last executing test programs: 9.705279239s ago: executing program 4 (id=2045): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000000)=@fragment={0x3b, 0x0, 0x1, 0x0, 0x0, 0x6, 0x68}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = memfd_secret(0x80000) getsockname$l2tp6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r10, 0x8b1b, &(0x7f0000000340)='ADfa]5w:') faccessat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x38) socket(0x200000000000011, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 8.108465892s ago: executing program 1 (id=2047): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x82, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x3b, 0x0, [{0x0, 0x9, "e256b28c590300"}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0xa, "0000000000800000"}, {0x0, 0xa, "73bc23f9ffffffa3"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101140, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x37) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xccb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xa, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1, 0x7f}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r7, 0x540b, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0xc048aeca, &(0x7f0000000080)) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x24}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000011}, 0x8890) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0), 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f0000000000)={0x0, 0xd, 0x2, {0x2, 0x4}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.89620292s ago: executing program 4 (id=2048): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1fc, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x3}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x1cc, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x1b0, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x78, 0x2, 0x0, 0x0, {{0x86, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd"}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x9, 0x6, "ebe6c48aa90c9330f8"}}}, @TCF_EM_CONTAINER={0x74, 0x7, 0x0, 0x0, {{0x5, 0x0, 0xb}, "d0fa3d16cd50d147bab4e8cc66b89a2f2ddd8d0b788aa8b69311701d1c85ab32acb6397660ea603b182034545dd0bd1327d2665d5a78a956ac2ec9921388b37854565074bc2cf7610bacd71b29b6291a2dbc80bf91fea392ac67adb245b0a25f26f1ee3e93"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd48}}}]}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x8000}, {0x558a, 0x5, 0x71, 0x6, 0x8, 0x1, 0x1}}}, @TCF_EM_IPT={0x30, 0x2, 0x0, 0x0, {{0x875, 0x9, 0x69}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0xd5}, {0x1ff, 0x3, 0x6, 0xd1d020644eb0ea46, 0x2, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4, 0x8, 0x6}, {0x2, 0x1, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0xb7cd}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}]}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000440)={0x1, 0x0, r1}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 7.76292991s ago: executing program 4 (id=2049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x604040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socket$unix(0x1, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000006180)='./mnt\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) semctl$GETNCNT(0x0, 0x1, 0xe, 0x0) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) 6.265971969s ago: executing program 3 (id=2053): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x40) fcntl$notify(r0, 0x402, 0x69) syz_open_dev$sndpcmp(0x0, 0x203, 0x8200) openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) r1 = epoll_create(0x401) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fallocate(r3, 0x0, 0x3, 0x7fffffffffffffff) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x1d, 0x1, 0x2) syz_open_procfs(0x0, 0x0) r4 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) syz_usb_disconnect(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) close_range(r4, r1, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x771681, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000000000)='R\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf2', 0xfffffffffffffffa) 6.08911549s ago: executing program 4 (id=2054): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x17) r3 = openat$cgroup_root(0xffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r2, r3, 0x1e, 0x0, @void}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_open_dev$I2C(&(0x7f0000000080), 0x101, 0x400400) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010124c2a036c99e08f54500000008000300922fa4ae0caffe4c3722d515fe63c4f1cf808a76ae0a264307ad7ac10ca3516ff721acb735f3463228240f322622b0939d1954755dcda207b5e37f0db63d6a92", @ANYRES32=r8, @ANYBLOB="04003400"], 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 5.877106081s ago: executing program 4 (id=2055): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="4000000010003904000000000000000008000000b77b0eb59a31890c233a55617ee6773477d42080c45e85663b354e4fd915d710cd617a110aece9425ceac6efc254b6c8113167698f54fcf8a655d13c668f4fdfc15174bab7ca86381f0171c971a186bf019e1f4e68ba103094c15a25406e24ebae057b05fb0ed32ebbbef997fc3201b37e64573f7985", @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5800000010003904faffffff0000000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000003800128008000100677265002c0002800800040009000000080001007c190e4c48b80b89b2be3ec63d36b619cefd52ddf8303367e6f6c0d0bab55002706e0545db9c65328974119e9f955ba4c458d89dd3de83bbeee157efbcaea2fffba10931f214548bae701bb2af6a75a67d7e84fa8fa0f048", @ANYRES32=r4, @ANYBLOB="0600020000c00000080014009d000000060011004e210000"], 0x58}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, 0x4}) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x3fe, 0x8100) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f00000000c0)={0x9, 0x1a, 0x5, 0x5, "5a1348286f34d0f60e4c439cb062c41f307db4809d429c23d8e1f7e6ced1b686"}) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r8, 0x1000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82187201, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NFT_BATCH(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000ec000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800402d7b54b30d4000000003540000000c0a1f02000000000000000001000000090002007332000000000900010073797a300000000028000380240000800900090073797a30000000000400018010000780080001006e617400040002801400000010000100"/216], 0xd8}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x19) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000ff000003006269746d61703a697000000005000400000000000900020073797a3000000000240007800a01019e312e5b92ac1414280c0001800800014080ffffff050014000200000005000500020000000500010006000000"], 0x6c}}, 0x0) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) 5.693136467s ago: executing program 1 (id=2056): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x1, 0x4) fchdir(r3) mkdirat(r3, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8f}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x2, 0x1, 0x4, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0xd, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xd, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8, 0x1]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) 4.886143605s ago: executing program 4 (id=2059): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) setresuid(0x0, 0x0, 0xee01) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4d, 0x6, 0x0, 0x4, 0x0, 0x2, 0x6c, 0x87a, 0x8000000000000, 0x80040000000000, 0x0, 0x9, 0x1, 0x0, 0x8ca, 0x8005], 0x2000, 0x3c6200}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x0, 0x2, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c], 0xeeee8000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000680)={&(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x1, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) 4.88166407s ago: executing program 2 (id=2060): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x8, 0x5, 0xc, 0x2, 0x0, [{0x57e3, 0x40, 0xe, '\x00', 0x2000}, {0x7, 0x7ff, 0x6, '\x00', 0x800}]}) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x10, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000100)={0x7, 0x0, 0x1005, 0x2, 0x2, {0x80000001, 0x4}, 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000180)=0x88) recvfrom$packet(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 4.276891803s ago: executing program 32 (id=2059): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) setresuid(0x0, 0x0, 0xee01) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4d, 0x6, 0x0, 0x4, 0x0, 0x2, 0x6c, 0x87a, 0x8000000000000, 0x80040000000000, 0x0, 0x9, 0x1, 0x0, 0x8ca, 0x8005], 0x2000, 0x3c6200}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x0, 0x2, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c], 0xeeee8000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000680)={&(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x1, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) 4.263827423s ago: executing program 3 (id=2062): socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215f", 0x1f0, 0x0, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f00000000c0)="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", 0x1f0, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x6c500, 0x0) (async) openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x6c500, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) (async) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 3.984640981s ago: executing program 0 (id=2063): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='environ\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$netlink(r3, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc) r4 = socket$inet6(0xa, 0x800, 0x800) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) sendto$inet6(r4, &(0x7f00000000c0)="9d", 0x1, 0x20000854, &(0x7f0000000240)={0xa, 0x4e22, 0x65f, @dev={0xfe, 0x80, '\x00', 0x20}, 0x6}, 0x1c) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x143b02) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x100f, 0x9, 0x3, 0x9, 0x5}}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) syz_open_dev$ndb(0x0, 0x0, 0x101000) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) openat(r2, &(0x7f0000000040)='./file0\x00', 0x24a82, 0x6a) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, 0x0, 0x0, 0x6, 0x75, 0x6, 0x8, 0x79, 0x0}) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) 3.809120331s ago: executing program 2 (id=2064): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x81}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r3, 0x1000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x1b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 3.658993816s ago: executing program 2 (id=2065): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) (fail_nth: 9) 3.357161826s ago: executing program 2 (id=2066): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x82, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x3b, 0x0, [{0x0, 0x9, "e256b28c590300"}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0xa, "0000000000800000"}, {0x0, 0xa, "73bc23f9ffffffa3"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101140, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x37) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xccb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xa, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1, 0x7f}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r7, 0x540b, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0xc048aeca, &(0x7f0000000080)) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x24}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000011}, 0x8890) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0), 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f0000000000)={0x0, 0xd, 0x2, {0x2, 0x4}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.646357479s ago: executing program 3 (id=2067): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x0, 0x7fff}, 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003020000ec0b000007"], 0x48) r2 = openat$cuse(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x8000000000, 0x3, 0x8, 0x0, 0x80, {0x5, 0x80000000000, 0x1, 0xfffffffffffffffa, 0x16f, 0xdbf, 0x10, 0x0, 0x0, 0x8000, 0x2, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) write$FUSE_DIRENT(r2, &(0x7f0000000a40)={0x148, 0xfffffffffffffffe, r4, [{0x3, 0x81, 0x3, 0x9, '{-@'}, {0x4, 0x7, 0x2, 0x0, '}%'}, {0x6, 0xfff, 0xe, 0x4, '/dev/qrtr-tun\x00'}, {0x6, 0x5, 0xe, 0xfffff55c, '/dev/qrtr-tun\x00'}, {0x1, 0x80000001, 0x2, 0x7ff, '\\/'}, {0x1, 0x2, 0xe, 0x6a29, '/dev/qrtr-tun\x00'}, {0x5, 0x1, 0x0, 0x4}, {0x2, 0x1, 0xe, 0x6, '/dev/qrtr-tun\x00'}, {0x4, 0x2a4, 0x2, 0x2, '[*'}]}, 0x148) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000200)="0015e1d04ec7a5eba0054c6013810527c4a692d8f90a3ccc22360b27114a4656dcd59478a3d67278b3d32f77bd67112c2f4b27fa622fe1524ddd8969a7ac3e2c03785dfd416add0168419084fd8b07cf58c7efb62adeb0ea9261c1fd31988bafe5d344405c79b3cbb5d01a4cc68775afc8ec7accf418e99d7d86143390df3715b6ab156d2bef56d8e4b250c3b7e6128b8736a06079b7de557de4ce5c6c96c214fb9b85aeb1ff4b187ef482bb476a4f5b97d0522af4e3089975704fe5a994aa753ce5b9926fd27a08560b7c21da2fb18ed89259107858edbe465d5320", 0xdc}, {&(0x7f0000000300)="29579a04fbaf09c5dee11662b08ed7c73b372c0d71766c787c82d35af8496e8da01ec54b745f20fe2223c42b149ce71eaf8377fc39f65a0d47b28322d751fced486498586bb80de436c788669fcf8b364fd99493e914a60bfc836a338e5ae073dfa005792086eb09ba439bde071077f9be9996a0e6cda504df58e1286b042a71291546b5cd17c7c68383d50c490bf3795baeeee68a01deb7f2476e0c4b5e43ebf98405593dc917d6198d5083f542484682fbb074985ad9e06c4e8ba19836e7f477656fad922b03cd5381441b", 0xcc}, {&(0x7f0000000140)="e92183663c963a1f9b3f80b32dd7a6d9803cdd9b53f6297e25998334541aad52a9be2382c4b5c934b3166905db0d3a0aa3e38bd98e1be8f9d1987195bcd0828e05f546f6099e14c612329b68cd8695bb39d9104eeef26607441841daa8516d7250a8437266553472edbed2f1893e7e2d317a36998b0aed", 0x77}, {&(0x7f0000000840)="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", 0xde}, {&(0x7f00000000c0)="1d2314f1e516d1aa6278e2d66ea1ba8891bf51e518e88d8dfc05d627af7b44ca4f12636d30bc0a", 0x61}, {&(0x7f0000000780)="0362db61cf3be212642a29b8eb07adbb8d49e80a902404663bd5f3a2986009b5b74698c02baf76b7fc10d9459cfd824c2360b46f4017e2ce3167c431d772d0b45e49bcba4228077c9338da52b6ce2814d7bcbb8a5c70202ecca9caa022eac42c7b306c6fdbd5fa0540aa264f101fbecd86a77666acc0d51dcaa39b3f0edf9c407b5b0717342bd74b14c99666cc93f4223d9f375f7035c28c4c4085f0d5bdda53a878c7e133bf1be65e", 0xa9}, {&(0x7f0000000600)="2da8f3a48dab2d40676210ded149c9868d5b236a52ff7ae8c5fb99c7bf640ba01ad09299b1fca050652767cd61dfda399f604454f5caee7221f46dfd59a260fc0824efddac6ca48fd60c0f51b2ce0adbc5e54aa65c4d6d111348e39baa91fc3473d364f7b294f3301fffe2104ccf545c1aa6f8f18bfbf60fcdb2e74efc1cbf8ab0010558c7256f6181890f63d781964e734231a1204c5e993e6770fddaa201d29a4935fc22da23cd47fb75ac6836026bca2c121c1f59330bfd9c662b9e4cbed8498b99899c51e5295e86e8e4fe83d4c4c91d675555c34cf6961289468beeeeebacfcd96e13", 0xe5}, {&(0x7f0000000540)="cc3675b2a2f991331f19ff32e01f9d8ada22182464b31bcf32a7", 0x1a}], 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.570615001s ago: executing program 3 (id=2068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0xc8}}, 0x40095) close(r0) syz_open_dev$video(0x0, 0x7ff000, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000240)={0x16, 0x4, 0xea}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000436000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_connect(0x2, 0x4f, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0xc9, 0x66, 0x7c, 0x40, 0x1d50, 0x60c6, 0xafe7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x77, 0x2, 0x25, 0x84, 0x53, 0x0, [], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0x1, 0x2, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xff, 0x0, 0x6, [@generic={0x7, 0x5, "d57a3b2b6c"}]}}]}}, {{0x9, 0x4, 0x1d, 0x9, 0x1, 0x12, 0x7b, 0x60, 0x5, [], [{{0x9, 0x5, 0xa89115a815fe85a6, 0xa, 0x3ff, 0xe, 0x37}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000300), 0x8) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, &(0x7f0000000000)) openat$zero(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000a40)="1debb5002d", 0x5, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000280)={0xf, {"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", 0x1000}}, 0x1006) 2.431789321s ago: executing program 1 (id=2069): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x4, 0x2, 0x4, 0x0, 0xb}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x2, 0x1000c, 0x4, 0x23}, 0xb62d18fbf43bc210, 0xfffffffe, 0x0, 0xc, 0x0, 0x6}}) 2.405398144s ago: executing program 0 (id=2070): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f000000080034000800030008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x24004045}, 0x80) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f000000080034000800030008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x24004045}, 0x80) 2.366328393s ago: executing program 1 (id=2071): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x1000007, 0x30, 0xffffffffffffffff, 0xe40e6000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x48c4}, 0x20040091) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x1000040c, 0xffff}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r1, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x10, @private2, 0xfff}, @in6={0xa, 0x4e24, 0x2, @local, 0x4}, @in6={0xa, 0x4e21, 0x7a9, @private1, 0x3}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e23, 0x4, @remote, 0x3}, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ff}], 0x9c) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x2, {{0x2}}}}]}, 0x3c}}, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f0000000240)={0x0, 0x89b8, 0x8, 0x0, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000340)=ANY=[], 0x32600) close(r7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x92c}, 0x8) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.280936472s ago: executing program 0 (id=2072): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000000)=@fragment={0x3b, 0x0, 0x1, 0x0, 0x0, 0x6, 0x68}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = memfd_secret(0x80000) getsockname$l2tp6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r10, 0x8b1b, &(0x7f0000000340)='ADfa]5w:') faccessat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x38) socket(0x200000000000011, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 1.923391602s ago: executing program 1 (id=2073): pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRES64, @ANYRES32=r2, @ANYRES32, @ANYBLOB="59828e8c6fda824287bb35b8c462495d8cd099e2df5fb4cf9fd4e03453ea345ec1266e0b030e4211d6eedbc5704819387a168d963f63f99499a88e694bc2819a870798852bab3ccab948fb96a8ab83cc6550aa0e29e7a94b44c14eb5996467398569a0ee933db27a4ea31b59b16c5c8b753e882fe0b5c4bc83b27b0b"]) syz_fuse_handle_req(r2, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x3, {0x7, 0x29, 0x3c, 0x2100039, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_fuse_handle_req(r2, &(0x7f0000004280)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x78, 0xfffffffffffffff5, 0x4, {0x2000000000000003, 0xd, 0x0, {0x6, 0xfffffffffffffffa, 0xe2a, 0x1000, 0x4, 0x101, 0x2, 0x6d8, 0x6, 0x6000, 0x2, 0x0, 0x0, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="73656375726974712e667573008028466342cf67e654885e0a7e091fc13eaafa8ce5c8db3a067a9f3abd4421aa7323fb1ba876b754dd11c888043463436d62bcf634d15c003a2ca19dbd6493241d7bc7c9649363c19d813bad984ee414752b1094bf65d17e6f5569f3c053c6da16d98e828ccd98e9da1cbdac83124553842249a1265ba0bfe7ee37dc599b85d366c007de0f513ae5ebfe889fe432effd68f657c2d516bb7b19336c0c56cb12bb386eb8f2548b660e0b959147996302786b2f74f9"], 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xe}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x208, 0x3, 0xa, r4}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$binderfs(0xffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x802, 0x0) r5 = io_uring_setup(0xcbe, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x6, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0), 0x0) mremap(&(0x7f000019f000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00001f4000/0x4000)=nil) unshare(0x22020600) io_uring_setup(0x202af7, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) 1.01246258s ago: executing program 2 (id=2074): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0xc0000101, 0x0, 0x40000000008000}]}) 657.088696ms ago: executing program 2 (id=2075): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xb37, 0x3, 0x8, 0x7f, 0x7}, 0x14) set_mempolicy(0x1, 0x0, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="00800000efef0000"]) 656.59745ms ago: executing program 1 (id=2076): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) close(0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f00007e2000/0x4000)=nil, 0x4000, 0x15) clock_getres(0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000002d00090027bd700000000000040000008814d2cac88a4d33c05eda9ddeab6bd70d05d6a68355f71b43a6284fb9fd8eef1c5c2a0660e8b01ec2a0df"], 0x14}}, 0x84) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x400120a0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x104000, 0x800, 0x9, 0x5}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x2000, {0x2a00, 0x80010000, 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}}) read$FUSE(0xffffffffffffffff, &(0x7f000000c400)={0x2020}, 0x2020) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0xfffffffffffffffc}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000160033060000000000000080e0000002000000000000000000000000ff020000000000000100000000000000000a00"/64, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d2320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000050000000000000003000000000000000000000000000000050000000000000004000000000000000000000002000000020000000a000418000000000000000048000200656362286369706865725f6e756c6c2900"/229], 0x138}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 544.290757ms ago: executing program 0 (id=2077): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}], 0x1c) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x460600, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/106}) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000540)={0x193, 0x16, &(0x7f0000000140)="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"}) r2 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r4, 0x108, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x5d}}}}, [@NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "799a4ab52653b798"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a5ca3ef726643989"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a84502bb395fb7ce2d61e6e62de76efd"}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000780)={0x3, 'caif0\x00', {0x8}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000800)=r1, 0x1) sendmsg$nl_generic(r2, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1dc, 0x17, 0x100, 0x2, 0x25dfdbfb, {0x1}, [@nested={0xd6, 0x117, 0x0, 0x1, [@nested={0x4, 0xd1}, @generic="949a523c1cad067d4756d95da8f79fbccaf098f53780bd1c93f1e43698af91390d6ef3fa87769eddd8a9b25a2b295c8ed782d1f3f9bb7eff7a4c7df77997b0a8be9fdf6279716ed6643b4f06860ba806fab038b5f71583dedbbaf108545441c55d8b974dc01d7f950e7a9ccd0f448d16f6695b1b4190fb", @generic="0fffd0bc72327506d7f59b7b8956e2357e7ca74aed37250a419f2aa78e4e153798f5a1237cbd074e2b36248b2cc27729d3eb729475162ce229f9f9150d6d8cf5d2d09bb3e528634d7546128807526e96bb547daa672a23"]}, @generic="a7892e3cafeddd849f7c64f9e4dbc80ed3f83af964c5d90d636ed7d7661da9c55a5ab09f5d87e23b0399517e4fc3c1eb8183f950a49458ab50be731cd104f6c00ed56ab614e1fe54ad4213c8da661af2a736b68464069d907f4d47a59d9fa6e40d7edf84d8aae305a7a7a8b03256888978bf1e31e8bc20fbe9913ce778405b990dd42c6fd67aa3894781a8503c2a118e988550de467ef667020e330d0c98b81453a7fc4ba8a1eebbbb063e9fce7f309562bf60780bb828613baa8f15c417f4db9bce8ddc5f5efc635c868d81", @typed={0x4, 0x3}, @typed={0x4, 0x42}, @typed={0x14, 0xff, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0xac, 0x0, 0x0, @uid=0xee00}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000b40)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000b00)=0x5}) ioctl$KDADDIO(r1, 0x4b34, 0x4) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x11, r2, 0x8000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000bc0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x20, 0x0, 0x0, 0x2, &(0x7f0000000b80)="47d8e163ae8a17cd195f5338199e88bde82e228a698777f610307471012d95833795edfc59", 0x8, 0x0, 0x1, {0x1, r7}}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000c00)={0xffff1000, 0x2000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000c40)={'tunl0\x00', 0x800}) openat$cuse(0xffffff9c, &(0x7f0000000c80), 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000cc0)={0x77, ""/119}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000d40)={0xeeef0000, 0x111000}) r8 = openat$rtc(0xffffff9c, &(0x7f0000000d80), 0x200, 0x0) ioctl$RTC_IRQP_READ(r8, 0x8004700b, &(0x7f0000000dc0)) open$dir(&(0x7f0000000e00)='./file0\x00', 0x300, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000e80)) 543.88562ms ago: executing program 3 (id=2078): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socket(0x0, 0x4, 0x10000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x84}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1e}, @l2cap_cid_signaling={{0x1a}, [@l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x101}}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0x1}}, @l2cap_move_chan_rsp={{0xf, 0x4, 0x4}, {0xfff, 0xf}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7fff}}]}}, 0x23) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x80000001, 0xa2c, 0x0, 0x0, 0xc, 0x0, 0xffffffff, 0x3000007}}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='sourcee\'\xb6\x1c\xach\xa0(\x9b\x10O\xd0\b\xdf\xe1\xde@\xf8\xa8\xa9\x9b\xb27Z\xec\xf9@\xaar\xa4\xb0\xbdG\f\xdcvV\x1f\n\xa7@\x9d\'ne\xfb\t\x92\x0f\xc67D^\x8e\xfaY\xb3\x10$\x9cO\xcc\x96=\xda;[\x82jQfp?\x16\xf3\xeb\xa7\x06#Ig\x191\xfd\xf4\x83\xd3\xc4\xfaT::\x9e\xaf\x9a\x80%|l\'\x86\x97lB\x1b\xac\xe8\x1f\x8e\xa6\xec}iB\xd9\x9e\xfb\x83\xb7cda\x18]\x06f0\xf6*}\xb95\xcf\xed\xd7*-\xa2\x80\xbe\x16\xf1+', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca\xae\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce*\xa4\x8aJ$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\xfe\x1e\xb6\xf47u\xa7\x1c\xf5\"K\f\x03i\xba', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 185.587157ms ago: executing program 0 (id=2079): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 111.099486ms ago: executing program 3 (id=2080): add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x4f, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x4004020) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x903d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x4, 0x9}, &(0x7f0000000000)=0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x102, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) r5 = inotify_init1(0x0) inotify_add_watch(r5, 0x0, 0x400) r6 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x2c0400, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r8 = fsopen(&(0x7f0000000400)='befs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b\xa30\\o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b [ 485.315678][T11985] dump_stack_lvl+0x189/0x250 [ 485.315703][T11985] ? __pfx____ratelimit+0x10/0x10 [ 485.315729][T11985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.315748][T11985] ? __pfx__printk+0x10/0x10 [ 485.315770][T11985] ? __might_fault+0xb0/0x130 [ 485.315802][T11985] should_fail_ex+0x414/0x560 [ 485.315829][T11985] _copy_from_user+0x2d/0xb0 [ 485.315849][T11985] get_old_itimerspec32+0xa2/0x220 [ 485.315874][T11985] ? __pfx_get_old_itimerspec32+0x10/0x10 [ 485.315899][T11985] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 485.315927][T11985] __ia32_sys_timer_settime32+0x152/0x250 [ 485.315951][T11985] ? __pfx___ia32_sys_timer_settime32+0x10/0x10 [ 485.315986][T11985] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.316012][T11985] __do_fast_syscall_32+0xb6/0x2b0 [ 485.316030][T11985] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.316055][T11985] do_fast_syscall_32+0x34/0x80 [ 485.316072][T11985] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.316091][T11985] RIP: 0023:0xf707e539 [ 485.316106][T11985] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 485.316120][T11985] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000104 [ 485.316138][T11985] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000006e4642df [ 485.316151][T11985] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 485.316161][T11985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 485.316171][T11985] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 485.316181][T11985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 485.316207][T11985] [ 485.528123][T11725] usb 3-1: Using ep0 maxpacket: 8 [ 485.534912][T11725] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 485.546212][T11725] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 485.556253][T11725] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 485.566224][T11725] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.579227][T11725] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 485.588290][T11725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.826115][T11979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.891816][T11979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.929041][T11725] usb 3-1: GET_CAPABILITIES returned 0 [ 485.937459][T11725] usbtmc 3-1:16.0: can't read capabilities [ 486.116998][T11999] netlink: 'syz.1.1624': attribute type 4 has an invalid length. [ 486.124957][T11999] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1624'. [ 486.194311][ T9] usb 3-1: USB disconnect, device number 64 [ 486.296414][ T5877] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 486.418158][T11725] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 486.606546][T11725] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 486.646555][T11725] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 486.656880][T11998] binder: 11997:11998 ioctl c0306201 80000640 returned -22 [ 486.668233][T11725] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.709936][T11725] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 486.760118][T11725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.882097][T11725] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 486.921004][T11725] usb 2-1: invalid MIDI out EP 0 [ 487.241344][T11725] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 489.197043][T11728] usb 2-1: USB disconnect, device number 61 [ 489.290821][T11995] delete_channel: no stack [ 489.572982][ T5877] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 489.854130][T12016] netlink: 'syz.0.1630': attribute type 10 has an invalid length. [ 490.134848][T12016] bridge0: port 3(macsec0) entered disabled state [ 490.141501][T12016] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.148867][T12016] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.200736][T12016] bridge0: port 3(macsec0) entered blocking state [ 490.207787][T12016] bridge0: port 3(macsec0) entered forwarding state [ 490.214586][T12016] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.221708][T12016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.229090][T12016] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.236162][T12016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.304430][T12016] team0: Port device bridge0 added [ 491.248429][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 491.451916][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 491.501563][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 491.548269][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 491.578908][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 491.589263][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.596729][T12065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1642'. [ 491.652079][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 491.672188][T12065] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1642'. [ 491.681811][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.823658][T12074] tmpfs: Unknown parameter '‹˜žôø®¹çr%ÞÒ´\wÓ R(4æÀ;¯«a;‘ [ 491.823658][T12074] ž MU¶ÁgÊ6••&x@2<›5Ê„ëæ2TþóñÌ­Z5üÀwìšVý•þU„Í]©´±¡TΞ®m¼ÎùšÜçPåZ¼ª<M;€ëžxY9]gÅž‚‹ônñÛÆìæ;O‡‘Ûó훌u [ 491.823658][T12074] ~^à>Ƥùηr&­öœãàDòq.;ÙÂ쀯<2³A‡¦úU' [ 491.849838][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.898960][T12061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.912268][T12061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.922681][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 491.931921][T11720] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 491.942529][ T9] usbtmc 1-1:16.0: can't read capabilities [ 492.111168][T11720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.132821][T11720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.154496][ T9] usb 1-1: USB disconnect, device number 41 [ 492.174079][T11720] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 492.213691][T11720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.243615][T11720] usb 5-1: config 0 descriptor?? [ 492.693191][T12068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.702186][T12068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.085484][T11720] usbhid 5-1:0.0: can't add hid device: -71 [ 493.100360][T11720] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 493.206903][T11720] usb 5-1: USB disconnect, device number 50 [ 493.250375][T12097] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.805205][T12110] netlink: 868 bytes leftover after parsing attributes in process `syz.4.1652'. [ 494.680283][T12121] tmpfs: Unknown parameter '‹˜žôø®¹çr%ÞÒ´\wÓ R(4æÀ;¯«a;‘ [ 494.680283][T12121] ž MU¶ÁgÊ6••&x@2<›5Ê„ëæ2TþóñÌ­Z5üÀwìšVý•þU„Í]©´±¡TΞ®m¼ÎùšÜçPåZ¼ª<M;€ëžxY9]gÅž‚‹ônñÛÆìæ;O‡‘Ûó훌u [ 494.680283][T12121] ~^à>Ƥùηr&­öœãàDòq.;ÙÂ쀯<2³A‡¦úU' [ 495.892374][T11720] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 495.998458][T11728] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 496.068335][T11720] usb 1-1: Using ep0 maxpacket: 8 [ 496.076647][T11720] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 496.096968][T11720] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 496.119792][T11720] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 496.144670][T11720] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.165643][T11728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.175851][T11720] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 496.177061][T11728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.194868][T11720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.440260][T11728] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 496.461840][T11728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.867312][T11728] usb 2-1: config 0 descriptor?? [ 497.044492][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.068587][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.081292][T11720] usb 1-1: GET_CAPABILITIES returned 0 [ 497.086850][T11720] usbtmc 1-1:16.0: can't read capabilities [ 497.286696][T11720] usb 1-1: USB disconnect, device number 42 [ 497.305613][T12138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.331287][T12138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.082289][T11728] usbhid 2-1:0.0: can't add hid device: -71 [ 498.088491][T11728] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 498.122151][T11728] usb 2-1: USB disconnect, device number 62 [ 498.256837][ T5877] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 498.291434][T11725] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 498.580175][T11725] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 498.589357][T11725] usb 5-1: can't read configurations, error -61 [ 498.679350][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1668'. [ 498.819496][T11725] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 498.842351][T12171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1669'. [ 499.031204][T11725] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 499.043084][T11725] usb 5-1: can't read configurations, error -61 [ 499.068256][T11725] usb usb5-port1: attempt power cycle [ 499.448863][T11718] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 499.458686][T11725] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 499.595847][T11725] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 499.612810][T11725] usb 5-1: can't read configurations, error -61 [ 499.621812][T11718] usb 4-1: config 0 has no interfaces? [ 499.631775][T11718] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 499.641281][T11718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.686703][T11718] usb 4-1: Product: syz [ 499.695296][T11718] usb 4-1: Manufacturer: syz [ 499.703323][T11718] usb 4-1: SerialNumber: syz [ 499.715860][T11718] usb 4-1: config 0 descriptor?? [ 499.788349][T11725] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 499.831882][T12195] netlink: 'syz.0.1675': attribute type 10 has an invalid length. [ 499.871282][T11725] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 499.879165][T11725] usb 5-1: can't read configurations, error -61 [ 499.887952][T11725] usb usb5-port1: unable to enumerate USB device [ 499.952650][T12199] netlink: 'syz.0.1675': attribute type 10 has an invalid length. [ 500.675392][T12195] bond0: (slave netdevsim0): Releasing backup interface [ 500.751194][T12195] team0: Port device netdevsim0 added [ 500.943154][T12199] team0: Port device netdevsim0 removed [ 500.952734][T12199] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 501.530722][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.537181][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.798146][T11718] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 501.970170][T11718] usb 5-1: Using ep0 maxpacket: 8 [ 501.981307][T11718] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 501.999587][T11718] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 502.015580][T11718] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 502.026283][T11718] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.039623][T11718] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 502.048754][T11718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.148112][T11728] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 502.271807][T12212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.297752][T12212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.300013][T11728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.334923][T11718] usb 5-1: GET_CAPABILITIES returned 0 [ 502.336952][T11728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.346472][T11718] usbtmc 5-1:16.0: can't read capabilities [ 502.358161][T11728] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 502.377536][T11728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.383019][ T9] usb 4-1: USB disconnect, device number 53 [ 502.457179][T11728] usb 1-1: config 0 descriptor?? [ 502.595488][T11725] usb 5-1: USB disconnect, device number 55 [ 502.701523][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1684'. [ 502.913420][T12216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.924711][T12216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.993621][T12229] sctp: [Deprecated]: syz.3.1685 (pid 12229) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.993621][T12229] Use struct sctp_sack_info instead [ 503.016874][T12229] netlink: 'syz.3.1685': attribute type 9 has an invalid length. [ 503.031496][T12229] netlink: 'syz.3.1685': attribute type 6 has an invalid length. [ 503.047326][T12229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1685'. [ 503.203239][T11728] usbhid 1-1:0.0: can't add hid device: -71 [ 503.212175][T11728] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 503.241906][T11728] usb 1-1: USB disconnect, device number 43 [ 503.388199][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 503.505055][T12245] FAULT_INJECTION: forcing a failure. [ 503.505055][T12245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.522773][T12245] CPU: 1 UID: 0 PID: 12245 Comm: syz.4.1691 Not tainted syzkaller #0 PREEMPT(full) [ 503.522797][T12245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 503.522806][T12245] Call Trace: [ 503.522814][T12245] [ 503.522822][T12245] dump_stack_lvl+0x189/0x250 [ 503.522844][T12245] ? __pfx____ratelimit+0x10/0x10 [ 503.522867][T12245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.522885][T12245] ? __pfx__printk+0x10/0x10 [ 503.522919][T12245] should_fail_ex+0x414/0x560 [ 503.522944][T12245] strncpy_from_user+0x36/0x290 [ 503.522966][T12245] setxattr_copy+0x77/0x1d0 [ 503.522989][T12245] io_fsetxattr_prep+0x1c1/0x2b0 [ 503.523008][T12245] io_submit_sqes+0x917/0x1d30 [ 503.523055][T12245] __se_sys_io_uring_enter+0x2df/0x2b20 [ 503.523090][T12245] ? ksys_write+0x1cb/0x250 [ 503.523112][T12245] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 503.523130][T12245] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 503.523152][T12245] ? __pfx_vfs_write+0x10/0x10 [ 503.523175][T12245] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 503.523201][T12245] ? __fget_files+0x3a0/0x420 [ 503.523226][T12245] ? fput+0xa0/0xd0 [ 503.523243][T12245] ? ksys_write+0x22a/0x250 [ 503.523271][T12245] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 503.523295][T12245] __do_fast_syscall_32+0xb6/0x2b0 [ 503.523311][T12245] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.523336][T12245] do_fast_syscall_32+0x34/0x80 [ 503.523352][T12245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 503.523371][T12245] RIP: 0023:0xf704e539 [ 503.523386][T12245] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 503.523398][T12245] RSP: 002b:00000000f543e55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 503.523417][T12245] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000047bc [ 503.523430][T12245] RDX: 000000000000e41f RSI: 0000000000000001 RDI: 0000000000000000 [ 503.523440][T12245] RBP: 00000000fffffeb5 R08: 0000000000000000 R09: 0000000000000000 [ 503.523451][T12245] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 503.523461][T12245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 503.523490][T12245] [ 503.746767][ T9] usb 2-1: config 0 has an invalid interface number: 178 but max is 0 [ 503.764337][ T9] usb 2-1: config 0 has no interface number 0 [ 503.784368][ T9] usb 2-1: config 0 interface 178 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 503.801375][ T9] usb 2-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 503.814023][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.898689][ T9] usb 2-1: config 0 descriptor?? [ 503.934941][T12232] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 503.967092][ T5877] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 504.156381][T12260] netlink: 'syz.2.1692': attribute type 10 has an invalid length. [ 504.169129][T12260] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 504.178170][T12260] team0: Port device netdevsim0 added [ 504.189805][T12260] netlink: 'syz.2.1692': attribute type 10 has an invalid length. [ 504.198346][T12260] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 504.566737][T12260] team0: Port device netdevsim0 removed [ 505.128170][T12275] netlink: 'syz.4.1697': attribute type 10 has an invalid length. [ 505.148101][T11720] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 505.195087][T12276] netlink: 'syz.4.1697': attribute type 10 has an invalid length. [ 505.211123][T12275] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 505.218805][T12275] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 505.227081][T12275] bridge0: port 1(netdevsim0) entered disabled state [ 505.273722][T12275] team0: Port device netdevsim0 added [ 505.358362][T11720] usb 4-1: Using ep0 maxpacket: 8 [ 505.373611][T12276] team0: Port device netdevsim0 removed [ 505.410302][T12276] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 505.904380][T11720] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 505.918083][T11720] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 505.928418][T11720] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 505.938429][T11720] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.996129][T11720] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 506.008304][T11720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.150105][ T9] usb 2-1: string descriptor 0 read error: -71 [ 506.208851][ T9] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 506.235293][ T9] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 11 is not bulk. [ 506.250529][T12272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.261423][ T9] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 506.272305][T12272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.294277][ T9] usb 2-1: USB disconnect, device number 63 [ 506.308183][T11720] usb 4-1: GET_CAPABILITIES returned 0 [ 506.316978][T11720] usbtmc 4-1:16.0: can't read capabilities [ 506.462217][T12286] FAULT_INJECTION: forcing a failure. [ 506.462217][T12286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.477411][T12286] CPU: 1 UID: 0 PID: 12286 Comm: syz.2.1701 Not tainted syzkaller #0 PREEMPT(full) [ 506.477445][T12286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.477456][T12286] Call Trace: [ 506.477465][T12286] [ 506.477473][T12286] dump_stack_lvl+0x189/0x250 [ 506.477498][T12286] ? __pfx____ratelimit+0x10/0x10 [ 506.477522][T12286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.477543][T12286] ? __pfx__printk+0x10/0x10 [ 506.477564][T12286] ? __might_fault+0xb0/0x130 [ 506.477598][T12286] should_fail_ex+0x414/0x560 [ 506.477624][T12286] _copy_from_user+0x2d/0xb0 [ 506.477643][T12286] get_compat_msghdr+0xad/0x4a0 [ 506.477664][T12286] ? __pfx_get_compat_msghdr+0x10/0x10 [ 506.477692][T12286] ___sys_sendmsg+0x193/0x2a0 [ 506.477714][T12286] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.477766][T12286] ? __fget_files+0x2a/0x420 [ 506.477788][T12286] ? __fget_files+0x3a0/0x420 [ 506.477821][T12286] __sys_sendmsg+0x164/0x220 [ 506.477841][T12286] ? __pfx___sys_sendmsg+0x10/0x10 [ 506.477875][T12286] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.477902][T12286] __do_fast_syscall_32+0xb6/0x2b0 [ 506.477919][T12286] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.477945][T12286] do_fast_syscall_32+0x34/0x80 [ 506.477962][T12286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 506.477987][T12286] RIP: 0023:0xf70ae539 [ 506.478002][T12286] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 506.478015][T12286] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 506.478032][T12286] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 506.478044][T12286] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 506.478053][T12286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 506.478062][T12286] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 506.478071][T12286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 506.478096][T12286] [ 506.552423][ T9] usb 4-1: USB disconnect, device number 54 [ 506.778643][T12291] netlink: 'syz.1.1702': attribute type 27 has an invalid length. [ 508.185955][T11718] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 508.323284][T12323] netlink: 'syz.2.1711': attribute type 10 has an invalid length. [ 508.334616][T12323] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 508.343723][T12323] team0: Port device netdevsim0 added [ 508.357248][T12323] netlink: 'syz.2.1711': attribute type 10 has an invalid length. [ 508.365988][T12323] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 508.425222][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 508.435318][T11718] usb 4-1: not running at top speed; connect to a high speed hub [ 508.445292][T12325] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 508.461742][T11718] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 508.621558][T11718] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 508.700575][T11718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.728772][T11718] usb 4-1: Product: syz [ 508.744217][T11718] usb 4-1: Manufacturer: syz [ 508.756415][T11718] usb 4-1: SerialNumber: syz [ 508.756423][T12325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.786242][T11718] usb 4-1: bad CDC descriptors [ 509.039790][T11725] usb 4-1: USB disconnect, device number 55 [ 509.082243][T12333] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1715'. [ 509.190459][T12323] team0: Port device netdevsim0 removed [ 510.038242][T11728] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 510.188199][T11728] usb 4-1: Using ep0 maxpacket: 8 [ 510.195628][T11728] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 510.288566][T11728] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 510.299234][T11728] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 510.309670][T11728] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.318146][T11718] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 510.323170][T11728] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 510.560030][T11728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.639192][T11718] usb 5-1: device descriptor read/64, error -71 [ 510.799602][T12340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.809500][T12340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.833538][T11728] usb 4-1: GET_CAPABILITIES returned 0 [ 510.846328][T11728] usbtmc 4-1:16.0: can't read capabilities [ 510.928167][T11718] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 511.040782][ T5936] usb 4-1: USB disconnect, device number 56 [ 511.078129][T11718] usb 5-1: device descriptor read/64, error -71 [ 511.148419][T11728] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 511.208525][T11718] usb usb5-port1: attempt power cycle [ 511.446929][T11728] usb 2-1: device descriptor read/64, error -71 [ 511.688325][T11718] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 511.709914][T11718] usb 5-1: device descriptor read/8, error -71 [ 511.760934][T11728] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 511.983662][T12366] vcan0: tx drop: invalid da for name 0x00000000000000ee [ 512.028118][T11718] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 512.028191][T11728] usb 2-1: device descriptor read/64, error -71 [ 512.052789][T11718] usb 5-1: device descriptor read/8, error -71 [ 512.115689][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1728'. [ 512.149646][T11728] usb usb2-port1: attempt power cycle [ 512.169523][T11718] usb usb5-port1: unable to enumerate USB device [ 512.758252][T11718] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 512.790622][T11728] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 512.888385][T11728] usb 2-1: device descriptor read/8, error -71 [ 512.931204][T11718] usb 1-1: Using ep0 maxpacket: 8 [ 512.944661][T11718] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 512.954521][T11718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.976967][T11718] usb 1-1: config 0 descriptor?? [ 513.163951][T11728] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 513.189115][T11728] usb 2-1: device descriptor read/8, error -71 [ 513.298724][T11728] usb usb2-port1: unable to enumerate USB device [ 513.729226][T12394] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 513.736164][T12394] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 513.861721][T12394] vhci_hcd vhci_hcd.0: Device attached [ 514.123045][T11717] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 514.347569][T12395] vhci_hcd: connection reset by peer [ 514.357645][ T3478] vhci_hcd: stop threads [ 514.358083][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 514.365045][ T3478] vhci_hcd: release socket [ 514.385189][ T3478] vhci_hcd: disconnect device [ 514.533460][T12407] usb usb8: usbfs: process 12407 (syz.1.1736) did not claim interface 0 before use [ 514.543347][T12407] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 514.552654][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 514.560248][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 514.579662][T12409] syz_tun: entered allmulticast mode [ 514.587331][T12408] syz_tun: left allmulticast mode [ 514.666096][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 514.698116][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 514.719556][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.742952][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 514.792624][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.084738][T12400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.116185][T12400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.151431][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 515.208247][ T9] usbtmc 3-1:16.0: can't read capabilities [ 515.282295][T11718] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 515.294286][T11718] asix 1-1:0.0: probe with driver asix failed with error -71 [ 515.333832][T11718] usb 1-1: USB disconnect, device number 44 [ 515.370987][T11720] usb 3-1: USB disconnect, device number 65 [ 515.478371][T11728] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 515.909349][T11728] usb 5-1: Using ep0 maxpacket: 32 [ 515.939582][T11728] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.950758][T11728] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 515.970340][T11728] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 516.014664][T11728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 516.025568][T11728] usb 5-1: SerialNumber: syz [ 516.072060][T11728] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 516.099073][T11728] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 516.120017][T11728] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 516.152237][T12430] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1743'. [ 516.384001][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1740'. [ 516.395442][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1744'. [ 516.530204][T11728] usb 5-1: USB disconnect, device number 60 [ 516.558232][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 516.818209][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 516.826604][ T9] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 516.837666][ T9] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 516.896195][ T9] usb 1-1: New USB device found, idVendor=3c38, idProduct=14e3, bcdDevice= 0.00 [ 516.927227][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.956258][T12437] program syz.3.1746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 517.197036][ T9] usb 1-1: string descriptor 0 read error: -71 [ 517.251262][ T9] usb 1-1: USB disconnect, device number 45 [ 517.352486][T12455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1751'. [ 517.371190][T12455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1751'. [ 517.390807][T12455] bridge0: entered promiscuous mode [ 517.397429][T12455] bridge0: left promiscuous mode [ 518.248334][T11718] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 518.457972][T11718] usb 3-1: Using ep0 maxpacket: 8 [ 518.473451][T11718] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 518.487294][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 518.503529][T11718] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 518.542632][T11718] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 518.582977][T11718] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 518.657047][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 518.674030][T11718] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 518.747374][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 518.772096][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.789339][T11718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.820602][ T9] usb 4-1: Product: syz [ 518.831125][ T9] usb 4-1: Manufacturer: syz [ 518.871235][ T9] usb 4-1: SerialNumber: syz [ 518.906580][ T9] usb 4-1: config 0 descriptor?? [ 519.037244][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'. [ 519.062780][T12469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.078891][T12469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.089564][T11718] usb 3-1: GET_CAPABILITIES returned 0 [ 519.095594][T11718] usbtmc 3-1:16.0: can't read capabilities [ 519.132564][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 519.288257][T11717] vhci_hcd: vhci_device speed not set [ 519.299059][T11718] usb 3-1: USB disconnect, device number 66 [ 519.337369][T12474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.354449][T12474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.412966][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 520.718354][T11728] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 520.828704][T11717] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 521.023352][T12518] netlink: 'syz.1.1769': attribute type 10 has an invalid length. [ 521.067092][T12519] netlink: 'syz.4.1768': attribute type 10 has an invalid length. [ 521.125604][T12518] bond0: (slave netdevsim0): Releasing backup interface [ 521.133402][T12518] bond0: (slave netdevsim0): the permanent HWaddr of slave - 22:23:62:fa:b3:ed - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 521.155540][T11717] usb 1-1: unable to get BOS descriptor or descriptor too short [ 521.168584][T12521] netlink: 'syz.4.1768': attribute type 10 has an invalid length. [ 521.185101][T11717] usb 1-1: config 13 has an invalid interface number: 50 but max is 3 [ 521.196470][T12520] netlink: 'syz.1.1769': attribute type 10 has an invalid length. [ 521.208598][T11717] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 521.225616][T11717] usb 1-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 521.226334][T11728] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 521.290288][T11718] usb 4-1: USB disconnect, device number 57 [ 521.331546][T11717] usb 1-1: config 13 has no interface number 0 [ 521.347192][T11728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.354423][T11717] usb 1-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 521.413065][T11728] usb 3-1: Product: syz [ 521.423943][T11728] usb 3-1: Manufacturer: syz [ 521.425165][T11717] usb 1-1: config 13 interface 50 has no altsetting 0 [ 521.444623][T11728] usb 3-1: SerialNumber: syz [ 521.472565][T11728] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 521.500326][T11717] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 521.523989][T11717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.726973][T11717] usb 1-1: Product: syz [ 521.735664][T11717] usb 1-1: Manufacturer: syz [ 521.744456][T11717] usb 1-1: SerialNumber: syz [ 521.801404][T12519] bond0: (slave netdevsim0): Releasing backup interface [ 521.894010][T12519] team0: Port device netdevsim0 added [ 521.907049][ T5936] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 521.933715][T12528] netlink: 'syz.3.1770': attribute type 10 has an invalid length. [ 522.226053][T12521] team0: Port device netdevsim0 removed [ 522.276718][T12529] netlink: 'syz.3.1770': attribute type 10 has an invalid length. [ 522.321849][T12521] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 522.393079][T12520] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 522.422156][T12528] team0: Port device dummy0 added [ 522.520962][T12529] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 522.577095][T12529] team0: Failed to send options change via netlink (err -105) [ 522.587542][T12529] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 522.632289][T12529] team0: Port device dummy0 removed [ 522.646444][T12529] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 522.807738][ T3505] usb 1-1: Failed to submit usb control message: -71 [ 522.815517][T11717] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 522.825686][ T3505] usb 1-1: unable to send the bmi data to the device: -71 [ 522.840500][ T3505] usb 1-1: unable to get target info from device [ 522.850136][T11717] usb 1-1: USB disconnect, device number 46 [ 522.858537][ T3505] usb 1-1: could not get target info (-71) [ 522.926417][ T3505] usb 1-1: could not probe fw (-71) [ 523.358355][ T5936] usb 3-1: Service connection timeout for: 256 [ 523.364700][ T5936] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 523.390419][ T5936] ath9k_htc: Failed to initialize the device [ 523.450905][ T5936] usb 3-1: ath9k_htc: USB layer deinitialized [ 524.516639][T11718] usb 3-1: USB disconnect, device number 67 [ 525.626682][T12559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1777'. [ 525.708208][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1777'. [ 525.822497][T12559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1777'. [ 527.156669][T12603] netlink: 'syz.3.1785': attribute type 10 has an invalid length. [ 527.356159][T12609] netlink: 'syz.3.1785': attribute type 10 has an invalid length. [ 527.377027][T12603] bond0: (slave netdevsim0): Releasing backup interface [ 527.407740][T12603] team0: Port device netdevsim0 added [ 527.699477][T12609] team0: Port device netdevsim0 removed [ 527.715017][ T5877] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 527.728214][T12609] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 528.518132][T11718] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 528.556501][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 528.556518][ T30] audit: type=1326 audit(1756610736.747:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.3.1790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 528.607844][T12627] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1790'. [ 528.702552][T11718] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 528.720922][T12627] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1790'. [ 528.738192][ T30] audit: type=1326 audit(1756610736.787:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.3.1790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 528.741540][T11718] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 528.789862][T11718] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 528.801819][T11718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.821649][T12623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 528.837684][T12637] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1790'. [ 528.848224][ T30] audit: type=1326 audit(1756610736.787:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.3.1790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 528.919789][T12639] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1794'. [ 528.970968][ T30] audit: type=1326 audit(1756610736.797:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.3.1790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 529.009873][T12641] VFS: Mount too revealing [ 529.031989][T11718] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 529.065987][T12641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1795'. [ 529.114755][ T30] audit: type=1326 audit(1756610736.797:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.3.1790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 529.136746][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.175271][ T30] audit: type=1326 audit(1756610736.797:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.3.1790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 529.210187][T12621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1788'. [ 529.325196][ T30] audit: type=1326 audit(1756610736.797:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.3.1790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 529.366781][ T30] audit: type=1326 audit(1756610736.797:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.3.1790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 529.388874][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.498154][T11728] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 529.575398][ T30] audit: type=1326 audit(1756610736.897:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.3.1790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 529.598784][ T30] audit: type=1326 audit(1756610736.897:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.3.1790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 529.731095][T11728] usb 4-1: Using ep0 maxpacket: 8 [ 529.749009][T11728] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.766813][T11728] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 529.794780][T11728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.828783][T11728] usb 4-1: config 0 descriptor?? [ 529.843414][T11728] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 529.863856][T12650] FAULT_INJECTION: forcing a failure. [ 529.863856][T12650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.890684][T12650] CPU: 0 UID: 0 PID: 12650 Comm: syz.2.1798 Not tainted syzkaller #0 PREEMPT(full) [ 529.890708][T12650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 529.890720][T12650] Call Trace: [ 529.890728][T12650] [ 529.890736][T12650] dump_stack_lvl+0x189/0x250 [ 529.890761][T12650] ? __pfx____ratelimit+0x10/0x10 [ 529.890785][T12650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.890805][T12650] ? __pfx__printk+0x10/0x10 [ 529.890831][T12650] ? __might_fault+0xb0/0x130 [ 529.890864][T12650] should_fail_ex+0x414/0x560 [ 529.890891][T12650] _copy_from_user+0x2d/0xb0 [ 529.890912][T12650] snd_ctl_ioctl+0x4ca/0x1bf0 [ 529.890933][T12650] ? is_bpf_text_address+0x292/0x2b0 [ 529.890958][T12650] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 529.890982][T12650] ? unwind_get_return_address+0x4d/0x90 [ 529.891001][T12650] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 529.891021][T12650] ? arch_stack_walk+0xfc/0x150 [ 529.891053][T12650] ? stack_trace_save+0x9c/0xe0 [ 529.891072][T12650] ? __pfx_stack_trace_save+0x10/0x10 [ 529.891093][T12650] ? stack_depot_save_flags+0x40/0x860 [ 529.891119][T12650] ? kasan_save_track+0x4f/0x80 [ 529.891137][T12650] ? kasan_save_track+0x3e/0x80 [ 529.891154][T12650] ? kasan_save_free_info+0x46/0x50 [ 529.891175][T12650] ? __kasan_slab_free+0x5b/0x80 [ 529.891192][T12650] ? kfree+0x18e/0x440 [ 529.891210][T12650] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 529.891230][T12650] ? security_file_ioctl_compat+0xcb/0x2d0 [ 529.891250][T12650] ? __ia32_compat_sys_ioctl+0x128/0x840 [ 529.891269][T12650] ? __do_fast_syscall_32+0xb6/0x2b0 [ 529.891285][T12650] ? do_fast_syscall_32+0x34/0x80 [ 529.891300][T12650] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 529.891358][T12650] ? kasan_quarantine_put+0xdd/0x220 [ 529.891387][T12650] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 529.891410][T12650] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 529.891434][T12650] ? do_vfs_ioctl+0xbe8/0x1430 [ 529.891456][T12650] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 529.891489][T12650] ? __lock_acquire+0xab9/0xd20 [ 529.891521][T12650] snd_ctl_ioctl_compat+0x47c/0xe00 [ 529.891545][T12650] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 529.891568][T12650] ? __fget_files+0x2a/0x420 [ 529.891595][T12650] ? __fget_files+0x3a0/0x420 [ 529.891617][T12650] ? __fget_files+0x2a/0x420 [ 529.891642][T12650] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 529.891666][T12650] __ia32_compat_sys_ioctl+0x540/0x840 [ 529.891690][T12650] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 529.891711][T12650] ? __fget_files+0x3a0/0x420 [ 529.891738][T12650] ? fput+0xa0/0xd0 [ 529.891756][T12650] ? ksys_write+0x22a/0x250 [ 529.891786][T12650] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.891811][T12650] __do_fast_syscall_32+0xb6/0x2b0 [ 529.891828][T12650] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.891854][T12650] do_fast_syscall_32+0x34/0x80 [ 529.891871][T12650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 529.891890][T12650] RIP: 0023:0xf70ae539 [ 529.891906][T12650] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 529.891921][T12650] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 529.891938][T12650] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0405519 [ 529.891948][T12650] RDX: 0000000080001980 RSI: 0000000000000000 RDI: 0000000000000000 [ 529.891957][T12650] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 529.891965][T12650] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 529.891976][T12650] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 529.891999][T12650] [ 530.249380][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.293320][ T5877] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 530.509522][T12664] netlink: 'syz.2.1802': attribute type 10 has an invalid length. [ 530.655171][T12667] netlink: 'syz.2.1803': attribute type 10 has an invalid length. [ 530.669300][T12667] batadv0: left allmulticast mode [ 530.678930][T12667] batadv0: left promiscuous mode [ 530.703463][T12667] bridge0: port 1(batadv0) entered disabled state [ 530.911270][T12677] netlink: 'syz.0.1800': attribute type 10 has an invalid length. [ 531.065278][T12670] netlink: 'syz.0.1800': attribute type 10 has an invalid length. [ 531.135050][T12677] bond0: (slave netdevsim0): Releasing backup interface [ 531.164767][T12677] team0: Port device netdevsim0 added [ 531.170315][T11718] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 531.367032][T11717] usb 5-1: USB disconnect, device number 61 [ 531.428646][T11718] usb 3-1: Using ep0 maxpacket: 8 [ 531.435788][T12682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1806'. [ 531.449382][T11718] usb 3-1: no configurations [ 531.454012][T11718] usb 3-1: can't read configurations, error -22 [ 531.480715][T12670] team0: Port device netdevsim0 removed [ 531.513772][T12670] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 531.751433][T11728] gspca_vc032x: reg_w err -71 [ 531.756223][T11728] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 531.777291][T11728] usb 4-1: USB disconnect, device number 58 [ 531.788151][T11718] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 531.948241][T11718] usb 3-1: Using ep0 maxpacket: 8 [ 531.961891][T11718] usb 3-1: no configurations [ 531.966545][T11718] usb 3-1: can't read configurations, error -22 [ 532.004004][T11718] usb usb3-port1: attempt power cycle [ 532.460293][T11718] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 532.531640][T11718] usb 3-1: Using ep0 maxpacket: 8 [ 532.560887][T11718] usb 3-1: no configurations [ 532.569210][T11718] usb 3-1: can't read configurations, error -22 [ 532.698130][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 532.708102][T11718] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 532.740197][T11718] usb 3-1: Using ep0 maxpacket: 8 [ 532.746070][T11718] usb 3-1: no configurations [ 532.756314][T11718] usb 3-1: can't read configurations, error -22 [ 532.765708][T11718] usb usb3-port1: unable to enumerate USB device [ 532.860034][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 532.872911][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.251008][ T9] usb 4-1: config 0 descriptor?? [ 533.990587][T12703] vivid-000: ================= START STATUS ================= [ 533.999668][T12703] vivid-000: Test Pattern: 75% Colorbar [ 534.007450][T12703] vivid-000: Fill Percentage of Frame: 100 [ 534.019206][T12703] vivid-000: Horizontal Movement: No Movement [ 534.025560][T12703] vivid-000: Vertical Movement: No Movement [ 534.089350][T12703] vivid-000: OSD Text Mode: All [ 534.094951][T12706] openvswitch: netlink: Message has 8 unknown bytes. [ 534.098708][T12703] vivid-000: Show Border: false [ 534.115214][T12703] vivid-000: Show Square: false [ 534.120829][T12703] vivid-000: Sensor Flipped Horizontally: false [ 534.127751][T12703] vivid-000: Sensor Flipped Vertically: false [ 534.182427][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'. [ 534.319893][T12718] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 534.369780][T12703] vivid-000: Insert SAV Code in Image: false [ 534.376865][T12703] vivid-000: Insert EAV Code in Image: false [ 534.383782][T12703] vivid-000: Insert Video Guard Band: false [ 534.390176][T12703] vivid-000: Reduced Framerate: false [ 534.395970][T12703] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 534.404136][T12703] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 534.412542][T12703] vivid-000: Enable Capture Cropping: true grabbed [ 534.419623][T12703] vivid-000: Enable Capture Composing: true grabbed [ 534.426606][T12703] vivid-000: Enable Capture Scaler: true grabbed [ 534.433338][T12703] vivid-000: Timestamp Source: End of Frame [ 534.440265][T12703] vivid-000: Colorspace: sRGB [ 534.445410][T12703] vivid-000: Transfer Function: Default [ 534.451288][T12703] vivid-000: Y'CbCr Encoding: Default [ 534.456996][T12703] vivid-000: HSV Encoding: Hue 0-179 [ 534.462779][T12703] vivid-000: Quantization: Default [ 534.468255][T12703] vivid-000: Apply Alpha To Red Only: false [ 534.474550][T12703] vivid-000: Standard Aspect Ratio: 4x3 [ 534.480737][T12703] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 534.489194][T12703] vivid-000: DV Timings: 640x480p59 inactive [ 534.498850][T12703] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 534.506713][ T9] ath6kl: Failed to submit usb control message: -110 [ 534.533664][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 534.536096][T12703] vivid-000: Maximum EDID Blocks: 2 [ 534.567693][T12720] netlink: 'syz.2.1815': attribute type 10 has an invalid length. [ 534.573419][ T9] ath6kl: Unable to send get target info: -110 [ 534.583248][T12703] vivid-000: Limited RGB Range (16-235): false [ 534.641558][T12703] vivid-000: Rx RGB Quantization Range: Automatic [ 534.661630][ T9] ath6kl: Failed to init ath6kl core: -110 [ 534.669012][ T9] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 534.684742][T12703] vivid-000: Power Present: 0x00000001 [ 534.728730][T12703] tpg source WxH: 640x480 (R'G'B) [ 534.756933][T12703] tpg field: 1 [ 534.770930][T12703] tpg crop: (0,0)/640x480 [ 534.788667][T12703] tpg compose: (0,0)/640x480 [ 534.805625][T12703] tpg colorspace: 8 [ 534.826821][T12703] tpg transfer function: 0/2 [ 534.933595][T12703] tpg quantization: 0/2 [ 534.949230][T12703] tpg RGB range: 0/2 [ 534.978187][T12703] vivid-000: ================== END STATUS ================== [ 535.497927][T12736] IPv6: Can't replace route, no match found [ 535.838380][T11717] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 536.048358][T11717] usb 1-1: Using ep0 maxpacket: 32 [ 536.063397][T11717] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 536.078100][T11717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.117599][T11717] usb 1-1: Product: syz [ 536.153704][T11717] usb 1-1: Manufacturer: syz [ 536.159273][T11717] usb 1-1: SerialNumber: syz [ 536.584704][T12749] program syz.0.1820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.627203][ T5936] usb 4-1: USB disconnect, device number 59 [ 538.635702][T12775] netlink: 'syz.2.1828': attribute type 10 has an invalid length. [ 538.653849][T12774] FAULT_INJECTION: forcing a failure. [ 538.653849][T12774] name failslab, interval 1, probability 0, space 0, times 0 [ 538.666904][T12774] CPU: 1 UID: 0 PID: 12774 Comm: syz.1.1825 Not tainted syzkaller #0 PREEMPT(full) [ 538.666928][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 538.666939][T12774] Call Trace: [ 538.666948][T12774] [ 538.666956][T12774] dump_stack_lvl+0x189/0x250 [ 538.666981][T12774] ? __pfx____ratelimit+0x10/0x10 [ 538.667005][T12774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.667060][T12774] ? __pfx__printk+0x10/0x10 [ 538.667087][T12774] ? __pfx___might_resched+0x10/0x10 [ 538.667109][T12774] should_fail_ex+0x414/0x560 [ 538.667136][T12774] should_failslab+0xa8/0x100 [ 538.667160][T12774] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 538.667177][T12774] ? __alloc_skb+0x112/0x2d0 [ 538.667189][T12774] __alloc_skb+0x112/0x2d0 [ 538.667200][T12774] netlink_sendmsg+0x5c6/0xb30 [ 538.667214][T12774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.667225][T12774] ? __import_iovec+0x5d4/0x7f0 [ 538.667241][T12774] ? aa_sock_msg_perm+0xf1/0x1d0 [ 538.667259][T12774] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 538.667278][T12774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.667295][T12774] __sock_sendmsg+0x219/0x270 [ 538.667320][T12774] ____sys_sendmsg+0x505/0x830 [ 538.667335][T12774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.667354][T12774] ___sys_sendmsg+0x21f/0x2a0 [ 538.667365][T12774] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.667409][T12774] ? __fget_files+0x2a/0x420 [ 538.667431][T12774] ? __fget_files+0x3a0/0x420 [ 538.667463][T12774] __sys_sendmsg+0x164/0x220 [ 538.667477][T12774] ? __pfx___sys_sendmsg+0x10/0x10 [ 538.667495][T12774] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.667511][T12774] __do_fast_syscall_32+0xb6/0x2b0 [ 538.667521][T12774] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.667544][T12774] do_fast_syscall_32+0x34/0x80 [ 538.667561][T12774] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 538.667581][T12774] RIP: 0023:0xf7f74539 [ 538.667597][T12774] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 538.667612][T12774] RSP: 002b:00000000f544455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 538.667624][T12774] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 538.667632][T12774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 538.667637][T12774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 538.667643][T12774] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 538.667649][T12774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 538.667662][T12774] [ 539.326074][T11717] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 539.454179][T11717] gspca_ov534_9: reg_w failed -71 [ 539.578227][T12782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1831'. [ 539.591160][T12783] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1832'. [ 539.869282][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 539.908302][T11717] gspca_ov534_9: Unknown sensor 0000 [ 539.908400][T11717] ov534_9 1-1:108.0: probe with driver ov534_9 failed with error -22 [ 539.942607][T11717] usb 1-1: USB disconnect, device number 47 [ 540.030211][ T9] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 540.042623][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 540.078466][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 540.143795][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 540.175489][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 540.196159][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 540.237733][T12800] syzkaller1: entered promiscuous mode [ 540.243551][T12800] syzkaller1: entered allmulticast mode [ 540.258187][T11719] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 540.286186][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 540.389136][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 540.411933][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 540.550822][T11719] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 540.590411][T11719] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 540.622619][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 540.643735][T11719] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 540.657466][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 540.692486][T11719] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 540.706782][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 540.758392][T11719] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 540.773112][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 540.790922][T12813] netlink: 'syz.0.1841': attribute type 10 has an invalid length. [ 540.857957][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 540.905787][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 541.251753][T11719] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 541.273796][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 541.304096][T11719] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 541.374132][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 541.393218][T11719] usb 4-1: Product: syz [ 541.411594][T11719] usb 4-1: Manufacturer: syz [ 541.418210][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 541.474040][T11719] cdc_wdm 4-1:1.0: skipping garbage [ 541.513807][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 541.533264][T11719] cdc_wdm 4-1:1.0: skipping garbage [ 541.598728][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 541.641928][T11719] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 541.690579][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 541.701744][T11719] cdc_wdm 4-1:1.0: Unknown control protocol [ 541.723438][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 541.738564][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 541.836206][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 541.882328][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 541.959625][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 541.983201][ T9] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 542.004772][ T9] usb 3-1: Product: syz [ 542.019360][ T9] usb 3-1: Manufacturer: syz [ 542.053271][ T9] usb 3-1: SerialNumber: syz [ 542.103261][ T9] usb 3-1: config 0 descriptor?? [ 542.121948][ T9] yurex 3-1:0.0: USB YUREX device now attached to Yurex #1 [ 542.365460][T12782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.374339][T12823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1842'. [ 542.467632][T12782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.489045][T11719] usb 3-1: USB disconnect, device number 72 [ 542.496688][T11719] yurex 3-1:0.0: USB YUREX #1 now disconnected [ 542.745596][T12835] loop4: detected capacity change from 0 to 524255232 [ 543.335779][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 543.342546][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 543.350607][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 543.357227][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 543.363631][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 543.370239][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 543.376533][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 543.383145][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 543.389437][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 543.396056][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 543.402796][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 543.426068][T11719] usb 4-1: USB disconnect, device number 60 [ 543.484356][ T5877] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 545.028870][T11719] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 545.365293][T12880] FAULT_INJECTION: forcing a failure. [ 545.365293][T12880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.382328][T12880] CPU: 1 UID: 0 PID: 12880 Comm: syz.4.1861 Not tainted syzkaller #0 PREEMPT(full) [ 545.382353][T12880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 545.382365][T12880] Call Trace: [ 545.382370][T12880] [ 545.382376][T12880] dump_stack_lvl+0x189/0x250 [ 545.382393][T12880] ? __pfx____ratelimit+0x10/0x10 [ 545.382409][T12880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.382421][T12880] ? __pfx__printk+0x10/0x10 [ 545.382441][T12880] should_fail_ex+0x414/0x560 [ 545.382457][T12880] _copy_to_user+0x31/0xb0 [ 545.382471][T12880] simple_read_from_buffer+0xe1/0x170 [ 545.382490][T12880] proc_fail_nth_read+0x1b3/0x220 [ 545.382503][T12880] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 545.382516][T12880] ? rw_verify_area+0x2a6/0x4d0 [ 545.382528][T12880] ? __lock_acquire+0xab9/0xd20 [ 545.382543][T12880] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 545.382557][T12880] vfs_read+0x1fd/0xa30 [ 545.382575][T12880] ? fdget_pos+0x247/0x320 [ 545.382592][T12880] ? __pfx___mutex_lock+0x10/0x10 [ 545.382608][T12880] ? __pfx_vfs_read+0x10/0x10 [ 545.382623][T12880] ? __fget_files+0x2a/0x420 [ 545.382640][T12880] ? __fget_files+0x3a0/0x420 [ 545.382654][T12880] ? __fget_files+0x2a/0x420 [ 545.382673][T12880] ksys_read+0x145/0x250 [ 545.382687][T12880] ? __pfx_ksys_read+0x10/0x10 [ 545.382702][T12880] ? lockdep_hardirqs_on+0x9c/0x150 [ 545.382718][T12880] __do_fast_syscall_32+0xb6/0x2b0 [ 545.382728][T12880] ? lockdep_hardirqs_on+0x9c/0x150 [ 545.382744][T12880] do_fast_syscall_32+0x34/0x80 [ 545.382753][T12880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 545.382765][T12880] RIP: 0023:0xf704e539 [ 545.382775][T12880] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 545.382784][T12880] RSP: 002b:00000000f543e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 545.382796][T12880] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f543e620 [ 545.382803][T12880] RDX: 000000000000000f RSI: 00000000f73c4ff4 RDI: 0000000000000000 [ 545.382809][T12880] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 545.382814][T12880] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 545.382820][T12880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 545.382834][T12880] [ 545.383503][T11719] usb 4-1: Using ep0 maxpacket: 8 [ 545.438218][T11728] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 545.677456][T12882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1862'. [ 545.720734][T11719] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 545.738885][T11719] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 545.752850][T11719] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 545.779890][T11719] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.875966][T11719] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 545.885706][T11719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.101171][T11728] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 546.117546][T11728] usb 2-1: config 5 has no interface number 0 [ 546.123854][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.127161][T11728] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 546.153529][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.165971][T11728] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 546.188802][T11719] usb 4-1: usb_control_msg returned -32 [ 546.203663][T11719] usbtmc 4-1:16.0: can't read capabilities [ 546.219149][T11719] usb 4-1: USB disconnect, device number 61 [ 546.280084][T11728] usb 2-1: config 5 interface 123 has no altsetting 0 [ 546.349961][T11728] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 546.383559][T11728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.478683][T11728] usb 2-1: Product: syz [ 546.495827][T11728] usb 2-1: Manufacturer: syz [ 546.506035][T11728] usb 2-1: SerialNumber: syz [ 547.170893][T12900] usb usb8: usbfs: process 12900 (syz.4.1866) did not claim interface 0 before use [ 547.180701][T12900] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 547.241207][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 547.288293][T12901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1868'. [ 548.130410][T11728] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 548.192414][T11728] usb 2-1: USB disconnect, device number 68 [ 549.518217][T12901] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 549.528324][ T5877] Bluetooth: hci0: command 0x0c1a tx timeout [ 550.134964][T12901] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 550.148725][T12901] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 550.166707][T12901] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 550.176853][T12901] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 550.353868][T12942] sit1: entered promiscuous mode [ 550.448071][T11720] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 550.586398][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 550.586451][ T30] audit: type=1326 audit(1756610758.777:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12944 comm="syz.2.1882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 550.657564][T11720] usb 1-1: Using ep0 maxpacket: 32 [ 550.680223][T11720] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 550.684439][ T30] audit: type=1326 audit(1756610758.777:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12944 comm="syz.2.1882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 550.692286][T11720] usb 1-1: config 0 has no interface number 0 [ 550.712683][ T30] audit: type=1326 audit(1756610758.777:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12944 comm="syz.2.1882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 550.753628][T11720] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=da.65 [ 550.762845][T11720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.781342][T11720] usb 1-1: Product: syz [ 550.957649][T12961] block nbd0: Attempted send on invalid socket [ 550.965685][T12961] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 551.100460][T11720] usb 1-1: Manufacturer: syz [ 551.115140][T11720] usb 1-1: SerialNumber: syz [ 551.123653][ T30] audit: type=1326 audit(1756610758.837:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12944 comm="syz.2.1882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 551.200451][ T30] audit: type=1326 audit(1756610758.847:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12944 comm="syz.2.1882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 551.201430][T11720] usb 1-1: config 0 descriptor?? [ 551.228340][ T5877] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 551.237628][ T30] audit: type=1326 audit(1756610758.847:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12944 comm="syz.2.1882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 551.260535][ T30] audit: type=1326 audit(1756610759.377:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12944 comm="syz.2.1882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 551.282804][ T30] audit: type=1326 audit(1756610759.377:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12944 comm="syz.2.1882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 551.305243][ T30] audit: type=1326 audit(1756610759.377:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12944 comm="syz.2.1882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 551.605416][ T5877] Bluetooth: hci1: command 0x0c1a tx timeout [ 551.644554][T11720] peak_usb 1-1:0.19 can0: unable to request usb[type=0 value=1] err=-71 [ 551.654576][T11720] peak_usb 1-1:0.19: unable to read PCAN-USB Pro firmware info (err -71) [ 552.039128][T11720] peak_usb 1-1:0.19: probe with driver peak_usb failed with error -71 [ 552.062222][T11720] usb 1-1: USB disconnect, device number 48 [ 552.158449][ T5877] Bluetooth: hci2: command 0x0c1a tx timeout [ 552.248216][ T5188] Bluetooth: hci4: command 0x0c1a tx timeout [ 552.254414][ T5877] Bluetooth: hci3: command 0x0c1a tx timeout [ 552.652687][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1893'. [ 552.761797][T11725] IPVS: starting estimator thread 0... [ 552.767607][T12988] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 552.780910][ T5936] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 552.848131][T11728] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 552.898114][T12994] IPVS: using max 30 ests per chain, 72000 per kthread [ 552.950285][ T5936] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 552.970520][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.989638][T11728] usb 4-1: device descriptor read/64, error -71 [ 553.007456][ T5936] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 553.027680][ T5936] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 553.047935][ T5936] usb 5-1: Manufacturer: syz [ 553.080392][ T5936] usb 5-1: config 0 descriptor?? [ 553.198789][ T5936] rc_core: IR keymap rc-hauppauge not found [ 553.210474][ T5936] Registered IR keymap rc-empty [ 553.258139][T11728] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 553.309218][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1897'. [ 553.692752][ T5936] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 553.728318][T11728] usb 4-1: device descriptor read/64, error -71 [ 553.749996][ T5936] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input35 [ 553.856490][T11728] usb usb4-port1: attempt power cycle [ 554.058134][ T5936] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 554.208219][T11728] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 554.211099][ T9] usb 5-1: USB disconnect, device number 62 [ 554.217781][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.241919][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.253561][ T5936] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 554.270108][T11728] usb 4-1: device descriptor read/8, error -71 [ 554.277062][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.308473][ T5936] usb 1-1: config 0 descriptor?? [ 554.508226][T11728] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 554.530702][T11728] usb 4-1: device descriptor read/8, error -71 [ 554.608298][T11720] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 554.641411][T11728] usb usb4-port1: unable to enumerate USB device [ 554.724502][T13014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.737158][T13014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.758197][T11720] usb 3-1: Using ep0 maxpacket: 32 [ 554.771049][T11720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.784641][T11720] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 554.794571][T11720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.809040][T11720] usb 3-1: config 0 descriptor?? [ 554.825587][T11720] usb 3-1: bad CDC descriptors [ 555.054632][ T5950] usb 3-1: USB disconnect, device number 73 [ 555.065523][ T5936] usbhid 1-1:0.0: can't add hid device: -71 [ 555.082257][ T5936] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 555.144215][ T5936] usb 1-1: USB disconnect, device number 49 [ 555.559747][T11720] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 555.879821][T13042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1909'. [ 555.975406][T11720] usb 2-1: config 1 interface 0 has no altsetting 0 [ 555.993805][T11720] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.40 [ 556.009047][T11720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.040740][T11720] usb 2-1: Product: syz [ 556.056116][T11720] usb 2-1: Manufacturer: syz [ 556.102325][T11720] usb 2-1: SerialNumber: syz [ 556.373471][T11720] usbhid 2-1:1.0: can't add hid device: -71 [ 556.383233][T11720] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 556.415922][T11720] usb 2-1: USB disconnect, device number 69 [ 556.795614][T13058] fuse: Bad value for 'fd' [ 557.118548][T11719] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 557.188118][T11720] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 557.288158][T11719] usb 3-1: Using ep0 maxpacket: 8 [ 557.306962][T11719] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 557.634376][T11719] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 557.650753][T11719] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 557.661622][T11720] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.674105][T11719] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.736419][T11720] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.776610][T11720] usb 1-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 557.795443][T11719] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 557.832501][T11719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.866713][T11720] usb 1-1: config 1 interface 1 has no altsetting 0 [ 557.889728][T11720] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 557.898991][T11720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.907739][T11720] usb 1-1: Product: syz [ 557.928301][T11720] usb 1-1: Manufacturer: syz [ 557.943570][T11720] usb 1-1: SerialNumber: syz [ 558.043332][T11720] usb 1-1: selecting invalid altsetting 1 [ 558.094917][T11720] usb 1-1: selecting invalid altsetting 0 [ 558.098112][ T5936] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 558.145878][T11720] usb 1-1: selecting invalid altsetting 0 [ 558.221485][T13076] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1920'. [ 558.238198][T11720] cdc_ncm 1-1:1.0: bind() failure [ 558.243329][T11719] usb 3-1: GET_CAPABILITIES returned 0 [ 558.270965][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.288853][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.302367][T11719] usbtmc 3-1:16.0: can't read capabilities [ 558.311903][T13062] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1915'. [ 558.361702][T13062] bridge5: entered allmulticast mode [ 558.467319][ T5936] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 558.489194][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.513612][T11719] usb 3-1: USB disconnect, device number 74 [ 558.526697][ T5936] usb 5-1: config 0 descriptor?? [ 558.836828][T13079] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1921'. [ 558.985748][T13074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.994800][T13074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.103349][T11728] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 559.156803][ T30] audit: type=1400 audit(1756610767.347:239): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=13082 comm="syz.2.1923" [ 559.175821][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.238987][T11728] usb 2-1: device descriptor read/64, error -71 [ 559.284253][ T5936] usbhid 5-1:0.0: can't add hid device: -71 [ 559.296602][ T5936] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 559.324628][ T5936] usb 5-1: USB disconnect, device number 63 [ 559.448359][ T5950] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 559.478318][T11728] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 559.612378][ T5950] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 559.621774][T11728] usb 2-1: device descriptor read/64, error -71 [ 559.628168][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.636314][ T5950] usb 4-1: Product: syz [ 559.641651][ T5950] usb 4-1: Manufacturer: syz [ 559.646486][ T5950] usb 4-1: SerialNumber: syz [ 559.653679][ T5950] usb 4-1: config 0 descriptor?? [ 559.738949][T11728] usb usb2-port1: attempt power cycle [ 559.768210][ T5936] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 559.921533][ T5936] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 559.931060][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.943203][ T5936] usb 3-1: config 0 descriptor?? [ 560.078538][T11728] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 560.161680][T11728] usb 2-1: device descriptor read/8, error -71 [ 560.211764][T11720] usb 1-1: selecting invalid altsetting 0 [ 560.217530][T11720] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 560.231975][T11720] usb 1-1: selecting invalid altsetting 0 [ 560.238450][T11720] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 560.264557][T11720] usb 1-1: USB disconnect, device number 50 [ 560.370515][T13091] syzkaller0: entered promiscuous mode [ 560.376134][T13091] syzkaller0: entered allmulticast mode [ 560.394643][T13091] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 560.417030][T11728] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 560.463291][T11728] usb 2-1: device descriptor read/8, error -71 [ 560.578684][T11728] usb usb2-port1: unable to enumerate USB device [ 560.887608][ T5950] usb 4-1: f81604_read: reg: 100e failed: -EPROTO [ 560.961392][ T5950] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 560.971542][ T5950] usb 4-1: USB disconnect, device number 66 [ 561.189855][ T5950] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 561.371727][ T5950] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 562.024515][T13126] usb usb8: usbfs: process 13126 (syz.3.1933) did not claim interface 0 before use [ 562.034491][T13126] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 562.067261][T11719] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 562.098702][ T30] audit: type=1326 audit(1756610770.287:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 562.132692][ T30] audit: type=1326 audit(1756610770.287:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 562.159359][ T30] audit: type=1326 audit(1756610770.317:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 562.235916][ T30] audit: type=1326 audit(1756610770.317:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 562.263720][T13127] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1934'. [ 562.300201][ T5877] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 562.302941][ T30] audit: type=1326 audit(1756610770.317:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 562.310205][T11719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.363522][T11719] usb 5-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 562.384723][T11719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.395330][ T5936] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 562.398596][ T30] audit: type=1326 audit(1756610770.327:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 562.432540][T11719] usb 5-1: config 0 descriptor?? [ 562.440735][ T5936] asix 3-1:0.0: probe with driver asix failed with error -71 [ 562.501749][ T30] audit: type=1326 audit(1756610770.327:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 562.524767][ T30] audit: type=1326 audit(1756610770.327:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 562.530952][ T5936] usb 3-1: USB disconnect, device number 75 [ 562.563668][T11720] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 562.611426][ T30] audit: type=1326 audit(1756610770.327:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 562.702745][T11719] cypress 0003:04B4:DE64.0006: item fetching failed at offset 3/7 [ 562.719933][T11719] cypress 0003:04B4:DE64.0006: parse failed [ 562.761153][T11720] usb 1-1: Using ep0 maxpacket: 32 [ 562.766465][T11719] cypress 0003:04B4:DE64.0006: probe with driver cypress failed with error -22 [ 562.778486][T11720] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 562.786704][T11720] usb 1-1: config 0 has no interface number 0 [ 562.794000][T11720] usb 1-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 562.838743][T11720] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 562.848774][T11720] usb 1-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 562.860529][T11720] usb 1-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 562.871926][T11720] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 562.882192][T11720] usb 1-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 562.898380][ T5950] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 562.901723][T11720] usb 1-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 562.917108][T11719] usb 5-1: USB disconnect, device number 64 [ 562.961024][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.967414][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.971580][T11720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.037100][T11720] usb 1-1: Product: syz [ 563.049950][T11720] usb 1-1: Manufacturer: syz [ 563.054594][T11720] usb 1-1: SerialNumber: syz [ 563.061448][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.076070][T11720] usb 1-1: config 0 descriptor?? [ 563.076673][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.091488][T13127] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 563.100460][T13127] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 563.111982][T11720] ipaq 1-1:0.19: PocketPC PDA converter detected [ 563.112326][ T5950] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 563.119577][T11720] usb 1-1: active config #0 != 1 ?? [ 563.167318][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.193718][ T5950] usb 2-1: config 0 descriptor?? [ 563.201948][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1940'. [ 563.433119][T11725] usb 1-1: USB disconnect, device number 51 [ 563.568244][ T5936] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 563.641842][T13134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.650800][T13134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.813295][ T5936] usb 4-1: config 0 has no interfaces? [ 563.861930][ T5936] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 563.871339][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.892527][ T5936] usb 4-1: Product: syz [ 563.915020][ T5936] usb 4-1: Manufacturer: syz [ 563.929255][ T5950] usbhid 2-1:0.0: can't add hid device: -71 [ 563.938268][ T5936] usb 4-1: SerialNumber: syz [ 563.945591][ T5950] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 563.960697][ T5936] usb 4-1: config 0 descriptor?? [ 564.231782][ T5950] usb 2-1: USB disconnect, device number 74 [ 564.893647][T13161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1945'. [ 565.398127][ T5950] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 565.445555][ T5877] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 565.569966][ T5950] usb 2-1: Using ep0 maxpacket: 8 [ 565.585111][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 565.629309][ T5950] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 565.673116][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.725947][ T5950] usb 2-1: config 0 descriptor?? [ 566.070645][ T5877] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 566.110098][ T5950] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 566.210222][T11719] usb 4-1: USB disconnect, device number 67 [ 566.229462][T13182] usb usb8: usbfs: process 13182 (syz.0.1950) did not claim interface 0 before use [ 566.340814][T13182] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 566.778769][T13201] netlink: 'syz.4.1953': attribute type 10 has an invalid length. [ 566.839605][T13200] bridge0: port 1(netdevsim0) entered blocking state [ 567.035200][T13200] bridge0: port 1(netdevsim0) entered disabled state [ 567.044414][T13200] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 567.056353][T13200] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 567.161283][T13210] pim6reg: entered allmulticast mode [ 568.069496][ T5877] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 568.160221][ T5950] usb 2-1: USB disconnect, device number 75 [ 568.935988][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'. [ 569.020230][T11719] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 569.044673][T13237] tipc: Enabling of bearer rejected, failed to enable media [ 569.190378][T11719] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 569.202686][T11719] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 569.214199][T11719] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 569.228662][T11719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.246913][T13232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 569.258789][T11719] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 569.442175][T13239] usb usb8: usbfs: process 13239 (syz.1.1966) did not claim interface 0 before use [ 569.474127][T11719] usb 5-1: USB disconnect, device number 65 [ 569.696264][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 569.696276][ T30] audit: type=1326 audit(1756610777.887:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13231 comm="syz.4.1964" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e539 code=0x0 [ 569.753384][ T5877] Bluetooth: hci3: unexpected event for opcode 0x080b [ 570.148533][T13251] usb usb8: usbfs: process 13251 (syz.0.1967) did not claim interface 0 before use [ 570.166432][T13251] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 570.219259][T11728] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 570.378116][T11728] usb 3-1: Using ep0 maxpacket: 8 [ 570.508170][T11719] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 570.521513][T11728] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 570.537596][T11728] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 570.554475][T11728] usb 3-1: config 6 has no interface number 0 [ 570.563147][T11728] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 570.594260][T11728] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 570.626757][T11728] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 570.648852][T11728] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 570.680434][T11728] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 570.689640][T11728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.700491][T11719] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.721435][T11728] usb 3-1: Product: syz [ 570.727389][T11728] usb 3-1: Manufacturer: syz [ 570.731222][T11719] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 570.764118][T11719] usb 2-1: New USB device found, idVendor=0944, idProduct=8866, bcdDevice= 0.00 [ 570.774075][T11719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.787784][T11719] usb 2-1: config 0 descriptor?? [ 570.891326][T11728] usb 3-1: SerialNumber: syz [ 570.909764][T11728] hso 3-1:6.2: Failed to find BULK IN ep [ 571.144658][T13245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.155242][T13245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.275382][ T30] audit: type=1326 audit(1756610779.467:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13244 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 571.300405][T13245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.325012][T13245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.361363][T13254] loop6: detected capacity change from 0 to 7 [ 571.405707][T11719] usb 2-1: string descriptor 0 read error: -71 [ 571.438313][ T30] audit: type=1326 audit(1756610779.467:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13244 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 571.462694][T11719] usb 2-1: USB disconnect, device number 76 [ 571.502433][ T30] audit: type=1326 audit(1756610779.467:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13244 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 571.555178][T11728] usb 3-1: USB disconnect, device number 76 [ 571.658663][ T30] audit: type=1326 audit(1756610779.467:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13244 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 571.777669][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'. [ 571.788396][T13276] netem: incorrect ge model size [ 571.794135][T13276] netem: change failed [ 571.848650][ T30] audit: type=1326 audit(1756610779.467:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13244 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 571.870566][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.908665][ T30] audit: type=1326 audit(1756610779.467:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13244 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 571.938367][ T30] audit: type=1326 audit(1756610779.627:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13244 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 571.960927][ T30] audit: type=1326 audit(1756610779.627:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13244 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 571.983330][ T30] audit: type=1326 audit(1756610779.627:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13244 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 572.005225][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.008179][T11717] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 572.090933][T13286] usb usb8: usbfs: process 13286 (syz.1.1979) did not claim interface 0 before use [ 572.172827][T11717] usb 4-1: config 0 has no interfaces? [ 572.183489][T11717] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 572.194410][T11717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.207704][T11717] usb 4-1: Product: syz [ 572.214575][T11717] usb 4-1: Manufacturer: syz [ 572.247596][T11717] usb 4-1: SerialNumber: syz [ 572.263089][T11717] usb 4-1: config 0 descriptor?? [ 572.545323][T11728] usb 4-1: USB disconnect, device number 68 [ 572.628269][T11717] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 572.781020][T11717] usb 2-1: Using ep0 maxpacket: 16 [ 572.798243][ T5950] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 572.883242][T11717] usb 2-1: unable to get BOS descriptor or descriptor too short [ 572.900742][T11717] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 572.917412][T11717] usb 2-1: can't read configurations, error -71 [ 572.967747][ T5950] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 572.977386][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.998168][ T5950] usb 3-1: Product: syz [ 573.006270][ T5950] usb 3-1: Manufacturer: syz [ 573.016198][ T5950] usb 3-1: SerialNumber: syz [ 573.041308][ T5950] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 573.065066][ T5936] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 573.259031][T13302] usb usb8: usbfs: process 13302 (syz.0.1983) did not claim interface 0 before use [ 573.273532][T13302] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 573.669626][T13309] FAULT_INJECTION: forcing a failure. [ 573.669626][T13309] name failslab, interval 1, probability 0, space 0, times 0 [ 573.694270][T13309] CPU: 0 UID: 0 PID: 13309 Comm: syz.1.1985 Not tainted syzkaller #0 PREEMPT(full) [ 573.694287][T13309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 573.694293][T13309] Call Trace: [ 573.694298][T13309] [ 573.694304][T13309] dump_stack_lvl+0x189/0x250 [ 573.694328][T13309] ? __pfx____ratelimit+0x10/0x10 [ 573.694352][T13309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.694372][T13309] ? __pfx__printk+0x10/0x10 [ 573.694400][T13309] ? __pfx___might_resched+0x10/0x10 [ 573.694416][T13309] ? fs_reclaim_acquire+0x7d/0x100 [ 573.694444][T13309] should_fail_ex+0x414/0x560 [ 573.694461][T13309] should_failslab+0xa8/0x100 [ 573.694476][T13309] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 573.694493][T13309] ? __alloc_skb+0x112/0x2d0 [ 573.694514][T13309] __alloc_skb+0x112/0x2d0 [ 573.694535][T13309] netlink_ack+0x146/0xa50 [ 573.694557][T13309] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.694579][T13309] ? ref_tracker_free+0x63a/0x7d0 [ 573.694601][T13309] ? __asan_memcpy+0x40/0x70 [ 573.694613][T13309] ? __pfx_ref_tracker_free+0x10/0x10 [ 573.694625][T13309] ? __skb_clone+0x63/0x7a0 [ 573.694640][T13309] netlink_rcv_skb+0x28c/0x470 [ 573.694656][T13309] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.694678][T13309] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.694708][T13309] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.694739][T13309] netlink_unicast+0x82c/0x9e0 [ 573.694769][T13309] ? __pfx_netlink_unicast+0x10/0x10 [ 573.694792][T13309] ? netlink_sendmsg+0x642/0xb30 [ 573.694802][T13309] ? skb_put+0x11b/0x210 [ 573.694813][T13309] netlink_sendmsg+0x805/0xb30 [ 573.694826][T13309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.694837][T13309] ? __import_iovec+0x5d4/0x7f0 [ 573.694847][T13309] ? aa_sock_msg_perm+0xf1/0x1d0 [ 573.694863][T13309] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.694881][T13309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.694899][T13309] __sock_sendmsg+0x219/0x270 [ 573.694924][T13309] ____sys_sendmsg+0x505/0x830 [ 573.694949][T13309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.694976][T13309] ___sys_sendmsg+0x21f/0x2a0 [ 573.694988][T13309] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.695015][T13309] ? __fget_files+0x2a/0x420 [ 573.695033][T13309] ? __fget_files+0x3a0/0x420 [ 573.695065][T13309] __sys_sendmsg+0x164/0x220 [ 573.695086][T13309] ? __pfx___sys_sendmsg+0x10/0x10 [ 573.695121][T13309] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.695142][T13309] __do_fast_syscall_32+0xb6/0x2b0 [ 573.695158][T13309] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.695182][T13309] do_fast_syscall_32+0x34/0x80 [ 573.695199][T13309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 573.695219][T13309] RIP: 0023:0xf7f74539 [ 573.695238][T13309] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 573.695252][T13309] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 573.695271][T13309] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800006c0 [ 573.695284][T13309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 573.695294][T13309] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.695305][T13309] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 573.695316][T13309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.695334][T13309] [ 574.030927][T13292] delete_channel: no stack [ 574.259906][T11719] usb 3-1: USB disconnect, device number 77 [ 574.592377][T13321] netlink: 'syz.0.1988': attribute type 10 has an invalid length. [ 574.638497][ T5936] usb 3-1: Service connection timeout for: 257 [ 574.644756][ T5936] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 574.695516][ T5936] ath9k_htc: Failed to initialize the device [ 574.717685][T11719] usb 3-1: ath9k_htc: USB layer deinitialized [ 574.899746][T13327] netlink: 'syz.1.1989': attribute type 10 has an invalid length. [ 574.983578][T13329] netlink: 'syz.1.1989': attribute type 10 has an invalid length. [ 575.073182][T13327] bond0: (slave netdevsim0): Releasing backup interface [ 575.089673][T13327] bond0: (slave netdevsim0): the permanent HWaddr of slave - 22:23:62:fa:b3:ed - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 575.127810][ T5877] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 575.375842][T13329] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 576.677945][T13345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1995'. [ 577.687696][ T5877] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 578.408142][T11728] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 578.602247][T11728] usb 2-1: config 66 has an invalid interface number: 195 but max is 0 [ 578.611023][T11728] usb 2-1: config 66 has no interface number 0 [ 578.636249][T11728] usb 2-1: config 66 interface 195 has no altsetting 0 [ 578.658948][T11728] usb 2-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=56.49 [ 578.674235][T11728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.684923][ T5950] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 578.707118][T11728] usb 2-1: Product: syz [ 578.755226][T11728] usb 2-1: Manufacturer: syz [ 578.768849][T11728] usb 2-1: SerialNumber: syz [ 578.778172][ T5936] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 578.870818][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.901931][ T5950] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 578.948775][ T5950] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 578.992257][ T5936] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 579.548189][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.578824][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.629017][ T5950] usb 4-1: config 0 descriptor?? [ 579.647212][T13391] netlink: 'syz.0.2006': attribute type 10 has an invalid length. [ 579.686309][T11728] usb 2-1: Found UVC 0.00 device syz (1bcf:0b40) [ 579.692833][ T5936] usb 5-1: Product: syz [ 579.711617][ T5936] usb 5-1: Manufacturer: syz [ 579.723943][T11728] usb 2-1: Forcing UVC version to 1.0a [ 579.731502][ T5936] usb 5-1: SerialNumber: syz [ 579.776804][T11728] usb 2-1: No valid video chain found. [ 579.800634][ T5936] usb 5-1: config 0 descriptor?? [ 579.844722][T11728] usb 2-1: USB disconnect, device number 79 [ 580.062376][ T5936] hso 5-1:0.0: Failed to find INT IN ep [ 580.071893][ T5936] usb-storage 5-1:0.0: USB Mass Storage device detected [ 580.253383][T13401] netlink: 'syz.0.2007': attribute type 10 has an invalid length. [ 580.280153][T13401] bond0: (slave netdevsim0): Releasing backup interface [ 580.343491][T13401] team0: Port device netdevsim0 added [ 580.399383][T13401] netlink: 'syz.0.2007': attribute type 10 has an invalid length. [ 580.428791][T13401] team0: Port device netdevsim0 removed [ 580.465257][T13401] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 580.585423][T13409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2010'. [ 580.652498][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2004'. [ 581.582283][T11719] usb 5-1: USB disconnect, device number 66 [ 582.143758][T11717] usb 4-1: USB disconnect, device number 69 [ 582.760751][T13440] netlink: 'syz.0.2017': attribute type 10 has an invalid length. [ 583.438302][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 583.701515][T13448] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2019'. [ 583.754778][T13448] bond0: option min_links: invalid value (18446744072019614533) [ 583.777823][T13448] bond0: option min_links: allowed values 0 - 2147483647 [ 583.835015][T13455] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2022'. [ 583.876994][T13453] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2021'. [ 584.301444][T11720] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 584.449945][T11720] usb 5-1: device descriptor read/64, error -71 [ 584.930160][T11720] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 584.951784][T13475] netlink: 'syz.0.2027': attribute type 10 has an invalid length. [ 585.053804][T13477] netlink: 'syz.0.2027': attribute type 10 has an invalid length. [ 585.088223][T11720] usb 5-1: device descriptor read/64, error -71 [ 585.143875][T13475] bond0: (slave netdevsim0): Releasing backup interface [ 585.178964][T13475] team0: Port device netdevsim0 added [ 585.202780][T11720] usb usb5-port1: attempt power cycle [ 585.495615][T13477] team0: Port device netdevsim0 removed [ 585.586600][T11720] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 585.622002][T13477] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 585.696140][T11720] usb 5-1: device descriptor read/8, error -71 [ 585.998325][T11720] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 586.045245][T11720] usb 5-1: device descriptor read/8, error -71 [ 586.446463][T11720] usb usb5-port1: unable to enumerate USB device [ 586.986877][T13499] netlink: 'syz.4.2032': attribute type 10 has an invalid length. [ 587.918732][ T5877] Bluetooth: hci0: command 0x0c1a tx timeout [ 587.924702][T13478] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 588.229259][T13478] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 588.259977][T13478] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 588.270983][T13478] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 588.298397][T13478] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 588.543680][T13525] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.550973][T13525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.568084][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 588.568097][ T30] audit: type=1326 audit(1756610796.727:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13521 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 588.619226][T11719] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 588.769949][T13526] usb usb8: usbfs: process 13526 (syz.4.2038) did not claim interface 0 before use [ 588.781202][T11719] usb 3-1: device descriptor read/64, error -71 [ 588.872226][ T30] audit: type=1326 audit(1756610796.727:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13521 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 588.916603][ T30] audit: type=1326 audit(1756610796.727:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13521 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 588.976679][T13526] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 589.070925][ T30] audit: type=1326 audit(1756610796.727:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13521 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 589.098658][T11719] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 589.168097][T11720] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 589.184886][ T30] audit: type=1326 audit(1756610796.727:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13521 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 589.389996][T11720] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 589.401242][T11720] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 589.424924][T11720] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 589.469512][T11720] usb 2-1: config 0 interface 0 has no altsetting 0 [ 589.486445][ T30] audit: type=1326 audit(1756610796.727:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13521 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 589.516855][T11720] usb 2-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 589.569761][T11720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.601004][ T30] audit: type=1326 audit(1756610796.727:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13521 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 589.610991][T11720] usb 2-1: config 0 descriptor?? [ 589.679448][ T30] audit: type=1326 audit(1756610796.727:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13521 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 589.702181][T13529] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 589.736753][ T30] audit: type=1326 audit(1756610796.727:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13521 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 589.763548][ T30] audit: type=1326 audit(1756610796.727:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13521 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 589.858261][T11719] usb 3-1: device descriptor read/64, error -71 [ 589.968426][T11719] usb usb3-port1: attempt power cycle [ 589.998250][ T5877] Bluetooth: hci1: command 0x0c1a tx timeout [ 590.098243][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 590.123380][T11720] apple 0003:05AC:027C.0007: hidraw0: USB HID v0.04 Device [HID 05ac:027c] on usb-dummy_hcd.1-1/input0 [ 590.143858][T13545] netlink: 'syz.4.2045': attribute type 10 has an invalid length. [ 590.308253][T11719] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 590.318435][ T5877] Bluetooth: hci3: command 0x0c1a tx timeout [ 590.324576][ T5188] Bluetooth: hci4: command 0x0c1a tx timeout [ 590.326417][ T5865] Bluetooth: hci2: command 0x0c1a tx timeout [ 590.336939][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 590.363211][T11719] usb 3-1: Using ep0 maxpacket: 32 [ 590.374627][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 590.393607][T11719] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 590.402732][T11719] usb 3-1: config 0 has no interface number 0 [ 590.411244][T11719] usb 3-1: New USB device found, idVendor=0b05, idProduct=1760, bcdDevice=b6.16 [ 590.420595][ T9] usb 1-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.9c [ 590.441561][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.453634][T11719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.463599][ T9] usb 1-1: Product: syz [ 590.467776][ T9] usb 1-1: Manufacturer: syz [ 590.487380][T11719] usb 3-1: config 0 descriptor?? [ 590.494718][T11720] usb 2-1: USB disconnect, device number 80 [ 590.507659][ T9] usb 1-1: SerialNumber: syz [ 590.549309][ T9] usb 1-1: config 0 descriptor?? [ 590.564822][ T9] usb 1-1: selecting invalid altsetting 1 [ 590.573533][ T9] snd-usb-caiaq 1-1:0.0: can't set alt interface. [ 590.636232][ T9] usb 1-1: unable to init card! (ret=-5) [ 590.684291][ T9] snd-usb-caiaq 1-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 591.505756][T13556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.564004][T11728] usb 1-1: USB disconnect, device number 52 [ 591.773425][T13540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.920037][ T5950] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 592.083178][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.108074][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.171189][ T5950] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 592.198581][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.220895][ T5950] usb 2-1: config 0 descriptor?? [ 592.686133][T13558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.690191][ T5936] usb 3-1: USB disconnect, device number 80 [ 592.702030][T13558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.481070][ T5950] usbhid 2-1:0.0: can't add hid device: -71 [ 593.491096][ T5950] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 593.550594][ T5950] usb 2-1: USB disconnect, device number 81 [ 593.750017][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2054'. [ 594.651475][T13593] netlink: 'syz.0.2058': attribute type 10 has an invalid length. [ 595.016860][T13592] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 595.118694][ T3595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.238972][ T3595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.374097][ T3595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.495923][ T3595] bond0: (slave netdevsim0): Releasing backup interface [ 595.520682][ T3595] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.564606][T13601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.604337][T13601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.788314][T11720] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 595.959778][T11720] usb 4-1: Using ep0 maxpacket: 16 [ 595.982654][T11720] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.015907][T11720] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.036007][T11720] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 596.056582][T11720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.111972][T13609] usb usb8: usbfs: process 13609 (syz.0.2063) did not claim interface 0 before use [ 596.122295][T13609] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 596.157069][T11720] usb 4-1: Product: syz [ 596.172442][T11720] usb 4-1: Manufacturer: syz [ 596.177256][T11720] usb 4-1: SerialNumber: syz [ 596.183796][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 596.197661][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 596.220385][T13612] netlink: 'syz.2.2065': attribute type 2 has an invalid length. [ 596.230642][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 596.241889][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 596.251002][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 596.407045][T11720] usb 4-1: 0:2 : does not exist [ 596.422608][T11720] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 596.531130][T11720] usb 4-1: USB disconnect, device number 70 [ 596.828108][ T5950] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 597.002709][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.037033][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.079389][ T5950] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 597.091968][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.116551][ T5950] usb 3-1: config 0 descriptor?? [ 597.468239][ T5936] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 597.544486][ T3595] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 597.576699][ T3595] bond0 (unregistering): Released all slaves [ 597.594582][ T3595] bond1 (unregistering): Released all slaves [ 597.603625][T13615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.624608][T13615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.640349][T13631] netlink: 'syz.0.2072': attribute type 10 has an invalid length. [ 597.648641][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 597.662565][ T5936] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 597.679731][T13625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2071'. [ 597.717871][ T5936] usb 4-1: config 0 has no interface number 0 [ 597.748153][ T5936] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 597.785194][ T5936] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 597.802131][ T3595] : left promiscuous mode [ 597.809473][ T5936] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 597.822431][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 597.843795][ T5936] usb 4-1: Product: syz [ 597.850298][ T5936] usb 4-1: SerialNumber: syz [ 597.856872][ T5936] usb 4-1: config 0 descriptor?? [ 597.916669][T13634] fuse: Bad value for 'fd' [ 597.923935][ T5936] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 597.937185][ T5936] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input37 [ 598.043520][ T5950] usbhid 3-1:0.0: can't add hid device: -71 [ 598.051209][ T5950] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 598.114161][ T5950] usb 3-1: USB disconnect, device number 81 [ 598.121067][T13619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.166408][T13619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.177435][ T3595] tipc: Disabling bearer [ 598.211953][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 598.220529][ T3595] tipc: Left network mode [ 598.320021][ T5877] Bluetooth: hci3: command tx timeout [ 598.458734][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 598.465917][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 598.473323][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 598.480959][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 598.489004][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 598.497672][ T5936] usb 4-1: USB disconnect, device number 71 [ 598.503767][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 598.503792][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 598.593147][ T5936] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 598.984077][T13613] chnl_net:caif_netlink_parms(): no params data found [ 599.322820][ T5877] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 599.639680][T13676] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[13676] [ 599.729464][T13613] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.757223][T13613] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.792544][T13613] bridge_slave_0: entered allmulticast mode [ 599.825451][T13682] ================================================================== [ 599.833640][T13682] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x44cd/0x5400 [ 599.841541][T13682] Read of size 1 at addr ffff888054371870 by task syz.1.2076/13682 [ 599.849431][T13682] [ 599.851760][T13682] CPU: 1 UID: 0 PID: 13682 Comm: syz.1.2076 Not tainted syzkaller #0 PREEMPT(full) [ 599.851783][T13682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 599.851796][T13682] Call Trace: [ 599.851806][T13682] [ 599.851815][T13682] dump_stack_lvl+0x189/0x250 [ 599.851841][T13682] ? __kasan_check_byte+0x12/0x40 [ 599.851866][T13682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.851887][T13682] ? lock_release+0x4b/0x3e0 [ 599.851913][T13682] ? __virt_addr_valid+0x4a5/0x5c0 [ 599.851935][T13682] print_report+0xca/0x240 [ 599.851953][T13682] ? xfrm_state_find+0x44cd/0x5400 [ 599.851971][T13682] kasan_report+0x118/0x150 [ 599.851992][T13682] ? xfrm_state_find+0x44cd/0x5400 [ 599.852010][T13682] xfrm_state_find+0x44cd/0x5400 [ 599.852037][T13682] ? __pfx___find_rr_leaf+0x10/0x10 [ 599.852061][T13682] ? __pfx_fib6_node_lookup+0x10/0x10 [ 599.852085][T13682] ? xfrm_state_find+0x1da/0x5400 [ 599.852104][T13682] ? __pfx_xfrm_state_find+0x10/0x10 [ 599.852121][T13682] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 599.852148][T13682] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 599.852176][T13682] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 599.852203][T13682] ? ip6_pol_route+0x162/0x1180 [ 599.852226][T13682] ? __pfx_ip6_pol_route+0x10/0x10 [ 599.852246][T13682] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 599.852268][T13682] ? __lock_acquire+0xab9/0xd20 [ 599.852298][T13682] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 599.852324][T13682] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 599.852346][T13682] ? xfrm_expand_policies+0x41f/0x6a0 [ 599.852368][T13682] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 599.852390][T13682] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 599.852413][T13682] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 599.852433][T13682] ? txopt_get+0x335/0x3f0 [ 599.852449][T13682] ? aa_label_sk_perm+0x4cd/0x630 [ 599.852472][T13682] ? __pfx_txopt_get+0x10/0x10 [ 599.852489][T13682] xfrm_lookup_route+0x3c/0x1c0 [ 599.852510][T13682] rawv6_sendmsg+0xdab/0x1820 [ 599.852541][T13682] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 599.852575][T13682] ? __pfx_aa_sk_perm+0x10/0x10 [ 599.852599][T13682] ? sock_rps_record_flow+0x19/0x410 [ 599.852622][T13682] ? inet_sendmsg+0x2f4/0x370 [ 599.852641][T13682] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 599.852662][T13682] __sock_sendmsg+0x19c/0x270 [ 599.852686][T13682] ____sys_sendmsg+0x52d/0x830 [ 599.852706][T13682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.852727][T13682] ? futex_unqueue+0x22/0x240 [ 599.852745][T13682] ? futex_unqueue+0x22/0x240 [ 599.852766][T13682] ___sys_sendmsg+0x21f/0x2a0 [ 599.852784][T13682] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.852815][T13682] ? __fget_files+0x2a/0x420 [ 599.852839][T13682] ? __fget_files+0x3a0/0x420 [ 599.852866][T13682] __sys_sendmmsg+0x28e/0x430 [ 599.852886][T13682] ? __pfx___sys_sendmmsg+0x10/0x10 [ 599.852909][T13682] ? __pfx_do_futex+0x10/0x10 [ 599.852940][T13682] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 599.852961][T13682] __do_fast_syscall_32+0xb6/0x2b0 [ 599.852979][T13682] ? lockdep_hardirqs_on+0x9c/0x150 [ 599.853004][T13682] do_fast_syscall_32+0x34/0x80 [ 599.853021][T13682] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.853051][T13682] RIP: 0023:0xf7f74539 [ 599.853067][T13682] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 599.853083][T13682] RSP: 002b:00000000f544455c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 599.853103][T13682] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000480 [ 599.853116][T13682] RDX: 00000000000002e9 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.853128][T13682] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.853139][T13682] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 599.853150][T13682] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.853169][T13682] [ 599.853176][T13682] [ 600.230333][T13682] Allocated by task 11834: [ 600.234739][T13682] kasan_save_track+0x3e/0x80 [ 600.239423][T13682] __kasan_slab_alloc+0x6c/0x80 [ 600.244273][T13682] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 600.249733][T13682] xfrm_state_alloc+0x24/0x2f0 [ 600.254516][T13682] xfrm_add_sa+0x17d1/0x4070 [ 600.259100][T13682] xfrm_user_rcv_msg+0x7a0/0xab0 [ 600.264036][T13682] netlink_rcv_skb+0x205/0x470 [ 600.268777][T13682] xfrm_netlink_rcv+0x79/0x90 [ 600.273430][T13682] netlink_unicast+0x82c/0x9e0 [ 600.278170][T13682] netlink_sendmsg+0x805/0xb30 [ 600.283027][T13682] __sock_sendmsg+0x219/0x270 [ 600.287733][T13682] ____sys_sendmsg+0x505/0x830 [ 600.292498][T13682] ___sys_sendmsg+0x21f/0x2a0 [ 600.297154][T13682] __sys_sendmsg+0x164/0x220 [ 600.301729][T13682] __do_fast_syscall_32+0xb6/0x2b0 [ 600.306819][T13682] do_fast_syscall_32+0x34/0x80 [ 600.311664][T13682] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 600.317979][T13682] [ 600.320315][T13682] Freed by task 11728: [ 600.324369][T13682] kasan_save_track+0x3e/0x80 [ 600.329027][T13682] kasan_save_free_info+0x46/0x50 [ 600.334028][T13682] __kasan_slab_free+0x5b/0x80 [ 600.338829][T13682] kmem_cache_free+0x18f/0x400 [ 600.343570][T13682] xfrm_state_gc_task+0x52d/0x6b0 [ 600.348570][T13682] process_scheduled_works+0xae1/0x17b0 [ 600.354089][T13682] worker_thread+0x8a0/0xda0 [ 600.358652][T13682] kthread+0x70e/0x8a0 [ 600.362697][T13682] ret_from_fork+0x3fc/0x770 [ 600.367258][T13682] ret_from_fork_asm+0x1a/0x30 [ 600.372016][T13682] [ 600.374316][T13682] The buggy address belongs to the object at ffff888054371540 [ 600.374316][T13682] which belongs to the cache xfrm_state of size 928 [ 600.388255][T13682] The buggy address is located 816 bytes inside of [ 600.388255][T13682] freed 928-byte region [ffff888054371540, ffff8880543718e0) [ 600.402027][T13682] [ 600.404330][T13682] The buggy address belongs to the physical page: [ 600.410724][T13682] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888054370cc0 pfn:0x54370 [ 600.420766][T13682] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 600.429239][T13682] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 600.437128][T13682] page_type: f5(slab) [ 600.441086][T13682] raw: 00fff00000000040 ffff8881456a0640 ffffea000159d200 dead000000000003 [ 600.449643][T13682] raw: ffff888054370cc0 00000000800f0006 00000000f5000000 0000000000000000 [ 600.458203][T13682] head: 00fff00000000040 ffff8881456a0640 ffffea000159d200 dead000000000003 [ 600.467212][T13682] head: ffff888054370cc0 00000000800f0006 00000000f5000000 0000000000000000 [ 600.475871][T13682] head: 00fff00000000002 ffffea000150dc01 00000000ffffffff 00000000ffffffff [ 600.484517][T13682] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 600.493169][T13682] page dumped because: kasan: bad access detected [ 600.499556][T13682] page_owner tracks the page as allocated [ 600.505243][T13682] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7024, tgid 7010 (syz.0.262), ts 150427769999, free_ts 150421630747 [ 600.524502][T13682] post_alloc_hook+0x240/0x2a0 [ 600.529248][T13682] get_page_from_freelist+0x21e4/0x22c0 [ 600.534772][T13682] __alloc_frozen_pages_noprof+0x181/0x370 [ 600.540551][T13682] alloc_pages_mpol+0x232/0x4a0 [ 600.545377][T13682] allocate_slab+0x8a/0x370 [ 600.549853][T13682] ___slab_alloc+0xbeb/0x1410 [ 600.554508][T13682] kmem_cache_alloc_noprof+0x283/0x3c0 [ 600.559943][T13682] xfrm_state_alloc+0x24/0x2f0 [ 600.564689][T13682] xfrm_state_find+0x37d4/0x5400 [ 600.569600][T13682] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 600.575732][T13682] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 600.581078][T13682] xfrm_lookup_route+0x3c/0x1c0 [ 600.585923][T13682] rawv6_sendmsg+0xdab/0x1820 [ 600.590582][T13682] __sock_sendmsg+0x19c/0x270 [ 600.595236][T13682] ____sys_sendmsg+0x52d/0x830 [ 600.600023][T13682] ___sys_sendmsg+0x21f/0x2a0 [ 600.604718][T13682] page last free pid 6916 tgid 6916 stack trace: [ 600.611022][T13682] __free_frozen_pages+0xbc4/0xd30 [ 600.616125][T13682] __slab_free+0x303/0x3c0 [ 600.620516][T13682] qlist_free_all+0x97/0x140 [ 600.625114][T13682] kasan_quarantine_reduce+0x148/0x160 [ 600.630586][T13682] __kasan_slab_alloc+0x22/0x80 [ 600.635439][T13682] __kmalloc_noprof+0x224/0x4f0 [ 600.640289][T13682] tomoyo_encode+0x28b/0x550 [ 600.644886][T13682] tomoyo_path_perm+0x2b3/0x4b0 [ 600.649718][T13682] tomoyo_path_symlink+0xa3/0xe0 [ 600.654634][T13682] security_path_symlink+0x177/0x380 [ 600.660414][T13682] do_symlinkat+0x107/0x3f0 [ 600.664984][T13682] __x64_sys_symlink+0x7a/0x90 [ 600.669734][T13682] do_syscall_64+0xfa/0x3b0 [ 600.674219][T13682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.680092][T13682] [ 600.682426][T13682] Memory state around the buggy address: [ 600.688033][T13682] ffff888054371700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 600.696078][T13682] ffff888054371780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 600.704116][T13682] >ffff888054371800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 600.712172][T13682] ^ [ 600.719873][T13682] ffff888054371880: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 600.727925][T13682] ffff888054371900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 600.735963][T13682] ================================================================== [ 600.744099][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.750124][T13682] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 600.757295][T13682] CPU: 1 UID: 0 PID: 13682 Comm: syz.1.2076 Not tainted syzkaller #0 PREEMPT(full) [ 600.766638][T13682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 600.776671][T13682] Call Trace: [ 600.779930][T13682] [ 600.782842][T13682] dump_stack_lvl+0x99/0x250 [ 600.787413][T13682] ? __asan_memcpy+0x40/0x70 [ 600.791977][T13682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.797155][T13682] ? __pfx__printk+0x10/0x10 [ 600.801728][T13682] vpanic+0x281/0x750 [ 600.805690][T13682] ? __pfx_vpanic+0x10/0x10 [ 600.810171][T13682] ? irqentry_exit+0x74/0x90 [ 600.814751][T13682] panic+0xb9/0xc0 [ 600.818450][T13682] ? __pfx_panic+0x10/0x10 [ 600.822844][T13682] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 600.828720][T13682] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 600.834595][T13682] ? xfrm_state_find+0x44cd/0x5400 [ 600.839683][T13682] check_panic_on_warn+0x89/0xb0 [ 600.844600][T13682] ? xfrm_state_find+0x44cd/0x5400 [ 600.849700][T13682] end_report+0x78/0x160 [ 600.853922][T13682] kasan_report+0x129/0x150 [ 600.858406][T13682] ? xfrm_state_find+0x44cd/0x5400 [ 600.863496][T13682] xfrm_state_find+0x44cd/0x5400 [ 600.868431][T13682] ? __pfx___find_rr_leaf+0x10/0x10 [ 600.873609][T13682] ? __pfx_fib6_node_lookup+0x10/0x10 [ 600.878960][T13682] ? xfrm_state_find+0x1da/0x5400 [ 600.883958][T13682] ? __pfx_xfrm_state_find+0x10/0x10 [ 600.889215][T13682] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 600.894918][T13682] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 600.900967][T13682] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 600.907102][T13682] ? ip6_pol_route+0x162/0x1180 [ 600.911941][T13682] ? __pfx_ip6_pol_route+0x10/0x10 [ 600.917138][T13682] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 600.923701][T13682] ? __lock_acquire+0xab9/0xd20 [ 600.928540][T13682] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 600.933890][T13682] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 600.939238][T13682] ? xfrm_expand_policies+0x41f/0x6a0 [ 600.944585][T13682] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 600.949940][T13682] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 600.955552][T13682] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 600.961333][T13682] ? txopt_get+0x335/0x3f0 [ 600.965725][T13682] ? aa_label_sk_perm+0x4cd/0x630 [ 600.970750][T13682] ? __pfx_txopt_get+0x10/0x10 [ 600.975491][T13682] xfrm_lookup_route+0x3c/0x1c0 [ 600.980423][T13682] rawv6_sendmsg+0xdab/0x1820 [ 600.985153][T13682] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 600.990260][T13682] ? __pfx_aa_sk_perm+0x10/0x10 [ 600.995122][T13682] ? sock_rps_record_flow+0x19/0x410 [ 601.000407][T13682] ? inet_sendmsg+0x2f4/0x370 [ 601.005075][T13682] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 601.010343][T13682] __sock_sendmsg+0x19c/0x270 [ 601.015013][T13682] ____sys_sendmsg+0x52d/0x830 [ 601.019792][T13682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.025067][T13682] ? futex_unqueue+0x22/0x240 [ 601.029733][T13682] ? futex_unqueue+0x22/0x240 [ 601.034406][T13682] ___sys_sendmsg+0x21f/0x2a0 [ 601.039070][T13682] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.044257][T13682] ? __fget_files+0x2a/0x420 [ 601.048832][T13682] ? __fget_files+0x3a0/0x420 [ 601.053495][T13682] __sys_sendmmsg+0x28e/0x430 [ 601.058157][T13682] ? __pfx___sys_sendmmsg+0x10/0x10 [ 601.063351][T13682] ? __pfx_do_futex+0x10/0x10 [ 601.068026][T13682] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 601.073559][T13682] __do_fast_syscall_32+0xb6/0x2b0 [ 601.078646][T13682] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.083831][T13682] do_fast_syscall_32+0x34/0x80 [ 601.088655][T13682] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 601.095000][T13682] RIP: 0023:0xf7f74539 [ 601.099046][T13682] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 601.118628][T13682] RSP: 002b:00000000f544455c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 601.127032][T13682] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000480 [ 601.134979][T13682] RDX: 00000000000002e9 RSI: 0000000000000000 RDI: 0000000000000000 [ 601.142923][T13682] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 601.150877][T13682] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 601.158832][T13682] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 601.166788][T13682] [ 601.170062][T13682] Kernel Offset: disabled [ 601.174367][T13682] Rebooting in 86400 seconds..