last executing test programs: 38m23.487545385s ago: executing program 1 (id=1014): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000ff00000000000000080006"], 0x24}, 0x1, 0x0, 0x0, 0x260080f5}, 0x0) 38m23.246837224s ago: executing program 1 (id=1016): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 38m23.020091733s ago: executing program 1 (id=1018): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000d40)={0x55, 0x0, 'client1\x00', 0x0, "2cd367818b4014ff", "859e92f118c4484604734b1d43209426c1bd711b936fc2c4d28f902e94f8e647"}) 38m22.767969955s ago: executing program 1 (id=1019): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="190e317c8d02092bfb9fb2d261f26156a9480f509651a69e8ca9847a2f80cbe9cd0b7a0069a873ad5e57f4e128c29d4931ea446dc32c627e35b40a098bdfc6bca0d10e46831acd911e7285eb8ec930ed9c423291ebf56bf397c8ad674737c30d5e11bbd5f5eb7d4672659f5b84ef8d9298d48495095dc6e1331f688b8737e2e5a2fd36d9e44feca2e79eca83fbe0183686e8314a799c3529187813b509a8c9666b5585bc710c74a9f24e5f585e13faae01cea7a8ffe9fb42adc88cb9fdebafe1abeb899383af5327203eeca49d24b1fad0399c665857"], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x89101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 38m22.368314725s ago: executing program 1 (id=1021): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) (async) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000ec0)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000000300)="3ab2aa571980d55e50ade0c1e318e50a608150fbf9e45fc41d24393e3d274a22bcb3965e62a63b0d14843cd9614d4757e47fbe", 0x33}, {&(0x7f0000000880)="8c7b57f19a48034f1dd390862ba9b4b9f710178ae5099cff58646a07c9f3a1dbada53577939690db01947061067e084aeacda6e8a89ee0f129c51b06dbafa945140f8001a45ea6f65ac3b73e2a3c01c731b903240a0fd06bac04433656697a37b5a314bd5fa20eb0261e0fe57edfe62b8665c1ac5234238576af147920908ae46bbea4d8ed61c9ea8ee1", 0x8a}, {&(0x7f0000000440)="51ae772f471af1b3f5d47342ead2dcfd5287d31bfbc166cb8cf16104c2d61fe00beabcac02702b7ed6bb0cc4627683a3f946c9f707726cbe1af90ae4e53a506477eb8458262b815fc436602c89153b058decfd96ed129e614a0dfa", 0x5b}, {&(0x7f0000000940)="b93491f233e563a611ddd7368a7506fcd67428ebe22160a3084fe19b290e17778ebd58b7f92152d4cfdf500a69a727a651cfd11112cf71b619c029bb3d1b504fbdaef8378359afd4296645fecc1b2faa", 0x29}], 0x5, 0x0, 0x0, 0x40}}, {{&(0x7f0000000b00)=@file={0x1, './cgroup\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000b80)="bf875d6753eb2e7afbc6c599a4110ed6cf965bde06d296c26333a068c3a72111f400f58da6d90bccd4ab4c724b1cf7ae2c6fdd7e5dbe89fafc8e9d4f0545080635f51ad16da3db9a8595f30893494d2ef82a31e897c782400acb51fdbb78fb5378ffb03d612bc6cdbc5f6320202d98865714fca681384e693ec958871844a480b68030a2e1dc46048910097c7fc1b07e29d3ecf70073918976fbe55572738e3bc42b2c77db0a0bfd80fff310b2f521c89fa46b2556d5dc8138186035ca3c60223aaa150a45f03884ce0d2a50db9b6340c72fa9f79de2da50a8e951e771201f96daa342a1487cd2a0b9a7dc974776d40e67a36d48ef", 0xf5}, {&(0x7f00000007c0)="079512f948b01d36ce4cef019f5033898a526b949e9f5e273dc2d67b3be4725a24b080bda9bb9bf3df6b96b34270da5fb5040f4e0ef91fb5a785dbf621163b11", 0x40}, {&(0x7f0000000c80)="373ff205a04d0c61074378c565aaa6d4b25e8646ad65dcec759425e206d6875d24c2976e573ec996deeddbfdd8aa850307a1d0355af686afd75c701044aca28aea85e1daeabb7b99725695b26efac9aec445bd1c91e1806bbf84054ba156388739c39ab26373fe462fe2d24f8edcfecf005133d959c7b58c303ab229ec096abca0132321a09f5bb03088cd58807b7ee1583d3ca91f3d33b5f9ef7f419dfbb9918276061cc204fe8fd681b21de0de95e6e8d584bf80e0e89e225298350631abdbc1faed88b1e59e2ee24eebae5769f3773359ebb96c176a75fd1816def0e2424b8de6736f3e77472c7ea3e135412b36c3502e5fd45c", 0xf5}], 0x3, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYBLOB="200006000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="180000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES32=r2], 0x60}}], 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) exit(0x0) (async) socket$inet6(0x10, 0x80000, 0x3) (async) sendmsg(r3, 0x0, 0x0) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) (async, rerun: 64) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x210a, r4}, 0x0) (async, rerun: 64) landlock_restrict_self(r5, 0x0) (async, rerun: 64) landlock_restrict_self(r5, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x26e1, 0x0) (async, rerun: 64) r6 = accept4$alg(r0, 0x0, 0x0, 0x80800) (rerun: 64) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000580)="6187558fb3", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="c599f26acbf5efeccdda010d4e28e7fa6f35fdd93640489e689f168c7d9bd73236f9a09191b4619f91cf3dff1cba66b98083396a5e45ea629956e8cb5de42008a4ea079e7fc1cb5220f066029011daf8d363c5af0ca703b531c929e143c8d2cba1311f015097e6fa502e", 0x6a}, {&(0x7f0000000200)="dba994a7c935d599ca1145bf4187d4811f36e6ae57ecac0a4bee21", 0x1b}, {&(0x7f00000009c0)="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", 0x11c}, {&(0x7f0000000340)="bc958990ea043131cdd0b15201b35cabc21ef193a6de699d28cfa542cb037675ecdb1a26ffe2768c63b048", 0x2b}], 0x4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="dd3ddea40e5c1852be3a100bbccd430ec5410efcd9a9162b30cbba43230ad6981ceeca450596e16e839be0a1aec0d6e6cd25630ef5e92dbc65d26786ac4be48692e954c1877869aa4abb3cca1045e8a1e4d92961349e9fdf77af", 0x5a}, {&(0x7f0000000dc0)="7957bb61271ff9f247a65bc1de701cb2c85d3d93562a1e01bc315aca940ec9ea272c860a6b77782aeb22e6a8f64ca3b214a0b5f41167eadfea98a75fd1dc4ba76c79f38f5792c86adb392a3ff2116a981ef408c5c92e6b6168b1a40d3db38e67aa8689e050caa97b866d4e3886f1e08c4d959be48594df83907e75a3", 0x7c}, {&(0x7f0000000740)="845869477f1d67911dee28799d1398c621f0610dee3530230514b0d8055597f0b8a812b1bfdbe708e2daec6f49d59a4bf6b4890b45d1c75657e492c08773ecf83bd17421eaaae770131984f59541f50bb5d4531f06", 0x55}], 0x3}}], 0x3, 0x2000c014) (async) sendmmsg$unix(r7, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x1, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x204, 0x4) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 64) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 38m22.048549063s ago: executing program 1 (id=1024): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)={0x28, 0x11, 0x1, 0x0, 0x800000, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x137, 0x0, 0x0, @u64}, @nested={0x8, 0x31, 0x0, 0x1, [@generic="823f12ff"]}]}]}, 0x28}], 0x1}, 0x0) 38m21.439481843s ago: executing program 32 (id=1024): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)={0x28, 0x11, 0x1, 0x0, 0x800000, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x137, 0x0, 0x0, @u64}, @nested={0x8, 0x31, 0x0, 0x1, [@generic="823f12ff"]}]}]}, 0x28}], 0x1}, 0x0) 30m18.629272493s ago: executing program 0 (id=2936): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r1, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) lstat(&(0x7f0000008800)='./file0\x00', 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="94") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x548, 0x0, 0xc8, 0x8, 0x2e8, 0x5803, 0x480, 0x2e8, 0x2e8, 0x480, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2b8, 0x2e8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x154}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5a4) 30m15.244415614s ago: executing program 0 (id=2944): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f00000014c0)=ANY=[@ANYBLOB="140000001500dbdff800070000"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1}, 0x1c) (async, rerun: 32) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x100) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async, rerun: 32) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f00000007c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1}}], 0x1, 0x931766f6319ee554) (async) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000001080)=0xffffff98) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, 0x0, &(0x7f0000000180)=0xfffffffffffffd44) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) (async, rerun: 64) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) (rerun: 64) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r10]) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 30m14.4277508s ago: executing program 0 (id=2946): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 30m12.79286198s ago: executing program 0 (id=2951): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="1100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000400"/28], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f00000032c0)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x1, 0x6880) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="3482a1", 0x3}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000084000000020000000c000102070000002df1cc34", @ANYRES32=0x0], 0x1c, 0x20004880}], 0x1, 0x11) unshare(0x8040600) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000400)=0x7fffffff, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000440), 0x4) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x1f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x2, 0x0, 0x4, 0x1, 0x1, 0xfffffffffffffffc, 0x15}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @generic={0x7f, 0x7, 0x9, 0x8474, 0x8}, @generic={0x5, 0xe, 0x5, 0x6, 0x7}, @map_fd={0x18, 0xf, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0xc7}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r1, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x40100) 30m11.967980141s ago: executing program 0 (id=2954): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 30m10.63298834s ago: executing program 0 (id=2955): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe80000000000000000000000000008a3c0022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800"], 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b40)=@newtfilter={0x918, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x8e8, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x8dc, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0x1}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x2, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x7, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x16b, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0x6, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x2a34, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x6, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x40000001, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x3, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0x57ae807c, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x8, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x400, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x18, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0x3b, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0xa6c, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0xa, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x9748, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x80, 0x9, 0x6, {0x9, 0x1, 0x7f, 0x1, 0xff, 0x3}, {0x7, 0x1, 0xfff, 0x3, 0x8, 0xfe}, 0x7, 0x4, 0x400}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xead0, 0x1, 0x5, 0x8, 0x6, {0x88, 0x0, 0x5, 0xd, 0x4, 0x9}, {0x5, 0x2, 0x6, 0xfff8, 0x2, 0x4}, 0x332d, 0x4, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe0db}]}]}}]}, 0x918}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000140)=0x2000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 30m10.125394598s ago: executing program 33 (id=2955): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe80000000000000000000000000008a3c0022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800"], 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b40)=@newtfilter={0x918, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x8e8, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x8dc, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0x1}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x2, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x7, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x16b, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0x6, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x2a34, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x6, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x40000001, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x3, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0x57ae807c, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x8, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x400, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x18, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0x3b, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0xa6c, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0xa, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x9748, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x80, 0x9, 0x6, {0x9, 0x1, 0x7f, 0x1, 0xff, 0x3}, {0x7, 0x1, 0xfff, 0x3, 0x8, 0xfe}, 0x7, 0x4, 0x400}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xead0, 0x1, 0x5, 0x8, 0x6, {0x88, 0x0, 0x5, 0xd, 0x4, 0x9}, {0x5, 0x2, 0x6, 0xfff8, 0x2, 0x4}, 0x332d, 0x4, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe0db}]}]}}]}, 0x918}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000140)=0x2000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 13.720893883s ago: executing program 5 (id=9054): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x7, 0x5f, 0x37, 0x40, 0x471, 0x602, 0xa495, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x42, 0xd8, 0x0, 0xa, [{{0x9, 0x4, 0x0, 0x10, 0x0, 0x32, 0x3a, 0xb4, 0x8}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011003c0e58f13d21930037dfc01020301090212000186713e297b7a23435a98fda5d6c763f30109d0"], &(0x7f0000000f00)={0x0, 0x0, 0x1c, &(0x7f0000000d40)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x9c, 0x2, 0x1, 0x0, 0x7, [0x30, 0xc000]}]}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) r3 = syz_open_dev$mouse(&(0x7f0000000240), 0x1, 0x101cc1) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4}, 0x6e) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000f80)=""/4096) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x100, 0x6, 0x2, 0x800, 0x0, "f759e100edc710000000d9fc6300", "00000010", "000000ff", "1d00193d", ["8b59b4d766cbd6e4af000700", "c23b65080000000000000040", "000000ff0000000000000020", "0000000000000000001000"]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000002c0)={0x6, 0x10000}) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @value=0x168}) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x1000000, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r9 = openat$mixer(0xffffff9c, &(0x7f0000000340), 0x183100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r9, 0x80044dfe, &(0x7f0000000380)) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 12.916656209s ago: executing program 5 (id=9055): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x4, 0x0) sendmmsg$unix(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x810) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x168, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x80, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x546}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x168}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r5, 0x154e, 0xffffffff, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) r9 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000100)={0x100006, 0x0, 0x100000, {r9}}, 0x20) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x100, 0x1000, 0xf2, 0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x84, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0xffff05d2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x24da, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x8}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0x1e}}]}}}]}, 0x84}, 0x1, 0xba01}, 0x810) 12.193044532s ago: executing program 5 (id=9057): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0xfffc, 0x200, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088474803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x7}}}}}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000001c0)={0x80000000, 0x8, 0x1, 0xbe22, 0x6}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904"], 0x0) r8 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) recvmmsg(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000280)=""/4096, 0x1000}, {0x0}], 0x2}, 0x8}, {{0x0, 0x0, 0x0}, 0x89bc}], 0x2, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f00000001c0)={0x18, 0xa, 0x1, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00", 0x59455247}) sendto$packet(r8, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @sdr={0x49323159}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x65) 11.464457193s ago: executing program 2 (id=9060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) lsm_list_modules(0x0, 0x0, 0x13) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'batadv0\x00', 0xc201}) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000080)={0x10000, 0x80000000}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9.693345598s ago: executing program 2 (id=9062): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x3eb, r0, 0x0}]) 9.405010931s ago: executing program 2 (id=9063): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r1], 0x50) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f00000004c0)={'nat\x00', 0x0, [0x900, 0xffffffff, 0x7, 0x342, 0x1]}, &(0x7f00000001c0)=0x54) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000bc1001000010028bd7000f9dbdf2500000000efdf291300179bcf731989d5eb6b0800777ae59fbe4c8ece5e7ea6155e0b2a5695dc375c976579db46624873d8462d5bbe3af13b5b421f49c7ef3f2308d579bcca9d120638d668301fa6ec4cda062b0f168f", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r5}) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) 9.136127371s ago: executing program 5 (id=9064): syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) recvmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/141, 0x8d}], 0x1, &(0x7f0000000580)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}, 0x10040) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00v'], 0x24}, 0x1, 0x5502000000000000}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f0000000440)=ANY=[@ANYBLOB='stack :'], 0xb3) readv(r5, &(0x7f0000000380)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c4"], 0x119) r8 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\f\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04', 0x0) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r9, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') close_range(r6, 0xffffffffffffffff, 0x0) 9.091959522s ago: executing program 6 (id=9065): socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8b) r3 = eventfd2(0x9, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x9, 0x100000, 0x1, r3, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = gettid() sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r7 = openat$ptp0(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r7, 0x8008f513, &(0x7f0000000100)) 8.358555829s ago: executing program 3 (id=9066): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c0001800600010002000000080003"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (fail_nth: 4) 7.684393864s ago: executing program 3 (id=9067): syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) recvmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/141, 0x8d}], 0x1, &(0x7f0000000580)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}, 0x10040) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00v'], 0x24}, 0x1, 0x5502000000000000}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f0000000440)=ANY=[@ANYBLOB='stack :'], 0xb3) readv(r5, &(0x7f0000000380)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c4"], 0x119) r8 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\f\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04', 0x0) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r9, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') close_range(r6, 0xffffffffffffffff, 0x0) 7.268267825s ago: executing program 4 (id=9069): r0 = socket(0x80000000000000a, 0x2, 0x0) bind$unix(r0, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e25}, 0x6e) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0x55b4e85f}, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x40046103, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x18c) unlinkat(0xffffffffffffffff, 0x0, 0x0) semget$private(0x0, 0x4000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x191, 0x140, 0xa0, 0x40, 0x8, 0x1, 0x20, 0x0, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffd}, {0x6, 0x4}, 0x2, 0x100, 0x0, 0xde4b, 0x0, 0xffe, 0x0, 0x6, 0x6, 0xdb, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7abd, {{0xa, 0xfffe, 0x0, @empty, 0x3}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x104) 6.066371781s ago: executing program 4 (id=9070): ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000200)={0x1, @pix={0x2, 0xd09, 0x31435750, 0x0, 0x48, 0x88, 0x8, 0x8, 0x0, 0x1, 0x0, 0x5}}) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x107734, 0x80, 0x0, 0x34e}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = syz_io_uring_complete(r0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0xfac7, 0x28, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000040)={0xaf69, 0x4, 0x5b, 0x5, 0x6, "b3441fae88b518e2e6cd3d304bffe6de684701", 0x5, 0x7}) r6 = socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) r8 = inotify_init() ioctl$FS_IOC_SETFLAGS(r8, 0x40046602, &(0x7f0000000000)=0x40000000) sendmsg$tipc(r6, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) bind$tipc(r7, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.438068922s ago: executing program 5 (id=9071): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) dup(r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe80000000000000000000000000008a3c0022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800"], 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b40)=@newtfilter={0x918, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xd, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x8e8, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x8dc, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0x1}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x2, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x7, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x16b, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0xd5, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x8, 0x10000, 0x9cd, 0x6, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x2a34, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x6, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x40000001, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x9, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x3, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0x57ae807c, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x8, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x400, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x18, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0x3b, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0xa6c, 0x7, 0x5, 0xbfd4, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1a, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0xa, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0xffffffff, 0x2, 0x9748, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x80, 0x9, 0x6, {0x9, 0x1, 0x7f, 0x1, 0xff, 0x3}, {0x7, 0x1, 0xfff, 0x3, 0x8, 0xfe}, 0x7, 0x4, 0x400}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xead0, 0x1, 0x5, 0x8, 0x6, {0x88, 0x0, 0x5, 0xd, 0x4, 0x9}, {0x5, 0x2, 0x6, 0xfff8, 0xffff, 0x4}, 0x332d, 0x4, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe0db}]}]}}]}, 0x918}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000140)=0x2000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 5.437285699s ago: executing program 3 (id=9072): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r0 = memfd_create(&(0x7f0000001580)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\xff\a\xb4\xf9\x1f\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v2*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\x10\xbf\x90/wU\xf3\xc1\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x03\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\t\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\xc95\xcc\xb6\xf6\xe8o\xfd\x882\xb3\xa8\xe1\x84i\xce\xa1\xff\x95\x80\x00T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\x80\x00\x00\x00\x00\x00\x00\x00\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xae\xa60k2\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99e\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad\xff\x03\x00\x00\x00\x00\x00\x00\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1\f\xa5#w\xdaU\xa8>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\x0f?\xab\xe5\x13\x02\xc4\b\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\xbc\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%\x04\x00\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Lo\x12\x00\xa2\xa5$9\x05O\xfe\x0e\xd2N\x98\x84\x10\x01\x89\xaa)\x118\xcd\xf8>\xab\xd9\xbd\xcfH\xa5\x8e\x14\x12\xb0OF\x80\xbb\xb6B\x80Q \x85\'w\xc8D\xf9\xfa\f1\x9e\x83I\xe5\n\xae8\xb7\f\xab#\x85Y\xeeH\x98\x84\x8c\x16)\xdcZ<\x80\xbd\x8d~\n\x88-\xa1\x97\xaf2e\xa6\'\x8aQ\x85}\xf1\rJF\f\x8c_\x01\xbe\'\v1\xccL\x0e\x05\xbdIa\x85\xb8\x14\xe0;}\xb7\x11\xb5\xfa\xeb\x13\xd3\x92\x8a\xe47\xf9\x12\xd9\xd5\x99\xf4\t\xdf\x058\xc4]\xf7\x16J\xf9\xce\xf0zG\xe6i\xf1~\xaaL\xa5\xd5\xe5L\xban?\'\x11B\xeav\xbf|\xc6\xc9>\xfc\x14\xbe7T\x00\x05\x05\x13}#\x1d\xc85*\xe7\n\xdf\xd4d\xf9k\xb1\xdcT1\xecH\xea\xe0\x1c\xe5;I\r\xf2;\xa1\xbfz0Ij\xddn\xe1U\xd6\xfd4\x98\fD\xe5f\x15\xf3\x8fr\x17\xd8/\xde\xaf(\xe1\xd3\xdfF\xbe\x88\xc6\xd3\tO \xbb0#\xb3\x99\xef\xb1\x00\x00\x00l\xc6\x8fi\x91N,|\xff<0\xe3\xd8\xe9(\xb9\x90\x9f1\x10/\x1b`W*\a\x00W\xe0kV\x02\x89%\xbe%\x8a\v\xbaI\x11Z\xed\xc4\xd6\xd7\xdf\xb9\xa2fS\x0510\xb3\xa9D\x9e\xa7\x06\xc82*m1\xa0\xb6\x91K\xe0\\\xd2\x8e\xb3\xcdn|\x1f3\x01\xee\xb8\x13\\q\xf6 \xa89\xeb\nN\xde\xbe2J\x1cu\xabA\x06S\xc5\x8e\xa1\xa8\xd2\xf2\xe1\xa1\x88 l-\xdb\xd9\x7f\xbe}\xee\x03\xc7\xad@\xcc\x10cxr\xb1\xcc\xa7\x84\xf0\xb4\xe6\xea\xaah\x12x\x91\x9bwU\x96\x85\xb6\xdd\'\xf1\a\xa6\xf25\xa0,:\x89\xfc8M:]U^\x9c\xbd\x1bAhB\x9e5\x16\x96\x11\x00$\xc0X\xf9\x15\xad\x87j\x93\x8ay\x10\xbft\xb9z\xcb\x8f\xfc\xaa\xdd\xfb{\x0e\x93\xaf\x80', 0xd) ioprio_set$uid(0x3, 0x0, 0x0) preadv2(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/166, 0xa6}], 0x1, 0x4, 0x2, 0x31) socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$random(0xffffff9c, &(0x7f0000000440), 0x410000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x25dfdbff, {}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x6, 0x0, 0x4, 0x0, 0x9, 0x40, 0xff}}}}}]}, 0x44}}, 0x0) r7 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x115000}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000400)={0x10000, 0x7000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000000000)={0xdddd7000, 0x6000}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r9, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r7, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xaf, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f0000000100)={0xb, {0x4, 0x8, 0x9, 0x2}}) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="d0010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1d0}}, 0x200048d1) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup=r7, 0x11, 0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map=r7, r7, 0x27, 0x20, 0x0, @void, @void, @void, @value=r10, r12}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) 5.35244519s ago: executing program 2 (id=9073): socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e25}, 0x6e) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0x55b4e85f}, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x40046103, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x18c) unlinkat(0xffffffffffffffff, 0x0, 0x0) semget$private(0x0, 0x4000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x191, 0x140, 0xa0, 0x40, 0x8, 0x1, 0x20, 0x0, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffd}, {0x6, 0x4}, 0x2, 0x100, 0x0, 0xde4b, 0x0, 0xffe, 0x0, 0x6, 0x6, 0xdb, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x7abd, {{0xa, 0xfffe, 0x0, @empty, 0x3}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x104) 5.091100785s ago: executing program 6 (id=9074): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0xfffc, 0x200, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088474803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x7}}}}}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000001c0)={0x80000000, 0x8, 0x1, 0xbe22, 0x6}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904"], 0x0) r8 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) recvmmsg(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000280)=""/4096, 0x1000}, {0x0}], 0x2}, 0x8}, {{0x0, 0x0, 0x0}, 0x89bc}], 0x2, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f00000001c0)={0x18, 0xa, 0x1, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00", 0x59455247}) sendto$packet(r8, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @sdr={0x49323159}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x65) 4.868282462s ago: executing program 4 (id=9075): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x8001, 0x10041) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000040)=""/63) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB="04007a8004007a8004007a8004007a8094007a805a000200819af2c5bca9a39b13b3a4a2f788b0990cfbd37b334fb4e314000200c9e054171d1e67892d0be1f702defa841c000200267a66c4975d601062f0"], 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.676734241s ago: executing program 3 (id=9076): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20401, 0x30) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001c0001800600010002000000080003"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 3.860745794s ago: executing program 3 (id=9077): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x2) getsockopt$netlink(r6, 0x10e, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x1}, 0x10}, 0x94) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r10, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r9, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c00"], 0x3c}}, 0x0) 3.580413344s ago: executing program 2 (id=9078): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x8) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r4, 0x1000006) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r4, 0x1f, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) 2.331180377s ago: executing program 6 (id=9079): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000580)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "ab", "ffdd0b", 0x88f7}}}}}, 0x0) (fail_nth: 4) 1.85733391s ago: executing program 4 (id=9080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x2c, r1, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) (fail_nth: 4) 1.808349448s ago: executing program 6 (id=9081): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x1027}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}]}}}]}, 0x3c}}, 0x0) 1.406582833s ago: executing program 4 (id=9082): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db7295", 0xa}], 0x2}, 0x0) (fail_nth: 4) 1.380109664s ago: executing program 6 (id=9083): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x101300) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x10000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x94, 0x9, 0x5, 0x5}]}) r6 = syz_open_dev$usbmon(&(0x7f0000000440), 0x0, 0x20201) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000480)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x8) r7 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r7, 0x1000006) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x1000000}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x20, 0x0, 0xcc9, 0x1, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x65, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x40, 0x8000, 0x8, 0x5, {{0x7, 0x4, 0x1, 0x1, 0x1c, 0x68, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010102, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1a8, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x180, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x55, 0x5, "61b06e7a7803ca401a18ee81750cd7839393fbe361331ec5a9439e439c6b90825405faad08f74d554cd2c470717e3d24cc875b44bf0b2de066fcfd50464b0af3435d2db4b0aafe7ef9731e8bdceb102de4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x26, 0x2, 'y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdd}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/udmabuf\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x26, 0x2, 'y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/udmabuf\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/udmabuf\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40865}, 0x4000490) 1.024495819s ago: executing program 4 (id=9084): syz_usb_connect(0x5, 0x1bb, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000a677c120229062d60eb3000000010902a90101000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000440)={&(0x7f0000000400)=[{0x1900, 0x1029, 0x0, 0x0}], 0x1}) 288.750113ms ago: executing program 5 (id=9085): socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8b) r3 = eventfd2(0x9, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x9, 0x100000, 0x1, r3, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = gettid() sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r7 = openat$ptp0(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r7, 0x8008f513, &(0x7f0000000100)) 286.74968ms ago: executing program 3 (id=9086): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mbind(&(0x7f00000c7000/0x2000)=nil, 0x2000, 0x8003, 0x0, 0x4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) getdents(r4, &(0x7f0000000300)=""/174, 0xae) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB="380000001000830500"/20, @ANYRES32=0x0, @ANYBLOB="15010000812000001800128008000100677470000c000280"], 0x38}}, 0x28000000) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000100)={0xf0f029, 0x2}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b0007"], 0xc4}}, 0x0) 86.847531ms ago: executing program 2 (id=9087): socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e25}, 0x6e) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0x55b4e85f}, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x40046103, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x18c) unlinkat(0xffffffffffffffff, 0x0, 0x0) semget$private(0x0, 0x4000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x191, 0x140, 0xa0, 0x40, 0x8, 0x1, 0x20, 0x0, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffd}, {0x6, 0x4}, 0x2, 0x100, 0x0, 0xde4b, 0x0, 0xffe, 0x0, 0x6, 0x6, 0xdb, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x7abd, {{0xa, 0xfffe, 0x0, @empty, 0x3}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x104) 0s ago: executing program 6 (id=9088): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0x55b4e85f}, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x40046103, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x18c) unlinkat(0xffffffffffffffff, 0x0, 0x0) semget$private(0x0, 0x4000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x191, 0x140, 0xa0, 0x40, 0x8, 0x1, 0x20, 0x0, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffd}, {0x6, 0x4}, 0x2, 0x100, 0x0, 0xde4b, 0x0, 0xffe, 0x0, 0x6, 0x6, 0xdb, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7abd, {{0xa, 0xfffe, 0x0, @empty, 0x3}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x104) kernel console output (not intermixed with test programs): c 0x0c03 length: 249 > 1 [ 2592.544353][ T539] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2592.553876][ T539] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2592.565758][ T539] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2592.573875][ T539] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2592.595846][T23946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2592.613643][T23946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2592.637835][T23946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2592.651902][T23946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2592.678132][T23946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2592.960179][T16618] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2592.972682][T16618] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2593.125369][ T3501] usb 6-1: USB disconnect, device number 51 [ 2593.240104][T16618] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2593.272948][ T6871] FAULT_INJECTION: forcing a failure. [ 2593.272948][ T6871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2593.286712][T16618] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2593.299485][ T6871] CPU: 0 UID: 0 PID: 6871 Comm: syz.2.8887 Not tainted syzkaller #0 PREEMPT(full) [ 2593.299509][ T6871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2593.299519][ T6871] Call Trace: [ 2593.299526][ T6871] [ 2593.299533][ T6871] dump_stack_lvl+0x189/0x250 [ 2593.299560][ T6871] ? __pfx____ratelimit+0x10/0x10 [ 2593.299581][ T6871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2593.299603][ T6871] ? __pfx__printk+0x10/0x10 [ 2593.299621][ T6871] ? __might_fault+0xb0/0x130 [ 2593.299653][ T6871] should_fail_ex+0x414/0x560 [ 2593.299681][ T6871] _copy_from_iter+0x1de/0x1790 [ 2593.299706][ T6871] ? rcu_is_watching+0x15/0xb0 [ 2593.299730][ T6871] ? kmalloc_reserve+0xbd/0x290 [ 2593.299754][ T6871] ? __pfx__copy_from_iter+0x10/0x10 [ 2593.299774][ T6871] ? __build_skb_around+0x262/0x3f0 [ 2593.299800][ T6871] ? netlink_sendmsg+0x642/0xb30 [ 2593.299816][ T6871] ? skb_put+0x11b/0x210 [ 2593.299835][ T6871] netlink_sendmsg+0x6b2/0xb30 [ 2593.299859][ T6871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2593.299875][ T6871] ? __import_iovec+0x5d4/0x7f0 [ 2593.299892][ T6871] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2593.299916][ T6871] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2593.299934][ T6871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2593.299951][ T6871] __sock_sendmsg+0x21c/0x270 [ 2593.299973][ T6871] ____sys_sendmsg+0x505/0x830 [ 2593.299995][ T6871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2593.300021][ T6871] ___sys_sendmsg+0x21f/0x2a0 [ 2593.300045][ T6871] ? __pfx____sys_sendmsg+0x10/0x10 [ 2593.300089][ T6871] ? __fget_files+0x2a/0x420 [ 2593.300105][ T6871] ? __fget_files+0x3a0/0x420 [ 2593.300129][ T6871] __sys_sendmsg+0x164/0x220 [ 2593.300148][ T6871] ? __pfx___sys_sendmsg+0x10/0x10 [ 2593.300174][ T6871] ? __pfx_ksys_write+0x10/0x10 [ 2593.300199][ T6871] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2593.300223][ T6871] ? lockdep_hardirqs_on+0x9c/0x150 [ 2593.300246][ T6871] __do_fast_syscall_32+0xb6/0x2b0 [ 2593.300274][ T6871] do_fast_syscall_32+0x34/0x80 [ 2593.300295][ T6871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2593.300316][ T6871] RIP: 0023:0xf70bd539 [ 2593.300332][ T6871] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2593.300348][ T6871] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2593.300368][ T6871] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 2593.300380][ T6871] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2593.300390][ T6871] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2593.300400][ T6871] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2593.300410][ T6871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2593.300434][ T6871] [ 2593.844800][ T6880] FAULT_INJECTION: forcing a failure. [ 2593.844800][ T6880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2593.858153][ T6880] CPU: 0 UID: 0 PID: 6880 Comm: syz.2.8888 Not tainted syzkaller #0 PREEMPT(full) [ 2593.858169][ T6880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2593.858175][ T6880] Call Trace: [ 2593.858180][ T6880] [ 2593.858184][ T6880] dump_stack_lvl+0x189/0x250 [ 2593.858203][ T6880] ? __pfx____ratelimit+0x10/0x10 [ 2593.858216][ T6880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2593.858228][ T6880] ? __pfx__printk+0x10/0x10 [ 2593.858238][ T6880] ? __might_fault+0xb0/0x130 [ 2593.858257][ T6880] should_fail_ex+0x414/0x560 [ 2593.858273][ T6880] _copy_from_iter+0x1de/0x1790 [ 2593.858288][ T6880] ? rcu_is_watching+0x15/0xb0 [ 2593.858301][ T6880] ? kmalloc_reserve+0xbd/0x290 [ 2593.858316][ T6880] ? __pfx__copy_from_iter+0x10/0x10 [ 2593.858327][ T6880] ? __build_skb_around+0x262/0x3f0 [ 2593.858343][ T6880] ? netlink_sendmsg+0x642/0xb30 [ 2593.858352][ T6880] ? skb_put+0x11b/0x210 [ 2593.858362][ T6880] netlink_sendmsg+0x6b2/0xb30 [ 2593.858375][ T6880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2593.858385][ T6880] ? __import_iovec+0x5d4/0x7f0 [ 2593.858396][ T6880] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2593.858411][ T6880] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2593.858421][ T6880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2593.858430][ T6880] __sock_sendmsg+0x21c/0x270 [ 2593.858444][ T6880] ____sys_sendmsg+0x505/0x830 [ 2593.858457][ T6880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2593.858475][ T6880] ___sys_sendmsg+0x21f/0x2a0 [ 2593.858485][ T6880] ? __pfx____sys_sendmsg+0x10/0x10 [ 2593.858512][ T6880] ? __fget_files+0x2a/0x420 [ 2593.858521][ T6880] ? __fget_files+0x3a0/0x420 [ 2593.858535][ T6880] __sys_sendmsg+0x164/0x220 [ 2593.858546][ T6880] ? __pfx___sys_sendmsg+0x10/0x10 [ 2593.858560][ T6880] ? __pfx_ksys_write+0x10/0x10 [ 2593.858576][ T6880] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2593.858590][ T6880] ? lockdep_hardirqs_on+0x9c/0x150 [ 2593.858603][ T6880] __do_fast_syscall_32+0xb6/0x2b0 [ 2593.858617][ T6880] ? lockdep_hardirqs_on+0x9c/0x150 [ 2593.858630][ T6880] do_fast_syscall_32+0x34/0x80 [ 2593.858643][ T6880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2593.858655][ T6880] RIP: 0023:0xf70bd539 [ 2593.858664][ T6880] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2593.858673][ T6880] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2593.858684][ T6880] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001080 [ 2593.858691][ T6880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2593.858698][ T6880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2593.858703][ T6880] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2593.858709][ T6880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2593.858723][ T6880] [ 2594.364131][T16618] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2594.381706][ T6886] netlink: 'syz.2.8890': attribute type 1 has an invalid length. [ 2594.411814][T16618] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2594.601316][ T6856] chnl_net:caif_netlink_parms(): no params data found [ 2594.966110][ T539] Bluetooth: hci2: command tx timeout [ 2594.978472][T16618] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2595.560560][T16618] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2595.787396][ T6896] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2596.078095][ T9234] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2596.282382][ T6856] bridge0: port 1(bridge_slave_0) entered blocking state [ 2596.291126][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state [ 2596.303862][ T6856] bridge_slave_0: entered allmulticast mode [ 2596.313628][ T9234] usb 5-1: Using ep0 maxpacket: 8 [ 2596.321302][ T9234] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2596.330101][ T9234] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2596.342742][ T6856] bridge_slave_0: entered promiscuous mode [ 2596.349609][ T9234] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2596.363585][ T6856] bridge0: port 2(bridge_slave_1) entered blocking state [ 2596.371192][ T9234] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2596.381913][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 2596.389422][ T9234] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2596.397036][ T6856] bridge_slave_1: entered allmulticast mode [ 2596.409393][ T9234] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2596.415065][ T6856] bridge_slave_1: entered promiscuous mode [ 2596.423146][ T9234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2596.550151][ T6856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2596.587395][ T6856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2596.688008][ T6856] team0: Port device team_slave_0 added [ 2596.695351][ T9234] usb 5-1: GET_CAPABILITIES returned 0 [ 2596.710849][ T6856] team0: Port device team_slave_1 added [ 2596.719762][ T9234] usbtmc 5-1:16.0: can't read capabilities [ 2596.756750][ T10] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 2596.791267][ T6915] fuse: Bad value for 'rootmode' [ 2596.803775][T16618] bridge_slave_1: left allmulticast mode [ 2596.812384][T16618] bridge_slave_1: left promiscuous mode [ 2596.824872][T16618] bridge0: port 2(bridge_slave_1) entered disabled state [ 2596.861979][T16618] bridge_slave_0: left allmulticast mode [ 2596.874611][T16618] bridge_slave_0: left promiscuous mode [ 2596.891643][T16618] bridge0: port 1(bridge_slave_0) entered disabled state [ 2596.918361][ T10] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 2596.927143][ T10] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 2596.940787][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2596.968128][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2596.993133][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2597.009002][ T539] Bluetooth: hci2: command tx timeout [ 2597.010052][ T5904] usb 5-1: USB disconnect, device number 112 [ 2597.025022][ T6901] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 2597.064451][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2597.115028][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2597.138065][ T3501] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2597.184936][ T10] usb 4-1: string descriptor 0 read error: -22 [ 2597.197262][ T10] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2597.226296][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2597.276797][ T10] usb 4-1: config 0 descriptor?? [ 2597.293457][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 2597.311270][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2597.335117][ T3501] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2597.345773][ T3501] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2597.358285][ T3501] usb 6-1: Product: syz [ 2597.364144][ T3501] usb 6-1: SerialNumber: syz [ 2597.380582][ T10] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input287 [ 2597.397846][ T3501] usb 6-1: config 0 descriptor?? [ 2597.447740][ T3501] hso 6-1:0.0: Not our interface [ 2597.879228][ T6936] netlink: 'syz.4.8897': attribute type 1 has an invalid length. [ 2598.072244][ T3501] usb 6-1: USB disconnect, device number 52 [ 2598.654630][T16618] bond6 (unregistering): (slave gretap2): Releasing active interface [ 2598.810574][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8898'. [ 2599.024335][T16618] bond6 (unregistering): (slave bridge2): Releasing active interface [ 2599.089798][ T539] Bluetooth: hci2: command tx timeout [ 2599.336043][T16618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2599.347724][T16618] bond_slave_0: left promiscuous mode [ 2599.374607][T16618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2599.385157][T16618] bond_slave_1: left promiscuous mode [ 2599.395529][T16618] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2599.406702][T16618] mac80211_hwsim hwsim39 wlan1: left promiscuous mode [ 2599.418693][T16618] bond0 (unregistering): Released all slaves [ 2599.620544][T16618] bond1 (unregistering): Released all slaves [ 2599.824539][T16618] bond2 (unregistering): Released all slaves [ 2600.024112][T16618] bond3 (unregistering): Released all slaves [ 2600.237004][T16618] bond4 (unregistering): Released all slaves [ 2600.250291][T16618] bond5 (unregistering): Released all slaves [ 2600.263134][T16618] bond6 (unregistering): Released all slaves [ 2600.277843][T16618] bond7 (unregistering): Released all slaves [ 2600.373906][ T3501] usb 4-1: USB disconnect, device number 65 [ 2600.575888][T16618] bond8 (unregistering): Released all slaves [ 2600.732892][ T6961] sctp: [Deprecated]: syz.3.8902 (pid 6961) Use of int in maxseg socket option. [ 2600.732892][ T6961] Use struct sctp_assoc_value instead [ 2600.763795][ T6940] 8021q: adding VLAN 0 to HW filter on device bond16 [ 2600.825619][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2600.848356][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2600.932821][ T6856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2600.960747][T16618] : left promiscuous mode [ 2600.989328][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2601.010750][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2601.087953][ T6856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2601.117036][T16618] tipc: Disabling bearer [ 2601.125695][T16618] tipc: Left network mode [ 2601.158725][ T539] Bluetooth: hci2: command tx timeout [ 2601.370370][ T6856] hsr_slave_0: entered promiscuous mode [ 2601.388754][ T6856] hsr_slave_1: entered promiscuous mode [ 2601.715042][T16618] team0: left promiscuous mode [ 2601.719994][T16618] team_slave_0: left promiscuous mode [ 2601.738516][T16618] team_slave_1: left promiscuous mode [ 2601.744212][T16618] batadv1: left promiscuous mode [ 2601.766476][T16618] batadv2: left promiscuous mode [ 2601.777766][T16618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2601.785376][T16618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2601.817410][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8907'. [ 2601.837108][T16618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2601.844636][T16618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2601.884937][ T6990] fuse: Bad value for 'rootmode' [ 2602.015634][T16618] veth1_macvtap: left allmulticast mode [ 2602.139062][T16618] veth1_macvtap: left promiscuous mode [ 2602.256540][T32577] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2602.292219][T16618] veth0_macvtap: left promiscuous mode [ 2602.310160][T16618] veth1_vlan: left promiscuous mode [ 2602.321573][T16618] veth0_vlan: left promiscuous mode [ 2602.442447][T32577] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2602.452917][T32577] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2602.538895][T32577] usb 6-1: Product: syz [ 2602.543115][T32577] usb 6-1: SerialNumber: syz [ 2602.554606][T32577] usb 6-1: config 0 descriptor?? [ 2602.562509][T32577] hso 6-1:0.0: Not our interface [ 2603.782676][T16618] team0 (unregistering): Port device batadv2 removed [ 2603.822425][T16618] team0 (unregistering): Port device batadv1 removed [ 2603.886927][ T7011] random: crng reseeded on system resumption [ 2604.629814][T32577] usb 6-1: USB disconnect, device number 53 [ 2604.877788][T16618] team0 (unregistering): Port device team_slave_1 removed [ 2604.954478][T16618] team0 (unregistering): Port device team_slave_0 removed [ 2605.937609][ T3501] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 2606.117972][ T3501] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 2606.127657][ T3501] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 2606.147558][ T3501] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2606.179701][ T3501] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2606.223745][ T3501] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2606.272670][ T3501] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2606.306238][ T3501] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2606.379022][ T3501] usb 4-1: string descriptor 0 read error: -22 [ 2606.385869][ T3501] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2606.395195][ T3501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.494287][ T3501] usb 4-1: config 0 descriptor?? [ 2606.505464][ T3501] hub 4-1:0.0: bad descriptor, ignoring hub [ 2606.543883][ T3501] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2606.608072][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8919'. [ 2606.624398][ T3501] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input288 [ 2606.762099][ T7038] netlink: 'syz.4.8920': attribute type 1 has an invalid length. [ 2607.883986][ T7049] 8021q: adding VLAN 0 to HW filter on device bond17 [ 2608.171574][T14997] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 2608.367504][T14997] usb 3-1: config 0 has an invalid interface number: 207 but max is 0 [ 2608.383430][T14997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2608.406405][T14997] usb 3-1: config 0 has no interface number 0 [ 2608.455976][T14997] usb 3-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 2608.465376][T14997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2608.547276][T14997] usb 3-1: Product: syz [ 2608.552200][T14997] usb 3-1: Manufacturer: syz [ 2608.559425][T14997] usb 3-1: SerialNumber: syz [ 2608.570023][T14997] usb 3-1: config 0 descriptor?? [ 2608.584469][T14997] qmi_wwan 3-1:0.207: probe with driver qmi_wwan failed with error -22 [ 2608.787389][T14997] usb 3-1: USB disconnect, device number 6 [ 2608.877945][ T7059] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8923'. [ 2608.939607][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8923'. [ 2608.960388][ T30] audit: type=1326 audit(1761764192.858:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.5.8923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2609.037624][T32577] usb 4-1: USB disconnect, device number 66 [ 2609.046644][ T30] audit: type=1326 audit(1761764192.858:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.5.8923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2609.117543][ T30] audit: type=1326 audit(1761764192.858:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.5.8923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2609.188645][ T30] audit: type=1326 audit(1761764192.878:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.5.8923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2609.193147][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8924'. [ 2609.226583][T16618] IPVS: stop unused estimator thread 0... [ 2609.249146][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8924'. [ 2609.260960][ T30] audit: type=1326 audit(1761764192.878:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.5.8923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2609.284552][ T7065] macvlan0: entered allmulticast mode [ 2609.294579][ T7065] veth1_vlan: entered allmulticast mode [ 2609.460376][ T30] audit: type=1326 audit(1761764192.878:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.5.8923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2609.543346][ T30] audit: type=1326 audit(1761764192.978:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.5.8923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2609.571405][ T7072] fuse: Bad value for 'rootmode' [ 2609.618117][ T30] audit: type=1326 audit(1761764192.978:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.5.8923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2609.666023][ T5904] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2609.721221][ T30] audit: type=1326 audit(1761764193.088:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.5.8923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2609.745094][ T30] audit: type=1326 audit(1761764193.088:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.5.8923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2609.843486][ T6856] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2609.896664][T14997] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2609.907177][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 2609.914287][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 2609.926286][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2609.945305][ T5904] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 2609.955376][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2609.970459][ T6856] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2609.980428][ T5904] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 2609.990060][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2610.011179][ T6856] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2610.029926][ T5904] usb 3-1: Product: syz [ 2610.038438][ T6856] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2610.060307][ T5904] usb 3-1: Manufacturer: syz [ 2610.064965][ T5904] usb 3-1: SerialNumber: syz [ 2610.107889][ T5904] usb 3-1: config 0 descriptor?? [ 2610.134974][ T5904] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 2610.169077][T14997] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2610.195593][T14997] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2610.214511][T14997] usb 4-1: Product: syz [ 2610.226042][T14997] usb 4-1: SerialNumber: syz [ 2610.237282][T14997] usb 4-1: config 0 descriptor?? [ 2610.263986][T14997] hso 4-1:0.0: Not our interface [ 2610.352594][ T5904] usb 3-1: USB disconnect, device number 7 [ 2610.387533][ T6856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2610.426284][ T6856] 8021q: adding VLAN 0 to HW filter on device team0 [ 2610.436033][ T3503] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2610.548461][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 2610.555731][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2610.598256][ T3503] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 2610.611512][ T3503] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2610.633273][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 2610.640440][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2610.648993][ T3503] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2610.671076][ T3503] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2610.681624][ T3503] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2610.698931][ T3503] usb 6-1: Product: syz [ 2610.703406][ T3503] usb 6-1: Manufacturer: syz [ 2610.708194][ T3503] usb 6-1: SerialNumber: syz [ 2610.731261][ T3503] usb 6-1: config 0 descriptor?? [ 2610.750926][ T3503] hub 6-1:0.0: bad descriptor, ignoring hub [ 2610.766044][ T3503] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2610.778711][ T3503] usb 6-1: selecting invalid altsetting 0 [ 2610.819258][ T6856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2610.953753][ T6856] veth0_vlan: entered promiscuous mode [ 2610.993646][ T6856] veth1_vlan: entered promiscuous mode [ 2611.095237][ T6856] veth0_macvtap: entered promiscuous mode [ 2611.112217][ T6856] veth1_macvtap: entered promiscuous mode [ 2611.143137][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2611.164816][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2611.192370][T16618] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.202776][T16618] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.223315][T16618] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.249782][T16618] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.342125][ T2250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2611.364435][ T2250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2611.426267][ T3503] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 2611.448987][T16618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2611.463558][T16618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2611.477544][ T7101] usb 6-1: reset high-speed USB device number 54 using dummy_hcd [ 2611.586044][ T3503] usb 3-1: Invalid ep0 maxpacket: 16 [ 2611.681974][ T7101] usb 6-1: device firmware changed [ 2611.730982][T28260] usb 6-1: USB disconnect, device number 54 [ 2611.736039][ T3503] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 2611.908552][ T3503] usb 3-1: Invalid ep0 maxpacket: 16 [ 2611.921814][ T3503] usb usb3-port1: attempt power cycle [ 2612.027008][T28260] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2612.747737][ T3503] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 2612.806886][ T3503] usb 3-1: Invalid ep0 maxpacket: 16 [ 2613.346612][ T3503] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 2613.557473][ T3503] usb 3-1: Invalid ep0 maxpacket: 16 [ 2613.569096][ T3503] usb usb3-port1: unable to enumerate USB device [ 2613.569226][ T5904] usb 4-1: USB disconnect, device number 67 [ 2613.706404][T28260] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2613.715555][T28260] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2613.742424][T28260] usb 6-1: can't read configurations, error -71 [ 2614.137032][T28260] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2614.162918][ T7161] FAULT_INJECTION: forcing a failure. [ 2614.162918][ T7161] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.210496][ T7161] CPU: 1 UID: 0 PID: 7161 Comm: syz.2.8937 Not tainted syzkaller #0 PREEMPT(full) [ 2614.210523][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2614.210533][ T7161] Call Trace: [ 2614.210540][ T7161] [ 2614.210549][ T7161] dump_stack_lvl+0x189/0x250 [ 2614.210577][ T7161] ? __pfx____ratelimit+0x10/0x10 [ 2614.210598][ T7161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2614.210620][ T7161] ? __pfx__printk+0x10/0x10 [ 2614.210644][ T7161] ? __pfx___might_resched+0x10/0x10 [ 2614.210668][ T7161] should_fail_ex+0x414/0x560 [ 2614.210697][ T7161] should_failslab+0xa8/0x100 [ 2614.210716][ T7161] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2614.210740][ T7161] ? security_file_alloc+0x34/0x330 [ 2614.210766][ T7161] security_file_alloc+0x34/0x330 [ 2614.210787][ T7161] init_file+0x93/0x2f0 [ 2614.210809][ T7161] alloc_empty_file+0x6e/0x1d0 [ 2614.210829][ T7161] path_openat+0x107/0x3830 [ 2614.210864][ T7161] ? is_bpf_text_address+0x26/0x2b0 [ 2614.210889][ T7161] ? is_bpf_text_address+0x292/0x2b0 [ 2614.210907][ T7161] ? is_bpf_text_address+0x26/0x2b0 [ 2614.210929][ T7161] ? kernel_text_address+0xa5/0xe0 [ 2614.210953][ T7161] ? __kernel_text_address+0xd/0x40 [ 2614.210976][ T7161] ? __pfx_path_openat+0x10/0x10 [ 2614.210995][ T7161] ? arch_stack_walk+0xfc/0x150 [ 2614.211028][ T7161] do_filp_open+0x1fa/0x410 [ 2614.211052][ T7161] ? __pfx_do_filp_open+0x10/0x10 [ 2614.211099][ T7161] ? __lock_acquire+0xab9/0xd20 [ 2614.211116][ T7161] ? do_open_execat+0x93/0x560 [ 2614.211141][ T7161] do_open_execat+0x135/0x560 [ 2614.211163][ T7161] ? __pfx_do_open_execat+0x10/0x10 [ 2614.211197][ T7161] alloc_bprm+0x28/0x5c0 [ 2614.211222][ T7161] do_execveat_common+0x1b3/0x6a0 [ 2614.211255][ T7161] __ia32_compat_sys_execveat+0xca/0xe0 [ 2614.211280][ T7161] __do_fast_syscall_32+0xb6/0x2b0 [ 2614.211313][ T7161] ? lockdep_hardirqs_on+0x9c/0x150 [ 2614.211338][ T7161] do_fast_syscall_32+0x34/0x80 [ 2614.211360][ T7161] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2614.211380][ T7161] RIP: 0023:0xf70bd539 [ 2614.211398][ T7161] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2614.211414][ T7161] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000166 [ 2614.211434][ T7161] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 2614.211447][ T7161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2614.211459][ T7161] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2614.211469][ T7161] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2614.211480][ T7161] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2614.211506][ T7161] [ 2614.428651][T28260] usb 6-1: Using ep0 maxpacket: 16 [ 2614.472783][ T3503] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 2614.615770][T23946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2614.626004][ T3503] usb 7-1: device descriptor read/64, error -71 [ 2614.647283][T23946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2614.666075][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8938'. [ 2614.680324][T23946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2614.725747][T23946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2614.733843][T23946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2614.744242][T28260] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2614.773046][T28260] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2614.789798][T28260] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2614.800046][T28260] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2614.809150][T28260] usb 6-1: Manufacturer: syz [ 2614.818016][T28260] usb 6-1: config 0 descriptor?? [ 2614.850401][T21734] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2614.868235][ T3503] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 2614.893462][ T7169] pim6reg1: tun_chr_ioctl cmd 2147767521 [ 2614.981966][T21734] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2615.006048][ T3503] usb 7-1: device descriptor read/64, error -71 [ 2615.106069][T14997] usb 5-1: new low-speed USB device number 113 using dummy_hcd [ 2615.127457][ T3503] usb usb7-port1: attempt power cycle [ 2615.152355][T21734] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2615.276962][T21734] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2615.289403][T14997] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 2615.298081][T14997] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 2615.306458][T14997] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2615.319685][T14997] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2615.330821][T14997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2615.351527][T14997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2615.372039][T14997] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2615.404642][T14997] usb 5-1: string descriptor 0 read error: -22 [ 2615.417935][T14997] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2615.420663][ T7176] chnl_net:caif_netlink_parms(): no params data found [ 2615.439103][T14997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2615.458148][T14997] usb 5-1: config 0 descriptor?? [ 2615.477304][ T3503] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 2615.487364][T14997] hub 5-1:0.0: bad descriptor, ignoring hub [ 2615.510606][T14997] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2615.528501][ T3503] usb 7-1: device descriptor read/8, error -71 [ 2615.542787][T14997] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input289 [ 2615.796033][ T3503] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 2615.953427][ T3503] usb 7-1: device descriptor read/8, error -71 [ 2616.087079][ T3503] usb usb7-port1: unable to enumerate USB device [ 2616.163535][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8942'. [ 2616.540715][T21734] bond17 (unregistering): (slave geneve2): Releasing active interface [ 2616.847179][T23946] Bluetooth: hci0: command tx timeout [ 2617.302380][T21734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2617.319657][T21734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2617.353412][T21734] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2617.446804][T21734] bond0 (unregistering): Released all slaves [ 2617.904737][T21734] bond1 (unregistering): Released all slaves [ 2618.277162][T21734] bond2 (unregistering): Released all slaves [ 2618.479866][T28260] usb 5-1: USB disconnect, device number 113 [ 2618.664162][ T7234] fuse: Bad value for 'fd' [ 2618.719809][T21734] bond3 (unregistering): Released all slaves [ 2618.798426][ T7235] ptrace attach of "./syz-executor exec"[27998] was attempted by "./syz-executor exec"[7235] [ 2618.886354][T32577] usb 7-1: new low-speed USB device number 113 using dummy_hcd [ 2618.918672][T23946] Bluetooth: hci0: command tx timeout [ 2618.961765][T21734] bond4 (unregistering): Released all slaves [ 2619.070411][T32577] usb 7-1: Invalid ep0 maxpacket: 16 [ 2619.170615][T21734] bond5 (unregistering): Released all slaves [ 2619.183104][T21734] bond6 (unregistering): Released all slaves [ 2619.216078][T32577] usb 7-1: new low-speed USB device number 114 using dummy_hcd [ 2619.384872][T21734] bond7 (unregistering): Released all slaves [ 2619.386065][T32577] usb 7-1: Invalid ep0 maxpacket: 16 [ 2619.400808][T32577] usb usb7-port1: attempt power cycle [ 2619.622549][T21734] bond8 (unregistering): Released all slaves [ 2619.681257][ T7237] binder: 7236:7237 ioctl c0306201 80000000 returned -14 [ 2619.756102][T32577] usb 7-1: new low-speed USB device number 115 using dummy_hcd [ 2619.808522][T32577] usb 7-1: Invalid ep0 maxpacket: 16 [ 2619.959536][T21734] bond9 (unregistering): Released all slaves [ 2619.970328][T32577] usb 7-1: new low-speed USB device number 116 using dummy_hcd [ 2619.976615][T21734] bond10 (unregistering): Released all slaves [ 2619.997141][T32577] usb 7-1: Invalid ep0 maxpacket: 16 [ 2619.999968][T21734] bond11 (unregistering): Released all slaves [ 2620.010187][T32577] usb usb7-port1: unable to enumerate USB device [ 2620.045432][T21734] bond12 (unregistering): Released all slaves [ 2620.064643][T21734] bond13 (unregistering): Released all slaves [ 2620.082845][T21734] bond14 (unregistering): Released all slaves [ 2620.100970][T21734] bond15 (unregistering): Released all slaves [ 2620.300748][T21734] bond16 (unregistering): Released all slaves [ 2620.324101][T32577] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2620.458800][T32577] usb 5-1: device descriptor read/64, error -71 [ 2620.493179][T21734] bond17 (unregistering): Released all slaves [ 2620.615080][ T7176] bridge0: port 1(bridge_slave_0) entered blocking state [ 2620.630524][ T7176] bridge0: port 1(bridge_slave_0) entered disabled state [ 2620.656827][ T7176] bridge_slave_0: entered allmulticast mode [ 2620.669949][ T7176] bridge_slave_0: entered promiscuous mode [ 2620.680579][ T7176] bridge0: port 2(bridge_slave_1) entered blocking state [ 2620.688164][ T7176] bridge0: port 2(bridge_slave_1) entered disabled state [ 2620.698664][ T7176] bridge_slave_1: entered allmulticast mode [ 2620.718900][T32577] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2620.728299][ T7176] bridge_slave_1: entered promiscuous mode [ 2620.858009][ T7255] netlink: 'syz.5.8953': attribute type 10 has an invalid length. [ 2620.869211][T32577] usb 5-1: device descriptor read/64, error -71 [ 2620.876565][T21734] tipc: Disabling bearer [ 2620.896876][T21734] tipc: Disabling bearer [ 2620.908491][T21734] tipc: Left network mode [ 2620.911218][ T7176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2620.932792][ T7255] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 2620.948300][ T7255] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2620.976447][T32577] usb usb5-port1: attempt power cycle [ 2620.996449][T23946] Bluetooth: hci0: command tx timeout [ 2620.996659][ T7176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2621.046760][ T7257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2621.063969][ T7257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2621.223121][ T7176] team0: Port device team_slave_0 added [ 2621.240190][T18572] kworker/1:1 (18572) used greatest stack depth: 15736 bytes left [ 2621.243342][ T7176] team0: Port device team_slave_1 added [ 2621.326023][T32577] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2621.343272][ T7176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2621.359479][T32577] usb 5-1: device descriptor read/8, error -71 [ 2621.378164][ T7176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2621.440685][ T7176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2621.525863][ T7176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2621.533025][ T7176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2621.563388][ T7176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2621.616096][T32577] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2621.656876][T32577] usb 5-1: device descriptor read/8, error -71 [ 2621.733121][ T7275] FAULT_INJECTION: forcing a failure. [ 2621.733121][ T7275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2621.747971][T21734] hsr_slave_0: left promiscuous mode [ 2621.754623][T21734] hsr_slave_1: left promiscuous mode [ 2621.760712][ T7275] CPU: 0 UID: 0 PID: 7275 Comm: syz.5.8956 Not tainted syzkaller #0 PREEMPT(full) [ 2621.760736][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2621.760747][ T7275] Call Trace: [ 2621.760753][ T7275] [ 2621.760760][ T7275] dump_stack_lvl+0x189/0x250 [ 2621.760786][ T7275] ? __pfx____ratelimit+0x10/0x10 [ 2621.760806][ T7275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2621.760827][ T7275] ? __pfx__printk+0x10/0x10 [ 2621.760846][ T7275] ? __might_fault+0xb0/0x130 [ 2621.760878][ T7275] should_fail_ex+0x414/0x560 [ 2621.760906][ T7275] _copy_from_iter+0x1de/0x1790 [ 2621.760928][ T7275] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2621.760960][ T7275] ? policy_nodemask+0x27c/0x720 [ 2621.760978][ T7275] ? __pfx__copy_from_iter+0x10/0x10 [ 2621.761003][ T7275] ? set_page_refcounted+0xa0/0x1e0 [ 2621.761021][ T7275] ? page_copy_sane+0x4e/0x280 [ 2621.761042][ T7275] copy_page_from_iter+0xdd/0x170 [ 2621.761066][ T7275] tun_get_user+0x1d7b/0x3e90 [ 2621.761094][ T7275] ? tun_get_user+0x6f6/0x3e90 [ 2621.761122][ T7275] ? aa_file_perm+0x44d/0x1550 [ 2621.761139][ T7275] ? __pfx_tun_get_user+0x10/0x10 [ 2621.761158][ T7275] ? _parse_integer_limit+0x1ae/0x1f0 [ 2621.761200][ T7275] ? __lock_acquire+0xab9/0xd20 [ 2621.761224][ T7275] ? ref_tracker_alloc+0x318/0x460 [ 2621.761240][ T7275] ? __lock_acquire+0xab9/0xd20 [ 2621.761259][ T7275] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2621.761282][ T7275] ? tun_get+0x1c/0x2f0 [ 2621.761306][ T7275] ? tun_get+0x1c/0x2f0 [ 2621.761325][ T7275] ? tun_get+0x1c/0x2f0 [ 2621.761349][ T7275] tun_chr_write_iter+0x113/0x200 [ 2621.761372][ T7275] vfs_write+0x5c9/0xb30 [ 2621.761400][ T7275] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2621.761420][ T7275] ? __pfx_vfs_write+0x10/0x10 [ 2621.761453][ T7275] ? __fget_files+0x2a/0x420 [ 2621.761478][ T7275] ksys_write+0x145/0x250 [ 2621.761500][ T7275] ? exc_page_fault+0x82/0x100 [ 2621.761523][ T7275] ? __pfx_ksys_write+0x10/0x10 [ 2621.761555][ T7275] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2621.761579][ T7275] ? lockdep_hardirqs_on+0x9c/0x150 [ 2621.761603][ T7275] __do_fast_syscall_32+0xb6/0x2b0 [ 2621.761627][ T7275] ? lockdep_hardirqs_on+0x9c/0x150 [ 2621.761653][ T7275] do_fast_syscall_32+0x34/0x80 [ 2621.761676][ T7275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2621.761698][ T7275] RIP: 0023:0xf703d539 [ 2621.761715][ T7275] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2621.761731][ T7275] RSP: 002b:00000000f542d520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2621.761751][ T7275] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000100 [ 2621.761764][ T7275] RDX: 00000000000000be RSI: 00000000f73d5ff4 RDI: 0000000000000000 [ 2621.761776][ T7275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2621.761787][ T7275] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2621.761798][ T7275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2621.761826][ T7275] [ 2621.779950][T21734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2621.814967][ T5911] usb 7-1: new low-speed USB device number 117 using dummy_hcd [ 2621.892516][ T7277] binder: 7276:7277 ioctl c0306201 80000080 returned -14 [ 2621.898369][T32577] usb usb5-port1: unable to enumerate USB device [ 2621.923277][T21734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2622.089161][ T7281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2622.122736][T21734] veth1_vlan: left allmulticast mode [ 2622.127730][ T5911] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 2622.138065][ T5911] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 2622.147047][ T5911] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2622.158697][ T5911] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2622.170500][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2622.182562][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2622.183100][T21734] team0 (unregistering): Port device batadv1 removed [ 2622.195838][ T5911] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2622.223377][T21734] pimreg (unregistering): left allmulticast mode [ 2622.229265][ T5911] usb 7-1: string descriptor 0 read error: -22 [ 2622.238667][ T5911] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2622.261429][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2622.269874][T32577] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2622.301987][ T5911] usb 7-1: config 0 descriptor?? [ 2622.315131][ T5911] hub 7-1:0.0: bad descriptor, ignoring hub [ 2622.337016][ T5911] hub 7-1:0.0: probe with driver hub failed with error -5 [ 2622.368044][ T5911] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input290 [ 2622.446287][T32577] usb 3-1: Using ep0 maxpacket: 8 [ 2622.457272][T32577] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2622.465785][T32577] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2622.490783][T32577] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2622.501015][T32577] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2622.543273][T32577] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2622.557257][T32577] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2622.613099][T32577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2622.669340][ T7285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2622.680858][ T7285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2623.076377][T23946] Bluetooth: hci0: command tx timeout [ 2623.108501][T32577] usb 3-1: GET_CAPABILITIES returned 0 [ 2623.114110][T32577] usbtmc 3-1:16.0: can't read capabilities [ 2623.470650][T32577] usb 3-1: USB disconnect, device number 12 [ 2623.481468][ T7279] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 2623.981437][T21734] team0 (unregistering): Port device team_slave_1 removed [ 2624.102314][T21734] team0 (unregistering): Port device team_slave_0 removed [ 2625.097516][T32577] usb 7-1: USB disconnect, device number 117 [ 2625.204684][T21734] lo (unregistering): left allmulticast mode [ 2625.250336][ T7176] hsr_slave_0: entered promiscuous mode [ 2625.257930][ T7176] hsr_slave_1: entered promiscuous mode [ 2625.268630][ T7176] debugfs: 'hsr0' already exists in 'hsr' [ 2625.274845][ T7176] Cannot create hsr debugfs directory [ 2625.586048][T32577] usb 7-1: new low-speed USB device number 118 using dummy_hcd [ 2625.706071][T14997] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2625.747157][T32577] usb 7-1: Invalid ep0 maxpacket: 16 [ 2625.876156][T14997] usb 5-1: Using ep0 maxpacket: 32 [ 2625.926241][T32577] usb 7-1: new low-speed USB device number 119 using dummy_hcd [ 2625.943073][T14997] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 2625.961690][T14997] usb 5-1: config 0 has no interface number 0 [ 2625.978427][T14997] usb 5-1: config 0 interface 125 has no altsetting 0 [ 2626.008653][T14997] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 2626.018970][T14997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2626.036823][T14997] usb 5-1: Product: syz [ 2626.041301][T14997] usb 5-1: Manufacturer: syz [ 2626.051454][T14997] usb 5-1: SerialNumber: syz [ 2626.065045][T14997] usb 5-1: config 0 descriptor?? [ 2626.096007][T32577] usb 7-1: Invalid ep0 maxpacket: 16 [ 2626.101860][T32577] usb usb7-port1: attempt power cycle [ 2626.292178][T14997] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 2626.466364][ T7332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2626.471683][T32577] usb 7-1: new low-speed USB device number 120 using dummy_hcd [ 2626.496694][ T7332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2626.566149][T32577] usb 7-1: Invalid ep0 maxpacket: 16 [ 2626.682197][ T7335] netlink: 'syz.2.8968': attribute type 1 has an invalid length. [ 2626.696041][T32577] usb 7-1: new low-speed USB device number 121 using dummy_hcd [ 2626.724793][ T7176] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2626.735261][T32577] usb 7-1: Invalid ep0 maxpacket: 16 [ 2626.742435][ T7176] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2626.752619][T32577] usb usb7-port1: unable to enumerate USB device [ 2626.827889][ T7176] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2626.848982][ T7176] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2626.970254][T14997] usb 5-1: reset high-speed USB device number 118 using dummy_hcd [ 2626.983274][T14997] usb 5-1: device reset changed ep0 maxpacket size! [ 2626.998708][T14997] ueagle-atm 5-1:0.125: usbatm_usb_probe: bind failed: -19! [ 2627.009685][T14997] usb 5-1: USB disconnect, device number 118 [ 2627.175864][ T7176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2627.189814][T14997] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2627.644997][ T7347] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2627.694235][ T7176] 8021q: adding VLAN 0 to HW filter on device team0 [ 2627.744421][ T2250] bridge0: port 1(bridge_slave_0) entered blocking state [ 2627.751837][ T2250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2627.776179][T14997] usb 5-1: Using ep0 maxpacket: 16 [ 2627.865537][ T2250] bridge0: port 2(bridge_slave_1) entered blocking state [ 2627.873079][ T2250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2628.378936][ T7176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2628.540671][ T7360] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2628.699416][ T7176] veth0_vlan: entered promiscuous mode [ 2628.774394][ T7176] veth1_vlan: entered promiscuous mode [ 2628.905935][ T7176] veth0_macvtap: entered promiscuous mode [ 2628.946861][ T7176] veth1_macvtap: entered promiscuous mode [ 2628.991261][T14997] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2628.998956][ T7176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2629.034268][ T7176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2629.062862][T14997] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2629.077473][T14997] usb 5-1: can't read configurations, error -71 [ 2629.124386][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2629.327314][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2629.377388][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2629.386744][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2629.606764][T16618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2629.655749][T16618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2629.829264][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2629.856870][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2629.866647][T14997] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2629.954061][ T7377] vlan2: entered promiscuous mode [ 2629.982523][ T7377] bond0: entered promiscuous mode [ 2630.005543][ T7377] bond_slave_0: entered promiscuous mode [ 2630.012376][T14997] usb 5-1: device descriptor read/64, error -71 [ 2630.042897][ T7377] bond_slave_1: entered promiscuous mode [ 2630.089890][ T7385] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2630.136271][T14997] usb usb5-port1: attempt power cycle [ 2630.246287][T28260] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 2630.410390][T28260] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2630.436042][T28260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2630.444203][T28260] usb 3-1: Product: syz [ 2630.463476][T28260] usb 3-1: Manufacturer: syz [ 2630.474800][T28260] usb 3-1: SerialNumber: syz [ 2630.516950][T14997] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2630.537484][T14997] usb 5-1: device descriptor read/8, error -71 [ 2630.542639][T28260] usb 3-1: config 0 descriptor?? [ 2630.609546][T28260] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2630.632289][T28260] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2630.654726][T28260] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 2630.776465][T14997] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2630.796662][T14997] usb 5-1: device descriptor read/8, error -71 [ 2630.906838][T14997] usb usb5-port1: unable to enumerate USB device [ 2632.196946][ T7419] FAULT_INJECTION: forcing a failure. [ 2632.196946][ T7419] name failslab, interval 1, probability 0, space 0, times 0 [ 2632.209953][ T7419] CPU: 1 UID: 0 PID: 7419 Comm: syz.3.8981 Not tainted syzkaller #0 PREEMPT(full) [ 2632.209978][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2632.209989][ T7419] Call Trace: [ 2632.209998][ T7419] [ 2632.210006][ T7419] dump_stack_lvl+0x189/0x250 [ 2632.210034][ T7419] ? __pfx____ratelimit+0x10/0x10 [ 2632.210057][ T7419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2632.210080][ T7419] ? __pfx__printk+0x10/0x10 [ 2632.210104][ T7419] ? __pfx___might_resched+0x10/0x10 [ 2632.210122][ T7419] ? fs_reclaim_acquire+0x7d/0x100 [ 2632.210152][ T7419] should_fail_ex+0x414/0x560 [ 2632.210183][ T7419] should_failslab+0xa8/0x100 [ 2632.210203][ T7419] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2632.210227][ T7419] ? _sctp_make_chunk+0x14e/0x430 [ 2632.210249][ T7419] ? skb_put+0x11b/0x210 [ 2632.210270][ T7419] _sctp_make_chunk+0x14e/0x430 [ 2632.210297][ T7419] sctp_make_datafrag_empty+0x122/0x230 [ 2632.210323][ T7419] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 2632.210349][ T7419] ? sctp_auth_send_cid+0x69/0x250 [ 2632.210375][ T7419] sctp_datamsg_from_user+0x729/0xef0 [ 2632.210410][ T7419] ? __genradix_ptr+0x1e1/0x220 [ 2632.210435][ T7419] sctp_sendmsg_to_asoc+0xffe/0x1810 [ 2632.210468][ T7419] ? __lock_acquire+0xab9/0xd20 [ 2632.210500][ T7419] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 2632.210525][ T7419] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2632.210545][ T7419] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2632.210566][ T7419] ? sctp_sendmsg_check_sflags+0x18d/0x2e0 [ 2632.210597][ T7419] sctp_sendmsg+0x1941/0x2810 [ 2632.210649][ T7419] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2632.210677][ T7419] ? aa_sk_perm+0x81e/0x950 [ 2632.210706][ T7419] ? __pfx_aa_sk_perm+0x10/0x10 [ 2632.210732][ T7419] ? sock_rps_record_flow+0x19/0x410 [ 2632.210760][ T7419] ? inet_sendmsg+0x2f4/0x370 [ 2632.210782][ T7419] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2632.210803][ T7419] __sock_sendmsg+0x19c/0x270 [ 2632.210829][ T7419] sock_write_iter+0x279/0x360 [ 2632.210852][ T7419] ? __pfx_sock_write_iter+0x10/0x10 [ 2632.210934][ T7419] ? bpf_lsm_file_permission+0x9/0x20 [ 2632.210954][ T7419] ? security_file_permission+0x75/0x290 [ 2632.210980][ T7419] vfs_write+0x5c9/0xb30 [ 2632.211007][ T7419] ? __pfx_sock_write_iter+0x10/0x10 [ 2632.211027][ T7419] ? __pfx_vfs_write+0x10/0x10 [ 2632.211056][ T7419] ? __fget_files+0x2a/0x420 [ 2632.211082][ T7419] ksys_write+0x145/0x250 [ 2632.211104][ T7419] ? exc_page_fault+0x82/0x100 [ 2632.211127][ T7419] ? __pfx_ksys_write+0x10/0x10 [ 2632.211160][ T7419] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2632.211189][ T7419] ? lockdep_hardirqs_on+0x9c/0x150 [ 2632.211215][ T7419] __do_fast_syscall_32+0xb6/0x2b0 [ 2632.211238][ T7419] ? lockdep_hardirqs_on+0x9c/0x150 [ 2632.211265][ T7419] do_fast_syscall_32+0x34/0x80 [ 2632.211288][ T7419] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2632.211311][ T7419] RIP: 0023:0xf7fc1539 [ 2632.211329][ T7419] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2632.211344][ T7419] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2632.211365][ T7419] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 2632.211378][ T7419] RDX: 0000000000029fdf RSI: 0000000000000000 RDI: 0000000000000000 [ 2632.211389][ T7419] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2632.211400][ T7419] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2632.211410][ T7419] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2632.211438][ T7419] [ 2633.120499][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8985'. [ 2633.148154][ T7435] netlink: 128 bytes leftover after parsing attributes in process `syz.6.8985'. [ 2633.167092][T28260] usb 3-1: USB disconnect, device number 13 [ 2633.396595][ T5911] usb 7-1: new low-speed USB device number 122 using dummy_hcd [ 2633.593315][ T5911] usb 7-1: Invalid ep0 maxpacket: 64 [ 2633.639214][ T7441] FAULT_INJECTION: forcing a failure. [ 2633.639214][ T7441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2633.696727][ T7441] CPU: 0 UID: 0 PID: 7441 Comm: syz.4.8987 Not tainted syzkaller #0 PREEMPT(full) [ 2633.696751][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2633.696762][ T7441] Call Trace: [ 2633.696769][ T7441] [ 2633.696777][ T7441] dump_stack_lvl+0x189/0x250 [ 2633.696802][ T7441] ? __pfx____ratelimit+0x10/0x10 [ 2633.696819][ T7441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2633.696851][ T7441] ? __pfx__printk+0x10/0x10 [ 2633.696869][ T7441] ? __might_fault+0xb0/0x130 [ 2633.696899][ T7441] should_fail_ex+0x414/0x560 [ 2633.696924][ T7441] _copy_from_iter+0x1de/0x1790 [ 2633.696943][ T7441] ? rcu_is_watching+0x15/0xb0 [ 2633.696961][ T7441] ? kmalloc_reserve+0xbd/0x290 [ 2633.696981][ T7441] ? __pfx__copy_from_iter+0x10/0x10 [ 2633.696996][ T7441] ? __build_skb_around+0x262/0x3f0 [ 2633.697018][ T7441] ? netlink_sendmsg+0x642/0xb30 [ 2633.697029][ T7441] ? skb_put+0x11b/0x210 [ 2633.697044][ T7441] netlink_sendmsg+0x6b2/0xb30 [ 2633.697063][ T7441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2633.697077][ T7441] ? __import_iovec+0x5d4/0x7f0 [ 2633.697092][ T7441] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2633.697112][ T7441] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2633.697125][ T7441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2633.697138][ T7441] __sock_sendmsg+0x21c/0x270 [ 2633.697158][ T7441] ____sys_sendmsg+0x505/0x830 [ 2633.697177][ T7441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2633.697203][ T7441] ___sys_sendmsg+0x21f/0x2a0 [ 2633.697219][ T7441] ? __pfx____sys_sendmsg+0x10/0x10 [ 2633.697260][ T7441] ? __fget_files+0x2a/0x420 [ 2633.697273][ T7441] ? __fget_files+0x3a0/0x420 [ 2633.697296][ T7441] __sys_sendmsg+0x164/0x220 [ 2633.697312][ T7441] ? __pfx___sys_sendmsg+0x10/0x10 [ 2633.697332][ T7441] ? __pfx_ksys_write+0x10/0x10 [ 2633.697354][ T7441] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2633.697374][ T7441] ? lockdep_hardirqs_on+0x9c/0x150 [ 2633.697393][ T7441] __do_fast_syscall_32+0xb6/0x2b0 [ 2633.697412][ T7441] ? lockdep_hardirqs_on+0x9c/0x150 [ 2633.697431][ T7441] do_fast_syscall_32+0x34/0x80 [ 2633.697450][ T7441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2633.697467][ T7441] RIP: 0023:0xf705d539 [ 2633.697481][ T7441] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2633.697495][ T7441] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2633.697511][ T7441] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 2633.697521][ T7441] RDX: 0000000020040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2633.697530][ T7441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2633.697538][ T7441] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2633.697546][ T7441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2633.697569][ T7441] [ 2633.705063][ T539] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2633.996047][ T5911] usb 7-1: new low-speed USB device number 123 using dummy_hcd [ 2634.002928][ T539] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2634.014441][ T539] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2634.026880][ T539] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2634.034577][ T539] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2634.236484][ T5911] usb 7-1: Invalid ep0 maxpacket: 64 [ 2634.256679][ T5911] usb usb7-port1: attempt power cycle [ 2634.582726][ T7443] chnl_net:caif_netlink_parms(): no params data found [ 2634.646055][ T5911] usb 7-1: new low-speed USB device number 124 using dummy_hcd [ 2634.688235][ T5911] usb 7-1: Invalid ep0 maxpacket: 64 [ 2634.826428][ T5911] usb 7-1: new low-speed USB device number 125 using dummy_hcd [ 2634.860152][ T5911] usb 7-1: Invalid ep0 maxpacket: 64 [ 2634.868035][ T5911] usb usb7-port1: unable to enumerate USB device [ 2635.173391][ T7443] bridge0: port 1(bridge_slave_0) entered blocking state [ 2635.184065][ T7443] bridge0: port 1(bridge_slave_0) entered disabled state [ 2635.193449][ T7443] bridge_slave_0: entered allmulticast mode [ 2635.204582][ T7443] bridge_slave_0: entered promiscuous mode [ 2635.281543][ T7443] bridge0: port 2(bridge_slave_1) entered blocking state [ 2635.300582][ T7443] bridge0: port 2(bridge_slave_1) entered disabled state [ 2635.308527][ T7443] bridge_slave_1: entered allmulticast mode [ 2635.327793][ T7443] bridge_slave_1: entered promiscuous mode [ 2635.393954][ T7464] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 2635.541391][ T7443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2635.559387][ T7443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2635.685496][ T7443] team0: Port device team_slave_0 added [ 2635.694564][ T7443] team0: Port device team_slave_1 added [ 2635.706558][ T5911] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2635.736665][ T7443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2635.743671][ T7443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2635.770774][ T7443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2635.783618][ T7443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2635.791598][ T7443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2635.817985][ T7443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2635.836389][T28260] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2635.868445][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2635.886372][ T5911] usb 5-1: config 66 interface 0 has no altsetting 0 [ 2635.907111][ T5911] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 2635.921068][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2635.930645][ T5911] usb 5-1: Product: syz [ 2635.937619][ T5911] usb 5-1: Manufacturer: syz [ 2635.943064][ T5911] usb 5-1: SerialNumber: syz [ 2635.996239][T28260] usb 4-1: Using ep0 maxpacket: 32 [ 2636.002249][T28260] usb 4-1: no configurations [ 2636.012776][ T7443] hsr_slave_0: entered promiscuous mode [ 2636.016579][T28260] usb 4-1: can't read configurations, error -22 [ 2636.027339][ T7443] hsr_slave_1: entered promiscuous mode [ 2636.036849][ T7443] debugfs: 'hsr0' already exists in 'hsr' [ 2636.043229][ T7443] Cannot create hsr debugfs directory [ 2636.117252][ T539] Bluetooth: hci1: command tx timeout [ 2636.173046][T28260] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2636.183758][ T7466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2636.210720][ T7466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2636.367795][T28260] usb 4-1: Using ep0 maxpacket: 32 [ 2636.374208][T28260] usb 4-1: no configurations [ 2636.379974][T28260] usb 4-1: can't read configurations, error -22 [ 2636.405583][T28260] usb usb4-port1: attempt power cycle [ 2636.777098][T28260] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2636.798943][T28260] usb 4-1: Using ep0 maxpacket: 32 [ 2636.804928][T28260] usb 4-1: no configurations [ 2636.809881][T28260] usb 4-1: can't read configurations, error -22 [ 2636.828603][ T50] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2636.839724][ T50] mac80211_hwsim hwsim35 wlan1: left promiscuous mode [ 2636.868035][ T50] bond0 (unregistering): Released all slaves [ 2636.947162][T28260] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2636.977432][T28260] usb 4-1: Using ep0 maxpacket: 32 [ 2636.984049][T28260] usb 4-1: no configurations [ 2636.990996][T28260] usb 4-1: can't read configurations, error -22 [ 2637.002377][T28260] usb usb4-port1: unable to enumerate USB device [ 2637.264892][ T50] bond1 (unregistering): Released all slaves [ 2637.492471][ T50] bond2 (unregistering): Released all slaves [ 2637.703160][ T50] bond3 (unregistering): Released all slaves [ 2637.908796][ T50] bond4 (unregistering): Released all slaves [ 2638.112531][ T50] bond5 (unregistering): Released all slaves [ 2638.202587][ T539] Bluetooth: hci1: command tx timeout [ 2638.338991][ T50] bond6 (unregistering): Released all slaves [ 2638.357956][ T50] bond7 (unregistering): Released all slaves [ 2638.562576][ T50] bond8 (unregistering): Released all slaves [ 2638.704678][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8998'. [ 2638.782863][ T50] bond9 (unregistering): Released all slaves [ 2638.985564][ T50] bond10 (unregistering): Released all slaves [ 2639.192181][ T50] bond11 (unregistering): Released all slaves [ 2639.241520][ T7484] hsr_slave_0: left promiscuous mode [ 2639.254793][ T7484] hsr_slave_1: left promiscuous mode [ 2639.500894][ T5911] ati_remote2 5-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 2639.547152][ T50] tipc: Disabling bearer [ 2639.552547][ T50] tipc: Disabling bearer [ 2639.561743][ T5911] usb 5-1: USB disconnect, device number 123 [ 2639.638075][ T50] tipc: Disabling bearer [ 2639.664441][ T50] tipc: Left network mode [ 2639.809520][ T50] IPVS: stopping master sync thread 30877 ... [ 2640.257436][ T3503] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2640.283407][ T539] Bluetooth: hci1: command tx timeout [ 2640.476105][ T3503] usb 4-1: Using ep0 maxpacket: 32 [ 2640.486051][ T3503] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2640.498814][ T3503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2640.515644][ T3503] usb 4-1: Product: syz [ 2640.534477][ T3503] usb 4-1: Manufacturer: syz [ 2640.561953][ T3503] usb 4-1: SerialNumber: syz [ 2640.582552][ T3503] usb 4-1: config 0 descriptor?? [ 2640.604702][ T3503] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2641.559152][ T3503] gspca_ov534_9: reg_w failed -71 [ 2641.861404][ T3503] gspca_ov534_9: Unknown sensor 0000 [ 2641.861500][ T3503] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 2641.896508][ T3503] usb 4-1: USB disconnect, device number 72 [ 2642.360616][ T539] Bluetooth: hci1: command tx timeout [ 2643.469092][ T7443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2643.514695][ T7443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2643.646974][ T7443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2643.737751][ T7443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2643.981157][ T7559] binder: BINDER_SET_CONTEXT_MGR already set [ 2643.987742][ T7559] binder: 7558:7559 ioctl 4018620d 80004a80 returned -16 [ 2643.998926][ T7559] binder_alloc: binder_alloc_mmap_handler: 7558 80ffe000-81000000 already mapped failed -16 [ 2644.054029][ T50] IPVS: stop unused estimator thread 0... [ 2644.060421][ T5904] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2644.222708][ T7443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2644.230518][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 2644.242532][ T5904] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2644.274642][ T5904] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2644.291071][ T5904] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.40 [ 2644.304803][ T7443] 8021q: adding VLAN 0 to HW filter on device team0 [ 2644.312085][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2644.328479][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 2644.335735][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2644.343881][ T5904] usb 4-1: Product: syz [ 2644.349393][ T5904] usb 4-1: Manufacturer: syz [ 2644.354050][ T5904] usb 4-1: SerialNumber: syz [ 2644.379071][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 2644.386223][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2644.418733][ T7443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2644.430497][ T7443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2644.571695][ T7443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2644.686885][ T5904] usbhid 4-1:1.0: can't add hid device: -71 [ 2644.694386][ T5904] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 2644.733072][ T7443] veth0_vlan: entered promiscuous mode [ 2644.738622][ T5904] usb 4-1: USB disconnect, device number 73 [ 2644.751727][ T7443] veth1_vlan: entered promiscuous mode [ 2644.884230][ T7443] veth0_macvtap: entered promiscuous mode [ 2644.907781][ T7443] veth1_macvtap: entered promiscuous mode [ 2644.920836][ T7579] netlink: 'syz.6.9016': attribute type 1 has an invalid length. [ 2644.931753][ T7443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2644.979177][ T7443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2644.999673][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2645.012438][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2645.023657][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2645.039267][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2645.104951][ T7582] @: renamed from vlan0 (while UP) [ 2645.222399][T21734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2645.275801][T21734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2645.458411][ T2250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2645.466514][ T2250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2646.321651][T23946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2646.335187][T23946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2646.344739][T23946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2646.364616][T23946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2646.380757][T23946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2647.280426][ T2250] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2647.378849][ T7592] chnl_net:caif_netlink_parms(): no params data found [ 2647.741530][ T2250] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2647.886831][ T2250] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2648.032162][ T7604] FAULT_INJECTION: forcing a failure. [ 2648.032162][ T7604] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.055608][ T7604] CPU: 0 UID: 0 PID: 7604 Comm: syz.5.9022 Not tainted syzkaller #0 PREEMPT(full) [ 2648.055632][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2648.055644][ T7604] Call Trace: [ 2648.055652][ T7604] [ 2648.055661][ T7604] dump_stack_lvl+0x189/0x250 [ 2648.055689][ T7604] ? __pfx____ratelimit+0x10/0x10 [ 2648.055711][ T7604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2648.055734][ T7604] ? __pfx__printk+0x10/0x10 [ 2648.055755][ T7604] ? __pfx___might_resched+0x10/0x10 [ 2648.055772][ T7604] ? fs_reclaim_acquire+0x7d/0x100 [ 2648.055798][ T7604] should_fail_ex+0x414/0x560 [ 2648.055825][ T7604] should_failslab+0xa8/0x100 [ 2648.055846][ T7604] __kmalloc_noprof+0xcb/0x7f0 [ 2648.055869][ T7604] ? tomoyo_encode+0x28b/0x550 [ 2648.055898][ T7604] tomoyo_encode+0x28b/0x550 [ 2648.055925][ T7604] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2648.055958][ T7604] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2648.055976][ T7604] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2648.055990][ T7604] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2648.056011][ T7604] ? __lock_acquire+0xab9/0xd20 [ 2648.056031][ T7604] ? __fget_files+0x2a/0x420 [ 2648.056044][ T7604] ? __fget_files+0x3a0/0x420 [ 2648.056052][ T7604] ? __fget_files+0x2a/0x420 [ 2648.056063][ T7604] security_file_ioctl_compat+0xcb/0x2d0 [ 2648.056076][ T7604] __ia32_compat_sys_ioctl+0x128/0x840 [ 2648.056092][ T7604] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2648.056104][ T7604] ? __fget_files+0x3a0/0x420 [ 2648.056116][ T7604] ? fput+0xa0/0xd0 [ 2648.056128][ T7604] ? ksys_write+0x22a/0x250 [ 2648.056141][ T7604] ? exc_page_fault+0x82/0x100 [ 2648.056154][ T7604] ? __pfx_ksys_write+0x10/0x10 [ 2648.056168][ T7604] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2648.056181][ T7604] ? lockdep_hardirqs_on+0x9c/0x150 [ 2648.056195][ T7604] __do_fast_syscall_32+0xb6/0x2b0 [ 2648.056209][ T7604] ? lockdep_hardirqs_on+0x9c/0x150 [ 2648.056225][ T7604] do_fast_syscall_32+0x34/0x80 [ 2648.056238][ T7604] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2648.056250][ T7604] RIP: 0023:0xf703d539 [ 2648.056260][ T7604] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2648.056269][ T7604] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2648.056280][ T7604] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05605 [ 2648.056287][ T7604] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 2648.056293][ T7604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2648.056299][ T7604] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2648.056305][ T7604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2648.056319][ T7604] [ 2648.433739][ T7604] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2648.576265][ T539] Bluetooth: hci5: command tx timeout [ 2649.326022][ T3503] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 2649.456054][ T7625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2649.495525][ T7625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2649.503526][ T3503] usb 7-1: Using ep0 maxpacket: 32 [ 2649.514787][ T3503] usb 7-1: config 0 has an invalid interface number: 112 but max is 0 [ 2649.523490][ T3503] usb 7-1: config 0 has no interface number 0 [ 2649.539773][ T3503] usb 7-1: config 0 interface 112 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 2649.580810][ T3503] usb 7-1: config 0 interface 112 altsetting 0 endpoint 0x7 has invalid maxpacket 999, setting to 64 [ 2649.598856][ T3503] usb 7-1: config 0 interface 112 altsetting 0 endpoint 0x6 has an invalid bInterval 241, changing to 11 [ 2649.645863][ T3503] usb 7-1: config 0 interface 112 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 2649.685058][ T3503] usb 7-1: config 0 interface 112 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2649.721798][ T3503] usb 7-1: New USB device found, idVendor=05ac, idProduct=9236, bcdDevice=bc.0a [ 2649.731504][ T3503] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2649.750443][ T3503] usb 7-1: config 0 descriptor?? [ 2650.324368][ T2250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2650.333521][ T2250] bond_slave_0: left promiscuous mode [ 2650.341785][ T2250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2650.351406][ T2250] bond_slave_1: left promiscuous mode [ 2650.361288][ T2250] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2650.369953][ T2250] mac80211_hwsim hwsim33 wlan1: left promiscuous mode [ 2650.378150][ T2250] bond0 (unregistering): Released all slaves [ 2650.607325][ T2250] bond1 (unregistering): Released all slaves [ 2650.607561][ T539] Bluetooth: hci5: command tx timeout [ 2650.832281][ T2250] bond2 (unregistering): Released all slaves [ 2651.037231][ T2250] bond3 (unregistering): Released all slaves [ 2651.249595][ T2250] bond4 (unregistering): Released all slaves [ 2651.468683][ T2250] bond5 (unregistering): Released all slaves [ 2651.683236][ T2250] bond6 (unregistering): Released all slaves [ 2651.700652][ T2250] bond7 (unregistering): Released all slaves [ 2651.717397][ T3503] usb 7-1: string descriptor 0 read error: -71 [ 2651.721600][ T2250] bond8 (unregistering): Released all slaves [ 2651.725220][ T3503] appledisplay 7-1:0.112: Could not find int-in endpoint [ 2651.762301][ T3503] usbhid 7-1:0.112: couldn't find an input interrupt endpoint [ 2651.778144][ T3503] usb 7-1: USB disconnect, device number 126 [ 2651.855001][ T7643] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 2651.962967][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.972198][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.056077][ T2250] bond9 (unregistering): Released all slaves [ 2652.068527][ T2250] bond10 (unregistering): Released all slaves [ 2652.258824][ T3503] usb 7-1: new low-speed USB device number 127 using dummy_hcd [ 2652.267787][ T2250] bond11 (unregistering): Released all slaves [ 2652.280206][ T2250] bond12 (unregistering): Released all slaves [ 2652.292506][ T2250] bond13 (unregistering): Released all slaves [ 2652.305327][ T2250] bond14 (unregistering): Released all slaves [ 2652.449331][ T3503] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 2652.457941][ T3503] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 2652.466266][ T3503] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2652.475319][ T3503] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2652.498511][ T3503] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2652.508677][ T3503] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2652.518623][ T3503] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2652.540082][ T3503] usb 7-1: string descriptor 0 read error: -22 [ 2652.546684][ T3503] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2652.556888][ T3503] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2652.559744][ T2250] bond15 (unregistering): Released all slaves [ 2652.567510][ T3503] usb 7-1: config 0 descriptor?? [ 2652.578415][ T3503] hub 7-1:0.0: bad descriptor, ignoring hub [ 2652.584362][ T3503] hub 7-1:0.0: probe with driver hub failed with error -5 [ 2652.595215][ T3503] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input292 [ 2652.684674][ T539] Bluetooth: hci5: command tx timeout [ 2652.823511][ T2250] bond16 (unregistering): Released all slaves [ 2653.085123][ T2250] bond17 (unregistering): Released all slaves [ 2653.177856][ T7592] bridge0: port 1(bridge_slave_0) entered blocking state [ 2653.196855][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state [ 2653.205321][ T7592] bridge_slave_0: entered allmulticast mode [ 2653.312109][ T7592] bridge_slave_0: entered promiscuous mode [ 2653.336378][ T2250] tipc: Disabling bearer [ 2653.353892][ T2250] tipc: Left network mode [ 2653.369919][ T7592] bridge0: port 2(bridge_slave_1) entered blocking state [ 2653.382995][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state [ 2653.397997][ T7592] bridge_slave_1: entered allmulticast mode [ 2653.486797][ T7592] bridge_slave_1: entered promiscuous mode [ 2653.628192][ T7649] kvm: pic: single mode not supported [ 2653.628215][ T7649] kvm: pic: level sensitive irq not supported [ 2653.634487][ T7649] picdev_read: 6 callbacks suppressed [ 2653.634508][ T7649] kvm: pic: non byte read [ 2653.651473][ T7649] kvm: pic: non byte read [ 2653.658570][ T7649] kvm: pic: non byte read [ 2653.795417][ T7592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2653.932698][ T7592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2654.129985][ T7662] netlink: 'syz.2.9034': attribute type 1 has an invalid length. [ 2654.279324][ T2250] hsr_slave_0: left promiscuous mode [ 2654.297870][ T7665] FAULT_INJECTION: forcing a failure. [ 2654.297870][ T7665] name failslab, interval 1, probability 0, space 0, times 0 [ 2654.313709][ T7665] CPU: 1 UID: 0 PID: 7665 Comm: syz.5.9035 Not tainted syzkaller #0 PREEMPT(full) [ 2654.313726][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2654.313733][ T7665] Call Trace: [ 2654.313740][ T7665] [ 2654.313746][ T7665] dump_stack_lvl+0x189/0x250 [ 2654.313765][ T7665] ? __pfx____ratelimit+0x10/0x10 [ 2654.313778][ T7665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2654.313790][ T7665] ? __pfx__printk+0x10/0x10 [ 2654.313802][ T7665] ? __lock_acquire+0xab9/0xd20 [ 2654.313816][ T7665] should_fail_ex+0x414/0x560 [ 2654.313833][ T7665] should_failslab+0xa8/0x100 [ 2654.313846][ T7665] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2654.313860][ T7665] ? __inet_hash_connect+0x146c/0x2400 [ 2654.313875][ T7665] __inet_hash_connect+0x146c/0x2400 [ 2654.313896][ T7665] ? __inet_hash_connect+0x4a4/0x2400 [ 2654.313910][ T7665] ? __pfx___inet_hash_connect+0x10/0x10 [ 2654.313924][ T7665] ? inet6_hash_connect+0xd8/0x170 [ 2654.313939][ T7665] tcp_v6_connect+0xf57/0x18a0 [ 2654.313957][ T7665] ? __pfx_tcp_v6_connect+0x10/0x10 [ 2654.313967][ T7665] ? tcp_sendmsg+0x2f/0x50 [ 2654.313980][ T7665] ? __ia32_sys_sendto+0xdd/0x100 [ 2654.313994][ T7665] ? __do_fast_syscall_32+0xb6/0x2b0 [ 2654.314019][ T7665] __inet_stream_connect+0x2ae/0xe70 [ 2654.314039][ T7665] ? __pfx___inet_stream_connect+0x10/0x10 [ 2654.314053][ T7665] ? __kasan_kmalloc+0x93/0xb0 [ 2654.314068][ T7665] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 2654.314086][ T7665] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 2654.314103][ T7665] tcp_sendmsg_locked+0x4cc9/0x5540 [ 2654.314127][ T7665] ? tcp_sendmsg_locked+0x2f1/0x5540 [ 2654.314154][ T7665] ? __lock_acquire+0xab9/0xd20 [ 2654.314169][ T7665] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 2654.314181][ T7665] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2654.314194][ T7665] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2654.314210][ T7665] tcp_sendmsg+0x2f/0x50 [ 2654.314224][ T7665] __sock_sendmsg+0xe5/0x270 [ 2654.314238][ T7665] __sys_sendto+0x3bd/0x520 [ 2654.314253][ T7665] ? __pfx___sys_sendto+0x10/0x10 [ 2654.314266][ T7665] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2654.314285][ T7665] ? __fget_files+0x3a0/0x420 [ 2654.314300][ T7665] ? ksys_write+0x22a/0x250 [ 2654.314312][ T7665] ? exc_page_fault+0x82/0x100 [ 2654.314325][ T7665] ? __pfx_ksys_write+0x10/0x10 [ 2654.314340][ T7665] __ia32_sys_sendto+0xdd/0x100 [ 2654.314357][ T7665] __do_fast_syscall_32+0xb6/0x2b0 [ 2654.314370][ T7665] ? lockdep_hardirqs_on+0x9c/0x150 [ 2654.314384][ T7665] do_fast_syscall_32+0x34/0x80 [ 2654.314397][ T7665] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2654.314409][ T7665] RIP: 0023:0xf703d539 [ 2654.314420][ T7665] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2654.314428][ T7665] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2654.314444][ T7665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2654.314454][ T7665] RDX: 0000000000000000 RSI: 0000000020000045 RDI: 00000000800001c0 [ 2654.314464][ T7665] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 2654.314473][ T7665] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2654.314483][ T7665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2654.314511][ T7665] [ 2654.679981][ T2250] hsr_slave_1: left promiscuous mode [ 2654.701814][ T2250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2654.766430][ T539] Bluetooth: hci5: command tx timeout [ 2654.815226][ T2250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2654.852104][ T2250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2654.860322][ T2250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2655.104542][ T3503] usb 7-1: USB disconnect, device number 127 [ 2655.647134][ T2250] veth1_macvtap: left promiscuous mode [ 2655.652822][ T2250] veth0_macvtap: left promiscuous mode [ 2655.676078][ T2250] veth1_vlan: left promiscuous mode [ 2655.681457][ T2250] veth0_vlan: left promiscuous mode [ 2655.894055][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2655.909451][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2655.996669][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2656.472391][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2656.485073][ T10] usb 7-1: config 66 interface 0 has no altsetting 0 [ 2656.502894][ T10] usb 7-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 2656.515678][ T2250] team0 (unregistering): Port device batadv1 removed [ 2656.528691][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2656.585626][ T10] usb 7-1: Product: syz [ 2656.615324][ T10] usb 7-1: Manufacturer: syz [ 2656.642564][ T10] usb 7-1: SerialNumber: syz [ 2656.724078][ T2250] pim6reg (unregistering): left allmulticast mode [ 2656.901951][ T7678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2656.916311][ T7678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2656.957772][ T7685] netlink: 'syz.3.9039': attribute type 11 has an invalid length. [ 2657.563806][ T2250] team0 (unregistering): Port device team_slave_1 removed [ 2657.634759][ T2250] team0 (unregistering): Port device team_slave_0 removed [ 2658.494615][ T7592] team0: Port device team_slave_0 added [ 2658.512587][ T7669] @: renamed from vlan0 (while UP) [ 2658.552872][ T7690] tipc: Started in network mode [ 2658.562267][ T7690] tipc: Node identity da6e38ba0c2f, cluster identity 4711 [ 2658.571433][ T7690] tipc: Enabled bearer , priority 0 [ 2658.580156][ T7691] syzkaller0: entered promiscuous mode [ 2658.585741][ T7691] syzkaller0: entered allmulticast mode [ 2658.599631][ T7695] tipc: Resetting bearer [ 2658.607630][ T7592] team0: Port device team_slave_1 added [ 2658.620517][ T10] ati_remote2 7-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 2658.657796][ T10] usb 7-1: USB disconnect, device number 2 [ 2658.711166][ T7687] tipc: Resetting bearer [ 2658.749690][ T7687] tipc: Disabling bearer [ 2658.806000][ T7592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2658.833630][ T7592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2658.924911][ T7592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2658.972582][ T7592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2659.002192][ T7592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2659.066042][ T7592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2659.350129][ T7592] hsr_slave_0: entered promiscuous mode [ 2659.359026][ T7592] hsr_slave_1: entered promiscuous mode [ 2659.365158][ T7592] debugfs: 'hsr0' already exists in 'hsr' [ 2659.371721][ T7592] Cannot create hsr debugfs directory [ 2659.406083][ T3503] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2659.587684][ T3503] usb 4-1: Using ep0 maxpacket: 8 [ 2659.662796][ T3503] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2659.701691][ T3503] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2659.777183][ T3503] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2659.802426][ T3503] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2659.813835][ T3503] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2659.831537][ T3503] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2659.854038][ T3503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2660.144296][ T3503] usb 4-1: GET_CAPABILITIES returned 0 [ 2660.160133][ T2250] IPVS: stop unused estimator thread 0... [ 2660.191316][ T3503] usbtmc 4-1:16.0: can't read capabilities [ 2660.445249][ T3503] usb 4-1: USB disconnect, device number 74 [ 2660.465982][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 2660.465999][ T30] audit: type=1326 audit(1761764244.398:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.6.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2660.583877][ T30] audit: type=1326 audit(1761764244.398:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.6.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2660.590536][ T7706] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9041'. [ 2660.657433][ T30] audit: type=1326 audit(1761764244.438:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.6.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2660.755854][ T30] audit: type=1326 audit(1761764244.448:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.6.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2660.818325][ T30] audit: type=1326 audit(1761764244.448:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.6.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2660.847304][ T30] audit: type=1326 audit(1761764244.448:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.6.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2660.951775][ T30] audit: type=1326 audit(1761764244.448:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.6.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2660.981060][ T30] audit: type=1326 audit(1761764244.448:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.6.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2661.028066][ T7737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2661.036017][ T30] audit: type=1326 audit(1761764244.448:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.6.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2661.063446][ T7737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2661.113678][ T30] audit: type=1326 audit(1761764244.458:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.6.9046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2661.416089][T14997] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 2661.598475][T14997] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 2661.607980][T14997] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 2661.652948][ T7753] FAULT_INJECTION: forcing a failure. [ 2661.652948][ T7753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2661.667654][T14997] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2661.697668][T14997] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2661.767125][ T7753] CPU: 0 UID: 0 PID: 7753 Comm: syz.6.9050 Not tainted syzkaller #0 PREEMPT(full) [ 2661.767152][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2661.767162][ T7753] Call Trace: [ 2661.767169][ T7753] [ 2661.767176][ T7753] dump_stack_lvl+0x189/0x250 [ 2661.767203][ T7753] ? __pfx____ratelimit+0x10/0x10 [ 2661.767224][ T7753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2661.767246][ T7753] ? __pfx__printk+0x10/0x10 [ 2661.767271][ T7753] ? __might_fault+0xb0/0x130 [ 2661.767304][ T7753] should_fail_ex+0x414/0x560 [ 2661.767333][ T7753] _copy_from_iter+0x1de/0x1790 [ 2661.767355][ T7753] ? rcu_is_watching+0x15/0xb0 [ 2661.767376][ T7753] ? kmalloc_reserve+0xbd/0x290 [ 2661.767401][ T7753] ? __pfx__copy_from_iter+0x10/0x10 [ 2661.767419][ T7753] ? __build_skb_around+0x262/0x3f0 [ 2661.767445][ T7753] ? netlink_sendmsg+0x642/0xb30 [ 2661.767460][ T7753] ? skb_put+0x11b/0x210 [ 2661.767493][ T7753] netlink_sendmsg+0x6b2/0xb30 [ 2661.767519][ T7753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2661.767538][ T7753] ? __import_iovec+0x5d4/0x7f0 [ 2661.767557][ T7753] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2661.767583][ T7753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2661.767599][ T7753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2661.767615][ T7753] __sock_sendmsg+0x21c/0x270 [ 2661.767638][ T7753] ____sys_sendmsg+0x505/0x830 [ 2661.767661][ T7753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2661.767690][ T7753] ___sys_sendmsg+0x21f/0x2a0 [ 2661.767709][ T7753] ? __pfx____sys_sendmsg+0x10/0x10 [ 2661.767762][ T7753] ? __fget_files+0x2a/0x420 [ 2661.767785][ T7753] ? __fget_files+0x3a0/0x420 [ 2661.767812][ T7753] __sys_sendmsg+0x164/0x220 [ 2661.767833][ T7753] ? __pfx___sys_sendmsg+0x10/0x10 [ 2661.767864][ T7753] ? __pfx_ksys_write+0x10/0x10 [ 2661.767891][ T7753] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2661.767917][ T7753] ? lockdep_hardirqs_on+0x9c/0x150 [ 2661.767941][ T7753] __do_fast_syscall_32+0xb6/0x2b0 [ 2661.767965][ T7753] ? lockdep_hardirqs_on+0x9c/0x150 [ 2661.767990][ T7753] do_fast_syscall_32+0x34/0x80 [ 2661.768012][ T7753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2661.768033][ T7753] RIP: 0023:0xf70dd539 [ 2661.768049][ T7753] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2661.768065][ T7753] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2661.768082][ T7753] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 2661.768093][ T7753] RDX: 00000000040c0080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2661.768104][ T7753] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2661.768118][ T7753] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2661.768129][ T7753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2661.768154][ T7753] [ 2662.103523][ T7757] tipc: Started in network mode [ 2662.108442][ T7757] tipc: Node identity 42948619f311, cluster identity 4711 [ 2662.115732][ T7757] tipc: Enabled bearer , priority 0 [ 2662.124563][ T7757] syzkaller0: entered promiscuous mode [ 2662.130176][ T7757] syzkaller0: entered allmulticast mode [ 2662.145960][T14997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2662.361395][T14997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2662.409149][ T7760] tipc: Resetting bearer [ 2662.454330][T14997] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2662.634795][ T7756] tipc: Resetting bearer [ 2662.687528][ T7756] tipc: Disabling bearer [ 2662.700402][T14997] usb 3-1: string descriptor 0 read error: -22 [ 2662.709333][T14997] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2662.721243][T14997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2662.824771][T14997] usb 3-1: config 0 descriptor?? [ 2662.836681][ T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2662.856708][T14997] hub 3-1:0.0: bad descriptor, ignoring hub [ 2662.867852][T14997] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2662.930255][T14997] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input293 [ 2662.941641][ T7592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2662.997598][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 2663.017012][ T10] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 2663.033652][ T7592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2663.055717][ T10] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2663.066511][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2663.092651][ T10] usb 4-1: Product: syz [ 2663.106731][ T7592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2663.115817][ T10] usb 4-1: Manufacturer: syz [ 2663.121366][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9052'. [ 2663.139131][ T10] usb 4-1: SerialNumber: syz [ 2663.162034][ T10] usb 4-1: config 0 descriptor?? [ 2663.173185][ T10] usb 4-1: bad CDC descriptors [ 2663.179340][ T10] usb 4-1: unsupported MDLM descriptors [ 2663.189467][ T7592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2663.463784][ T7592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2663.533095][ T7592] 8021q: adding VLAN 0 to HW filter on device team0 [ 2663.553851][T21734] bridge0: port 1(bridge_slave_0) entered blocking state [ 2663.561165][T21734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2663.705976][T21734] bridge0: port 2(bridge_slave_1) entered blocking state [ 2663.713200][T21734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2663.842259][ T7782] netlink: 'syz.6.9053': attribute type 1 has an invalid length. [ 2663.989789][ T7592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2664.087430][ T7785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2664.147866][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2664.234442][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2664.255480][ T7592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2664.293521][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2664.302368][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2664.559340][ T7592] veth0_vlan: entered promiscuous mode [ 2664.661183][ T7592] veth1_vlan: entered promiscuous mode [ 2664.779962][ T7592] veth0_macvtap: entered promiscuous mode [ 2664.807671][ T7592] veth1_macvtap: entered promiscuous mode [ 2664.892799][ T7592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2664.940519][ T7592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2664.985683][T14997] usb 3-1: USB disconnect, device number 14 [ 2664.994525][T28144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2665.029692][T28144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2665.080146][T28144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2665.093795][T28144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2665.228571][T21734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2665.371779][T21734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2665.409347][ T7808] QAT: failed to copy from user. [ 2665.527215][ T10] usb 4-1: USB disconnect, device number 75 [ 2665.659098][ T7812] fuse: Unknown parameter 'user_id00000000000000000000' [ 2665.847637][ T2250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2665.887338][ T7815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2665.896027][ T2250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2666.131248][ T7815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2666.647671][ T3503] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2666.816847][ T5911] usb 5-1: new low-speed USB device number 124 using dummy_hcd [ 2666.876673][ T3503] usb 7-1: Using ep0 maxpacket: 8 [ 2666.885382][ T3503] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 2666.895195][ T3503] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2666.931626][ T3503] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2666.941611][T14997] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 2666.970455][ T3503] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2667.009474][ T3503] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2667.047858][ T5911] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 2667.086508][ T5911] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 2667.099239][ T5911] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2667.106005][ T3503] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2667.109860][ T5911] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2667.189151][T14997] usb 4-1: Invalid ep0 maxpacket: 16 [ 2667.204623][ T3503] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2667.218734][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2667.336008][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2667.346019][T14997] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 2667.354150][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2667.477954][ T3503] usb 7-1: GET_CAPABILITIES returned 0 [ 2667.483512][ T3503] usbtmc 7-1:16.0: can't read capabilities [ 2667.530081][ T5911] usb 5-1: string descriptor 0 read error: -22 [ 2667.536605][ T5911] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2667.627368][T14997] usb 4-1: Invalid ep0 maxpacket: 16 [ 2667.741944][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2667.742034][T14997] usb usb4-port1: attempt power cycle [ 2667.771579][ T5911] usb 5-1: config 0 descriptor?? [ 2667.793523][ T5911] hub 5-1:0.0: bad descriptor, ignoring hub [ 2667.800076][ T5911] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2667.827858][ T5911] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input294 [ 2667.852914][T28260] usb 7-1: USB disconnect, device number 3 [ 2667.858900][ T7823] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 2668.083578][ T7823] netlink: 164 bytes leftover after parsing attributes in process `syz.6.9058'. [ 2668.101567][T14997] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 2668.140017][T14997] usb 4-1: Invalid ep0 maxpacket: 16 [ 2668.283287][T14997] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 2668.318894][T14997] usb 4-1: Invalid ep0 maxpacket: 16 [ 2668.324686][T14997] usb usb4-port1: unable to enumerate USB device [ 2668.686739][ T7866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2668.779134][ T7866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2668.882071][T28260] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2669.175668][T28260] usb 3-1: Using ep0 maxpacket: 16 [ 2669.230755][T28260] usb 3-1: config 0 has no interfaces? [ 2669.264632][T28260] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2669.288348][T28260] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2669.312922][T28260] usb 3-1: Manufacturer: syz [ 2669.350014][T28260] usb 3-1: config 0 descriptor?? [ 2669.574425][ T7882] FAULT_INJECTION: forcing a failure. [ 2669.574425][ T7882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2669.616124][ T7882] CPU: 1 UID: 0 PID: 7882 Comm: syz.3.9066 Not tainted syzkaller #0 PREEMPT(full) [ 2669.616141][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2669.616148][ T7882] Call Trace: [ 2669.616153][ T7882] [ 2669.616159][ T7882] dump_stack_lvl+0x189/0x250 [ 2669.616176][ T7882] ? __pfx____ratelimit+0x10/0x10 [ 2669.616189][ T7882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2669.616202][ T7882] ? __pfx__printk+0x10/0x10 [ 2669.616212][ T7882] ? __might_fault+0xb0/0x130 [ 2669.616231][ T7882] should_fail_ex+0x414/0x560 [ 2669.616248][ T7882] _copy_from_iter+0x1de/0x1790 [ 2669.616262][ T7882] ? rcu_is_watching+0x15/0xb0 [ 2669.616276][ T7882] ? kmalloc_reserve+0xbd/0x290 [ 2669.616291][ T7882] ? __pfx__copy_from_iter+0x10/0x10 [ 2669.616302][ T7882] ? __build_skb_around+0x262/0x3f0 [ 2669.616318][ T7882] ? netlink_sendmsg+0x642/0xb30 [ 2669.616327][ T7882] ? skb_put+0x11b/0x210 [ 2669.616337][ T7882] netlink_sendmsg+0x6b2/0xb30 [ 2669.616350][ T7882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2669.616361][ T7882] ? __import_iovec+0x5d4/0x7f0 [ 2669.616374][ T7882] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2669.616389][ T7882] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2669.616399][ T7882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2669.616409][ T7882] __sock_sendmsg+0x21c/0x270 [ 2669.616423][ T7882] ____sys_sendmsg+0x505/0x830 [ 2669.616436][ T7882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2669.616454][ T7882] ___sys_sendmsg+0x21f/0x2a0 [ 2669.616465][ T7882] ? __pfx____sys_sendmsg+0x10/0x10 [ 2669.616491][ T7882] ? __fget_files+0x2a/0x420 [ 2669.616500][ T7882] ? __fget_files+0x3a0/0x420 [ 2669.616514][ T7882] __sys_sendmsg+0x164/0x220 [ 2669.616525][ T7882] ? __pfx___sys_sendmsg+0x10/0x10 [ 2669.616539][ T7882] ? __pfx_ksys_write+0x10/0x10 [ 2669.616554][ T7882] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2669.616568][ T7882] ? lockdep_hardirqs_on+0x9c/0x150 [ 2669.616581][ T7882] __do_fast_syscall_32+0xb6/0x2b0 [ 2669.616595][ T7882] ? lockdep_hardirqs_on+0x9c/0x150 [ 2669.616609][ T7882] do_fast_syscall_32+0x34/0x80 [ 2669.616627][ T7882] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2669.616640][ T7882] RIP: 0023:0xf7fc1539 [ 2669.616649][ T7882] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2669.616658][ T7882] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2669.616669][ T7882] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 2669.616676][ T7882] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2669.616682][ T7882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2669.616688][ T7882] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2669.616693][ T7882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2669.616708][ T7882] [ 2669.901783][ C1] vkms_vblank_simulate: vblank timer overrun [ 2670.038098][T14997] usb 5-1: USB disconnect, device number 124 [ 2670.291449][ T7884] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9068'. [ 2670.854490][ T7863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2670.974456][ T5904] usb 4-1: new low-speed USB device number 80 using dummy_hcd [ 2671.109271][ T7897] QAT: failed to copy from user. [ 2671.188150][ T5904] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 2671.202630][ T5904] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 2671.232713][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2671.254387][ T5904] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2671.272416][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2671.284661][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2671.300038][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2671.337037][ T5904] usb 4-1: string descriptor 0 read error: -22 [ 2671.348033][ T5904] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2671.359054][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2671.376960][ T5904] usb 4-1: config 0 descriptor?? [ 2671.395323][ T5904] hub 4-1:0.0: bad descriptor, ignoring hub [ 2671.457393][ T5904] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2671.471993][ T5904] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input295 [ 2672.266231][ T3500] usb 4-1: USB disconnect, device number 80 [ 2672.399585][ T5904] usb 3-1: USB disconnect, device number 15 [ 2672.644518][ T7912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2672.653497][ T7912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2672.728154][ T7915] netlink: 'syz.3.9072': attribute type 1 has an invalid length. [ 2672.836167][ T7916] QAT: failed to copy from user. [ 2672.975827][ T7920] fuse: Bad value for 'fd' [ 2673.201158][ T5904] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2673.435251][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2673.466367][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 2673.466380][ T30] audit: type=1804 audit(1761764257.398:4794): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9076" name="file0" dev="ramfs" ino=229432 res=1 errno=0 [ 2673.493177][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 2673.508904][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9076'. [ 2673.526843][ T5904] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2673.535353][ T5904] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2673.547083][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9076'. [ 2673.572254][ T5904] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2673.586008][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9076'. [ 2673.636152][ T5904] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2673.701404][ T10] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2673.711853][ T5904] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2673.726287][ T10] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2673.740304][ T10] usb 7-1: Product: syz [ 2673.749838][ T5904] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2673.759192][ T10] usb 7-1: SerialNumber: syz [ 2673.773015][ T10] usb 7-1: config 0 descriptor?? [ 2673.783906][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2673.799526][ T10] hso 7-1:0.0: Not our interface [ 2674.025440][ T5904] usb 5-1: GET_CAPABILITIES returned 0 [ 2674.099297][ T5904] usbtmc 5-1:16.0: can't read capabilities [ 2674.342499][ T7918] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 2674.349812][ T10] usb 5-1: USB disconnect, device number 125 [ 2674.868307][ T3500] usb 7-1: USB disconnect, device number 4 [ 2674.996828][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2675.241033][ T10] usb 3-1: config 0 has no interfaces? [ 2675.256011][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2675.273030][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2675.291715][ T10] usb 3-1: config 0 descriptor?? [ 2675.483578][ T7939] FAULT_INJECTION: forcing a failure. [ 2675.483578][ T7939] name failslab, interval 1, probability 0, space 0, times 0 [ 2675.496319][ T7939] CPU: 1 UID: 0 PID: 7939 Comm: syz.6.9079 Not tainted syzkaller #0 PREEMPT(full) [ 2675.496343][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2675.496355][ T7939] Call Trace: [ 2675.496364][ T7939] [ 2675.496373][ T7939] dump_stack_lvl+0x189/0x250 [ 2675.496401][ T7939] ? __pfx____ratelimit+0x10/0x10 [ 2675.496423][ T7939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2675.496446][ T7939] ? __pfx__printk+0x10/0x10 [ 2675.496478][ T7939] should_fail_ex+0x414/0x560 [ 2675.496508][ T7939] should_failslab+0xa8/0x100 [ 2675.496528][ T7939] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2675.496553][ T7939] ? skb_clone+0x212/0x3a0 [ 2675.496570][ T7939] ? __skb_flow_dissect+0x408/0x68b0 [ 2675.496589][ T7939] skb_clone+0x212/0x3a0 [ 2675.496606][ T7939] ? llc_rcv+0x9d/0xd00 [ 2675.496626][ T7939] llc_rcv+0xbf/0xd00 [ 2675.496653][ T7939] ? __pfx_llc_rcv+0x10/0x10 [ 2675.496669][ T7939] __netif_receive_skb_core+0x3b9b/0x4380 [ 2675.496703][ T7939] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2675.496726][ T7939] ? arch_stack_walk+0xfc/0x150 [ 2675.496765][ T7939] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 2675.496785][ T7939] ? stack_trace_save+0x9c/0xe0 [ 2675.496806][ T7939] ? __pfx_stack_trace_save+0x10/0x10 [ 2675.496830][ T7939] ? stack_depot_save_flags+0x40/0x860 [ 2675.496858][ T7939] ? __lock_acquire+0xab9/0xd20 [ 2675.496883][ T7939] ? netif_receive_skb+0x115/0x790 [ 2675.496904][ T7939] ? netif_receive_skb+0x115/0x790 [ 2675.496928][ T7939] __netif_receive_skb+0x72/0x380 [ 2675.496955][ T7939] ? netif_receive_skb+0x115/0x790 [ 2675.496976][ T7939] netif_receive_skb+0x1cb/0x790 [ 2675.496996][ T7939] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 2675.497015][ T7939] ? __pfx_netif_receive_skb+0x10/0x10 [ 2675.497042][ T7939] ? tun_rx_batched+0x160/0x730 [ 2675.497064][ T7939] tun_rx_batched+0x1b9/0x730 [ 2675.497082][ T7939] ? __lock_acquire+0xab9/0xd20 [ 2675.497102][ T7939] ? __pfx_tun_rx_batched+0x10/0x10 [ 2675.497122][ T7939] ? tun_get_user+0x272f/0x3e90 [ 2675.497143][ T7939] tun_get_user+0x2b65/0x3e90 [ 2675.497161][ T7939] ? tun_get_user+0x6f6/0x3e90 [ 2675.497180][ T7939] ? tun_get_user+0x272f/0x3e90 [ 2675.497202][ T7939] ? aa_file_perm+0x44d/0x1550 [ 2675.497217][ T7939] ? __pfx_tun_get_user+0x10/0x10 [ 2675.497245][ T7939] ? __lock_acquire+0xab9/0xd20 [ 2675.497263][ T7939] ? ref_tracker_alloc+0x318/0x460 [ 2675.497271][ T7939] ? __lock_acquire+0xab9/0xd20 [ 2675.497281][ T7939] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2675.497294][ T7939] ? tun_get+0x1c/0x2f0 [ 2675.497307][ T7939] ? tun_get+0x1c/0x2f0 [ 2675.497317][ T7939] ? tun_get+0x1c/0x2f0 [ 2675.497330][ T7939] tun_chr_write_iter+0x113/0x200 [ 2675.497342][ T7939] vfs_write+0x5c9/0xb30 [ 2675.497359][ T7939] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2675.497372][ T7939] ? __pfx_vfs_write+0x10/0x10 [ 2675.497390][ T7939] ? __fget_files+0x2a/0x420 [ 2675.497404][ T7939] ksys_write+0x145/0x250 [ 2675.497416][ T7939] ? exc_page_fault+0x82/0x100 [ 2675.497430][ T7939] ? __pfx_ksys_write+0x10/0x10 [ 2675.497444][ T7939] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2675.497457][ T7939] ? lockdep_hardirqs_on+0x9c/0x150 [ 2675.497471][ T7939] __do_fast_syscall_32+0xb6/0x2b0 [ 2675.497485][ T7939] ? lockdep_hardirqs_on+0x9c/0x150 [ 2675.497499][ T7939] do_fast_syscall_32+0x34/0x80 [ 2675.497512][ T7939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2675.497525][ T7939] RIP: 0023:0xf70dd539 [ 2675.497535][ T7939] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2675.497544][ T7939] RSP: 002b:00000000f54cd520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2675.497556][ T7939] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000580 [ 2675.497563][ T7939] RDX: 0000000000000016 RSI: 00000000f7475ff4 RDI: 0000000000000000 [ 2675.497569][ T7939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2675.497575][ T7939] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2675.497581][ T7939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2675.497595][ T7939] [ 2675.979774][ T7941] FAULT_INJECTION: forcing a failure. [ 2675.979774][ T7941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2676.042616][ T7941] CPU: 0 UID: 0 PID: 7941 Comm: syz.4.9080 Not tainted syzkaller #0 PREEMPT(full) [ 2676.042642][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2676.042654][ T7941] Call Trace: [ 2676.042662][ T7941] [ 2676.042670][ T7941] dump_stack_lvl+0x189/0x250 [ 2676.042699][ T7941] ? __pfx____ratelimit+0x10/0x10 [ 2676.042721][ T7941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2676.042743][ T7941] ? __pfx__printk+0x10/0x10 [ 2676.042761][ T7941] ? __might_fault+0xb0/0x130 [ 2676.042795][ T7941] should_fail_ex+0x414/0x560 [ 2676.042821][ T7941] _copy_from_iter+0x1de/0x1790 [ 2676.042843][ T7941] ? rcu_is_watching+0x15/0xb0 [ 2676.042865][ T7941] ? kmalloc_reserve+0xbd/0x290 [ 2676.042888][ T7941] ? __pfx__copy_from_iter+0x10/0x10 [ 2676.042907][ T7941] ? __build_skb_around+0x262/0x3f0 [ 2676.042934][ T7941] ? netlink_sendmsg+0x642/0xb30 [ 2676.042950][ T7941] ? skb_put+0x11b/0x210 [ 2676.042978][ T7941] netlink_sendmsg+0x6b2/0xb30 [ 2676.043010][ T7941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2676.043030][ T7941] ? __import_iovec+0x5d4/0x7f0 [ 2676.043048][ T7941] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2676.043074][ T7941] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2676.043092][ T7941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2676.043110][ T7941] __sock_sendmsg+0x21c/0x270 [ 2676.043140][ T7941] ____sys_sendmsg+0x505/0x830 [ 2676.043163][ T7941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2676.043196][ T7941] ___sys_sendmsg+0x21f/0x2a0 [ 2676.043216][ T7941] ? __pfx____sys_sendmsg+0x10/0x10 [ 2676.043266][ T7941] ? __fget_files+0x2a/0x420 [ 2676.043282][ T7941] ? __fget_files+0x3a0/0x420 [ 2676.043308][ T7941] __sys_sendmsg+0x164/0x220 [ 2676.043329][ T7941] ? __pfx___sys_sendmsg+0x10/0x10 [ 2676.043355][ T7941] ? __pfx_ksys_write+0x10/0x10 [ 2676.043381][ T7941] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2676.043406][ T7941] ? lockdep_hardirqs_on+0x9c/0x150 [ 2676.043428][ T7941] __do_fast_syscall_32+0xb6/0x2b0 [ 2676.043450][ T7941] ? lockdep_hardirqs_on+0x9c/0x150 [ 2676.043473][ T7941] do_fast_syscall_32+0x34/0x80 [ 2676.043493][ T7941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2676.043512][ T7941] RIP: 0023:0xf700d539 [ 2676.043528][ T7941] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2676.043543][ T7941] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2676.043562][ T7941] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 2676.043574][ T7941] RDX: 0000000004004050 RSI: 0000000000000000 RDI: 0000000000000000 [ 2676.043583][ T7941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2676.043593][ T7941] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2676.043604][ T7941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2676.043627][ T7941] [ 2676.322904][ C0] vkms_vblank_simulate: vblank timer overrun [ 2676.410329][ T7946] FAULT_INJECTION: forcing a failure. [ 2676.410329][ T7946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2676.426676][ T7946] CPU: 1 UID: 0 PID: 7946 Comm: syz.4.9082 Not tainted syzkaller #0 PREEMPT(full) [ 2676.426702][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2676.426712][ T7946] Call Trace: [ 2676.426719][ T7946] [ 2676.426728][ T7946] dump_stack_lvl+0x189/0x250 [ 2676.426754][ T7946] ? __pfx____ratelimit+0x10/0x10 [ 2676.426774][ T7946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2676.426795][ T7946] ? __pfx__printk+0x10/0x10 [ 2676.426823][ T7946] should_fail_ex+0x414/0x560 [ 2676.426853][ T7946] _copy_to_user+0x31/0xb0 [ 2676.426876][ T7946] simple_read_from_buffer+0xe1/0x170 [ 2676.426905][ T7946] proc_fail_nth_read+0x1b3/0x220 [ 2676.426929][ T7946] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2676.426952][ T7946] ? rw_verify_area+0x2a6/0x4d0 [ 2676.426972][ T7946] ? __lock_acquire+0xab9/0xd20 [ 2676.426985][ T7946] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2676.427012][ T7946] vfs_read+0x200/0xa30 [ 2676.427032][ T7946] ? fdget_pos+0x247/0x320 [ 2676.427052][ T7946] ? __pfx___mutex_lock+0x10/0x10 [ 2676.427074][ T7946] ? __pfx_vfs_read+0x10/0x10 [ 2676.427095][ T7946] ? __fget_files+0x2a/0x420 [ 2676.427113][ T7946] ? __fget_files+0x3a0/0x420 [ 2676.427127][ T7946] ? __fget_files+0x2a/0x420 [ 2676.427149][ T7946] ksys_read+0x145/0x250 [ 2676.427171][ T7946] ? __pfx_ksys_read+0x10/0x10 [ 2676.427194][ T7946] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2676.427216][ T7946] ? lockdep_hardirqs_on+0x9c/0x150 [ 2676.427240][ T7946] __do_fast_syscall_32+0xb6/0x2b0 [ 2676.427261][ T7946] ? lockdep_hardirqs_on+0x9c/0x150 [ 2676.427284][ T7946] do_fast_syscall_32+0x34/0x80 [ 2676.427305][ T7946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2676.427324][ T7946] RIP: 0023:0xf700d539 [ 2676.427341][ T7946] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2676.427356][ T7946] RSP: 002b:00000000f53fd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2676.427375][ T7946] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53fd620 [ 2676.427387][ T7946] RDX: 000000000000000f RSI: 00000000f73a5ff4 RDI: 0000000000000000 [ 2676.427396][ T7946] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2676.427407][ T7946] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2676.427418][ T7946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2676.427445][ T7946] [ 2676.975991][ T5904] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2677.431654][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 2677.461133][ T3500] usb 3-1: USB disconnect, device number 16 [ 2677.487837][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2677.528716][ T5904] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 2677.563529][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2677.600016][ T5904] usb 5-1: config 0 descriptor?? [ 2677.628979][ T5904] dvb-usb: found a 'TeVii S662' in warm state. [ 2677.646730][ T5904] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2677.705663][ T5904] dvb-usb: bulk message failed: -22 (2/0) [ 2677.735089][ T5904] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2677.759988][ T5904] dvbdev: DVB: registering new adapter (TeVii S662) [ 2677.766874][ T5904] usb 5-1: media controller created [ 2677.772683][ T5904] dvb-usb: bulk message failed: -22 (6/0) [ 2677.778848][ T5904] dw2102: i2c transfer failed. [ 2677.783745][ T5904] dvb-usb: bulk message failed: -22 (6/0) [ 2677.789748][ T5904] dw2102: i2c transfer failed. [ 2677.794547][ T5904] dvb-usb: bulk message failed: -22 (6/0) [ 2677.801026][ T5904] dw2102: i2c transfer failed. [ 2677.805960][ T5904] dvb-usb: bulk message failed: -22 (6/0) [ 2677.811870][ T5904] dw2102: i2c transfer failed. [ 2677.816777][ T5904] dvb-usb: bulk message failed: -22 (6/0) [ 2677.826443][ T5904] dw2102: i2c transfer failed. [ 2677.831353][ T7951] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 2677.843252][ T7951] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 2677.851660][ T7951] CPU: 0 UID: 0 PID: 7951 Comm: syz.4.9084 Not tainted syzkaller #0 PREEMPT(full) [ 2677.860933][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2677.871065][ T7951] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040 [ 2677.877126][ T7951] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 fd 94 78 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42 [ 2677.896824][ T7951] RSP: 0018:ffffc900037178c8 EFLAGS: 00010202 [ 2677.902894][ T7951] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 2677.910852][ T7951] RDX: ffffffff87ad2455 RSI: ffffffff8ee81bb0 RDI: 0000000000001900 [ 2677.918817][ T7951] RBP: 0000000000000000 R08: ffff88802e57dac0 R09: 0000000000000002 [ 2677.926792][ T7951] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 2677.934756][ T7951] R13: 1ffff11005150984 R14: 0000000000000001 R15: ffff888028a84c28 [ 2677.942722][ T7951] FS: 0000000000000000(0000) GS:ffff88812613e000(0063) knlGS:00000000f53fdb40 [ 2677.951654][ T7951] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2677.958234][ T7951] CR2: 000000002f323ffc CR3: 00000000431a0000 CR4: 00000000003526f0 [ 2677.966213][ T7951] Call Trace: [ 2677.969484][ T7951] [ 2677.972420][ T7951] __i2c_transfer+0x874/0x2170 [ 2677.977266][ T7951] ? i2c_transfer+0x120/0x3a0 [ 2677.981946][ T7951] ? __pfx___i2c_transfer+0x10/0x10 [ 2677.987144][ T7951] ? rt_mutex_lock_nested+0x172/0x1e0 [ 2677.992513][ T7951] ? i2c_transfer+0x120/0x3a0 [ 2677.997185][ T7951] i2c_transfer+0x25b/0x3a0 [ 2678.001768][ T7951] ? __pfx_i2c_transfer+0x10/0x10 [ 2678.006864][ T7951] ? _copy_from_user+0x94/0xb0 [ 2678.011638][ T7951] i2cdev_ioctl_rdwr+0x460/0x740 [ 2678.016666][ T7951] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 2678.021777][ T7951] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2678.027402][ T7951] ? __fget_files+0x3a0/0x420 [ 2678.032065][ T7951] ? __fget_files+0x2a/0x420 [ 2678.036669][ T7951] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2678.042208][ T7951] __ia32_compat_sys_ioctl+0x543/0x840 [ 2678.047772][ T7951] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2678.053756][ T7951] ? __se_sys_futex_time32+0x360/0x3e0 [ 2678.059212][ T7951] ? rcu_is_watching+0x15/0xb0 [ 2678.063964][ T7951] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2678.070629][ T7951] ? lockdep_hardirqs_on+0x9c/0x150 [ 2678.075817][ T7951] __do_fast_syscall_32+0xb6/0x2b0 [ 2678.081011][ T7951] ? lockdep_hardirqs_on+0x9c/0x150 [ 2678.086209][ T7951] do_fast_syscall_32+0x34/0x80 [ 2678.091094][ T7951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2678.097457][ T7951] RIP: 0023:0xf700d539 [ 2678.101523][ T7951] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2678.121120][ T7951] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2678.129529][ T7951] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 2678.137520][ T7951] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 2678.145492][ T7951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2678.153460][ T7951] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2678.161424][ T7951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2678.169399][ T7951] [ 2678.172503][ T7951] Modules linked in: [ 2678.176476][ C0] vkms_vblank_simulate: vblank timer overrun [ 2678.183202][ T7951] ---[ end trace 0000000000000000 ]--- [ 2678.211833][ T7951] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040 [ 2678.218124][ T7951] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 fd 94 78 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42 [ 2678.258559][ T7951] RSP: 0018:ffffc900037178c8 EFLAGS: 00010202 [ 2678.282551][ T7951] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 2678.290870][ T7951] RDX: ffffffff87ad2455 RSI: ffffffff8ee81bb0 RDI: 0000000000001900 [ 2678.301692][ T7951] RBP: 0000000000000000 R08: ffff88802e57dac0 R09: 0000000000000002 [ 2678.309918][ T7951] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 2678.331065][ T7966] QAT: failed to copy from user. [ 2678.378159][ T7969] QAT: failed to copy from user. [ 2678.409936][ T7951] R13: 1ffff11005150984 R14: 0000000000000001 R15: ffff888028a84c28 [ 2678.409954][ T7951] FS: 0000000000000000(0000) GS:ffff88812613e000(0063) knlGS:00000000f53fdb40 [ 2678.409965][ T7951] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2678.409972][ T7951] CR2: 0000000080071018 CR3: 00000000431a0000 CR4: 00000000003526f0 [ 2678.409985][ T7951] Kernel panic - not syncing: Fatal exception [ 2678.410249][ T7951] Kernel Offset: disabled