_task+0x20/0x1f0 [ 2451.791525][ T6286] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 2451.791565][ T6286] ? ksys_write+0x1cb/0x250 [ 2451.791588][ T6286] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2451.791604][ T6286] ? __pfx_vfs_write+0x10/0x10 [ 2451.791624][ T6286] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2451.791648][ T6286] ? fput+0xa0/0xd0 [ 2451.791663][ T6286] ? ksys_write+0x22a/0x250 [ 2451.791687][ T6286] ? lockdep_hardirqs_on+0x9c/0x150 [ 2451.791703][ T6286] __do_fast_syscall_32+0xb6/0x2b0 [ 2451.791720][ T6286] ? lockdep_hardirqs_on+0x9c/0x150 [ 2451.791736][ T6286] do_fast_syscall_32+0x34/0x80 [ 2451.791751][ T6286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2451.791768][ T6286] RIP: 0023:0xf7f43539 [ 2451.791780][ T6286] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2451.791794][ T6286] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 000000000000013c [ 2451.791810][ T6286] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680 [ 2451.791821][ T6286] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 2451.791829][ T6286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2451.791837][ T6286] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2451.791845][ T6286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2451.791865][ T6286] [ 2452.238352][ T6289] FAULT_INJECTION: forcing a failure. [ 2452.238352][ T6289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2452.280674][ T6289] CPU: 0 UID: 0 PID: 6289 Comm: syz.2.8860 Not tainted syzkaller #0 PREEMPT(full) [ 2452.280713][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2452.280727][ T6289] Call Trace: [ 2452.280736][ T6289] [ 2452.280747][ T6289] dump_stack_lvl+0x189/0x250 [ 2452.280779][ T6289] ? __pfx____ratelimit+0x10/0x10 [ 2452.280813][ T6289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2452.280840][ T6289] ? __pfx__printk+0x10/0x10 [ 2452.280874][ T6289] ? __might_fault+0xb0/0x130 [ 2452.280919][ T6289] should_fail_ex+0x414/0x560 [ 2452.280952][ T6289] _copy_from_user+0x2d/0xb0 [ 2452.280976][ T6289] input_event_from_user+0xf9/0x280 [ 2452.281006][ T6289] ? __pfx_input_event_from_user+0x10/0x10 [ 2452.281042][ T6289] ? input_inject_event+0xb6/0x340 [ 2452.281078][ T6289] evdev_write+0x2a6/0x480 [ 2452.281111][ T6289] ? __pfx_evdev_write+0x10/0x10 [ 2452.281139][ T6289] ? bpf_lsm_file_permission+0x9/0x20 [ 2452.281161][ T6289] ? security_file_permission+0x75/0x290 [ 2452.281184][ T6289] ? rw_verify_area+0x255/0x4d0 [ 2452.281212][ T6289] ? __lock_acquire+0xab9/0xd20 [ 2452.281233][ T6289] ? __pfx_evdev_write+0x10/0x10 [ 2452.281263][ T6289] vfs_write+0x27b/0xb30 [ 2452.281302][ T6289] ? __pfx_vfs_write+0x10/0x10 [ 2452.281333][ T6289] ? __fget_files+0x2a/0x420 [ 2452.281369][ T6289] ? __fget_files+0x2a/0x420 [ 2452.281401][ T6289] ? __fget_files+0x3a0/0x420 [ 2452.281433][ T6289] ? __fget_files+0x2a/0x420 [ 2452.281476][ T6289] ksys_write+0x145/0x250 [ 2452.281509][ T6289] ? __pfx_ksys_write+0x10/0x10 [ 2452.281542][ T6289] ? lockdep_hardirqs_on+0x9c/0x150 [ 2452.281567][ T6289] __do_fast_syscall_32+0xb6/0x2b0 [ 2452.281592][ T6289] ? lockdep_hardirqs_on+0x9c/0x150 [ 2452.281618][ T6289] do_fast_syscall_32+0x34/0x80 [ 2452.281642][ T6289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2452.281670][ T6289] RIP: 0023:0xf709e539 [ 2452.281688][ T6289] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2452.281715][ T6289] RSP: 002b:00000000f548e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2452.281739][ T6289] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 2452.281755][ T6289] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000 [ 2452.281769][ T6289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2452.281783][ T6289] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2452.281797][ T6289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2452.281829][ T6289] [ 2467.680202][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.687334][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2520.955809][ T5668] Bluetooth: hci2: command 0x0405 tx timeout [ 2529.119772][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.132752][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2536.325327][ T5668] Bluetooth: hci5: command 0x0405 tx timeout [ 2551.675951][ T5668] Bluetooth: hci0: command 0x0406 tx timeout [ 2590.558656][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.565633][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2600.812412][ T1279] bond4: left allmulticast mode [ 2600.818054][ T1279] bond4: left promiscuous mode [ 2600.822989][ T1279] bridge0: port 3(bond4) entered disabled state [ 2600.841061][ T1279] bridge_slave_1: left allmulticast mode [ 2600.846925][ T1279] bridge_slave_1: left promiscuous mode [ 2600.855786][ T1279] bridge0: port 2(bridge_slave_1) entered disabled state [ 2600.874363][ T1279] bridge_slave_0: left allmulticast mode [ 2600.882791][ T1279] bridge_slave_0: left promiscuous mode [ 2600.888960][ T1279] bridge0: port 1(bridge_slave_0) entered disabled state [ 2601.613464][ T1279] dvmrp0 (unregistering): left allmulticast mode [ 2601.682261][ T1279]  (unregistering): (slave bridge0): Releasing backup interface [ 2602.101055][ T1279]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 2602.111000][ T1279]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 2602.121063][ T1279]  (unregistering): (slave team0): Releasing backup interface [ 2602.131642][ T1279]  (unregistering): Released all slaves [ 2602.318895][ T1279] bond1 (unregistering): Released all slaves [ 2602.506584][ T1279] bond2 (unregistering): Released all slaves [ 2602.694418][ T1279] bond3 (unregistering): Released all slaves [ 2602.886676][ T1279] bond0 (unregistering): Released all slaves [ 2603.097183][ T1279] bond4 (unregistering): Released all slaves [ 2603.289902][ T1279] tipc: Left network mode [ 2603.610007][ T1279] dummy0: left promiscuous mode [ 2603.620076][ T1279] hsr_slave_0: left promiscuous mode [ 2603.626759][ T1279] hsr_slave_1: left promiscuous mode [ 2604.173301][ T1279] team0 (unregistering): Port device team_slave_1 removed [ 2604.240140][ T1279] team0 (unregistering): Port device team_slave_0 removed [ 2651.998921][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.005871][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.438507][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.444902][ T1302] ieee802154 phy1 wpan1: encryption failed: -22