last executing test programs: 3m17.805454454s ago: executing program 0 (id=816): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b04, 0x0) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x240) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000e00ff0f0000060016003c9700000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0xc, @pix_mp={0x12, 0x5be8, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5, 0x7}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) 3m14.412274089s ago: executing program 0 (id=826): r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20181, 0x0) unshare(0x68040200) mmap(&(0x7f000046d000/0x1000)=nil, 0x1000, 0x2000007, 0x8010, r0, 0x200c4000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x12, r5, 0x0, r4}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) r7 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0x1b4}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x220000, 0x20, 0x30}, 0x0, 0x18, 0x0, 0x12345}) io_uring_enter(r7, 0x47f6, 0x0, 0x4, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r10, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) r12 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1bb) getdents64(r12, &(0x7f0000000440)=""/98, 0x62) getdents(r12, &(0x7f0000001fc0)=""/184, 0xb8) sendmmsg$inet6(r11, &(0x7f0000002fc0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x8, @empty, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000340)="058780", 0x3}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e22, 0x40, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) 3m11.713974084s ago: executing program 4 (id=829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x7, 0x1}, 0x0, {0xfd, 0x8}, 0xfe, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0xc0bc5310, &(0x7f0000000040)={0x87, @time={0xbc, 0x7}, 0x0, {0x71, 0x6}, 0x6, 0x0, 0x1}) tkill(r1, 0x7) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000004ef168ef0000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000914"], 0x64}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000080)) 3m11.082148376s ago: executing program 0 (id=834): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x200006}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x280, 0x55a6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e22, 0x86fa, @remote, 0xfffffff8}}, 0x7, 0x1}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r4, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) r5 = syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r6, &(0x7f0000007100)={0x2020}, 0x941f) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r7, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x29, 0xf, {0x5, 0x29, 0x2, 0x80, 0x0, 0xad, '\x00', "8173828d"}}, 0x0}, 0x0) 3m11.081564575s ago: executing program 4 (id=835): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r5 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x4000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) shmctl$IPC_RMID(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, r6, 0x3, 0x9, 0x3ffc}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1000, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0xfffffffffffffffd, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6000, 0x0, 0x0, r7, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3m9.922013281s ago: executing program 4 (id=840): socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x2d, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030312c6d61785f726561643d3078303030303030303030303030303037662c6d474e87386fab61643d3078303030303030303030303030303031302c616c6c6f775f6f746865722c616c6c6f775f6f746865"], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x9}) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2a00) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 3m7.377957044s ago: executing program 0 (id=846): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 3m7.335716662s ago: executing program 4 (id=847): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) (fail_nth: 1) 3m7.281659245s ago: executing program 0 (id=849): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_setup(0xfffff44e, &(0x7f0000000000)) io_setup(0x3, &(0x7f0000000180)) 3m6.911935431s ago: executing program 4 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000009740)=[{{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000740)="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", 0x117}, {&(0x7f0000000480)="0becb4be487d4c504c48088235ebf9caa9d500224714c685c40fd6f11c32b0e80598f8f2049627d3f2043aa959de5016867eef04264247", 0x37}, {&(0x7f00000005c0)="eea547805fd015909ad492b0a802cbca75537a337db703d528c9c608fcad54e804d8e102303dd081448a302ba3f7d3bbe57b9c26c123c64ef25847b8da3267e0e7f51f8764efd6b83024ee03ff34f2e40824fb9eae12e8baa734df4e961ab591e2fc2bd53b6b342977b0d17dd4574a4821a91f167c83085cf82e3f5e2c69b52f42d9be994b8704864a23c40c58a43cefaf3c76ef1b1cc468e282b853e71f1a0e884c2855ab2fd666865fdad84d50580c2cb87829252b3f1197d9d8f1f6ce8f0d936843f3246cdcf6105bbaace67239604c889254b2700e797335982e797c42f491f091829c128c65d49a07b6baaaf13705e49964e759bad628", 0xf9}, {&(0x7f00000004c0)="2142de541e6ed48bd136f9aca413b7f315a52b659876ef48df7c3b563ffe2f7207b038cdaf9943e6a7beafaf36ca86db9197b501dc2c5b952f3c02d86cc58afa3a9805df5d2c9572173a6cc6ac304e0ec2577e986c1895df815daca18784953824eb7c8c459f7ab9d79818fbc14ee8b76c3e698b9e65d127aceb38aa7c404643a80f825a82da835d94f5225bcd0e86e2fffaca71df25ad632fb845010affc48d4d0763671263198063a118cb0e4bfc", 0xaf}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="006f87fbb0145f6bf40000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYRES32=r4], 0x110, 0x80}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="07758c28b4a3d85dd514bca6d1e56aa42b2991bfae13c67c0afea05f5e95bc75670a88a3b438aaf21e3a8f861b75ccd8ffcee7ea990fa3656786a628dbe371adf7e09b3b615c31dfa2f91d7c9f252dd56d02e132d893c999172d02ca28e4edce963caea32982908730f25370e8639e04e6094d353bab75abc78539d05214270791576a31de8cb8924c5050510af2a91a0f31fa81c3e8f7d411f816fd320d2ac14318ca2f322dceca81c9688167ba12f471bfed7507553281b417056f164d011d278d8c2d0ab22ebe2b963d61c667120257297bdbaeff7f4d", 0xd8}, {&(0x7f0000000b00)="8b19646c9b64b4e0f7cba08ca39afabc3c4e9cd5", 0x14}, {&(0x7f0000000b40)="e10a30965479153181ebf17ba4d5764a66543bcdb3140ac6a9aa59a7d68c705421e1f7dccc5699382fea59261b8932915ac4f0d27bf2", 0x36}, {&(0x7f0000001040)="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", 0x1000}], 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1c00000000a7f3000100080001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x20, 0x20000080}}, {{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x84}}, {{&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000008340)="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", 0xffc}, {&(0x7f0000000e80)="517652de6deba3a5e438f10542ad1db650b2c05853e70ddcc6070708ef815afbf9919ac8f1a04cfc5f724cad620fd00a90897436ef624c7bb1124da29641b55740c12ad2aa5e9c81a7ee9b6fb034d0defcfd270d186e7b0ae1be1fe667fbb99218a864e883ef1f", 0x67}, {&(0x7f0000009340)="31f4a6eb22c8b5d3bc4fd596d07fdc49ebea92030463911291d8a3a498d09163dc7d424df04c600afec531f8bb432932c5540bf05bf647abde0554150ce9ad69a53165acd27d3e831c6c28cb9a6250d9f65d0c9ef4f4cb0a639cfda6e433d389ac45f116bc120e849482cfb7f27e3bf3eb750853c848c9886442c89d72a6c7efc6906edf583e6735e676e90a976fa733b2c88f2f888e5f98a46dd653011d2b7f7622682c95ce93ae6166ea0f816488729ef245cf27640ba705cc7ebfe6dc5f5fe5e7aa810a36481af2a4aede8b0ea78de709d029680680c6a9f364897bf6318ca22d249288a5f9fc09b18ab8d11e453b94de5f", 0xf3}, {&(0x7f0000006200)="68521c07b57c2506887a0077ad6708bb39ed2bfefc359c6b12da47a8430fb846a55107f2b424ff61a45cee9e4ec21faccc71b4581af249c6bb513f3668361596dd89806eb0424374a973f84a5580c2256638dc0adaa0371ab61aed6d2c4aec577570ad8d150efcf5b382b4b1505bb1247bc02801213a1bf19b119c97a2801f7cbd9269605a14e7e9ddf2266b9cec", 0x8e}, {&(0x7f0000009440)="445032ce62274ab4a1c5b5a421a3e8de6e60c8b7089dcc6920ffbd81d435ca979fda4100ea9a0727dac7303e03816f8995bff701b747331cfec68aa94fd8f8b11ff9838b3cd35cd490d3a831d06010edd77b50f3ab01a8deb2a269713df30e1651992cb49fcd5641bb56095647fad91c4bdb769c2e5eb5573640d78c7c1dcf4029ab70eec258eb0e8f82eff90863014cd4b51d9e4832fcdd5e88a9b8141a48d01988f75401a0b074f2ff85df04195f6ef6435eb6b674f1b457c0ef6b38151293059798dd2b4d2532c8", 0xc9}], 0x5, &(0x7f0000009600)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100040001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="04000006"], 0x140, 0x4000}}], 0x4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0x7a11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000082000040"]) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000700000000000008030000000000a369f867d87d3ffbb59816c196"], &(0x7f0000000200)=""/76, 0x26, 0x4c, 0x0, 0x60d}, 0x28) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0xfffffffffffffffe, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r10, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3}) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) 3m6.796135474s ago: executing program 0 (id=852): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@remote, 0x4e22, 0x0, 0x2, 0x3, 0x2}, {0x8, 0x200000000, 0x40000000007, 0x20000a0de, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5}, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2}, {{@in6=@private0, 0x0, 0x6c}, 0xa, @in6=@private1, 0x3502, 0x1, 0x2, 0x0, 0x9075}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}}, 0x1c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x7) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x1000001e, 0x8001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r6, r5, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000180)={0x2020}, 0x143b) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x5, @private0, 0x5}], 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004810) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x2, 0x9, @dev={0xfe, 0x80, '\x00', 0x1c}}, r9, 0x4040099d}}, 0x48) 3m6.085424691s ago: executing program 32 (id=852): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@remote, 0x4e22, 0x0, 0x2, 0x3, 0x2}, {0x8, 0x200000000, 0x40000000007, 0x20000a0de, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5}, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2}, {{@in6=@private0, 0x0, 0x6c}, 0xa, @in6=@private1, 0x3502, 0x1, 0x2, 0x0, 0x9075}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}}, 0x1c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x7) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x1000001e, 0x8001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r6, r5, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000180)={0x2020}, 0x143b) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x5, @private0, 0x5}], 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004810) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x2, 0x9, @dev={0xfe, 0x80, '\x00', 0x1c}}, r9, 0x4040099d}}, 0x48) 3m6.070328282s ago: executing program 4 (id=856): syz_emit_ethernet(0xf87, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"}}}}}, 0x0) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000fc0)={0x0, @in6={{0xa, 0x4e21, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, 0xff, 0x8001, 0xffff81cf, 0x8, 0x0, 0x6, 0x2}, &(0x7f0000001080)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000010c0)={r1, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x4, 0x9}, &(0x7f0000001180)=0x90) 3m5.982017243s ago: executing program 33 (id=856): syz_emit_ethernet(0xf87, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "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"}}}}}, 0x0) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000fc0)={0x0, @in6={{0xa, 0x4e21, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, 0xff, 0x8001, 0xffff81cf, 0x8, 0x0, 0x6, 0x2}, &(0x7f0000001080)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000010c0)={r1, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x4, 0x9}, &(0x7f0000001180)=0x90) 11.118527017s ago: executing program 5 (id=1490): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x0, 0x800) r3 = syz_io_uring_setup(0xbdd, &(0x7f0000000640)={0x0, 0xec21, 0x1000, 0x400001, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xf, 0x0, 0x0) 10.473689032s ago: executing program 1 (id=1493): capset(0x0, &(0x7f0000000040)={0x81, 0x21fff8, 0xc, 0x0, 0x3fffff, 0xfffffffe}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x600, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 10.109994593s ago: executing program 1 (id=1495): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x280, 0x55a6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e22, 0x86fa, @remote, 0xfffffff8}}, 0x7, 0x1}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r5, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x1, 0x6, 0x0, 0x80, 0x2, "6d1714a98b08633c45debea890564b7cdcd0f7", 0xc, 0x3}) r6 = syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r7, &(0x7f0000007100)={0x2020}, 0x941f) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r8, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x29, 0xf, {0x5, 0x29, 0x2, 0x80, 0x0, 0xad, '\x00', "8173828d"}}, 0x0}, 0x0) 9.390200969s ago: executing program 2 (id=1496): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r3, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040825}, 0x20004000) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r8, 0x13) ptrace(0x10, r8) ptrace$peekuser(0x3, r8, 0x3) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)=0x3) 8.386122774s ago: executing program 5 (id=1498): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0xc, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000dc0)={0x8, 'vlan1\x00', {'ip6_vti0\x00'}}) write$apparmor_current(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="706572866d70726f66696c64203a273a02"], 0x10) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"3c24f54d321bc81157f8000000000000002800200000000000000000000800"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40094}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x122) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0xed, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x10000, 0x6fd8e84b}, 0x3, 0xed}}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) 6.642230792s ago: executing program 2 (id=1501): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.966566992s ago: executing program 5 (id=1504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffe) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 5.625262346s ago: executing program 1 (id=1506): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) 4.379982189s ago: executing program 6 (id=1509): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f0000cad000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 4.312279624s ago: executing program 6 (id=1510): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00", @ANYRES16, @ANYBLOB="05a300000000000000000d"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x4004850) 4.168496231s ago: executing program 6 (id=1511): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc0497ffffff00000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 4.041630514s ago: executing program 6 (id=1512): r0 = open(&(0x7f0000000000)='./file0\x00', 0xa0000, 0x11) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000080)={0x7ff, 0x0, 0x300b, 0x3, 0x8, {0x7, 0x9}}) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x719600, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000280)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001e00010000000000000000000701"], 0x30}}, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtaction={0x104, 0x30, 0x300, 0x70bd2b, 0xbc, {}, [{0xf0, 0x1, [@m_ipt={0xec, 0x2, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x65, 0x6, {0x3, 'nat\x00', 0xd, 0x6, "6913ace14a6ed89a10126bdccf8bb0e47081056269c6b4936fa4dd86021e400713aaa74a4ed7ed21409e3670e5c1e0b6978f1ea244af83d36c88ea"}}]}, {0x2d, 0x6, "d4404c4a8824b84368d09ccdb5597b825dbbd7aef99c354d3ef3d520abe9d4cb7dce90320fdae5b234"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x104}}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2}}], 0x2, 0x60, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000040)=0xd50, 0x4) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) epoll_create1(0x0) 4.007163663s ago: executing program 5 (id=1513): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) close(0xffffffffffffffff) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) mq_open(0x0, 0x40, 0x9, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9}, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x103, 0x0, 0x0, {{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0) 3.858612698s ago: executing program 6 (id=1514): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x10, 0x62, {0x62, 0x30, "4410f38ac43c10ad1e3f5a080510bb63330aa84fcefac1e0dbb902f1f508b21ac7719f1a8884c4c358aeb85342253f7f27505152709bfc83cac94982368e295f80c639784a2771121ee303c4d8748fb6692deaf2bf0b52022fb3911a4ae03cd4"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}}, &(0x7f0000000640)={0x1c, &(0x7f0000000100)={0x40, 0xa, 0xa7, "b1505e7a048d571e6ed398fdea42b55f7b41dac964155ce617b1fa42a93c87ef7c987d126006fc2234a937ebf247a28e3cc656d44047c4837341e4ce984c3672074fca646f14a2f99d3b5860b2c5733fb9302fe8b2b8e67a312e14c81a721bd8da105a3f28009d2edecd3dbe6d88bdd03c171603b3d9744c42509763ee2fb20dc1893a32c9bcdc1fbc5d797265ba01cb617a1d313da4058388a59c768169d91d05a13195ba142b"}, &(0x7f00000001c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000600)}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (rerun: 32) 3.478069716s ago: executing program 2 (id=1515): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xd, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x12}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x7, @remote, 0xc}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000000) 3.250073352s ago: executing program 2 (id=1516): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x86, &(0x7f0000000140)=ANY=[@ANYBLOB="0000007eab0c476c36cb6ed828ba00441bedcade8c2d76b885b18bc4a89fbec35628ed17d61f3d91150ba423cbadea2ee2cc84bfc0ecd34576b65589ea0fec3165dd45b1950ebbaadd1a4e2c77ab786bfc09258aa7a810b0b301e37aafe73d2a83a016c5dd8719f0bdbaddb38bff7cb7d49fa9b3f85fc0"]) 3.1717877s ago: executing program 3 (id=1517): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000100)=[{&(0x7f0000001100)=':', 0x1}], 0x1, 0x9, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x190, 0x18, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x15c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}]}]}, @NFT_MSG_DELOBJ={0x140, 0x14, 0xa, 0xf4d719dd02e6f0d5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xe6, 0x8, "08fe09e4cd48b3d25e872616bcec80b420ef3be5fe71cefb13bf4ccdb9e8c0adad0efa56dc192c205a5f6a9844ea95d481c8783d8f45245f3267e4d57d5612c2888f2d1e0cc80b8e6dab8f30389b61b95bccdcfc7cf518e72aba5085fce0dc86f55b33c20f9e8abb013b74147bc97692693d2667ef4192f6de7026f0d603d249f30a3ba40b149080fcac25d7f924b214340bf7ce062f6cadfb82d954e9f3f809ee465e46968dfb25cf101c514a4d1658e6beecf783dddaad868324c5baf95be77b82b318e7a3e31ceb1348a3c99cf74751595dee8b248a859987464c04684a033a4b"}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x384}}, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 2.983194292s ago: executing program 3 (id=1518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000380)={0xe, {{0xa, 0x4e23, 0x2, @mcast1, 0x8}}, {{0xa, 0x4e22, 0x10001, @mcast1, 0x5}}}, 0x108) (async) syz_usb_connect$uac1(0x2, 0xa2, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029000000001020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000050054b57f1cd27cba"], 0x0) 2.779120654s ago: executing program 5 (id=1519): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4a, 0x9, 0x8, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r4, 0x2) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002e008f866b29924a6f130000005a14060800000000000080a71802dd0000000000000000", 0x28}, {&(0x7f00000000c0)="018d4561b667", 0x6}], 0x2}, 0x0) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0xfffffffd) r8 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x81, 0x0, 0x2, 0x20}, 0xe) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r10}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e26, 0x1001ffe, @private0}, 0x1c) 2.474282242s ago: executing program 1 (id=1520): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 2.37636613s ago: executing program 1 (id=1521): capset(0x0, &(0x7f0000000040)={0x81, 0x21fff8, 0xc, 0x0, 0x3fffff, 0xfffffffe}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000000300000000000000080001000100000008000a0000000000080005"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x4, 0x3, 0x10000, 0x6, 0x0, 0x9}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r6, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 1.921008614s ago: executing program 1 (id=1522): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000500)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xfffffffffffffffd, {0xfffffffffffffffd, 0x200, 0x0, {0x6, 0x0, 0x0, 0x5, 0x0, 0x2000000006, 0x200, 0xbaa4, 0x5, 0x8000, 0x0, r5, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r8 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r8, &(0x7f0000001000)={&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d1413687056a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c", 0xdc}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90dbe10016823346663fdf1df6200a0dc3cafe8ec225fda", 0xfe}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b237409", 0x6a}, {&(0x7f0000000300)="77729a", 0x3}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) lstat(&(0x7f0000002b40)='./file0\x00', 0x0) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) semop(0x0, &(0x7f0000000080)=[{0x1, 0x7ffe, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(0x0, &(0x7f00000001c0)=[{0x1, 0x9}, {0x3, 0xffff, 0x1000}], 0x2a8c) semctl$SETALL(0x0, 0x0, 0x11, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) 1.597970302s ago: executing program 2 (id=1523): write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0xff, 0x8, 0x0, 0xfd, @time={0x395, 0x5}, {0x4}, {0xe}, @connect={{0xfc}, {0xff}}}], 0x1c) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x24048080) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x44, 0x0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x8801) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.432335114s ago: executing program 2 (id=1524): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x20040) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) (fail_nth: 1) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 1.409999735s ago: executing program 3 (id=1525): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x38, 0x1, 0x0, "07000000ff0000ff008700040180000000ffff00", 0x34343452}) listen(r0, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={{r2}, 0xfff, 0x917, 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) r10 = socket(0x9, 0x3, 0xfffffffe) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r9) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r10, 0x111, 0x4, 0x0, 0x4) 1.153711583s ago: executing program 3 (id=1526): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x7, 0x80000001, 0x200, 0x80000, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x1}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000100)={{r1}, r2, 0x2, @unused=[0x3, 0x7fffffff, 0xfffffffffffffd49, 0x5], @devid}) write(r0, &(0x7f0000001100), 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000001140)='tasks\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000001180)={'security\x00', 0x32, "8f0ab75a5d29a20c2c584ae374b4bb17b2185d4e01c8f219290c0d1beb0164feba4d4e18193858450037f477af60b8850438"}, &(0x7f0000001200)=0x56) read$FUSE(r1, &(0x7f0000001240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000003280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000052c0)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in=@loopback}}, &(0x7f00000053c0)=0xe8) setresuid(r4, r5, r7) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000058c0), 0x1, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000005900)={r1}, 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000005940)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) fcntl$getownex(r1, 0x10, &(0x7f0000005980)={0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000007500)=[{{&(0x7f0000005400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005680)=[{&(0x7f0000005480)="82da01093b75c923bb44", 0xa}, {&(0x7f00000054c0)="b809a4af0641a7b8b6f30ef4d3a6a8fc9cfa7de2235238cb6eb0d106ed027733b0019cd21a2d1069b4963ec2665d6ee7937066ef035d6825ab9261382a4975d165142b6efea978c1e7efbfc7be3a64d110dc12c38ffeabe8c1e5b4f75c70178da734b8cad71cb0c698ea03f95fd0b6", 0x6f}, {&(0x7f0000005540)="b911853daf5631dfd92cd1b4a77a0bc750d551443c033ec7811e1a9745d1bb3721ae6597f3c9d4ff32da0fec5bfc17557a9d62bb9c38", 0x36}, {&(0x7f0000005580)="190f7a2552cc963611d9e0471bbbf67994088c2700b6f0bceadf3c36de53e56c235fd97782d274bb73a2e65fda80b390f62c3ac901c6af9b20ec5cc137e6cee4a1d8f11ef45a4d3e78e5ab08ba6482b09d0cdb6ed73edf4b4f9362ad90c6f4bad100392611c52a7d4d42961d138887e1151b523e2eeadf9169890ce0eeddade20f2e8c08da615abc193d17d7a022bebac4ab21bbbddd4f7af23f1d73ee0b49616d413fd8972d149e24eafe8812794dcfba034cc112a6aa0e956d29a0b9c3d520bf2867c86ecfcd52a4804b1c16877542823edc25ed84ff242c7895c958c49cda9a55688ef6d196a89b143bc36b9a83", 0xef}], 0x4, 0x0, 0x0, 0x20000040}}, {{&(0x7f00000056c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000005880)=[{&(0x7f0000005740)="b885ab26656e2dca75ff2640c8343e70bdc823d1deeb00dbbccea2d4472e3dffd16c0e78317ac478e6d12f09c1baff9732c6b3c8eba3e929ba4cb4d3d06c39f3ce24202616e2483517de584535e999c54adc5b4ae236ee7bd521ef59188a416177a769935295c78af120396e343a9a3a7179a154f9e592c09abd7e5b08de68dc68514b344f6501868bdc54c93a5171ac043337fb5d31dba93ee8d254f34859e8b72f04a5ebe5ae90a0d2c4a56592b73f058742a360ac495d0d238c32e8a5f50f6995dc0dc1a09b786f6ba06cd291b4d1adc638a8dfadc4b85eeaef2789e0ba74ea25d404e3ca", 0xe6}, {&(0x7f0000005840)="fc05a7458cfdaa5a594b9e", 0xb}], 0x2, &(0x7f00000059c0)=[@rights={{0x28, 0x1, 0x1, [r3, r3, r0, r3, r0, r8]}}, @rights={{0x24, 0x1, 0x1, [r9, r3, r1, r10, r3]}}, @cred={{0x1c, 0x1, 0x2, {r11, r7, r6}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x34, 0x1, 0x1, [r1, r0, r3, r0, r1, r1, r1, r3, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, r3]}}, @rights={{0x38, 0x1, 0x1, [r1, r0, r3, r3, r1, r0, r3, r3, r0, r1]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x130, 0x10}}, {{&(0x7f0000005b00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000006e00)=[{&(0x7f0000005b80)="5c7178eba2a4240aaed8f1bde373cb7309066ea3713a2c0e8a230e0857b289ffb379c547df3b78e350f0f80251c74606529ba69ce895f48c5441d6bc16b9693a9643885f76f0bbfa94f4a7a4fc250880f3719b5006d928f5c02ff555370bc663e915a544a88adb2ed1789ee586f4c2f27efbf24b023acd4f86815d0da4fe3ace75fc33112cb048de09460f6d422aadf988987495c2f8de6ffcac8f94026985bc1e6aacd4687b1c4ce469fbbbbb74e02f141497098834a7f2ed442d874a264b44ff3d2520d64f240184", 0xc9}, {&(0x7f0000005c80)="64dd7c1e9e52b1ee73f16cc567b686a6241924b5dcbfaafb06da259e0c30f0d33e5912d31dd5b6e287ff16017fd82f50158e8c7e6c748fb1f207eac3560b1b28c2ab83637ea311796ad78e3b9a1b7d11bca2b0fb14443b8270bf295f33072864c41c22eed5bdb06ab2714747799f5a8d4934930e731cb3409b9429cfe1e856f1aa182a37c9592be1d0adce27b35f0af54e49182ca662cbf723cf2e626a033ccb84ecdc0a3bb41fbfcc32c240e47251bec2f9f5c8d18ff26706205ad38b08269dd48b9c98c414d7674eca3c5e1dd1dae32a8dceb993", 0xd5}, {&(0x7f0000005d80)="68ee7ebbf4a5df66246af46986b9d44edd42594b91e239c0790707f673cf76ff1332549798bbe3a47f743b9b2eb35cb3db8270c51ce1ebe4a650a374f7bca43e2c761a879f2b0b29f33858e19df8c93b282b35aedf54013fdf698a5b303252ed85d1a8ce315bc7fc50bb9bbdbd7cad53a103", 0x72}, {&(0x7f0000005e00)="30a6f1d56ff4f157fc667d4aa19805a6696fdbb767875499e24ae697624ee2c597f4eb82a3b2723dada1a3dcc0d79b454ded958f9e919051a45eb2accb4a7e6535139dd24be287a94144cd86f5b77c00a41cee681abc213214053c3150deb886780c937d0eec908401fcfefb44161231dd75a28509ff4863772bdafcfaadaf1461c53d563ec633dc4d734e580ac5d153c475d608320ec22a2ea2194b91e43eebe9fb1672eacedd7f2cfe7dd8b8702ac330c7bfb53cf985f2661b793ae081da18f5c987a3ba42b09762c588632361790c2c4f2d0e54492c0c6c5267370be616342ec00e9279f4764b49cd32b645771a18da0fbcb4bf999e70c83cdb212dc495135ee311239cff9bfbe39c84a3c60552f190060ace518d934308ebda6eb66600bb2c0f93f5db1d631344de51c0bc015a12b66a33449476cf47f38f28a3f3c15674759e02241b1dfd05e15550ba978ea08a805ed54956ae612ababaafa5143051987eb6d8901915d0666e9775fc5baf12bfafddd1afa0fcc24d356bae6f438c8fb18b6bbed71818736417b8c76f25ca8e976b52705681758f8c072e44fb273278315dbac420205eb424f526c6e979f34e4127b57f034ef50a929febcaaf9af9559d15ee8ab9ab04cb15e5cd229a94b40ce33f929e123f5207c46eca1453a0827e4be70f79bbdc0ddd7e20debb55b5c7dabc1395e47986e27b301f97ab740f9009fc519b89c4bbb60c6ee7c84f0e76c45c51f60362865e372e4f57967806148c2134dc74ad5b72c5854fe8471751893e062bc75503cc4ebcba5cdd7f077cf66ae0ae13f6499ccff0a7029ae115fa4bc2f3b23b72eebdbfd9da79b235f7538875d0d1307233453d47065d913805503d19d7ba075a6e40186dafb3b0542ed84a3d75a9b49a5f7461123a6fefd9486e47dfd2dd9f20fa5d68a96a18c3c96492baa430c3ab0825bb38081ed0d1d4b439b2a3321d4d4b22dfdc4191c92a325717c73179c74ebb328defdf790b8e9ee70fc5ac2a3212b77494b8f3674240bfc91c4743c96ea97de9dcd8732e5438bd231f1872d542c1be17abc99f370b21392a4c39f3b2c3b72a07cf486362a72e9c7064e439533ac41151c5be41a873896002309051dd511a7da61cc90ece9114dffa9c678e984d83098301a49ed2f2a14f7e2337a07235ecd6e87cc1c408042a0f354cf41182bbbed0aa09356e606f3e760342bfe1d552954d958bbd5ad4be1636d8be59db6661d73b4085d2d08b0e486ba7bcb73dd404ca9b4f495d7b81f3920115ead9a4502b14e7dff4ea315a2dfe187c3b309d53477ca144167a66ae4b6d1383fb215b2eb12280517b6a9933d98a817ac86a043cb0d426db3cf4ada7ff60a02eb2c6d9f128a41f6ad389b12cae773d0d2a9c555eb69ed18f8dac2b587ffb082fefe7d5db34c019d46a5168ff36837cb84a5191a332fc85de370a7ec42d32e822a33f8835da78372d56c452f60193f94c0a5d3ad768294fcafcc989568e41abfa96e49d351de4b890e66fd1d23d5c29329b1ee6d9805cfcc4600f811df2d15ca534ea115d85cad04f6e5f3cf4279cd58445dcfe0dd457489465c042dc47388e8579061b32cb55f8d4f3c2eca92c548e3ded4a7a0f43d58496b34a581f745660bd31fabd699c5acd679d0618d85e72997e0c55ba5364215d84aee49233f50f1413c8fe23508fb96b5f04f055df608065670c71f12c5f2355c68fc270f7c4128fd1b7e241bf430a4266f3a9a36058548e7878f03c82a5c20494cce5c3201b87bfab55096e32fdd6992ef83616431b495f9be9931799863ce5d40d737038d10a38b66bee83aef17d1f64ba789b47ee5f89ffead5b84f8495abc51d353d5e849f7a0811b7886ce9209de482f031cc974d0bc841daad0bde9acd9469599e260bfa7f484b0df4289a3e74a88eff478d3e2cfba8df279cd514b0d29f98d2c1e423c40c39697f3038d2e5a80d53a669b666a83abe15cbe46d4d49fb149e01917dbe0b4f2ba57be3c8934c59863b511d4ac1c3d583f4d16cf25572424a28620e1c026da8e6731dd8761234cc67b91c4501716c1256d2aad375e5dd4ff61c5fc413f6975923c0e7d753049b64da98604e7f3f30ba4c88f4b7458ade5a8bc36f2b96f25a6a79521d4067968da1f87efd40f11f3404fbdbf25cb6af9e1bafa95ee562b12fcd5bbd44c2c8bb078e603ea6a64ac3528401206f2a348317595b5967209aa78e8d3cc5c3c6e1f4a4ff7e4fce62ecd5c1ada4a566153e0abaaf2b90ae49b1c79f7dfaaf17b5e1cbf76f38e6d159d4a987b2c999dcb12625201cabb20cc374bf264f9fe7675c764e4cdd2964eac9c3771c101797a356986122afa5d7dcfcf7f712a2d1a2b200015205d9e1846fd4cfd9e83eea4a8b5463259011b996bc6f101c1d69096d052ef1bd25c2b1aa655736b9d7f2eec2712baccd5ac93127fcf98d3a00f18c5deedc9ecbddb142b90908f16884d4466e3bf71b2889311725f180c2d5a0edeb46465e53a05846f892db4789098cd876cf0d71a489f41150dd113135013347cdf9ff42ec701afe1f9ffe3e46e21797d9ccaf7121eb11cd1d23af9e6b5c53243ce3612f6e3fc57d4c05fdc878ef3607052d01466ca3f938cc6412ef7d74946d02ae14991315a4e9a862a7f265fa273b678dc7b13b1eb1cc7cab57092adfe23d1db71d8ba2a44485d7244e53b1d449253974a0b7e10cf911fa5ea2494d62f22522ce1f0f40b9ff06319509a9944502dbe4ab50bdde9c1f9a423b2295dfc9593089f83eb4efa299389fb8de4aae3d17c648300adb43a18fc55a846c4a7afac5115b6df3a9fe9175681cd891b25f3574be0657415c29e7c7f24f444a87c7fcb7b07ac151048a6781106d69433b4186aa23e1bcb238b3c6e2a26f5ba0f84af7b2724b94a78383d9555ccb6c2213a3a1138a1977cc7528c9bf101a7e641134de3b3b58c1a40275bc4fec657d722ede9b179fac319aa7b94d995141bc3093bad259b059226e69dcf945f1b7caa4040eb1789049f50bca48b230539206470aa494c782f8ac4f8f6d42ac110b2352a1cd7c64e35d8de2520fbafda0de3f45e9fb406185ebfc3b81ac850c7760c9c18e1e0f0f96ca89e45e1afb692a97e0deba7033c2fc8afc613189d60b58811494f73e677c22ca66a965d90fbf45ebac7c530ad48db7aeb08d8129907fb829454d2fc1970bdca8fec38c0b20401b40f9d588aa71d84661b95842ae2fc1a976bf181960af3ba1fa0516b5291b793ba72ad853575fefb391e7eba4f5d888944dd5b2d6b122e9a034bcbf5350dea28783c766af4da392a0e707546b40057a02c924875579b9b281a993b9bf2affee671257fd34047e8802e5f38fee48119392e31c03ba9d46abd07f679313f3d10a96cfc8fbd90542f9468a4938f73b63b050f390458eecbc2ca14ea71d717a7e10ca35bac1bdfe20a1a0c6bfbd5091d4374aa6db08bdd8314767b2ed43a725a5bdd8db73b83f02b37d1245de22f773bfe4118c3fd344b4976f298a51ad9d503aa38704d81dbfd621a49adae8f24c091e95976a3a002e2753fac62c4f686e8d22a17a17cb8e9b91b4bc2daac80e04450a2672b149a269cdac4dbcf1b17737dfcdca03e49954f8e3b9e0c59938b90657c25419f3857486916f2538e49bc22f46859ee318b91f2dd17733440d2866bde4c646bf60157ac5e5c16199f829637d5308f8ca4614ab4f5230692d43fa974327ac0f5bd055923fbaaea26abf972b42b42ab402ed84154eb14fb9f76426ea17ec492dd503f1db9f7b19cd12bd57be60c0fb73cbcf58a2796c27f78462f2a9932eca6b7648a7e99f5815bf4dd16167779d2b267906d76fc29031e1a18920571fa16b9774a37f78c7f17b43c60750a96baaa3127717d44977d87c1967d5d9e11ae0fd4caeaa567aeb3c3a040228bc3a010707be73d6af23fb6e88d9e6c367d014f3999a0244d85aadaba14b87b68f2629ffae34bd539004129d90a9d8b853e3010eea264b187991935f60dcaa2c439e931616083fc570d87e5b1e27d4e8711cebbfc63ec72865e8e1c4dc53db43d1b471dd25e187b8359d2437bd07c252506c12ad14b16f895f2e0bfe8ed263335ab0c15fa0e7b685a8a9ea9eaa623351aa3c211b3cbe01d7a05ac6709befedb424793af68fd1b19d69a128420dbab41a11c2ff663bfd3def56ae1c321fa9a1181bb2d4921d327dcd46dced1ee118a540604faf8930bd0a9609910d093c0261081d334bf1ab01663c9e597e0aeac1ce104047e5ce5af406075d623534051d680ff34b5c99f0c782696c14790bdddbcbc1e50ccbd63f51644fde6dfb2db6ef8cd4060ff6bab0717676fd185c6028b49066d98699e8e3c0c1fc26d4b9aa0cba332a66f0333bb1722a24363868b404fab6921e90a8b1abad7279c59e00d256e4532351e0a90d61405693b7007a95810afea451d5fa7b049793d05b9e6ad1847af974ca884be077189608de5811c5df536b9cec600784b3badb3bfa2f3a5ac4e246cf13da82a7b91fd7bbf7cd2c3da3dffd161ae25e013d4e31c6172e86eaa4a7b2de7e8f16075e0644529aa6004d9c4ced9cb05fd981a17902d26085979cc04bd73d6ca303da3d33aa8fab58425cc2336687f23520941f810458183ed497d7fd7f25cea107e04226c35eaad6ce5d2b89805bb98679270466102a530b6d8ecb2aac2c295ca9f6fcb8573bbfa1fd2d0f5779ad2b26b161512514f6eec409d8a4efbce00f45303dfb5ad795459ead35c4748f0d0b81d03088601c819f2174a2b8062272cd1f97af6f1e84219dc10d88ab3ca8bbf465d343a863852fed64ab1be008c08dca7ad4a8b0c2eb23d46e3cfb7a5c324d57cb963506c3300f9a71b772a2897fae3a80761d8cf27f4b14798a588198cbb8ecff9948e581483ca3d89208917f22ceca8cbf84e3c40767643c6644f267f9034a903c2ab9cd8fa380a6a48f1fff7f474c71be7a6958ffab7b4a2441fef49c82798ebe40993f0b4bea71c8dd4cb0e78a012d2baf65d11e6efa4080e2518c1790e7ce0742de7f151a0cc709ee06cda19c0d8d19975981335606402a4ea6706b0d7cd8e5dab4074e61cdccab392f706097e176185c63b862b34f6ccff39a72fffc28f5148b31016234f87bd2b2532c848358671ac1f80bc98895182c517d84c8087f99f5d600d46e638f99eec3783711afcbea1f84b51eda82474ac5d4d0706e9a146463b86871be11f78e1848b5ad86993d8a0747a730e766470225bc6c581c9e3fe33122cbfe6c45ea144be03dd5bc1c98960dfa893c14003d1d6d1312902374a4c408c41c76946205cf0deabeecdbc48b9570b4434fd66dfb926c84e28a9c6ca853f571344594f9dab5a5e82445c4b05cfb35776070fa021816af6bbd49c7026c602f68fe9798369c812a2589046a961ffdd6664822d1b0c00d14a53af46951fce60fba105b5493db9ddcea9a7eadd8b080b2230e5f96f9b910286e6d96f753cd010b37dd67117af12404a6f01997ce9d2fd557b1f5600d0bc6d8fe3bd4883d0ad28e1f2708351c9403a6f77c2ab0f2642990f28f58102d058cc7fd1bf2e43dd67c4b71a9c915c847502369c38c517ee045a15e13400604afa5c3ddbd45ba921a0ebb8fa7c4b18787bba5dec28fcbeabdd692a14050200a06f79df61de690b0826cd9b55e0e6b0264e9394e1bd31eedef796db886079969d042ca8747f139328f21ca7777735e70dfb3040e0d6239d7ec1f718164b490a872650e2781f0fdb0b0f5441bf9a8ad9edaaa1e41ebe018918f2ce4122c", 0x1000}], 0x4, 0x0, 0x0, 0x4040000}}, {{&(0x7f0000006e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007440)=[{&(0x7f0000006ec0)="130f07cfdeffdfdbdf370026666fc04b6319aa806b81ee751f5521f981f8b17109fcd50bba7206563308aa7f9ca572b4d7c70f6cd414b4dfcbdd7195cb2369e7a15b5e3b5dbe524d68e8372dca4a0444faddbaddf9b0c6f76d7b89c5b3eed8ae290b7d64351644bddbc2887973f4d1d35f7675fe80825717", 0x78}, {&(0x7f0000006f40)="12f935cfb39b714d479fb40d23628b974b83b3ad9376afb3afa3f5ba162d2f955b9aa1f08ed43890b34c2abd09bf8a6d33515232d629451891f7e98b7f34ce8a76bd966972a75fdaa673046f71672a0178ba1e413d80d1fa7abdbd464bfc3d0c9546bdf0ce570da9eabb48be31d10e54bc5697f10088c16904cb80ee83096747934a98106bdf0a46c1e4c3e97fbe4126e409b82d95bda709e28584e80320a3e85c229be620bc5e1cc3971bedabbee6578e59b061b008a132728ce5978f5b9d9fc97d720bbbd6a977", 0xc8}, {&(0x7f0000007040)="baefd3352e6d7bdade7943f5ee3ad93aa9eccb15c0e8ad7d6d12a490d773ed221f348d65ce56c7bf26b6163a856f8939bd34d7739126a9494b82c9bf8481c5588192eb927fd2e48854f7bbd08de14a46ac894d137dfc7513a53dec86dcb83c6af2d508126c6cd8e6139a58e901d8046f93819510084e78f3b04517304ac836bbc648c4ee60a5857826103659e6626218e332003314be4f4cbf828da1db01715bb464318ded8f011f724edcc30f0ed3f496da04f0fc4335c44f7707222b3a4695073575429ad6b5150f88df3e7b2675e9d2f7e2f81812047a3992494e507b4793ab69f41e53985267b7", 0xe9}, {&(0x7f0000007140)="fcf76eb55cd88cd678e7ba3dc28db6069ea575510223136253c626a5023f949cfbce35161c5fa90feaf128dc53f1894ac4cd3ab9158824cc3c27576ec9d12c4e1143f5dc973f89af5e4f4f783030b2ec4640e18f90f03d81f22dcb1cfd2349d82c59967a384c705c27", 0x69}, {&(0x7f00000071c0)="6ff552190ceba09d9314728540484679589f1ba664d6690362605092d8205bb1953ca5d54e36ee482d6f441e8a7b4349c70fbc8d2fca4b8ed3d18a8d015ada542cc18184a185166f3b45be987f98", 0x4e}, {&(0x7f0000007240)="353140517ff62c71e293c7e98731f2ad47876d765c3891fd556472234e96679b79bd20b42323d1153c03ffb8586c1e87b7e7b9e4ef2ae45a3a21e370d33146b8ba6343c90d398edea8a600b39a5542350eed7253b73f2ce62ee7e192cf7eac3e4b4f1f0b692563d50c8b5af69d5f3611e14adb5ee0921e96dba1cff3f4a956711198922c495122bc362c0c285fc23e8e852f4911a85ee3875525e13db800b02839d1e55fd226791feb8edc4b6fa0d7d8d4ccc1a8a642506a0b829fcaa225d4c8b3ea4054e6254a895f2a326eeec6b48cfc30f21a52f88937efc61fe99fdf8267", 0xe0}, {&(0x7f0000007340)}, {&(0x7f0000007380)="ab7d04e3d54434c48fcc90cf410ef523cc21be63095fe6e22e4be7910f66ecccc2f989583b94f4ab173accbc0ef98eeae90179f40033c16e448c063088457acccc1293666cc09b4146adb2aa08e9ebdfea1ada2a64a43dd1932ebe10ce1b46070d175a6e36a1c020f0c8455c3f443b68", 0x70}, {&(0x7f0000007400)="359390b5b9c89111d1fd8027acd606eb", 0x10}], 0x9, 0x0, 0x0, 0x90}}], 0x4, 0x20000000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f0000007600)={{@my=0x0, 0x6}, 0x0, 0x1, 0x2}) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000007640), &(0x7f0000007680)=0x4) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000076c0)={{@host}, 0x1, 0x0, 0xf}) r12 = syz_open_dev$evdev(&(0x7f0000007700), 0x4, 0x400000) ioctl$VFAT_IOCTL_READDIR_BOTH(r12, 0x82307201, &(0x7f0000007740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$fuse(0xffffffffffffff9c, &(0x7f0000007980), 0x2, 0x0) r13 = openat$userio(0xffffffffffffff9c, &(0x7f00000079c0), 0x202000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r13, &(0x7f0000007a00)={0x1, 0x6f}, 0x2) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r13, 0x40047211, &(0x7f0000007a40)=0x8) r14 = socket(0x9, 0x4, 0x0) sendmsg$NFT_MSG_GETRULE(r14, &(0x7f0000007b80)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000007b40)={&(0x7f0000007ac0)={0x64, 0x7, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008044}, 0x840) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000007bc0), 0x4) 1.030234515s ago: executing program 3 (id=1527): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280), 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r2, 0x6f8f}, 0x8) 929.178387ms ago: executing program 3 (id=1528): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r0, &(0x7f0000000380)=""/144, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 642.041884ms ago: executing program 6 (id=1529): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) close(0xffffffffffffffff) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) mq_open(0x0, 0x40, 0x9, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9}, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x103, 0x0, 0x0, {{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0) 0s ago: executing program 5 (id=1530): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_io_uring_setup(0xec0, &(0x7f0000000400)={0x0, 0x80ed, 0x40, 0x2}, &(0x7f0000001f40)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) cachestat(r6, &(0x7f0000000400)={0x1, 0x9}, &(0x7f0000000440), 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4c22, 0x0, @private2, 0x8004}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000340)={r8, @in6={{0xa, 0x4e23, 0x5, @empty, 0x80}}, 0x3, 0x0, 0x20000, 0x0, 0x2c, 0x0, 0x4}, 0x9c) r9 = socket$tipc(0x1e, 0x5, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendmsg(r9, &(0x7f0000000480)={&(0x7f0000000600)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000300)="fc1811118432ed05bb1a55b84f2e10e613080aaa", 0x14}, {&(0x7f0000000680)="5d64b768f32c35f5591bdaa96ed19d1c3662fa3213dd620a09114a5a0bba5ab8761386e9c912d0e5e916a35bafa8f377bcb3b5911855338435f41fa7c46e89e46798b0ec300b7f4e24181985373811900258a653ce5ceed1934ae15ffe961783bc97c3bd3afc4a3ba5a8ca2c10963650317fc6318e78b79cd701c045e148ff456cc635cb3e65e7f1e1ed203bd66cfd139b5eeaab1315258a6444d2a890f53f2af0b6de2b3bf925513e9fd3e7defe98bc9b774634142edc7d8a18be8e7d8455d8b9c398a0996b21e7f31e6c31503b514837c484fe014b1044b9634bfc67067d3d7fbbfdc8579e280683fd8a8748221033363f5a", 0xf3}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="36df33985c86b378082a33425cdb9d7e609d82e2f0d2ec1efa963fe8e4e6dd9c0b1b654ba4e5929650e1bab5f376145fa75fb0e30a93b3a248ebc9ebb1773f1c6dc4a7a3203d135dc12c97f6e45d2369939a52c21575f3c32218cb2613f15153ce217de860f9e5e605ce1c2cf5b9e8438321527bfe88b3072b0f6b7efc3ed5fef9a8e664b9e319d4e2f81effa9b2ad48425dc375ea1198f34fdb0f69d9ab3f81a47119832d2105680b9ac1999510824b4777f49c29d2eba7bbf5f94f71622f3e972cbeba32a88310981108d186e6d83e1db16e0997d27a619f468fe5435e090da076bafd8821e043ae2c5567418a0842fffa", 0xf2}, {&(0x7f0000001880)="1b6986b51e824b1330ce189b059655f8c284d1c4ee269b5ca911bc1ca0d37f9ef845fa2ba2b86ba9f4cd92f0a2d2b193767091c8c3c8976ad1c068c46a80532fac2bc7cee7248837f30bf7f0edbb033a6f35a1742bcd4faf56e5b28cd2c05bfe987c9069d24eee4140243fbe605712461d2b6a5c1a693e11da69433a4ca5152f60b728b72a1720ef73f234999dff7200f60bbe96ecf30d7acb92aa3d2c9120a58bb3f58af60b247b5c2d025f58d38e4da1955401df96639eaee0cd60e8374a82ead6d2b121caeee7e9fda9949bdd513cc693ea406a55", 0xd6}, {&(0x7f0000001980)="ea12e6109ccd7910e1a1265dccd044bbdff2cbe540c76823a2ec6cbc4b67696d7a8aeaff8f6b976e353b37d70b2b64ec5c80b78d315b38789090f4eaa40a48960fb8b0748b063d2ff40e8e3a523ff0921323239c72dea933883f52c518850e2c824e97e0255e2475e1a1c526c94509cfb5aa3737eef8d5ac2700f1bbb5f5bcbfe4c1f9ae7307553d2c7d80de9038e85e491b92c06b1ce1b11085ba9d14abcadfbe85dc404247e5323b26019c034e25ee76745fa0974afac1f7080971df0a9703d2999349810a05b49953aa5fd7", 0xcd}, {&(0x7f0000001a80)="e8ff6fe4d0b25db9e8752121edef819ec6c09db21ae9044064b76dcd06a955f002afefddd0984468d1dba1ce4dbfa7cf2c80cae616dbdaf0cdbff9abe9516396cbe4bacc7556b092e5c399455c7682f204214f8e5a2ad90016f1c77b262412a8ef1efc0383bd8d9dd741d5f870a13ce738a4f8ac295b2e241f4c85ed39156d77d5a6e46e2fbdafc0408c20970bd925c8d031d592a509b023942786e1aa5be3173a23c551deae8005b990ce1a8e0bd01211b4a4c53dc5143e32", 0xb9}, {&(0x7f0000001b40)="06c9258ad77fc78f046cc9da0ef16ca679ece1fa1a65bc6540091427ac3c277309bda09871ae28aff2d5be56c404eac9336d1fe6573bdfdff4c7f62689c5ef2efa17fea2fbc3874e4cbb7a3b550d7f78af87fc6b6b74d22f40ce4ada49524770102e2fa6de8421f4c561062fabc0d2d60c1783", 0x73}], 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x2b0}, 0x4000850) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'erspan0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0xcc, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x93}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0xcc}}, 0x4004044) close(r9) kernel console output (not intermixed with test programs): 0x7ffc0000 [ 434.778807][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 434.801976][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 434.823560][ T5901] usb 3-1: config 0 has an invalid interface number: 165 but max is 0 [ 434.834329][ T30] audit: type=1326 audit(1759338295.054:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60af18eec9 code=0x7ffc0000 [ 434.868102][ T5901] usb 3-1: config 0 has no interface number 0 [ 434.881552][ T5901] usb 3-1: config 0 interface 165 has no altsetting 0 [ 434.904609][ T5901] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 434.924866][ T30] audit: type=1326 audit(1759338295.054:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60af18d710 code=0x7ffc0000 [ 434.970157][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.000337][ T5901] usb 3-1: Product: syz [ 435.014734][ T5901] usb 3-1: Manufacturer: syz [ 435.034199][ T5901] usb 3-1: SerialNumber: syz [ 435.040938][ T30] audit: type=1326 audit(1759338295.054:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60af18eec9 code=0x7ffc0000 [ 435.109199][ T5901] usb 3-1: config 0 descriptor?? [ 435.194027][ T30] audit: type=1326 audit(1759338295.054:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f60af18eec9 code=0x7ffc0000 [ 435.392675][ T30] audit: type=1326 audit(1759338295.054:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.3.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60af18eec9 code=0x7ffc0000 [ 435.444796][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.456769][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.640781][ T5901] comedi comedi5: Wrong number of endpoints [ 435.649794][ T5901] ni6501 3-1:0.165: driver 'ni6501' failed to auto-configure device. [ 435.703807][ T5901] usb 3-1: USB disconnect, device number 32 [ 435.924751][ T9587] netlink: 'syz.5.967': attribute type 1 has an invalid length. [ 435.995360][ T9587] netlink: 28 bytes leftover after parsing attributes in process `syz.5.967'. [ 436.438199][ T9593] netlink: 48 bytes leftover after parsing attributes in process `syz.3.969'. [ 436.733944][ T5890] r8152-cfgselector 2-1: Unknown version 0x0000 [ 436.743127][ T5890] r8152-cfgselector 2-1: bad CDC descriptors [ 436.807024][ T5890] r8152-cfgselector 2-1: USB disconnect, device number 31 [ 436.841570][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.973'. [ 440.202466][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.209198][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.999409][ T5908] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 441.182185][ T5908] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 441.237349][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.315581][ T5908] usb 3-1: Product: syz [ 441.326622][ T9683] kvm: kvm [9681]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2 [ 441.348775][ T5908] usb 3-1: Manufacturer: syz [ 441.355093][ T5908] usb 3-1: SerialNumber: syz [ 441.424936][ T5908] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 441.456099][ T5901] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 441.704765][ T9675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.754800][ T9675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.769970][ T9675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.880290][ T9675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.188198][ T9376] usb 3-1: USB disconnect, device number 33 [ 442.240731][ T9694] ptrace attach of "./syz-executor exec"[9051] was attempted by "./syz-executor exec"[9694] [ 443.155694][ T5901] usb 3-1: Service connection timeout for: 256 [ 443.170109][ T5901] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 443.216233][ T5901] ath9k_htc: Failed to initialize the device [ 443.274145][ T9704] input: syz1 as /devices/virtual/input/input36 [ 443.345769][ T9376] usb 3-1: ath9k_htc: USB layer deinitialized [ 443.979564][ T9376] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 444.178797][ T9376] usb 3-1: Using ep0 maxpacket: 8 [ 444.409487][ T9724] input: syz1 as /devices/virtual/input/input37 [ 444.434543][ T9376] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 444.499080][ T9376] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.604533][ T9376] usb 3-1: config 0 has no interface number 0 [ 444.664065][ T9376] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 444.680978][ T9376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.704710][ T9724] ptrace attach of "./syz-executor exec"[9730] was attempted by "./syz-executor exec"[9724] [ 444.783796][ T9376] usb 3-1: Product: syz [ 444.804238][ T9376] usb 3-1: Manufacturer: syz [ 444.819916][ T9376] usb 3-1: SerialNumber: syz [ 444.855771][ T9376] usb 3-1: config 0 descriptor?? [ 445.244984][ T9376] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 445.274038][ T9376] usb 3-1: No valid video chain found. [ 445.327457][ T9743] syzkaller0: entered promiscuous mode [ 445.450327][ T9376] usb 3-1: USB disconnect, device number 34 [ 445.469750][ T9743] syzkaller0: entered allmulticast mode [ 445.818670][ T5901] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 445.918705][ T9376] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 446.016559][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 446.057709][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 446.098706][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 446.123013][ T9376] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 446.215787][ T5901] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 446.227679][ T9376] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 446.251098][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.269910][ T9376] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.297150][ T5901] usb 4-1: Product: syz [ 446.317122][ T5901] usb 4-1: Manufacturer: syz [ 446.330945][ T9376] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 446.341659][ T5901] usb 4-1: SerialNumber: syz [ 446.370014][ T9376] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 446.397392][ T5901] usb 4-1: config 0 descriptor?? [ 446.425850][ T9376] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.449107][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 446.462427][ T5901] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 446.573956][ T9763] misc userio: Invalid payload size [ 446.600519][ T9376] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 446.678793][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 446.692508][ T9376] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 446.736761][ T9376] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.750797][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 446.768696][ T5901] usb 4-1: USB disconnect, device number 37 [ 446.774871][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.774896][ T9] usb 2-1: Product: syz [ 446.774909][ T9] usb 2-1: Manufacturer: syz [ 446.774921][ T9] usb 2-1: SerialNumber: syz [ 446.794860][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 446.804393][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 446.827310][ T9376] usb 6-1: string descriptor 0 read error: -22 [ 446.848173][ T9376] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 446.990964][ T9376] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.066925][ T9376] adutux 6-1:168.0: interrupt endpoints not found [ 447.441880][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'. [ 447.669777][ T5901] usb 6-1: USB disconnect, device number 3 [ 448.013971][ T9789] loop2: detected capacity change from 0 to 7 [ 448.101652][ T9789] Dev loop2: unable to read RDB block 7 [ 448.176916][ T9789] loop2: AHDI p2 p3 [ 448.307430][ T9789] loop2: partition table partially beyond EOD, truncated [ 448.444949][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1011'. [ 448.454415][ T9789] loop2: p3 start 335544320 is beyond EOD, truncated [ 449.264983][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1013'. [ 449.995907][ T9820] misc userio: Invalid payload size [ 450.263167][ T9822] netlink: 'syz.5.1017': attribute type 1 has an invalid length. [ 450.410261][ T9823] gretap1: entered promiscuous mode [ 450.608952][ T9823] bond1: (slave gretap1): making interface the new active one [ 450.621395][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 450.644355][ T9823] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 450.652763][ T9] r8152-cfgselector 2-1: bad CDC descriptors [ 450.717706][ T9] r8152-cfgselector 2-1: USB disconnect, device number 32 [ 450.813784][ T9828] macvlan2: entered promiscuous mode [ 450.839155][ T9828] macvlan2: entered allmulticast mode [ 450.944083][ T9828] bond1: entered promiscuous mode [ 450.990634][ T9828] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 451.050048][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 451.132321][ T9828] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 451.139000][ T5930] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 451.225780][ T9828] bond1: left promiscuous mode [ 452.228601][ T5928] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 452.451836][ T5928] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 452.534108][ T5928] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 452.626062][ T5928] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.954981][ T5928] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 453.000074][ T5928] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 453.187710][ T5928] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 453.323187][ T5928] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 453.385789][ T5928] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 453.522695][ T5928] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 453.605562][ T5928] usb 2-1: string descriptor 0 read error: -22 [ 453.679039][ T5928] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 453.758334][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.868294][ T5928] adutux 2-1:168.0: interrupt endpoints not found [ 454.221546][ T5930] usb 7-1: unable to get BOS descriptor or descriptor too short [ 454.297090][ T5930] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 454.327494][ T5930] usb 7-1: can't read configurations, error -71 [ 454.340737][ T9] usb 2-1: USB disconnect, device number 33 [ 454.694757][ T9893] misc userio: Invalid payload size [ 454.984651][ T9898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1030'. [ 455.101141][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 455.220607][ T5930] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 455.261081][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 455.261111][ T30] audit: type=1326 audit(1759338316.614:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1598eec9 code=0x7ffc0000 [ 455.417989][ T30] audit: type=1326 audit(1759338316.624:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5f1598eec9 code=0x7ffc0000 [ 455.525803][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 455.538397][ T30] audit: type=1326 audit(1759338316.634:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f5f1598eec9 code=0x7ffc0000 [ 455.581120][ T30] audit: type=1326 audit(1759338316.664:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f5f1598eec9 code=0x7ffc0000 [ 455.607689][ T5930] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 455.626690][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.638042][ T5928] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 455.648332][ T5930] usb 7-1: Product: syz [ 455.657415][ T5930] usb 7-1: Manufacturer: syz [ 455.689185][ T5930] usb 7-1: SerialNumber: syz [ 455.705899][ T30] audit: type=1326 audit(1759338316.684:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f5f1598eec9 code=0x7ffc0000 [ 455.737292][ T30] audit: type=1326 audit(1759338316.694:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f5f1598eec9 code=0x7ffc0000 [ 455.816182][ T30] audit: type=1326 audit(1759338316.694:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f5f1598eec9 code=0x7ffc0000 [ 455.849073][ T30] audit: type=1326 audit(1759338316.694:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f5f1598eec9 code=0x7ffc0000 [ 455.886051][ T30] audit: type=1326 audit(1759338316.694:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f5f1598eec9 code=0x7ffc0000 [ 455.912155][ T5930] r8152-cfgselector 7-1: Unknown version 0x0000 [ 455.912592][ T30] audit: type=1326 audit(1759338316.694:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f5f1598eec9 code=0x7ffc0000 [ 455.918434][ T5930] r8152-cfgselector 7-1: config 0 descriptor?? [ 456.006001][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 456.091396][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.147264][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.158326][ T9922] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 456.194685][ T5928] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 456.207258][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.237365][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 456.295766][ T5928] usb 3-1: config 0 descriptor?? [ 456.493303][ T9922] bond3: entered allmulticast mode [ 456.585679][ T5928] hub 3-1:0.0: USB hub found [ 456.596188][ T9922] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.803075][ T5928] hub 3-1:0.0: 2 ports detected [ 457.949793][ T5928] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 457.956213][ T5928] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 458.127759][ T5928] usbhid 3-1:0.0: can't add hid device: -32 [ 458.165358][ T5928] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 458.614016][ T5930] r8152-cfgselector 7-1: Unknown version 0x0000 [ 458.646014][ T5930] r8152-cfgselector 7-1: bad CDC descriptors [ 458.713994][ T5930] r8152-cfgselector 7-1: USB disconnect, device number 4 [ 459.118873][ T5908] usb 3-1: USB disconnect, device number 35 [ 459.168786][ T5930] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 459.250161][ T5928] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 459.368783][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 459.396562][ T5930] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 459.427080][ T5930] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 459.443697][ T5928] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 459.462088][ T5930] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 459.472821][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 459.486407][ T5930] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 459.503480][ T5928] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 459.526031][ T5930] usb 7-1: config 0 has no interface number 0 [ 459.532835][ T5930] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 459.548907][ T5930] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 459.568800][ T5928] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 459.595719][ T5930] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 459.608091][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 459.619980][ T5930] usb 7-1: config 0 interface 125 has no altsetting 0 [ 459.626797][ T5930] usb 7-1: config 0 interface 125 has no altsetting 1 [ 459.633906][ T5928] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 459.649498][ T5928] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 459.660507][ T5928] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 459.672419][ T5930] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 459.682135][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.690271][ T5928] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 459.704079][ T5930] usb 7-1: Product: syz [ 459.708256][ T5930] usb 7-1: Manufacturer: syz [ 459.713294][ T5930] usb 7-1: SerialNumber: syz [ 459.722300][ T5928] usb 4-1: string descriptor 0 read error: -22 [ 459.730186][ T5928] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 459.740486][ T5930] usb 7-1: config 0 descriptor?? [ 459.756963][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.789570][ T5928] adutux 4-1:168.0: interrupt endpoints not found [ 460.043176][ T5928] usb 4-1: USB disconnect, device number 38 [ 460.213602][ T9988] input: syz1 as /devices/virtual/input/input38 [ 460.275331][ T5908] IPVS: starting estimator thread 0... [ 460.397236][ T9991] IPVS: using max 36 ests per chain, 86400 per kthread [ 460.571794][ T9994] tipc: Enabled bearer , priority 0 [ 460.583074][ T9994] syzkaller0: entered promiscuous mode [ 460.593728][ T9994] syzkaller0: entered allmulticast mode [ 460.761542][ T9994] tipc: Resetting bearer [ 460.884899][ T9993] tipc: Resetting bearer [ 460.934629][ T9993] tipc: Disabling bearer [ 460.958589][ T5930] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 461.128917][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 461.146755][ T5930] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 461.187635][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.208128][ T5930] usb 3-1: Product: syz [ 461.224612][ T5930] usb 3-1: Manufacturer: syz [ 461.364343][ T5930] usb 3-1: SerialNumber: syz [ 461.401459][ T5930] r8152-cfgselector 3-1: Unknown version 0x0000 [ 461.408085][ T5930] r8152-cfgselector 3-1: config 0 descriptor?? [ 463.027892][ T5901] usb 7-1: USB disconnect, device number 5 [ 464.058758][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.490962][ T55] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 464.525380][ T5930] r8152-cfgselector 3-1: Unknown version 0x0000 [ 464.532371][ T5930] r8152-cfgselector 3-1: bad CDC descriptors [ 464.566888][ T5930] r8152-cfgselector 3-1: USB disconnect, device number 36 [ 464.721271][ T55] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 464.748594][ T55] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 464.778546][ T55] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.823652][ T55] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 464.866775][ T55] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 464.891902][T10044] loop6: detected capacity change from 0 to 524288000 [ 464.901764][ T55] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.021355][T10044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.047081][ T55] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 465.082272][ T55] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 465.133234][ T55] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.250134][ T55] usb 6-1: string descriptor 0 read error: -22 [ 465.275055][ T55] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 465.406101][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.447819][ T55] adutux 6-1:168.0: interrupt endpoints not found [ 465.852797][ T5908] usb 6-1: USB disconnect, device number 4 [ 466.312205][T10068] loop4: detected capacity change from 0 to 2560 [ 466.326269][T10068] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 466.338931][ T7532] Buffer I/O error on dev loop4, logical block 256, lost async page write [ 466.381762][ T7532] Buffer I/O error on dev loop4, logical block 257, lost async page write [ 466.385924][T10068] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 466.426189][ T7532] Buffer I/O error on dev loop4, logical block 258, lost async page write [ 466.438998][T10068] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 466.468928][ T55] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 466.492665][ T7532] Buffer I/O error on dev loop4, logical block 259, lost async page write [ 466.502394][ T7532] Buffer I/O error on dev loop4, logical block 260, lost async page write [ 466.514854][ T7532] Buffer I/O error on dev loop4, logical block 261, lost async page write [ 466.524166][T10068] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 466.706925][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 466.728041][ T55] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 466.757529][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.893603][ T55] usb 3-1: Product: syz [ 466.907113][ T55] usb 3-1: Manufacturer: syz [ 466.916889][ T55] usb 3-1: SerialNumber: syz [ 466.937873][ T55] usb 3-1: config 0 descriptor?? [ 466.944544][T10070] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.952214][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 466.970953][ T55] gspca_main: sq905-2.14.0 probing 2770:9120 [ 467.168640][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 467.285246][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.381804][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.396746][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 467.413998][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.436067][ T9] usb 6-1: config 0 descriptor?? [ 467.463129][ T9] hub 6-1:0.0: USB hub found [ 467.468893][ T55] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 467.528754][ T55] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 467.612978][ T55] usb 3-1: USB disconnect, device number 37 [ 467.889750][ T9] hub 6-1:0.0: 2 ports detected [ 468.145785][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 468.281519][T10095] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1078'. [ 468.414259][ T5928] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 468.720237][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 468.853635][ T5928] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 468.883074][ T5928] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 468.903848][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1081'. [ 468.923637][ T9] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 469.052591][ T5928] usb 4-1: Product: syz [ 469.061453][ T9] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 469.073961][ T5928] usb 4-1: Manufacturer: syz [ 469.086990][ T5928] usb 4-1: SerialNumber: syz [ 469.113187][ T9] usbhid 6-1:0.0: can't add hid device: -32 [ 469.121227][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 469.308026][ T5928] usb 4-1: config 0 descriptor?? [ 469.373571][ T5928] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 469.728197][T10113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1083'. [ 470.018166][ T5901] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 470.101691][ T5928] gspca_zc3xx: reg_r err -110 [ 470.106547][ T5928] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 470.338656][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 470.427598][ T5901] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 470.848653][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.857932][ T5901] usb 3-1: Product: syz [ 470.862716][ T5901] usb 3-1: Manufacturer: syz [ 470.867350][ T5901] usb 3-1: SerialNumber: syz [ 470.975425][ T5901] usb 3-1: config 0 descriptor?? [ 471.027270][ T5901] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 471.206069][ T5901] ssu100 3-1:0.0: probe with driver ssu100 failed with error -32 [ 471.228797][ T5908] usb 6-1: USB disconnect, device number 5 [ 471.525825][ T5928] usb 4-1: USB disconnect, device number 39 [ 472.305995][ T9] usb 3-1: USB disconnect, device number 38 [ 472.484087][T10157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1097'. [ 472.620884][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1098'. [ 472.788702][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 472.952933][ T9] usb 3-1: config 0 has no interfaces? [ 472.972908][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 472.984176][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.064866][ T9] usb 3-1: Product: syz [ 473.096693][ T9] usb 3-1: Manufacturer: syz [ 473.134914][ T9] usb 3-1: SerialNumber: syz [ 473.161401][ T9] usb 3-1: config 0 descriptor?? [ 474.389347][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 475.392721][ T5930] usb 3-1: USB disconnect, device number 39 [ 475.719887][T10188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1103'. [ 477.058598][ T5901] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 477.108038][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 477.108056][ T30] audit: type=1326 audit(1759338338.464:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10204 comm="syz.5.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1598eec9 code=0x7ffc0000 [ 477.298734][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 477.310263][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.340070][ T30] audit: type=1326 audit(1759338338.464:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10204 comm="syz.5.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1598eec9 code=0x7ffc0000 [ 477.368604][ T5901] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 477.407912][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.479457][ T5901] usb 4-1: config 0 descriptor?? [ 477.513993][ T5901] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 478.178633][ T9] usb 7-1: device descriptor read/64, error -71 [ 478.418640][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 478.587159][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.600160][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.610774][ T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 478.620453][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.643598][ T9] usb 7-1: config 0 descriptor?? [ 479.014983][T10242] pimreg: left allmulticast mode [ 479.091240][ T9] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 479.116102][ T9] arvo 0003:1E7D:30D4.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.6-1/input0 [ 479.208637][ T5930] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 479.396423][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 479.459773][ T5930] usb 3-1: config 0 has no interfaces? [ 479.490119][ T5908] usb 7-1: USB disconnect, device number 7 [ 479.788701][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 479.948646][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 479.964240][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 479.978966][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.039556][ T9] usb 2-1: Product: syz [ 480.074160][ T9] usb 2-1: Manufacturer: syz [ 480.136477][ T9] usb 2-1: SerialNumber: syz [ 480.389203][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 480.395617][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 480.430512][T10254] fuse: Unknown parameter 'mGN‡8o«ad' [ 480.471214][ T9376] usb 4-1: USB disconnect, device number 40 [ 482.540597][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 482.619095][ T9] r8152-cfgselector 2-1: bad CDC descriptors [ 482.720181][ T9] r8152-cfgselector 2-1: USB disconnect, device number 34 [ 482.838763][T10269] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1123'. [ 482.989676][ T5930] usb 3-1: string descriptor 0 read error: -71 [ 483.008462][ T5930] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 483.038560][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.096120][ T5930] usb 3-1: config 0 descriptor?? [ 483.108902][ T5930] usb 3-1: can't set config #0, error -71 [ 483.118135][ T5930] usb 3-1: USB disconnect, device number 40 [ 483.448805][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 483.656694][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 483.673956][ T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.4d [ 483.703874][ T9] usb 6-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 483.938332][ T9] usb 6-1: Product: syz [ 483.967289][ T9] usb 6-1: config 0 descriptor?? [ 484.154423][T10296] netlink: 'syz.6.1134': attribute type 12 has an invalid length. [ 484.162605][ T5930] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 484.227935][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 484.254279][ T9] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 484.407174][ T9] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 484.433990][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 484.494928][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.587411][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.608247][ T5930] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 484.641306][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.674547][ T5930] usb 4-1: config 0 descriptor?? [ 484.759278][ T5930] hub 4-1:0.0: USB hub found [ 484.915039][ T5930] hub 4-1:0.0: 2 ports detected [ 485.974206][ T5930] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 485.987708][ T5930] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 486.023139][ T5930] usbhid 4-1:0.0: can't add hid device: -32 [ 486.056858][ T5930] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 486.488626][ T5908] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 486.551820][T10330] FAULT_INJECTION: forcing a failure. [ 486.551820][T10330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.565891][T10330] CPU: 1 UID: 0 PID: 10330 Comm: syz.2.1144 Not tainted syzkaller #0 PREEMPT(full) [ 486.565915][T10330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 486.565927][T10330] Call Trace: [ 486.565934][T10330] [ 486.565942][T10330] dump_stack_lvl+0x189/0x250 [ 486.565969][T10330] ? __pfx____ratelimit+0x10/0x10 [ 486.565987][T10330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.566007][T10330] ? __pfx__printk+0x10/0x10 [ 486.566024][T10330] ? __might_fault+0xb0/0x130 [ 486.566055][T10330] should_fail_ex+0x414/0x560 [ 486.566083][T10330] _copy_from_user+0x2d/0xb0 [ 486.566104][T10330] ___sys_sendmsg+0x158/0x2a0 [ 486.566127][T10330] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.566191][T10330] ? __might_fault+0xb0/0x130 [ 486.566215][T10330] __sys_sendmmsg+0x227/0x430 [ 486.566240][T10330] ? __pfx___sys_sendmmsg+0x10/0x10 [ 486.566258][T10330] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 486.566302][T10330] ? ksys_write+0x22a/0x250 [ 486.566324][T10330] ? __pfx_ksys_write+0x10/0x10 [ 486.566341][T10330] ? rcu_is_watching+0x15/0xb0 [ 486.566368][T10330] __x64_sys_sendmmsg+0xa0/0xc0 [ 486.566390][T10330] do_syscall_64+0xfa/0x3b0 [ 486.566407][T10330] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.566423][T10330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.566439][T10330] ? clear_bhb_loop+0x60/0xb0 [ 486.566460][T10330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.566476][T10330] RIP: 0033:0x7fa56c78eec9 [ 486.566497][T10330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.566512][T10330] RSP: 002b:00007fa56d67a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 486.566531][T10330] RAX: ffffffffffffffda RBX: 00007fa56c9e5fa0 RCX: 00007fa56c78eec9 [ 486.566543][T10330] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 486.566554][T10330] RBP: 00007fa56d67a090 R08: 0000000000000000 R09: 0000000000000000 [ 486.566565][T10330] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 486.566575][T10330] R13: 00007fa56c9e6038 R14: 00007fa56c9e5fa0 R15: 00007fa56cb0fa28 [ 486.566603][T10330] [ 486.798876][ T5908] usb 7-1: Using ep0 maxpacket: 32 [ 486.804920][ T5908] usb 7-1: no configurations [ 486.809999][ T5908] usb 7-1: can't read configurations, error -22 [ 486.838690][ T5901] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 487.007761][ T5908] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 487.101325][ T5901] usb 2-1: config 0 has no interfaces? [ 487.152914][T10334] syzkaller1: entered promiscuous mode [ 487.170259][ T5908] usb 7-1: Using ep0 maxpacket: 32 [ 487.201648][T10334] syzkaller1: entered allmulticast mode [ 487.208281][ T5908] usb 7-1: no configurations [ 487.216485][ T5908] usb 7-1: can't read configurations, error -22 [ 487.268413][ T5908] usb usb7-port1: attempt power cycle [ 487.285991][ T5901] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 487.295304][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.315493][ T5901] usb 2-1: Product: syz [ 487.336079][ T5901] usb 2-1: Manufacturer: syz [ 487.352949][ T5901] usb 2-1: SerialNumber: syz [ 487.375486][ T5901] usb 2-1: config 0 descriptor?? [ 487.638944][ T5908] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 487.646743][ T5901] usb 4-1: USB disconnect, device number 41 [ 487.682050][T10339] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ rXY˜ (pid: 10339 comm: syz.2.1146) [ 487.700471][ T5908] usb 7-1: Using ep0 maxpacket: 32 [ 487.705728][ T30] audit: type=1800 audit(1759338349.074:195): pid=10339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1146" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0727F185805599819 dev="mqueue" ino=32706 res=0 errno=0 [ 487.923762][ T5908] usb 7-1: no configurations [ 487.928636][ T5908] usb 7-1: can't read configurations, error -22 [ 488.098770][ T5908] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 488.119883][ T5908] usb 7-1: Using ep0 maxpacket: 32 [ 488.125706][ T5908] usb 7-1: no configurations [ 488.134868][ T5908] usb 7-1: can't read configurations, error -22 [ 488.144356][ T5908] usb usb7-port1: unable to enumerate USB device [ 488.944218][ T9376] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 489.153652][ T9376] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 489.185563][ T9376] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.243844][ T5930] usb 2-1: USB disconnect, device number 35 [ 489.283080][ T9376] usb 4-1: config 0 has no interface number 0 [ 489.300523][ T9376] usb 4-1: config 0 interface 109 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.345839][ T9376] usb 4-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 489.443606][ T9376] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 489.452039][ T9376] usb 4-1: Manufacturer: syz [ 489.496354][ T9376] usb 4-1: config 0 descriptor?? [ 489.540700][ T9376] cxacru 4-1:0.109: usbatm_usb_probe: bind failed: -19! [ 489.786505][ T5928] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 489.915998][T10360] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.023645][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 490.041958][T10365] fuse: Unknown parameter 'mGN‡8o«ad' [ 490.133994][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.152736][ T5928] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 490.294113][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.302864][ T5928] usb 2-1: Product: syz [ 490.308327][ T5928] usb 2-1: Manufacturer: syz [ 490.324415][ T5928] usb 2-1: SerialNumber: syz [ 490.359696][ T5928] usb 2-1: config 0 descriptor?? [ 490.398060][ T5928] xr_serial 2-1:0.0: failed to claim sibling interface: -16 [ 490.409848][ T5928] xr_serial 2-1:0.0: probe with driver xr_serial failed with error -16 [ 490.787760][T10372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.824769][T10372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.978911][T10375] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1157'. [ 491.028882][ T5928] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 491.138289][ T5901] usb 4-1: USB disconnect, device number 42 [ 491.184987][ T5928] usb 3-1: device descriptor read/64, error -71 [ 491.468977][ T5928] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 491.608774][ T5928] usb 3-1: device descriptor read/64, error -71 [ 491.618716][ T5901] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 491.729099][ T5928] usb usb3-port1: attempt power cycle [ 491.768810][ T5908] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 491.799339][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 491.812609][ T5901] usb 4-1: no configurations [ 491.822937][ T5901] usb 4-1: can't read configurations, error -22 [ 491.928608][ T5908] usb 7-1: Using ep0 maxpacket: 16 [ 491.942051][ T5908] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 491.958156][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.966718][ T5901] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 491.976883][ T5908] usb 7-1: Product: syz [ 491.981567][ T5908] usb 7-1: Manufacturer: syz [ 491.987068][ T5908] usb 7-1: SerialNumber: syz [ 492.002762][ T5908] r8152-cfgselector 7-1: Unknown version 0x0000 [ 492.012969][ T5908] r8152-cfgselector 7-1: config 0 descriptor?? [ 492.088863][ T5928] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 492.171671][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 492.182159][ T5901] usb 4-1: no configurations [ 492.182420][ T5928] usb 3-1: device descriptor read/8, error -71 [ 492.201913][ T5901] usb 4-1: can't read configurations, error -22 [ 492.218907][ T5901] usb usb4-port1: attempt power cycle [ 492.468905][ T9376] usb 2-1: USB disconnect, device number 36 [ 492.538584][ T5928] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 492.578291][ T5928] usb 3-1: device descriptor read/8, error -71 [ 492.679545][ T5901] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 492.699441][ T5928] usb usb3-port1: unable to enumerate USB device [ 492.720559][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 492.741591][ T5901] usb 4-1: no configurations [ 492.747017][ T5901] usb 4-1: can't read configurations, error -22 [ 492.796492][T10392] input: syz1 as /devices/virtual/input/input39 [ 492.805104][T10392] input: failed to attach handler leds to device input39, error: -6 [ 492.818662][ T9376] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 492.878852][ T5901] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 492.905520][T10392] ptrace attach of "./syz-executor exec"[10393] was attempted by "./syz-executor exec"[10392] [ 492.923244][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 492.932410][ T5901] usb 4-1: no configurations [ 492.937060][ T5901] usb 4-1: can't read configurations, error -22 [ 492.948752][ T5901] usb usb4-port1: unable to enumerate USB device [ 492.978592][ T9376] usb 2-1: Using ep0 maxpacket: 32 [ 492.986926][ T9376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.008136][ T9376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.026023][ T9376] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 493.052875][ T9376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.077970][ T9376] usb 2-1: config 0 descriptor?? [ 493.303698][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.321692][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.554772][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.579272][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.617253][ T9376] ft260 0003:0403:6030.000F: unknown main item tag 0x7 [ 493.810754][ T9376] ft260 0003:0403:6030.000F: chip code: 6424 8183 [ 493.844811][T10397] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.003537][T10402] fuse: Unknown parameter 'mGN‡8o«ad' [ 494.062152][ T9376] IPVS: starting estimator thread 0... [ 494.196012][T10405] IPVS: using max 26 ests per chain, 62400 per kthread [ 494.247544][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.262328][T10408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.277993][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.289348][T10408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.636108][ T5908] r8152-cfgselector 7-1: Unknown version 0x0000 [ 494.675245][ T5908] r8152-cfgselector 7-1: bad CDC descriptors [ 494.750771][ T5935] usb 2-1: USB disconnect, device number 37 [ 494.773745][ T5908] r8152-cfgselector 7-1: USB disconnect, device number 12 [ 494.820691][T10417] netlink: 'syz.1.1169': attribute type 1 has an invalid length. [ 495.441858][T10427] fuse: Unknown parameter 'mGN‡8o«ad' [ 496.045429][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 496.058842][ T5935] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 496.088693][T10438] input: syz1 as /devices/virtual/input/input40 [ 496.106251][T10438] input: failed to attach handler leds to device input40, error: -6 [ 496.164231][T10437] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 496.195709][T10437] macvtap1: entered allmulticast mode [ 496.207829][T10437] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 496.256616][T10438] ptrace attach of "./syz-executor exec"[10440] was attempted by "./syz-executor exec"[10438] [ 496.268432][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.310848][ T5935] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 496.373229][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.423312][ T5935] usb 4-1: config 0 descriptor?? [ 496.662853][ T5935] usbhid 4-1:0.0: can't add hid device: -71 [ 496.702611][ T5935] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 496.769778][ T5935] usb 4-1: USB disconnect, device number 47 [ 497.338743][ T5935] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 497.501104][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 497.519749][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.615974][ T5935] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 497.626290][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.657908][ T5935] usb 4-1: config 0 descriptor?? [ 497.678433][ T5935] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 497.714576][ T5935] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 498.084447][ T5935] usb 4-1: USB disconnect, device number 48 [ 498.092454][ T5935] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 498.428752][ T5890] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 498.528802][ T5935] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 498.604218][ T5890] usb 7-1: Using ep0 maxpacket: 32 [ 498.639475][ T5890] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.4d [ 498.658187][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 498.693578][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 498.705006][ T5890] usb 7-1: Product: syz [ 498.712988][ T5935] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 498.723045][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 498.736312][ T5935] usb 3-1: Product: syz [ 498.741690][ T5935] usb 3-1: Manufacturer: syz [ 498.747239][ T5935] usb 3-1: SerialNumber: syz [ 498.748216][ T5890] usb 7-1: config 0 descriptor?? [ 498.773026][ T5935] usb 3-1: config 0 descriptor?? [ 498.878913][T10481] input: syz1 as /devices/virtual/input/input41 [ 498.885413][T10481] input: failed to attach handler leds to device input41, error: -6 [ 498.970503][T10481] ptrace attach of "./syz-executor exec"[10482] was attempted by "./syz-executor exec"[10481] [ 499.000280][T10477] FAULT_INJECTION: forcing a failure. [ 499.000280][T10477] name failslab, interval 1, probability 0, space 0, times 0 [ 499.019746][T10477] CPU: 1 UID: 0 PID: 10477 Comm: syz.2.1187 Not tainted syzkaller #0 PREEMPT(full) [ 499.019769][T10477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 499.019780][T10477] Call Trace: [ 499.019787][T10477] [ 499.019794][T10477] dump_stack_lvl+0x189/0x250 [ 499.019805][ T5890] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 499.019820][T10477] ? __pfx____ratelimit+0x10/0x10 [ 499.019834][T10477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.019853][T10477] ? __pfx__printk+0x10/0x10 [ 499.019866][T10477] ? __pfx___might_resched+0x10/0x10 [ 499.019882][T10477] ? fs_reclaim_acquire+0x7d/0x100 [ 499.019906][T10477] should_fail_ex+0x414/0x560 [ 499.019934][T10477] should_failslab+0xa8/0x100 [ 499.019958][T10477] __kmalloc_noprof+0xcb/0x4f0 [ 499.019976][T10477] ? tomoyo_encode+0x28b/0x550 [ 499.020002][T10477] tomoyo_encode+0x28b/0x550 [ 499.020030][T10477] tomoyo_realpath_from_path+0x58d/0x5d0 [ 499.020065][T10477] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 499.020086][T10477] tomoyo_path_number_perm+0x1e8/0x5a0 [ 499.020108][T10477] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 499.020144][T10477] ? __lock_acquire+0xab9/0xd20 [ 499.020181][T10477] ? __fget_files+0x2a/0x420 [ 499.020204][T10477] ? __fget_files+0x2a/0x420 [ 499.020224][T10477] ? __fget_files+0x3a0/0x420 [ 499.020243][T10477] ? __fget_files+0x2a/0x420 [ 499.020267][T10477] security_file_ioctl+0xcb/0x2d0 [ 499.020289][T10477] __se_sys_ioctl+0x47/0x170 [ 499.020308][T10477] do_syscall_64+0xfa/0x3b0 [ 499.020327][T10477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.020341][T10477] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 499.020356][T10477] ? clear_bhb_loop+0x60/0xb0 [ 499.020385][T10477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.020399][T10477] RIP: 0033:0x7fa56c78eec9 [ 499.020414][T10477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.020428][T10477] RSP: 002b:00007fa56d67a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.020445][T10477] RAX: ffffffffffffffda RBX: 00007fa56c9e5fa0 RCX: 00007fa56c78eec9 [ 499.020461][T10477] RDX: 0000200000000140 RSI: 0000000080dc5521 RDI: 0000000000000004 [ 499.020471][T10477] RBP: 00007fa56d67a090 R08: 0000000000000000 R09: 0000000000000000 [ 499.020482][T10477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.020492][T10477] R13: 00007fa56c9e6038 R14: 00007fa56c9e5fa0 R15: 00007fa56cb0fa28 [ 499.020519][T10477] [ 499.020618][T10477] ERROR: Out of memory at tomoyo_realpath_from_path. [ 499.351924][ T5928] usb 3-1: USB disconnect, device number 45 [ 499.395287][ T7950] udevd[7950]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.866710][T10487] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1190'. [ 499.921177][T10487] bond0: ARP target 170.170.170.170 is already present [ 499.937454][T10487] bond0: option arp_ip_target: invalid value (2863311530) [ 500.206950][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1195'. [ 500.561349][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 500.720472][T10500] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1193'. [ 500.853168][T10512] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1198'. [ 501.040386][T10500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.642839][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.741652][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.212956][ T9379] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 502.378792][ T9379] usb 2-1: Using ep0 maxpacket: 32 [ 502.388355][ T9379] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.399405][ T9379] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 502.415881][ T9379] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 502.469776][ T9379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.513488][ T9379] usb 2-1: config 0 descriptor?? [ 502.543280][ T9379] hub 2-1:0.0: bad descriptor, ignoring hub [ 502.597856][ T9379] hub 2-1:0.0: probe with driver hub failed with error -5 [ 502.624641][ T9379] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 504.850929][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1212'. [ 504.969420][ T5928] usb 2-1: USB disconnect, device number 38 [ 505.132327][T10564] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1215'. [ 505.308654][ T5908] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 505.471911][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 505.515460][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.534610][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 505.593399][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 505.629382][ T5908] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 505.709452][T10578] fuse: Unknown parameter '000000000000000000030x0000000000000007' [ 505.738809][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.151593][ T5908] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 506.206943][ T5908] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 506.237108][ T5908] usb 2-1: Manufacturer: syz [ 506.256353][ T5908] usb 2-1: config 0 descriptor?? [ 506.458638][ T9379] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 506.538717][ T5908] rc_core: IR keymap rc-hauppauge not found [ 506.546822][ T5908] Registered IR keymap rc-empty [ 506.585460][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 506.649394][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 506.677271][ T9379] usb 3-1: unable to get BOS descriptor or descriptor too short [ 506.696014][ T5908] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 506.696323][ T9379] usb 3-1: config 182 has an invalid interface number: 132 but max is 0 [ 506.724144][ T5908] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input42 [ 506.754121][ T9379] usb 3-1: config 182 has no interface number 0 [ 506.765069][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 506.782506][ T9379] usb 3-1: config 182 interface 132 has no altsetting 0 [ 506.791606][ T9379] usb 3-1: string descriptor 0 read error: -22 [ 506.798226][ T9379] usb 3-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=a9.a2 [ 506.810593][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 506.823376][ T9379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.838690][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 506.858899][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 506.880950][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 506.913807][T10591] FAULT_INJECTION: forcing a failure. [ 506.913807][T10591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.929091][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 506.936363][T10591] CPU: 1 UID: 0 PID: 10591 Comm: syz.6.1224 Not tainted syzkaller #0 PREEMPT(full) [ 506.936390][T10591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 506.936401][T10591] Call Trace: [ 506.936408][T10591] [ 506.936416][T10591] dump_stack_lvl+0x189/0x250 [ 506.936443][T10591] ? __pfx____ratelimit+0x10/0x10 [ 506.936460][T10591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.936480][T10591] ? __pfx__printk+0x10/0x10 [ 506.936496][T10591] ? __might_fault+0xb0/0x130 [ 506.936528][T10591] should_fail_ex+0x414/0x560 [ 506.936577][T10591] _copy_from_iter+0x1de/0x1790 [ 506.936603][T10591] ? rcu_is_watching+0x15/0xb0 [ 506.936624][T10591] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 506.936646][T10591] ? __pfx__copy_from_iter+0x10/0x10 [ 506.936665][T10591] ? __build_skb_around+0x257/0x3e0 [ 506.936686][T10591] ? netlink_sendmsg+0x642/0xb30 [ 506.936702][T10591] ? skb_put+0x11b/0x210 [ 506.936723][T10591] netlink_sendmsg+0x6b2/0xb30 [ 506.936751][T10591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.936772][T10591] ? aa_sock_msg_perm+0xf1/0x1d0 [ 506.936798][T10591] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 506.936814][T10591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.936832][T10591] __sock_sendmsg+0x219/0x270 [ 506.936859][T10591] ____sys_sendmsg+0x505/0x830 [ 506.936892][T10591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.936922][T10591] ? import_iovec+0x74/0xa0 [ 506.936944][T10591] ___sys_sendmsg+0x21f/0x2a0 [ 506.936967][T10591] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.937027][T10591] ? __fget_files+0x2a/0x420 [ 506.937047][T10591] ? __fget_files+0x3a0/0x420 [ 506.937079][T10591] __x64_sys_sendmsg+0x19b/0x260 [ 506.937102][T10591] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.937131][T10591] ? __pfx_ksys_write+0x10/0x10 [ 506.937150][T10591] ? rcu_is_watching+0x15/0xb0 [ 506.937174][T10591] ? do_syscall_64+0xbe/0x3b0 [ 506.937195][T10591] do_syscall_64+0xfa/0x3b0 [ 506.937211][T10591] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.937224][T10591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.937237][T10591] ? clear_bhb_loop+0x60/0xb0 [ 506.937255][T10591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.937270][T10591] RIP: 0033:0x7fc985b8eec9 [ 506.937285][T10591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.937298][T10591] RSP: 002b:00007fc986969038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.937314][T10591] RAX: ffffffffffffffda RBX: 00007fc985de5fa0 RCX: 00007fc985b8eec9 [ 506.937325][T10591] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 506.937334][T10591] RBP: 00007fc986969090 R08: 0000000000000000 R09: 0000000000000000 [ 506.937343][T10591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.937352][T10591] R13: 00007fc985de6038 R14: 00007fc985de5fa0 R15: 00007fc985f0fa28 [ 506.937377][T10591] [ 507.227095][ T9379] usb 3-1: USB disconnect, device number 46 [ 507.283770][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 507.318866][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 507.339117][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 507.368660][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 507.391244][ T5908] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 507.399611][ T5908] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 507.411819][ T5901] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 507.419917][ T5908] usb 2-1: USB disconnect, device number 39 [ 507.593583][ T5901] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 507.602949][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.611055][ T5901] usb 4-1: Product: syz [ 507.615224][ T5901] usb 4-1: Manufacturer: syz [ 507.619909][ T5901] usb 4-1: SerialNumber: syz [ 508.098686][ T5935] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 508.248986][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 508.256101][ T5935] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 508.269028][ T9379] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 508.273150][ T5935] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 508.289717][ T5935] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 508.298904][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.306910][ T5935] usb 2-1: Product: syz [ 508.311318][ T5935] usb 2-1: Manufacturer: syz [ 508.315946][ T5935] usb 2-1: SerialNumber: syz [ 508.420339][ T9379] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.430871][ T9379] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 508.444479][ T9379] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 508.453859][ T9379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.462659][ T9379] usb 3-1: Product: syz [ 508.466969][ T9379] usb 3-1: Manufacturer: syz [ 508.471734][ T9379] usb 3-1: SerialNumber: syz [ 508.533110][ T5935] usb 2-1: 0:2 : does not exist [ 508.546890][ T5935] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 508.574586][ T5935] usb 2-1: USB disconnect, device number 40 [ 510.263919][ T5901] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 510.293854][ T5901] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 510.337095][ T5901] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 510.392775][ T5901] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 510.413068][ T5901] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 510.425953][ T5901] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 510.452120][ T5901] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 510.490157][ T5901] usb 4-1: USB disconnect, device number 49 [ 510.979391][ T9379] usb 3-1: cannot find UAC_HEADER [ 511.030742][ T9379] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 511.051976][ T9379] usb 3-1: USB disconnect, device number 47 [ 511.104957][ T7950] udevd[7950]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 511.152290][ T8699] udevd[8699]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.351220][T10646] netlink: 'syz.2.1242': attribute type 1 has an invalid length. [ 511.619856][T10650] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 511.635691][T10650] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 511.742615][T10651] macvlan2: entered promiscuous mode [ 511.747957][T10651] macvlan2: entered allmulticast mode [ 511.760290][T10651] bond1: entered promiscuous mode [ 511.773023][T10651] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 511.868318][T10651] bond1: left promiscuous mode [ 512.487480][T10664] netlink: 'syz.3.1247': attribute type 5 has an invalid length. [ 512.631595][T10664] ip6erspan0: entered promiscuous mode [ 512.643702][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 512.745554][T10670] netlink: 'syz.5.1249': attribute type 1 has an invalid length. [ 512.980979][T10670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 513.031357][T10676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1250'. [ 513.155924][T10679] vlan2: entered allmulticast mode [ 513.164619][T10679] dummy0: entered allmulticast mode [ 513.247044][T10679] bridge0: port 3(vlan2) entered blocking state [ 513.255085][T10679] bridge0: port 3(vlan2) entered disabled state [ 513.267911][T10679] vlan2: entered promiscuous mode [ 513.273282][T10679] dummy0: entered promiscuous mode [ 513.279888][T10679] bridge0: port 3(vlan2) entered blocking state [ 513.286716][T10679] bridge0: port 3(vlan2) entered forwarding state [ 515.199604][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1262'. [ 515.555331][T10728] ptrace attach of "./syz-executor exec"[9050] was attempted by "./syz-executor exec"[10728] [ 515.653173][T10728] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 516.584900][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1272'. [ 517.439174][T10759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1273'. [ 517.723878][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1275'. [ 518.048683][ T5928] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 518.248632][ T5928] usb 4-1: device descriptor read/64, error -71 [ 518.659352][ T5928] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 518.808690][ T5928] usb 4-1: device descriptor read/64, error -71 [ 518.939791][ T5928] usb usb4-port1: attempt power cycle [ 519.308573][ T5928] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 519.557924][ T5928] usb 4-1: device descriptor read/8, error -71 [ 519.860499][ T5935] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 519.917732][T10799] syz_tun: entered allmulticast mode [ 519.956963][T10799] syz_tun: left allmulticast mode [ 519.962620][ T5928] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 520.024384][ T5928] usb 4-1: device descriptor read/8, error -71 [ 520.085716][ T5935] usb 3-1: unable to get BOS descriptor or descriptor too short [ 520.117224][ T5935] usb 3-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13 [ 520.141230][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.161865][ T5928] usb usb4-port1: unable to enumerate USB device [ 520.174991][ T5935] usb 3-1: Product: syz [ 520.259607][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1287'. [ 520.362412][ T5935] usb 3-1: Manufacturer: syz [ 520.367057][ T5935] usb 3-1: SerialNumber: syz [ 520.622235][ T5935] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 520.875398][ T5935] snd-usb-audio 3-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 520.950200][ T5935] usb 3-1: USB disconnect, device number 48 [ 521.018160][ T8699] udevd[8699]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.536815][T10822] IPv6: Can't replace route, no match found [ 521.928647][ T5908] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 522.089135][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 522.099186][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.136912][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.148294][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 522.208401][ T5908] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 522.292762][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.366960][ T5908] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 522.391872][ T5908] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 522.458859][ T5908] usb 4-1: Manufacturer: syz [ 522.490098][ T5908] usb 4-1: config 0 descriptor?? [ 523.298835][ T5908] rc_core: IR keymap rc-hauppauge not found [ 523.304814][ T5908] Registered IR keymap rc-empty [ 523.356283][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 523.419003][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 523.480533][ T5908] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 523.580959][ T5908] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input43 [ 523.707625][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 523.714577][T10861] netlink: 'syz.1.1305': attribute type 12 has an invalid length. [ 523.782712][T10861] netlink: 'syz.1.1305': attribute type 29 has an invalid length. [ 523.785469][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 523.814451][T10861] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1305'. [ 523.893161][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 524.200115][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 524.206433][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 524.288701][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 524.308640][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 524.388821][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 524.418791][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 524.458614][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 524.489155][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 524.676423][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 524.702695][ T5908] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 524.714154][ T5908] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 524.796179][ T5908] usb 4-1: USB disconnect, device number 54 [ 525.831977][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1313'. [ 525.850525][T10900] input: syz1 as /devices/virtual/input/input44 [ 526.306721][T10909] tipc: Started in network mode [ 526.320122][T10909] tipc: Node identity 002d0000000000000000000000000001, cluster identity 4711 [ 526.351636][T10909] tipc: Enabling of bearer rejected, failed to enable media [ 526.410148][ T5908] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 526.588663][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 526.658037][ T5908] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 526.668232][ T5908] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 526.701251][ T5908] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 526.744731][ T5908] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 526.795659][ T5908] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.895942][ T5908] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 526.926751][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.189154][T10918] netlink: 'syz.1.1320': attribute type 13 has an invalid length. [ 527.268938][ T5908] usb 4-1: usb_control_msg returned -32 [ 527.276696][ T5908] usbtmc 4-1:16.0: can't read capabilities [ 527.902717][T10918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.638571][ T5928] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 528.795013][ T5928] usb 2-1: config index 0 descriptor too short (expected 54, got 36) [ 528.803368][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.814215][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 528.827654][ T5928] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 528.839125][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.851264][ T5928] usb 2-1: config 0 descriptor?? [ 529.276323][T10937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1323'. [ 529.637809][ T9376] usb 4-1: USB disconnect, device number 55 [ 529.999486][T10950] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1328'. [ 530.193512][ T9376] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 530.399624][ T9376] usb 4-1: Using ep0 maxpacket: 32 [ 530.479724][ T9376] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.4d [ 530.489060][ T9376] usb 4-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 530.497605][ T9376] usb 4-1: Product: syz [ 530.507111][ T9376] usb 4-1: config 0 descriptor?? [ 530.811246][ T9376] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 530.822328][ T9376] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 530.834209][ T9376] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 530.842412][ T9376] usb 4-1: media controller created [ 530.999451][T10956] futex_wake_op: syz.6.1325 tries to shift op by 32; fix this program [ 531.317266][ T9376] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 531.461042][ T9376] az6027: usb out operation failed. (-71) [ 531.515912][ T9376] az6027: usb out operation failed. (-71) [ 531.563057][ T9376] stb0899_attach: Driver disabled by Kconfig [ 531.609389][ T9376] az6027: no front-end attached [ 531.609389][ T9376] [ 531.642176][ T9376] az6027: usb out operation failed. (-71) [ 531.653451][ T9376] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 531.734275][ T9376] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input45 [ 531.879069][ T9376] dvb-usb: schedule remote query interval to 400 msecs. [ 531.908992][ T9376] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 531.970249][ T9376] usb 4-1: USB disconnect, device number 56 [ 532.089480][ T5928] usb 2-1: string descriptor 0 read error: -71 [ 532.126430][ T5928] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 532.170994][ T9376] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 532.221166][ T5928] usb 2-1: USB disconnect, device number 41 [ 532.669086][ T55] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 532.849768][ T55] usb 4-1: config 0 has no interfaces? [ 532.855431][ T55] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 532.867862][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.901416][ T55] usb 4-1: config 0 descriptor?? [ 534.878586][ T9376] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 535.054029][T10995] netlink: 592 bytes leftover after parsing attributes in process `syz.5.1342'. [ 535.078738][ T9376] usb 2-1: device descriptor read/64, error -71 [ 535.357240][ T9376] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 535.718366][ T9376] usb 2-1: device descriptor read/64, error -71 [ 535.847782][ T9376] usb usb2-port1: attempt power cycle [ 536.048826][ T5928] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 536.200981][ T5928] usb 3-1: unable to get BOS descriptor or descriptor too short [ 536.210391][ T5928] usb 3-1: not running at top speed; connect to a high speed hub [ 536.234940][ T5928] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.245341][ T9376] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 536.319424][ T5928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 536.372232][ T5928] usb 3-1: string descriptor 0 read error: -22 [ 536.378760][ T5928] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 536.408420][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.421225][ T5901] usb 4-1: USB disconnect, device number 57 [ 536.499882][ T9376] usb 2-1: device not accepting address 44, error -71 [ 536.529352][ T5928] usb 3-1: 0:2 : does not exist [ 536.718894][ T30] audit: type=1326 audit(1759338398.084:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11008 comm="syz.5.1346" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f1598eec9 code=0x0 [ 536.906448][T11024] netlink: 276 bytes leftover after parsing attributes in process `syz.6.1352'. [ 537.117566][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'. [ 537.431991][T11039] netlink: 'syz.1.1359': attribute type 11 has an invalid length. [ 537.460953][T11039] netlink: 448 bytes leftover after parsing attributes in process `syz.1.1359'. [ 537.878931][ T5901] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 538.041913][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 538.059284][ T5901] usb 2-1: config 0 has an invalid interface number: 228 but max is 0 [ 538.067712][ T5901] usb 2-1: config 0 has no interface number 0 [ 538.078859][ T5901] usb 2-1: config 0 interface 228 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 171 [ 538.093618][ T5901] usb 2-1: config 0 interface 228 has no altsetting 0 [ 538.102100][ T5901] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice= 0.02 [ 538.116946][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 538.125401][ T5901] usb 2-1: SerialNumber: syz [ 538.137963][ T5901] usb 2-1: config 0 descriptor?? [ 538.145845][T11044] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 538.398247][ T5901] net1080 2-1:0.228: probe with driver net1080 failed with error -71 [ 538.428945][ T5901] usb 2-1: USB disconnect, device number 46 [ 538.617606][ T5928] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 538.642909][ T5928] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 538.674174][ T5928] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 538.737252][ T5928] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 538.766399][ T5928] usb 3-1: USB disconnect, device number 49 [ 538.952085][T11054] fuse: Unknown parameter 'mGN‡8o«ad' [ 539.908859][ T5901] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 539.930114][T11072] netlink: 'syz.2.1368': attribute type 1 has an invalid length. [ 540.078954][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 540.101251][ T5901] usb 2-1: config 0 has no interfaces? [ 540.117504][ T5901] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 540.148454][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.182628][ T5901] usb 2-1: config 0 descriptor?? [ 540.437971][ T5901] usb 2-1: string descriptor 0 read error: -71 [ 540.456821][ T5901] usb 2-1: USB disconnect, device number 47 [ 540.674552][T11084] batadv1: entered promiscuous mode [ 541.308407][T11092] netlink: 'syz.1.1375': attribute type 1 has an invalid length. [ 541.341468][T11092] 8021q: adding VLAN 0 to HW filter on device bond3 [ 541.408863][T11096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.436310][T11096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.723793][ T5901] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 541.853870][T11112] netlink: 'syz.6.1381': attribute type 10 has an invalid length. [ 541.901165][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 541.933332][ T5901] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 541.945796][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.968828][ T5901] usb 4-1: config 0 descriptor?? [ 542.024699][T11116] binder: 11115:11116 ioctl 40046205 0 returned -22 [ 542.087642][T11119] FAULT_INJECTION: forcing a failure. [ 542.087642][T11119] name failslab, interval 1, probability 0, space 0, times 0 [ 542.101885][T11119] CPU: 0 UID: 0 PID: 11119 Comm: syz.6.1384 Not tainted syzkaller #0 PREEMPT(full) [ 542.101910][T11119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 542.101925][T11119] Call Trace: [ 542.101933][T11119] [ 542.101940][T11119] dump_stack_lvl+0x189/0x250 [ 542.101967][T11119] ? __pfx____ratelimit+0x10/0x10 [ 542.101993][T11119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.102014][T11119] ? __pfx__printk+0x10/0x10 [ 542.102045][T11119] should_fail_ex+0x414/0x560 [ 542.102074][T11119] should_failslab+0xa8/0x100 [ 542.102098][T11119] __kmalloc_cache_noprof+0x70/0x3d0 [ 542.102118][T11119] ? sctp_add_bind_addr+0x8c/0x370 [ 542.102141][T11119] sctp_add_bind_addr+0x8c/0x370 [ 542.102162][T11119] sctp_copy_local_addr_list+0x30b/0x4e0 [ 542.102190][T11119] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 542.102214][T11119] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 542.102240][T11119] ? sctp_v6_is_any+0x64/0x80 [ 542.102260][T11119] ? sctp_copy_one_addr+0x93/0x360 [ 542.102279][T11119] sctp_bind_addr_copy+0xb3/0x3c0 [ 542.102297][T11119] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 542.102324][T11119] sctp_connect_new_asoc+0x2e0/0x690 [ 542.102347][T11119] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 542.102365][T11119] ? __local_bh_enable_ip+0x12d/0x1c0 [ 542.102391][T11119] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 542.102408][T11119] ? security_sctp_bind_connect+0x7e/0x2e0 [ 542.102431][T11119] sctp_sendmsg+0x155c/0x2810 [ 542.102463][T11119] ? __pfx_sctp_sendmsg+0x10/0x10 [ 542.102487][T11119] ? aa_sk_perm+0x81e/0x950 [ 542.102514][T11119] ? __pfx_aa_sk_perm+0x10/0x10 [ 542.102539][T11119] ? sock_rps_record_flow+0x19/0x410 [ 542.102565][T11119] ? inet_sendmsg+0x2f4/0x370 [ 542.102592][T11119] __sock_sendmsg+0x19c/0x270 [ 542.102619][T11119] __sys_sendto+0x3bd/0x520 [ 542.102640][T11119] ? __pfx___sys_sendto+0x10/0x10 [ 542.102655][T11119] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 542.102687][T11119] ? __fget_files+0x3a0/0x420 [ 542.102720][T11119] ? ksys_write+0x22a/0x250 [ 542.102743][T11119] ? __pfx_ksys_write+0x10/0x10 [ 542.102769][T11119] __x64_sys_sendto+0xde/0x100 [ 542.102791][T11119] do_syscall_64+0xfa/0x3b0 [ 542.102808][T11119] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.102824][T11119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.102841][T11119] ? clear_bhb_loop+0x60/0xb0 [ 542.102861][T11119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.102877][T11119] RIP: 0033:0x7fc985b8eec9 [ 542.102893][T11119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.102907][T11119] RSP: 002b:00007fc986969038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 542.102926][T11119] RAX: ffffffffffffffda RBX: 00007fc985de5fa0 RCX: 00007fc985b8eec9 [ 542.102938][T11119] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 542.102948][T11119] RBP: 00007fc986969090 R08: 0000200000000140 R09: 000000000000001c [ 542.102959][T11119] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 542.102969][T11119] R13: 00007fc985de6038 R14: 00007fc985de5fa0 R15: 00007fc985f0fa28 [ 542.103005][T11119] [ 542.548644][ T5930] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 542.698690][ T5930] usb 2-1: device descriptor read/64, error -71 [ 542.948930][ T5930] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 543.088861][ T5930] usb 2-1: device descriptor read/64, error -71 [ 543.199004][ T5930] usb usb2-port1: attempt power cycle [ 543.558912][ T5930] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 543.579371][ T5930] usb 2-1: device descriptor read/8, error -71 [ 543.841971][ T5930] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 543.874018][ T5930] usb 2-1: device descriptor read/8, error -71 [ 543.886635][T11132] fuse: Unknown parameter 'mGN‡8o«ad' [ 544.009936][ T5930] usb usb2-port1: unable to enumerate USB device [ 544.231973][ T5901] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 544.246348][ T5901] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 544.266948][ T5901] asix 4-1:0.0: probe with driver asix failed with error -71 [ 544.292989][ T5901] usb 4-1: USB disconnect, device number 58 [ 545.106939][T11141] kvm: kvm [11140]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x890000fdb1 [ 545.123270][T11141] kvm: kvm [11140]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x890000bdb1 [ 545.723322][T11159] input: syz1 as /devices/virtual/input/input46 [ 545.730120][T11159] input: failed to attach handler leds to device input46, error: -6 [ 545.799083][T11161] input: syz1 as /devices/virtual/input/input47 [ 545.915889][T11161] input: failed to attach handler leds to device input47, error: -6 [ 545.979429][T11159] ptrace attach of "./syz-executor exec"[11163] was attempted by "./syz-executor exec"[11159] [ 546.163256][T11161] ptrace attach of ""[11165] was attempted by "./syz-executor exec"[11161] [ 546.605189][T11173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1399'. [ 546.918217][T11173] 8021q: adding VLAN 0 to HW filter on device bond5 [ 547.378755][ T5901] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 547.640555][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 547.670944][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.691213][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.705978][ T5901] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 547.716071][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.727500][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 547.747427][ T5890] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 547.748321][ T5901] usb 2-1: config 0 descriptor?? [ 547.783460][ T9376] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 547.810712][ T9] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 547.841452][ T5890] dvb_usb_az6027 7-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 547.851189][ T5901] hub 2-1:0.0: USB hub found [ 547.904189][ T9] usb 6-1: USB disconnect, device number 6 [ 547.911497][ T5890] usb 7-1: USB disconnect, device number 13 [ 547.938726][ T9376] usb 4-1: device descriptor read/64, error -71 [ 548.095431][ T5901] hub 2-1:0.0: 2 ports detected [ 548.178708][ T9376] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 548.228667][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 548.318869][ T9376] usb 4-1: device descriptor read/64, error -71 [ 548.420018][ T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 548.429677][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.448411][ T9376] usb usb4-port1: attempt power cycle [ 548.502466][ T9] usb 6-1: config 0 descriptor?? [ 548.765916][ T9] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 548.818846][ T9376] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 548.849370][ T9376] usb 4-1: device descriptor read/8, error -71 [ 548.958065][T11190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.967244][T11190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.011229][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 549.039020][ T5908] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 549.126473][ T9376] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 549.163709][ T5901] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 549.172148][ T5901] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 549.190290][ T5901] usbhid 2-1:0.0: can't add hid device: -32 [ 549.198935][ T5908] usb 7-1: Using ep0 maxpacket: 32 [ 549.207022][ T5908] usb 7-1: config 0 has no interfaces? [ 549.214340][ T5908] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 549.226908][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.241948][ T5901] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 549.280072][ T5908] usb 7-1: config 0 descriptor?? [ 549.282154][ T9] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 549.371910][ T9376] usb 4-1: device descriptor read/8, error -71 [ 549.390899][ T9] [drm] Initialized udl on minor 2 [ 549.462980][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 549.535295][ T5908] usb 7-1: string descriptor 0 read error: -71 [ 549.567323][ T5908] usb 7-1: USB disconnect, device number 14 [ 549.700617][ T9376] usb usb4-port1: unable to enumerate USB device [ 549.901069][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 549.916857][ T9376] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 549.943088][ T9376] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 549.953282][ T9] usb 6-1: USB disconnect, device number 7 [ 549.965551][ T9376] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 550.759079][ T5908] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 550.818947][ T5935] usb 2-1: USB disconnect, device number 52 [ 550.947807][ T55] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 551.038600][ T5908] usb 6-1: Using ep0 maxpacket: 32 [ 551.072487][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.101409][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.138175][ T5908] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 551.170267][ T55] usb 7-1: Using ep0 maxpacket: 32 [ 551.191938][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.237965][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.246829][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.257638][T11222] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1413'. [ 551.286691][ T5908] usb 6-1: config 0 descriptor?? [ 551.292179][ T55] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 551.317512][ T5908] hub 6-1:0.0: USB hub found [ 551.448223][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.454054][T11225] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1414'. [ 551.489313][ T55] usb 7-1: config 0 descriptor?? [ 551.503873][ T55] hub 7-1:0.0: USB hub found [ 551.637885][ T5908] hub 6-1:0.0: 2 ports detected [ 551.726798][ T55] hub 7-1:0.0: 2 ports detected [ 551.847077][T11225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.885537][T11232] netdevsim netdevsim1: Direct firmware load for . [ 551.885537][T11232] failed with error -2 [ 551.896810][T11232] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 551.896810][T11232] [ 551.919758][ T5935] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 552.178905][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 552.240816][ T5935] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 552.249343][ T5935] usb 4-1: config 0 has no interface number 0 [ 552.263012][ T5935] usb 4-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 552.272624][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.281643][ T5935] usb 4-1: Product: syz [ 552.286992][ T5935] usb 4-1: Manufacturer: syz [ 552.329484][ T5935] usb 4-1: SerialNumber: syz [ 552.365323][ T5935] usb 4-1: config 0 descriptor?? [ 552.374560][ T5935] usb-storage 4-1:0.102: USB Mass Storage device detected [ 552.592686][ T5935] usb-storage 4-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 552.701651][ T5908] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 552.796571][ T55] hub 7-1:0.0: hub_hub_status failed (err = -32) [ 552.806142][ T55] hub 7-1:0.0: config failed, can't get hub status (err -32) [ 552.814464][ T5908] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 552.824984][ T5935] usb-storage 4-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 552.824984][ T5935] Please send a copy of this message to and [ 552.879646][ T55] usbhid 7-1:0.0: can't add hid device: -32 [ 552.897655][ T55] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 552.937457][ T5908] usbhid 6-1:0.0: can't add hid device: -32 [ 552.960551][ T5908] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 553.655361][ T9] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 553.728791][ T9376] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 553.809108][ T5935] usb 4-1: USB disconnect, device number 63 [ 553.990979][ T9376] usb 2-1: device descriptor read/64, error -71 [ 554.238857][ T9376] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 554.281196][ T5935] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 554.343684][ T5890] usb 7-1: USB disconnect, device number 15 [ 554.391212][ T9376] usb 2-1: device descriptor read/64, error -71 [ 554.429471][ T5935] usb 4-1: device descriptor read/64, error -71 [ 554.499283][ T9376] usb usb2-port1: attempt power cycle [ 554.576919][T11266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.612824][T11266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.688829][ T5935] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 554.829458][ T5935] usb 4-1: device descriptor read/64, error -71 [ 554.858772][ T9376] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 554.892864][ T9376] usb 2-1: device descriptor read/8, error -71 [ 554.939308][ T5935] usb usb4-port1: attempt power cycle [ 555.138991][ T9376] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 555.173448][ T9376] usb 2-1: device descriptor read/8, error -71 [ 555.335578][ T5935] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 555.489558][ T9376] usb usb2-port1: unable to enumerate USB device [ 555.531110][ T5935] usb 4-1: device descriptor read/8, error -71 [ 555.778717][ T5935] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 555.889303][ T5935] usb 4-1: device descriptor read/8, error -71 [ 556.193816][ T5935] usb usb4-port1: unable to enumerate USB device [ 556.609285][ T5935] usb 6-1: USB disconnect, device number 8 [ 557.044040][ T55] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 557.223792][ T55] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 557.243561][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.279412][ T55] usb 6-1: config 0 descriptor?? [ 557.294337][ T55] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 557.437615][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1435'. [ 557.841338][ T55] gspca_sunplus: reg_w_riv err -110 [ 557.860818][ T55] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 558.091664][T11308] wireguard0: entered promiscuous mode [ 558.102241][T11308] wireguard0: entered allmulticast mode [ 558.261833][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1435'. [ 558.318131][T11316] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 558.325270][T11316] syzkaller0: Linktype set failed because interface is up [ 558.490351][ T5930] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 558.967838][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 559.027521][ T5930] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 559.038418][ T5930] usb 7-1: config 0 has no interface number 0 [ 559.069267][ T5930] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 559.153725][ T5930] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 559.224236][ T5930] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 559.234846][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 559.260173][ T5930] usb 7-1: Product: syz [ 559.267968][ T5930] usb 7-1: SerialNumber: syz [ 559.280314][ T5930] usb 7-1: config 0 descriptor?? [ 559.303225][ T5930] cm109 7-1:0.8: invalid payload size 1024, expected 4 [ 559.316519][ T5930] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input48 [ 559.785945][ T5935] usb 6-1: USB disconnect, device number 9 [ 560.034424][T11330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1439'. [ 560.106264][T11332] delete_channel: no stack [ 562.032483][ T9376] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 562.086093][ C0] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71 [ 562.093551][ T55] usb 7-1: USB disconnect, device number 16 [ 562.093839][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 562.106448][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 562.135405][ T55] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 562.227081][ T9376] usb 3-1: Using ep0 maxpacket: 16 [ 562.235698][ T9376] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 562.244762][ T9376] usb 3-1: can't read configurations, error -61 [ 562.381912][ T9376] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 562.544790][ T9376] usb 3-1: Using ep0 maxpacket: 16 [ 562.553288][ T9376] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 562.561589][ T9376] usb 3-1: can't read configurations, error -61 [ 562.577149][ T9376] usb usb3-port1: attempt power cycle [ 562.765561][T11330] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 562.786190][T11333] gtp0: entered promiscuous mode [ 562.798573][T11333] gtp0: entered allmulticast mode [ 562.918589][ T9376] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 562.949392][ T9376] usb 3-1: Using ep0 maxpacket: 16 [ 562.963250][ T9376] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 562.977013][ T9376] usb 3-1: can't read configurations, error -61 [ 563.088319][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.094781][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.109225][ T5930] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 563.131866][ T9376] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 563.185074][ T9376] usb 3-1: Using ep0 maxpacket: 16 [ 563.205859][ T9376] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 563.218443][ T9376] usb 3-1: can't read configurations, error -61 [ 563.233569][ T9376] usb usb3-port1: unable to enumerate USB device [ 563.304817][ T5930] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 563.441502][T11370] kvm: kvm [11364]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xd101008a80 [ 563.454264][T11370] kvm: kvm [11364]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xd10100ca80 [ 563.480461][T11370] kvm: kvm [11364]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 563.538754][ T5930] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 564.135305][ T5930] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 564.253990][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1450'. [ 564.301289][ T5930] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 564.310799][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.486454][T11355] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 564.745208][ T5930] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 564.794821][ T5930] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input49 [ 564.934645][T11382] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1452'. [ 564.969692][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 564.977927][ T5930] usb 2-1: USB disconnect, device number 57 [ 565.599252][T11394] tipc: Enabled bearer , priority 0 [ 565.608746][T11394] syzkaller0: entered promiscuous mode [ 565.614476][T11394] syzkaller0: entered allmulticast mode [ 565.618946][T11401] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1458'. [ 565.746539][T11394] tipc: Resetting bearer [ 565.758169][T11394] netlink: 'syz.1.1455': attribute type 10 has an invalid length. [ 565.771626][T11394] hsr_slave_0: left promiscuous mode [ 565.830927][T11394] hsr_slave_1: left promiscuous mode [ 565.968986][ T55] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 565.997761][T11392] tipc: Resetting bearer [ 566.027989][T11392] tipc: Disabling bearer [ 566.140449][ T55] usb 6-1: Using ep0 maxpacket: 8 [ 566.149214][ T55] usb 6-1: config 0 has no interfaces? [ 566.158386][ T55] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 566.175472][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.193376][ T55] usb 6-1: config 0 descriptor?? [ 566.342684][T11408] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 566.342684][T11408] The task syz.2.1461 (11408) triggered the difference, watch for misbehavior. [ 566.413518][ T24] usb 6-1: USB disconnect, device number 10 [ 566.534683][T11419] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1466'. [ 566.618956][ T55] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 566.738739][ T9376] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 566.768782][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 566.780632][ T55] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 566.797446][ T55] usb 2-1: can't read configurations, error -61 [ 566.908953][ T9376] usb 7-1: Using ep0 maxpacket: 16 [ 566.915664][ T9376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.927454][ T9376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.938104][ T9376] usb 7-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 566.944155][ T55] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 566.948678][ T9376] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.966104][ T9376] usb 7-1: config 0 descriptor?? [ 567.128696][ T5890] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 567.192809][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1471'. [ 567.202600][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 567.205039][ T55] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 567.220609][ T55] usb 2-1: can't read configurations, error -61 [ 567.253842][ T9376] usbhid 7-1:0.0: can't add hid device: -71 [ 567.277407][ T9376] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 567.282467][ T55] usb usb2-port1: attempt power cycle [ 567.296873][ T9376] usb 7-1: USB disconnect, device number 17 [ 567.398685][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 567.409994][ T5890] usb 4-1: config 162 has an invalid interface number: 84 but max is 2 [ 567.420742][ T5890] usb 4-1: config 162 has an invalid interface number: 3 but max is 2 [ 567.431432][ T5890] usb 4-1: config 162 has no interface number 0 [ 567.495120][ T5890] usb 4-1: config 162 has no interface number 1 [ 567.508677][ T5890] usb 4-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 567.692125][ T5890] usb 4-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 567.718984][ T5890] usb 4-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 567.739297][ T5890] usb 4-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 567.770576][ T5890] usb 4-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 567.771624][ T55] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 567.797446][ T5890] usb 4-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 567.813784][ T5890] usb 4-1: config 162 interface 84 has no altsetting 0 [ 567.828114][ T5890] usb 4-1: config 162 interface 2 has no altsetting 0 [ 567.844322][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 567.855916][ T5890] usb 4-1: config 162 interface 3 has no altsetting 0 [ 567.867003][ T5890] usb 4-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 567.871819][ T55] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 567.884130][ T55] usb 2-1: can't read configurations, error -61 [ 567.884130][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.884158][ T5890] usb 4-1: Product: syz [ 568.075351][ T5890] usb 4-1: Manufacturer: syz [ 568.088692][ T55] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 568.112176][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 568.122249][ T5890] usb 4-1: SerialNumber: syz [ 568.133536][ T55] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 568.171882][ T55] usb 2-1: can't read configurations, error -61 [ 568.193930][ T55] usb usb2-port1: unable to enumerate USB device [ 568.516349][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 568.567295][ T5890] usb 4-1: USB disconnect, device number 68 [ 569.349021][ T5890] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 569.445903][T11465] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.532489][ T5890] usb 3-1: config 65 has an invalid interface number: 95 but max is 0 [ 569.551237][ T5890] usb 3-1: config 65 has no interface number 0 [ 569.595545][ T5890] usb 3-1: string descriptor 0 read error: -22 [ 569.603072][ T5890] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 569.618754][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.705190][ T5890] usbtest 3-1:65.95: Linux gadget zero [ 569.722047][ T5890] usbtest 3-1:65.95: low-speed {control in/out} tests (+alt) [ 570.012164][T11461] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1478'. [ 570.464097][ T55] usb 3-1: USB disconnect, device number 54 [ 571.438800][ T9376] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 571.689075][ T9376] usb 3-1: Using ep0 maxpacket: 32 [ 571.697013][ T9376] usb 3-1: config 0 has no interfaces? [ 571.702887][ T9376] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 571.723501][ T9376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.736739][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1488'. [ 571.753159][ T9376] usb 3-1: config 0 descriptor?? [ 572.021367][ T55] usb 3-1: USB disconnect, device number 55 [ 572.203992][T11509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.559078][ T5935] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 572.656448][T11522] Invalid logical block size (1536) [ 572.720003][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 572.729078][ T5935] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 572.878616][ T5935] usb 4-1: can't read configurations, error -61 [ 573.078738][ T5935] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 573.496120][ T9376] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 573.526430][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 573.608664][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 573.628752][ T5935] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 573.641213][ T5935] usb 4-1: can't read configurations, error -61 [ 573.652564][ T5935] usb usb4-port1: attempt power cycle [ 573.778857][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 573.786777][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.823478][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.014432][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 574.027662][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.053481][ T9] usb 2-1: config 0 descriptor?? [ 574.068520][ T9] hub 2-1:0.0: USB hub found [ 574.074477][ T5935] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 574.272521][ T9] hub 2-1:0.0: 2 ports detected [ 574.348584][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 574.368740][ T5935] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 574.378807][ T5935] usb 4-1: can't read configurations, error -61 [ 574.518835][ T5935] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 574.549792][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 574.620175][ T5935] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 574.677548][ T5935] usb 4-1: can't read configurations, error -61 [ 574.940581][ T5935] usb usb4-port1: unable to enumerate USB device [ 575.085798][T11548] usb usb8: usbfs: process 11548 (syz.5.1498) did not claim interface 0 before use [ 575.095453][ T30] audit: type=1400 audit(1759338436.444:197): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=11544 comm="syz.5.1498" [ 575.149426][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1497'. [ 575.260197][T11542] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1497'. [ 575.324603][ T9] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 575.403139][ T9] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 575.469788][ T9] usbhid 2-1:0.0: can't add hid device: -32 [ 575.509974][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 576.621676][T11558] kvm: pic: non byte write [ 577.076806][T11568] FAULT_INJECTION: forcing a failure. [ 577.076806][T11568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.098994][T11568] CPU: 1 UID: 0 PID: 11568 Comm: syz.3.1502 Not tainted syzkaller #0 PREEMPT(full) [ 577.099019][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 577.099029][T11568] Call Trace: [ 577.099036][T11568] [ 577.099044][T11568] dump_stack_lvl+0x189/0x250 [ 577.099070][T11568] ? __pfx____ratelimit+0x10/0x10 [ 577.099086][T11568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.099106][T11568] ? __pfx__printk+0x10/0x10 [ 577.099134][T11568] should_fail_ex+0x414/0x560 [ 577.099162][T11568] _copy_to_user+0x31/0xb0 [ 577.099182][T11568] copy_to_sockptr+0x5e/0xa0 [ 577.099200][T11568] do_ip_getsockopt+0x1592/0x1b60 [ 577.099224][T11568] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 577.099238][T11568] ? aa_label_sk_perm+0x4cd/0x630 [ 577.099264][T11568] ? __lock_acquire+0xab9/0xd20 [ 577.099283][T11568] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 577.099330][T11568] ? __lock_acquire+0xab9/0xd20 [ 577.099356][T11568] ip_getsockopt+0xbb/0x220 [ 577.099378][T11568] ? __pfx_ip_getsockopt+0x10/0x10 [ 577.099395][T11568] ? sock_common_getsockopt+0x2d/0xb0 [ 577.099416][T11568] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 577.099441][T11568] do_sock_getsockopt+0x372/0x450 [ 577.099461][T11568] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 577.099480][T11568] ? do_syscall_64+0x20/0x3b0 [ 577.099497][T11568] ? __fget_files+0x3a0/0x420 [ 577.099518][T11568] ? __fget_files+0x2a/0x420 [ 577.099547][T11568] __x64_sys_getsockopt+0x1a5/0x250 [ 577.099563][T11568] ? do_syscall_64+0x20/0x3b0 [ 577.099578][T11568] ? do_syscall_64+0x20/0x3b0 [ 577.099598][T11568] do_syscall_64+0xfa/0x3b0 [ 577.099613][T11568] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.099629][T11568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.099646][T11568] ? clear_bhb_loop+0x60/0xb0 [ 577.099665][T11568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.099689][T11568] RIP: 0033:0x7f60af18eec9 [ 577.099703][T11568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.099717][T11568] RSP: 002b:00007f60b0091038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 577.099733][T11568] RAX: ffffffffffffffda RBX: 00007f60af3e5fa0 RCX: 00007f60af18eec9 [ 577.099744][T11568] RDX: 0400000000000009 RSI: 0000000000000000 RDI: 0000000000000004 [ 577.099754][T11568] RBP: 00007f60b0091090 R08: 0000200000000080 R09: 0000000000000000 [ 577.099764][T11568] R10: 0000200000937fed R11: 0000000000000246 R12: 0000000000000001 [ 577.099773][T11568] R13: 00007f60af3e6038 R14: 00007f60af3e5fa0 R15: 00007f60af50fa28 [ 577.099795][T11568] [ 577.568284][T11577] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1503'. [ 577.635263][ T5930] usb 2-1: USB disconnect, device number 62 [ 577.848913][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 577.960142][ T60] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 578.008620][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 578.016986][ T24] usb 6-1: config 0 has no interfaces? [ 578.027664][ T24] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 578.028879][ T5930] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 578.110398][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.134183][ T24] usb 6-1: config 0 descriptor?? [ 578.168855][ T5930] usb 2-1: device descriptor read/64, error -71 [ 578.364189][ T24] usb 6-1: string descriptor 0 read error: -71 [ 578.400148][ T24] usb 6-1: USB disconnect, device number 11 [ 578.408589][ T5930] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 578.560988][ T5930] usb 2-1: device descriptor read/64, error -71 [ 578.691218][ T5930] usb usb2-port1: attempt power cycle [ 578.862110][T11589] kvm: kvm [11588]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xd101008a80 [ 578.872164][T11589] kvm: kvm [11588]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xd10100ca80 [ 578.883077][T11589] kvm: kvm [11588]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 579.038674][ T5930] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 579.096501][ T5930] usb 2-1: device descriptor read/8, error -71 [ 579.358991][ T5930] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 579.379542][ T5930] usb 2-1: device descriptor read/8, error -71 [ 579.489076][ T5930] usb usb2-port1: unable to enumerate USB device [ 579.539240][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 579.701409][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 579.726051][ T24] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 579.758286][ T24] usb 7-1: config 0 has no interface number 0 [ 579.863222][ T24] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 579.910172][ T24] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 579.927463][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.935818][ T24] usb 7-1: Product: syz [ 579.948656][ T24] usb 7-1: Manufacturer: syz [ 579.954318][ T24] usb 7-1: SerialNumber: syz [ 580.018421][ T24] usb 7-1: config 0 descriptor?? [ 580.032343][ T24] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 580.052454][ T24] em28xx 7-1:0.132: Video interface 132 found: [ 580.148811][ T5930] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 580.290258][ T24] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 580.325968][ T5930] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 580.336395][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.353052][ T5930] usb 3-1: Product: syz [ 580.357347][ T5930] usb 3-1: Manufacturer: syz [ 580.364379][ T5930] usb 3-1: SerialNumber: syz [ 580.369305][ T9376] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 580.392716][ T5930] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 580.416922][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 580.471556][T11621] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1519'. [ 580.521110][ T9376] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 580.535965][ T9376] usb 4-1: config 0 has an invalid interface number: 2 but max is -1 [ 580.555583][ T9376] usb 4-1: config 0 has an invalid interface number: 2 but max is -1 [ 580.564095][ T9376] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.590643][ T24] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 580.614688][ T24] em28xx 7-1:0.132: board has no eeprom [ 580.676801][ T9376] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 580.694276][ T9376] usb 4-1: config 0 has no interface number 0 [ 580.704648][ T9376] usb 4-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.763378][ T24] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 580.768112][ T9376] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.784694][ T9376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.788594][ T24] em28xx 7-1:0.132: analog set to bulk mode. [ 580.803539][ T9376] usb 4-1: Product: syz [ 580.814223][ T9376] usb 4-1: Manufacturer: syz [ 580.824934][ T9376] usb 4-1: SerialNumber: syz [ 580.834140][ T9376] usb 4-1: config 0 descriptor?? [ 580.845377][ T43] em28xx 7-1:0.132: Registering V4L2 extension [ 580.874437][ T5928] usb 3-1: USB disconnect, device number 57 [ 580.893102][T11626] loop2: detected capacity change from 0 to 7 [ 580.927920][T11626] Dev loop2: unable to read RDB block 7 [ 580.955375][T11626] loop2: unable to read partition table [ 580.963920][T11626] loop2: partition table beyond EOD, truncated [ 580.971563][T11626] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 581.049233][ T43] em28xx 7-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 581.132915][ T9376] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 581.149868][ T9376] usb 4-1: MIDIStreaming interface descriptor not found [ 581.235950][ T43] em28xx 7-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 581.276607][ T9376] usb 4-1: USB disconnect, device number 73 [ 581.297818][ T43] em28xx 7-1:0.132: reading from i2c device at 0x42 failed: couldn't get the received message from the bridge (error=-5) [ 581.362892][T10951] udevd[10951]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.479707][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 581.495978][ T9] ath9k_htc: Failed to initialize the device [ 581.503140][ T43] em28xx 7-1:0.132: reading from i2c device at 0x40 failed: couldn't get the received message from the bridge (error=-5) [ 581.538329][ T5928] usb 3-1: ath9k_htc: USB layer deinitialized [ 581.659512][ T43] em28xx 7-1:0.132: reading from i2c device at 0x84 failed: couldn't get the received message from the bridge (error=-5) [ 581.815568][ T43] em28xx 7-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 581.884195][ T43] em28xx 7-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 582.056277][ T43] em28xx 7-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 582.129331][ T5928] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 582.300583][ T5928] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.311883][ T5928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 582.313357][ T43] em28xx 7-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 582.333399][ T24] usb 7-1: USB disconnect, device number 18 [ 582.343290][ T24] em28xx 7-1:0.132: Disconnecting em28xx [ 582.350082][ T5928] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 582.359431][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.369202][ T43] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 582.390057][ T43] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 582.403255][ T43] em28xx 7-1:0.132: No AC97 audio processor [ 582.431848][ T5928] usb 3-1: Product: syz [ 582.436727][ T43] usb 7-1: Decoder not found [ 582.438958][ T5890] usb 4-1: new low-speed USB device number 74 using dummy_hcd [ 582.472943][ T43] em28xx 7-1:0.132: failed to create media graph [ 582.480061][ T5928] usb 3-1: Manufacturer: syz [ 582.493730][ T5928] usb 3-1: SerialNumber: syz [ 582.613364][ T5890] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 582.621739][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 582.646398][ T5890] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 582.672856][ T43] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 582.701260][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 582.744805][T11639] FAULT_INJECTION: forcing a failure. [ 582.744805][T11639] name failslab, interval 1, probability 0, space 0, times 0 [ 582.758652][T11639] CPU: 0 UID: 0 PID: 11639 Comm: syz.2.1524 Not tainted syzkaller #0 PREEMPT(full) [ 582.758678][T11639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 582.758688][T11639] Call Trace: [ 582.758695][T11639] [ 582.758702][T11639] dump_stack_lvl+0x189/0x250 [ 582.758728][T11639] ? __pfx____ratelimit+0x10/0x10 [ 582.758744][T11639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.758759][T11639] ? __pfx__printk+0x10/0x10 [ 582.758771][T11639] ? __pfx___might_resched+0x10/0x10 [ 582.758781][T11639] ? fs_reclaim_acquire+0x7d/0x100 [ 582.758798][T11639] should_fail_ex+0x414/0x560 [ 582.758815][T11639] should_failslab+0xa8/0x100 [ 582.758829][T11639] __kmalloc_noprof+0xcb/0x4f0 [ 582.758840][T11639] ? kfree+0x4d/0x440 [ 582.758849][T11639] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 582.758866][T11639] tomoyo_realpath_from_path+0xe3/0x5d0 [ 582.758881][T11639] ? tomoyo_domain+0xd9/0x130 [ 582.758892][T11639] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 582.758904][T11639] tomoyo_path_number_perm+0x1e8/0x5a0 [ 582.758917][T11639] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 582.758937][T11639] ? __lock_acquire+0xab9/0xd20 [ 582.758956][T11639] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.758971][T11639] ? __se_sys_ioctl+0x2d/0x170 [ 582.758983][T11639] security_file_ioctl+0xcb/0x2d0 [ 582.758996][T11639] __se_sys_ioctl+0x47/0x170 [ 582.759008][T11639] do_syscall_64+0xfa/0x3b0 [ 582.759017][T11639] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.759026][T11639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.759035][T11639] ? clear_bhb_loop+0x60/0xb0 [ 582.759047][T11639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.759055][T11639] RIP: 0033:0x7fa56c78eec9 [ 582.759065][T11639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.759073][T11639] RSP: 002b:00007fa56d67a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 582.759084][T11639] RAX: ffffffffffffffda RBX: 00007fa56c9e5fa0 RCX: 00007fa56c78eec9 [ 582.759091][T11639] RDX: 0000000000000000 RSI: 0000000000009208 RDI: 0000000000000004 [ 582.759097][T11639] RBP: 00007fa56d67a090 R08: 0000000000000000 R09: 0000000000000000 [ 582.759103][T11639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.759109][T11639] R13: 00007fa56c9e6038 R14: 00007fa56c9e5fa0 R15: 00007fa56cb0fa28 [ 582.759124][T11639] [ 582.759161][T11639] ERROR: Out of memory at tomoyo_realpath_from_path. [ 583.020489][ T43] em28xx 7-1:0.132: Remote control support is not available for this card. [ 583.067785][ T24] em28xx 7-1:0.132: Closing input extension [ 583.075010][T11654] ================================================================== [ 583.083078][T11654] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 583.090546][T11654] Read of size 8 at addr ffff888071dbc740 by task v4l_id/11654 [ 583.098102][T11654] [ 583.100420][T11654] CPU: 1 UID: 0 PID: 11654 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 583.100437][T11654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 583.100444][T11654] Call Trace: [ 583.100451][T11654] [ 583.100457][T11654] dump_stack_lvl+0x189/0x250 [ 583.100472][T11654] ? rcu_is_watching+0x15/0xb0 [ 583.100483][T11654] ? __kasan_check_byte+0x12/0x40 [ 583.100499][T11654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.100511][T11654] ? rcu_is_watching+0x15/0xb0 [ 583.100521][T11654] ? lock_release+0x4b/0x3e0 [ 583.100531][T11654] ? __virt_addr_valid+0x1c8/0x5c0 [ 583.100544][T11654] ? __virt_addr_valid+0x4a5/0x5c0 [ 583.100556][T11654] print_report+0xca/0x240 [ 583.100568][T11654] ? v4l2_fh_open+0xc7/0x430 [ 583.100580][T11654] kasan_report+0x118/0x150 [ 583.100592][T11654] ? v4l2_fh_open+0xc7/0x430 [ 583.100601][T11654] v4l2_fh_open+0xc7/0x430 [ 583.100611][T11654] em28xx_v4l2_open+0x157/0x9a0 [ 583.100627][T11654] v4l2_open+0x20f/0x360 [ 583.100638][T11654] chrdev_open+0x4c9/0x5e0 [ 583.100650][T11654] ? __pfx_chrdev_open+0x10/0x10 [ 583.100662][T11654] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 583.100677][T11654] ? __pfx_chrdev_open+0x10/0x10 [ 583.100688][T11654] do_dentry_open+0x950/0x13f0 [ 583.100699][T11654] vfs_open+0x3b/0x340 [ 583.100706][T11654] ? path_openat+0x2ecd/0x3830 [ 583.100716][T11654] path_openat+0x2ee5/0x3830 [ 583.100725][T11654] ? arch_stack_walk+0xfc/0x150 [ 583.100740][T11654] ? stack_depot_save_flags+0x40/0x860 [ 583.100756][T11654] ? __pfx_path_openat+0x10/0x10 [ 583.100764][T11654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.100777][T11654] do_filp_open+0x1fa/0x410 [ 583.100786][T11654] ? __lock_acquire+0xab9/0xd20 [ 583.100794][T11654] ? __pfx_do_filp_open+0x10/0x10 [ 583.100808][T11654] ? _raw_spin_unlock+0x28/0x50 [ 583.100821][T11654] ? alloc_fd+0x64c/0x6c0 [ 583.100834][T11654] do_sys_openat2+0x121/0x1c0 [ 583.100843][T11654] ? __pfx_do_sys_openat2+0x10/0x10 [ 583.100851][T11654] ? exc_page_fault+0x76/0xf0 [ 583.100861][T11654] ? do_user_addr_fault+0xc85/0x1380 [ 583.100871][T11654] __x64_sys_openat+0x138/0x170 [ 583.100881][T11654] do_syscall_64+0xfa/0x3b0 [ 583.100890][T11654] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.100899][T11654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.100907][T11654] ? clear_bhb_loop+0x60/0xb0 [ 583.100918][T11654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.100927][T11654] RIP: 0033:0x7ff051ea7407 [ 583.100937][T11654] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 583.100945][T11654] RSP: 002b:00007fffc032db00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 583.100956][T11654] RAX: ffffffffffffffda RBX: 00007ff0525b7880 RCX: 00007ff051ea7407 [ 583.100963][T11654] RDX: 0000000000000000 RSI: 00007fffc032ff1b RDI: ffffffffffffff9c [ 583.100969][T11654] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 583.100976][T11654] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 583.100985][T11654] R13: 00007fffc032dd50 R14: 00007ff05271e000 R15: 000055991473a4d8 [ 583.101002][T11654] [ 583.101007][T11654] [ 583.411629][T11654] Allocated by task 43: [ 583.415780][T11654] kasan_save_track+0x3e/0x80 [ 583.420562][T11654] __kasan_kmalloc+0x93/0xb0 [ 583.425161][T11654] __kmalloc_cache_noprof+0x230/0x3d0 [ 583.430599][T11654] em28xx_v4l2_init+0x10b/0x2e70 [ 583.435599][T11654] em28xx_init_extension+0x120/0x1c0 [ 583.440988][T11654] process_scheduled_works+0xade/0x17b0 [ 583.446557][T11654] worker_thread+0x8a0/0xda0 [ 583.451172][T11654] kthread+0x711/0x8a0 [ 583.455356][T11654] ret_from_fork+0x436/0x7d0 [ 583.460035][T11654] ret_from_fork_asm+0x1a/0x30 [ 583.464848][T11654] [ 583.467244][T11654] Freed by task 43: [ 583.471110][T11654] kasan_save_track+0x3e/0x80 [ 583.475785][T11654] kasan_save_free_info+0x46/0x50 [ 583.480836][T11654] __kasan_slab_free+0x5b/0x80 [ 583.485688][T11654] kfree+0x18e/0x440 [ 583.489661][T11654] em28xx_v4l2_init+0x1683/0x2e70 [ 583.494695][T11654] em28xx_init_extension+0x120/0x1c0 [ 583.500114][T11654] process_scheduled_works+0xade/0x17b0 [ 583.505703][T11654] worker_thread+0x8a0/0xda0 [ 583.510278][T11654] kthread+0x711/0x8a0 [ 583.514336][T11654] ret_from_fork+0x436/0x7d0 [ 583.519042][T11654] ret_from_fork_asm+0x1a/0x30 [ 583.523930][T11654] [ 583.526251][T11654] The buggy address belongs to the object at ffff888071dbc000 [ 583.526251][T11654] which belongs to the cache kmalloc-8k of size 8192 [ 583.540399][T11654] The buggy address is located 1856 bytes inside of [ 583.540399][T11654] freed 8192-byte region [ffff888071dbc000, ffff888071dbe000) [ 583.554454][T11654] [ 583.556778][T11654] The buggy address belongs to the physical page: [ 583.563217][T11654] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x71db8 [ 583.571985][T11654] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 583.580492][T11654] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 583.588474][T11654] page_type: f5(slab) [ 583.592477][T11654] raw: 00fff00000000040 ffff88801a042280 0000000000000000 dead000000000001 [ 583.601062][T11654] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 583.609648][T11654] head: 00fff00000000040 ffff88801a042280 0000000000000000 dead000000000001 [ 583.618325][T11654] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 583.627004][T11654] head: 00fff00000000003 ffffea0001c76e01 00000000ffffffff 00000000ffffffff [ 583.635672][T11654] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 583.644352][T11654] page dumped because: kasan: bad access detected [ 583.650775][T11654] page_owner tracks the page as allocated [ 583.656598][T11654] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5208, tgid 5208 (S10udev), ts 26809009898, free_ts 23971093027 [ 583.676888][T11654] post_alloc_hook+0x240/0x2a0 [ 583.681657][T11654] get_page_from_freelist+0x21e4/0x22c0 [ 583.687232][T11654] __alloc_frozen_pages_noprof+0x181/0x370 [ 583.693064][T11654] alloc_pages_mpol+0x232/0x4a0 [ 583.697929][T11654] allocate_slab+0x8a/0x370 [ 583.702478][T11654] ___slab_alloc+0xbeb/0x1420 [ 583.707146][T11654] __kmalloc_cache_noprof+0x296/0x3d0 [ 583.712542][T11654] tomoyo_init_log+0x111f/0x1f70 [ 583.717563][T11654] tomoyo_supervisor+0x340/0x1480 [ 583.722769][T11654] tomoyo_env_perm+0x149/0x1e0 [ 583.727523][T11654] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 583.733153][T11654] tomoyo_bprm_check_security+0x11c/0x180 [ 583.738888][T11654] security_bprm_check+0x89/0x270 [ 583.743963][T11654] bprm_execve+0x8ee/0x1450 [ 583.748636][T11654] do_execveat_common+0x510/0x6a0 [ 583.753749][T11654] __x64_sys_execve+0x94/0xb0 [ 583.758416][T11654] page last free pid 1 tgid 1 stack trace: [ 583.764299][T11654] __free_frozen_pages+0xbc4/0xd30 [ 583.769402][T11654] free_contig_range+0x1bd/0x4a0 [ 583.774338][T11654] destroy_args+0x69/0x660 [ 583.778744][T11654] debug_vm_pgtable+0x39f/0x3b0 [ 583.783589][T11654] do_one_initcall+0x233/0x820 [ 583.788550][T11654] do_initcall_level+0x104/0x190 [ 583.793521][T11654] do_initcalls+0x59/0xa0 [ 583.797963][T11654] kernel_init_freeable+0x334/0x4b0 [ 583.803699][T11654] kernel_init+0x1d/0x1d0 [ 583.808218][T11654] ret_from_fork+0x436/0x7d0 [ 583.812815][T11654] ret_from_fork_asm+0x1a/0x30 [ 583.817572][T11654] [ 583.819894][T11654] Memory state around the buggy address: [ 583.825523][T11654] ffff888071dbc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.833599][T11654] ffff888071dbc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.841654][T11654] >ffff888071dbc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.849792][T11654] ^ [ 583.856026][T11654] ffff888071dbc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.864195][T11654] ffff888071dbc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.872261][T11654] ================================================================== [ 583.948098][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 583.969172][T11654] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 583.976407][T11654] CPU: 0 UID: 0 PID: 11654 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 583.985418][T11654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 583.995583][T11654] Call Trace: [ 583.998874][T11654] [ 584.001821][T11654] dump_stack_lvl+0x99/0x250 [ 584.006489][T11654] ? __asan_memcpy+0x40/0x70 [ 584.011234][T11654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.016421][T11654] ? __pfx__printk+0x10/0x10 [ 584.020998][T11654] vpanic+0x281/0x750 [ 584.024962][T11654] ? preempt_schedule+0xae/0xc0 [ 584.029793][T11654] ? __pfx_vpanic+0x10/0x10 [ 584.034285][T11654] ? preempt_schedule_common+0x83/0xd0 [ 584.039750][T11654] ? preempt_schedule+0xae/0xc0 [ 584.044604][T11654] ? __pfx_preempt_schedule+0x10/0x10 [ 584.049975][T11654] panic+0xb9/0xc0 [ 584.053685][T11654] ? __pfx_panic+0x10/0x10 [ 584.058094][T11654] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 584.063979][T11654] ? v4l2_fh_open+0xc7/0x430 [ 584.068557][T11654] check_panic_on_warn+0x89/0xb0 [ 584.073498][T11654] ? v4l2_fh_open+0xc7/0x430 [ 584.078068][T11654] end_report+0x78/0x160 [ 584.082300][T11654] kasan_report+0x129/0x150 [ 584.086810][T11654] ? v4l2_fh_open+0xc7/0x430 [ 584.091395][T11654] v4l2_fh_open+0xc7/0x430 [ 584.095818][T11654] em28xx_v4l2_open+0x157/0x9a0 [ 584.100813][T11654] v4l2_open+0x20f/0x360 [ 584.105053][T11654] chrdev_open+0x4c9/0x5e0 [ 584.109469][T11654] ? __pfx_chrdev_open+0x10/0x10 [ 584.114395][T11654] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 584.120708][T11654] ? __pfx_chrdev_open+0x10/0x10 [ 584.125633][T11654] do_dentry_open+0x950/0x13f0 [ 584.130383][T11654] vfs_open+0x3b/0x340 [ 584.134436][T11654] ? path_openat+0x2ecd/0x3830 [ 584.139193][T11654] path_openat+0x2ee5/0x3830 [ 584.143797][T11654] ? arch_stack_walk+0xfc/0x150 [ 584.148635][T11654] ? stack_depot_save_flags+0x40/0x860 [ 584.154184][T11654] ? __pfx_path_openat+0x10/0x10 [ 584.159127][T11654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.165182][T11654] do_filp_open+0x1fa/0x410 [ 584.169765][T11654] ? __lock_acquire+0xab9/0xd20 [ 584.174894][T11654] ? __pfx_do_filp_open+0x10/0x10 [ 584.180053][T11654] ? _raw_spin_unlock+0x28/0x50 [ 584.184997][T11654] ? alloc_fd+0x64c/0x6c0 [ 584.189426][T11654] do_sys_openat2+0x121/0x1c0 [ 584.194107][T11654] ? __pfx_do_sys_openat2+0x10/0x10 [ 584.199320][T11654] ? exc_page_fault+0x76/0xf0 [ 584.203989][T11654] ? do_user_addr_fault+0xc85/0x1380 [ 584.209257][T11654] __x64_sys_openat+0x138/0x170 [ 584.214178][T11654] do_syscall_64+0xfa/0x3b0 [ 584.218665][T11654] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.223945][T11654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.230077][T11654] ? clear_bhb_loop+0x60/0xb0 [ 584.234829][T11654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.240708][T11654] RIP: 0033:0x7ff051ea7407 [ 584.245131][T11654] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 584.264754][T11654] RSP: 002b:00007fffc032db00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 584.273181][T11654] RAX: ffffffffffffffda RBX: 00007ff0525b7880 RCX: 00007ff051ea7407 [ 584.281171][T11654] RDX: 0000000000000000 RSI: 00007fffc032ff1b RDI: ffffffffffffff9c [ 584.289122][T11654] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 584.297076][T11654] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 584.305040][T11654] R13: 00007fffc032dd50 R14: 00007ff05271e000 R15: 000055991473a4d8 [ 584.313022][T11654] [ 584.316329][T11654] Kernel Offset: disabled [ 584.320728][T11654] Rebooting in 86400 seconds..