last executing test programs: 13.136828579s ago: executing program 2 (id=1409): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000040)=[{0x6, 0x40, 0x8f, 0x7ffcffff}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) getdents64(r1, 0xfffffffffffffffe, 0xff80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_getres(0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x1, 0x2, 0x3, 0x1}}) preadv(r0, 0x0, 0x0, 0xd4, 0x4) 12.956345084s ago: executing program 2 (id=1410): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @mcast1, 0x7}, 0x54) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 12.694263841s ago: executing program 2 (id=1411): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcc}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004890000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960207142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe8023c889fd4cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337bc5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35db96c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae374bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0c4367ef4124bfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de589020000dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161520b7e7d37b581a0f51fe26167e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800af3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09229dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a411347051460326f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9c5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba33770ce3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f24600000000a80455f324746048ea24c0df0375e2cf333fa90a51cb4cc307e208a93d56368c920c239d0b3a21136d20d4c3ac328254adc96753ab34c4e31b500f71a49a75d9d598035765a72278bc823f63f770ee055e35c367be5301fcaf733e0caad10e0e1eb103b4783243c299729b4c9e26a4a6e0f2e1170e07c63fb58bcc8e145d9d9e54291361cd906ad379fa99b345a3002a2769af372eeadb9c8ebfd4402866f278781cc0d71ecbfcb16b0dfab8043f39b44cf8cc98266e6ffd9122fe16acf0b9071e359ff2fe351601c4ef491fc21cec175d0ed34885b80e8ab975f0552756be2ead3f963487d04a0fdf28aa7f59330c2f0c78ed3800d5eeaa9627472480af1e688e79bb873503c1aecdb0b5d3dda8cb3f0c189fad95955438c0fad34d4f60755d80e3977767be97443e95f7b7982c19a731a07cda09df5b746d5ad96c3e0b84493d94bd211ff1f0e30fc959322317aff59e86e512140a9cae22becca0f195b508905fce03ab6dd01dfb1c91600ef6119aeff341d04ee74c02a717b2f6107479989cd5075e806ea2c5aad0e02db9dc43b10d2792db042e7a2cc55779403b65e442a26d1ec0227fe5d05d0d63f4b0c1ae44f391b6"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001300050000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="12030000000d00000a000100ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffc, 0x200, 0x3, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000), 0x0) 12.549372569s ago: executing program 2 (id=1412): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x2080, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000240a3cccd4184a26d8703cd16d888447693bd9f592af49d1811f22e83f4d93003ca662859861f63bf33dd03093455790884fefd960d62ac64755494dfb1e8f5e27a8e65886946071b771aa10b32ff72533cf5318874db8e54f06a8de6f513e0e74adb8d08704758581e462cc8f7f9c3302d0791d9114e78de0d422ab1d648b53ca4ce40e4fad95ff3ebd8af6523cbf3624967e6945b", @ANYRES16=r3, @ANYBLOB="000429bd7000ffdbdf250200000008000b000400000008003c00ff07000008003b000b0000000a000900aaaaaaaaaaaa000005002f000000000005002f0000000000"], 0x48}}, 0x800) r4 = open(&(0x7f0000000240)='.\x00', 0x8500, 0x29) flock(r4, 0x1) flock(r4, 0x1) flock(r1, 0x5) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) 11.699700186s ago: executing program 2 (id=1420): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = io_uring_setup(0x5287, &(0x7f0000000180)={0x0, 0x255a, 0x800, 0x0, 0x2fe}) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000240)={r4}, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x21000, 0x600000d, 0x12, r0, 0x180000000) 11.369970533s ago: executing program 2 (id=1424): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000150002000000140016801000088029ff0380050001000100"/56], 0x38}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "23a0426988290ae6c32cb3dcf46aea1c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048001}, 0x4081) 10.730479387s ago: executing program 32 (id=1424): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000150002000000140016801000088029ff0380050001000100"/56], 0x38}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "23a0426988290ae6c32cb3dcf46aea1c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048001}, 0x4081) 7.381017081s ago: executing program 1 (id=1438): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x1000000d, 0x9, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x12, r4, 0xb8013000) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, 0x0) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r6, 0x402, 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r7, 0x6000000) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ff"], 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x1050) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffd8a3555288057bff0000000000000000005a023e8c45af8a82000000a42661ca8d280ad9000000000000000000000000000000000000000000000000fcffffff00000000e5122af40000003d2ff8ec6abfd296000000000000000000e2ffffff0000000000000000000000009fcf28db48dee0dcbc0020bf021b93112b8edb88a8f3abb7d51c3b710ef4927c209feb92d867b98aeebb80aabb2ad6930bd5aee46e9a98cfe71f03f3d6e4a9d6c14190aacf14b6c2c874b157694b219453fc56935ed8bd4e"]}, 0x167) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.355086311s ago: executing program 1 (id=1442): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x80000) sendto$inet(r0, &(0x7f0000000340)="303e7bd114231db6050487439254522db8d38ee89917645ee34a223753cfada393dda9a2e8c1edafeb901062de6d4a0cf4a273b00c08a566ffb5cee77685dc36656a77105d9bbdf240d7e99bacd36f36615f7af95eca43326320a8699fed131b7140f368b489af3caf3305bc817b0f", 0x59, 0x2000c045, &(0x7f00000007c0)={0x2, 0x4e20, @multicast2}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x20f}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000008c0)={0x2, 0x0, [{0x1, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffffc, 0x5, 0x920000000000, 0x4, 0x15ab}}, {0x9, 0x2, 0x0, 0x0, @adapter={0x4, 0x8000, 0x1c, 0x0, 0x5}}]}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket(0x11, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x2, 0x81, 0x80000, 0x374}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r6, 0x742f, 0x77ae, 0x1, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r11, &(0x7f0000000c00)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x46}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x40408d1) shutdown(r11, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0xfffffffb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x9}], 0x1c) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f0000000000)={0xf, 0x4, 0x9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000940)="9bc6ba866209ba9a49e15ab438c905e5a5f77ee8dbc6102bc52340dcefd1abc456335533c0f2667da56bd5574ef23ee8739b779690fb856c56e61d5d64c0fe9f0bb8dae1f1c8087a00233969c52e2a17ce7cfceab86f783504d375fd931e822db1cf2a", 0x63) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000010000d042cbd7000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="b2000600410c0400240012800c0001006d6163766c616e001400028008000900f8ffffff08000700a8000000140035006d6100"/64], 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x40890) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fc6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000840)="660f3881420a0f18c2baf80c66b896dc2c8c66efbafc0ced6436660f3a41c312b8f9008ec00fc7aa0a000ff2276766c7442400554ad7e96766c7442402000000006766c744240600000000670f011424640f01be0e0026f4", 0x58}], 0x1, 0x48, 0x0, 0x0) 5.493690681s ago: executing program 0 (id=1446): socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0xb8}}, 0x2c000010) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r3 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a675, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000001600)={0x3, @win={{0x9, 0x5, 0x1, 0xfffffff9}, 0x0, 0x5, &(0x7f0000000180)={{0x10001, 0x4, 0x0, 0x1}, &(0x7f0000000140)={{0x9, 0xde9, 0xff, 0x1}, &(0x7f0000000080)={{0x511a3bfc, 0x581, 0x7, 0x6}, &(0x7f0000000040)={{0xd, 0x0, 0x800, 0x5}}}}}, 0x6, &(0x7f0000000600)="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", 0x3e}}) 5.301946271s ago: executing program 1 (id=1447): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0xcc, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe, 0x200}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x18}}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc, 0xfffff351}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x50}}]}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xa5b}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xdb, 0x7f}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0xcc}}, 0x0) 5.175681267s ago: executing program 1 (id=1448): syz_usb_connect(0x2, 0x36, &(0x7f0000001580)=ANY=[], 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x488400, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="e80000000001050500000000000000000a0000003c0002802c000180140003002001000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c000180"], 0xe8}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430442b25b36f", 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000012002927000000000000008b050021"], 0x38}}, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000000040)={&(0x7f0000000340)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000000c0)="83", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x24000000) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x2, 0x6}, 0x90) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000100001002abd70000000000000000000", @ANYRES32=r9, @ANYBLOB="802100000000000008000d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040010) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, r1}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000f05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xffffc90e, 0x1, 0x7}, &(0x7f0000000100)=0x10) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000240)={0x8000, 0xffff}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={r11, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}, 0xa5e, 0x37e, 0x6, 0x8, 0xb}, &(0x7f0000000200)=0x98) 4.795993054s ago: executing program 0 (id=1449): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010007081c000a"], 0x70}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'dvmrp0\x00'}) (async) close(0x3) 4.694014283s ago: executing program 0 (id=1450): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) mlock2(&(0x7f00007a4000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f00000001c0), 0x2, 0x101000) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x5, 0xfefff800, 0x34325842, 0x5, 0x7, 0x7, 0x3, 0x3, 0x1, 0x4, 0x0, 0x6}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0x6, 0xffffffff}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9", 0xa) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x0, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2, 0xd, 0x0, 0x880}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r5, 0x8800000) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xf2ff}}, 0x18) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) getresgid(&(0x7f0000002800), &(0x7f0000002840), &(0x7f0000002880)) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @loopback, 0x2}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 4.38998077s ago: executing program 3 (id=1452): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getsadinfo={0x1c, 0x23, 0x100, 0x70bdaa, 0x25dfdbfd, 0x0, [@etimer_thresh={0x8, 0xc, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd0000008019000000000000000000000000beda00", [0x100000000, 0x8000000000000000]}}) 4.08523273s ago: executing program 3 (id=1453): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x48000, 0x44) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) socket$netlink(0x10, 0x3, 0x10) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) read(r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score_adj\x00') exit(0x7000000000000) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000200)=0x0) sched_getattr(r6, &(0x7f0000000040)={0x38}, 0xffffffffffffff27, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000580)=0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_io_uring_submit(r7, r8, 0x0, &(0x7f0000000000)) write$sysctl(r1, &(0x7f0000000280)='0\x00', 0xffffffef) 3.349705502s ago: executing program 0 (id=1456): mmap(&(0x7f0000cd4000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x1000) socket$inet6_udp(0xa, 0x2, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETFSLABEL(r0, 0x8915, &(0x7f0000000000)="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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYRESOCT=r3, @ANYBLOB="203100000000000000e80005a73792868fd2dfc29b34572fcadff558876fbe86fb61cd3c88b19a658e0000000000000000000000b960a5007329f751c3662e94f2091c083043fd8b4d452c26dbefd9430006b0590e7d62a6cdc1e80c0314e6aa1e5b5a9cf413d542a8dadb71095dd96796153df192cce5735b75a2102c4dc0524933ae1da6e7b91a5b38adc27abfd6842505d5176cb38a66649e7cf7f882c2b617aa616e7fc1f6428730d21bd64924a81054ba81f53092a9a0f739fc06c5b6f136d5ea42060d765afbc8767b603111928f4ecb696ac1d39b42570816fe603ecc37a625b04e47be30e5197dfea95fe3ebab49c68d1e07d87d00"/258], 0x28}, 0x1, 0x0, 0x0, 0x4004015}, 0x2000005d) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000440)=0xad2) ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000000)=0x6cca) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="04005b001b138237640332dfcb77516b13f517991fc31f2111fe4fd3e6682231296ee15a3e499a360c0f5e87e67ad995b887dc31b49d2bbdf7b68ad6086fd46c1af8e5d147afeafd451b3e217de24a89e4de66374b318f7fbbe7a7f02874d9784b4bb33bcbc20e3b216684fc435255199e1e7ecab72aa9e0185a64900c0bd2d34db69f45b17c3d46baa433a6251f5035d22aaccb4d06d819e5e987c44fce3cf1bd9a926379d1a03be8534ec26f67511531"], 0x20}}, 0x48000) socket$netlink(0x10, 0x3, 0x14) socket$inet(0x2, 0x80000, 0x403) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000080)=0x1000, 0x4) socketpair(0x29, 0x3, 0x0, &(0x7f0000000300)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmmsg(r10, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000780)={0x8, 0x0, "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"}) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x80440, 0x0) 2.849648705s ago: executing program 0 (id=1459): ptrace$ARCH_SET_CPUID(0x1e, 0xffffffffffffffff, 0x0, 0x1012) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000100)) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f00000001c0)={0xed, 0x0, 0x3}) r3 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000240)=0x4, 0x4) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={0x0, @isdn={0x22, 0x1, 0x2, 0x0, 0x9}, @ethernet={0x1, @remote}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x7, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)='ip_vti0\x00', 0x6, 0x1, 0x4b7c}) r4 = syz_open_dev$vcsn(&(0x7f0000000340), 0x6, 0x10b001) write$cgroup_subtree(r4, &(0x7f0000000380)={[{0x2d, 'cpuset'}, {0x2d, 'io'}, {0x2b, 'hugetlb'}, {0x2d, 'net_prio'}, {0x2d, 'cpu'}, {0x2b, 'net'}, {0x2b, 'cpuacct'}, {0x2b, 'rdma'}, {0x2d, 'perf_event'}]}, 0x44) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@map=r4, r4, 0xd, 0x14, r4, @void, @value=r4}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r4, &(0x7f0000000480)="178b9d17f263369cd07032cd04a452253d8646505e04d3e1e2ea03b8e72579738cb02cb69d799fbcf98ae09a984581f75d57eb93a6044c29e24005013d99c36d55c831dd0df6737126a5e08105dc1cb29b7d9110302ecfa1cd78f6d41bede9184915855e6d1ecb23502e612997cc823fbb55f22d3b0a53dfbda1a79e3dc6ce6053dd924e68378b64facfaf6dd7fb2c3866fb03d87579b8bbd768658dc9ec1451978af2f7442c51b0c6d0a0e5ee41fac0", &(0x7f0000000540)=""/45}, 0x20) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000005c0)={0x0, 0xf4, 0x65, 0x7, 0x7, 0xe, 0x6, 0x81, 0x5, 0x7f, 0x7f, 0x4, 0x2, 0x3}, 0xe) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000600)={0x4, 0x0, {0xffffffffffffffff, 0x2, 0x7ff, 0x3, 0x6}, 0x5}) io_uring_setup(0xa8, &(0x7f0000000680)={0x0, 0xc8fe, 0x20, 0x1, 0xcb, 0x0, r4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x8c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'erspan0\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xe}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff9}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000880)={{0x4}, 'port1\x00', 0x0, 0x30, 0x8, 0x7, 0x7ef, 0x401, 0x50f482ba, 0x0, 0x20dd6ab494bb694a, 0x4}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000940)={'batadv_slave_0\x00', {0x2, 0x2, @loopback}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f00000009c0)={0x10, 0x156, 0x401, 0x3, 0x1, 0x300}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000a00)={0xdf738385699e8840, r4}) 2.734988797s ago: executing program 5 (id=1425): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010428bd70000300000000000000", @ANYRES32, @ANYBLOB="00000000051c0000340012800e00010069703665727370616e0000002000028004001200050016000100000008000100", @ANYRES32, @ANYBLOB="08001500770300d9"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x12) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000a00)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) (async) r10 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x2004019, &(0x7f0000000000)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=r10, @ANYBLOB=',gro', @ANYRESDEC=r10], 0xfc, 0x0, 0x0) (async) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x100800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c01000000775f6f746865722c7065726d69745f646972656374696f2c736d61636b66736861743d626174616476002c7375626a5f747970653d2f6465762f7669647ca399a64edacbf63d30303030303030303030303030303030303035372c61707072616973652c61707072616973652c00"]) (async) io_submit(0x0, 0x5, &(0x7f00000002c0)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x7f, r5, &(0x7f0000000500)="65048e4d933a2306ad58b1a172e1ccb2f5210be3b19d8d327d4bbbd789c6da3ea136afecbbc0330c9ccecc1ff391579ff8f11aa12c10ffbc0bbd24b418263036dd6bb4cb762a6397d5871c7de8558671caf248f4e773beb4b216230b15190d4d1eb9efc8642d2b28b2c7bc19ae26c0774773623a8bdc499b57a1a9ae945acb5aa6dc76652a139ee2677c1b5c12b2738fd23467de68f237b86d31cfedbc4e3e97c170a544193f3be4b13c836b3da76b329abc0d2a2aee073f75d4d7eae8fdded4e446d96080c01a0ce56bfd8ad038c7f8cc4b2ea9d19854080bd585e656", 0xdd, 0xa615, 0x0, 0x1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0xfff9, r1, &(0x7f0000000180)="a816b5e0e916fa650355b28c22cd03e8e3d4b72a2fd2f244e1e3ef7e7fd26427d9b2428a26f46eab3f7c8f59368cb15c", 0x30, 0x9, 0x0, 0x1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000840)="824049d45a260425b89f65f1c14076c87698f154d2f780df1e19c9b9c9a11f9b2bb291b27061310f93e11a64554d8be87e7a09b89335fcc25a1812d411962a1782a42f22f58a066dba20d090e3f6c84e6a2ea81b8c6e77", 0x57, 0x8}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x3, 0x5, r6, &(0x7f0000000900)="7f266ac262cc05b853a88d6c36499b6283db20b14b662abd2cf2c9eea36eb2055280c491beca702db43e03c501dbf8d1bf58609878d2121df05f248038", 0x3d, 0x7, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x7, r3, &(0x7f0000000200)="31a6a6bf17880260836a8a52ad5de3d9438c882a991ea17909a24a54d02d3541b3be9828d28bd6a2ce26b9ba49b3047c21de0db9b2db2a40b32a74160a3352177590026ed8912308511315f2adf2", 0x4e, 0x239e, 0x0, 0x1}]) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(r7, 0x0) (async) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x8, 0x0) 2.537312136s ago: executing program 5 (id=1460): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000002f80)=[{{&(0x7f00000001c0)=@can, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f00000003c0)=""/214, 0xd6}], 0x2, &(0x7f0000000500)=""/111, 0x6f}, 0x4}, {{&(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001600)}, 0xa}, {{&(0x7f0000001640)=@tipc, 0x80, &(0x7f0000001840)=[{&(0x7f00000016c0)=""/91, 0x5b}, {&(0x7f0000001740)=""/245, 0xf5}], 0x2, &(0x7f0000001880)=""/93, 0x5d}, 0x1}, {{&(0x7f0000001900)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/68, 0x44}, {&(0x7f0000002a00)=""/161, 0xa1}, {&(0x7f0000002ac0)=""/140, 0x8c}, {&(0x7f0000002b80)=""/142, 0x8e}, {&(0x7f0000002c40)=""/76, 0x4c}, {&(0x7f0000002cc0)=""/98, 0x62}, {&(0x7f0000002d40)=""/186, 0xba}, {&(0x7f0000003080)=""/119, 0x77}], 0x9, &(0x7f0000002f40)=""/62, 0x3e}, 0x5}], 0x4, 0x10002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, 0x0, 0x24044080) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x12c) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x240040c4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100001002cbd7004000000000a100000fc02ff000000000008000400", @ANYRES32, @ANYBLOB="0600150008000000100016800c0001000000000000000009"], 0x3c}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.103811544s ago: executing program 1 (id=1463): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x8, 0xc8402) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) read$watch_queue(r2, &(0x7f0000000340)=""/217, 0xd9) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000640)={0x1e, 0x0, 0x100d, 0x1000, 0xffffff62, {0x9, 0x87f}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x40305839, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 2.045281652s ago: executing program 4 (id=1464): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x92c0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x0, 0x20, 0x2}) r1 = syz_usb_connect(0x1, 0xe4, &(0x7f0000000000)=ANY=[], 0x0) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r3 = dup(r2) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a18ad9"], 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xcabd8245) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000840)={0x0}, &(0x7f0000000880)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000008c0)={r4, 0x1, 0x0, 0x3, 0xe, 0x3}, &(0x7f0000000900)=0x14) (async) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x40, 0xb, 0x54, {0x54, 0x22, "f7a11a07e8477cf65693da98deff1b4d20098610691a8e74daa284757e5fb8ce77e95d2c68b31d99b39df8c8948aabcbcfdcd46a8aff852c6e286b2bbace5faa62b66cfa8f38cd957166372beeec2aface46"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, &(0x7f0000000180)={0x0, 0xf, 0x116, {0x5, 0xf, 0x116, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x8, 0x40, 0xfb, 0x0, 0x7}, @generic={0x103, 0x10, 0x2, "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"}, @ptm_cap={0x3}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x80, 0xbf, 0x49, "678e0912", "a64421a8"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x4, 0x6, 0x7f, 0x8, 0x36, 0x7fff}}}, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x40, 0x17, 0x2e, "72a5e5d0a3c8905cc84ce93fc23a43799166da9f4add93f965fe7a5a83294514640958da845e32dd43cc06d7095e"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x200, 0x2, [0xf0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000540)={0x40, 0xb, 0x2, "b7f1"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xe90}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, '6;'}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0xb2}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xfd}, &(0x7f0000000740)={0x40, 0x21, 0x1}}) 1.947936253s ago: executing program 0 (id=1465): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x50080, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, 0x0, 0x0, 0x1000000000) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x1, 0xffffffce, 0x7, 0x2, 0xffffffffffffffff, 0x200000000000008, 0x3, 0xf6f, 0x8, 0x2, 0x80000005, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ad0b19196c79eb5}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r6, 0x40084149, &(0x7f0000000000)=0x5) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1f00, 0x12) 1.670460297s ago: executing program 3 (id=1466): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x43, 0x7fff0000}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="08000200ac1414aa1dbc4c0c8530b074d332932dda16e6e3ffbd645e106852ac5f16984eb49f4715ed36364849a897568fbf19ad4871b21578bd0d29fc91bd0690fca22e73b693bcdcae799cef5ea5a55a3fe5941024353d9a1550ffda0bfbfcbc0eedc95c21acf846dcf4f4b3b82684d59896a8371f584a161b2bd19ce8205fb6ed18644ebed91e7f27f566c761625b639da030daac14e59426cb192f69b0f588b2c0a3e8618cf8d1ce37e1e0ffb45024f31f48a54d3c5c91003235f5488f82f5e84a15d3a767646db94f554bac5a199ddd9320e32c7a7e4a07414f4ede0a7083cf01f1c0d2b7de5df7e52bb486eecc7b886e2b5ef41476"], 0x20}}, 0x40000c0) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000084000000000000000080"], 0x18, 0x4008000}, 0x28008841) setsockopt$inet_mreq(r3, 0x0, 0x20, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x48c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x440b0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000280)={0x100, r6}, 0x0) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) 1.361400364s ago: executing program 4 (id=1467): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0xcc, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe, 0x200}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x18}}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc, 0xfffff351}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x50}}]}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xa5b}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xdb, 0x7f}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0xcc}}, 0x0) 1.336327314s ago: executing program 4 (id=1468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x4b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000100)="df5fe0670fc768000f9792ec060f080fdd37f754d466b80500000066b9bc0000000f01c10fc77afdd084a89e660f3841ee", 0x31}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="66ba6100ecb9e40900000f32fd48b809000000000000800f23c80f21f835080010000f23f8b9800000c00f3235000800000f30c403e56c34cd4e12e1daa566baf80cb8cd84de8def66bafc0cec440f20c0350d000000440f22c066460f38823948b805000000000000000f23d00f21f835100000090f23f8", 0x78}], 0x1, 0x7, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.031406564s ago: executing program 4 (id=1469): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0xbc}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x5) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) write$char_usb(r1, 0x0, 0x0) (async) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000003c0)="2c385a21ec57cf18b7adcd", 0xb) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff488eedc5388c8aa6f554", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r6, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff488eedc5388c8aa6f554", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}, @common=@unspec=@connlimit={{0x40}, {[], 0x4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) (async) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}, @common=@unspec=@connlimit={{0x40}, {[], 0x4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f00000001c0)={"568139cb5050a7a31ebfc4330c2bf68f86101d9a301cbe14b15f4f23031ceb319db01a783479d6b9a1201fb1cc7235f57f425131b1d59b14c7588e103ad23d61fc6b05b60536a1611da4d3a6a06d308650343e59d307e34d8c2ec3ef05629a47f994dd2e9f8b9ce05b338ae7db5267bc4082bd43ca93b78947a7c79e82df466d4fee2b222f1ebde976d2272a4f52329796330ee917cc4f5b3ec45ac1ecdaaf3dffe03c40b7c209e44cfeb08aad00e1b48da4289228d7d82d4f6a661942ace64f115d3cc6ac80f74420c390d89e7ab2133567aa41047d775e333184cc0b468ec5eb9bc3cb0fa00516e5452bf32a9e760f07efd5a5e5eb37eaff28ef92bb59498369808bdd310a4a95a5414a8ff450411ff67d3167eec8372455a19c0c5a608adfebded6974660fd85308a07860e16f62963da37448d6e1218f2092fb3d1662804623b63a07f3e5e881df9a5ac27ce3f1519003118aa6170ff423eb292dc70147bde37963f72d0642660e7107753167886fc10e108631a9ea4d6752145b8646187ba7e152b6bcbcedd6b83fb9435d5c8e8d5d25a3f173745eab94a4a296572d459a50d622c8769dc57a7cdf7efe9f259dc36f538d1836362f1bcb2c4ebceae7e3655d5e98ba481906f284bd03716c15894eca8cbf8302dc8e2c21736b697b5f868e8af96fa8bbb1ae56571616a70ce05970d1e4142f303f7586fd2fc6f0ee3dce1db6524dd6aa28faab046e074df38430a49e8a6dde71028f16539744b7867e19c856e670e8b799d52da435bb07beea6274bf512e7d6ebb8ff8f83a52e4d13602e7d4675a798a12c898ad5b00caa34313ff8fb6c3407cf815eca9795cffd9a24959653cc816851048ebf0772bebdd3ff9b8cfbd2c65c30e41586b00a14943e4815361789158139d440c4f627edb8ed59e1ca0bb0c60106e09635fa9335677337c554db885f75b899638e8df1ea9796f8258de36636346ab768856bbdfc51843a53701423d75c1f43be24469aa03d366bbfb81218b31e5c0ad716efea52175c2fa78317cafb16ee173eb5e9428509ca4c8f9bf798adc7da1758a9c0334e44200c0578495ff805fce84456205caa70f0976a8603f84cb542d0df1416602321c587556785af525ddf5548b4f51113c52a7a17042faf6c8c02d8d1835e0f67f60ab392c20fc12188db029e45bb77cfccc423671d52ec5a92d08c2bb27a676b66f3b89ac084d99e3f516426a015268a1f3fb91b13c8baba49a0765a305c13cd1f47b3ea7a6393182759b614a08d36192a8b68abef6e5c16849452c74af3a9f854e1f2bc1c2eac2f055f8ffd8fdaa6bb04a68850c585f433c0e6b8dba1401fce5aab11d75d2323d8079891175096e31013ca0a3763511c86f2fbc31a33458c52059ebe253dcd3e837fed39765a11842028df450479dd56e1325cd8d088ff12a8f7dd23f2"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$netlink(0x10, 0x3, 0x5) (async) socket$netlink(0x10, 0x3, 0x5) close_range(r10, 0xffffffffffffffff, 0x0) 976.761619ms ago: executing program 3 (id=1470): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xfc, {"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", 0x1000}}, 0x1006) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x14}], 0x1}, 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r10, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x5, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r10, &(0x7f00000040c0)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x60, 0x0, 0x3, {{0x6, 0x9, 0xffffffffffffffff, 0x714, 0x7b, 0x81, 0xacb8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statfs(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)=""/232) landlock_restrict_self(r9, 0x0) landlock_restrict_self(r9, 0x6) landlock_restrict_self(r9, 0x0) r11 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r11, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 854.002863ms ago: executing program 1 (id=1471): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0xa, 0x1, 'A'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_gettime(r1, &(0x7f0000000000)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 650.593175ms ago: executing program 5 (id=1472): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) fanotify_mark(0xffffffffffffffff, 0x201, 0x4000003e, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 473.998816ms ago: executing program 3 (id=1473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c010000130001"], 0x12c}], 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x10040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}}}]}, 0x48}}, 0x404c840) 309.143312ms ago: executing program 3 (id=1474): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='-'], 0x28) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007b80)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220b000000b04f344ca67bab"], 0x0}, 0x0) 103.138034ms ago: executing program 4 (id=1475): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x2, 0x2, 0x2}) r1 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) r2 = shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) shmdt(r2) 0s ago: executing program 4 (id=1476): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010700000000000000000a060000833caf2376b3a1e89aaedfcc99c59c2aabe601ed6ac85d3cde9ec7c6d4d225010b19746cb6fddeaee6148fc661d90c804e660e5db89b9b8d9b44561f6c916b6c9a5e1591189b02fb38635938c4431946dadaf075fa735b47ef4af440d816621510d3da5b5f9cc0504b762ce8b084df8577"], 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_LINK_TIMEOUT={0xf, 0x50, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x40}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) r2 = socket$kcm(0x29, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)={'full'}, 0x2f) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x7) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="2024160000001600c9edfa253d80"], 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000040)={0x3, 0xffffffff, 0x8, 0x4, 0x7, 0x6}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2a0000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x100000, 0x5691409, 0x9, 0x0, 0x0, 0xff, 0x0, 0x0, 0x10, 0x140000}}, 0x50) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28a43, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) kernel console output (not intermixed with test programs): yz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326599c819 code=0x7ffc0000 [ 386.963502][ T5828] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 386.964143][ T5835] pwc: recv_control_msg error -32 req 02 val 2c00 [ 386.977428][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.982907][ T5835] pwc: recv_control_msg error -32 req 04 val 1000 [ 386.989145][ T5828] usb 3-1: Product: syz [ 386.999387][ T5828] usb 3-1: Manufacturer: syz [ 386.999410][ T5828] usb 3-1: SerialNumber: syz [ 387.001253][ T30] audit: type=1326 audit(1775843624.537:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f326595d04e code=0x7ffc0000 [ 387.001297][ T30] audit: type=1326 audit(1775843624.537:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326599c819 code=0x7ffc0000 [ 387.001335][ T30] audit: type=1326 audit(1775843624.537:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326599c819 code=0x7ffc0000 [ 387.001376][ T30] audit: type=1326 audit(1775843624.537:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326599c819 code=0x7ffc0000 [ 387.001420][ T30] audit: type=1326 audit(1775843624.537:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326599c819 code=0x7ffc0000 [ 387.001458][ T30] audit: type=1326 audit(1775843624.537:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f326599c819 code=0x7ffc0000 [ 387.001496][ T30] audit: type=1326 audit(1775843624.537:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326599c819 code=0x7ffc0000 [ 387.061273][ T5835] pwc: recv_control_msg error -32 req 04 val 1300 [ 387.070690][ T5835] pwc: recv_control_msg error -32 req 04 val 1400 [ 387.370766][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.424365][ T5835] pwc: recv_control_msg error -71 req 02 val 2100 [ 387.437890][ T5835] pwc: recv_control_msg error -71 req 04 val 1500 [ 387.471281][ T5835] pwc: recv_control_msg error -71 req 02 val 2500 [ 387.514462][ T5835] pwc: recv_control_msg error -71 req 02 val 2400 [ 387.552238][ T5835] pwc: recv_control_msg error -71 req 02 val 2600 [ 387.593832][ T5835] pwc: recv_control_msg error -71 req 02 val 2900 [ 387.606910][ T5835] pwc: recv_control_msg error -71 req 02 val 2800 [ 387.617555][ T5835] pwc: recv_control_msg error -71 req 04 val 1100 [ 387.633332][ T5835] pwc: recv_control_msg error -71 req 04 val 1200 [ 387.665181][ T5835] pwc: Registered as video103. [ 387.683752][ T5835] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input45 [ 387.786751][ T5835] usb 2-1: USB disconnect, device number 66 [ 388.220496][ T55] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 388.278187][T10587] x_tables: duplicate underflow at hook 4 [ 388.325846][T10587] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 388.384033][ T55] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.420710][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.435161][ T55] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 388.464080][ T55] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 388.498357][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.528064][ T55] usb 1-1: config 0 descriptor?? [ 388.730264][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.248850][ T5828] usb 3-1: 0:2 : does not exist [ 389.260208][ T5828] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 389.343665][T10611] loop4: detected capacity change from 0 to 7 [ 389.362713][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 389.366136][ T5828] usb 3-1: USB disconnect, device number 87 [ 389.372623][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.397138][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 389.407514][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.418336][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 389.428276][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.436628][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 389.446456][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.454554][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 389.464832][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.473172][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.491621][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 389.501292][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.510128][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 389.519838][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.528096][T10611] ldm_validate_partition_table(): Disk read failed. [ 389.538737][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 389.548714][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.557766][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 389.567400][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.576575][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 389.586184][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.595291][T10611] Dev loop4: unable to read RDB block 0 [ 389.601060][ T24] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 389.649959][T10611] loop4: unable to read partition table [ 389.674338][T10611] loop4: partition table beyond EOD, truncated [ 389.683747][T10611] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 389.781076][ T24] usb 2-1: device descriptor read/64, error -71 [ 390.030113][ T24] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 390.170192][ T24] usb 2-1: device descriptor read/64, error -71 [ 390.265729][ T5196] ldm_validate_partition_table(): Disk read failed. [ 390.289084][ T5196] Dev loop4: unable to read RDB block 0 [ 390.290598][ T24] usb usb2-port1: attempt power cycle [ 390.321957][ T5196] loop4: unable to read partition table [ 390.339825][ T5196] loop4: partition table beyond EOD, truncated [ 390.490335][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.660150][ T24] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 390.699205][ T24] usb 2-1: device descriptor read/8, error -71 [ 390.821109][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.950140][ T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 390.985608][ T5899] usb 1-1: USB disconnect, device number 69 [ 390.992304][ T24] usb 2-1: device descriptor read/8, error -71 [ 391.124800][ T24] usb usb2-port1: unable to enumerate USB device [ 391.467313][ T5196] ldm_validate_partition_table(): Disk read failed. [ 391.469466][T10645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.484310][T10645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.491438][ T5196] Dev loop4: unable to read RDB block 0 [ 391.498863][ T5196] loop4: unable to read partition table [ 391.505086][ T5196] loop4: partition table beyond EOD, truncated [ 391.547620][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.678981][T10647] syzkaller0: entered allmulticast mode [ 391.780406][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.859666][T10651] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1217'. [ 391.882316][T10651] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1217'. [ 391.899733][T10653] loop5: detected capacity change from 0 to 7 [ 391.907355][T10653] Dev loop5: unable to read RDB block 7 [ 391.918539][T10653] loop5: unable to read partition table [ 391.930741][T10653] loop5: partition table beyond EOD, truncated [ 391.937381][T10653] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 392.063938][T10659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.072711][T10659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.220462][ T24] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 392.372959][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.399955][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 392.420502][ T10] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 392.429187][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.450776][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.485639][ T24] usb 3-1: config 0 descriptor?? [ 392.570366][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.601727][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 392.635077][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.693856][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 392.728679][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.774625][ T10] usb 4-1: config 0 descriptor?? [ 393.206202][ T10] hid_parser_main: 28 callbacks suppressed [ 393.206219][ T10] isku 0003:1E7D:319C.0026: unknown main item tag 0x0 [ 393.251719][ T10] isku 0003:1E7D:319C.0026: unknown main item tag 0x0 [ 393.261544][ T10] isku 0003:1E7D:319C.0026: unknown main item tag 0x0 [ 393.293008][ T10] isku 0003:1E7D:319C.0026: unknown main item tag 0x0 [ 393.301793][ T10] isku 0003:1E7D:319C.0026: unknown main item tag 0x0 [ 393.309725][ T10] isku 0003:1E7D:319C.0026: unknown main item tag 0x0 [ 393.320726][ T10] isku 0003:1E7D:319C.0026: unknown main item tag 0x0 [ 393.361230][ T10] isku 0003:1E7D:319C.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 393.448972][ T10] isku 0003:1E7D:319C.0026: couldn't init struct isku_device [ 393.540072][ T10] isku 0003:1E7D:319C.0026: couldn't install keyboard [ 393.601007][ T10] isku 0003:1E7D:319C.0026: probe with driver isku failed with error -71 [ 393.610852][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.709608][ T10] usb 4-1: USB disconnect, device number 86 [ 394.012787][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.318466][T10693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1229'. [ 394.440886][T10695] input: syz1 as /devices/virtual/input/input46 [ 394.635302][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 394.635316][ T30] audit: type=1326 audit(1775843632.347:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 394.664917][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.746510][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1229'. [ 394.769672][ T30] audit: type=1326 audit(1775843632.387:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 394.794835][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1229'. [ 394.811100][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.825461][ T30] audit: type=1326 audit(1775843632.387:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 394.863173][T10702] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4 [ 394.870243][T10702] [U] [“)ÎU°}¸Ç”ÍÚJϬ}N°SEF*œ £‡¿ßÅNZÍÀF[F_H®¦'ª„W"ÓXÅ~¶ÎÏÚ;VA˜)^ˆ`Û1C':ZÂÞ÷ÃÃÚÞFOBÞ *?ÛŸC‹Z˜S¯Ý<8ZNÑ·š Ñ˜¾ÔEY TT<$CÐR¿Æ–»/VG¿Ðà {Y«~Y5\—;ƃZ–ÓDX ŸƒYÖA€Ì"XI®F¦{‚Å`A$í¡55?­É×S«AÃM¢ÅO‰¤«ÝÍ»*K€¶ [ 394.904396][ T30] audit: type=1326 audit(1775843632.387:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 394.960568][T10702] [U] ÔO‡4 [ 394.995710][T10702] [U] œšU·©BÕ+ '~GIÞƒRQ^Á¿™,(-|¢ØÚŸ†Ë-<ƒ6&µÅH.Z9ÉÎ/ÚRJΩ°™³ËˆÅ+)Ö­KΦ.›NHÕA#LW#RF7–PÙªÛÍMAX€Ï]Œ¤›LN"KŒM +,G¶SB´HJ‚¹ËXÏ̧ÉCÎÝQ„ [ 395.033183][ T30] audit: type=1326 audit(1775843632.387:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 395.100204][ T30] audit: type=1326 audit(1775843632.387:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 395.152521][ T30] audit: type=1326 audit(1775843632.387:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 395.181822][ T24] usb 3-1: USB disconnect, device number 88 [ 395.248631][ T30] audit: type=1326 audit(1775843632.387:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 395.300093][ T30] audit: type=1326 audit(1775843632.387:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 395.384657][ T30] audit: type=1326 audit(1775843632.387:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 395.585032][T10713] FAULT_INJECTION: forcing a failure. [ 395.585032][T10713] name failslab, interval 1, probability 0, space 0, times 0 [ 395.675606][T10713] CPU: 1 UID: 0 PID: 10713 Comm: syz.2.1235 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.675636][T10713] Tainted: [L]=SOFTLOCKUP [ 395.675642][T10713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 395.675656][T10713] Call Trace: [ 395.675664][T10713] [ 395.675672][T10713] dump_stack_lvl+0xe8/0x150 [ 395.675700][T10713] should_fail_ex+0x412/0x560 [ 395.675730][T10713] should_failslab+0xa8/0x100 [ 395.675754][T10713] __kmalloc_noprof+0xe8/0x760 [ 395.675775][T10713] ? aa_label_asxprint+0x70/0x130 [ 395.675802][T10713] aa_label_asxprint+0x70/0x130 [ 395.675840][T10713] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 395.675858][T10713] audit_log_subj_ctx+0x116/0x530 [ 395.675874][T10713] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 395.675891][T10713] ? apparmor_current_getlsmprop_subj+0xce/0x150 [ 395.675908][T10713] audit_log_task_context+0x94/0xe0 [ 395.675922][T10713] ? __pfx_audit_log_task_context+0x10/0x10 [ 395.675941][T10713] ? audit_log_start+0x7e9/0xa20 [ 395.675956][T10713] audit_log_task+0x19b/0x3d0 [ 395.675970][T10713] ? __pfx_audit_log_task+0x10/0x10 [ 395.675987][T10713] audit_seccomp+0x85/0x190 [ 395.676001][T10713] __seccomp_filter+0xd48/0x1ef0 [ 395.676019][T10713] ? __pfx___seccomp_filter+0x10/0x10 [ 395.676032][T10713] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 395.676051][T10713] ? __fget_files+0x3a0/0x420 [ 395.676064][T10713] ? fput+0xa0/0xd0 [ 395.676081][T10713] ? __pfx_ksys_write+0x10/0x10 [ 395.676095][T10713] ? __secure_computing+0xe1/0x2a0 [ 395.676108][T10713] do_syscall_64+0xf4/0xf80 [ 395.676122][T10713] ? trace_irq_disable+0x3b/0x150 [ 395.676131][T10713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.676142][T10713] ? clear_bhb_loop+0x40/0x90 [ 395.676155][T10713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.676170][T10713] RIP: 0033:0x7f52c839c819 [ 395.676181][T10713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.676192][T10713] RSP: 002b:00007f52c920a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.676205][T10713] RAX: ffffffffffffffda RBX: 00007f52c8615fa0 RCX: 00007f52c839c819 [ 395.676213][T10713] RDX: 0000200000000040 RSI: 00000000c0844123 RDI: 0000000000000003 [ 395.676220][T10713] RBP: 00007f52c920a090 R08: 0000000000000000 R09: 0000000000000000 [ 395.676227][T10713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.676233][T10713] R13: 00007f52c8616038 R14: 00007f52c8615fa0 R15: 00007f52c873fa48 [ 395.676248][T10713] [ 396.256446][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.349405][ T5828] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 396.561830][ T5828] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 396.572377][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.593534][ T5828] usb 1-1: config 0 descriptor?? [ 396.619237][ T5828] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 396.643194][T10729] ip6gretap0: entered promiscuous mode [ 396.664264][T10732] loop5: detected capacity change from 0 to 7 [ 396.686936][T10732] Dev loop5: unable to read RDB block 7 [ 396.701152][T10732] loop5: unable to read partition table [ 396.722178][T10732] loop5: partition table beyond EOD, truncated [ 396.742907][T10732] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 396.955803][ T5828] gspca_stv06xx: I2C: Read error writing address: -71 [ 396.992162][ T5828] usb 1-1: USB disconnect, device number 70 [ 397.100387][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 397.273801][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.286320][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 397.295149][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.330304][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.363395][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.409827][ T10] usb 2-1: config 0 descriptor?? [ 397.500137][ T5828] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 397.670287][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 397.677322][ T5828] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 397.822400][ T5828] usb 1-1: config 0 interface 0 has no altsetting 0 [ 397.849513][ T5828] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 397.859365][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.908489][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.929722][ T5828] usb 1-1: config 0 descriptor?? [ 398.092768][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1248'. [ 398.125415][T10760] FAULT_INJECTION: forcing a failure. [ 398.125415][T10760] name failslab, interval 1, probability 0, space 0, times 0 [ 398.140127][T10760] CPU: 0 UID: 0 PID: 10760 Comm: syz.4.1250 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.140146][T10760] Tainted: [L]=SOFTLOCKUP [ 398.140151][T10760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 398.140158][T10760] Call Trace: [ 398.140163][T10760] [ 398.140168][T10760] dump_stack_lvl+0xe8/0x150 [ 398.140191][T10760] should_fail_ex+0x412/0x560 [ 398.140211][T10760] should_failslab+0xa8/0x100 [ 398.140226][T10760] __kmalloc_noprof+0xe8/0x760 [ 398.140240][T10760] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 398.140254][T10760] tomoyo_realpath_from_path+0xe3/0x5d0 [ 398.140270][T10760] ? tomoyo_path_number_perm+0x219/0x630 [ 398.140285][T10760] tomoyo_path_number_perm+0x246/0x630 [ 398.140300][T10760] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 398.140316][T10760] ? __lock_acquire+0x6b5/0x2cf0 [ 398.140346][T10760] ? __fget_files+0x2a/0x420 [ 398.140357][T10760] ? __fget_files+0x2a/0x420 [ 398.140366][T10760] ? __fget_files+0x3a0/0x420 [ 398.140375][T10760] ? __fget_files+0x2a/0x420 [ 398.140386][T10760] security_file_ioctl+0xc3/0x2a0 [ 398.140402][T10760] __se_sys_ioctl+0x47/0x170 [ 398.140416][T10760] do_syscall_64+0x14d/0xf80 [ 398.140430][T10760] ? trace_irq_disable+0x3b/0x150 [ 398.140440][T10760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.140450][T10760] ? clear_bhb_loop+0x40/0x90 [ 398.140463][T10760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.140473][T10760] RIP: 0033:0x7fac4719c819 [ 398.140485][T10760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.140494][T10760] RSP: 002b:00007fac4800b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.140506][T10760] RAX: ffffffffffffffda RBX: 00007fac47415fa0 RCX: 00007fac4719c819 [ 398.140515][T10760] RDX: 0000200000000040 RSI: 00000000c0844123 RDI: 0000000000000003 [ 398.140526][T10760] RBP: 00007fac4800b090 R08: 0000000000000000 R09: 0000000000000000 [ 398.140537][T10760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.140547][T10760] R13: 00007fac47416038 R14: 00007fac47415fa0 R15: 00007fac4753fa48 [ 398.140573][T10760] [ 398.140599][T10760] ERROR: Out of memory at tomoyo_realpath_from_path. [ 398.212422][T10747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.379420][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.402346][T10747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.624377][ T5828] waltop 0003:172F:0037.0027: unknown main item tag 0x2 [ 398.635963][ T5828] waltop 0003:172F:0037.0027: unknown main item tag 0x0 [ 398.643980][ T5828] waltop 0003:172F:0037.0027: unexpected long global item [ 398.652347][ T5828] waltop 0003:172F:0037.0027: probe with driver waltop failed with error -22 [ 398.800479][T10768] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1252'. [ 398.821446][ T5899] usb 1-1: USB disconnect, device number 71 [ 399.454119][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.287542][T10791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.313981][ T5899] usb 2-1: USB disconnect, device number 71 [ 400.357554][T10791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.471053][T10794] netlink: 'syz.1.1258': attribute type 2 has an invalid length. [ 400.493156][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.542091][T10796] netlink: 'syz.1.1258': attribute type 2 has an invalid length. [ 400.562877][T10794] : entered promiscuous mode [ 400.580737][T10797] PKCS8: Unsupported PKCS#8 version [ 400.603596][T10796] : left promiscuous mode [ 400.886294][ T30] kauditd_printk_skb: 122 callbacks suppressed [ 400.886307][ T30] audit: type=1326 audit(1775843638.597:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 400.915682][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.926391][T10801] FAULT_INJECTION: forcing a failure. [ 400.926391][T10801] name failslab, interval 1, probability 0, space 0, times 0 [ 400.939832][ T30] audit: type=1326 audit(1775843638.637:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 400.962624][T10801] CPU: 0 UID: 0 PID: 10801 Comm: syz.1.1261 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.962654][T10801] Tainted: [L]=SOFTLOCKUP [ 400.962658][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 400.962665][T10801] Call Trace: [ 400.962670][T10801] [ 400.962676][T10801] dump_stack_lvl+0xe8/0x150 [ 400.962696][T10801] should_fail_ex+0x412/0x560 [ 400.962716][T10801] should_failslab+0xa8/0x100 [ 400.962731][T10801] __kmalloc_noprof+0xe8/0x760 [ 400.962745][T10801] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 400.962760][T10801] tomoyo_realpath_from_path+0xe3/0x5d0 [ 400.962776][T10801] ? tomoyo_path_number_perm+0x219/0x630 [ 400.962791][T10801] tomoyo_path_number_perm+0x246/0x630 [ 400.962807][T10801] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 400.962822][T10801] ? __lock_acquire+0x6b5/0x2cf0 [ 400.962852][T10801] ? __fget_files+0x2a/0x420 [ 400.962863][T10801] ? __fget_files+0x2a/0x420 [ 400.962872][T10801] ? __fget_files+0x3a0/0x420 [ 400.962881][T10801] ? __fget_files+0x2a/0x420 [ 400.962892][T10801] security_file_ioctl+0xc3/0x2a0 [ 400.962907][T10801] __se_sys_ioctl+0x47/0x170 [ 400.962922][T10801] do_syscall_64+0x14d/0xf80 [ 400.962936][T10801] ? trace_irq_disable+0x3b/0x150 [ 400.962946][T10801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.962957][T10801] ? clear_bhb_loop+0x40/0x90 [ 400.962975][T10801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.962986][T10801] RIP: 0033:0x7f904019c819 [ 400.962998][T10801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.963008][T10801] RSP: 002b:00007f9040fda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.963020][T10801] RAX: ffffffffffffffda RBX: 00007f9040415fa0 RCX: 00007f904019c819 [ 400.963028][T10801] RDX: 0000200000000040 RSI: 00000000c0844123 RDI: 0000000000000003 [ 400.963035][T10801] RBP: 00007f9040fda090 R08: 0000000000000000 R09: 0000000000000000 [ 400.963042][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.963048][T10801] R13: 00007f9040416038 R14: 00007f9040415fa0 R15: 00007f904053fa48 [ 400.963064][T10801] [ 400.963069][T10801] ERROR: Out of memory at tomoyo_realpath_from_path. [ 401.100248][ T30] audit: type=1326 audit(1775843638.637:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 401.405206][ T30] audit: type=1326 audit(1775843638.637:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 401.438348][ T30] audit: type=1326 audit(1775843638.637:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 401.534147][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.542794][ T30] audit: type=1326 audit(1775843638.637:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f904015d04e code=0x7ffc0000 [ 401.597058][ T30] audit: type=1326 audit(1775843638.637:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 401.619835][ T30] audit: type=1326 audit(1775843638.637:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 401.642728][ T24] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 401.706624][ T30] audit: type=1326 audit(1775843638.637:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 401.758313][ T30] audit: type=1326 audit(1775843638.637:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 401.810098][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 401.830291][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 401.839803][ T24] usb 3-1: config 0 has no interface number 0 [ 401.870387][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.885078][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.908120][ T24] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 401.930892][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.941825][ T5828] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 401.961571][ T24] usb 3-1: config 0 descriptor?? [ 402.087221][T10817] tipc: Resetting bearer [ 402.110116][ T5828] usb 2-1: Using ep0 maxpacket: 16 [ 402.123652][ T5828] usb 2-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30 [ 402.139408][ T5828] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.163439][ T5828] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.189636][ T5828] usb 2-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 402.221510][ T5828] usb 2-1: config 0 interface 0 has no altsetting 0 [ 402.237871][ T5828] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 402.260817][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.305657][ T5828] usb 2-1: config 0 descriptor?? [ 402.577345][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.588553][ T24] uclogic 0003:28BD:0094.0028: pen parameters not found [ 402.607888][ T24] uclogic 0003:28BD:0094.0028: interface is invalid, ignoring [ 402.650350][ T24] usb 3-1: USB disconnect, device number 89 [ 402.942833][ T5828] usb 2-1: USB disconnect, device number 72 [ 402.990549][ T5835] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 403.151516][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.165495][ T5835] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 403.182416][ T5835] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.192644][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.224665][ T5835] usb 4-1: config 0 descriptor?? [ 403.255120][ T5835] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 403.294898][T10840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1272'. [ 403.348992][T10843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.369978][T10843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.423277][T10843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.440153][T10843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.469040][T10843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.509990][T10843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.613596][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.634384][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.657252][T10849] warn_alloc: 1 callbacks suppressed [ 403.657270][T10849] syz.4.1273: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 403.684102][T10849] CPU: 0 UID: 0 PID: 10849 Comm: syz.4.1273 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.684132][T10849] Tainted: [L]=SOFTLOCKUP [ 403.684140][T10849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 403.684150][T10849] Call Trace: [ 403.684159][T10849] [ 403.684167][T10849] dump_stack_lvl+0xe8/0x150 [ 403.684197][T10849] warn_alloc+0x249/0x340 [ 403.684224][T10849] ? register_lock_class+0x31/0x2e0 [ 403.684247][T10849] ? security_file_ioctl+0xc3/0x2a0 [ 403.684271][T10849] ? __se_sys_ioctl+0x47/0x170 [ 403.684304][T10849] ? __pfx_warn_alloc+0x10/0x10 [ 403.684324][T10849] ? __lock_acquire+0x6b5/0x2cf0 [ 403.684368][T10849] __vmalloc_node_range_noprof+0x132/0x1730 [ 403.684392][T10849] ? __mutex_trylock_common+0x158/0x260 [ 403.684424][T10849] ? __pfx___mutex_trylock_common+0x10/0x10 [ 403.684457][T10849] ? rcu_is_watching+0x15/0xb0 [ 403.684489][T10849] ? __mutex_lock+0x319/0x1300 [ 403.684527][T10849] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 403.684549][T10849] ? tomoyo_path_number_perm+0x219/0x630 [ 403.684576][T10849] ? dvb_demux_do_ioctl+0x320/0x540 [ 403.684609][T10849] ? __pfx___mutex_lock+0x10/0x10 [ 403.684639][T10849] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 403.684669][T10849] vmalloc_noprof+0xb2/0xe0 [ 403.684689][T10849] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 403.684719][T10849] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 403.684752][T10849] dvb_demux_do_ioctl+0x45d/0x540 [ 403.684785][T10849] dvb_usercopy+0x199/0x2e0 [ 403.684823][T10849] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 403.684857][T10849] ? __pfx_dvb_usercopy+0x10/0x10 [ 403.684899][T10849] ? __fget_files+0x3a0/0x420 [ 403.684917][T10849] ? __fget_files+0x2a/0x420 [ 403.684934][T10849] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 403.684962][T10849] dvb_demux_ioctl+0x29/0x40 [ 403.684990][T10849] __se_sys_ioctl+0xfc/0x170 [ 403.685018][T10849] do_syscall_64+0x14d/0xf80 [ 403.685044][T10849] ? trace_irq_disable+0x3b/0x150 [ 403.685062][T10849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.685088][T10849] ? clear_bhb_loop+0x40/0x90 [ 403.685113][T10849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.685134][T10849] RIP: 0033:0x7fac4719c819 [ 403.685154][T10849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.685171][T10849] RSP: 002b:00007fac47fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.685193][T10849] RAX: ffffffffffffffda RBX: 00007fac47416180 RCX: 00007fac4719c819 [ 403.685209][T10849] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000005 [ 403.685223][T10849] RBP: 00007fac47232c91 R08: 0000000000000000 R09: 0000000000000000 [ 403.685237][T10849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.685250][T10849] R13: 00007fac47416218 R14: 00007fac47416180 R15: 00007fac4753fa48 [ 403.685284][T10849] [ 403.685444][T10849] Mem-Info: [ 403.983123][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.160256][T10849] active_anon:8663 inactive_anon:0 isolated_anon:0 [ 404.160256][T10849] active_file:16532 inactive_file:40106 isolated_file:0 [ 404.160256][T10849] unevictable:768 dirty:9 writeback:0 [ 404.160256][T10849] slab_reclaimable:8014 slab_unreclaimable:99054 [ 404.160256][T10849] mapped:33717 shmem:1363 pagetables:1528 [ 404.160256][T10849] sec_pagetables:0 bounce:0 [ 404.160256][T10849] kernel_misc_reclaimable:0 [ 404.160256][T10849] free:1237149 free_pcp:9678 free_cma:0 [ 404.226646][T10849] Node 0 active_anon:34652kB inactive_anon:0kB active_file:66128kB inactive_file:160228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134868kB dirty:36kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12924kB pagetables:5944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 404.261667][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.271436][T10849] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 404.400811][T10849] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 404.436583][T10849] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 404.444193][T10849] Node 0 DMA32 free:995524kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34552kB inactive_anon:0kB active_file:66128kB inactive_file:160228kB unevictable:1536kB writepending:12kB zspages:720kB present:3129332kB managed:2552584kB mlocked:0kB bounce:0kB free_pcp:34228kB local_pcp:15888kB free_cma:0kB [ 404.478966][T10849] lowmem_reserve[]: 0 0 0 0 0 [ 404.484148][T10849] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 404.516332][T10849] lowmem_reserve[]: 0 0 0 0 0 [ 404.522365][T10849] Node 1 Normal free:3937712kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4096kB local_pcp:0kB free_cma:0kB [ 404.616784][T10849] lowmem_reserve[]: 0 0 0 0 0 [ 404.633336][T10849] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 404.656366][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.673377][T10849] Node 0 DMA32: 3939*4kB (UME) 2249*8kB (UME) 1387*16kB (UME) 643*32kB (UME) 523*64kB (UME) 356*128kB (UME) 339*256kB (UME) 307*512kB (UME) 177*1024kB (UM) 52*2048kB (UE) 73*4096kB (UM) = 986276kB [ 404.743393][T10849] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 404.782180][T10849] Node 1 Normal: 6*4kB (UM) 9*8kB (UM) 7*16kB (UM) 5*32kB (UM) 5*64kB (UM) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3937712kB [ 404.837273][T10849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.870868][T10849] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 404.912418][T10849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.937929][T10849] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 404.960152][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 404.977844][T10849] 58019 total pagecache pages [ 405.008104][T10849] 20 pages in swap cache [ 405.023715][T10849] Free swap = 120840kB [ 405.029078][T10849] Total swap = 124996kB [ 405.040125][T10849] 2097051 pages RAM [ 405.046348][T10849] 0 pages HighMem/MovableOnly [ 405.055948][T10849] 427071 pages reserved [ 405.072987][T10849] 0 pages cma reserved [ 405.122716][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.135548][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.157364][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 405.184555][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 405.204324][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.229630][ T24] usb 2-1: config 0 descriptor?? [ 405.674058][ T24] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 405.696937][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.751926][ T24] usb 4-1: USB disconnect, device number 87 [ 406.047627][ T24] usb 2-1: USB disconnect, device number 73 [ 406.055969][T10856] usb 2-1: string descriptor 0 read error: -19 [ 406.071284][T10857] plantronics 0003:047F:FFFF.002A: usb_submit_urb(ctrl) failed: -19 [ 406.300416][ T5921] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 406.450255][ T5921] usb 4-1: device descriptor read/64, error -71 [ 406.710135][ T5921] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 406.734438][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.860182][ T5921] usb 4-1: device descriptor read/64, error -71 [ 406.873592][T10907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.898095][T10907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.970529][ T5921] usb usb4-port1: attempt power cycle [ 406.998937][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 406.998955][ T30] audit: type=1326 audit(1775843644.707:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 407.029965][T10909] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 407.046401][T10909] audit: out of memory in audit_log_start [ 407.064762][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.127064][ T30] audit: type=1326 audit(1775843644.747:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 407.209437][ T30] audit: type=1326 audit(1775843644.747:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 407.258784][ T30] audit: type=1326 audit(1775843644.747:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 407.308627][ T30] audit: type=1326 audit(1775843644.747:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f904015d04e code=0x7ffc0000 [ 407.350657][ T5921] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 407.363709][ T30] audit: type=1326 audit(1775843644.747:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 407.398393][ T5921] usb 4-1: device descriptor read/8, error -71 [ 407.418207][ T30] audit: type=1326 audit(1775843644.747:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 407.450393][ T30] audit: type=1326 audit(1775843644.747:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904019c819 code=0x7ffc0000 [ 407.452269][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 407.650219][ T5921] usb 4-1: new low-speed USB device number 91 using dummy_hcd [ 407.663425][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.695347][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 407.714377][ T5921] usb 4-1: device descriptor read/8, error -71 [ 407.740641][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 407.765069][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.776031][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.792184][ T10] usb 2-1: config 0 descriptor?? [ 407.808316][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 407.850445][ T5921] usb usb4-port1: unable to enumerate USB device [ 408.043359][T10922] binder: 10921:10922 ioctl c0306201 2000000004c0 returned -22 [ 408.230805][ T5899] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 408.360128][ T24] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 408.520107][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 408.540674][ T24] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 408.558743][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 408.587418][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.607693][ T24] usb 3-1: Product: syz [ 408.627982][ T24] usb 3-1: Manufacturer: syz [ 408.642252][ T24] usb 3-1: SerialNumber: syz [ 408.666189][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 408.672638][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 408.810691][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.102164][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 409.117869][ T5835] r8152-cfgselector 3-1: USB disconnect, device number 90 [ 409.151452][ T5899] usb 1-1: too many configurations: 129, using maximum allowed: 8 [ 409.304400][T10933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1295'. [ 409.360444][T10935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.402927][T10935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.433504][ T5899] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 409.443988][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 409.465554][ T5899] usb 1-1: Product: syz [ 409.476544][ T5899] usb 1-1: Manufacturer: syz [ 409.488035][ T5899] usb 1-1: SerialNumber: syz [ 409.512035][ T5899] usb 1-1: config 0 descriptor?? [ 409.853344][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.990160][ T24] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 410.091916][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.156802][ T10] usb 2-1: USB disconnect, device number 74 [ 410.161820][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 410.210323][ T24] usb 3-1: config 13 has an invalid interface number: 219 but max is 3 [ 410.256795][ T24] usb 3-1: config 13 has an invalid interface number: 142 but max is 3 [ 410.289523][ T24] usb 3-1: config 13 has an invalid interface number: 85 but max is 3 [ 410.318624][ T24] usb 3-1: config 13 has an invalid interface number: 176 but max is 3 [ 410.342273][ T24] usb 3-1: config 13 has no interface number 0 [ 410.348704][ T24] usb 3-1: config 13 has no interface number 1 [ 410.360820][ T24] usb 3-1: config 13 has no interface number 2 [ 410.374464][ T24] usb 3-1: config 13 has no interface number 3 [ 410.382146][T10942] loop5: detected capacity change from 0 to 7 [ 410.394022][ T8872] Dev loop5: unable to read RDB block 7 [ 410.400594][ T24] usb 3-1: config 13 interface 219 altsetting 247 endpoint 0xE has invalid wMaxPacketSize 0 [ 410.415993][ T8872] loop5: unable to read partition table [ 410.422199][ T24] usb 3-1: config 13 interface 219 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 410.433961][ T8872] loop5: partition table beyond EOD, truncated [ 410.444573][T10942] Dev loop5: unable to read RDB block 7 [ 410.453021][T10942] loop5: unable to read partition table [ 410.459208][ T24] usb 3-1: config 13 interface 219 altsetting 247 has a duplicate endpoint with address 0x6, skipping [ 410.471246][T10942] loop5: partition table beyond EOD, truncated [ 410.478188][ T24] usb 3-1: config 13 interface 219 altsetting 247 has a duplicate endpoint with address 0x3, skipping [ 410.491041][T10942] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 410.510171][ T24] usb 3-1: config 13 interface 219 altsetting 247 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 410.576582][ T24] usb 3-1: config 13 interface 219 altsetting 247 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 410.617803][ T24] usb 3-1: config 13 interface 219 altsetting 247 bulk endpoint 0x5 has invalid maxpacket 1024 [ 410.654093][ T24] usb 3-1: config 13 interface 219 altsetting 247 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 410.697438][ T24] usb 3-1: config 13 interface 142 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 410.739681][ T24] usb 3-1: config 13 interface 142 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 410.801636][ T24] usb 3-1: config 13 interface 142 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 410.836373][ T24] usb 3-1: config 13 interface 85 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 410.877551][ T24] usb 3-1: config 13 interface 85 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 410.893496][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.922304][ T24] usb 3-1: config 13 interface 85 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 410.971739][ T24] usb 3-1: config 13 interface 176 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 411.002168][ T24] usb 3-1: config 13 interface 176 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 411.035010][T10956] syzkaller1: entered promiscuous mode [ 411.041075][ T24] usb 3-1: config 13 interface 219 has no altsetting 0 [ 411.048390][T10956] syzkaller1: entered allmulticast mode [ 411.054934][ T24] usb 3-1: config 13 interface 142 has no altsetting 0 [ 411.066786][ T24] usb 3-1: config 13 interface 85 has no altsetting 0 [ 411.081006][T10956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.101051][ T24] usb 3-1: config 13 interface 176 has no altsetting 0 [ 411.109028][T10956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.122808][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b124, bcdDevice=db.71 [ 411.154422][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.163244][ T24] usb 3-1: Product: 몾ä‚à°ã…¿ê–“羅냠ã§ç™’䊧㥙å¨ë ºéˆ¬å·›åµ¯ã´„ [ 411.176221][ T24] usb 3-1: Manufacturer: ã [ 411.181879][ T24] usb 3-1: SerialNumber: 튣ᚌ粡î¼ë·ã…¹ã‚šêƒ¡âŠ¿î«°â‚‚ë–²ç½è·Šé¹é–”膇轒몮å©ì¹¡éŒ‹ëŒ½ì»áª‰á«˜âŒ¼æ´¹å±¶é­ˆæ­‹ç¢é‡›ç°¼â ¶å„§à¡½ä²‹í·î‹²Ø·è¬±â—¤â¹´î›¾â†¡é²å˜Žë™‚ᾷ즯쇶ì€æ¨¿à®¿èœ¨í™Ÿë⼀촽즚⶙ã¨åŽƒå£µë­¬è¾¢í‡§í… äŸî£‚얡쫵뷈呢뮖ﯞ馠内驕ᗨ댟让â²ã…±å”‘è¦è‹˜â›¶í˜œîƒµâ»¸ [ 411.228777][T10940] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 411.471732][T10940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.485653][T10966] syzkaller1: entered promiscuous mode [ 411.494544][T10966] syzkaller1: entered allmulticast mode [ 411.500900][T10940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.560861][ T24] usb 3-1: USB disconnect, device number 91 [ 411.709081][T10971] netlink: 'syz.1.1308': attribute type 1 has an invalid length. [ 411.814261][T10975] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 411.845040][T10975] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 411.861383][T10977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.876274][ T5899] usb 1-1: USB disconnect, device number 72 [ 411.882133][T10977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.923655][T10971] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 411.964963][T10971] bond2: (slave gretap1): making interface the new active one [ 411.973880][T10971] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 411.983895][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.002200][T10971] macvlan2: entered promiscuous mode [ 412.007763][T10971] macvlan2: entered allmulticast mode [ 412.015621][T10971] bond2: entered promiscuous mode [ 412.022232][T10971] gretap1: entered promiscuous mode [ 412.029832][T10971] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 412.047807][T10971] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 412.061543][T10971] bond2: left promiscuous mode [ 412.066560][T10971] gretap1: left promiscuous mode [ 412.106117][T10980] fuse: Unknown parameter '000000000000000000000030x00000000000000040000000000000000000000300000000000000000003' [ 412.236003][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 412.236021][ T30] audit: type=1326 audit(1775843649.947:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 412.284978][ T30] audit: type=1326 audit(1775843649.977:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 412.318558][ T30] audit: type=1326 audit(1775843649.977:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 412.342002][ T5899] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 412.356456][ T30] audit: type=1326 audit(1775843649.977:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 412.382677][ T30] audit: type=1326 audit(1775843649.977:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52c835d04e code=0x7ffc0000 [ 412.405825][ T30] audit: type=1326 audit(1775843649.977:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 412.439146][ T30] audit: type=1326 audit(1775843649.977:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 412.466427][ T30] audit: type=1326 audit(1775843649.977:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 412.515320][ T30] audit: type=1326 audit(1775843649.977:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 412.557037][ T30] audit: type=1326 audit(1775843649.977:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 412.582744][ T5899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.596210][ T5899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.608215][ T5899] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 412.617728][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 412.626610][ T5899] usb 1-1: SerialNumber: syz [ 412.850670][T11003] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 412.901332][ T5899] usb 1-1: 0:2 : does not exist [ 412.906267][ T5899] usb 1-1: unit 4 not found! [ 412.935651][T11007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.968784][T11007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.017415][T11009] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1320'. [ 413.045972][ T5899] usb 1-1: USB disconnect, device number 73 [ 413.092233][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.130214][ T5929] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 413.130316][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.301564][ T5929] usb 3-1: not running at top speed; connect to a high speed hub [ 413.317999][ T5929] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 413.331433][ T5929] usb 3-1: config 95 has no interface number 0 [ 413.338153][ T5929] usb 3-1: config 95 interface 1 has no altsetting 0 [ 413.377545][ T5929] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 413.428201][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.479717][ T5929] usb 3-1: Product: syz [ 413.497530][ T5929] usb 3-1: Manufacturer: syz [ 413.509077][T11020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.518500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.557362][ T5929] usb 3-1: SerialNumber: syz [ 413.612843][T11020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.649604][T11019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.980137][ T5920] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 414.013695][T11036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.052874][T11036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.150800][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 414.168276][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.180144][ T5921] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 414.211986][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.248439][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 414.287119][ T5920] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 414.320936][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.360150][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 414.368752][ T5920] usb 1-1: config 0 descriptor?? [ 414.385057][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 414.429922][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 414.469811][ T5921] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 414.504366][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.537158][ T5921] usb 4-1: config 0 descriptor?? [ 414.556355][T11034] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 414.878749][ T5920] nintendo 0003:057E:2019.002B: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 414.988784][ T5921] ft260 0003:0403:6030.002C: unknown main item tag 0x0 [ 415.008487][ T5920] nintendo 0003:057E:2019.002B: Failed to get joycon info; ret=-38 [ 415.062789][ T5921] ft260 0003:0403:6030.002C: unknown main item tag 0x0 [ 415.076706][ T5920] nintendo 0003:057E:2019.002B: Failed to retrieve controller info; ret=-38 [ 415.135374][ T5920] nintendo 0003:057E:2019.002B: Failed to initialize controller; ret=-38 [ 415.200797][ T5921] ft260 0003:0403:6030.002C: chip code: 0000 0000 [ 415.211115][ T5920] nintendo 0003:057E:2019.002B: probe - fail = -38 [ 415.220399][ T5835] net_ratelimit: 5 callbacks suppressed [ 415.220419][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.244689][ T5920] nintendo 0003:057E:2019.002B: probe with driver nintendo failed with error -38 [ 415.284713][T11044] EXT4-fs: Conflicting test_dummy_encryption options [ 415.303286][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1332'. [ 415.315437][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'. [ 415.317244][ T5920] usb 1-1: USB disconnect, device number 74 [ 415.348197][T11044] netlink: 'syz.4.1332': attribute type 18 has an invalid length. [ 415.378821][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1332'. [ 415.423025][T11034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.441772][T11034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.457119][ T5921] ft260 0003:0403:6030.002C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 415.499719][T11054] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1334'. [ 415.656249][ T5921] ft260 0003:0403:6030.002C: failed to retrieve status: -32, no wakeup [ 415.674635][ T5921] ft260 0003:0403:6030.002C: failed to retrieve status: -32 [ 415.900327][ T5899] usb 4-1: USB disconnect, device number 92 [ 415.920132][ T5828] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 415.931790][T11065] xt_hashlimit: size too large, truncated to 1048576 [ 416.093149][ T5828] usb 2-1: unable to get BOS descriptor or descriptor too short [ 416.102276][ T5828] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 416.111191][ T5828] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 416.122728][ T5828] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 416.131828][ T5828] usb 2-1: config 13 has no interface number 0 [ 416.138198][ T5828] usb 2-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 416.151555][ T5828] usb 2-1: config 13 interface 50 has no altsetting 0 [ 416.160684][ T5828] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 416.169891][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.178080][ T5828] usb 2-1: Product: 鉳癦餬꾗㗔â¶ê³éµƒï¼¨ã±šæ¡›ë‚½ï€¶ï­–࣢횸ëµé‘ªè‚±Â緈ꨕ쥼ḫâ¬î·¦ã«µã»¢ç‘¥ë€’믰ﵢㆵꩈ澊⭢ŕﷶ慕퓖껫᪖櫦邺⟷绗⇇綛í±îœŸå•±í€œë¿€è›ä¸œè½±ï²â¡ˆá˜ ä³±å¡¼ê°³è‰²íž˜æµ™ë­“퀮ꬋ壯鮺Ⅷ輋ࠨ﬘Δ [ 416.202403][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.212246][ T5828] usb 2-1: Manufacturer: 鰬魸᳖溟ׂ뤡롢䇹愯 [ 416.226885][ T5828] usb 2-1: SerialNumber: 磴ë±åµë‰„뜡쌑ç¡äºâ€ºé‘»ï´é©£å¨’瘽â§îªŒç³Šâ½¤ã’‰ážì¬ªç’Šè•‹à§£ãž‹áº–í䚵沷 [ 416.253438][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.440435][ T5929] usb 3-1: USB disconnect, device number 92 [ 416.522020][ T5828] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 416.524697][ T43] usb 2-1: Failed to submit usb control message: -71 [ 416.550115][ T43] usb 2-1: unable to send the bmi data to the device: -71 [ 416.558336][ T43] usb 2-1: unable to get target info from device [ 416.570368][ T43] usb 2-1: could not get target info (-71) [ 416.579416][ T43] usb 2-1: could not probe fw (-71) [ 416.603794][ T5828] usb 2-1: USB disconnect, device number 75 [ 416.612874][ T8872] udevd[8872]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.627353][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1340'. [ 416.759110][T11081] netlink: 'syz.2.1343': attribute type 4 has an invalid length. [ 416.790082][T11081] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1343'. [ 416.838142][T11081] .`: renamed from bond0 (while UP) [ 416.864637][T11086] xt_hashlimit: size too large, truncated to 1048576 [ 417.098140][T11098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.164977][T11098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.190742][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1342'. [ 417.214816][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1342'. [ 417.300687][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.330151][ T5921] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 417.362313][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1348'. [ 417.460776][ T1213] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 417.510086][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 417.529507][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.548963][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 262, setting to 64 [ 417.582110][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.606013][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.622261][ T1213] usb 2-1: Using ep0 maxpacket: 16 [ 417.642151][ T1213] usb 2-1: unable to get BOS descriptor or descriptor too short [ 417.642668][ T5921] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 417.682061][ T1213] usb 2-1: config 8 has an invalid interface number: 111 but max is 0 [ 417.692427][ T1213] usb 2-1: config 8 has no interface number 0 [ 417.699044][ T5921] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 417.701150][ T1213] usb 2-1: config 8 interface 111 has no altsetting 0 [ 417.716826][ T1213] usb 2-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=c5.04 [ 417.726808][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.729275][ T5921] usb 3-1: Manufacturer: syz [ 417.735052][ T1213] usb 2-1: Product: syz [ 417.744023][ T1213] usb 2-1: Manufacturer: syz [ 417.748634][ T1213] usb 2-1: SerialNumber: syz [ 417.753374][ T5920] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 417.781048][ T5921] usb 3-1: config 0 descriptor?? [ 417.910084][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 417.922804][ T5920] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 417.947960][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.969812][ T5920] usb 1-1: Product: syz [ 417.986538][ T5920] usb 1-1: Manufacturer: syz [ 418.008012][ T5920] usb 1-1: SerialNumber: syz [ 418.021558][ T5920] usb 1-1: config 0 descriptor?? [ 418.128784][T11099] tc_dump_action: action bad kind [ 418.194277][ T1213] kaweth 2-1:8.111: couldn't find required endpoints [ 418.218963][ T1213] usb 2-1: USB disconnect, device number 76 [ 418.330949][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.464531][ T5920] airspy 1-1:0.0: Board ID: 00 [ 418.475082][ T5920] airspy 1-1:0.0: Firmware version: [ 419.210622][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.371282][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.473984][ T5920] airspy 1-1:0.0: usb_control_msg() failed -71 request 10 [ 419.529014][T11136] netlink: 'syz.4.1355': attribute type 18 has an invalid length. [ 419.548746][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'. [ 419.550309][ T5920] airspy 1-1:0.0: Registered as swradio24 [ 419.641756][ T5920] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 419.670311][ T5920] usb 1-1: USB disconnect, device number 75 [ 419.881817][ T5921] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 420.020161][ T5921] usb 2-1: device descriptor read/64, error -71 [ 420.179889][ T5828] usb 3-1: USB disconnect, device number 93 [ 420.270270][ T5921] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 420.422596][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.457177][T11146] netlink: 'syz.3.1358': attribute type 49 has an invalid length. [ 420.461510][ T5921] usb 2-1: device descriptor read/64, error -71 [ 420.590507][ T5921] usb usb2-port1: attempt power cycle [ 420.680386][ T5828] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 420.750121][ T10] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 420.841180][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 420.859511][ T5828] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.885853][ T5828] usb 3-1: New USB device found, idVendor=3240, idProduct=d300, bcdDevice=20.fe [ 420.898775][ T5828] usb 3-1: New USB device strings: Mfr=206, Product=228, SerialNumber=3 [ 420.909744][ T5828] usb 3-1: Product: syz [ 420.914426][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 420.922320][ T5828] usb 3-1: Manufacturer: syz [ 420.922342][ T5828] usb 3-1: SerialNumber: syz [ 420.924494][ T10] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 420.945762][ T5921] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 420.956798][ T5828] usb 3-1: config 0 descriptor?? [ 420.981311][ T5921] usb 2-1: device descriptor read/8, error -71 [ 420.991785][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 421.010746][ T10] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 421.038105][ T10] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 421.053265][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 421.071644][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 421.084642][ T10] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 421.094773][ T10] usb 1-1: Product: syz [ 421.099887][ T10] usb 1-1: Manufacturer: syz [ 421.105922][ T10] usb 1-1: SerialNumber: syz [ 421.125620][ T10] usb 1-1: config 0 descriptor?? [ 421.141640][ T10] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 421.154516][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1366'. [ 421.168153][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1366'. [ 421.194020][ T10] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 421.208815][T11154] ptrace attach of "./syz-executor exec"[9530] was attempted by "\x0a Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ @ \x0a N ÿ  P\x1bÆR €    ¥ ÿÿ \x07    $ @   \x0c   , @ ( ÀH  k  ÿÿÿÿ [ 421.209688][ T5828] usb 3-1: USB disconnect, device number 94 [ 421.314719][ T5921] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 421.340565][ T5921] usb 2-1: device descriptor read/8, error -71 [ 421.365542][T11159] program syz.0.1363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.442692][T11170] sg_write: process 924 (syz.0.1363) changed security contexts after opening file descriptor, this is not allowed. [ 421.455383][ T5921] usb usb2-port1: unable to enumerate USB device [ 421.472465][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.700130][ T5921] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 421.850641][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 421.869085][ T5921] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 421.902020][ T5921] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 421.919535][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.929392][ T5921] usb 4-1: Product: syz [ 421.935611][ T5921] usb 4-1: Manufacturer: syz [ 421.944474][ T5921] usb 4-1: SerialNumber: syz [ 422.185454][ T5921] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 422.203111][ T5921] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 422.216404][ T5921] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 422.229163][ T5921] usb 4-1: USB disconnect, device number 93 [ 422.250594][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.370243][ T5929] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 422.491002][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.542208][ T5929] usb 3-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 422.565444][T11189] loop5: detected capacity change from 0 to 7 [ 422.569350][ T5929] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.576533][T11189] Dev loop5: unable to read RDB block 7 [ 422.590238][T11189] loop5: unable to read partition table [ 422.596291][T11189] loop5: partition table beyond EOD, truncated [ 422.603487][T11189] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 422.622138][ T5929] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 422.651341][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.683893][ T5929] usb 3-1: Product: syz [ 422.704439][ T5929] usb 3-1: Manufacturer: syz [ 422.717214][ T5929] usb 3-1: SerialNumber: syz [ 422.910259][ T5921] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 423.072469][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 423.097829][ T5921] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 423.114226][ T5921] usb 2-1: config 0 has no interface number 0 [ 423.129556][ T5921] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 423.155040][ T5921] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 423.181357][ T5921] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 423.209102][ T5921] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 423.237423][ T5921] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 423.255840][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.271564][ T5921] usb 2-1: config 0 descriptor?? [ 423.286688][ T5921] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 423.399279][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 423.399298][ T30] audit: type=1326 audit(1775843661.107:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4719c819 code=0x7ffc0000 [ 423.451876][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.467125][T11198] netlink: 'syz.4.1374': attribute type 3 has an invalid length. [ 423.507501][ T30] audit: type=1326 audit(1775843661.107:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4719c819 code=0x7ffc0000 [ 423.553249][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.582946][ T5921] usb 1-1: USB disconnect, device number 76 [ 423.626621][ T30] audit: type=1326 audit(1775843661.117:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4719c819 code=0x7ffc0000 [ 423.630763][ T10] usb 2-1: USB disconnect, device number 81 [ 423.671239][ T5921] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 423.759306][ T30] audit: type=1326 audit(1775843661.147:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4719c819 code=0x7ffc0000 [ 423.812297][ T10] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 423.865284][ T30] audit: type=1326 audit(1775843661.147:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac4719c819 code=0x7ffc0000 [ 423.931743][ T30] audit: type=1326 audit(1775843661.147:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4719c819 code=0x7ffc0000 [ 423.995944][ T30] audit: type=1326 audit(1775843661.147:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4719c819 code=0x7ffc0000 [ 424.040122][ T5921] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 424.055733][ T30] audit: type=1326 audit(1775843661.147:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4719c819 code=0x7ffc0000 [ 424.109169][ T30] audit: type=1326 audit(1775843661.157:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4719c819 code=0x7ffc0000 [ 424.155799][ T30] audit: type=1326 audit(1775843661.157:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac4715d04e code=0x7ffc0000 [ 424.170419][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 424.218656][ T5921] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 424.242960][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 424.287402][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 424.319938][ T5921] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 424.337286][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.350914][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 424.361216][ T5921] usb 1-1: Product: syz [ 424.370492][ T10] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 424.381249][ T5921] usb 1-1: Manufacturer: syz [ 424.388111][ T10] usb 2-1: config 8 has an invalid descriptor of length 64, skipping remainder of the config [ 424.401795][ T5921] usb 1-1: SerialNumber: syz [ 424.422135][ T10] usb 2-1: config 8 has no interface number 0 [ 424.441797][ T5921] usb 1-1: config 0 descriptor?? [ 424.453742][ T10] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 424.480631][ T5921] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 424.557386][ T10] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 424.658174][ T5828] usb 1-1: USB disconnect, device number 77 [ 424.728231][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.805006][ T10] usb 2-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 1024 [ 424.818020][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.827314][ T10] usb 2-1: config 8 interface 206 has no altsetting 0 [ 424.837359][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 424.846958][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.855469][ T10] usb 2-1: Product: syz [ 424.859939][ T10] usb 2-1: Manufacturer: syz [ 424.866110][ T10] usb 2-1: SerialNumber: syz [ 424.879410][T11204] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 425.035317][ T5929] usb 3-1: 0:1 : does not exist [ 425.056368][ T5929] usb 3-1: unit 0 not found! [ 425.126276][ T10] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 425.166010][ T10] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 425.181101][ T10] usb 2-1: USB disconnect, device number 82 [ 425.211674][ T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 425.234611][ T10] garmin_gps 2-1:8.206: device disconnected [ 425.245602][T11220] loop5: detected capacity change from 0 to 7 [ 425.257432][T11220] Dev loop5: unable to read RDB block 7 [ 425.280200][T11220] loop5: unable to read partition table [ 425.284756][ T5929] usb 3-1: USB disconnect, device number 95 [ 425.295268][T11220] loop5: partition table beyond EOD, truncated [ 425.309321][T11220] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 425.321872][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.670292][ T5929] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 425.710300][ T1213] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 425.785481][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.862830][ T5929] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 425.880571][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.888947][ T5929] usb 3-1: Product: syz [ 425.893418][ T5929] usb 3-1: Manufacturer: syz [ 425.900541][ T5929] usb 3-1: SerialNumber: syz [ 425.906459][ T1213] usb 1-1: config 251 has an invalid interface number: 243 but max is 0 [ 425.919202][ T5929] usb 3-1: config 0 descriptor?? [ 425.924335][ T1213] usb 1-1: config 251 has no interface number 0 [ 425.931319][ T1213] usb 1-1: config 251 interface 243 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 425.946240][ T1213] usb 1-1: config 251 interface 243 has no altsetting 0 [ 425.956814][ T1213] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=b8.82 [ 425.967033][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.975312][ T1213] usb 1-1: Product: syz [ 425.979795][ T1213] usb 1-1: Manufacturer: syz [ 425.985492][ T1213] usb 1-1: SerialNumber: syz [ 426.219529][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.244264][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.269301][T11250] syzkaller0: entered promiscuous mode [ 426.275200][T11250] syzkaller0: entered allmulticast mode [ 426.303957][ T1213] sisusb 1-1:251.243: Invalid USB2VGA device [ 426.330419][ T1213] sisusb 1-1:251.243: probe with driver sisusb failed with error -22 [ 426.348666][ T1213] usb 1-1: USB disconnect, device number 78 [ 426.503476][T11253] tap0: tun_chr_ioctl cmd 1074025677 [ 426.519109][T11253] tap0: linktype set to 804 [ 426.693888][T11261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.714806][T11261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.734933][T11261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.744855][T11261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.756310][T11261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.768327][T11260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.826185][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.991612][T11268] loop5: detected capacity change from 0 to 7 [ 427.018497][T11268] Dev loop5: unable to read RDB block 7 [ 427.057914][T11268] loop5: unable to read partition table [ 427.074766][T11268] loop5: partition table beyond EOD, truncated [ 427.102186][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1379'. [ 427.113054][T11268] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 427.470100][ T5835] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 427.580380][ T5899] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 427.610194][ T5835] usb 4-1: device descriptor read/64, error -71 [ 427.730215][T11286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.751070][T11286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.770438][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 427.778229][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 427.794772][ T5929] usb 3-1: Firmware version (0.0) predates our first public release. [ 427.810801][ T5929] usb 3-1: Please update to version 0.2 or newer [ 427.817200][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 427.832654][ T5899] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 427.848379][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.862180][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.876257][ T5835] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 427.893742][ T5899] usb 1-1: Product: syz [ 427.903362][ T5899] usb 1-1: Manufacturer: syz [ 427.908221][ T5899] usb 1-1: SerialNumber: syz [ 427.939364][ T5899] usb 1-1: config 0 descriptor?? [ 427.965495][ T5899] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 427.989076][ T5899] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 428.040196][ T5835] usb 4-1: device descriptor read/64, error -71 [ 428.180399][ T5835] usb usb4-port1: attempt power cycle [ 428.269307][ T5929] usb 3-1: USB disconnect, device number 96 [ 428.331601][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.409199][T11296] FAULT_INJECTION: forcing a failure. [ 428.409199][T11296] name failslab, interval 1, probability 0, space 0, times 0 [ 428.423827][T11296] CPU: 1 UID: 0 PID: 11296 Comm: syz.4.1404 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.423859][T11296] Tainted: [L]=SOFTLOCKUP [ 428.423867][T11296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 428.423883][T11296] Call Trace: [ 428.423891][T11296] [ 428.423900][T11296] dump_stack_lvl+0xe8/0x150 [ 428.423931][T11296] should_fail_ex+0x412/0x560 [ 428.423963][T11296] should_failslab+0xa8/0x100 [ 428.423989][T11296] __kmalloc_noprof+0xe8/0x760 [ 428.424011][T11296] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 428.424037][T11296] tomoyo_realpath_from_path+0xe3/0x5d0 [ 428.424066][T11296] ? tomoyo_path_number_perm+0x219/0x630 [ 428.424091][T11296] tomoyo_path_number_perm+0x246/0x630 [ 428.424118][T11296] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 428.424146][T11296] ? __lock_acquire+0x6b5/0x2cf0 [ 428.424179][T11296] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 428.424224][T11296] ? __fget_files+0x2a/0x420 [ 428.424245][T11296] ? __fget_files+0x2a/0x420 [ 428.424261][T11296] ? __fget_files+0x3a0/0x420 [ 428.424277][T11296] ? __fget_files+0x2a/0x420 [ 428.424298][T11296] security_file_ioctl+0xc3/0x2a0 [ 428.424325][T11296] __se_sys_ioctl+0x47/0x170 [ 428.424349][T11296] do_syscall_64+0x14d/0xf80 [ 428.424370][T11296] ? trace_irq_disable+0x3b/0x150 [ 428.424387][T11296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.424406][T11296] ? clear_bhb_loop+0x40/0x90 [ 428.424428][T11296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.424446][T11296] RIP: 0033:0x7fac4719c819 [ 428.424465][T11296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.424481][T11296] RSP: 002b:00007fac4800b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.424503][T11296] RAX: ffffffffffffffda RBX: 00007fac47415fa0 RCX: 00007fac4719c819 [ 428.424517][T11296] RDX: 0000200000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 428.424529][T11296] RBP: 00007fac4800b090 R08: 0000000000000000 R09: 0000000000000000 [ 428.424542][T11296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.424553][T11296] R13: 00007fac47416038 R14: 00007fac47415fa0 R15: 00007fac4753fa48 [ 428.424583][T11296] [ 428.424614][T11296] ERROR: Out of memory at tomoyo_realpath_from_path. [ 428.523374][T11300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1405'. [ 428.600139][ T5835] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 428.674739][ T5899] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 428.693086][ T5899] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 428.739472][ T5835] usb 4-1: device descriptor read/8, error -71 [ 428.848750][ T30] kauditd_printk_skb: 296 callbacks suppressed [ 428.848769][ T30] audit: type=1326 audit(1775843666.557:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 428.913628][ T30] audit: type=1326 audit(1775843666.557:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 428.918715][ T5899] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 428.969070][ T5899] em28xx 1-1:0.0: No AC97 audio processor [ 429.000125][ T5835] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 429.012731][ T5899] usb 1-1: USB disconnect, device number 79 [ 429.039858][ T5899] em28xx 1-1:0.0: Disconnecting em28xx [ 429.046208][ T5835] usb 4-1: device descriptor read/8, error -71 [ 429.052920][ T30] audit: type=1326 audit(1775843666.597:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 429.065089][ T5899] em28xx 1-1:0.0: Freeing device [ 429.084679][ T30] audit: type=1326 audit(1775843666.597:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 429.149672][ T30] audit: type=1326 audit(1775843666.597:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 429.180754][ T5835] usb usb4-port1: unable to enumerate USB device [ 429.200116][ T30] audit: type=1326 audit(1775843666.597:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 429.263228][ T30] audit: type=1326 audit(1775843666.597:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 429.290182][ T30] audit: type=1326 audit(1775843666.597:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 429.313305][ T30] audit: type=1326 audit(1775843666.597:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 429.350804][ T30] audit: type=1326 audit(1775843666.597:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c839c819 code=0x7ffc0000 [ 429.749573][T11336] FAULT_INJECTION: forcing a failure. [ 429.749573][T11336] name failslab, interval 1, probability 0, space 0, times 0 [ 429.764323][T11336] CPU: 0 UID: 0 PID: 11336 Comm: syz.4.1416 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.764358][T11336] Tainted: [L]=SOFTLOCKUP [ 429.764365][T11336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 429.764375][T11336] Call Trace: [ 429.764382][T11336] [ 429.764390][T11336] dump_stack_lvl+0xe8/0x150 [ 429.764421][T11336] should_fail_ex+0x412/0x560 [ 429.764454][T11336] should_failslab+0xa8/0x100 [ 429.764480][T11336] __kmalloc_noprof+0xe8/0x760 [ 429.764498][T11336] ? tomoyo_encode+0x28b/0x550 [ 429.764520][T11336] tomoyo_encode+0x28b/0x550 [ 429.764544][T11336] tomoyo_realpath_from_path+0x58d/0x5d0 [ 429.764573][T11336] ? tomoyo_path_number_perm+0x219/0x630 [ 429.764606][T11336] tomoyo_path_number_perm+0x246/0x630 [ 429.764633][T11336] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 429.764660][T11336] ? __lock_acquire+0x6b5/0x2cf0 [ 429.764689][T11336] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 429.764732][T11336] ? __fget_files+0x2a/0x420 [ 429.764752][T11336] ? __fget_files+0x2a/0x420 [ 429.764768][T11336] ? __fget_files+0x3a0/0x420 [ 429.764783][T11336] ? __fget_files+0x2a/0x420 [ 429.764803][T11336] security_file_ioctl+0xc3/0x2a0 [ 429.764829][T11336] __se_sys_ioctl+0x47/0x170 [ 429.764851][T11336] do_syscall_64+0x14d/0xf80 [ 429.764872][T11336] ? trace_irq_disable+0x3b/0x150 [ 429.764888][T11336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.764906][T11336] ? clear_bhb_loop+0x40/0x90 [ 429.764927][T11336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.764945][T11336] RIP: 0033:0x7fac4719c819 [ 429.764964][T11336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.764978][T11336] RSP: 002b:00007fac4800b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.764998][T11336] RAX: ffffffffffffffda RBX: 00007fac47415fa0 RCX: 00007fac4719c819 [ 429.765010][T11336] RDX: 0000200000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 429.765022][T11336] RBP: 00007fac4800b090 R08: 0000000000000000 R09: 0000000000000000 [ 429.765034][T11336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.765045][T11336] R13: 00007fac47416038 R14: 00007fac47415fa0 R15: 00007fac4753fa48 [ 429.765073][T11336] [ 429.765856][T11336] ERROR: Out of memory at tomoyo_realpath_from_path. [ 430.087883][T11345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.102439][T11345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.542917][ T5835] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 430.698940][T11359] fuse: Unknown parameter ' ' [ 430.704072][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 430.713535][ T5835] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 430.739896][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 430.754806][T10178] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.768665][ T5835] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 430.809358][ T5835] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 430.826210][ T5835] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 430.848528][ T5835] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 430.860597][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.920135][ T5835] usb 1-1: Product: syz [ 430.932286][ T5835] usb 1-1: Manufacturer: syz [ 430.947787][ T5835] usb 1-1: SerialNumber: syz [ 430.975432][ T5929] net_ratelimit: 2 callbacks suppressed [ 430.975448][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.991381][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 431.022003][ T5835] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input50 [ 431.207761][ T5835] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 431.254915][ T5835] (id 0x00) [ 431.286889][T10178] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.370254][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.380516][ T5835] rc_core: IR keymap rc-imon-pad not found [ 431.387713][ T5835] Registered IR keymap rc-empty [ 431.409837][ T5835] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 431.446992][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 431.457595][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 431.467338][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 431.475272][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 431.483229][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 431.508973][ T5835] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 431.563698][ T5835] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 431.611215][ T5835] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input51 [ 431.657293][ T5835] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:80> initialized [ 431.674242][T10178] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.918567][T10178] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.020368][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.281614][T10178] bridge_slave_1: left allmulticast mode [ 432.298223][T10178] bridge_slave_1: left promiscuous mode [ 432.333034][T10178] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.353958][T11367] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1426'. [ 432.373716][T10178] bridge_slave_0: left allmulticast mode [ 432.379389][T10178] bridge_slave_0: left promiscuous mode [ 432.401556][T10178] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.585638][T11373] imon:send_packet: task interrupted [ 432.596698][T11373] imon:send_packet: packet tx failed (-512) [ 432.630098][ T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 432.717592][T11373] imon:vfd_write: send packet #2 failed [ 432.768375][T10178] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.800383][T11373] imon:send_packet: task interrupted [ 432.844817][T10178] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.863084][T11373] imon:send_packet: packet tx failed (-512) [ 432.894937][T10178] .` (unregistering): Released all slaves [ 432.904692][T11373] imon:vfd_write: send packet #0 failed [ 432.947186][T11373] imon:send_packet: task interrupted [ 432.987415][T11373] imon:send_packet: packet tx failed (-512) [ 432.998011][T11373] imon:vfd_write: send packet #0 failed [ 433.010974][T11373] imon:send_packet: task interrupted [ 433.029366][T11373] imon:send_packet: packet tx failed (-512) [ 433.054768][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.069218][T11373] imon:vfd_write: send packet #0 failed [ 433.077977][T11378] netlink: 'syz.1.1427': attribute type 1 has an invalid length. [ 433.096050][T11373] imon:send_packet: task interrupted [ 433.120594][T11373] imon:send_packet: packet tx failed (-512) [ 433.216764][T11373] imon:vfd_write: send packet #0 failed [ 433.278096][T11373] imon:send_packet: task interrupted [ 433.349592][T11373] imon:send_packet: packet tx failed (-512) [ 433.438453][T11373] imon:vfd_write: send packet #0 failed [ 433.446170][T11382] FAULT_INJECTION: forcing a failure. [ 433.446170][T11382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.464938][T11378] bond3: entered promiscuous mode [ 433.510627][T11382] CPU: 0 UID: 0 PID: 11382 Comm: syz.4.1428 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.510658][T11382] Tainted: [L]=SOFTLOCKUP [ 433.510666][T11382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 433.510678][T11382] Call Trace: [ 433.510686][T11382] [ 433.510694][T11382] dump_stack_lvl+0xe8/0x150 [ 433.510725][T11382] should_fail_ex+0x412/0x560 [ 433.510757][T11382] _copy_from_user+0x2d/0xb0 [ 433.510782][T11382] dvb_usercopy+0x15c/0x2e0 [ 433.510807][T11382] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 433.510834][T11382] ? __pfx_dvb_usercopy+0x10/0x10 [ 433.510867][T11382] ? __fget_files+0x3a0/0x420 [ 433.510884][T11382] ? __fget_files+0x2a/0x420 [ 433.510912][T11382] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 433.510939][T11382] dvb_demux_ioctl+0x29/0x40 [ 433.510965][T11382] __se_sys_ioctl+0xfc/0x170 [ 433.510990][T11382] do_syscall_64+0x14d/0xf80 [ 433.511014][T11382] ? trace_irq_disable+0x3b/0x150 [ 433.511031][T11382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.511050][T11382] ? clear_bhb_loop+0x40/0x90 [ 433.511073][T11382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.511091][T11382] RIP: 0033:0x7fac4719c819 [ 433.511110][T11382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.511126][T11382] RSP: 002b:00007fac4800b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.511146][T11382] RAX: ffffffffffffffda RBX: 00007fac47415fa0 RCX: 00007fac4719c819 [ 433.511159][T11382] RDX: 0000200000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 433.511172][T11382] RBP: 00007fac4800b090 R08: 0000000000000000 R09: 0000000000000000 [ 433.511184][T11382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.511195][T11382] R13: 00007fac47416038 R14: 00007fac47415fa0 R15: 00007fac4753fa48 [ 433.511224][T11382] [ 433.511337][T11373] imon:send_packet: task interrupted [ 433.530210][ T5838] Bluetooth: hci1: command tx timeout [ 433.716916][T11378] bond3: entered allmulticast mode [ 433.746946][T11378] 8021q: adding VLAN 0 to HW filter on device bond3 [ 433.786642][T11373] imon:send_packet: packet tx failed (-512) [ 433.811096][T11373] imon:vfd_write: send packet #0 failed [ 433.903609][ T5835] usb 1-1: USB disconnect, device number 80 [ 434.014079][T11392] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 434.030349][T11393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1431'. [ 434.064154][T11363] chnl_net:caif_netlink_parms(): no params data found [ 434.101581][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.330795][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.365023][T11406] fuse: Invalid rootmode [ 434.413083][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.500378][T10178] hsr_slave_0: left promiscuous mode [ 434.566777][T11416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1436'. [ 434.701273][T10178] hsr_slave_1: left promiscuous mode [ 434.722788][T10178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.732272][T10178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.907623][T10178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.964561][T10178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.969149][T11436] FAULT_INJECTION: forcing a failure. [ 434.969149][T11436] name failslab, interval 1, probability 0, space 0, times 0 [ 434.973280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.996612][T11436] CPU: 1 UID: 0 PID: 11436 Comm: syz.0.1439 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.996641][T11436] Tainted: [L]=SOFTLOCKUP [ 434.996649][T11436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 434.996660][T11436] Call Trace: [ 434.996666][T11436] [ 434.996671][T11436] dump_stack_lvl+0xe8/0x150 [ 434.996690][T11436] should_fail_ex+0x412/0x560 [ 434.996709][T11436] should_failslab+0xa8/0x100 [ 434.996725][T11436] __kmalloc_cache_noprof+0x88/0x660 [ 434.996738][T11436] ? dvb_dmxdev_add_pid+0x147/0x630 [ 434.996751][T11436] dvb_dmxdev_add_pid+0x147/0x630 [ 434.996763][T11436] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.996778][T11436] dvb_dmxdev_pes_filter_set+0x42c/0x5d0 [ 434.996801][T11436] dvb_demux_do_ioctl+0x48b/0x540 [ 434.996818][T11436] dvb_usercopy+0x199/0x2e0 [ 434.996834][T11436] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 434.996851][T11436] ? __pfx_dvb_usercopy+0x10/0x10 [ 434.996871][T11436] ? __fget_files+0x3a0/0x420 [ 434.996881][T11436] ? __fget_files+0x2a/0x420 [ 434.996892][T11436] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 434.996907][T11436] dvb_demux_ioctl+0x29/0x40 [ 434.996923][T11436] __se_sys_ioctl+0xfc/0x170 [ 434.996937][T11436] do_syscall_64+0x14d/0xf80 [ 434.996951][T11436] ? trace_irq_disable+0x3b/0x150 [ 434.996961][T11436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.996972][T11436] ? clear_bhb_loop+0x40/0x90 [ 434.996985][T11436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.996995][T11436] RIP: 0033:0x7fe80899c819 [ 434.997006][T11436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.997016][T11436] RSP: 002b:00007fe8098ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.997028][T11436] RAX: ffffffffffffffda RBX: 00007fe808c15fa0 RCX: 00007fe80899c819 [ 434.997035][T11436] RDX: 0000200000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 434.997043][T11436] RBP: 00007fe8098ca090 R08: 0000000000000000 R09: 0000000000000000 [ 434.997050][T11436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.997056][T11436] R13: 00007fe808c16038 R14: 00007fe808c15fa0 R15: 00007fe808d3fa48 [ 434.997072][T11436] [ 435.391961][ T5929] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 435.429677][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.500066][T10178] veth1_macvtap: left promiscuous mode [ 435.505774][T10178] veth0_macvtap: left promiscuous mode [ 435.520953][T10178] veth1_vlan: left promiscuous mode [ 435.526628][T10178] veth0_vlan: left promiscuous mode [ 435.560194][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 435.569765][ T5929] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 435.590309][ T5929] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 435.621469][ T5929] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 435.642979][ T5929] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 435.686260][ T5929] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 435.695561][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.710483][ T5929] usb 4-1: Product: syz [ 435.714873][ T5929] usb 4-1: Manufacturer: syz [ 435.721802][ T5929] usb 4-1: SerialNumber: syz [ 435.749490][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 435.761729][ T5929] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input52 [ 435.781991][ T5838] Bluetooth: hci1: command tx timeout [ 435.793995][T11444] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1110260093 (4441040372 ns) > initial count (1585815008 ns). Using initial count to start timer. [ 435.936414][T10178] team0 (unregistering): Port device team_slave_1 removed [ 435.952143][T10178] team0 (unregistering): Port device team_slave_0 removed [ 435.980270][ T5929] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 436.010123][ T5929] (id 0x00) [ 436.077651][ T5929] rc_core: IR keymap rc-imon-pad not found [ 436.102965][ T5929] Registered IR keymap rc-empty [ 436.108045][ T5929] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 436.118552][ T5929] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 436.143009][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 436.191211][ T5929] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 436.237186][ T5929] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input53 [ 436.275780][T11363] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.293668][ T5929] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:99> initialized [ 436.303874][T11363] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.314248][T11363] bridge_slave_0: entered allmulticast mode [ 436.367520][T11363] bridge_slave_0: entered promiscuous mode [ 436.392903][T11363] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.419909][T11363] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.457332][T11363] bridge_slave_1: entered allmulticast mode [ 436.487765][T11363] bridge_slave_1: entered promiscuous mode [ 436.494071][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.580653][T11363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.605327][T11363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.635095][T11458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.665192][T11458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.693379][T11363] team0: Port device team_slave_0 added [ 436.722921][T11363] team0: Port device team_slave_1 added [ 436.813204][T11363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.830719][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.869748][T11363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.909742][T11363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.917410][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.952927][T11363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.040207][ T55] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 437.049065][T11363] hsr_slave_0: entered promiscuous mode [ 437.070512][T11363] hsr_slave_1: entered promiscuous mode [ 437.086501][T11363] debugfs: 'hsr0' already exists in 'hsr' [ 437.096052][T11363] Cannot create hsr debugfs directory [ 437.170616][ T55] usb 2-1: device descriptor read/64, error -71 [ 437.196205][T11474] imon:send_packet: task interrupted [ 437.201867][T11474] imon:send_packet: packet tx failed (-512) [ 437.208029][T11474] imon:vfd_write: send packet #2 failed [ 437.248666][T11474] imon:send_packet: task interrupted [ 437.288133][T11474] imon:send_packet: packet tx failed (-512) [ 437.330668][T11474] imon:vfd_write: send packet #0 failed [ 437.364501][T11474] imon:send_packet: task interrupted [ 437.393209][T11474] imon:send_packet: packet tx failed (-512) [ 437.400413][T11474] imon:vfd_write: send packet #0 failed [ 437.412496][ T55] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 437.448617][ T10] usb 4-1: USB disconnect, device number 99 [ 437.456330][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.515224][T11490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.531272][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.570199][ T55] usb 2-1: device descriptor read/64, error -71 [ 437.570438][T11490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.681539][ T55] usb usb2-port1: attempt power cycle [ 437.687451][T11494] loop5: detected capacity change from 0 to 7 [ 437.696404][T11494] Dev loop5: unable to read RDB block 7 [ 437.710351][T11494] loop5: unable to read partition table [ 437.726012][T11494] loop5: partition table beyond EOD, truncated [ 437.727772][T11363] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 437.744427][T11494] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 437.760597][T11363] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 437.781815][T11363] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 437.834170][T11363] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 437.850779][ T5838] Bluetooth: hci1: command tx timeout [ 437.956615][T11363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.986306][T11363] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.003397][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.010906][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.030702][ T55] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 438.039619][ T8257] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.046844][ T8257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.082890][ T55] usb 2-1: device descriptor read/8, error -71 [ 438.201566][T11363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.215696][T11516] loop5: detected capacity change from 0 to 7 [ 438.230469][T11516] Dev loop5: unable to read RDB block 7 [ 438.243155][T11516] loop5: unable to read partition table [ 438.255829][T11516] loop5: partition table beyond EOD, truncated [ 438.271142][T11363] veth0_vlan: entered promiscuous mode [ 438.276733][T11516] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 438.293506][T11363] veth1_vlan: entered promiscuous mode [ 438.330191][ T55] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 438.357064][T11363] veth0_macvtap: entered promiscuous mode [ 438.368597][T11363] veth1_macvtap: entered promiscuous mode [ 438.384333][ T55] usb 2-1: device descriptor read/8, error -71 [ 438.396844][T11363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.414031][T11363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.442905][T10178] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.459611][T10178] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.500821][ T55] usb usb2-port1: unable to enumerate USB device [ 438.573692][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.617149][T10178] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.642271][T10178] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.886249][T10178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.962441][T10178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.065022][T10178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.085398][T10178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.611092][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.629306][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.660474][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.682068][T11558] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1460'. [ 439.902303][T11574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.914605][T11576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.916839][T11574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.932068][ T5838] Bluetooth: hci1: command tx timeout [ 439.947735][T11576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.096552][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.103933][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.333095][T11584] netlink: 'syz.3.1466': attribute type 1 has an invalid length. [ 440.360143][ T1213] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 440.399078][T11584] bond2: entered promiscuous mode [ 440.422453][T11584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 440.469733][T11586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.478488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.491857][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.650897][T11584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 440.658250][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.669621][T11584] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 440.684019][T11584] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 440.729211][T11584] bond2: (slave vti0): making interface the new active one [ 440.741067][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 440.756732][T11584] vti0: entered promiscuous mode [ 440.767974][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 440.782013][T11584] bond2: (slave vti0): Enslaving as an active interface with an up link [ 440.850830][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 440.894607][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 440.928278][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 440.945605][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 440.964015][T11594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.977540][T11594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.001959][ T1213] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 441.017270][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.048532][ T1213] usb 1-1: Product: syz [ 441.058258][ T1213] usb 1-1: Manufacturer: syz [ 441.065203][T11596] xt_l2tp: v2 doesn't support IP mode [ 441.071660][ T1213] usb 1-1: SerialNumber: syz [ 441.078077][ T1213] usb 1-1: config 0 descriptor?? [ 441.088059][T11598] xt_l2tp: v2 doesn't support IP mode [ 441.091449][ T1213] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected [ 441.104204][ T1213] ti_usb_3410_5052 1-1:0.0: missing endpoints [ 441.452569][ T1213] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 441.525867][T11612] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1473'. [ 441.560100][ T55] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 441.620336][ T1213] usb 2-1: Using ep0 maxpacket: 32 [ 441.633552][ T1213] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 441.652003][ T1213] usb 2-1: config 0 has no interface number 0 [ 441.671193][ T1213] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 441.697242][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.716110][ T1213] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 441.730251][ T55] usb 6-1: Using ep0 maxpacket: 32 [ 441.740875][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.756864][ T55] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 441.769215][ T55] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 441.769234][ T1213] usb 2-1: Product: syz [ 441.769274][ T55] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 441.803711][ T1213] usb 2-1: Manufacturer: syz [ 441.822948][ T1213] usb 2-1: SerialNumber: syz [ 441.834062][ T55] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 441.862288][ T1213] usb 2-1: config 0 descriptor?? [ 441.864975][ T55] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 441.881889][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.885225][ T1213] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 441.902414][ T55] usb 6-1: Product: syz [ 441.930249][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 441.952559][ T55] usb 6-1: Manufacturer: syz [ 441.962318][ T55] usb 6-1: SerialNumber: syz [ 441.972012][ T1213] em28xx 2-1:0.132: Video interface 132 found: [ 441.995503][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 442.007709][ T55] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input54 [ 442.080452][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 442.089142][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.102090][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.120565][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 442.133574][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.154711][ T9] usb 4-1: config 0 descriptor?? [ 442.210611][ T55] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 442.219965][ T55] (id 0x00) [ 442.320107][ T55] rc_core: IR keymap rc-imon-pad not found [ 442.328325][ T55] Registered IR keymap rc-empty [ 442.328383][ T1213] em28xx 2-1:0.132: chip ID is em2874 [ 442.357351][ T55] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 442.370671][ T55] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 442.411592][ T55] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 442.436569][ T55] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input55 [ 442.466264][ T55] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:2> initialized [ 442.623391][ T9] hid (null): bogus close delimiter [ 442.662606][ T9] wacom 0003:056A:0084.002D: bogus close delimiter [ 442.687842][ T9] wacom 0003:056A:0084.002D: item 0 4 2 10 parsing failed [ 442.704483][ T9] wacom 0003:056A:0084.002D: parse failed [ 442.710706][ T9] wacom 0003:056A:0084.002D: probe with driver wacom failed with error -22 [ 442.730866][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.794668][ T9] usb 4-1: USB disconnect, device number 100 [ 442.827352][T11622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.845531][T11622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.931757][ T1213] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 442.959872][ T1213] em28xx 2-1:0.132: board has no eeprom [ 443.021285][ T1213] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 443.037191][ T1213] em28xx 2-1:0.132: analog set to bulk mode. [ 443.051439][ T24] em28xx 2-1:0.132: Registering V4L2 extension [ 443.174876][ T24] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 443.175133][ T55] usb 2-1: USB disconnect, device number 87 [ 443.195615][ T24] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 443.195961][ T55] em28xx 2-1:0.132: Disconnecting em28xx [ 443.317519][ T24] usb 2-1: Decoder not found [ 443.323827][ T24] em28xx 2-1:0.132: failed to create media graph [ 443.342544][ T24] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 443.375879][ T24] em28xx 2-1:0.132: Remote control support is not available for this card. [ 443.394865][T11627] ================================================================== [ 443.402973][T11627] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 443.410350][T11627] Read of size 8 at addr ffff88805da84790 by task v4l_id/11627 [ 443.417888][T11627] [ 443.420224][T11627] CPU: 1 UID: 0 PID: 11627 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 443.420253][T11627] Tainted: [L]=SOFTLOCKUP [ 443.420260][T11627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 443.420272][T11627] Call Trace: [ 443.420284][T11627] [ 443.420292][T11627] dump_stack_lvl+0xe8/0x150 [ 443.420311][T11627] print_report+0xba/0x230 [ 443.420325][T11627] ? v4l2_fh_open+0xac/0x420 [ 443.420339][T11627] kasan_report+0x117/0x150 [ 443.420361][T11627] ? v4l2_fh_open+0xac/0x420 [ 443.420387][T11627] v4l2_fh_open+0xac/0x420 [ 443.420412][T11627] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 443.420437][T11627] em28xx_v4l2_open+0x157/0x9a0 [ 443.420450][T11627] ? do_raw_spin_lock+0x12b/0x2f0 [ 443.420463][T11627] v4l2_open+0x1bf/0x3a0 [ 443.420480][T11627] chrdev_open+0x4cd/0x5e0 [ 443.420494][T11627] ? __pfx_chrdev_open+0x10/0x10 [ 443.420514][T11627] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 443.420536][T11627] ? __pfx_chrdev_open+0x10/0x10 [ 443.420557][T11627] do_dentry_open+0x785/0x14e0 [ 443.420585][T11627] vfs_open+0x3b/0x340 [ 443.420598][T11627] ? path_openat+0x2df0/0x3860 [ 443.420610][T11627] path_openat+0x2e08/0x3860 [ 443.420624][T11627] ? __pfx_stack_trace_save+0x10/0x10 [ 443.420636][T11627] ? stack_depot_save_flags+0x33/0x810 [ 443.420660][T11627] ? __pfx_path_openat+0x10/0x10 [ 443.420676][T11627] ? __x64_sys_openat+0x138/0x170 [ 443.420699][T11627] ? do_syscall_64+0x14d/0xf80 [ 443.420719][T11627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.420739][T11627] ? __lock_acquire+0x6b5/0x2cf0 [ 443.420764][T11627] do_file_open+0x23e/0x4a0 [ 443.420786][T11627] ? __pfx_do_file_open+0x10/0x10 [ 443.420807][T11627] ? _raw_spin_unlock+0x28/0x50 [ 443.420824][T11627] ? alloc_fd+0x64b/0x6c0 [ 443.420852][T11627] do_sys_openat2+0x113/0x200 [ 443.420878][T11627] ? __pfx_do_sys_openat2+0x10/0x10 [ 443.420901][T11627] ? exc_page_fault+0x6a/0xc0 [ 443.420916][T11627] ? do_user_addr_fault+0xc6f/0x1340 [ 443.420931][T11627] __x64_sys_openat+0x138/0x170 [ 443.420946][T11627] do_syscall_64+0x14d/0xf80 [ 443.420960][T11627] ? trace_irq_disable+0x3b/0x150 [ 443.420981][T11627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.421000][T11627] ? clear_bhb_loop+0x40/0x90 [ 443.421019][T11627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.421038][T11627] RIP: 0033:0x7f9d596a7407 [ 443.421055][T11627] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 443.421065][T11627] RSP: 002b:00007ffef6ff0fc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 443.421078][T11627] RAX: ffffffffffffffda RBX: 00007f9d59e1d880 RCX: 00007f9d596a7407 [ 443.421086][T11627] RDX: 0000000000000000 RSI: 00007ffef6ff1f1b RDI: ffffffffffffff9c [ 443.421094][T11627] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 443.421101][T11627] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 443.421107][T11627] R13: 00007ffef6ff1210 R14: 00007f9d59f84000 R15: 0000563dcdd904d8 [ 443.421123][T11627] [ 443.421130][T11627] [ 443.725367][T11627] Allocated by task 24: [ 443.729551][T11627] kasan_save_track+0x3e/0x80 [ 443.734348][T11627] __kasan_kmalloc+0x93/0xb0 [ 443.739238][T11627] __kmalloc_cache_noprof+0x31c/0x660 [ 443.744723][T11627] em28xx_v4l2_init+0x10b/0x2e70 [ 443.749686][T11627] em28xx_init_extension+0x120/0x1c0 [ 443.754984][T11627] process_scheduled_works+0xb6e/0x18c0 [ 443.760673][T11627] worker_thread+0xa53/0xfc0 [ 443.765366][T11627] kthread+0x388/0x470 [ 443.769449][T11627] ret_from_fork+0x51e/0xb90 [ 443.774058][T11627] ret_from_fork_asm+0x1a/0x30 [ 443.778991][T11627] [ 443.781322][T11627] Freed by task 24: [ 443.785147][T11627] kasan_save_track+0x3e/0x80 [ 443.789860][T11627] kasan_save_free_info+0x46/0x50 [ 443.794919][T11627] __kasan_slab_free+0x5c/0x80 [ 443.799861][T11627] kfree+0x1c1/0x630 [ 443.803773][T11627] em28xx_v4l2_init+0x1683/0x2e70 [ 443.808802][T11627] em28xx_init_extension+0x120/0x1c0 [ 443.814109][T11627] process_scheduled_works+0xb6e/0x18c0 [ 443.819780][T11627] worker_thread+0xa53/0xfc0 [ 443.824397][T11627] kthread+0x388/0x470 [ 443.828579][T11627] ret_from_fork+0x51e/0xb90 [ 443.833182][T11627] ret_from_fork_asm+0x1a/0x30 [ 443.837948][T11627] [ 443.840362][T11627] The buggy address belongs to the object at ffff88805da84000 [ 443.840362][T11627] which belongs to the cache kmalloc-8k of size 8192 [ 443.854868][T11627] The buggy address is located 1936 bytes inside of [ 443.854868][T11627] freed 8192-byte region [ffff88805da84000, ffff88805da86000) [ 443.869165][T11627] [ 443.871494][T11627] The buggy address belongs to the physical page: [ 443.877941][T11627] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805da80000 pfn:0x5da80 [ 443.888042][T11627] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 443.896551][T11627] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 443.905163][T11627] page_type: f5(slab) [ 443.909165][T11627] raw: 00fff00000000240 ffff88813fea7280 ffffea00016cae10 ffffea0001f38210 [ 443.917764][T11627] raw: ffff88805da80000 0000000800020001 00000000f5000000 0000000000000000 [ 443.926357][T11627] head: 00fff00000000240 ffff88813fea7280 ffffea00016cae10 ffffea0001f38210 [ 443.935096][T11627] head: ffff88805da80000 0000000800020001 00000000f5000000 0000000000000000 [ 443.943926][T11627] head: 00fff00000000003 ffffea000176a001 00000000ffffffff 00000000ffffffff [ 443.952715][T11627] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 443.961507][T11627] page dumped because: kasan: bad access detected [ 443.968093][T11627] page_owner tracks the page as allocated [ 443.973918][T11627] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10933, tgid 10930 (syz.3.1295), ts 409364830286, free_ts 409326811789 [ 443.995448][T11627] post_alloc_hook+0x231/0x280 [ 444.000240][T11627] get_page_from_freelist+0x24dc/0x2580 [ 444.005965][T11627] __alloc_frozen_pages_noprof+0x18d/0x380 [ 444.011810][T11627] allocate_slab+0x77/0x660 [ 444.016341][T11627] refill_objects+0x331/0x3c0 [ 444.021040][T11627] __pcs_replace_empty_main+0x2e6/0x730 [ 444.026644][T11627] __kvmalloc_node_noprof+0x657/0x8a0 [ 444.032126][T11627] snd_pcm_oss_change_params_locked+0x2afc/0x3e00 [ 444.038700][T11627] snd_pcm_oss_get_active_substream+0x1e2/0x280 [ 444.045039][T11627] snd_pcm_oss_set_format+0x10d/0x500 [ 444.050039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 444.050416][T11627] snd_pcm_oss_ioctl+0xbe9/0xdf0 [ 444.063501][T11627] __se_sys_ioctl+0xfc/0x170 [ 444.068146][T11627] do_syscall_64+0x14d/0xf80 [ 444.072914][T11627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.078840][T11627] page last free pid 10934 tgid 10934 stack trace: [ 444.085386][T11627] __free_frozen_pages+0xc2b/0xdb0 [ 444.090621][T11627] __slab_free+0x263/0x2b0 [ 444.095138][T11627] qlist_free_all+0x97/0x100 [ 444.099943][T11627] kasan_quarantine_reduce+0x148/0x160 [ 444.105438][T11627] __kasan_slab_alloc+0x22/0x80 [ 444.110352][T11627] kmem_cache_alloc_noprof+0x2bc/0x650 [ 444.118181][T11627] do_getname+0x2e/0x250 [ 444.124199][T11627] __se_sys_symlinkat+0x2e/0x2b0 [ 444.129518][T11627] do_syscall_64+0x14d/0xf80 [ 444.134220][T11627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.140125][T11627] [ 444.142469][T11627] Memory state around the buggy address: [ 444.148152][T11627] ffff88805da84680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 444.156469][T11627] ffff88805da84700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 444.166327][T11627] >ffff88805da84780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 444.174484][T11627] ^ [ 444.179229][T11627] ffff88805da84800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 444.187473][T11627] ffff88805da84880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 444.195551][T11627] ================================================================== [ 444.216658][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.220557][ T55] em28xx 2-1:0.132: Closing input extension [ 444.396812][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 444.450246][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.612729][ T24] usb 1-1: USB disconnect, device number 81 [ 444.622001][T11628] imon:send_packet: task interrupted [ 444.627316][T11628] send_packet: 1 callbacks suppressed [ 444.627327][T11628] imon:send_packet: packet tx failed (-512) [ 444.638965][T11628] vfd_write: 1 callbacks suppressed [ 444.638979][T11628] imon:vfd_write: send packet #2 failed [ 444.818790][T11627] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 444.826056][T11627] CPU: 1 UID: 0 PID: 11627 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 444.836653][T11627] Tainted: [L]=SOFTLOCKUP [ 444.841150][T11627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 444.851208][T11627] Call Trace: [ 444.854493][T11627] [ 444.857435][T11627] vpanic+0x56c/0xa60 [ 444.861419][T11627] ? __pfx_vpanic+0x10/0x10 [ 444.865992][T11627] panic+0xc5/0xd0 [ 444.869953][T11627] ? __pfx_panic+0x10/0x10 [ 444.874485][T11627] ? preempt_schedule_thunk+0x16/0x30 [ 444.879946][T11627] ? preempt_schedule_thunk+0x16/0x30 [ 444.885319][T11627] ? v4l2_fh_open+0xac/0x420 [ 444.890010][T11627] check_panic_on_warn+0x89/0xb0 [ 444.895053][T11627] ? v4l2_fh_open+0xac/0x420 [ 444.899651][T11627] end_report+0x73/0x180 [ 444.903895][T11627] ? v4l2_fh_open+0xac/0x420 [ 444.908491][T11627] kasan_report+0x128/0x150 [ 444.913020][T11627] ? v4l2_fh_open+0xac/0x420 [ 444.917696][T11627] v4l2_fh_open+0xac/0x420 [ 444.922120][T11627] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 444.928092][T11627] em28xx_v4l2_open+0x157/0x9a0 [ 444.932931][T11627] ? do_raw_spin_lock+0x12b/0x2f0 [ 444.938031][T11627] v4l2_open+0x1bf/0x3a0 [ 444.942300][T11627] chrdev_open+0x4cd/0x5e0 [ 444.946893][T11627] ? __pfx_chrdev_open+0x10/0x10 [ 444.951917][T11627] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 444.958370][T11627] ? __pfx_chrdev_open+0x10/0x10 [ 444.963594][T11627] do_dentry_open+0x785/0x14e0 [ 444.969253][T11627] vfs_open+0x3b/0x340 [ 444.973529][T11627] ? path_openat+0x2df0/0x3860 [ 444.978379][T11627] path_openat+0x2e08/0x3860 [ 444.983055][T11627] ? __pfx_stack_trace_save+0x10/0x10 [ 444.988419][T11627] ? stack_depot_save_flags+0x33/0x810 [ 444.993878][T11627] ? __pfx_path_openat+0x10/0x10 [ 444.998901][T11627] ? __x64_sys_openat+0x138/0x170 [ 445.003951][T11627] ? do_syscall_64+0x14d/0xf80 [ 445.008759][T11627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.015106][T11627] ? __lock_acquire+0x6b5/0x2cf0 [ 445.020150][T11627] do_file_open+0x23e/0x4a0 [ 445.025291][T11627] ? __pfx_do_file_open+0x10/0x10 [ 445.030557][T11627] ? _raw_spin_unlock+0x28/0x50 [ 445.035401][T11627] ? alloc_fd+0x64b/0x6c0 [ 445.039746][T11627] do_sys_openat2+0x113/0x200 [ 445.044512][T11627] ? __pfx_do_sys_openat2+0x10/0x10 [ 445.050756][T11627] ? exc_page_fault+0x6a/0xc0 [ 445.055446][T11627] ? do_user_addr_fault+0xc6f/0x1340 [ 445.060771][T11627] __x64_sys_openat+0x138/0x170 [ 445.065644][T11627] do_syscall_64+0x14d/0xf80 [ 445.070256][T11627] ? trace_irq_disable+0x3b/0x150 [ 445.075287][T11627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.081347][T11627] ? clear_bhb_loop+0x40/0x90 [ 445.086017][T11627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.091905][T11627] RIP: 0033:0x7f9d596a7407 [ 445.096317][T11627] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 445.116085][T11627] RSP: 002b:00007ffef6ff0fc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 445.124593][T11627] RAX: ffffffffffffffda RBX: 00007f9d59e1d880 RCX: 00007f9d596a7407 [ 445.132615][T11627] RDX: 0000000000000000 RSI: 00007ffef6ff1f1b RDI: ffffffffffffff9c [ 445.140650][T11627] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 445.148623][T11627] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 445.156586][T11627] R13: 00007ffef6ff1210 R14: 00007f9d59f84000 R15: 0000563dcdd904d8 [ 445.164800][T11627] [ 445.168398][T11627] Kernel Offset: disabled [ 445.173016][T11627] Rebooting in 86400 seconds..