last executing test programs: 11.890255108s ago: executing program 0 (id=704): syz_usb_connect(0x2, 0x32, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x1e, 0xba, 0xd7, 0x8, 0xeb1a, 0x2801, 0x217a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbb, 0x8, 0x1, 0x10, 0x3f, 0x8d, 0x4, [], [{{0x9, 0x5, 0x80, 0xc, 0x40, 0x7, 0x5, 0x1, [@generic={0x5, 0x5, "93291a"}]}}]}}]}}]}}, 0x0) (fail_nth: 31) 10.506842577s ago: executing program 0 (id=715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) syz_open_dev$sndctrl(&(0x7f0000000000), 0x4008, 0x1a1182) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000005000/0x1000)=nil, 0x4000) 8.44942227s ago: executing program 0 (id=724): r0 = syz_io_uring_setup(0x4d22, &(0x7f0000000380)={0x0, 0xb210, 0x20, 0x0, 0x34e}, &(0x7f00000001c0), &(0x7f0000000040)) sync_file_range(r0, 0x3, 0xad3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000240)="00001dde73622c5e2fe73c", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x4c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x25, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000001500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r6, 0x4b34, 0x3bf) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000a) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370, 0x0, r8}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) r12 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010904010102020d000009"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6c, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r12, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r9, 0x708, 0x41e3, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x64bf8fe95ba35d0d, &(0x7f00000001c0)={r13, r14+10000000}, 0x0) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="7b18004000000000180818000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x12, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x7, 0x1, 0x0, 0xb, 0xa, 0xfffffffffffffff0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40}, 0x94) 7.022607651s ago: executing program 4 (id=727): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000140), 0x0, 0xe6, 0x2) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003ec0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0x0, 0x2, 0x9]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r1, 0xfffffffb}, 0x8) 6.962865505s ago: executing program 1 (id=728): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/udp6\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)={0x2, 0x0, [{0x6, 0x1, 0x0, 0x0, @adapter={0x100000000, 0x9, 0x0, 0x1, 0xd2}}, {0x6, 0x2, 0x1, 0x0, @irqchip={0x6, 0x9}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffeff}}]}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x1001, &(0x7f0000001640)=""/4097, 0x0, 0x1}, 0x94) 6.77288018s ago: executing program 2 (id=729): fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20800, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x3, 0x4, 0x0, 0x3e}}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140), 0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000002300)=[{{&(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000a00), 0xff91}, {0x0, 0x91ff}, {0x0}, {&(0x7f00000000c0)="e9c255a24f4b7576814d4b884a22e31a", 0x10}], 0x4}}], 0x1, 0x2000c000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000b80)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x1, 0x0, 0xfe, 0x2}, [@RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x24}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6.327330797s ago: executing program 2 (id=731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0xf}, {}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xe6, 0x3}}, @filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x8}}, @TCA_U32_SEL={0x64, 0x5, {0x9, 0x7f, 0x6, 0xfffd, 0xfff, 0xa, 0x100, 0x0, [{0xf2b1, 0x84, 0xf6f, 0x5}, {0x7, 0x9, 0x3, 0x2}, {0x3, 0xc47, 0x3, 0x6}, {0x0, 0x880, 0x1c2, 0x19fa}, {0x2, 0x8aee, 0x1ffe, 0x87a}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) 6.224228682s ago: executing program 1 (id=732): r0 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000000500)={&(0x7f00000000c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="5c04090c3ddb2c30209135a2bb9afcf46256c32cea4b61533f7d23739aebd4bcc12fba9f0d946570204c172a89e4afe26e9f3a700e6dadc211f801dbaf2e518ee3b3b97735ee293dd8f6d94ddb20ba28018ea6a320a5a4ae9f9609f40dcc25532d8cebba8d777afa58ea7ebce7f510e257508f9b4303c78ae2e82974e02bbe5518999468f79187884e84", 0x8a}, {&(0x7f0000000280)="503609d4f992a41323281c1c3885e9f79d07793e92d00520ee1a257f65743642469d935879416fe9b3aba744d8174fc5aee17e65ee0e0f315a360203c6e8165848dd5f0aba54217096c8d55361817d5aa6af1a0c4265fa3d5587650b4acfc310ddb84757837160f221281f9daaaa6abaec8f6a535701fb615315eaf848c2e9c8e0abc600bea5f7e8f09abe116f542ff73a8f2242920df485d5643bb7184b1e", 0x9f}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="e0000000ff00000000000000c013680ea3b338d4ca023074408f229f68b991a87c09e53c9c6b47f24dd6de6d62d0e255de425419b6c8ee6ec0898b5aeaafec95219330b0dbb081fe7ed59ac31cdc3e6013176fadbf44698d4ed6891025a39e606660113c41dd0e1957787cc7871514f3e9d0826349ae240418551e795f8dc07e9a7509ba95cdaf068265fd543f6a5eff8251570d82bb58ab860bdba1b1144aac8c81d0ec01fdb30f8d7e3b105d83f99a5c44b1edb0d084e757e20dbba79195b69770512c276ba33ae1f3fd64cf1a48e57fef43a35c8c7e9dcd4d593f2fdf4d00"], 0xe0}, 0x4000080) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000580)=@buf={0x0, &(0x7f0000000540)}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) close_range(r2, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r0) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000001440)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000002240)={0x2020}, 0x2020) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) r6 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) ioctl$TCXONC(r6, 0x540a, 0x1) 6.026439588s ago: executing program 1 (id=735): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) syz_open_dev$sndctrl(&(0x7f0000000000), 0x4008, 0x1a1182) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000005000/0x1000)=nil, 0x4000) 5.967197036s ago: executing program 2 (id=736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) unshare(0x20000400) r4 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r4, 0x8c5d47e95537ac9b) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffeb7, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3000000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="0a00000062fc000008001b000000000008000d0003"], 0x30}}, 0x0) close(r7) readv(r6, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/163, 0xa3}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, &(0x7f0000000c40)=@x86={0xab, 0xd, 0x18, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0xc, 0xfd, 0x0, 0x1, 0xa, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) 5.833083128s ago: executing program 3 (id=737): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x8000000, 0x20, 0x0, {0x0, 0x8}, {0x350, 0xfffffffd}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x3, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x8, 0x4, 0x0, 0xb}) 5.832698311s ago: executing program 4 (id=738): syz_usb_connect(0x2, 0x32, &(0x7f0000000480)={{0x12, 0x1, 0xffff, 0x1e, 0xba, 0xd7, 0x8, 0xeb1a, 0x2801, 0x217a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbb, 0x8, 0x1, 0x10, 0x3f, 0x8d, 0x4, [], [{{0x9, 0x5, 0x80, 0xc, 0x40, 0x7, 0x5, 0x1, [@generic={0x5, 0x5, "93291a"}]}}]}}]}}]}}, 0x0) 5.606947117s ago: executing program 3 (id=739): read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r3, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0xa, 0x0}}, {0x6, @remote}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 'netpci0\x00'}) setsockopt$inet_mreq(r3, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002840)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000000000009000000000000000800000000000000040000000000000007000000000000000900000000000000080000000000bc2542b0d4bf000016000000000000002d9833100000000003000000000000000800000000000000fcffffffffffffff010000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x20008000}, 0xa801) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1", 0x13}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) process_madvise(r8, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x5c}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="5b297eb99162bf8668778501ce5385511d7d796a0aed27798b84852b8a9e85799af33e5de7cedbf88498be3b0b5df9f8ef11583a3bc3bdb6a1e5875f7494479905ca1f1feab109950b1be9946ac49c25c786113854b30003b573000a764104358c8b5899a86d2c25b7a2886023cee43b19c199a7c14017514656dcfeca386529d78597365934ca776ce9b8ee9d9e8b6d8c0789555790eaf1c1e6d2707c80f2a1558e720cc345a467af3f378dba06074d8ad43d61a8707a864bf5b7ba049c2b5836366fac540084a1986d713c58a932892237198aef95b616eefe20457d0b28ab35b7e8beefe6990b9bbd1cbb0cda68fd1e20c91a6ccd555cfe9c51d4f7bf082301fc61db5c7afcaa0992098895487418b1e78576e7d8f0989c9f4aff953c2f76c014b559ff40416df4b460e7da2e299bc58c8f83c070a9cfd8e662bdf8e5169baa393b1f2bd2b7bdc7886c3002e81501cc20abbcf665957e1c4a514dd15634a07b5618fbf03d23a93d2829deaeec967fb8f7b05ab4944553e8b96c5700e388e55dc9c60c6948f9382583622a37b7c81dfa5cea56b8e060aac882d0117585e0508c929591a7f0be8dfa96204f7daf90ce74e1891ba5c3ddc17d42cfafc8e12ef4109b5ec4e687389e1f325a6f4325c0eb034306588050973a24d7bf0d0044243cdfd672f4acbc115e81a83170b43a03c713e61c6ba573ea54d59b49b516800d934ae5c48d51551af9ee1f6143f9c4924b842d43208d52e4a34b4ccf167f347608d9c69e3af1a9f5507e35c198be14cff8170c82daa48cea49bbc2db68d8e8bf5752f13ebd80d510799c54d0dbee1792499c71e5db084babf44a431a4728a0f6702b4ad93d1fb5ebfef6a24b1fa057a8511df4c022e818b7af2ec354b47d34653172f75498298f8dc9eca6f478b5f9dc78f7b60401cf27fe9b1eade2d6bf7f50cee7197cd507c2766cc6b2163bd511aaa8d69dcaea44a7f37401faa0979182e51c59cd7b3189d2e8956405a2f27ead1d48b5aa421f04fdd87ef4fb3125a7a84e98719a79608d4bc70424ddc55dab8cb2b144682bca8497add2445319aef1a6db595685f3e0b049da99940d2803bc1ecd976887476cfecbdc66eea6da65e0251cc881f3da972011f37d11bd8828bfb2be9940f2508dcfa8c0e34e9e7a3ea3e7bf04afffca71c03d978507d87ee84241e5dd781c0caa8ad5320f16ed28c89af73a9445fe4c425605f6b58653cbb0909cb9a857b0c0c115104e879e41a2e05ccfcd6866d24ebf622a85ab638eab2ee2a7cf2bbd017a1509d25f65af4f63ed5dcc9586b133d52fd487e4c5238adee5bed4811def93d6723a9d4093b717ffe89209b126feee98bb276851319c2bd94f8327019d130a282fc6cf26d14ed15da2d607937a117bb6ab67fe36fe01562669dd70c649f45cf13240eef58f86f5ef3ae28cdc3e43d9f9d2ba4325a76965a2975e8174503bdfa199a38e0b58db63bcf1e5eb12de33c64b2ef33669fc9949151d8ba011200c884c5be7b84c1754d1ca896ce4ee9d6fb2e6fd4ae106418c800f2f78a7aed2eacb6b70e5aa926d21508e946850d52fc33ca95d00a5ce212e7731228c2d42bfc2881fda943aa8410156694be406a5936ef6ebb26a0a60cdbd5fd960f52bc8e574e9acf24c4d73416d3ef68417a2fe221cfcbffbeb194cfcb9802a5204f01532f8970ede7b7f7b2e093ed20686b545ac67c8d0f628269b373502379f3f3a5bcf1bbf1181d3de177ff5f1e05783e959739468a351bf539913774349129cb27f8a30167d86d2659954ace32de6e92e3fad637031f8f4b75bbb419d30c44c8d35b3db0ec43e7aaeb826a20afd3419439dce1db6112b6c8c236f5d7d563b9f0233c78875e5502cccb45ef8cb6fbcc6da3882ba86e8daa6afbc70f5192e76151e9633069a7d6b94f7b44b95a62f01d554000558deac1bbac044267a4a544ab336e83db60ba9a828dd0cbdc709dd1147a9f5c4b29d1f40eb87b7bafe8a7e29fea3a0e586bf84bb5a2aeeaf6c389e7d48b52f77e53f5b6d30e4d37a19ec2739c6fc80773e29a74ad01d2862e9e249c54a3f845a3045d964e371350282d5ee63a33f5d9d5d2889e60677ad3a78d7e3936f0da3c2a26a7f74ab598a7a0da120c2fe531416750f7dac241fb94962db31a6de323931bd0645510eb72bbddf8ac9ecba6a4b2e4039e36b96354a12d34186c2cefeb434a273c9eba6cbe055527c59815b1ae0b1d845e6d7fa935d7240bb202d42327d45433f214d4e62cbb5b51f354c2d8d232ddeacb829c99c3f4366e4541003f25dda0dff6c38afba9f1eb0383d8d824aa43be4f9784fa9c5181f8a373c3a35c5151b0402399dde92d9a607dc2768b258c9014dfff807f8389f0b8bc913eb0eec400f986dbdce9c616b7b2f7c671625f6881a4350b04117c251f4cba880908a9b2c44b4e886a8f09f3f57da1b04d6f28dfe47e34f1f6d9f8cb23658ec21d36a48d2cc9348dbf4f067446b995138d9bf37f218ab4f5ccbc21f9bf8b904253764fc753113350b69c6701b72c98d2d3697f46431c9cce4c1d089e535fbb1904fa2ff17b3f611300b91316c7f150ae0c6fd2acdcff3b4f49dcabd4ad54632d3dd6ab48e75197c97a52b93a6d5b68acebddfc2bdad5bc0c5f4b2e8b77799e2051e7a6c3a869e0fa5ade0245881e196a9a09d39a638e8d13ee6e667e04128ad6c56d01f18c1f2f624e4dbcd35769de072db3d688d9d91e952666992f0d2717799ee42ebda848735da9fb6b5a99425b940290aa42046a915d952c551ac00215e7d3c6b25fce0f9ef6b6a015be9cb3f1ff234c672d9e34f5d90af85fd5d0660b82d4b7fe851b1e4028f0bf55646b0c0d7161f760a2e598c1703361edf16b0a337cf808eefafd75807bc8caf9599b5e4e13eeb34e574b45bba80dc87eed30555135278751b4f9577a330c832058c680aea14338eff9d74dc7ff736823f6be457f89d50d3a1ec6f3a7228a0f75438587667f4d1307fcb04859728bbc5e4dc08b0e731acef19f37bb3a111d4abdea5960162cfbf89c69a7ac0827a3be22a362bc26759779f516d49acb2bde5b2c6bc32bd822ec771b0d0f106d8cd1e7739407632bd0db40ebaadd0ddb237a0c83448a5f1a6c4c67b6619b930405ea33bf5f80f7979ca431c677f2d46164e890c646f5c385eecff870f61e0da713f15301a7b73027b5927f9db8ddde589fa6f425fa365e38721e0a448ea9fb0dd0988439462d27ad4c3240cb719c6c649e5a0978a5a462c0a4ef4771609f3270848d44f018a655d6571c8876029289de163717cc646ae2159e94505736332e49610d054e43ce5542bbd7f7c61cc30bcb773e79ec6aa05368fd15d88c5b998bf963eebbf934df25d9c9f59cea6b1df3a9000ee2ce057a695de1dc8a1534abc489862e25d9113a14792b271bfa079908bf08d0c6c4eaa4b35a32d56a16c2161fda15087a3fc9c0364915f997c0026ea6d9e7ef9b21d0ef700007aed76cc680990a3a6ea8980ace288f6c53e33b5ecb7c8d5ed3fc79376daa5221a687cc29f67fe85fc34f0eca6970aa4b5bc1ea0d154d7fe551be3659118537557979086791ec737ef6401323114dc7d7664cb7fcc72d48a7cc03ded28888cbafecdc92cfec2dc9f9babf1438b7ba5a947ba1a73f703e293734a2f39cdc9844f99383a604378862d91e86ed9cca7664ea5682d5724473574a206279b95fdbc6a4a3489aabb5847c0ed92c6b4774e3d0510604c379c129f7b23ee80594831d39b88d33e425b0c9aba6c87ddffe6acb9e85693e4f0e8c260786094e7eaf91d8b5cc641715c1455108227104cd8330144d3f300f88edc5bd4264148dcdb55136b596290194804ab82965943dd8e26bfdf31ad6a066a471caaa17752c82e16ad4457b64e05cd30ac3a4310d069fdbf3941ff99b9b9ea0c4c1abb6aaefbad1f6419396c266def91d82ca41dcd5423dbc3d6612a65513e5756d1fed8b8994ad822bba044f1cae538fdb2332eb7b536fca10256fd1a34485944d82a28a71060a0c4da91a8cec97c54d17421a9a365abacd045de779313c83d2901819cd348113eb02f882f49b117f6d4243ffce69a896d0fd27f8f57eca27181a12d60851c21faa3588cfa8777562ac41ae84f73ef0bbea69645630f34686bf8eefd2be84e24ad0705a32d5c064723cd587149b47924cf4e4949dc42a33d8dd10d846ac5d7f6de6a9115307bc6b1269bf2121101db29ceb2af0ab33037ca283f3c828485233435bc9dfcf94ebe51278fb40c83d5e3dcd05e40f7c876ee7e5ebc9dc74f7d1e1449f4dc6f563b26db4b09ed6b430dab97b184f579d2e92693daff76aa9dcfeb631bdbc3514ea131b947e7fa78e86138452c611980df77a6b79d00d2a072f54b2c10a1c41dbe7addd4af58c9d55f1994b6f7aa688f4dc76e9bd02bd0ca3c8d08f6c300459c7508198de70460f1e59e067a261b2da5ecfbc97e89ca5fa1ff3ad3c312f9c9d04d5883ea654d213dd951c8a89d9f4da04614fa6f590d588d337facbdd443f62f7d9e6f78e0f1257fe69ac21bcb1456ab0c5ab32a8f5842fb77704f0e218cb9947e65ec5e96d591fb16317a4e441b6fa1767db363c3c6171601925a245ba14e37def27392d6c2f9a80a628509e0efa5f490dd3fa713870814a06bbfddfa5cbb06383ad303d46e3fc4d89b5552158dc8cf704ec903371f302eb320e801aa1cde570aeb322b3f5c95cfed7b5e1222fa0c71bb550b79d5f18971cab1904ef371b9cfcee444d764d744e270dcf30a6552a15dd67865ea21ca1334845ac7b31b11e3d5b6bab70073fcd0ed9891b1e4ba9a616f01c74671e4b80239a97fe8df9de1bb7196b7e0017b3cfe8d58b570cf641450c7eb82a0dd2f3e784ae4e9b1696c7731f56e10914f40ce2f0231982a588d19216dc29166aca1e272c2532eab01cbfb9c85f5bd72a9ffb4973ee111fabd1ef30b49eb6b085ddf3802f180335375f29da76a29edd3de27deaf6789f09d19caf1e6b146125adf8ac5bf259158863211e692d250962462746cf851c9198f8e2c43a69748db7760d4e2f3a98aaf9233bca7a3f94b36fff09e2a3241308f49b7b45a26918842b65a6a7bde1a5511af94cec0f706bf79a633088afe0c46ae8d61ac33688245bd63a293019e94608ff03cff41c1f798fd54b1f30e35564130f27838108bb6bfdd4e91ffe9a76dbc83f4ccbf7eebb01032808e58de30eb9be1c51440b6619be93d6e7d014ddc7183a4e1817128310e42c9575035f914d76378a0a914d5077ebdddab617a10996b8f398eee59d3b59775dc1e4db102d358615aa9d11cf9a08980be3bfc745f559779b5d40cb6e7c459a16f556eab0175dc4349dcf0143f3dee7f245d2ceb806ce2e636ae725cc0216450b68b3bd0b044a6bf5473524767929e2d03c1b4bab7676fc21928b11ae6d825fc35390d3566dd0adb04fdd74f2c491976fe99c3b6b64133d48ab3a45802920484fcd48c1c6424e97cda1a908373b487e3fe20baba119e9e78058c87bd6739a0bc18c03711d2c67630b5e106cac711324562008bd1243de9762a319c95166896a1f1098ded95b894e91b9516c6ccefa7061cab567fe150fb9c2c30b885fa85307f2d14d35446304d4d77af46d312860887a7b3781b492d98322b2cbbbbf7aabd3974de1e5e4afe31fd401e4989bb42b75ebc4d0306b43c7cd7493a46b2d86b374160bfb63972edae4ce984392007afafdb424d85ad234b59c5f4b248674634acfe10739dfb1a829d7a118f3b8b7e2ee4f5b6622d1d43", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0xae, 0x6c, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000003000495ee23b400000000070000040900030073797a3000000015140000001100010000000000000000000500000a00000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008082}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r9, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) 4.937920832s ago: executing program 0 (id=740): move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000000)=[0x1, 0x100], 0x0, 0x2) (async) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000000)=[0x1, 0x100], 0x0, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x4c) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480040102090000052406000105240000000d240f0100000000000000000006341a0000010724141592d2c404516a4bff0fad115aada5a429fe91f3a22e9ef68a0eb461ec6008006bd35cd44d993dc15f3a"], 0x0) 4.379806917s ago: executing program 1 (id=741): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x27) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$audion(&(0x7f00000002c0), 0xb, 0x101800) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x8e, "99749f32362f813a56cc5475e58372f72fe2ad560b2c3e6caa8b55768b817a7deb175a2a123627bdc7f26657ee3867a67f021b1439073947f5283564dd4398c4729e68f28fa03f50c1dc40d9fcf0ccd701e71b25b44bd02afaeb06fb7e44f899253d98fed34e3b24dc6702b1e24b068f2619508d1ff1a407a1eeecf2f4f1eef15992b4dc1b24ea3d93add9bf43b7"}, &(0x7f00000003c0)=0x96) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000440)={0x1, 0xea6b, 0xd, 0x4, 0x5, 0x2, 0x81, 0xc, r8}, 0x20) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) r9 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r9, 0xffffffffffffffff, 0x71) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x6, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x18, &(0x7f0000000200)={0x5, 0xf, 0x18, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x5, 0x0, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x811, 0xff0f, 0x6}]}}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8, 0x1) 4.224858748s ago: executing program 4 (id=742): fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20800, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x3, 0x4, 0x0, 0x3e}}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140), 0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000002300)=[{{&(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000a00), 0xff91}, {0x0, 0x91ff}, {0x0}, {&(0x7f00000000c0)="e9c255a24f4b7576814d4b884a22e31a", 0x10}], 0x4}}], 0x1, 0x2000c000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000b80)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x1, 0x0, 0xfe, 0x2}, [@RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x24}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.127214525s ago: executing program 3 (id=743): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (fail_nth: 8) 2.110197583s ago: executing program 4 (id=744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x2b8, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0xf}, {}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xe6, 0x3}}, @filter_kind_options=@f_u32={{0x8}, {0x284, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x8}}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_batadv\x00'}, @TCA_U32_SEL={0x264, 0x5, {0x9, 0x7f, 0x6, 0xfffd, 0xfff, 0xa, 0x100, 0x0, [{0xf2b1, 0x84, 0xf6f, 0x5}, {0x7, 0x9, 0x3, 0x2}, {0x6, 0x800, 0x5, 0x5}, {0x3, 0xc47, 0x3, 0x6}, {0x0, 0x880, 0x1c2, 0x19fa}, {0x2, 0x8aee, 0x1ffe, 0x87a}, {0xff, 0x9, 0x3aea, 0xf1f}, {0x2e522605, 0x3, 0x0, 0x1}, {0x746, 0x7ff, 0x2, 0x1}, {0x2, 0x6, 0x7ff, 0x3ff}, {0x0, 0x3, 0x1ff, 0x4092}, {0x9, 0xf4, 0x7, 0xd}, {0x4, 0x6bb91b3d, 0x6, 0xe91c}, {0x8, 0x305, 0x9, 0x719}, {0x401, 0xf, 0xff, 0x8001}, {0x46e, 0x5848a16, 0x0, 0xfffff806}, {0x2, 0x2, 0x7, 0x9}, {0x8, 0xffffffff, 0x5, 0x6}, {0x7, 0xe65, 0x80000000, 0x7}, {0x9, 0x100, 0x8, 0x100}, {0x10001, 0x4, 0x4, 0xf1}, {0x4, 0x2, 0x2, 0xd}, {0xff, 0x0, 0x9, 0x100}, {0xe73, 0x8, 0x6, 0x8}, {0x57dd, 0x1, 0x5, 0x1}, {0x9, 0xb12c, 0x4, 0x7}, {0x27366262, 0x0, 0x4, 0x2}, {0x9, 0x80, 0x8, 0x4}, {0x8, 0x6, 0x5, 0x6}, {0xbd19, 0x7, 0x3, 0x4}, {0xb, 0x9, 0xac, 0x2}, {0x7, 0x0, 0x8, 0x8}, {0x53d, 0x1, 0xe, 0xfffffeff}, {0x1, 0xf, 0x5, 0xffff}, {0xfffffffe, 0xac, 0x1, 0x7f}, {0x7, 0xff, 0x3, 0x3}, {0x7f, 0x3, 0xc, 0x3}]}}]}}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x81}, 0x800) 2.044934888s ago: executing program 2 (id=745): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @remote, 0x3}, 0x1c) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0xd5}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0xd000000, 0x28, 0x0, 0x0) 1.990195633s ago: executing program 2 (id=746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0xf}, {}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xe6, 0x3}}, @filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x8}}, @TCA_U32_SEL={0x64, 0x5, {0x9, 0x7f, 0x6, 0xfffd, 0xfff, 0xa, 0x100, 0x0, [{0xf2b1, 0x84, 0xf6f, 0x5}, {0x7, 0x9, 0x3, 0x2}, {0x3, 0xc47, 0x3, 0x6}, {0x0, 0x880, 0x1c2, 0x19fa}, {0x2, 0x8aee, 0x1ffe, 0x87a}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1.950408874s ago: executing program 3 (id=747): r0 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000000500)={&(0x7f00000000c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="5c04090c3ddb2c30209135a2bb9afcf46256c32cea4b61533f7d23739aebd4bcc12fba9f0d946570204c172a89e4afe26e9f3a700e6dadc211f801dbaf2e518ee3b3b97735ee293dd8f6d94ddb20ba28018ea6a320a5a4ae9f9609f40dcc25532d8cebba8d777afa58ea7ebce7f510e257508f9b4303c78ae2e82974e02bbe5518999468f79187884e84", 0x8a}, {0x0}, {&(0x7f0000000280)="503609d4f992a41323281c1c3885e9f79d07793e92d00520ee1a257f65743642469d935879416fe9b3aba744d8174fc5aee17e65ee0e0f315a360203c6e8165848dd5f0aba54217096c8d55361817d5aa6af1a0c4265fa3d5587650b4acfc310ddb84757837160f221281f9daaaa6abaec8f6a535701fb615315eaf848c2e9c8e0abc600bea5f7e8f09abe116f542ff73a8f2242920df485d5643bb7184b1e", 0x9f}], 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="e0000000ff00000000000000c013680ea3b338d4ca023074408f229f68b991a87c09e53c9c6b47f24dd6de6d62d0e255de425419b6c8ee6ec0898b5aeaafec95219330b0dbb081fe7ed59ac31cdc3e6013176fadbf44698d4ed6891025a39e606660113c41dd0e1957787cc7871514f3e9d0826349ae240418551e795f8dc07e9a7509ba95cdaf068265fd543f6a5eff8251570d82bb58ab860bdba1b1144aac8c81d0ec01fdb30f8d7e3b105d83f99a5c44b1edb0d084e757e20dbba79195b69770512c276ba33ae1f3fd64cf1a48e57fef43a35c8c7e9dcd4d593f2fdf4d00"], 0xe0}, 0x4000080) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000580)=@buf={0x0, &(0x7f0000000540)}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) close_range(r2, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r0) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000001440)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000002240)={0x2020}, 0x2020) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) r6 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) ioctl$TCXONC(r6, 0x540a, 0x1) 1.824897172s ago: executing program 0 (id=748): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x4008000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x7}, 0x8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = openat$rfkill(0xffffff9c, &(0x7f00000001c0), 0x2800, 0x0) read$rfkill(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002d00090027bd70000000000004000000a8ab82d2d84ca65bdf9b21b57035a6030a5b62dda8d1d62b0d8722eb863d715a5ad9756cb8ccbd14249942309d08474e13346d1282eee548a7adcaee66e9720546fd6d558e4d0ba93237c9a3d6e949e2d10d4a50f43f1f1aa00db85bb66a7b6333cbcd1fc74f6737de6f353807721967c38d35bfc56561412229c240a217133cfe811634cac8918f40898e4cb332f0bf4da6b3e537a4e398a3217b143d00"/191], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.811504207s ago: executing program 4 (id=749): mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0xe370, 0x0, 0x1, 0xfffffffa}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x0, 0xa9a], 0x2) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xc}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$inet6(0xa, 0x2, 0x0) unshare(0x24060400) 1.714096138s ago: executing program 2 (id=750): landlock_create_ruleset(&(0x7f0000000040)={0x600, 0x3, 0x1}, 0x18, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) unshare(0x2c020400) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "9615"}]}]}]}]}, 0x40}}, 0x8000) socket(0x1, 0x803, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x11, 0x20000000) setsockopt$inet_tcp_int(r2, 0x6, 0xb, 0x0, 0x0) 1.687338723s ago: executing program 3 (id=751): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) (async) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) (async) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0xa}}, 0x20) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYRESHEX=r0], 0x108}, 0x1, 0x0, 0x0, 0x24000050}, 0x20008880) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) connect$unix(r2, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="020000000467763b030001000800000000000000f9ae14307cfe94bdfc6948a046c866050e20c529a744afc3b2402e24a3a165f3d879804b4947db9b74adb2d2550b999c8d7332a393511094bfc6755a9eac9ee0bf4f6c817d595b72df903f242639257f534a349f2caed27ea52d61a11fdbf3e3084b30a938f45dadaa8cfa18a9fe63a42443b768a677a26b358fa250a326695e189b9eb228799b4dbb210d17be8347a7b641ac7c09e31299a86262da7a6e63e63659c6e76c924abe32b07e76bc99d32c9fc8aba221f72d2c86acaa01a66378b13e02c59ede62a9ba60931b51bc47cae6822d68c5a8a68177fbdb17ebe92c082be8d18f0f324d8b2a7fe204a69b8797a2755cfd9e0b0aed649429971a20c7cf", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000040)=""/4092, 0xffc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001340)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x4008000) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT]) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x5fc3, @loopback, 0x7}]}, &(0x7f0000000100)=0x10) (async) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000040)={0x3, 0xc914}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000001000ffff25bd7000fbdbdf2500000000", @ANYRES32, @ANYBLOB="1720000021200000680012800c0001006d6163766c616e0058000280400005800a00060040a014f4e60500000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a00040000000000000000000a000400bbbbbbbbbbbb00000600020000000000040004"], 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) shutdown(r0, 0x1) 1.328797108s ago: executing program 4 (id=752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) syz_open_dev$sndctrl(&(0x7f0000000000), 0x4008, 0x1a1182) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000005000/0x1000)=nil, 0x4000) 1.18994913s ago: executing program 1 (id=753): r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd300062e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19d211220900ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b8385702f5ff00000000000f2d00000000000100"}, 0x80, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="980000001600010025bd7000fedbdf250a80a0fd", @ANYRES32=0x0, @ANYBLOB="14000100fe800000f7ffff0a00000000050000ce150002"], 0x98}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) write$sysctl(r2, &(0x7f0000000140)='7\x00', 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) 655.324358ms ago: executing program 1 (id=754): read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r3, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0xa, 0x0}}, {0x6, @remote}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 'netpci0\x00'}) setsockopt$inet_mreq(r3, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002840)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000000000009000000000000000800000000000000040000000000000007000000000000000900000000000000080000000000bc2542b0d4bf000016000000000000002d9833100000000003000000000000000800000000000000fcffffffffffffff010000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x20008000}, 0xa801) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1", 0x13}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) process_madvise(r8, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x5c}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0xae, 0x6c, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000003000495ee23b400000000070000040900030073797a3000000015140000001100010000000000000000000500000a00000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008082}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r9, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) 92.997216ms ago: executing program 3 (id=755): fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20800, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x3, 0x4, 0x0, 0x3e}}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140), 0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000002300)=[{{&(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000a00), 0xff91}, {0x0, 0x91ff}, {0x0}, {&(0x7f00000000c0)="e9c255a24f4b7576814d4b884a22e31a", 0x10}], 0x4}}], 0x1, 0x2000c000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000b80)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x1, 0x0, 0xfe, 0x2}, [@RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x24}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=756): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x4, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x22eb, 0x8}}}}}}, 0x0) socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b}, &(0x7f0000000140), &(0x7f0000000200)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000267000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x4e20, 0x0, 0x2}, {0x0, 0x15000000000000, 0x0, 0x1, 0x8001, 0x7, 0x0, 0xd3d}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 847598][ T7299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.869448][ T1086] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 194.877823][ T7310] netlink: 14 bytes leftover after parsing attributes in process `syz.1.338'. [ 194.919908][ T1086] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 194.962464][ T7315] netlink: 14 bytes leftover after parsing attributes in process `syz.1.338'. [ 194.999198][ T1086] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 195.088464][ T979] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 195.274540][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.290309][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.303768][ T979] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.311681][ T7329] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 195.367286][ T979] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.377512][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.392306][ T979] usb 5-1: config 0 descriptor?? [ 195.433544][ T5980] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 195.492866][ T5949] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 195.602978][ T5980] usb 2-1: Using ep0 maxpacket: 8 [ 195.617753][ T5980] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 195.628221][ T5980] usb 2-1: config 0 has no interface number 0 [ 195.637173][ T979] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 195.650959][ T5949] usb 3-1: Using ep0 maxpacket: 8 [ 195.661797][ T5980] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.685110][ T5949] usb 3-1: unable to get BOS descriptor or descriptor too short [ 195.700179][ T5980] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 195.712559][ T5980] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.724778][ T5949] usb 3-1: config 7 has an invalid interface number: 142 but max is 0 [ 195.764824][ T5949] usb 3-1: config 7 has no interface number 0 [ 195.781247][ T5980] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 195.802218][ T5949] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 195.814838][ T5980] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 195.824310][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.958609][ T5949] usb 3-1: Product: syz [ 195.963782][ T5980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.971980][ T5949] usb 3-1: Manufacturer: syz [ 195.977427][ T5949] usb 3-1: SerialNumber: syz [ 195.991339][ T24] usb 5-1: USB disconnect, device number 15 [ 195.999068][ T5980] usb 2-1: config 0 descriptor?? [ 196.127624][ T7332] fido_id[7332]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 196.149418][ T5980] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 196.231839][ T7341] fuse: Unknown parameter '0x0000000000000007' [ 196.257522][ T5872] Bluetooth: hci4: command 0x0406 tx timeout [ 196.263751][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 196.269770][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 196.276458][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.276491][ T5873] Bluetooth: hci0: command 0x0406 tx timeout [ 196.595431][ T5949] usb 3-1: USB disconnect, device number 23 [ 196.899881][ T7351] macvlan0: entered promiscuous mode [ 196.928845][ T7351] netlink: 'syz.3.347': attribute type 2 has an invalid length. [ 196.942962][ T982] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 197.154674][ T7353] bridge0: port 3(batadv0) entered disabled state [ 197.161577][ T7353] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.169147][ T7353] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.219778][ T982] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.238504][ T982] usb 5-1: config 0 has no interface number 0 [ 197.309526][ T982] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 197.324255][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 197.403906][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.443606][ T982] usb 5-1: config 0 descriptor?? [ 197.462381][ T982] usb 5-1: selecting invalid altsetting 1 [ 197.480982][ T982] dvb_ttusb_budget: ttusb_init_controller: error [ 197.500871][ T982] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 197.551838][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.586593][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.619890][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 197.650727][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 197.682682][ T24] usb 4-1: SerialNumber: syz [ 197.836734][ T982] DVB: Unable to find symbol cx22700_attach() [ 197.952399][ T982] DVB: Unable to find symbol tda10046_attach() [ 197.961578][ T982] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 198.008730][ T24] usb 4-1: 0:2 : does not exist [ 198.029649][ T24] usb 4-1: unit 5 not found! [ 198.173483][ T43] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 198.200262][ T982] usb 2-1: USB disconnect, device number 18 [ 198.249778][ T982] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 198.337799][ T24] usb 4-1: USB disconnect, device number 21 [ 198.394530][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 198.415362][ T43] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 198.427302][ T43] usb 3-1: config 1 interface 0 has no altsetting 0 [ 198.452450][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 198.461588][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.469779][ T43] usb 3-1: Product: syz [ 198.474297][ T43] usb 3-1: Manufacturer: syz [ 198.480087][ T43] usb 3-1: SerialNumber: syz [ 198.539582][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.561649][ T7366] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 199.624073][ T7393] fuse: Unknown parameter '0x0000000000000006' [ 200.208982][ T24] usb 5-1: USB disconnect, device number 16 [ 200.774522][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 200.984123][ T43] usb 3-1: USB disconnect, device number 24 [ 201.829720][ T7437] netlink: 'syz.3.372': attribute type 10 has an invalid length. [ 201.908096][ T7441] fuse: Unknown parameter '0x0000000000000007' [ 201.958067][ T7437] team0: Port device dummy0 added [ 201.967494][ T7437] netlink: 'syz.3.372': attribute type 10 has an invalid length. [ 201.985220][ T7437] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 202.340793][ T7437] team0: Failed to send options change via netlink (err -105) [ 202.387012][ T7437] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 202.402954][ T7356] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 202.419087][ T7437] team0: Port device dummy0 removed [ 202.498668][ T7437] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 202.585798][ T7356] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.639564][ T7356] usb 3-1: config 0 has no interface number 0 [ 202.640097][ T7356] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 202.640504][ T7356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.786574][ T7356] usb 3-1: config 0 descriptor?? [ 202.826074][ T7356] usb 3-1: selecting invalid altsetting 1 [ 202.956533][ T7356] dvb_ttusb_budget: ttusb_init_controller: error [ 202.977358][ T7356] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 203.082101][ T7356] DVB: Unable to find symbol cx22700_attach() [ 203.202952][ T43] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 203.282153][ T7356] DVB: Unable to find symbol tda10046_attach() [ 203.332266][ T7356] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 203.388599][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 203.406225][ T43] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 203.417644][ T43] usb 5-1: config 1 interface 0 has no altsetting 0 [ 203.458890][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 203.468028][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.476798][ T43] usb 5-1: Product: syz [ 203.481075][ T43] usb 5-1: Manufacturer: syz [ 203.486065][ T43] usb 5-1: SerialNumber: syz [ 203.511976][ T7462] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 203.985249][ T7477] FAULT_INJECTION: forcing a failure. [ 203.985249][ T7477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.034067][ T7477] CPU: 0 UID: 0 PID: 7477 Comm: syz.3.384 Not tainted syzkaller #0 PREEMPT(full) [ 204.034092][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.034102][ T7477] Call Trace: [ 204.034109][ T7477] [ 204.034117][ T7477] dump_stack_lvl+0x189/0x250 [ 204.034141][ T7477] ? __pfx____ratelimit+0x10/0x10 [ 204.034164][ T7477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.034183][ T7477] ? __pfx__printk+0x10/0x10 [ 204.034205][ T7477] ? __might_fault+0xb0/0x130 [ 204.034237][ T7477] should_fail_ex+0x414/0x560 [ 204.034262][ T7477] _copy_from_user+0x2d/0xb0 [ 204.034282][ T7477] br_dev_siocdevprivate+0x13f/0x1580 [ 204.034302][ T7477] ? __pfx___mutex_trylock_common+0x10/0x10 [ 204.034326][ T7477] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 204.034342][ T7477] ? rcu_is_watching+0x15/0xb0 [ 204.034359][ T7477] ? trace_contention_end+0x39/0x120 [ 204.034386][ T7477] ? __lock_acquire+0xab9/0xd20 [ 204.034410][ T7477] ? dev_ioctl+0x83c/0x1150 [ 204.034441][ T7477] ? full_name_hash+0x92/0xe0 [ 204.034461][ T7477] ? netdev_name_node_lookup+0xdf/0x120 [ 204.034486][ T7477] dev_ifsioc+0xb57/0xf00 [ 204.034517][ T7477] dev_ioctl+0x84c/0x1150 [ 204.034542][ T7477] sock_ioctl+0x719/0x790 [ 204.034565][ T7477] ? __pfx_sock_ioctl+0x10/0x10 [ 204.034591][ T7477] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 204.034619][ T7477] compat_sock_ioctl+0x285/0xc80 [ 204.034645][ T7477] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 204.034669][ T7477] ? __fget_files+0x3a0/0x420 [ 204.034683][ T7477] ? __fget_files+0x2a/0x420 [ 204.034701][ T7477] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 204.034724][ T7477] __ia32_compat_sys_ioctl+0x540/0x840 [ 204.034749][ T7477] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 204.034769][ T7477] ? __fget_files+0x3a0/0x420 [ 204.034790][ T7477] ? fput+0xa0/0xd0 [ 204.034808][ T7477] ? ksys_write+0x22a/0x250 [ 204.034837][ T7477] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.034863][ T7477] __do_fast_syscall_32+0xb6/0x2b0 [ 204.034880][ T7477] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.034906][ T7477] do_fast_syscall_32+0x34/0x80 [ 204.034922][ T7477] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.034942][ T7477] RIP: 0023:0xf7f18539 [ 204.034957][ T7477] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 204.034971][ T7477] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 204.034989][ T7477] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f0 [ 204.035001][ T7477] RDX: 0000000080001440 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.035011][ T7477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.035021][ T7477] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.035031][ T7477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.035057][ T7477] [ 204.951140][ T982] usb 3-1: USB disconnect, device number 25 [ 205.014385][ T7483] fuse: Unknown parameter '0x0000000000000007' [ 205.212551][ T7493] netlink: 'syz.0.388': attribute type 10 has an invalid length. [ 205.322907][ T7493] team0: Port device dummy0 added [ 205.429259][ T43] usb 5-1: USB disconnect, device number 17 [ 205.738006][ T5950] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 205.898415][ T5950] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 205.916915][ T5950] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 205.966657][ T7493] syz.0.388 (7493) used greatest stack depth: 18672 bytes left [ 205.987411][ T5950] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 206.005381][ T5950] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 206.026490][ T5950] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 206.059886][ T5950] usb 2-1: config 0 interface 0 has no altsetting 0 [ 206.231575][ T5950] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 206.242299][ T5950] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 206.260719][ T5950] usb 2-1: Product: syz [ 206.270556][ T5950] usb 2-1: Manufacturer: syz [ 206.284219][ T5950] usb 2-1: SerialNumber: syz [ 206.321180][ T5950] usb 2-1: config 0 descriptor?? [ 206.575200][ T7497] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 206.583902][ T5950] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 206.674380][ T7512] block device autoloading is deprecated and will be removed. [ 206.778457][ T5950] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 207.002929][ T43] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 207.131710][ T7528] FAULT_INJECTION: forcing a failure. [ 207.131710][ T7528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.186056][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.195987][ T43] usb 3-1: config 0 has no interface number 0 [ 207.213191][ T7528] CPU: 1 UID: 0 PID: 7528 Comm: syz.0.399 Not tainted syzkaller #0 PREEMPT(full) [ 207.213214][ T7528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.213225][ T7528] Call Trace: [ 207.213232][ T7528] [ 207.213239][ T7528] dump_stack_lvl+0x189/0x250 [ 207.213266][ T7528] ? __pfx____ratelimit+0x10/0x10 [ 207.213288][ T7528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.213306][ T7528] ? __pfx__printk+0x10/0x10 [ 207.213328][ T7528] ? __might_fault+0xb0/0x130 [ 207.213357][ T7528] should_fail_ex+0x414/0x560 [ 207.213392][ T7528] _copy_from_user+0x2d/0xb0 [ 207.213412][ T7528] input_event_from_user+0xf9/0x280 [ 207.213431][ T7528] ? __pfx_input_event_from_user+0x10/0x10 [ 207.213454][ T7528] ? input_inject_event+0xb6/0x340 [ 207.213473][ T7528] evdev_write+0x2a6/0x480 [ 207.213486][ T7528] ? __pfx_evdev_write+0x10/0x10 [ 207.213495][ T7528] ? bpf_lsm_file_permission+0x9/0x20 [ 207.213507][ T7528] ? security_file_permission+0x75/0x290 [ 207.213521][ T7528] ? rw_verify_area+0x255/0x4d0 [ 207.213533][ T7528] ? __lock_acquire+0xab9/0xd20 [ 207.213546][ T7528] ? __pfx_evdev_write+0x10/0x10 [ 207.213555][ T7528] vfs_write+0x27e/0xb30 [ 207.213572][ T7528] ? __pfx_vfs_write+0x10/0x10 [ 207.213585][ T7528] ? __fget_files+0x2a/0x420 [ 207.213595][ T7528] ? __fget_files+0x2a/0x420 [ 207.213602][ T7528] ? __fget_files+0x3a0/0x420 [ 207.213610][ T7528] ? __fget_files+0x2a/0x420 [ 207.213622][ T7528] ksys_write+0x145/0x250 [ 207.213636][ T7528] ? __pfx_ksys_write+0x10/0x10 [ 207.213658][ T7528] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.213683][ T7528] __do_fast_syscall_32+0xb6/0x2b0 [ 207.213694][ T7528] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.213710][ T7528] do_fast_syscall_32+0x34/0x80 [ 207.213719][ T7528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.213730][ T7528] RIP: 0023:0xf710e539 [ 207.213740][ T7528] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 207.213748][ T7528] RSP: 002b:00000000f54fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 207.213759][ T7528] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 207.213766][ T7528] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.213771][ T7528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.213777][ T7528] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 207.213782][ T7528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.213796][ T7528] [ 207.216665][ T43] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 207.565558][ T7357] usb 2-1: USB disconnect, device number 19 [ 207.626164][ T7357] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 207.650350][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.667477][ T43] usb 3-1: config 0 descriptor?? [ 207.676024][ T43] usb 3-1: selecting invalid altsetting 1 [ 207.681823][ T43] dvb_ttusb_budget: ttusb_init_controller: error [ 207.691128][ T43] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 207.799847][ T43] DVB: Unable to find symbol cx22700_attach() [ 207.841966][ T43] DVB: Unable to find symbol tda10046_attach() [ 207.862853][ T43] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 209.004790][ T43] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 209.186654][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 209.197593][ T43] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 209.208595][ T43] usb 5-1: config 1 interface 0 has no altsetting 0 [ 209.236004][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 209.245273][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.256405][ T43] usb 5-1: Product: syz [ 209.281009][ T43] usb 5-1: Manufacturer: syz [ 209.286988][ T43] usb 5-1: SerialNumber: syz [ 209.372659][ T7549] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.629018][ T7556] fuse: Unknown parameter '0x0000000000000007' [ 209.778371][ T7355] usb 3-1: USB disconnect, device number 26 [ 209.793316][ T7357] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 209.957203][ T7357] usb 4-1: config 0 has no interfaces? [ 209.964986][ T7357] usb 4-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 209.996221][ T7357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.036635][ T7357] usb 4-1: config 0 descriptor?? [ 210.369319][ T7574] binder: 7573:7574 ioctl c018620c 0 returned -14 [ 211.789067][ T43] usb 5-1: USB disconnect, device number 18 [ 212.049213][ T7601] fuse: Unknown parameter '0x0000000000000007' [ 212.383126][ T43] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 212.547606][ T7357] usb 4-1: USB disconnect, device number 22 [ 212.577028][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.627577][ T43] usb 5-1: config 0 has no interface number 0 [ 212.649740][ T43] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 212.688872][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.719173][ T43] usb 5-1: config 0 descriptor?? [ 212.755918][ T43] usb 5-1: selecting invalid altsetting 1 [ 212.768836][ T43] dvb_ttusb_budget: ttusb_init_controller: error [ 212.795247][ T43] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 212.916679][ T43] DVB: Unable to find symbol cx22700_attach() [ 213.185302][ T43] DVB: Unable to find symbol tda10046_attach() [ 213.222256][ T43] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 213.333162][ T7357] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 213.524596][ T7357] usb 4-1: unable to get BOS descriptor set [ 213.544034][ T7357] usb 4-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.991249][ T7357] usb 4-1: config 1 interface 0 has no altsetting 0 [ 214.167469][ T7357] usb 4-1: string descriptor 0 read error: -22 [ 214.180505][ T7357] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 214.194712][ T7357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.588589][ T7357] usbhid 4-1:1.0: can't add hid device: -71 [ 214.595431][ T7357] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 214.657248][ T7357] usb 4-1: USB disconnect, device number 23 [ 214.892997][ T43] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 214.923444][ T7638] fuse: Unknown parameter '0x0000000000000007' [ 215.084171][ T43] usb 1-1: not running at top speed; connect to a high speed hub [ 215.142671][ T43] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 215.230894][ T5950] usb 5-1: USB disconnect, device number 19 [ 215.240998][ T43] usb 1-1: config 1 interface 0 has no altsetting 0 [ 215.546634][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 215.565033][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.573519][ T43] usb 1-1: Product: syz [ 215.578190][ T43] usb 1-1: Manufacturer: syz [ 215.583363][ T43] usb 1-1: SerialNumber: syz [ 215.619636][ T7635] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 216.620305][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 216.802916][ T24] usb 3-1: device descriptor read/64, error -71 [ 217.042943][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 217.174726][ T24] usb 3-1: device descriptor read/64, error -71 [ 217.283577][ T24] usb usb3-port1: attempt power cycle [ 217.492226][ T43] usb 1-1: USB disconnect, device number 20 [ 217.622954][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 217.662050][ T24] usb 3-1: device descriptor read/8, error -71 [ 217.787128][ T7684] fuse: Unknown parameter '0x0000000000000007' [ 217.805370][ T7680] delete_channel: no stack [ 217.983398][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 218.102714][ T24] usb 3-1: device descriptor read/8, error -71 [ 218.184464][ T7355] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 218.233363][ T24] usb usb3-port1: unable to enumerate USB device [ 218.397306][ T7355] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.407195][ T7355] usb 5-1: config 0 has no interface number 0 [ 218.430641][ T7355] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 218.455380][ T7355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.527968][ T7355] usb 5-1: config 0 descriptor?? [ 218.551996][ T7355] usb 5-1: selecting invalid altsetting 1 [ 218.557991][ T7355] dvb_ttusb_budget: ttusb_init_controller: error [ 218.587413][ T7355] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 218.717375][ T7355] DVB: Unable to find symbol cx22700_attach() [ 218.888306][ T7355] DVB: Unable to find symbol tda10046_attach() [ 218.898156][ T7355] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 219.228123][ T7708] netlink: 92 bytes leftover after parsing attributes in process `syz.0.454'. [ 219.929734][ T7724] netlink: 'syz.2.459': attribute type 1 has an invalid length. [ 220.017261][ T24] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 220.067450][ T7729] netlink: 600 bytes leftover after parsing attributes in process `syz.0.460'. [ 220.260557][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 220.270704][ T24] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 220.302953][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 220.342223][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 220.378610][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.378829][ T7735] fuse: Unknown parameter '0x0000000000000007' [ 220.404731][ T30] kauditd_printk_skb: 163 callbacks suppressed [ 220.404747][ T30] audit: type=1326 audit(1756703220.305:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 220.408370][ T7737] FAULT_INJECTION: forcing a failure. [ 220.408370][ T7737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.411567][ T30] audit: type=1326 audit(1756703220.305:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 220.432736][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.468615][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.509953][ T24] usb 4-1: Product: syz [ 220.522360][ T7737] CPU: 0 UID: 0 PID: 7737 Comm: syz.0.462 Not tainted syzkaller #0 PREEMPT(full) [ 220.522382][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.522393][ T7737] Call Trace: [ 220.522400][ T7737] [ 220.522408][ T7737] dump_stack_lvl+0x189/0x250 [ 220.522432][ T7737] ? __pfx____ratelimit+0x10/0x10 [ 220.522455][ T7737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.522474][ T7737] ? __pfx__printk+0x10/0x10 [ 220.522508][ T7737] should_fail_ex+0x414/0x560 [ 220.522534][ T7737] _copy_to_user+0x31/0xb0 [ 220.522555][ T7737] __se_sys_sched_getattr+0x42e/0x5d0 [ 220.522576][ T7737] ? __se_sys_sched_getattr+0xd2/0x5d0 [ 220.522595][ T7737] ? __pfx___se_sys_sched_getattr+0x10/0x10 [ 220.522613][ T7737] ? ksys_write+0x22a/0x250 [ 220.522638][ T7737] ? __secure_computing+0xe2/0x2a0 [ 220.522664][ T7737] __do_fast_syscall_32+0xb6/0x2b0 [ 220.522681][ T7737] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.522707][ T7737] do_fast_syscall_32+0x34/0x80 [ 220.522723][ T7737] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.522743][ T7737] RIP: 0023:0xf710e539 [ 220.522761][ T7737] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 220.522774][ T7737] RSP: 002b:00000000f54fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000160 [ 220.522792][ T7737] RAX: ffffffffffffffda RBX: 0000000000000149 RCX: 0000000080000740 [ 220.522804][ T7737] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.522814][ T7737] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.522824][ T7737] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 220.522835][ T7737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.522861][ T7737] [ 220.526422][ T24] usb 4-1: Manufacturer: syz [ 220.792958][ T30] audit: type=1326 audit(1756703220.305:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 220.817703][ T30] audit: type=1326 audit(1756703220.305:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 221.020603][ T24] usb 4-1: SerialNumber: syz [ 221.031849][ T7746] netlink: 'syz.1.465': attribute type 1 has an invalid length. [ 221.043765][ T7717] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.053141][ T7746] netlink: 36 bytes leftover after parsing attributes in process `syz.1.465'. [ 221.057811][ T30] audit: type=1326 audit(1756703220.305:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 221.135477][ T43] usb 5-1: USB disconnect, device number 20 [ 221.362336][ T30] audit: type=1326 audit(1756703220.305:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 221.412875][ T5950] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 221.478926][ T30] audit: type=1326 audit(1756703220.445:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 221.525020][ T30] audit: type=1326 audit(1756703220.445:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 221.585191][ T5950] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 221.597065][ T30] audit: type=1326 audit(1756703220.445:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 221.619108][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.630206][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 221.643140][ T5950] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 221.652566][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.699176][ T30] audit: type=1326 audit(1756703220.445:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 221.722595][ T5950] usb 1-1: config 0 descriptor?? [ 221.752895][ T7355] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 221.913619][ T7355] usb 5-1: Using ep0 maxpacket: 8 [ 221.939626][ T7355] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 221.949753][ T7355] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 221.983786][ T7355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.024330][ T7355] usb 5-1: config 0 descriptor?? [ 222.180847][ T5950] uclogic 0003:28BD:0075.0005: interface is invalid, ignoring [ 222.232382][ T24] usb 4-1: USB disconnect, device number 24 [ 222.380106][ T5950] usb 1-1: USB disconnect, device number 21 [ 222.789434][ T7775] netlink: 18056 bytes leftover after parsing attributes in process `syz.1.476'. [ 222.827990][ T7777] fuse: Unknown parameter '0x0000000000000007' [ 224.046237][ T7356] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 224.254858][ T7356] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.263209][ T7356] usb 1-1: config 0 has no interface number 0 [ 224.269349][ T7356] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 224.293347][ T7356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.313795][ T7356] usb 1-1: config 0 descriptor?? [ 224.366757][ T7356] usb 1-1: selecting invalid altsetting 1 [ 224.372648][ T7356] dvb_ttusb_budget: ttusb_init_controller: error [ 224.396346][ T7356] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 224.557551][ T5979] usb 5-1: USB disconnect, device number 21 [ 224.681494][ T7356] DVB: Unable to find symbol cx22700_attach() [ 224.866142][ T7809] debugfs: '!' already exists in 'ieee80211' [ 224.968010][ T7356] DVB: Unable to find symbol tda10046_attach() [ 224.988521][ T7356] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 225.337548][ T7819] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 225.382913][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 225.454578][ T30] kauditd_printk_skb: 121 callbacks suppressed [ 225.454594][ T30] audit: type=1326 audit(1756703225.335:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 225.482637][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.555396][ T30] audit: type=1326 audit(1756703225.345:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f18567 code=0x7ffc0000 [ 225.577458][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 225.586120][ T30] audit: type=1326 audit(1756703225.345:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 225.609033][ T24] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 225.619819][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.632922][ T24] usb 2-1: Product: syz [ 225.650898][ T24] usb 2-1: Manufacturer: syz [ 225.656067][ T24] usb 2-1: SerialNumber: syz [ 225.660854][ T30] audit: type=1326 audit(1756703225.355:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f18567 code=0x7ffc0000 [ 225.682679][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.697845][ T24] usb 2-1: config 0 descriptor?? [ 225.710608][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 225.727552][ T30] audit: type=1326 audit(1756703225.355:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 225.749356][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.763320][ T30] audit: type=1326 audit(1756703225.355:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 225.785129][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.799562][ T30] audit: type=1326 audit(1756703225.355:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 225.828894][ T30] audit: type=1326 audit(1756703225.355:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 225.850756][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.867436][ T30] audit: type=1326 audit(1756703225.355:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f18567 code=0x7ffc0000 [ 225.893137][ T30] audit: type=1326 audit(1756703225.355:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 225.918540][ T24] gspca_se401: Wrong descriptor type [ 226.007883][ T7356] usb 1-1: USB disconnect, device number 22 [ 226.818538][ T7838] fuse: Unknown parameter '0x0000000000000007' [ 226.984659][ T24] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 227.205500][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 227.228102][ T24] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 227.239585][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 227.324812][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 227.353250][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.436800][ T24] usb 1-1: Product: syz [ 227.441003][ T24] usb 1-1: Manufacturer: syz [ 227.446092][ T24] usb 1-1: SerialNumber: syz [ 227.462930][ T7846] netlink: 44 bytes leftover after parsing attributes in process `syz.4.497'. [ 227.471868][ T7846] openvswitch: netlink: Flow key attr not present in new flow. [ 227.569264][ T7836] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.136630][ T43] usb 2-1: USB disconnect, device number 20 [ 228.395690][ T7852] vivid-000: ================= START STATUS ================= [ 228.403774][ T7852] vivid-000: Test Pattern: 75% Colorbar [ 228.410677][ T7852] vivid-000: Fill Percentage of Frame: 100 [ 228.418818][ T7852] vivid-000: Horizontal Movement: Move Left Slow [ 228.425376][ T7852] vivid-000: Vertical Movement: No Movement [ 228.433214][ T7852] vivid-000: OSD Text Mode: All [ 228.440134][ T7852] vivid-000: Show Border: false [ 228.449094][ T7852] vivid-000: Show Square: false [ 228.460925][ T7852] vivid-000: Sensor Flipped Horizontally: false [ 228.468688][ T7852] vivid-000: Sensor Flipped Vertically: false [ 228.475012][ T7852] vivid-000: Insert SAV Code in Image: false [ 228.483017][ T7852] vivid-000: Insert EAV Code in Image: false [ 228.490274][ T7852] vivid-000: Insert Video Guard Band: false [ 228.497979][ T7852] vivid-000: Reduced Framerate: false [ 228.513931][ T7852] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 228.522658][ T7852] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 228.533045][ T7852] vivid-000: Enable Capture Cropping: true grabbed [ 228.541900][ T7852] vivid-000: Enable Capture Composing: true grabbed [ 228.550431][ T7852] vivid-000: Enable Capture Scaler: true grabbed [ 228.558410][ T7852] vivid-000: Timestamp Source: End of Frame [ 228.564651][ T7852] vivid-000: Colorspace: sRGB [ 228.569622][ T7852] vivid-000: Transfer Function: Default [ 228.575545][ T7852] vivid-000: Y'CbCr Encoding: Default [ 228.581210][ T7852] vivid-000: HSV Encoding: Hue 0-179 [ 228.587378][ T7852] vivid-000: Quantization: Default [ 228.592756][ T7852] vivid-000: Apply Alpha To Red Only: false [ 228.599049][ T7852] vivid-000: Standard Aspect Ratio: 4x3 [ 228.604878][ T7852] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 228.616437][ T7852] vivid-000: DV Timings: 640x480p59 inactive [ 228.646411][ T7852] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 228.693196][ T7852] vivid-000: Maximum EDID Blocks: 2 [ 228.714763][ T7852] vivid-000: Limited RGB Range (16-235): false [ 228.728492][ T7852] vivid-000: Rx RGB Quantization Range: Automatic [ 228.747453][ T7852] vivid-000: Power Present: 0x00000001 [ 228.797480][ T7852] tpg source WxH: 320x180 (R'G'B) [ 228.819290][ T7852] tpg field: 1 [ 228.841315][ T7852] tpg crop: (0,0)/320x180 [ 228.868558][ T7852] tpg compose: (0,0)/320x180 [ 228.889090][ T7852] tpg colorspace: 8 [ 228.903948][ T7852] tpg transfer function: 0/2 [ 228.908694][ T7852] tpg quantization: 0/1 [ 228.941369][ T7852] tpg RGB range: 0/2 [ 228.947764][ T7852] vivid-000: ================== END STATUS ================== [ 228.949090][ T7864] FAULT_INJECTION: forcing a failure. [ 228.949090][ T7864] name failslab, interval 1, probability 0, space 0, times 0 [ 229.059219][ T7864] CPU: 0 UID: 0 PID: 7864 Comm: syz.1.502 Not tainted syzkaller #0 PREEMPT(full) [ 229.059244][ T7864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.059251][ T7864] Call Trace: [ 229.059256][ T7864] [ 229.059263][ T7864] dump_stack_lvl+0x189/0x250 [ 229.059287][ T7864] ? __pfx____ratelimit+0x10/0x10 [ 229.059311][ T7864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.059330][ T7864] ? __pfx__printk+0x10/0x10 [ 229.059351][ T7864] ? __mutex_trylock_common+0x153/0x260 [ 229.059366][ T7864] ? ref_tracker_alloc+0x318/0x460 [ 229.059382][ T7864] should_fail_ex+0x414/0x560 [ 229.059397][ T7864] should_failslab+0xa8/0x100 [ 229.059415][ T7864] kmem_cache_alloc_noprof+0x73/0x3c0 [ 229.059436][ T7864] ? skb_clone+0x212/0x3a0 [ 229.059460][ T7864] skb_clone+0x212/0x3a0 [ 229.059483][ T7864] __netlink_deliver_tap+0x404/0x850 [ 229.059510][ T7864] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.059525][ T7864] netlink_deliver_tap+0x19c/0x1b0 [ 229.059540][ T7864] __netlink_sendskb+0x47/0x90 [ 229.059554][ T7864] netlink_dump+0xa84/0xe90 [ 229.059586][ T7864] ? __pfx_netlink_dump+0x10/0x10 [ 229.059625][ T7864] ? nla_strdup+0xb8/0x140 [ 229.059647][ T7864] __netlink_dump_start+0x5cb/0x7e0 [ 229.059664][ T7864] ? nft_netlink_dump_start_rcu+0xb6/0x1a0 [ 229.059677][ T7864] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 229.059692][ T7864] nf_tables_getrule_reset+0x1c8/0x600 [ 229.059705][ T7864] ? __pfx_nf_tables_getrule_reset+0x10/0x10 [ 229.059722][ T7864] ? __pfx_nf_tables_dumpreset_rules_start+0x10/0x10 [ 229.059740][ T7864] ? __pfx_nf_tables_dumpreset_rules+0x10/0x10 [ 229.059756][ T7864] ? __pfx_nf_tables_dump_rules_done+0x10/0x10 [ 229.059784][ T7864] ? __nla_parse+0x40/0x60 [ 229.059804][ T7864] ? __pfx_nf_tables_getrule_reset+0x10/0x10 [ 229.059818][ T7864] nfnetlink_rcv_msg+0x80b/0x1130 [ 229.059832][ T7864] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 229.059859][ T7864] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 229.059877][ T7864] ? kasan_save_free_info+0x46/0x50 [ 229.059941][ T7864] netlink_rcv_skb+0x205/0x470 [ 229.059966][ T7864] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 229.059988][ T7864] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.060023][ T7864] ? bpf_lsm_capable+0x9/0x20 [ 229.060042][ T7864] ? security_capable+0x7e/0x2e0 [ 229.060079][ T7864] nfnetlink_rcv+0x26a/0x2520 [ 229.060098][ T7864] ? __dev_queue_xmit+0x1d79/0x3b50 [ 229.060115][ T7864] ? __dev_queue_xmit+0x27b/0x3b50 [ 229.060133][ T7864] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 229.060146][ T7864] ? __pfx___dev_queue_xmit+0x10/0x10 [ 229.060177][ T7864] ? ref_tracker_free+0x63a/0x7d0 [ 229.060199][ T7864] ? __asan_memcpy+0x40/0x70 [ 229.060217][ T7864] ? __pfx_ref_tracker_free+0x10/0x10 [ 229.060247][ T7864] ? skb_clone+0x246/0x3a0 [ 229.060260][ T7864] ? __netlink_deliver_tap+0x807/0x850 [ 229.060275][ T7864] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.060292][ T7864] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.060319][ T7864] netlink_unicast+0x82c/0x9e0 [ 229.060350][ T7864] ? __pfx_netlink_unicast+0x10/0x10 [ 229.060374][ T7864] ? netlink_sendmsg+0x642/0xb30 [ 229.060387][ T7864] ? skb_put+0x11b/0x210 [ 229.060398][ T7864] netlink_sendmsg+0x805/0xb30 [ 229.060412][ T7864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.060422][ T7864] ? __import_iovec+0x5d4/0x7f0 [ 229.060432][ T7864] ? aa_sock_msg_perm+0xf1/0x1d0 [ 229.060442][ T7864] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 229.060457][ T7864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.060474][ T7864] __sock_sendmsg+0x219/0x270 [ 229.060499][ T7864] ____sys_sendmsg+0x505/0x830 [ 229.060524][ T7864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.060547][ T7864] ___sys_sendmsg+0x21f/0x2a0 [ 229.060559][ T7864] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.060588][ T7864] ? __fget_files+0x2a/0x420 [ 229.060597][ T7864] ? __fget_files+0x3a0/0x420 [ 229.060623][ T7864] __sys_sendmsg+0x164/0x220 [ 229.060644][ T7864] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.060679][ T7864] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.060696][ T7864] __do_fast_syscall_32+0xb6/0x2b0 [ 229.060706][ T7864] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.060722][ T7864] do_fast_syscall_32+0x34/0x80 [ 229.060731][ T7864] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.060743][ T7864] RIP: 0023:0xf7fb1539 [ 229.060758][ T7864] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 229.060772][ T7864] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 229.060791][ T7864] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 229.060803][ T7864] RDX: 0000000000008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.060814][ T7864] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.060823][ T7864] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 229.060831][ T7864] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.060846][ T7864] [ 230.014829][ T43] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 230.059075][ T24] usb 1-1: USB disconnect, device number 23 [ 230.177766][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.187728][ T43] usb 2-1: config 0 has no interface number 0 [ 230.204312][ T43] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 230.220215][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.241083][ T43] usb 2-1: config 0 descriptor?? [ 230.259663][ T43] usb 2-1: selecting invalid altsetting 1 [ 230.269017][ T43] dvb_ttusb_budget: ttusb_init_controller: error [ 230.278371][ T43] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 230.342340][ T7872] FAULT_INJECTION: forcing a failure. [ 230.342340][ T7872] name failslab, interval 1, probability 0, space 0, times 0 [ 230.386536][ T7872] CPU: 1 UID: 0 PID: 7872 Comm: syz.0.505 Not tainted syzkaller #0 PREEMPT(full) [ 230.386559][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.386569][ T7872] Call Trace: [ 230.386575][ T7872] [ 230.386582][ T7872] dump_stack_lvl+0x189/0x250 [ 230.386608][ T7872] ? __pfx____ratelimit+0x10/0x10 [ 230.386631][ T7872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.386650][ T7872] ? __pfx__printk+0x10/0x10 [ 230.386668][ T7872] ? netlink_unicast+0x82c/0x9e0 [ 230.386689][ T7872] ? ___sys_sendmsg+0x21f/0x2a0 [ 230.386705][ T7872] ? __do_fast_syscall_32+0xb6/0x2b0 [ 230.386733][ T7872] should_fail_ex+0x414/0x560 [ 230.386759][ T7872] should_failslab+0xa8/0x100 [ 230.386783][ T7872] kmem_cache_alloc_noprof+0x73/0x3c0 [ 230.386804][ T7872] ? skb_clone+0x212/0x3a0 [ 230.386825][ T7872] skb_clone+0x212/0x3a0 [ 230.386847][ T7872] __netlink_deliver_tap+0x404/0x850 [ 230.386882][ T7872] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.386905][ T7872] netlink_deliver_tap+0x19c/0x1b0 [ 230.386938][ T7872] netlink_sendskb+0x68/0x140 [ 230.386961][ T7872] netlink_unicast+0x397/0x9e0 [ 230.386979][ T7872] ? __asan_memcpy+0x40/0x70 [ 230.387004][ T7872] ? __pfx_netlink_unicast+0x10/0x10 [ 230.387035][ T7872] netlink_rcv_skb+0x28c/0x470 [ 230.387059][ T7872] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 230.387083][ T7872] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.387117][ T7872] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.387146][ T7872] netlink_unicast+0x82c/0x9e0 [ 230.387175][ T7872] ? __pfx_netlink_unicast+0x10/0x10 [ 230.387198][ T7872] ? netlink_sendmsg+0x642/0xb30 [ 230.387212][ T7872] ? skb_put+0x11b/0x210 [ 230.387232][ T7872] netlink_sendmsg+0x805/0xb30 [ 230.387256][ T7872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.387275][ T7872] ? __import_iovec+0x5d4/0x7f0 [ 230.387292][ T7872] ? aa_sock_msg_perm+0xf1/0x1d0 [ 230.387310][ T7872] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.387328][ T7872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.387344][ T7872] __sock_sendmsg+0x219/0x270 [ 230.387367][ T7872] ____sys_sendmsg+0x505/0x830 [ 230.387389][ T7872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.387423][ T7872] ___sys_sendmsg+0x21f/0x2a0 [ 230.387444][ T7872] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.387502][ T7872] ? __fget_files+0x2a/0x420 [ 230.387517][ T7872] ? __fget_files+0x3a0/0x420 [ 230.387540][ T7872] __sys_sendmsg+0x164/0x220 [ 230.387563][ T7872] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.387596][ T7872] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.387621][ T7872] __do_fast_syscall_32+0xb6/0x2b0 [ 230.387638][ T7872] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.387663][ T7872] do_fast_syscall_32+0x34/0x80 [ 230.387680][ T7872] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.387699][ T7872] RIP: 0023:0xf710e539 [ 230.387715][ T7872] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 230.387730][ T7872] RSP: 002b:00000000f54fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 230.387748][ T7872] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800001c0 [ 230.387760][ T7872] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.387770][ T7872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 230.387779][ T7872] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 230.387788][ T7872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.387813][ T7872] [ 230.785879][ T43] DVB: Unable to find symbol cx22700_attach() [ 230.857744][ T43] DVB: Unable to find symbol tda10046_attach() [ 230.864961][ T43] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 231.151371][ T7884] fuse: Unknown parameter '0x0000000000000007' [ 231.512862][ T5979] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 231.673901][ T7898] fuse: Unknown parameter '~lÒÂÚMFü±0x0000000000000005' [ 231.715781][ T5979] usb 3-1: Using ep0 maxpacket: 8 [ 231.738083][ T5979] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.770367][ T5979] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 231.910492][ T5979] usb 3-1: config 1 has no interface number 1 [ 231.912445][ T7903] vivid-000: ================= START STATUS ================= [ 231.925562][ T7903] vivid-000: Test Pattern: 75% Colorbar [ 231.932233][ T7903] vivid-000: Fill Percentage of Frame: 100 [ 231.939464][ T7903] vivid-000: Horizontal Movement: Move Left Slow [ 231.946670][ T7903] vivid-000: Vertical Movement: No Movement [ 231.953950][ T7903] vivid-000: OSD Text Mode: All [ 231.959677][ T7903] vivid-000: Show Border: false [ 231.969205][ T7903] vivid-000: Show Square: false [ 231.983525][ T7903] vivid-000: Sensor Flipped Horizontally: false [ 231.992114][ T7903] vivid-000: Sensor Flipped Vertically: false [ 231.999113][ T7903] vivid-000: Insert SAV Code in Image: false [ 232.007908][ T7903] vivid-000: Insert EAV Code in Image: false [ 232.014394][ T7903] vivid-000: Insert Video Guard Band: false [ 232.022024][ T7903] vivid-000: Reduced Framerate: false [ 232.029122][ T7903] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 232.038454][ T7903] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 232.047710][ T7903] vivid-000: Enable Capture Cropping: true grabbed [ 232.055460][ T7903] vivid-000: Enable Capture Composing: true grabbed [ 232.065342][ T7903] vivid-000: Enable Capture Scaler: true grabbed [ 232.072810][ T7903] vivid-000: Timestamp Source: End of Frame [ 232.080295][ T7903] vivid-000: Colorspace: sRGB [ 232.086779][ T7903] vivid-000: Transfer Function: Default [ 232.092877][ T7903] vivid-000: Y'CbCr Encoding: Default [ 232.100193][ T7903] vivid-000: HSV Encoding: Hue 0-179 [ 232.107001][ T7903] vivid-000: Quantization: Default [ 232.112904][ T7903] vivid-000: Apply Alpha To Red Only: false [ 232.120528][ T7903] vivid-000: Standard Aspect Ratio: 4x3 [ 232.127790][ T7903] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 232.137254][ T7903] vivid-000: DV Timings: 640x480p59 inactive [ 232.143634][ T7903] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 232.153238][ T7903] vivid-000: Maximum EDID Blocks: 2 [ 232.159475][ T7903] vivid-000: Limited RGB Range (16-235): false [ 232.167495][ T7903] vivid-000: Rx RGB Quantization Range: Automatic [ 232.176245][ T7903] vivid-000: Power Present: 0x00000001 [ 232.182848][ T7903] tpg source WxH: 320x180 (R'G'B) [ 232.189423][ T7903] tpg field: 1 [ 232.194359][ T7903] tpg crop: (0,0)/320x180 [ 232.199766][ T7903] tpg compose: (0,0)/320x180 [ 232.206171][ T7903] tpg colorspace: 8 [ 232.211639][ T7903] tpg transfer function: 0/2 [ 232.217868][ T7903] tpg quantization: 0/1 [ 232.222973][ T7903] tpg RGB range: 0/2 [ 232.228480][ T7903] vivid-000: ================== END STATUS ================== [ 232.315881][ T5979] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.367773][ T5979] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.388654][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.400681][ T5979] usb 3-1: Product: syz [ 232.425758][ T5979] usb 3-1: Manufacturer: syz [ 232.475132][ T5979] usb 3-1: SerialNumber: syz [ 232.715659][ T7356] usb 2-1: USB disconnect, device number 21 [ 232.797892][ T7913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.854521][ T7913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.152951][ T43] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 233.390057][ T43] usb 1-1: not running at top speed; connect to a high speed hub [ 233.400747][ T43] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 233.412023][ T43] usb 1-1: config 1 interface 0 has no altsetting 0 [ 233.424592][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 233.466162][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.479500][ T43] usb 1-1: Product: syz [ 233.496593][ T43] usb 1-1: Manufacturer: syz [ 233.551699][ T43] usb 1-1: SerialNumber: syz [ 233.581421][ T7915] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 233.743595][ T7921] netlink: 'syz.1.517': attribute type 27 has an invalid length. [ 234.325830][ T5979] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 234.356062][ T5979] usb 3-1: 2:1 : format type 16 is not supported yet [ 234.601324][ T5979] usb 3-1: USB disconnect, device number 31 [ 234.730048][ T5862] udevd[5862]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 234.798327][ T5862] udevd[5862]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 235.323436][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 235.323452][ T30] audit: type=1326 audit(1756703235.225:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 235.410403][ T30] audit: type=1326 audit(1756703235.225:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 235.468651][ T30] audit: type=1326 audit(1756703235.255:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 235.528470][ T30] audit: type=1326 audit(1756703235.255:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 235.582993][ T30] audit: type=1326 audit(1756703235.255:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 235.627801][ T30] audit: type=1326 audit(1756703235.265:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 235.650970][ T30] audit: type=1326 audit(1756703235.265:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 235.705051][ T30] audit: type=1326 audit(1756703235.265:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 235.885991][ T43] usb 1-1: USB disconnect, device number 24 [ 235.963198][ T30] audit: type=1326 audit(1756703235.265:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 236.052905][ T30] audit: type=1326 audit(1756703235.265:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 236.301956][ T7942] fuse: Unknown parameter '0x0000000000000007' [ 236.771640][ T7356] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 236.922873][ T5902] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 236.955935][ T7356] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 236.967977][ T7356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.996654][ T24] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 237.058783][ T7356] usb 3-1: Product: syz [ 237.070624][ T7356] usb 3-1: Manufacturer: syz [ 237.097990][ T7356] usb 3-1: SerialNumber: syz [ 237.103033][ T5979] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 237.114885][ T5902] usb 2-1: config 0 has no interfaces? [ 237.122660][ T5902] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 237.132014][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.190396][ T5902] usb 2-1: Product: syz [ 237.192982][ T7356] usb 3-1: config 0 descriptor?? [ 237.201542][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.209708][ T24] usb 5-1: config 0 has no interface number 0 [ 237.223120][ T24] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 237.245857][ T5902] usb 2-1: Manufacturer: syz [ 237.250465][ T5902] usb 2-1: SerialNumber: syz [ 237.367278][ T5979] usb 1-1: not running at top speed; connect to a high speed hub [ 237.386260][ T5979] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 237.397120][ T5979] usb 1-1: config 1 interface 0 has no altsetting 0 [ 237.412591][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 237.437881][ T5979] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 237.451975][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.465204][ T7949] team_slave_0: entered promiscuous mode [ 237.471621][ T7949] team_slave_1: entered promiscuous mode [ 237.477476][ T5979] usb 1-1: Product: syz [ 237.481632][ T5979] usb 1-1: Manufacturer: syz [ 237.498894][ T5979] usb 1-1: SerialNumber: syz [ 237.519187][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.519499][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 237.549589][ T7957] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 237.593969][ T7949] macvtap1: entered promiscuous mode [ 237.601854][ T7949] team0: entered promiscuous mode [ 237.601883][ T24] usb 5-1: config 0 descriptor?? [ 237.613474][ T5902] usb 2-1: config 0 descriptor?? [ 237.615244][ T7949] macvtap1: entered allmulticast mode [ 237.645830][ T7949] team0: entered allmulticast mode [ 237.651180][ T7949] team_slave_0: entered allmulticast mode [ 237.675821][ T7949] team_slave_1: entered allmulticast mode [ 237.696827][ T7949] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 237.735042][ T24] usb 5-1: selecting invalid altsetting 1 [ 237.757695][ T7965] team0: left allmulticast mode [ 237.833232][ T7965] team_slave_0: left allmulticast mode [ 237.839549][ T7965] team_slave_1: left allmulticast mode [ 237.845581][ T7965] team0: left promiscuous mode [ 237.857885][ T5949] usb 2-1: USB disconnect, device number 22 [ 237.859962][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 237.868432][ T7965] team_slave_0: left promiscuous mode [ 237.875846][ T7965] team_slave_1: left promiscuous mode [ 237.952600][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 238.170617][ T7356] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 238.251510][ T7356] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 238.262386][ T7356] usb 3-1: USB disconnect, device number 32 [ 238.308340][ T24] DVB: Unable to find symbol cx22700_attach() [ 238.497524][ T24] DVB: Unable to find symbol tda10046_attach() [ 238.554079][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 239.253941][ T5949] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 239.420423][ T5949] usb 2-1: not running at top speed; connect to a high speed hub [ 239.453637][ T5949] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 239.491685][ T5949] usb 2-1: config 1 interface 0 has no altsetting 0 [ 239.554632][ T5949] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 239.598172][ T24] usb 5-1: USB disconnect, device number 22 [ 239.601436][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.621499][ T5949] usb 2-1: Product: syz [ 239.636450][ T5949] usb 2-1: Manufacturer: syz [ 239.706408][ T5949] usb 2-1: SerialNumber: syz [ 239.733055][ T5979] usb 1-1: USB disconnect, device number 25 [ 239.797679][ T7983] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 240.445896][ T8005] fuse: Unknown parameter '0x0000000000000007' [ 240.493875][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 240.722854][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 240.729716][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.743630][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.772095][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.781599][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.790508][ T24] usb 1-1: Product: syz [ 240.795226][ T24] usb 1-1: Manufacturer: syz [ 240.799927][ T24] usb 1-1: SerialNumber: syz [ 241.042456][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.058987][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.182420][ T24] usb 1-1: 0:2 : does not exist [ 241.210644][ T24] usb 1-1: unit 9 not found! [ 241.279320][ T5949] usb 2-1: USB disconnect, device number 23 [ 241.297949][ T24] usb 1-1: USB disconnect, device number 26 [ 241.439608][ T8013] syz_tun: entered allmulticast mode [ 241.446637][ T8012] syz_tun: left allmulticast mode [ 241.457169][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.472572][ T8014] ptrace attach of "./syz-executor exec"[5884] was attempted by "./syz-executor exec"[8014] [ 241.645366][ T8016] capability: warning: `syz.3.544' uses deprecated v2 capabilities in a way that may be insecure [ 242.462871][ T24] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 242.749001][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.757517][ T24] usb 4-1: config 0 has no interface number 0 [ 242.764085][ T24] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 242.938637][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.997453][ T8047] fuse: Unknown parameter '0x0000000000000007' [ 242.997981][ T24] usb 4-1: config 0 descriptor?? [ 243.016290][ T24] usb 4-1: selecting invalid altsetting 1 [ 243.022674][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 243.037138][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 243.190165][ T24] DVB: Unable to find symbol cx22700_attach() [ 243.420274][ T5949] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 243.592345][ T24] DVB: Unable to find symbol tda10046_attach() [ 243.594754][ T5949] usb 2-1: not running at top speed; connect to a high speed hub [ 243.621485][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 243.639377][ T5949] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 243.678545][ T5949] usb 2-1: config 1 interface 0 has no altsetting 0 [ 243.697118][ T5949] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 243.716382][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.732867][ T5949] usb 2-1: Product: syz [ 243.742202][ T5949] usb 2-1: Manufacturer: syz [ 243.750967][ T5949] usb 2-1: SerialNumber: syz [ 243.779490][ T8045] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 243.892888][ T7356] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 244.096764][ T7356] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 244.106095][ T7356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.120139][ T7356] usb 1-1: Product: syz [ 244.125963][ T7356] usb 1-1: Manufacturer: syz [ 244.130778][ T7356] usb 1-1: SerialNumber: syz [ 244.741001][ T5949] usb 2-1: USB disconnect, device number 24 [ 244.893018][ T7355] usb 4-1: USB disconnect, device number 25 [ 244.977927][ T8073] FAULT_INJECTION: forcing a failure. [ 244.977927][ T8073] name failslab, interval 1, probability 0, space 0, times 0 [ 245.102957][ T8073] CPU: 0 UID: 0 PID: 8073 Comm: syz.3.561 Not tainted syzkaller #0 PREEMPT(full) [ 245.102979][ T8073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.102994][ T8073] Call Trace: [ 245.102999][ T8073] [ 245.103005][ T8073] dump_stack_lvl+0x189/0x250 [ 245.103021][ T8073] ? __pfx____ratelimit+0x10/0x10 [ 245.103037][ T8073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.103048][ T8073] ? __pfx__printk+0x10/0x10 [ 245.103068][ T8073] ? __pfx___might_resched+0x10/0x10 [ 245.103079][ T8073] should_fail_ex+0x414/0x560 [ 245.103095][ T8073] should_failslab+0xa8/0x100 [ 245.103110][ T8073] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 245.103124][ T8073] ? __alloc_skb+0x112/0x2d0 [ 245.103136][ T8073] __alloc_skb+0x112/0x2d0 [ 245.103147][ T8073] netlink_sendmsg+0x5c6/0xb30 [ 245.103160][ T8073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.103170][ T8073] ? __import_iovec+0x5d4/0x7f0 [ 245.103181][ T8073] ? aa_sock_msg_perm+0xf1/0x1d0 [ 245.103191][ T8073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.103202][ T8073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.103211][ T8073] __sock_sendmsg+0x219/0x270 [ 245.103226][ T8073] ____sys_sendmsg+0x505/0x830 [ 245.103241][ T8073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.103259][ T8073] ___sys_sendmsg+0x21f/0x2a0 [ 245.103271][ T8073] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.103298][ T8073] ? __fget_files+0x2a/0x420 [ 245.103306][ T8073] ? __fget_files+0x3a0/0x420 [ 245.103319][ T8073] __sys_sendmsg+0x164/0x220 [ 245.103330][ T8073] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.103348][ T8073] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.103364][ T8073] __do_fast_syscall_32+0xb6/0x2b0 [ 245.103373][ T8073] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.103389][ T8073] do_fast_syscall_32+0x34/0x80 [ 245.103398][ T8073] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.103410][ T8073] RIP: 0023:0xf7f18539 [ 245.103419][ T8073] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 245.103428][ T8073] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 245.103439][ T8073] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 245.103445][ T8073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.103451][ T8073] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.103456][ T8073] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 245.103462][ T8073] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.103475][ T8073] [ 245.718969][ T7356] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 246.035244][ T8055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.044280][ T8055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.228664][ T8093] fuse: Unknown parameter '0x0000000000000006' [ 246.312892][ T7357] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 246.487555][ T7357] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 246.496954][ T7357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.507212][ T7357] usb 3-1: Product: syz [ 246.512518][ T7357] usb 3-1: Manufacturer: syz [ 246.525513][ T7357] usb 3-1: SerialNumber: syz [ 246.540969][ T7357] usb 3-1: config 0 descriptor?? [ 246.661406][ T7356] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO [ 246.743681][ T7356] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 246.762883][ T7357] usb 3-1: USB disconnect, device number 33 [ 246.802967][ T7356] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 247.076975][ T7356] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 247.108009][ T7356] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 247.152456][ T7356] usb 1-1: USB disconnect, device number 27 [ 247.216384][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 247.385269][ T7357] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 247.393804][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 247.400610][ T24] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 247.409552][ T24] usb 4-1: config 0 has no interface number 0 [ 247.415991][ T24] usb 4-1: config 0 interface 184 has no altsetting 0 [ 247.425876][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 247.451428][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.475070][ T24] usb 4-1: Product: syz [ 247.484955][ T24] usb 4-1: Manufacturer: syz [ 247.494775][ T24] usb 4-1: SerialNumber: syz [ 247.515160][ T24] usb 4-1: config 0 descriptor?? [ 247.539233][ T24] smsc75xx v1.0.0 [ 247.783448][ T7357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 247.794576][ T7356] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 247.830218][ T7357] usb 3-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 247.851782][ T7357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.880233][ T7357] usb 3-1: config 0 descriptor?? [ 248.060826][ T7356] usb 1-1: not running at top speed; connect to a high speed hub [ 248.074680][ T7356] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 248.161612][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.183183][ T7356] usb 1-1: config 1 interface 0 has no altsetting 0 [ 248.190568][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.194477][ T7356] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 248.211192][ T7356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.292704][ T7356] usb 1-1: Product: syz [ 248.297241][ T7356] usb 1-1: Manufacturer: syz [ 248.301846][ T7356] usb 1-1: SerialNumber: syz [ 248.314582][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.329636][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.339294][ T8109] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 248.346690][ T5949] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 248.368560][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.382157][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.669645][ T7357] usbhid 3-1:0.0: can't add hid device: -71 [ 248.678814][ T7357] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 248.706105][ T7357] usb 3-1: USB disconnect, device number 34 [ 248.760287][ T5949] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 248.768522][ T5949] usb 5-1: config 0 has no interface number 0 [ 248.778078][ T5949] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 248.808221][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.830804][ T5949] usb 5-1: config 0 descriptor?? [ 248.861289][ T5949] usb 5-1: selecting invalid altsetting 1 [ 248.877086][ T5949] dvb_ttusb_budget: ttusb_init_controller: error [ 248.892597][ T5949] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 249.049346][ T5949] DVB: Unable to find symbol cx22700_attach() [ 249.172698][ T5949] DVB: Unable to find symbol tda10046_attach() [ 249.201320][ T5949] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 249.409138][ T7356] usb 1-1: USB disconnect, device number 28 [ 249.420828][ T8119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.642709][ T8121] overlayfs: missing 'lowerdir' [ 249.697592][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 249.708842][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 249.739313][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 249.750446][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 249.780384][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 249.826200][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 249.837736][ T24] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 249.846416][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 249.878119][ T24] usb 4-1: USB disconnect, device number 26 [ 250.083598][ T5902] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 250.281227][ T8142] fuse: Unknown parameter '0x0000000000000007' [ 250.287792][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 250.447184][ T5878] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 250.886377][ T8126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.964846][ T24] usb 5-1: USB disconnect, device number 23 [ 250.994690][ T8152] Invalid logical block size (16777472) [ 251.002643][ T8126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.272919][ T7356] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 251.442699][ T8168] netlink: 284 bytes leftover after parsing attributes in process `syz.0.589'. [ 251.457042][ T8168] netlink: 34 bytes leftover after parsing attributes in process `syz.0.589'. [ 251.512952][ T5979] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 251.545192][ T7356] usb 2-1: not running at top speed; connect to a high speed hub [ 251.557722][ T7356] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 251.589477][ T7356] usb 2-1: config 1 interface 0 has no altsetting 0 [ 251.608946][ T7356] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 251.636840][ T7356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.658322][ T7356] usb 2-1: Product: syz [ 251.670947][ T7356] usb 2-1: Manufacturer: syz [ 251.679236][ T5979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 251.704752][ T7356] usb 2-1: SerialNumber: syz [ 251.711788][ T5979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.735302][ T8150] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 251.768491][ T5979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 251.819413][ T5979] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 251.836843][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.863984][ T5979] usb 4-1: Product: syz [ 251.888570][ T5979] usb 4-1: Manufacturer: syz [ 251.907670][ T5979] usb 4-1: SerialNumber: syz [ 251.941398][ T5979] usb 4-1: config 0 descriptor?? [ 252.172165][ T5979] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 252.384712][ T24] usb 4-1: USB disconnect, device number 27 [ 252.516127][ T7356] usb 2-1: USB disconnect, device number 25 [ 252.653866][ T5902] usb 3-1: unable to get BOS descriptor or descriptor too short [ 252.687068][ T5902] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 252.708183][ T5902] usb 3-1: can't read configurations, error -71 [ 252.729388][ T8186] fuse: Unknown parameter '0x0000000000000007' [ 253.260925][ T8201] FAULT_INJECTION: forcing a failure. [ 253.260925][ T8201] name failslab, interval 1, probability 0, space 0, times 0 [ 253.323929][ T8201] CPU: 0 UID: 0 PID: 8201 Comm: syz.0.602 Not tainted syzkaller #0 PREEMPT(full) [ 253.323946][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.323953][ T8201] Call Trace: [ 253.323957][ T8201] [ 253.323962][ T8201] dump_stack_lvl+0x189/0x250 [ 253.323979][ T8201] ? __pfx____ratelimit+0x10/0x10 [ 253.323995][ T8201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.324007][ T8201] ? __pfx__printk+0x10/0x10 [ 253.324023][ T8201] ? __pfx___might_resched+0x10/0x10 [ 253.324031][ T8201] ? fs_reclaim_acquire+0x7d/0x100 [ 253.324049][ T8201] should_fail_ex+0x414/0x560 [ 253.324069][ T8201] ? alloc_netdev_mqs+0xc7c/0x11b0 [ 253.324087][ T8201] should_failslab+0xa8/0x100 [ 253.324110][ T8201] __kvmalloc_node_noprof+0x161/0x5f0 [ 253.324131][ T8201] ? alloc_netdev_mqs+0xc7c/0x11b0 [ 253.324149][ T8201] ? alloc_netdev_mqs+0xbf1/0x11b0 [ 253.324167][ T8201] alloc_netdev_mqs+0xc7c/0x11b0 [ 253.324183][ T8201] rtnl_create_link+0x31f/0xd10 [ 253.324199][ T8201] veth_newlink+0x291/0xa50 [ 253.324215][ T8201] ? __pfx_veth_newlink+0x10/0x10 [ 253.324227][ T8201] ? alloc_netdev_mqs+0xc7c/0x11b0 [ 253.324237][ T8201] ? rtnl_create_link+0x31f/0xd10 [ 253.324248][ T8201] ? rtnl_newlink_create+0x25c/0xb00 [ 253.324257][ T8201] ? rtnl_newlink+0x16d6/0x1c70 [ 253.324270][ T8201] ? rtnetlink_rcv_msg+0x7cc/0xb70 [ 253.324283][ T8201] ? netlink_rcv_skb+0x205/0x470 [ 253.324297][ T8201] ? netlink_unicast+0x82c/0x9e0 [ 253.324310][ T8201] ? netlink_sendmsg+0x805/0xb30 [ 253.324317][ T8201] ? __sock_sendmsg+0x219/0x270 [ 253.324329][ T8201] ? __sys_sendmsg+0x164/0x220 [ 253.324338][ T8201] ? __do_fast_syscall_32+0xb6/0x2b0 [ 253.324378][ T8201] ? validate_linkmsg+0x765/0x950 [ 253.324395][ T8201] ? __pfx_veth_newlink+0x10/0x10 [ 253.324409][ T8201] rtnl_newlink_create+0x30d/0xb00 [ 253.324419][ T8201] ? trace_irq_disable+0x37/0x110 [ 253.324433][ T8201] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 253.324451][ T8201] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 253.324467][ T8201] ? __dev_get_by_index+0xfb/0x110 [ 253.324480][ T8201] ? __sanitizer_cov_trace_pc+0x37/0x70 [ 253.324494][ T8201] rtnl_newlink+0x16d6/0x1c70 [ 253.324528][ T8201] ? __pfx_rtnl_newlink+0x10/0x10 [ 253.324557][ T8201] ? __pfx___schedule+0x10/0x10 [ 253.324618][ T8201] ? __lock_acquire+0xab9/0xd20 [ 253.324646][ T8201] ? __pfx_rtnl_newlink+0x10/0x10 [ 253.324660][ T8201] rtnetlink_rcv_msg+0x7cc/0xb70 [ 253.324677][ T8201] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 253.324691][ T8201] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 253.324709][ T8201] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 253.324727][ T8201] netlink_rcv_skb+0x205/0x470 [ 253.324741][ T8201] ? rcu_is_watching+0x15/0xb0 [ 253.324750][ T8201] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 253.324765][ T8201] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.324786][ T8201] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.324805][ T8201] netlink_unicast+0x82c/0x9e0 [ 253.324822][ T8201] ? __pfx_netlink_unicast+0x10/0x10 [ 253.324837][ T8201] ? netlink_sendmsg+0x642/0xb30 [ 253.324844][ T8201] ? skb_put+0x11b/0x210 [ 253.324855][ T8201] netlink_sendmsg+0x805/0xb30 [ 253.324869][ T8201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.324879][ T8201] ? __import_iovec+0x5d4/0x7f0 [ 253.324890][ T8201] ? aa_sock_msg_perm+0xf1/0x1d0 [ 253.324900][ T8201] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 253.324910][ T8201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.324919][ T8201] __sock_sendmsg+0x219/0x270 [ 253.324934][ T8201] ____sys_sendmsg+0x505/0x830 [ 253.324948][ T8201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.324967][ T8201] ___sys_sendmsg+0x21f/0x2a0 [ 253.324978][ T8201] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.325007][ T8201] ? __fget_files+0x2a/0x420 [ 253.325015][ T8201] ? __fget_files+0x3a0/0x420 [ 253.325029][ T8201] __sys_sendmsg+0x164/0x220 [ 253.325040][ T8201] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.325059][ T8201] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.325074][ T8201] __do_fast_syscall_32+0xb6/0x2b0 [ 253.325084][ T8201] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.325100][ T8201] do_fast_syscall_32+0x34/0x80 [ 253.325109][ T8201] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 253.325121][ T8201] RIP: 0023:0xf710e539 [ 253.325131][ T8201] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 253.325139][ T8201] RSP: 002b:00000000f54fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 253.325150][ T8201] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 253.325157][ T8201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.325162][ T8201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.325170][ T8201] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 253.325180][ T8201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.325206][ T8201] [ 253.583349][ T5902] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 253.778382][ T5979] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 253.952886][ T7356] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 253.977748][ T5979] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 254.002888][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.038289][ T5902] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.049075][ T5902] usb 3-1: config 0 has no interface number 0 [ 254.058194][ T5979] usb 4-1: Product: syz [ 254.058245][ T5902] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 254.062366][ T5979] usb 4-1: Manufacturer: syz [ 254.062382][ T5979] usb 4-1: SerialNumber: syz [ 254.084789][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.097602][ T5902] usb 3-1: config 0 descriptor?? [ 254.118526][ T5902] usb 3-1: selecting invalid altsetting 1 [ 254.138199][ T5902] dvb_ttusb_budget: ttusb_init_controller: error [ 254.145803][ T5902] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 254.173926][ T7356] usb 2-1: Using ep0 maxpacket: 8 [ 254.202605][ T7356] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 254.297602][ T7356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.311619][ T5902] DVB: Unable to find symbol cx22700_attach() [ 254.388861][ T5902] DVB: Unable to find symbol tda10046_attach() [ 254.399426][ T5902] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 254.410505][ T7356] usb 2-1: Product: syz [ 254.415303][ T7356] usb 2-1: Manufacturer: syz [ 254.424024][ T7356] usb 2-1: SerialNumber: syz [ 254.464732][ T7356] usb 2-1: config 0 descriptor?? [ 254.498211][ T7356] gspca_main: sq930x-2.14.0 probing 2770:930c [ 254.597045][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.606'. [ 255.242932][ T5949] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 255.250746][ T7356] gspca_sq930x: ucbus_write failed -110 [ 255.441173][ T5949] usb 5-1: not running at top speed; connect to a high speed hub [ 255.458122][ T5949] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 255.470458][ T5949] usb 5-1: config 1 interface 0 has no altsetting 0 [ 255.480732][ T5949] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 255.490153][ T7356] gspca_sq930x: Sensor ov9630 not yet treated [ 255.502232][ T7356] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 255.510564][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.524639][ T5949] usb 5-1: Product: syz [ 255.531464][ T5949] usb 5-1: Manufacturer: syz [ 255.536446][ T5949] usb 5-1: SerialNumber: syz [ 255.551575][ T8217] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 255.611076][ T5979] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 255.629942][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.630012][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.736692][ T5902] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 255.883297][ T5902] usb 1-1: device descriptor read/64, error -71 [ 255.926160][ T7356] usb 3-1: USB disconnect, device number 36 [ 256.133895][ T5902] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 256.229855][ T43] usb 2-1: USB disconnect, device number 26 [ 256.315054][ T5902] usb 1-1: device descriptor read/64, error -71 [ 256.340567][ T5949] usb 5-1: USB disconnect, device number 24 [ 256.450340][ T5902] usb usb1-port1: attempt power cycle [ 256.577079][ T8238] fuse: Unknown parameter '0x0000000000000007' [ 256.663838][ T5979] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -EPROTO [ 256.684890][ T5979] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 256.725150][ T5979] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 256.748324][ T5979] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 256.778196][ T5979] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 256.812947][ T5902] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 256.855212][ T5979] usb 4-1: USB disconnect, device number 28 [ 256.874330][ T5902] usb 1-1: device descriptor read/8, error -71 [ 257.180302][ T5902] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 257.350081][ T5902] usb 1-1: device descriptor read/8, error -71 [ 257.541242][ T5902] usb usb1-port1: unable to enumerate USB device [ 257.592983][ T5979] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 257.944858][ T5979] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.970225][ T5979] usb 5-1: config 0 has no interface number 0 [ 257.996935][ T5979] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 258.021499][ T5979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.220431][ T5979] usb 5-1: config 0 descriptor?? [ 258.327636][ T5979] usb 5-1: selecting invalid altsetting 1 [ 258.340103][ T5979] dvb_ttusb_budget: ttusb_init_controller: error [ 258.356008][ T5979] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 258.699308][ T7357] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 258.711366][ T5979] DVB: Unable to find symbol cx22700_attach() [ 258.848752][ T5979] DVB: Unable to find symbol tda10046_attach() [ 258.887320][ T5979] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 258.897979][ T7357] usb 4-1: not running at top speed; connect to a high speed hub [ 258.907341][ T7357] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 258.918697][ T7357] usb 4-1: config 1 interface 0 has no altsetting 0 [ 258.954848][ T7357] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 258.964220][ T7357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.998079][ T7357] usb 4-1: Product: syz [ 259.011268][ T7357] usb 4-1: Manufacturer: syz [ 259.026659][ T7357] usb 4-1: SerialNumber: syz [ 259.118031][ T8266] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 259.131173][ T8277] ptrace attach of "./syz-executor exec"[5880] was attempted by "./syz-executor exec"[8277] [ 259.155007][ T8277] batadv1: entered promiscuous mode [ 259.161938][ T8277] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 259.184112][ T8273] netlink: 'syz.1.623': attribute type 12 has an invalid length. [ 259.952692][ T7357] usb 4-1: USB disconnect, device number 29 [ 260.108585][ T8285] fuse: Unknown parameter '0x0000000000000007' [ 260.460653][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 260.469770][ T8294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.632'. [ 260.482351][ T8294] FAULT_INJECTION: forcing a failure. [ 260.482351][ T8294] name failslab, interval 1, probability 0, space 0, times 0 [ 260.520853][ T8294] CPU: 1 UID: 0 PID: 8294 Comm: syz.3.632 Not tainted syzkaller #0 PREEMPT(full) [ 260.520868][ T8294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.520875][ T8294] Call Trace: [ 260.520880][ T8294] [ 260.520885][ T8294] dump_stack_lvl+0x189/0x250 [ 260.520906][ T8294] ? __pfx____ratelimit+0x10/0x10 [ 260.520921][ T8294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.520933][ T8294] ? __pfx__printk+0x10/0x10 [ 260.520950][ T8294] ? __pfx___might_resched+0x10/0x10 [ 260.520958][ T8294] ? fs_reclaim_acquire+0x7d/0x100 [ 260.520976][ T8294] should_fail_ex+0x414/0x560 [ 260.520992][ T8294] should_failslab+0xa8/0x100 [ 260.521008][ T8294] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 260.521022][ T8294] ? __d_alloc+0x36/0x7a0 [ 260.521035][ T8294] __d_alloc+0x36/0x7a0 [ 260.521047][ T8294] d_alloc_parallel+0xe5/0x15e0 [ 260.521066][ T8294] ? __lock_acquire+0xab9/0xd20 [ 260.521083][ T8294] ? __pfx_d_alloc_parallel+0x10/0x10 [ 260.521097][ T8294] ? __raw_spin_lock_init+0x45/0x100 [ 260.521110][ T8294] ? __init_waitqueue_head+0xa9/0x150 [ 260.521124][ T8294] __lookup_slow+0x116/0x3d0 [ 260.521137][ T8294] ? __pfx___lookup_slow+0x10/0x10 [ 260.521152][ T8294] ? d_lookup+0x8a/0xa0 [ 260.521163][ T8294] ? lookup_noperm+0x112/0x220 [ 260.521175][ T8294] simple_start_creating+0xfd/0x1e0 [ 260.521185][ T8294] ? __pfx_simple_start_creating+0x10/0x10 [ 260.521200][ T8294] start_creating+0x10f/0x180 [ 260.521216][ T8294] __debugfs_create_file+0x79/0x4f0 [ 260.521233][ T8294] debugfs_create_file_full+0x3f/0x60 [ 260.521248][ T8294] ref_tracker_dir_debugfs+0x14e/0x270 [ 260.521263][ T8294] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 260.521290][ T8294] ? alloc_netdev_mqs+0xa3/0x11b0 [ 260.521302][ T8294] ? rcu_is_watching+0x15/0xb0 [ 260.521311][ T8294] ? alloc_netdev_mqs+0xa3/0x11b0 [ 260.521325][ T8294] ? __raw_spin_lock_init+0x45/0x100 [ 260.521338][ T8294] alloc_netdev_mqs+0x26f/0x11b0 [ 260.521349][ T8294] ? __pfx_vxcan_setup+0x10/0x10 [ 260.521368][ T8294] rtnl_create_link+0x31f/0xd10 [ 260.521385][ T8294] vxcan_newlink+0x281/0x570 [ 260.521398][ T8294] ? kasan_save_track+0x3e/0x80 [ 260.521409][ T8294] ? __kasan_kmalloc+0x93/0xb0 [ 260.521420][ T8294] ? __kvmalloc_node_noprof+0x30d/0x5f0 [ 260.521436][ T8294] ? __pfx_vxcan_newlink+0x10/0x10 [ 260.521448][ T8294] ? __sock_sendmsg+0x219/0x270 [ 260.521493][ T8294] ? validate_linkmsg+0x765/0x950 [ 260.521512][ T8294] ? __pfx_vxcan_newlink+0x10/0x10 [ 260.521526][ T8294] rtnl_newlink_create+0x30d/0xb00 [ 260.521544][ T8294] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 260.521556][ T8294] ? __pfx___mutex_lock+0x10/0x10 [ 260.521571][ T8294] ? ns_capable+0x8a/0xf0 [ 260.521583][ T8294] rtnl_newlink+0x16d6/0x1c70 [ 260.521599][ T8294] ? netlink_sendmsg+0x805/0xb30 [ 260.521615][ T8294] ? __pfx_rtnl_newlink+0x10/0x10 [ 260.521679][ T8294] ? __lock_acquire+0xab9/0xd20 [ 260.521707][ T8294] ? __pfx_rtnl_newlink+0x10/0x10 [ 260.521721][ T8294] rtnetlink_rcv_msg+0x7cc/0xb70 [ 260.521738][ T8294] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 260.521752][ T8294] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 260.521765][ T8294] ? ref_tracker_free+0x63a/0x7d0 [ 260.521779][ T8294] ? __asan_memcpy+0x40/0x70 [ 260.521789][ T8294] ? __pfx_ref_tracker_free+0x10/0x10 [ 260.521809][ T8294] netlink_rcv_skb+0x205/0x470 [ 260.521824][ T8294] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 260.521840][ T8294] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.521861][ T8294] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.521879][ T8294] netlink_unicast+0x82c/0x9e0 [ 260.521898][ T8294] ? __pfx_netlink_unicast+0x10/0x10 [ 260.521914][ T8294] ? netlink_sendmsg+0x642/0xb30 [ 260.521921][ T8294] ? skb_put+0x11b/0x210 [ 260.521933][ T8294] netlink_sendmsg+0x805/0xb30 [ 260.521946][ T8294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.521957][ T8294] ? __import_iovec+0x5d4/0x7f0 [ 260.521967][ T8294] ? aa_sock_msg_perm+0xf1/0x1d0 [ 260.521977][ T8294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.521988][ T8294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.521997][ T8294] __sock_sendmsg+0x219/0x270 [ 260.522012][ T8294] ____sys_sendmsg+0x505/0x830 [ 260.522025][ T8294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.522045][ T8294] ___sys_sendmsg+0x21f/0x2a0 [ 260.522057][ T8294] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.522087][ T8294] ? __fget_files+0x2a/0x420 [ 260.522095][ T8294] ? __fget_files+0x3a0/0x420 [ 260.522109][ T8294] __sys_sendmsg+0x164/0x220 [ 260.522121][ T8294] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.522140][ T8294] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.522157][ T8294] __do_fast_syscall_32+0xb6/0x2b0 [ 260.522166][ T8294] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.522182][ T8294] do_fast_syscall_32+0x34/0x80 [ 260.522191][ T8294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.522204][ T8294] RIP: 0023:0xf7f18539 [ 260.522213][ T8294] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 260.522221][ T8294] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 260.522232][ T8294] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 260.522239][ T8294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.522244][ T8294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.522250][ T8294] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 260.522255][ T8294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.522270][ T8294] [ 261.102878][ T7357] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 261.118809][ T8294] vxcan3: entered promiscuous mode [ 261.164938][ T43] usb 5-1: USB disconnect, device number 25 [ 261.254783][ T7357] usb 2-1: config index 0 descriptor too short (expected 63186, got 210) [ 261.447832][ T8302] netlink: 32 bytes leftover after parsing attributes in process `syz.2.634'. [ 261.473038][ T5902] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 261.512871][ T7357] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 261.528858][ T7357] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.553325][ T8308] capability: warning: `syz.2.636' uses 32-bit capabilities (legacy support in use) [ 261.563042][ T7357] usb 2-1: config 0 has no interface number 0 [ 261.570043][ T7357] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 261.590095][ T7357] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 261.603580][ T5902] usb 4-1: device descriptor read/64, error -71 [ 261.610470][ T7357] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 261.636596][ T7357] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 261.646008][ T7357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.659213][ T7357] usb 2-1: config 0 descriptor?? [ 261.667222][ T5979] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 261.693120][ T7357] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 261.795977][ T5949] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 261.832054][ T5979] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.842430][ T5979] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 261.850769][ T5902] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 261.851430][ T5979] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.885428][ T6000] usb 2-1: Failed to submit usb control message: -71 [ 261.892994][ T7357] usb 2-1: USB disconnect, device number 27 [ 261.909277][ T6000] usb 2-1: unable to send the bmi data to the device: -71 [ 261.920856][ T5979] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.932093][ T6000] usb 2-1: unable to get target info from device [ 261.944677][ T6000] usb 2-1: could not get target info (-71) [ 261.947737][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.950867][ T6000] usb 2-1: could not probe fw (-71) [ 261.965655][ T5979] usb 1-1: Product: syz [ 261.969954][ T5979] usb 1-1: Manufacturer: syz [ 261.975487][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 261.980808][ T5979] usb 1-1: SerialNumber: syz [ 261.988575][ T5949] usb 5-1: config 8 has an invalid interface number: 203 but max is 0 [ 262.004831][ T5949] usb 5-1: config 8 has no interface number 0 [ 262.021185][ T5949] usb 5-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 262.033292][ T5902] usb 4-1: device descriptor read/64, error -71 [ 262.045939][ T5979] cdc_ncm 1-1:1.0: skipping garbage [ 262.051522][ T5979] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 262.060082][ T5979] cdc_ncm 1-1:1.0: bind() failure [ 262.066324][ T5949] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 262.086274][ T5949] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 262.099571][ T5949] usb 5-1: config 8 interface 203 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 262.116222][ T5949] usb 5-1: config 8 interface 203 has no altsetting 0 [ 262.127092][ T5949] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 262.139978][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.148934][ T5949] usb 5-1: Product: syz [ 262.155649][ T5902] usb usb4-port1: attempt power cycle [ 262.156988][ T5949] usb 5-1: Manufacturer: syz [ 262.166645][ T5949] usb 5-1: SerialNumber: syz [ 262.181985][ T8307] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 262.189571][ T8307] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 262.418449][ C0] port100 5-1:8.203: NFC: Urb failure (status -71) [ 262.434639][ C0] port100 5-1:8.203: NFC: Urb failure (status -71) [ 262.464719][ T7357] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 262.474266][ T5949] port100 5-1:8.203: NFC: Could not get supported command types [ 262.498894][ T5949] usb 5-1: USB disconnect, device number 26 [ 262.503423][ T5902] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 262.553670][ T5902] usb 4-1: device descriptor read/8, error -71 [ 262.648731][ T7357] usb 3-1: not running at top speed; connect to a high speed hub [ 262.659226][ T7357] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 262.672753][ T7357] usb 3-1: config 1 interface 0 has no altsetting 0 [ 262.681559][ T7357] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 262.695185][ T7357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.697859][ T8324] fuse: Unknown parameter '0x0000000000000007' [ 262.705078][ T7357] usb 3-1: Product: syz [ 262.716290][ T7357] usb 3-1: Manufacturer: syz [ 262.721100][ T7357] usb 3-1: SerialNumber: syz [ 262.735254][ T8318] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 262.803268][ T5902] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 262.834047][ T5902] usb 4-1: device descriptor read/8, error -71 [ 262.947521][ T5902] usb usb4-port1: unable to enumerate USB device [ 263.789410][ T7357] usb 3-1: USB disconnect, device number 37 [ 263.933358][ T24] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 264.096886][ T43] usb 1-1: USB disconnect, device number 33 [ 264.164178][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.181864][ T24] usb 5-1: config 0 has no interface number 0 [ 264.210188][ T24] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 264.269465][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.310655][ T24] usb 5-1: config 0 descriptor?? [ 264.327078][ T24] usb 5-1: selecting invalid altsetting 1 [ 264.338235][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 264.352737][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 264.508634][ T24] DVB: Unable to find symbol cx22700_attach() [ 264.632517][ T24] DVB: Unable to find symbol tda10046_attach() [ 264.641790][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 267.367381][ T24] usb 5-1: USB disconnect, device number 27 [ 267.412884][ T5949] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 267.611213][ T5949] usb 2-1: not running at top speed; connect to a high speed hub [ 267.688564][ T8397] fuse: Unknown parameter 'g“oup_id' [ 267.763592][ T5949] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 267.800061][ T5949] usb 2-1: config 1 interface 0 has no altsetting 0 [ 267.822214][ T5949] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 267.835093][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.947421][ T5949] usb 2-1: Product: syz [ 267.951589][ T5949] usb 2-1: Manufacturer: syz [ 268.373960][ T5949] usb 2-1: SerialNumber: syz [ 268.390887][ T8388] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 268.863136][ T7357] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 269.106458][ T7357] usb 3-1: unable to get BOS descriptor or descriptor too short [ 269.124053][ T7357] usb 3-1: not running at top speed; connect to a high speed hub [ 269.125848][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 269.134733][ T7357] usb 3-1: config 3 has an invalid interface number: 106 but max is 0 [ 269.178221][ T7357] usb 3-1: config 3 has no interface number 0 [ 269.189319][ T8413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.666'. [ 269.213913][ T7357] usb 3-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 269.256662][ T7357] usb 3-1: config 3 interface 106 has no altsetting 0 [ 269.271197][ T7357] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 269.281695][ T7357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.292398][ T7357] usb 3-1: Product: syz [ 269.300095][ T7357] usb 3-1: Manufacturer: syz [ 269.310237][ T7357] usb 3-1: SerialNumber: syz [ 269.337575][ T8404] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 269.354695][ T8413] vxcan3: entered promiscuous mode [ 269.447004][ T5949] usb 2-1: USB disconnect, device number 28 [ 269.512250][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.668'. [ 269.562334][ T8417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.668'. [ 269.615546][ T8417] vxcan3: entered promiscuous mode [ 270.853345][ T5950] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 271.086316][ T5950] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 271.096897][ T5950] usb 1-1: config 0 has no interface number 0 [ 271.132131][ T5950] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 271.183265][ T43] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 271.257997][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.280756][ T5950] usb 1-1: config 0 descriptor?? [ 271.325582][ T5950] usb 1-1: selecting invalid altsetting 1 [ 271.339611][ T5950] dvb_ttusb_budget: ttusb_init_controller: error [ 271.346699][ T5950] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 271.396225][ T43] usb 4-1: device descriptor read/64, error -71 [ 271.473891][ T7357] kobil_sct 3-1:3.106: KOBIL USB smart card terminal converter detected [ 271.539358][ T8448] loop8: detected capacity change from 0 to 8 [ 271.568738][ T8448] Dev loop8: unable to read RDB block 8 [ 271.582171][ T8448] loop8: unable to read partition table [ 271.594038][ T7357] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 271.633662][ T8448] loop8: partition table beyond EOD, truncated [ 271.648968][ T8448] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 271.659001][ T43] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 271.659537][ T7357] usb 3-1: USB disconnect, device number 38 [ 271.813558][ T43] usb 4-1: device descriptor read/64, error -71 [ 271.829255][ T5950] DVB: Unable to find symbol cx22700_attach() [ 271.895423][ T7357] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 271.926412][ T7357] kobil_sct 3-1:3.106: device disconnected [ 271.953885][ T43] usb usb4-port1: attempt power cycle [ 272.219553][ T5950] DVB: Unable to find symbol tda10046_attach() [ 272.258907][ T5950] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 272.353427][ T43] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 272.394079][ T43] usb 4-1: device descriptor read/8, error -71 [ 272.663336][ T43] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 272.697525][ T43] usb 4-1: device descriptor read/8, error -71 [ 272.814213][ T43] usb usb4-port1: unable to enumerate USB device [ 272.843243][ T5950] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 273.036399][ T5950] usb 5-1: not running at top speed; connect to a high speed hub [ 273.053933][ T5950] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 273.123219][ T5950] usb 5-1: config 1 interface 0 has no altsetting 0 [ 273.154097][ T5950] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 273.169207][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.179791][ T5950] usb 5-1: Product: syz [ 273.187105][ T5950] usb 5-1: Manufacturer: syz [ 273.191855][ T5950] usb 5-1: SerialNumber: syz [ 273.215295][ T8463] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 273.486933][ T24] usb 1-1: USB disconnect, device number 34 [ 273.630689][ T8475] usb usb8: usbfs: process 8475 (syz.0.685) did not claim interface 0 before use [ 273.895658][ T8481] netlink: 76 bytes leftover after parsing attributes in process `syz.0.687'. [ 274.014146][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 274.103036][ T5979] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 274.274847][ T5979] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.315817][ T5979] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.352297][ T5979] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.364813][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.390352][ T5979] usb 3-1: Product: syz [ 274.420400][ T5979] usb 3-1: Manufacturer: syz [ 274.439107][ T5979] usb 3-1: SerialNumber: syz [ 274.479916][ T5950] usb 5-1: USB disconnect, device number 28 [ 274.830077][ T5979] usb 3-1: 0:2 : does not exist [ 274.858060][ T5979] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 274.994462][ T5979] usb 3-1: USB disconnect, device number 39 [ 275.256272][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.286262][ T8513] fuse: Unknown parameter '0xffffffffffffffff' [ 275.416333][ T8517] PKCS7: Unknown OID: [5] (bad) [ 275.422401][ T8517] PKCS7: Only support pkcs7_signedData type [ 275.553488][ T5950] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 275.765130][ T8519] IPVS: length: 56 != 8 [ 275.775574][ T5950] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 275.821153][ T5950] usb 4-1: config 0 has no interface number 0 [ 275.858582][ T5950] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 275.922396][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.323365][ T5979] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 276.335383][ T5950] usb 4-1: config 0 descriptor?? [ 276.487217][ T10] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 276.519609][ T5950] usb 4-1: selecting invalid altsetting 1 [ 276.577555][ T5979] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 276.587637][ T5950] dvb_ttusb_budget: ttusb_init_controller: error [ 276.592869][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.619563][ T5950] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 276.630077][ T5979] usb 3-1: Product: syz [ 276.640231][ T5979] usb 3-1: Manufacturer: syz [ 276.692846][ T5979] usb 3-1: SerialNumber: syz [ 276.788025][ T5979] usb 3-1: config 0 descriptor?? [ 276.809638][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.840281][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 276.870432][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.926246][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.943480][ T5950] DVB: Unable to find symbol cx22700_attach() [ 276.998368][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.080361][ T10] usb 5-1: Product: syz [ 277.141594][ T10] usb 5-1: Manufacturer: syz [ 277.157351][ T10] usb 5-1: SerialNumber: syz [ 277.195716][ T10] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 277.207329][ T10] cdc_ncm 5-1:1.0: bind() failure [ 277.221873][ T5950] DVB: Unable to find symbol tda10046_attach() [ 277.232465][ T5950] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 277.238699][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 277.238713][ T30] audit: type=1400 audit(1756703277.135:456): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F04 [ 277.533749][ T24] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 277.815403][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 277.837039][ T24] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 278.008352][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 278.056617][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 278.084160][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.092357][ T24] usb 2-1: Product: syz [ 278.096881][ T24] usb 2-1: Manufacturer: syz [ 278.102998][ T24] usb 2-1: SerialNumber: syz [ 278.106314][ T5979] usb 3-1: Firmware version (0.0) predates our first public release. [ 278.115759][ T5979] usb 3-1: Please update to version 0.2 or newer [ 278.118204][ T8543] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 278.168249][ T43] usb 4-1: USB disconnect, device number 38 [ 278.314122][ T982] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 278.467002][ T982] usb 1-1: config 5 has an invalid interface number: 187 but max is 0 [ 278.475696][ T982] usb 1-1: config 5 has no interface number 0 [ 278.481859][ T982] usb 1-1: config 5 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 278.493524][ T982] usb 1-1: config 5 interface 187 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 278.505347][ T982] usb 1-1: config 5 interface 187 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 278.520076][ T982] usb 1-1: config 5 interface 187 has no altsetting 0 [ 278.538410][ T982] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=21.7a [ 278.561688][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.577508][ T982] usb 1-1: Product: syz [ 278.581736][ T982] usb 1-1: Manufacturer: syz [ 278.588027][ T982] usb 1-1: SerialNumber: syz [ 278.820704][ T982] usb 1-1: USB disconnect, device number 35 [ 278.831500][ T8561] fuse: Unknown parameter '0xffffffffffffffff' [ 278.919372][ T24] usb 2-1: USB disconnect, device number 29 [ 278.946352][ T43] usb 5-1: USB disconnect, device number 29 [ 279.099216][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.711'. [ 279.109992][ T982] usb 3-1: USB disconnect, device number 40 [ 279.261907][ T8571] binder: 8569:8571 ioctl c0306201 80000080 returned -22 [ 279.364622][ T8578] input: syz1 as /devices/virtual/input/input15 [ 279.404788][ T8578] netlink: 'syz.2.712': attribute type 10 has an invalid length. [ 279.413465][ T8578] netlink: 40 bytes leftover after parsing attributes in process `syz.2.712'. [ 280.155326][ T8597] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 280.183041][ T10] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 280.386243][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.396591][ T10] usb 2-1: config 0 has no interface number 0 [ 280.402709][ T10] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 280.437078][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.594091][ T10] usb 2-1: config 0 descriptor?? [ 280.656085][ T10] usb 2-1: selecting invalid altsetting 1 [ 280.663185][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 280.669548][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 280.712846][ T8601] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.720434][ T8601] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.977591][ T10] DVB: Unable to find symbol cx22700_attach() [ 281.023552][ T7357] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 281.113915][ T10] DVB: Unable to find symbol tda10046_attach() [ 281.139942][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 281.200279][ T7357] usb 4-1: not running at top speed; connect to a high speed hub [ 281.218633][ T8601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.236577][ T7357] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 281.260874][ T7357] usb 4-1: config 1 interface 0 has no altsetting 0 [ 281.280593][ T8601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.300004][ T7357] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 281.311671][ T7357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.337003][ T7357] usb 4-1: Product: syz [ 281.351626][ T7357] usb 4-1: Manufacturer: syz [ 281.378468][ T7357] usb 4-1: SerialNumber: syz [ 281.567181][ T8608] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 281.737348][ T1105] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.787092][ T1105] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.800140][ T6000] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.073939][ T6000] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.271948][ T982] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 282.486623][ T982] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.497152][ T982] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.508482][ T982] usb 1-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 282.521787][ T982] usb 1-1: config 1 interface 1 has no altsetting 0 [ 282.538891][ T982] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.569003][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.592383][ T982] usb 1-1: Product: syz [ 282.694734][ T982] usb 1-1: Manufacturer: syz [ 282.712197][ T982] usb 1-1: SerialNumber: syz [ 282.910401][ T24] usb 2-1: USB disconnect, device number 30 [ 282.949789][ T982] usb 1-1: selecting invalid altsetting 1 [ 283.060997][ T7357] usb 4-1: USB disconnect, device number 39 [ 283.071660][ T982] usb 1-1: selecting invalid altsetting 0 [ 283.143862][ T982] usb 1-1: selecting invalid altsetting 0 [ 283.156821][ T982] cdc_ncm 1-1:1.0: bind() failure [ 283.246305][ T8632] fuse: Unknown parameter '0xffffffffffffffff' [ 283.762499][ T8646] netlink: 14 bytes leftover after parsing attributes in process `syz.3.733'. [ 283.851347][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.734'. [ 283.878088][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.734'. [ 283.937103][ T30] audit: type=1326 audit(1756703283.835:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 284.003589][ T30] audit: type=1326 audit(1756703283.855:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 284.099213][ T30] audit: type=1326 audit(1756703283.855:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 284.310579][ T30] audit: type=1326 audit(1756703283.855:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 284.323462][ T43] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 284.434811][ T30] audit: type=1326 audit(1756703283.855:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 284.482158][ T30] audit: type=1326 audit(1756703283.855:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 284.769463][ T30] audit: type=1326 audit(1756703283.855:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 284.945200][ T982] usb 1-1: selecting invalid altsetting 0 [ 284.956463][ T982] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 284.970784][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 285.016815][ T982] usb 1-1: selecting invalid altsetting 0 [ 285.023408][ T30] audit: type=1326 audit(1756703283.855:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 285.045743][ T982] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 285.056129][ T43] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 285.065315][ T43] usb 5-1: can't read configurations, error -71 [ 285.090954][ T982] usb 1-1: USB disconnect, device number 36 [ 285.264442][ T8664] syzkaller0: entered promiscuous mode [ 285.278921][ T8664] syzkaller0: entered allmulticast mode [ 287.453576][ T5878] Bluetooth: hci0: command 0x0406 tx timeout [ 287.461435][ T8667] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 287.545044][ T8667] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 287.579532][ T8667] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 287.586630][ T8667] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 287.599351][ T8667] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 287.605886][ T8667] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 287.618590][ T8667] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 287.625077][ T8667] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 287.634926][ T8667] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 287.640939][ T8667] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 287.807279][ T8686] netlink: 'syz.3.743': attribute type 10 has an invalid length. [ 287.830809][ T8686] bond0: (slave wlan1): Releasing backup interface [ 287.852305][ T8686] team0: Port device wlan1 added [ 287.929175][ T43] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 287.943011][ T7357] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 288.125940][ T43] usb 2-1: not running at top speed; connect to a high speed hub [ 288.150836][ T43] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 288.285107][ T43] usb 2-1: config 1 interface 0 has no altsetting 0 [ 288.306459][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 288.323932][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.332105][ T43] usb 2-1: Product: syz [ 288.343717][ T43] usb 2-1: Manufacturer: syz [ 288.348494][ T43] usb 2-1: SerialNumber: syz [ 288.420769][ T8684] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 288.623576][ T5979] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 288.812029][ T43] usb 2-1: USB disconnect, device number 31 [ 288.954428][ T5979] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 289.056320][ T5979] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 289.081926][ T8715] netlink: 84 bytes leftover after parsing attributes in process `syz.1.753'. [ 289.143353][ T5979] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 289.158292][ T5979] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 289.187812][ T5979] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 289.210141][ T5979] usb 4-1: config 0 interface 0 has no altsetting 0 [ 289.220610][ T5979] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 289.230028][ T5979] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 289.248648][ T5979] usb 4-1: Product: syz [ 289.266117][ T5979] usb 4-1: Manufacturer: syz [ 289.275176][ T5979] usb 4-1: SerialNumber: syz [ 289.290589][ T5979] usb 4-1: config 0 descriptor?? [ 289.320649][ T8708] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 289.344972][ T5979] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 289.360458][ T5979] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 289.540973][ T5878] Bluetooth: hci0: command 0x0406 tx timeout [ 289.613794][ T5878] Bluetooth: hci4: command 0x0406 tx timeout [ 289.620647][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 289.693258][ T5868] Bluetooth: hci3: command 0x0406 tx timeout [ 289.699962][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 289.903933][ T43] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 289.954205][ T982] usb 4-1: USB disconnect, device number 40 [ 289.966764][ T982] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 290.012072][ T8731] ================================================================== [ 290.020139][ T8731] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 290.028015][ T8731] Read of size 1 at addr ffff888055910330 by task syz.0.756/8731 [ 290.035708][ T8731] [ 290.038019][ T8731] CPU: 1 UID: 0 PID: 8731 Comm: syz.0.756 Not tainted syzkaller #0 PREEMPT(full) [ 290.038031][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.038038][ T8731] Call Trace: [ 290.038044][ T8731] [ 290.038050][ T8731] dump_stack_lvl+0x189/0x250 [ 290.038064][ T8731] ? __kasan_check_byte+0x12/0x40 [ 290.038079][ T8731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.038090][ T8731] ? lock_release+0x4b/0x3e0 [ 290.038106][ T8731] ? __virt_addr_valid+0x4a5/0x5c0 [ 290.038118][ T8731] print_report+0xca/0x240 [ 290.038127][ T8731] ? xfrm_state_find+0x2cf2/0x5400 [ 290.038136][ T8731] kasan_report+0x118/0x150 [ 290.038149][ T8731] ? xfrm_state_find+0x2cf2/0x5400 [ 290.038159][ T8731] xfrm_state_find+0x2cf2/0x5400 [ 290.038167][ T8731] ? __lock_acquire+0xab9/0xd20 [ 290.038184][ T8731] ? xfrm_state_find+0x1da/0x5400 [ 290.038194][ T8731] ? __pfx_xfrm_state_find+0x10/0x10 [ 290.038202][ T8731] ? __lock_acquire+0xab9/0xd20 [ 290.038216][ T8731] ? __lock_acquire+0xab9/0xd20 [ 290.038230][ T8731] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 290.038246][ T8731] ? stack_depot_save_flags+0x41b/0x860 [ 290.038260][ T8731] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 290.038271][ T8731] ? __lock_acquire+0xab9/0xd20 [ 290.038287][ T8731] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 290.038299][ T8731] ? rt_set_nexthop+0x693/0xa80 [ 290.038312][ T8731] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 290.038324][ T8731] ? xfrm_expand_policies+0x41f/0x6a0 [ 290.038336][ T8731] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 290.038349][ T8731] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 290.038360][ T8731] ? __pfx_call_rcu+0x10/0x10 [ 290.038370][ T8731] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 290.038382][ T8731] ? percpu_counter_add_batch+0xea/0x1e0 [ 290.038395][ T8731] xfrm_lookup_route+0x3c/0x1c0 [ 290.038407][ T8731] __ip4_datagram_connect+0x9a5/0x1270 [ 290.038421][ T8731] __ip6_datagram_connect+0x9f0/0x1150 [ 290.038436][ T8731] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 290.038447][ T8731] ? __local_bh_enable_ip+0x12d/0x1c0 [ 290.038456][ T8731] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 290.038467][ T8731] ip6_datagram_connect_v6_only+0x63/0xa0 [ 290.038480][ T8731] __sys_connect+0x313/0x440 [ 290.038495][ T8731] ? __pfx___sys_connect+0x10/0x10 [ 290.038512][ T8731] __ia32_sys_connect+0x7a/0x90 [ 290.038521][ T8731] __do_fast_syscall_32+0xb6/0x2b0 [ 290.038532][ T8731] do_fast_syscall_32+0x34/0x80 [ 290.038540][ T8731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 290.038552][ T8731] RIP: 0023:0xf710e539 [ 290.038561][ T8731] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 290.038570][ T8731] RSP: 002b:00000000f548955c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 290.038581][ T8731] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 0000000080000000 [ 290.038588][ T8731] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 290.038593][ T8731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 290.038599][ T8731] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 290.038605][ T8731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 290.038614][ T8731] [ 290.038617][ T8731] [ 290.353598][ T8731] Allocated by task 7729: [ 290.357908][ T8731] kasan_save_track+0x3e/0x80 [ 290.362574][ T8731] __kasan_slab_alloc+0x6c/0x80 [ 290.367410][ T8731] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 290.372855][ T8731] xfrm_state_alloc+0x24/0x2f0 [ 290.377605][ T8731] __find_acq_core+0x8a7/0x1c00 [ 290.382437][ T8731] xfrm_find_acq+0x78/0xa0 [ 290.386836][ T8731] xfrm_alloc_userspi+0x6b3/0xc90 [ 290.391846][ T8731] xfrm_user_rcv_msg+0x7a0/0xab0 [ 290.396765][ T8731] netlink_rcv_skb+0x205/0x470 [ 290.401519][ T8731] xfrm_netlink_rcv+0x79/0x90 [ 290.406175][ T8731] netlink_unicast+0x82c/0x9e0 [ 290.411353][ T8731] netlink_sendmsg+0x805/0xb30 [ 290.416095][ T8731] __sock_sendmsg+0x219/0x270 [ 290.420755][ T8731] ____sys_sendmsg+0x505/0x830 [ 290.425498][ T8731] ___sys_sendmsg+0x21f/0x2a0 [ 290.430151][ T8731] __sys_sendmsg+0x164/0x220 [ 290.434720][ T8731] __do_fast_syscall_32+0xb6/0x2b0 [ 290.439810][ T8731] do_fast_syscall_32+0x34/0x80 [ 290.444645][ T8731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 290.450954][ T8731] [ 290.453258][ T8731] Freed by task 7356: [ 290.457216][ T8731] kasan_save_track+0x3e/0x80 [ 290.461875][ T8731] kasan_save_free_info+0x46/0x50 [ 290.466878][ T8731] __kasan_slab_free+0x5b/0x80 [ 290.471626][ T8731] kmem_cache_free+0x18f/0x400 [ 290.476376][ T8731] xfrm_state_gc_task+0x52d/0x6b0 [ 290.481386][ T8731] process_scheduled_works+0xae1/0x17b0 [ 290.486913][ T8731] worker_thread+0x8a0/0xda0 [ 290.491483][ T8731] kthread+0x70e/0x8a0 [ 290.495535][ T8731] ret_from_fork+0x3fc/0x770 [ 290.500107][ T8731] ret_from_fork_asm+0x1a/0x30 [ 290.504856][ T8731] [ 290.507158][ T8731] The buggy address belongs to the object at ffff888055910000 [ 290.507158][ T8731] which belongs to the cache xfrm_state of size 928 [ 290.521102][ T8731] The buggy address is located 816 bytes inside of [ 290.521102][ T8731] freed 928-byte region [ffff888055910000, ffff8880559103a0) [ 290.534888][ T8731] [ 290.537205][ T8731] The buggy address belongs to the physical page: [ 290.543606][ T8731] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888055910000 pfn:0x55910 [ 290.553662][ T8731] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 290.562147][ T8731] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 290.569683][ T8731] page_type: f5(slab) [ 290.573654][ T8731] raw: 00fff00000000040 ffff888145aba280 dead000000000122 0000000000000000 [ 290.582223][ T8731] raw: ffff888055910000 00000000800f000e 00000000f5000000 0000000000000000 [ 290.590789][ T8731] head: 00fff00000000040 ffff888145aba280 dead000000000122 0000000000000000 [ 290.599440][ T8731] head: ffff888055910000 00000000800f000e 00000000f5000000 0000000000000000 [ 290.608089][ T8731] head: 00fff00000000002 ffffea0001564401 00000000ffffffff 00000000ffffffff [ 290.616744][ T8731] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 290.625388][ T8731] page dumped because: kasan: bad access detected [ 290.631776][ T8731] page_owner tracks the page as allocated [ 290.637480][ T8731] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7729, tgid 7728 (syz.0.460), ts 220092048076, free_ts 219987221464 [ 290.656666][ T8731] post_alloc_hook+0x240/0x2a0 [ 290.661425][ T8731] get_page_from_freelist+0x21e4/0x22c0 [ 290.666956][ T8731] __alloc_frozen_pages_noprof+0x181/0x370 [ 290.672746][ T8731] alloc_pages_mpol+0x232/0x4a0 [ 290.677589][ T8731] allocate_slab+0x8a/0x370 [ 290.682075][ T8731] ___slab_alloc+0xbeb/0x1410 [ 290.686738][ T8731] kmem_cache_alloc_noprof+0x283/0x3c0 [ 290.692181][ T8731] xfrm_state_alloc+0x24/0x2f0 [ 290.696933][ T8731] __find_acq_core+0x8a7/0x1c00 [ 290.701769][ T8731] xfrm_find_acq+0x78/0xa0 [ 290.706175][ T8731] xfrm_alloc_userspi+0x6b3/0xc90 [ 290.711183][ T8731] xfrm_user_rcv_msg+0x7a0/0xab0 [ 290.716104][ T8731] netlink_rcv_skb+0x205/0x470 [ 290.720856][ T8731] xfrm_netlink_rcv+0x79/0x90 [ 290.725515][ T8731] netlink_unicast+0x82c/0x9e0 [ 290.730264][ T8731] netlink_sendmsg+0x805/0xb30 [ 290.735008][ T8731] page last free pid 7725 tgid 7723 stack trace: [ 290.741315][ T8731] __free_frozen_pages+0xbc4/0xd30 [ 290.746412][ T8731] stack_depot_save_flags+0x436/0x860 [ 290.751766][ T8731] kasan_save_track+0x4f/0x80 [ 290.756433][ T8731] __kasan_kmalloc+0x93/0xb0 [ 290.761004][ T8731] __kmalloc_cache_noprof+0x230/0x3d0 [ 290.766360][ T8731] inetdev_init+0x7d/0x500 [ 290.770843][ T8731] inetdev_event+0x301/0x15b0 [ 290.775509][ T8731] notifier_call_chain+0x1b6/0x3e0 [ 290.780605][ T8731] register_netdevice+0x1608/0x1ae0 [ 290.785789][ T8731] ip6gre_newlink_common+0x3dd/0x590 [ 290.791058][ T8731] ip6gre_newlink+0x228/0x360 [ 290.795712][ T8731] rtnl_newlink_create+0x30d/0xb00 [ 290.800802][ T8731] rtnl_newlink+0x16d6/0x1c70 [ 290.805466][ T8731] rtnetlink_rcv_msg+0x7cc/0xb70 [ 290.810388][ T8731] netlink_rcv_skb+0x205/0x470 [ 290.815141][ T8731] netlink_unicast+0x82c/0x9e0 [ 290.819889][ T8731] [ 290.822193][ T8731] Memory state around the buggy address: [ 290.827804][ T8731] ffff888055910200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 290.835843][ T8731] ffff888055910280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 290.843884][ T8731] >ffff888055910300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 290.851920][ T8731] ^ [ 290.857527][ T8731] ffff888055910380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 290.865568][ T8731] ffff888055910400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 290.873608][ T8731] ================================================================== [ 290.931379][ T8731] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 290.938602][ T8731] CPU: 1 UID: 0 PID: 8731 Comm: syz.0.756 Not tainted syzkaller #0 PREEMPT(full) [ 290.947799][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.957854][ T8731] Call Trace: [ 290.961134][ T8731] [ 290.964065][ T8731] dump_stack_lvl+0x99/0x250 [ 290.968660][ T8731] ? __asan_memcpy+0x40/0x70 [ 290.973251][ T8731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.978475][ T8731] ? __pfx__printk+0x10/0x10 [ 290.983078][ T8731] vpanic+0x281/0x750 [ 290.987065][ T8731] ? preempt_schedule+0xae/0xc0 [ 290.991923][ T8731] ? __pfx_vpanic+0x10/0x10 [ 290.996424][ T8731] ? preempt_schedule_common+0x83/0xd0 [ 291.001890][ T8731] ? preempt_schedule+0xae/0xc0 [ 291.006748][ T8731] ? __pfx_preempt_schedule+0x10/0x10 [ 291.012133][ T8731] panic+0xb9/0xc0 [ 291.015856][ T8731] ? __pfx_panic+0x10/0x10 [ 291.020277][ T8731] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 291.026179][ T8731] ? xfrm_state_find+0x2cf2/0x5400 [ 291.031293][ T8731] check_panic_on_warn+0x89/0xb0 [ 291.036238][ T8731] ? xfrm_state_find+0x2cf2/0x5400 [ 291.041353][ T8731] end_report+0x78/0x160 [ 291.045604][ T8731] kasan_report+0x129/0x150 [ 291.050115][ T8731] ? xfrm_state_find+0x2cf2/0x5400 [ 291.055231][ T8731] xfrm_state_find+0x2cf2/0x5400 [ 291.060166][ T8731] ? __lock_acquire+0xab9/0xd20 [ 291.065032][ T8731] ? xfrm_state_find+0x1da/0x5400 [ 291.070055][ T8731] ? __pfx_xfrm_state_find+0x10/0x10 [ 291.075341][ T8731] ? __lock_acquire+0xab9/0xd20 [ 291.080194][ T8731] ? __lock_acquire+0xab9/0xd20 [ 291.085040][ T8731] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 291.091190][ T8731] ? stack_depot_save_flags+0x41b/0x860 [ 291.096721][ T8731] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 291.103296][ T8731] ? __lock_acquire+0xab9/0xd20 [ 291.108141][ T8731] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 291.113497][ T8731] ? rt_set_nexthop+0x693/0xa80 [ 291.118335][ T8731] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 291.123691][ T8731] ? xfrm_expand_policies+0x41f/0x6a0 [ 291.129044][ T8731] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 291.134402][ T8731] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 291.140193][ T8731] ? __pfx_call_rcu+0x10/0x10 [ 291.144854][ T8731] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 291.150209][ T8731] ? percpu_counter_add_batch+0xea/0x1e0 [ 291.155826][ T8731] xfrm_lookup_route+0x3c/0x1c0 [ 291.160662][ T8731] __ip4_datagram_connect+0x9a5/0x1270 [ 291.166108][ T8731] __ip6_datagram_connect+0x9f0/0x1150 [ 291.171553][ T8731] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 291.177431][ T8731] ? __local_bh_enable_ip+0x12d/0x1c0 [ 291.182788][ T8731] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 291.188500][ T8731] ip6_datagram_connect_v6_only+0x63/0xa0 [ 291.194209][ T8731] __sys_connect+0x313/0x440 [ 291.198789][ T8731] ? __pfx___sys_connect+0x10/0x10 [ 291.203891][ T8731] __ia32_sys_connect+0x7a/0x90 [ 291.208723][ T8731] __do_fast_syscall_32+0xb6/0x2b0 [ 291.213819][ T8731] do_fast_syscall_32+0x34/0x80 [ 291.218651][ T8731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.224962][ T8731] RIP: 0023:0xf710e539 [ 291.229010][ T8731] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 291.248595][ T8731] RSP: 002b:00000000f548955c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 291.256995][ T8731] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 0000000080000000 [ 291.264947][ T8731] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 291.272900][ T8731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.280854][ T8731] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 291.288806][ T8731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.296767][ T8731] [ 291.299914][ T8731] Kernel Offset: disabled [ 291.304216][ T8731] Rebooting in 86400 seconds..