last executing test programs: 26m28.25153117s ago: executing program 1 (id=801): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) timer_create(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0xda0d933d8e78e8f4, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0xa, 0x148, 0x0, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x64, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) sendto(r0, &(0x7f0000000340)="113bc92936c177be091eac191beaf4bf73bdb0bd3ed95d4e475d59c3b83564ec621bbbd91810c4a245da8d3254063bf4b19fc5f162cd92b21a16e688ef8204db6689998863d996a4072e6c9d0284e0fcb0c68d6852166c6995d7f54c5f6fe25b640cd99dd4bfdba80d424468df47b712ad1f637f008e0651c95308d5f8d34e847bd569544c9997ba7a42b8f0721d7a4f2b6e3c", 0x93, 0x4000800, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x2, 0x1, {0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}, 0x80) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0xc800, 0x278, 0x1a8, 0x18c, 0x203, 0xd0, 0x19030000, 0x1a8, 0x2e0, 0x2e0, 0x1a8, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@private1, @private2, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], [0xff, 0x0, 0x0, 0xff000000], 'sit0\x00', 'veth1\x00', {}, {0xff}, 0x5e, 0x4, 0x87884cd330e52fa7, 0x4}, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x9, 0xf}, {0x4021, 0x3}, 0xbe56, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x41624800ab11328d, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 26m27.937613804s ago: executing program 1 (id=802): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000dc0)=""/99, 0x63}, {&(0x7f0000000040)=""/49, 0x31}, {&(0x7f0000000600)=""/228, 0xe4}, {&(0x7f0000000c00)=""/83, 0x53}, {&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/4096, 0x1000}, {0x0}], 0x9}, 0x40010022) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182) 26m27.811113187s ago: executing program 1 (id=803): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0x88ad, 0x0, 0x2, 0x40001333}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r9, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x70, 0x0) 26m26.14900908s ago: executing program 1 (id=806): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000200)='memory.min\x00', 0x2, 0x0) (async) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f00000002c0)="29aee8285b0c4afb177415058629c1fabb1756defcd1bcb2526e744a25126761ab1de6ae356978ed456310dfb7e3a31b0f7791c0f67d78ed3c0a5bf3066dfbf1fbb6233060f3612468915688966a73550cca3ff635de567235d41b2d4d23cb38729dc20882fa58e5c68fa4987f25a68b6fcc7082fab7621da2bfe91f6a3666dd7e5366328af7065b8c53cda03281b89ecb0fc8e99f9bf3c7f2fae828f7f1e6c29c42310ee317d5743892e05cb8801fc256e82b3c4f957f2dd3b6ccb57f48f87ae8154e0d", 0xc4, 0x2) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff05"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRES16=r0], 0x27) 26m25.009697329s ago: executing program 1 (id=815): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x189000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000a40)={&(0x7f0000001200)=[{0x3, 0x210, 0x2d7, &(0x7f0000000f00)="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"}, {0x7f, 0x3219, 0x0, 0x0}, {0x3ff, 0xa523bdf7fd83855c, 0xe6, &(0x7f0000000d00)="26f46a0456081f9c38265e864297211bc496ca46f6beabf4a6da336b11e5d7428bec0588cc06ab20d41b70dc74d8ade0fbc828c61518c79f14e6cd4fb7179501f810e0a08cf99293e6c38f38b1f77bb4750554235e661076c290710fa36e8f867f9dd94ac4cc3f13564d537b9d36209299b191a4b17255bf39a62b9e712069964d60a31200d44892fbb34a4c0f2ed8b6e32fd88672829306b22c776c4d857e4efd0b750dbd4f3b3cd5545328d259d69d54ebe970a7c1ba6f2c1debe6601eb319ea91bd61b2eba7856df56db8fedb148949765c3f62d43aa135b3768cfc37087fc822ee5d07eb"}, {0x81, 0x2e00, 0x10, &(0x7f0000000900)="54172156e59bf95b6a5a11424ca60ed6"}, {0x8, 0x4000, 0x38, &(0x7f0000000c40)="e6b86a8cc17670edf2f678382cbd0eb636649f734ebf9d3e9b8f5adeabf233c780fd9c26a1d80d576a675b69683f631614fdf575236d5c05"}, {0x3, 0x8801, 0x4b, &(0x7f0000000e00)="b4854fbd474230ced3ba93c6ae9002ba1c8a470267cb0ff83bfa5f1e2a61aed73a7aa0a58b6fc4d6d5d7f442603012b58fafa6f0237c0ebc7f40d182104aaa0c2438b99659b7c99de097fd"}, {0xc, 0x9c11, 0x51, &(0x7f0000000e80)="0cbcf550fb8f7b5dfc102d807b8b242d8bd2cf675eb2ed3daab96105ee47c83637ab905040f0f4ae888bca09163385d1f098859b0f922c428f302b0bd31f8e2e231891d862697b0c4f6658811854fd95bf"}], 0x7}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="65786563203aa0"], 0x9d) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x20000804) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_emit_ethernet(0xffffff0d, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r10, &(0x7f0000000080)=ANY=[], 0x78) close(r10) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000740)={0x2, 0x0, [{0xa, 0x2, 0x5, 0x7f, 0x6}, {0x80000008, 0x6, 0x2, 0x2, 0x6}]}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x7, 0x49, 0xfff, 0x3}) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000100)) sendmmsg$inet(r1, &(0x7f0000003640)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000001c0)="23f33805abbe4eb4dcedbeb709b01999ee1b6bf2a25cd35579605990cb64cf7f944231de03e808f9fc008b9b790d4ebd2b7c3a7a8f1016d458", 0x39}, {&(0x7f0000001f00)="d40d33c5e032ac8876bc2710a204881b1fe9ce63855cdd41895949e3b2dbc19bd75a32df68cd71ba5fe3614c158db31d6905764ff25e09722717ce038459b549f4f61a8e03ee24e644dbc64019394ee3833345553039b3cb08a13ef9aba03561bd94db75aa25598cb239e88ce600b266445e389b01783798f80e5247a1e2bd3b4e645228fc43b0c63ce7c2ef9eea49792edb114a0cef2dd35b3c86073d432ba28feef7595aabae156836ac62dd3f85bb66c9fe67e963bc10fb5b2c08893f7b30136819e9a6663d7637c6eb837503b02556c813867969a43c99e1d4708dd7770732543defc79cb0e4a382b4c2726125b4ec257ff02713fb4dd5cec8596b1dab1ca46e10a89f2d940eebe87084f952a91fb346c4781abbb9056f77c94dd07acdbd898a0fd0ac17fd5ab9f962bf2d805154650bcbe9e1e5a9d5e14ad13a6db8218c68db92ff21a6665e1eb4037745258f6897139755aa95a03989febc7f9193a1b87a758a976c7b32373afba6d8c5fdfca50cab5ee5fd2ec9f7dcad0ceac3e37cfb7797e656485f45ac56ad1bfef5b38cacad8e6072321ee0f54af8b4c103001fba584f96fe891bff695ead6d38364339f6e6e878b1989685c2850fd12fb0b7f713c4579abdd73de3eacfcfb658bbb9dc0aa55c86afd9d9474f5ed3dc9112571e51e80a1e2b402864ff216fba7ca1d53ca32a3738973bad9e0e7b327be0d91a8dfea8e825048ac171809a811cd8ea4be866919869acf64b57443fca999434fb172295167fe76b53c164c4be2ba63b8e31d66ea323feeb1709a0b78c4fdc2087111db9348b602b12c4adbdea43cd3bf8539a99b698be7c5b21f56e34885c5c52346475cad97888571d16f5b10f5f831aafc0a148d810f449bdbb9184de58b38799d4ff3e8ac7b26ee928db3ef921787600e600ede6d8b551d26cc425b19f57abfc80a3c81d6360570425d01038cdfb52e3a3ee9da5c6383ce7070a9ca718d86ca5f68ac15e22d6f22337fc6e9bb730621d3b72fcf29c350ed6dbf82116573a78f52a6ef88583f389a0843620c27a7b5cd04c2df9542a1a6efcc03ba777f8c0cc77cb9122919342eac30744289459205fd6f4c8a64f0f6846d26ddbc689a517657bfbcfab810f1233c18e0b2a4d0f98e5216deba99cf85010905a46982eb87db295642aab92ea9a9bfcac236b4fc13e463bfe423825b37327609a7c8644aeebe615f709aa5e38eb10690cdedeb982ae0572e7ab3a43f434415c8d8dbfffdfd951d7384bb1198427f2a476b5f4430cd905dcfee0cb276bac5c43ca72ac7967da990368c293ed077f1baff021c79cf7c4e71394933a1dc7f800908e248d8fca619c0a5e18793511426a742103b0756d16d511b1a1e9a75b509feaffe509585f9bac5e95d258533bfb7bbb2c89131f0c0bc725a2b8ce6bb8a2d47fea7cebe2c67a9b16299cc3f8dd461ad75b6ea8dfae3bfac25eb40ad32a29c8ac49161558451117729a4b6363274d4b31a13c921f445ef3702158555b5ae859832061e7bb6066b6370a7809d4dd21b50fb1ca0115cf8db955c09c6242ce9839a978de9f4c28dccb44e4e6683daf75e5a7fb1b985f2efad34da78f725655834255a9d77873ee7ec62807fd2a21ae47f5a6204bb8653a6d0b2745dc6faf049c31935b0204d06393ea2295336c2b537e710a01b5b67ab4602d339c1f5b516963a0101e25aa23f849f84c895f6db3a51e1617863f33ed13e4105daca7f0892a5bff2606a5e20929f4afa911f02cb159ca39c8c53dde2ad0d69c935e82b931088ccde87f523bb377b70847c86bd632cb0fa7fa50fab4b8dd185e3f04c7418a301a2d22e2f715c1b81ae1f04d20122caa1d4c00a9b7b2cd88a82f53e5973eff9936232729c353e95abd541ede1aded94fe489ddba40246237bc37036403cd34ef4b1d764b5842f9d69c0585e7e22ef585b85c40eea073f96c87b2c00d8a3678a6f5475283c2a53e779475cf1c521181688945d161d325870bd49f3413b09a2372bfd750edb97a71e2ec027051f16f5949a098ddb6c752c60eaacfe865ce581f9e7adf0b8787f965659b75243c467e933c7acdadeffddf2cd2febbe0f8c3a261e7e77ba4a5463f12c764bb49a85dc075b11c0076dbfae8efe22ed0ae8adc18975db60d043b72b646046ad90456f16fc1b0243cbe0947ef32775fca9cdb03889d2bcca0351edd897e1a7a23bc577dfc52cd9a8f4e25926d82d88d2b939236c76e7d4a074ce5b21012683506c4263dea79fb14f150b13de25ff521e2f6d7ad85967c24637459a522eaddd3d260a028fbaa7a092378e4f338f035d05e633af1b6581f4e65a55703f8b90a84fa4d0c70ee5dc5f126e88f15e2e99d6b05972772ad6b6ac20c6633488f85eec20baaad1c85774428cf891aeece4aff9c42c20db4333df2824a10bc55137aa2daefb3cfce0b08958322da261fe6285f39e81cb4ae9cd4177fcf76846770cdaa9927c3dd22e551a8dc8d9cf05eab7980d38b0125180cc411e2af5b79", 0x6f8}, {&(0x7f0000000200)="af639cfdde1848d13f17b10cffbd10cf9bfc6014def6e2d844c303de3f19a3f808aa7a9976c91102943a7d772d277a2a50f57c6fd1853674fca9e019611a1b87f47f8b158785514e540a4a1ae42a4ba556483bd2f0905bed6196521fc06f62d0f10421a9d8d21dda3c0da4f692620607840b9cc9f7a8d8594875a51a8ad4aed1143df3fb15ab90890de41899ee2a40de8dd3f5d7bdfeccc1ef27329300eeff0fb293dd45dca8293d9735ce556b687cf294c54379e6474c80136c3525ed4ee40a015cc03718b290a867144963", 0xcc}, {&(0x7f0000001280)="33baf35a754f76a7bf9ef513990f0d07e4c3a34ec6f7d562662ebd3fc97efc9832a5b76aaef790be8e5973be4df97ed623368b0e8a9d927ea2bc9235b574dab294d4165afa43b59e4106de4219e0628da6000000000000006183c0398081fcaefa196e7c55a58914fe1128347e16b9bd03c22b17b839f89b2fea3bdd737395b58f2c324a3ce119950f7d1fb9648a616a8a15000000", 0x95}, {&(0x7f00000003c0)="08861ea0f057a5df03d6c846a75ef7be7d6498c146cf7e37ed6dccdecf5577b9cdce0d584faf29e6001a1744155d5882a5c32c7579983ac7d889039197d3526c7105f3b747ab1c7d9119790c9488d2ac1cd7606f14951342f43564fc8447d02de9f6a20e514c7c2c2479dae88416301198aaa7eb15338f9d8f7e0a609e80248b7bf9793333252aaa841641a3917a16698ef397d307fb691cfe1ec4e35899c263fded7cac428f31249d0c8a7b794be69f7f23e3600857944820146e40c1357ee4e9ec8f6aa7ea96d2f4578577", 0xcc}, {&(0x7f00000004c0)="776a5e65bd124fd7fdfa1a1f40f79fbbc6867f7e40cdd7960eb717aa3af03c02a6ca", 0x22}, {&(0x7f0000000500)="fc4895dd45881c75043fa6a198aa23d731b26dd2ac5ca1813c22acf4dcd7221b0005359bc2dc1b8b49869d1061766d433bdf464748f002065b46829e33f81f03d5be81af1d7417c1242ebf739e2cb8ab018f20bf1826dd0edcb1b77db8175b3bf21a9cadd97e7a0f5eb349410fecc96490be6de560cf7172a17ad93233f07aadaa1b4324057dc1508e9ea005c06abee4df10493a2e198cef78376f4fcc59874c290be22976450568d5247a05689ea52ab14dd712463cb5f9b1ad05", 0xbb}], 0x8}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000006c0)="39358389243f213f6f47d8c97c828a25094c6f1ca682c51d3a0d7ab4f57b8b9ddb2f7f4e22080bd846ad606148dc80c11db75fb92436ab7ccf26cd46711ef83e36807cee98339b33d4a368e31b9a18c1d2db570d84d56b05c9c7ccf01140c24300ee0ebd3ab034f86340aa7ae774edcd46d791e3731b3e554ec29dee7917056c6fb71c4ab2dc0698e98868566db3f00f699de711c16e3abaf3ab2183", 0x9c}, {&(0x7f0000000780)="c003d7b74c9297faa084a2c4226e5672c7a6a8ae0f330ff55a532cad41c71834a7004148ca5dd401433f1dc2d6ade72045c8ecdf377d1ad821c332ab23c3cba4e054bf10cff846887343f0529af1a8d197ddc90dbabfc490cc47ab383a4082daee2182fed48d6ce999f14b06a40de1b0d2df2a743973b0ddffc5e3291b", 0x7d}, {&(0x7f0000000800)="8445e950daa8efc8be23bb5787f6a2076a2216222a0475f545cb2444a17642241ba5db6667c5dda16d3358c1eb6adfddb5a3604ea18a307bf4b8d624ddd096a5bbc8e7772cbf02d8be1f5167150be4bb6b4d737a4cff0cf65e5bcabbdf13a994cd560f2340f3d46306d947286a53071339bdab06ae259c762f1084cc71f297b102470ae8f321a88ca007c304ed1567085a9726f2b751c833bc7c9f2d0ea90b67d43d13ebe9ef79573d4a55", 0xab}, {&(0x7f00000008c0)="441e88de841fb856dee7056c5bbe728197e0c69ed9f148a14187d57b485cf7", 0x1f}, {&(0x7f00000000c0)="cb8782098625309258c41673e994f4", 0xf}, {&(0x7f0000000940)="00b04e3ae9e183a62d9e782caaf09bb91dd9b51ab50dde9c30a8efd191ee17b39b9542aee7703c9d0f544abcea0c1951d3a25272ff7ddecd367ae58a193f0429242dac70a77008c841d377db873c81811df64e7b6d040b271d56243b55118b534f728aa414613ec89f6fe1fa7754bd3558af02d9e215d86f693c4af90f527315cdf3b2e7143aba6f7c862546b956bfa4a73ba03161f3867b46cfbdc2fb304c4b6621a889888f2856dea2e2f940de132c1fe432c5730910cbe053f8ea6f59", 0xbe}, {&(0x7f0000000a00)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000b40)="01d4b251fc4bb67267ec752509cff66f0942cf34efd29bba49fb74f994fc9b533b4c34aefc8d9ae3347804b7e06e07c0018f8931b661ad6d87fd1d48fae5f2e9c1b54e27678e7cf114d10bd989497d63f3af5c1cd58d6e23deae3fc475976df752543cef9c2ec16efe5d2f56c416d57e0885391682009808a7cfe7babb5e7828698f8709fcabc30dd5475c92f75c543a76f48cb302121fbef93d38e6505b5eb35e28fe2849122c12b8330eca9cc395b9513751dc9a80fb1a8c847a03451d7ec54c06ceece20cac5e2f2f880e36d000853f2bf076f769d25dedf8b43709ef7ad8813bf087f8a055d1a98eabf92d0faceb81a28a921ed6", 0xf6}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000001340)="8fe6d86349b2ab2e0ce60bc95ded59aa5ac4429a64241ca378ece0f6c0263b120719431decfcd2074f2de359256343b44faaafe4fad39161a275d649c71958155e5ae31a270ab5a49026cac2d9b1821c2d0a20fbea81ec69c14117bfb9bac6a5494d16035fabd7142c4da1795c664bf0d19f5ae417f9d796bf88c879317e03b3d2defb62d4ed86f231b9b7fdbf1af19a20c7995675438920e57de69d4d0288f800c58d6af72dd5a7fc9d0ed2524ee9bde3c86368b540168b84eb875a3be3856f93462edc912507c68441a49dfeeb07cf662a756faeb90ad604a3f69a20b16d2c9264649d9ba380132149cdc73cc26371829348", 0xf3}, {&(0x7f0000000640)="3ec8c1f771bc037b51612a9605141c49cd4d7a34d6fbeb097330f5a206975d87ea927e6845bf2785ec82f46cf154529733e7403c829a48f87817ad87155ea97076d54d6daba8a52c312f975b560d142a5c9f98", 0x53}], 0x2}}], 0x5, 0x2000c044) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8015) 26m24.521683884s ago: executing program 1 (id=818): r0 = socket(0x2b, 0x80801, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x1b216000) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/238, 0xee}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f00002ce000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x7, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000002c0)="d76268833fb94fc3cf79bff8301caff9", 0x20) 26m23.436224258s ago: executing program 32 (id=818): r0 = socket(0x2b, 0x80801, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x1b216000) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/238, 0xee}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f00002ce000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x7, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000002c0)="d76268833fb94fc3cf79bff8301caff9", 0x20) 2m36.889856389s ago: executing program 2 (id=5571): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000011}, 0x44040) io_setup(0x8, &(0x7f0000000540)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r1, 0x0, 0x0, 0x2a25}]) 2m36.539802573s ago: executing program 2 (id=5572): request_key(&(0x7f0000001200)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000001240)='\vH\x81\xa2\xeb\x9e\x14\xd4\xe4\xc5\xce\xe69.\xba\xa2O\"\xda\x1b;\x93\xb4\xc6P\xd6\x01\x10\xa0\x12\xce9\xdb`1K\xa3\xa2N\xf8\x1b\x86>\xe8', 0x0) 2m36.275898186s ago: executing program 2 (id=5574): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x2c, &(0x7f0000000000)={0x1e, 0x0}, 0x7) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff3d, &(0x7f0000000880)=[{&(0x7f00000008c0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a109000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4040080) 2m35.90229972s ago: executing program 2 (id=5576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff80, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300050000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2m34.906676138s ago: executing program 2 (id=5579): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083100000bf090000000000005509010000000000950000000000e30018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2m34.670142791s ago: executing program 2 (id=5580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e030f00fd486af2001ccf59f5057b452e373e414c960055"], 0xffe7) r3 = syz_open_dev$rtc(&(0x7f0000000140), 0x6, 0x503000) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x29b2, &(0x7f00000001c0)={0x0, 0xe615, 0x80, 0xffffffff, 0x97}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_enter(r4, 0x1682, 0x0, 0xb, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000000)) r5 = syz_open_dev$vcsa(&(0x7f0000000200), 0xb, 0x82) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="11002ebf7000fddbdf250700000408000300", @ANYRES32=r8, @ANYBLOB="0c009900fbffffff2d00000008000500060000001400040070696d726567000000000000000000000800178004000600"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) io_uring_setup(0x102490, &(0x7f0000000240)={0x0, 0x89ab, 0x2000, 0x4000001, 0x29f, 0x0, r5}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000000000fedbdf35070000001300000008000000", @ANYRES32, @ANYBLOB="0c001a8008131e0001000000040037"], 0x30}], 0x1, 0x0, 0x0, 0x4004}, 0x30008080) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 2m34.076992967s ago: executing program 33 (id=5580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e030f00fd486af2001ccf59f5057b452e373e414c960055"], 0xffe7) r3 = syz_open_dev$rtc(&(0x7f0000000140), 0x6, 0x503000) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x29b2, &(0x7f00000001c0)={0x0, 0xe615, 0x80, 0xffffffff, 0x97}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_enter(r4, 0x1682, 0x0, 0xb, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000000)) r5 = syz_open_dev$vcsa(&(0x7f0000000200), 0xb, 0x82) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="11002ebf7000fddbdf250700000408000300", @ANYRES32=r8, @ANYBLOB="0c009900fbffffff2d00000008000500060000001400040070696d726567000000000000000000000800178004000600"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) io_uring_setup(0x102490, &(0x7f0000000240)={0x0, 0x89ab, 0x2000, 0x4000001, 0x29f, 0x0, r5}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000000000fedbdf35070000001300000008000000", @ANYRES32, @ANYBLOB="0c001a8008131e0001000000040037"], 0x30}], 0x1, 0x0, 0x0, 0x4004}, 0x30008080) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 14.733396117s ago: executing program 0 (id=6027): syz_pidfd_open(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() timer_create(0x6, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0xfffffffffffffe79, 0xfa00, {0x0, {0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x5, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x100000000, 0x4) clock_gettime(0x0, &(0x7f0000000040)) openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) timer_settime(r2, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, &(0x7f0000000200)) r7 = creat(&(0x7f0000000240)='./file1\x00', 0xa) close(r7) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/sctp\x00') fchdir(r8) r9 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r7, &(0x7f00000002c0)="6967ae42cbea486d00a74e3deec6fcb4391f745de504000000000000007190ba2b6d59d3958d6f1501000000c40300000000000000ffffffff200000f8bf54da335e5e2c09278da90f3f4eab15f1dbf3c10fc4d6b2b6afa56499285ca6f1524a4b927031d3e5052fb8ca7c5813420214be0111c957be2f10d389bfbe4185de1d2236af0858f45919e9090e707ebafe146ccf9b8d4678884ad3782f6c36a32fd93fd028703a35bcb70b63a3018da8a6c805b4691622caf4de60e79efe6935db565d8c3991dce91e35cda09920fb15b094fe8fbe1d430e916899ed9f74a095d98957208b89a39f57cc1bf0444cbb87825d5952eaf23ded0443bd931c2b375f74899ab79c6e4d7827ec0c750a84524dde12fd8888717974012673dfb0bb18602774225d22f819ac7570fc19d8ac3177a01262a2d2a943f2ed", 0xffffff71) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x7cfd4000) ioprio_get$pid(0x3, r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffff, 0x40) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 14.413877619s ago: executing program 5 (id=6029): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) sendfile(r2, r3, 0x0, 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x104, &(0x7f0000000180)) io_setup(0x81, &(0x7f0000000100)=0x0) io_submit(r7, 0x3, &(0x7f0000000440)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0xc, r1, &(0x7f0000000200)="4f1f5c5c97e473f28b5d729964de3fcba6ce7420febd86fe25036633f430eb14e770e73901b8cde574e24d4889c49d6ee08da793f5574f098cc6b4705015900748810e05ef8ef5d303c12fd0641f9205621e2edb7749f781160a12429a028be7a5a43673216c8f8c034cffbd5ae6d7816fa15459d81595ac7f1427006d9cc2117815bd13a36348519718795b5ebdd9fd791df8bc89005d5a2b924abcf5069fdceadea7fba55b121dc364ac7605bfec93bf2128fda3611c1b1b59f8676ef21fd7fda3ed966cc0a4a9f756b2bed3e2fdcbaf76724ae9f1d11e22373b", 0xdb, 0x4}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0xfffb, r6, &(0x7f0000000300)="b01bd198d677edea628998d1b5306b686b1b938d228f0ac786be9c72e59ee28bba2cc1120345c29e10dbd032c664566ebf6c487da69e4a5f2166c87de163fecf3452", 0x42, 0x2, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x10, r0, &(0x7f0000002600)="0ed1babec790218dfffa8eb21448c464ea87fdec870dfeb2eeb4722d8bb3801009b520ef8dc93ba2169e2dc78aff06add9b561bbb260b6fb52807242a53d35c04d72d20d0dd4b83e67f3f3aee31a859a3d400d18ff246ea4eb1a2fef82a9368e5986d76831023b6e236e03b5d3f74ace6f30d5d004ebd47c0e5551b86a90fc3105dab3fe581ba96971243e1317474a6d35d72925e15375b6a4ff278025729bbd336ca4960ded22b138a68e7a6492e7e82a9a387a96", 0xb5, 0x9}]) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) ioctl$UI_SET_KEYBIT(r8, 0x40045565, 0xee) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x103100, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r9, 0x40045109, &(0x7f00000000c0)=0x7a9c7d23) ioctl$UI_DEV_CREATE(r8, 0x5501) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000000580)={{0x0, 0x0, 0x80, {0x4, 0x3000, 0x1}}, "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", "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"}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r11, 0x400454c9, 0xba98575a95aeb70d) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x8044, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000004700)) 14.301830354s ago: executing program 0 (id=6030): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r6 = socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000003100), 0x40041, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000003140)=0x4) ioctl$sock_SIOCETHTOOL(r6, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) 13.221885041s ago: executing program 5 (id=6034): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001800dd8d00000000000000000200000000000005000000001800168014ee000003000000000000000000040000000000"], 0x34}}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x40, 0x3, 0x2e, "ba0d1f976a6c3b99533131b4d4f821ba761a124f70b30a342872a5fd0a64d7c5327db164e67efdfd8ad9ad5e72a4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000440)) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x101a82, 0x30) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) dup(r4) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000480)=ANY=[], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000001d40)={0x34, &(0x7f0000001a40)={0x20, 0x6, 0x4, "180734ec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) copy_file_range(r3, &(0x7f0000000000)=0x7, r3, 0x0, 0x7, 0x0) syz_io_uring_setup(0x6a3f, &(0x7f0000000000)={0x0, 0xfb28, 0x80, 0xffffffff, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x2a, 0xc4, &(0x7f0000000080)="c49ed8642d31587481c20d13c28921515e81d7e10f0b8af7426466c28a028c2338bc82bc4ccb76cf1003", &(0x7f0000000300)=""/196, 0x1, 0x0, 0x31, 0x33, &(0x7f0000000100)="b3e75f104e49679089c391c28d4937818b1f1226dc1efc9bdf965bdff0da9d23720c3999cb23b3d21a0b7797a28324b611", &(0x7f0000000200)="de0f9a1e8be28722123a8f759b06c93167d888b3811b1e2a4bd1cc31b95e4a8a41fea64e668b7e9def18790000000000000000", 0x7, 0x0, 0x3}, 0x50) close_range(r1, r1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000500)={{r6}, 0x40, 0x40, 0x5}) socket$inet6(0xa, 0x80001, 0x0) 12.989926927s ago: executing program 0 (id=6035): syz_emit_ethernet(0x6c, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x40, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x2, 0x0, [0x0], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x18a00, 0x0) io_setup(0x222, &(0x7f0000000180)) prctl$PR_SET_NAME(0x4, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x4, 0x0, 0x2}, 0x18, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) execve(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x40) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a030000089078"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="14ffffffff20050324bd7002fa0800ca0715717ba42389e2a106d72fe77b74f317f75a9f692d7db5f40d688fde234ae63eed16711c987c9fc10ad915ebdaa337b5017017628e326c1accc8777298bdfba29f3a2b050000000000006800bd8516edd65f5f5edf0ad33dd3bf15906cf7917e7287bbb0f770a70716c3b671b654438ab1e9573f1bf0c78208c3e5994db4dd16", @ANYRES64=r3, @ANYRESHEX=r0], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) 11.4256703s ago: executing program 4 (id=6039): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000002380)) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x20000804) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x26c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x144, 0x5, [{{@in=@broadcast, 0x4d5, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in=@multicast1, 0x4d4, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3504, 0x2, 0x2, 0x6, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}, {{@in=@broadcast, 0x4d2, 0x6c}, 0xa, @in=@empty, 0x0, 0x1, 0x0, 0x5, 0x7ff, 0x401, 0x5}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3506, 0x0, 0x3, 0x2, 0x9, 0x101, 0x8}]}]}, 0x26c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b73570000", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r6, 0x7, 0x9, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 11.160140258s ago: executing program 5 (id=6040): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x5}, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fchdir(0xffffffffffffffff) mount_setattr(0xffffffffffffff9c, 0x0, 0x1000, 0x0, 0x0) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) read(r3, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000040), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000000)={0x2, 0x4}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r5, 0x10e, 0x9, &(0x7f0000001e40)=""/4096, &(0x7f0000000040)=0x1000) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200283afffe8000000000000000000000000000bbff0200000000000000000000000000018900000000000000ff01000000000000000000000000000100"/94], 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0xc, 0xfc, @scatter={0x0, 0x0, 0x0}, &(0x7f00000001c0)="08d9558d00006535b7cf70a7", 0x0, 0x7, 0x10004, 0x1, 0x0}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',Qroup_id=', @ANYRESDEC=0x0, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fscontext=staff_u,smackfsroot=},/),hash,defcontext=system_u,\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 9.67723706s ago: executing program 0 (id=6045): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000000c0)={{0x3, 0x2, 0x1, 0x1, 0x4e}, 0x721d, 0x2b508e1b, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x9, 0x4, 0x8}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000340)={0xffffffffffffffff, 0x100, {0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x5, 0xe, 0x1, "bbfdde06ac952d4e53a2870c5442dcfc85105799273945c52e423d0392304187f5ad71a980c752590f5967238005ce019396508ec5485f8d9827cc446408b382", "f51c9d634ebe828018f54b2cba4a76adc9d10450b02a74066df701000000c463a4c5098903729776c215ae8b56cf6e1775f991d7e2ecdae7b868a7773197f094", "fbc0692b19cc593f4ba2c2bd495806530a8526729e290eeb6f33f01dc62e7da8", [0x3, 0x3]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x874fd42a7836ef6d, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000100)) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r8, 0x0, 0xeffd) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}]}]}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48804}, 0x0) 7.046193305s ago: executing program 4 (id=6048): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @mcast2}, 0x1c, 0x0}}], 0x1, 0x60040000) r1 = socket(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000023f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002042, 0x0) 6.229861499s ago: executing program 4 (id=6049): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r1, &(0x7f0000000980)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="c20738ebb4c2595987", 0x9}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000017e7ffff0100000004000000b1f277e8e7e07d40c56ba210dc8dd2725259a21f792bc12e6cdbaa6499dd70466139951161408ff35c08eecff032f50981f7f62c5e47eca58806ac989aab994a53ba857151b0914c8a041345bf3d5ee43feba9fdf1a21e6b7b2738a7d565eb11a13fb84677c87e610783a13e52de8270c4b8d68eb47753d30c726eb045586b4bc31b80f1b42a548f9548c71fceaab632015d7fba2cad214b6eec0eb78ebd6024a95e065d2828d45a64a0f2c22bb490bd8fb81d6c215ad873d9e6"], 0x18}], 0x1, 0x0) 6.130842799s ago: executing program 0 (id=6050): socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) unshare(0x2a020480) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x4, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10000}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7f}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x15}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = socket(0x11, 0x3, 0x7f) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004340)=[{{&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/208, 0xd0}, {&(0x7f00000006c0)=""/75, 0x4b}, {&(0x7f0000000740)=""/227, 0xe3}, {&(0x7f0000000380)=""/35, 0x23}, {&(0x7f0000001a00)=""/177, 0xb1}, {&(0x7f0000000840)=""/63, 0x3f}, {&(0x7f0000001ac0)=""/166, 0xa6}], 0x8, &(0x7f0000001b80)=""/249, 0xf9}, 0xe32}, {{&(0x7f0000001c80)=@phonet, 0x80, &(0x7f0000003e40)=[{&(0x7f0000004400)=""/52, 0x34}, {&(0x7f0000001d00)=""/203, 0xcb}, {&(0x7f0000001e00)=""/59, 0x3b}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x5}, 0x9}, {{&(0x7f0000003ec0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000003f40)=""/187, 0xbb}, {&(0x7f0000004000)=""/226, 0xe2}, {&(0x7f0000004100)=""/196, 0xc4}, {&(0x7f0000004200)=""/146, 0x92}], 0x4, &(0x7f0000004300)=""/44, 0x2c}, 0x7}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x234) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a03000008"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r8, &(0x7f0000000000)={0x11, 0x3, r9, 0x1, 0x8, 0x6, @remote}, 0x14) 6.129829327s ago: executing program 5 (id=6051): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) socket(0x40000000015, 0x805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f0000000380)=@qipcrtr, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)}, {&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f0000000600)=""/71, 0x47}], 0x3, &(0x7f0000000680)=""/246, 0xe2}, 0x400}, {{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000940)=""/130, 0x82}, 0xe3a3}], 0x2, 0x18040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0) r4 = socket(0x11, 0x6, 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) accept4(r1, 0x0, &(0x7f0000000400), 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 5.9002732s ago: executing program 6 (id=6052): r0 = socket$inet6(0xa, 0x80001, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x190) 5.814154749s ago: executing program 3 (id=6053): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58840}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 5.753793402s ago: executing program 4 (id=6054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00S\x8f^\x8c\x89\x13\x06\xa5\xb8O\x9e\x8d\xd8\xd3\x1a^\x82kQ$\xc5]/r\x0flx\xfej\xd4\xeeS\xd6\xfd\x1e\x92\xb2}R\xe9\x9b<#B9E\x18\xb9\xb7\x97\xcc\xbf\xadwNV\x91\x11\xb6\xf0SZ\n\xae\xd8@6w\n0\x00s\xa0\xc9\x87\xc8\x84.k(\xf9\xdf\xaf\x11\xd25\xc4{\x82\xc4B\xac\"\xc1\xa5p$\xa2\xbb\xee\xd1_\xb5\xc9\xcc\xc1\xe4l\xd1\x9ej\xd4\x0f\x91\xb5y\x8a\xb6SX}\x16\x9d\x85\xb7', 0x0) r4 = dup(r3) fanotify_mark(r2, 0x1, 0x48001059, r4, 0x0) fchown(r4, 0x0, 0x0) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="87ac9438c6da5213501247caf29022b2e64e3ed4f7554ca0071770f58ff129f07d0d01c54dc7288857b271d095064b25234bcea46a88b513f86382aad97ef6429fd226187cc3167cb32a11d6a59153e2c4dc16a830ca501bd6e0404db8a291b50a5c73bdb500055fe6caa3b0bc5fb552626ad29e98d5e406b7be346e9f9e001b2116e109243bee74a3f0bf5bebe01c85371b18d095c4c8af2a06000000000000003419d935d30fc7", @ANYRES16=r6, @ANYRES64=r0, @ANYRES16=r0], 0x38}}, 0x8801) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) close(r7) socket(0x2a, 0x2, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r8, 0x2000000, 0xf, &(0x7f0000000000)='\x00', 0x1) 5.648427076s ago: executing program 6 (id=6055): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c, 0x60}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 5.574080998s ago: executing program 3 (id=6056): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40) r4 = eventfd(0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) r6 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r4) r9 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, 0x0) read(r9, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.501807768s ago: executing program 6 (id=6057): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) fchdir(0xffffffffffffffff) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x1000, 0x0, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040), 0x2) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r4, &(0x7f0000000380)=""/144, 0x90) 5.501307349s ago: executing program 4 (id=6058): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000002380)) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x20000804) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x26c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x144, 0x5, [{{@in=@broadcast, 0x4d5, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in=@multicast1, 0x4d4, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3504, 0x2, 0x2, 0x6, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}, {{@in=@broadcast, 0x4d2, 0x6c}, 0xa, @in=@empty, 0x0, 0x1, 0x0, 0x5, 0x7ff, 0x401, 0x5}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3506, 0x0, 0x3, 0x2, 0x9, 0x101, 0x8}]}]}, 0x26c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b73570000", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r6, 0x7, 0x9, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 4.834231608s ago: executing program 5 (id=6059): syz_usb_connect(0x5, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x80000000) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="185a0000002000002800128008000100736974001c00028006000d000000000008000200ac14141206000e0009000000"], 0x48}, 0x1, 0x0, 0x0, 0x40085}, 0x41810) modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x670c7400, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x4480, 0x0) syz_pidfd_open(0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r5}) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r5, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x2, 0x0, @local, 0x200009}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0xd}, 0x9}, 0x13) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x1, 0x0, &(0x7f0000048000), 0x0) 4.268122192s ago: executing program 3 (id=6060): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1c4, 0x27, 0x800, 0x70bd26, 0x25dfdbfd, {0x2}, [@nested={0xa0, 0x49, 0x0, 0x1, [@typed={0x14, 0x118, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="fea74f09d0409ff17cc0f166ee8627cdfd097c49200591286eec17091cf81b783f8ad24a1586874c59034ea6db70c994bc93a1e67b83840e41602bed39e80c7876ab6793c368fedca6c1cd93b6d27960a469ca23b4ebe05c8433ea3b88999d65f00acd3eddffc5b30d6b905afdfbb41502aa71b38d90f66d6f5b7723fbd7232bee42d6d062737513"]}, @nested={0x4, 0xca}, @typed={0x80, 0x57, 0x0, 0x0, @binary="9e629ba3897db0478c842f78bfa423b3c566752d143efcfd4a34533282b1377e4d11e8b4f3dae88fbc90a604463a7fe20042808103211813d39100c2f8c0174feb4860a477b2e063ca7c15dfd5cd80c9ef45cf8def1825f5457a3bb30fe24a18d032705ed36fd56379c1d02e9390ff76c252ebf01156986ba4e92255"}, @generic="11dba9464b162fd0ebbcc5bb2f0477d60769a54d8f39102beb31daaab271e101a19a02ba82f9be5d0a6e5ed8d60ee52e8ba7cc5bafcd5ce18180f3186056f9a467665e146dedac2d2b56116af81f4ee5d71d032ee2155445eb311ddc9ec116a2a936b7dc3309c16c591c2454a2a8223c1630c85a", @typed={0x5, 0x16, 0x0, 0x0, @str='\x00'}, @generic="bec6ae61ebb3d4c4e0d47ef622"]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20044880}, 0x44) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x800, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x40, 0x1200) 3.857740659s ago: executing program 3 (id=6061): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x40, 0x9, 0x2e, {0x2e, 0xe, "707c04f5bdda6356501944016e07db7c0c92d413ad2df3a10f6c7d57912e46f7ba670d8543d07935e25cd9a4"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3845}}}, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0xa, 0xb9, "a1bb1e3c1afc325a1dd14dbc109b7c449de1dcea9cdf8133eb313bd33dc49459738303a92c6afbc21d4a1c68c144a7e607a6f89a7cc9cc7c4691600dfbd652b8fab3d0a25623cd1bbfa335b0055c5d6923d45441b2c6b101a2d57db15dba10e07d12ee0cc9937c4c9f9acd5f03138d496190a0b68e1065ab5e895b614915fbc9883f4b185ea98d88644a0ac066c587a87f94f17748dd7d65f7370f769a69cee66905b1e87e2f9e8d0e6d4fb1ae8508cdb7830a48f9c05c5e06"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x9d}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "6e83b3"}, &(0x7f0000000400)={0x20, 0x82, 0x1, "17"}, &(0x7f00000004c0)={0x20, 0x83, 0x1, "8e"}, &(0x7f0000000500)={0x20, 0x84, 0x2, "3cd8"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "c3a00a"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0x5, 0x5, "8631dc94cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000)="3dd70c1e952487e1f2385812368cd1e715b5ced4d58bce87c4731e27beff71687e6494eba7182571bce110714cf04b3a88e6198fdf1ed9df9601b16bd17e70b9b7ba88c4ad05c79b1dce5cbbc29875d9aa732cd2b351cc57e9645cd265300ba75a8ddd35e75e668b20bce6a3de3f04f9348a65b70edfa1944ba0bbba7da2c679583045a5cae60c2757855b150ab62d0e4a5effbce18f837b30a889333a8045d80484dbeb9c7be2f72d8500bcbed99eaa17d7d127ace04aead1a549c4b40b405262ce294acdbf378a0c43e161d84631f132fe57268858574f3bf6b7de", 0xdc, r1}, 0x68) 3.138121559s ago: executing program 6 (id=6062): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x108}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x10132, 0x80}}}}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x50}}, 0x24000840) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r8 = fanotify_init(0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fanotify_mark(r8, 0x1, 0x40001043, r6, 0x0) vmsplice(r6, &(0x7f0000000700)=[{&(0x7f0000000500)='k', 0x1}], 0x1, 0x1) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0xceaf, 0x44008002, 0x9, 0x2, 0x4, 0x6, 0x0, 0x0, 0x80, 0x800}}, 0x50) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = dup(r5) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x9a52, 0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0x9, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r9, 0x0, 0x0, 0x0, 0x80000}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x14, 0x19, 0x6, 0x9, 0x2010, 0xffffffffffffffff, 0x1, '\x00', r4, r9, 0x2, 0x1, 0x2}, 0x50) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r12, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.620863163s ago: executing program 0 (id=6063): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, 0x0, 0x0) unshare(0x24040000) unshare(0x2c020400) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x44, &(0x7f00000001c0)={0x1f, 0x3, 0x17, 0x1}, 0x50, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) fanotify_init(0x4000, 0x0) unshare(0x2040400) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000001090400eb010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) 2.595137048s ago: executing program 6 (id=6064): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r1, &(0x7f0000000980)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="c20738ebb4c2595987", 0x9}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000017e7ffff0100000004000000b1f277e8e7e07d40c56ba210dc8dd2725259a21f792bc12e6cdbaa6499dd70466139951161408ff35c08eecff032f50981f7f62c5e47eca58806ac989aab994a53ba857151b0914c8a041345bf3d5ee43feba9fdf1a21e6b7b2738a7d565eb11a13fb84677c87e610783a13e52de8270c4b8d68eb47753d30c726eb045586b4bc31b80f1b42a548f9548c71fceaab632015d7fba2cad214b6eec0eb78ebd6024a95e065d2828d45a64a0f2c22bb490bd8fb81d6c215ad873d9e6"], 0x18}], 0x1, 0x0) 2.329869537s ago: executing program 6 (id=6065): openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket(0x16, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, 0x0, 0x0, 0x20044000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.599131305s ago: executing program 5 (id=6066): socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x800, 0x0, 0x379}, &(0x7f0000000040), &(0x7f0000000080)) r2 = getpgrp(0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000008c0)={0x1c, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}], 0x1}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {0x3, 0xfff9}, {0x2, 0x3}}}, 0x24}}, 0x0) 402.770205ms ago: executing program 3 (id=6067): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58840}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 208.454303ms ago: executing program 4 (id=6068): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) readlinkat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)=""/231, 0xe7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000019140)={{{@in6=@private2, @in=@dev}}, {{@in6=@private1}, 0x0, @in6=@private0}}, &(0x7f00000190c0)=0xe8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) io_setup(0x10000, &(0x7f0000000800)) io_setup(0x9, &(0x7f0000002e40)) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x20000800) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 0s ago: executing program 3 (id=6069): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRESOCT], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000"/207, @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = fsopen(&(0x7f0000000080)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000280)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x27}, 0xfffffffd}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0xcb, 0xe7a, 0x2}, 0x10) socket$kcm(0x10, 0x2, 0x0) unshare(0x20060400) bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) kernel console output (not intermixed with test programs): =1326 audit(1762567331.122:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27067 comm="syz.5.5587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f322298f6c9 code=0x7ffc0000 [ 1737.631904][ C1] vkms_vblank_simulate: vblank timer overrun [ 1737.660147][ T30] audit: type=1326 audit(1762567331.122:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27067 comm="syz.5.5587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322298f6c9 code=0x7ffc0000 [ 1737.682741][ C1] vkms_vblank_simulate: vblank timer overrun [ 1737.860167][ T30] audit: type=1326 audit(1762567331.122:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27067 comm="syz.5.5587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322298f6c9 code=0x7ffc0000 [ 1737.882733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1738.123930][ T1007] tipc: Disabling bearer [ 1739.008866][ T1007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.027265][ T1007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.040641][T23478] Bluetooth: hci0: command tx timeout [ 1739.094818][ T1007] bond0 (unregistering): Released all slaves [ 1739.304417][ T1007] bond1 (unregistering): Released all slaves [ 1739.634077][ T1007] : left promiscuous mode [ 1739.916659][ T1007] tipc: Disabling bearer [ 1739.932921][ T1007] tipc: Left network mode [ 1740.027320][T27106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5591'. [ 1740.310133][T13875] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1740.546290][T13875] usb 4-1: Using ep0 maxpacket: 16 [ 1740.708220][T13875] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 1740.764354][T13875] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1740.840116][T13875] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1740.862448][T13875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.968319][T13875] usb 4-1: config 0 descriptor?? [ 1741.111723][T27070] chnl_net:caif_netlink_parms(): no params data found [ 1741.120277][T23478] Bluetooth: hci0: command tx timeout [ 1741.351914][T27130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5594'. [ 1741.618977][T27136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1741.638889][T27136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1741.825593][ T1007] hsr_slave_0: left promiscuous mode [ 1741.832375][ T1007] hsr_slave_1: left promiscuous mode [ 1741.892883][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1741.934193][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1741.960272][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1741.985131][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1742.030181][T13888] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1742.052670][ T1007] veth1_macvtap: left promiscuous mode [ 1742.068098][ T1007] veth0_macvtap: left promiscuous mode [ 1742.074262][ T1007] veth1_vlan: left promiscuous mode [ 1742.079739][ T1007] veth0_vlan: left promiscuous mode [ 1742.162666][T13888] usb 1-1: device descriptor read/64, error -71 [ 1742.401939][T13888] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1742.540129][T13888] usb 1-1: device descriptor read/64, error -71 [ 1742.670468][T13888] usb usb1-port1: attempt power cycle [ 1743.011117][T13888] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1743.052968][T13888] usb 1-1: device descriptor read/8, error -71 [ 1743.191687][T13875] usbhid 4-1:0.0: can't add hid device: -71 [ 1743.197813][T13875] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1743.206582][T23478] Bluetooth: hci0: command tx timeout [ 1743.236999][T13875] usb 4-1: USB disconnect, device number 110 [ 1743.320490][T13888] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1743.542326][T13888] usb 1-1: device not accepting address 100, error -71 [ 1743.631487][T13888] usb usb1-port1: unable to enumerate USB device [ 1744.139436][ T1007] team0 (unregistering): Port device team_slave_1 removed [ 1744.432894][ T1007] team0 (unregistering): Port device team_slave_0 removed [ 1745.201391][T27163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.214035][T27163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.282074][T23478] Bluetooth: hci0: command tx timeout [ 1745.292104][T27163] misc userio: Begin command sent, but we're already running [ 1745.950871][T27070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.962159][T27070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.970415][T27070] bridge_slave_0: entered allmulticast mode [ 1745.978479][T27070] bridge_slave_0: entered promiscuous mode [ 1746.004877][T27070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1746.015029][T27070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.023651][T27070] bridge_slave_1: entered allmulticast mode [ 1746.045470][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 1746.045485][ T30] audit: type=1326 audit(1762567340.142:7552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27168 comm="syz.3.5600" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde25d8f6c9 code=0x0 [ 1746.075457][T27070] bridge_slave_1: entered promiscuous mode [ 1746.148407][T27070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1746.245372][T27070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1746.424228][T27070] team0: Port device team_slave_0 added [ 1746.483433][T27070] team0: Port device team_slave_1 added [ 1746.871320][T27185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5604'. [ 1746.912964][T27185] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5604'. [ 1746.948637][T27070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1746.981829][T27070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1747.050239][T27070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1747.300073][T27070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1747.346838][T27070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1747.450228][T27070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1747.755588][T27070] hsr_slave_0: entered promiscuous mode [ 1747.821553][T13911] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1747.833639][T27070] hsr_slave_1: entered promiscuous mode [ 1747.881299][T27070] debugfs: 'hsr0' already exists in 'hsr' [ 1747.887101][T27070] Cannot create hsr debugfs directory [ 1748.115733][T13911] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1748.190495][T13911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1748.245179][T13911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1748.273380][T13911] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1748.330297][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1748.341809][T13911] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1748.389894][T13911] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1748.460075][T13911] usb 4-1: Manufacturer: syz [ 1748.511273][T13911] usb 4-1: config 0 descriptor?? [ 1748.965021][T27201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1749.006652][T27201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1749.106259][T13911] usbhid 4-1:0.0: can't add hid device: -71 [ 1749.117784][T13911] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1749.131847][T13911] usb 4-1: USB disconnect, device number 111 [ 1749.260244][ T5893] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 1749.355130][T27070] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1749.384386][T27070] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1749.434845][T27070] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1749.455478][ T5893] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1749.476443][T27070] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1749.500384][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1749.550275][ T5893] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1749.583252][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1749.615323][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1749.694552][ T5893] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1749.730420][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1749.780143][ T5893] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1749.853167][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1749.885692][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1749.928364][ T5893] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1749.939939][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1749.951780][ T5893] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1749.964013][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1749.975590][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1750.037207][ T5893] usb 1-1: string descriptor 0 read error: -22 [ 1750.052229][T27070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.066433][ T5893] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1750.100575][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.122346][T27070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1750.161237][ T5893] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1750.180623][T27120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.187794][T27120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1750.289459][T16656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.296694][T16656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1750.383173][T27218] misc userio: Begin command sent, but we're already running [ 1750.449760][ T30] audit: type=1326 audit(1762567344.542:7553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27244 comm="syz.3.5613" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde25d8f6c9 code=0x0 [ 1750.538282][T27070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1750.620610][ T5893] usb 1-1: USB disconnect, device number 101 [ 1750.709822][T27070] veth0_vlan: entered promiscuous mode [ 1750.737449][T27070] veth1_vlan: entered promiscuous mode [ 1750.791546][T27253] netlink: 'syz.3.5615': attribute type 1 has an invalid length. [ 1750.800636][T27070] veth0_macvtap: entered promiscuous mode [ 1750.927406][T27253] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1751.062890][T27259] input: syz1 as /devices/virtual/input/input157 [ 1751.144687][T27263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5616'. [ 1751.489740][T27070] veth1_macvtap: entered promiscuous mode [ 1751.749940][T27271] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5618'. [ 1751.805216][T27272] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5617'. [ 1752.056699][T27070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1752.113587][T27070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1752.380299][T13888] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1752.389220][T16656] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.454033][T16656] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.470671][T16656] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.490791][T16656] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.544149][T13888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1752.555642][T13888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1752.609583][T13888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1752.641327][T13888] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1752.670317][T13888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.730854][T13888] usb 4-1: config 0 descriptor?? [ 1752.951942][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.959842][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.072070][T16656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.079954][T16656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.237473][T13888] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1753.305727][T27293] syzkaller0: entered promiscuous mode [ 1753.311394][T27293] syzkaller0: entered allmulticast mode [ 1753.839044][T27274] usb 4-1: string descriptor 0 read error: -71 [ 1753.890312][T13875] usb 4-1: USB disconnect, device number 112 [ 1754.002759][T27299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1754.030442][T27299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1754.103711][T27299] misc userio: Begin command sent, but we're already running [ 1754.590709][ T5893] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1754.738199][T27318] program syz.0.5629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1754.752552][ T5893] usb 6-1: not running at top speed; connect to a high speed hub [ 1754.764693][ T5893] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 1096, setting to 64 [ 1754.776167][ T5893] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1754.788079][ T5893] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1754.929623][T27319] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1755.010643][ T5893] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1755.019928][ T5893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1755.031836][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.070269][ T5893] usb 6-1: Product: syz [ 1755.079144][ T5893] usb 6-1: Manufacturer: syz [ 1755.089525][ T5893] usb 6-1: SerialNumber: syz [ 1755.157159][T27304] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1755.165536][T27304] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1755.643474][T27326] FAULT_INJECTION: forcing a failure. [ 1755.643474][T27326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1755.681416][T27326] CPU: 0 UID: 0 PID: 27326 Comm: syz.3.5630 Not tainted syzkaller #0 PREEMPT(full) [ 1755.681483][T27326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1755.681501][T27326] Call Trace: [ 1755.681516][T27326] [ 1755.681526][T27326] dump_stack_lvl+0x189/0x250 [ 1755.681560][T27326] ? __pfx____ratelimit+0x10/0x10 [ 1755.681585][T27326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1755.681618][T27326] ? __pfx__printk+0x10/0x10 [ 1755.681709][T27326] ? __might_fault+0xb0/0x130 [ 1755.681741][T27326] should_fail_ex+0x414/0x560 [ 1755.681768][T27326] _copy_from_user+0x2d/0xb0 [ 1755.681788][T27326] ___sys_recvmsg+0x12e/0x510 [ 1755.681819][T27326] ? __pfx____sys_recvmsg+0x10/0x10 [ 1755.681859][T27326] ? __might_fault+0xb0/0x130 [ 1755.681882][T27326] do_recvmmsg+0x307/0x770 [ 1755.681905][T27326] ? __pfx_do_recvmmsg+0x10/0x10 [ 1755.681931][T27326] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1755.681967][T27326] __x64_sys_recvmmsg+0x190/0x240 [ 1755.681986][T27326] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1755.682006][T27326] ? do_syscall_64+0xbe/0xfa0 [ 1755.682030][T27326] do_syscall_64+0xfa/0xfa0 [ 1755.682051][T27326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.682066][T27326] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1755.682081][T27326] ? clear_bhb_loop+0x60/0xb0 [ 1755.682098][T27326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.682112][T27326] RIP: 0033:0x7fde25d8f6c9 [ 1755.682126][T27326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1755.682139][T27326] RSP: 002b:00007fde26cbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1755.682155][T27326] RAX: ffffffffffffffda RBX: 00007fde25fe5fa0 RCX: 00007fde25d8f6c9 [ 1755.682166][T27326] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 1755.682176][T27326] RBP: 00007fde26cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1755.682185][T27326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1755.682194][T27326] R13: 00007fde25fe6038 R14: 00007fde25fe5fa0 R15: 00007fde2610fa28 [ 1755.682219][T27326] [ 1755.953761][T27329] netlink: 'syz.4.5631': attribute type 1 has an invalid length. [ 1756.196942][ T5893] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1756.310330][ T5893] usb 6-1: USB disconnect, device number 48 [ 1757.176929][ T5893] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1757.370391][ T5893] usb 1-1: device descriptor read/64, error -71 [ 1757.610178][ T5893] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1757.860187][ T5893] usb 1-1: device descriptor read/64, error -71 [ 1757.970531][ T5893] usb usb1-port1: attempt power cycle [ 1758.320301][ T5893] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 1758.355578][ T5893] usb 1-1: device descriptor read/8, error -71 [ 1758.600936][ T5893] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 1758.632712][ T5893] usb 1-1: device descriptor read/8, error -71 [ 1758.745095][ T5893] usb usb1-port1: unable to enumerate USB device [ 1758.790167][T13875] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 1758.962118][T13875] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1758.969797][T13875] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1758.981675][T13875] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1758.993831][T13875] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1759.005140][T13875] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1759.017512][T13875] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1759.025190][T13875] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1759.036221][T13875] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1759.048006][T13875] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1759.059687][T13875] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1759.074047][T13875] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1759.081689][T13875] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1759.092512][T13875] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1759.104387][T13875] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1759.115653][T13875] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1759.130751][T13875] usb 7-1: string descriptor 0 read error: -22 [ 1759.137192][T13875] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1759.146679][T13875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.183473][T13875] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1759.395293][T27347] misc userio: Begin command sent, but we're already running [ 1759.612747][T13897] usb 7-1: USB disconnect, device number 2 [ 1759.850916][ T30] audit: type=1326 audit(1762567353.952:7554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27350 comm="syz.0.5639" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8dd9b8f6c9 code=0x0 [ 1759.966428][T27354] syzkaller0: entered promiscuous mode [ 1759.972496][T27354] syzkaller0: entered allmulticast mode [ 1759.984334][T27349] FAULT_INJECTION: forcing a failure. [ 1759.984334][T27349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1760.002904][T27349] CPU: 0 UID: 0 PID: 27349 Comm: syz.6.5638 Not tainted syzkaller #0 PREEMPT(full) [ 1760.002935][T27349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1760.002949][T27349] Call Trace: [ 1760.002958][T27349] [ 1760.002968][T27349] dump_stack_lvl+0x189/0x250 [ 1760.003003][T27349] ? __pfx____ratelimit+0x10/0x10 [ 1760.003032][T27349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1760.003061][T27349] ? __pfx__printk+0x10/0x10 [ 1760.003096][T27349] should_fail_ex+0x414/0x560 [ 1760.003134][T27349] _copy_to_user+0x31/0xb0 [ 1760.003163][T27349] simple_read_from_buffer+0xe1/0x170 [ 1760.003201][T27349] proc_fail_nth_read+0x1b3/0x220 [ 1760.003231][T27349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1760.003260][T27349] ? rw_verify_area+0x2a6/0x4d0 [ 1760.003288][T27349] ? __lock_acquire+0xab9/0xd20 [ 1760.003305][T27349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1760.003333][T27349] vfs_read+0x200/0xa30 [ 1760.003358][T27349] ? fdget_pos+0x247/0x320 [ 1760.003381][T27349] ? __pfx___mutex_lock+0x10/0x10 [ 1760.003414][T27349] ? __pfx_vfs_read+0x10/0x10 [ 1760.003443][T27349] ? __fget_files+0x2a/0x420 [ 1760.003468][T27349] ? __fget_files+0x3a0/0x420 [ 1760.003485][T27349] ? __fget_files+0x2a/0x420 [ 1760.003514][T27349] ksys_read+0x145/0x250 [ 1760.003543][T27349] ? __pfx_ksys_read+0x10/0x10 [ 1760.003574][T27349] ? do_syscall_64+0xbe/0xfa0 [ 1760.003606][T27349] do_syscall_64+0xfa/0xfa0 [ 1760.003633][T27349] ? lockdep_hardirqs_on+0x9c/0x150 [ 1760.003661][T27349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.003681][T27349] ? clear_bhb_loop+0x60/0xb0 [ 1760.003707][T27349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.003726][T27349] RIP: 0033:0x7ff258f8e0dc [ 1760.003745][T27349] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1760.003761][T27349] RSP: 002b:00007ff259f14030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1760.003782][T27349] RAX: ffffffffffffffda RBX: 00007ff2591e5fa0 RCX: 00007ff258f8e0dc [ 1760.003797][T27349] RDX: 000000000000000f RSI: 00007ff259f140a0 RDI: 000000000000000b [ 1760.003809][T27349] RBP: 00007ff259f14090 R08: 0000000000000000 R09: 0000000000000000 [ 1760.003822][T27349] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1760.003835][T27349] R13: 00007ff2591e6038 R14: 00007ff2591e5fa0 R15: 00007ff25930fa28 [ 1760.003882][T27349] [ 1760.896088][T27380] vlan2: entered allmulticast mode [ 1760.903713][T27380] veth0_to_bond: entered allmulticast mode [ 1760.956216][ T5893] usb 5-1: USB disconnect, device number 90 [ 1762.343943][T27395] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5646'. [ 1762.537471][T27398] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1762.555093][T27398] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1762.573804][T27398] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1762.599137][T27398] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1762.609758][T27398] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1763.530154][T19672] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1763.661310][T27403] chnl_net:caif_netlink_parms(): no params data found [ 1763.940151][T19672] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1763.976862][T19672] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.035208][T19672] usb 6-1: Product: syz [ 1764.060232][T19672] usb 6-1: Manufacturer: syz [ 1764.064898][T19672] usb 6-1: SerialNumber: syz [ 1764.076713][T27433] usb usb8: usbfs: process 27433 (syz.0.5653) did not claim interface 0 before use [ 1764.098437][T27403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.130746][T27403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.138166][T27403] bridge_slave_0: entered allmulticast mode [ 1764.155542][T27403] bridge_slave_0: entered promiscuous mode [ 1764.163101][T19672] usb 6-1: config 0 descriptor?? [ 1764.178016][T27403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.196039][T27403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.200203][T19672] hub 6-1:0.0: bad descriptor, ignoring hub [ 1764.220234][T19672] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1764.228338][T19672] f81232 6-1:0.0: f81534a converter detected [ 1764.255462][T27403] bridge_slave_1: entered allmulticast mode [ 1764.331089][T27403] bridge_slave_1: entered promiscuous mode [ 1764.358086][T27442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5652'. [ 1764.394418][T19672] usb 6-1: f81534a converter now attached to ttyUSB0 [ 1764.506320][T27403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1764.522868][T27403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1764.668481][T13888] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1764.687472][T27403] team0: Port device team_slave_0 added [ 1764.712592][T27403] team0: Port device team_slave_1 added [ 1764.721465][T23478] Bluetooth: hci4: command tx timeout [ 1764.864787][T27403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1764.910165][T13888] usb 4-1: Using ep0 maxpacket: 16 [ 1764.915562][T27403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1764.946367][T13888] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 1764.984888][T13888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1764.987986][T27403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1765.009697][T27403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1765.017476][T27403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1765.065336][T13888] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1765.085004][T13888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.106644][T27403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1765.138988][T27456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5656'. [ 1765.164243][T13888] usb 4-1: config 0 descriptor?? [ 1765.336754][T27459] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5657'. [ 1765.674576][T27456] team8: entered promiscuous mode [ 1765.685358][T27456] team8: entered allmulticast mode [ 1766.090363][T19672] usb 6-1: USB disconnect, device number 49 [ 1766.109923][T19672] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 1766.137530][T27403] hsr_slave_0: entered promiscuous mode [ 1766.157993][T19672] f81232 6-1:0.0: device disconnected [ 1766.177560][T27403] hsr_slave_1: entered promiscuous mode [ 1766.199854][T27403] debugfs: 'hsr0' already exists in 'hsr' [ 1766.223697][T27403] Cannot create hsr debugfs directory [ 1766.805682][T23478] Bluetooth: hci4: command tx timeout [ 1766.970464][T27480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1766.978718][T27480] IPv6: NLM_F_CREATE should be set when creating new route [ 1766.986120][T27480] IPv6: NLM_F_CREATE should be set when creating new route [ 1767.815436][T27487] netlink: 'syz.5.5661': attribute type 3 has an invalid length. [ 1767.823763][T27487] netlink: 'syz.5.5661': attribute type 2 has an invalid length. [ 1767.976797][T13888] usbhid 4-1:0.0: can't add hid device: -71 [ 1767.988169][T13888] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1768.018395][T13888] usb 4-1: USB disconnect, device number 113 [ 1768.235502][T27403] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.880257][T23478] Bluetooth: hci4: command tx timeout [ 1769.097525][T27403] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.280625][T27472] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1769.360325][T23478] Bluetooth: hci2: command 0x0406 tx timeout [ 1769.454494][T27403] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.458720][T27507] fuse: Bad value for 'fd' [ 1769.493127][T27472] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1769.539920][T27472] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1769.570318][T27472] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1769.615344][ T30] audit: type=1800 audit(1762567363.702:7555): pid=27510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5664" name="file1" dev="tmpfs" ino=2885 res=0 errno=0 [ 1769.625905][T27472] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1769.646637][T27472] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1769.776690][T27472] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1769.983183][T27403] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.004286][T27472] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1770.017389][T27472] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1770.077299][T27472] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1770.104979][T27513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5666'. [ 1770.214168][T27513] FAULT_INJECTION: forcing a failure. [ 1770.214168][T27513] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.242604][T27513] CPU: 0 UID: 0 PID: 27513 Comm: syz.3.5666 Not tainted syzkaller #0 PREEMPT(full) [ 1770.242634][T27513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1770.242648][T27513] Call Trace: [ 1770.242658][T27513] [ 1770.242667][T27513] dump_stack_lvl+0x189/0x250 [ 1770.242701][T27513] ? __pfx____ratelimit+0x10/0x10 [ 1770.242731][T27513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1770.242758][T27513] ? __pfx__printk+0x10/0x10 [ 1770.242785][T27513] ? __pfx___might_resched+0x10/0x10 [ 1770.242815][T27513] should_fail_ex+0x414/0x560 [ 1770.242852][T27513] should_failslab+0xa8/0x100 [ 1770.242876][T27513] __kmalloc_noprof+0xcb/0x7f0 [ 1770.242905][T27513] ? bond_update_slave_arr+0x11f/0xc10 [ 1770.242945][T27513] bond_update_slave_arr+0x11f/0xc10 [ 1770.242979][T27513] ? queue_delayed_work_on+0x1f7/0x280 [ 1770.243008][T27513] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1770.243032][T27513] ? __pfx_bond_update_slave_arr+0x10/0x10 [ 1770.243072][T27513] ? bond_alb_initialize+0x4e1/0x600 [ 1770.243107][T27513] bond_open+0xd57/0xed0 [ 1770.243138][T27513] ? __pfx_bond_open+0x10/0x10 [ 1770.243157][T27513] ? ip6_route_dev_notify+0x9a/0x5b0 [ 1770.243196][T27513] ? notifier_call_chain+0x3bf/0x3e0 [ 1770.243230][T27513] __dev_open+0x470/0x880 [ 1770.243265][T27513] ? __pfx___dev_open+0x10/0x10 [ 1770.243305][T27513] __dev_change_flags+0x1ea/0x6d0 [ 1770.243334][T27513] ? __pfx___dev_change_flags+0x10/0x10 [ 1770.243365][T27513] netif_change_flags+0x88/0x1a0 [ 1770.243392][T27513] do_setlink+0xc55/0x41c0 [ 1770.243412][T27513] ? rcu_is_watching+0x15/0xb0 [ 1770.243438][T27513] ? __schedule+0x17ae/0x4cc0 [ 1770.243470][T27513] ? __lock_acquire+0xab9/0xd20 [ 1770.243492][T27513] ? __pfx_do_setlink+0x10/0x10 [ 1770.243514][T27513] ? __asan_memset+0x22/0x50 [ 1770.243540][T27513] ? bond_opt_parse+0x488/0x870 [ 1770.243577][T27513] ? __pfx_bond_opt_parse+0x10/0x10 [ 1770.243607][T27513] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1770.243634][T27513] ? lockdep_hardirqs_on+0x9c/0x150 [ 1770.243663][T27513] ? bond_option_miimon_set+0x270/0x720 [ 1770.243701][T27513] ? __bond_opt_set+0x446/0xee0 [ 1770.243733][T27513] ? bond_changelink+0x23c8/0x2700 [ 1770.243771][T27513] ? __pfx_bond_changelink+0x10/0x10 [ 1770.243801][T27513] ? __pfx___mutex_lock+0x10/0x10 [ 1770.243842][T27513] ? ns_capable+0x8a/0xf0 [ 1770.243866][T27513] ? rtnl_link_get_net_capable+0x16a/0x350 [ 1770.243892][T27513] rtnl_newlink+0x1619/0x1c80 [ 1770.243922][T27513] ? netlink_deliver_tap+0x19c/0x1b0 [ 1770.243957][T27513] ? __pfx_rtnl_newlink+0x10/0x10 [ 1770.244017][T27513] ? kasan_quarantine_put+0xdd/0x220 [ 1770.244047][T27513] ? lockdep_hardirqs_on+0x9c/0x150 [ 1770.244083][T27513] ? nlmon_xmit+0xb0/0x100 [ 1770.244107][T27513] ? kmem_cache_free+0x19b/0x690 [ 1770.244146][T27513] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1770.244166][T27513] ? lockdep_hardirqs_on+0x9c/0x150 [ 1770.244206][T27513] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1770.244228][T27513] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1770.244255][T27513] ? __dev_queue_xmit+0x27b/0x3b50 [ 1770.244280][T27513] ? __dev_queue_xmit+0x27b/0x3b50 [ 1770.244302][T27513] ? __dev_queue_xmit+0x27b/0x3b50 [ 1770.244327][T27513] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1770.244350][T27513] ? kasan_save_track+0x3e/0x80 [ 1770.244378][T27513] ? __kasan_slab_alloc+0x6c/0x80 [ 1770.244414][T27513] ? __lock_acquire+0xab9/0xd20 [ 1770.244463][T27513] ? __pfx_rtnl_newlink+0x10/0x10 [ 1770.244494][T27513] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1770.244530][T27513] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1770.244561][T27513] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1770.244591][T27513] ? ref_tracker_free+0x63a/0x7d0 [ 1770.244613][T27513] ? __asan_memcpy+0x40/0x70 [ 1770.244640][T27513] ? __pfx_ref_tracker_free+0x10/0x10 [ 1770.244674][T27513] netlink_rcv_skb+0x208/0x470 [ 1770.244707][T27513] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1770.244742][T27513] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1770.244788][T27513] ? netlink_deliver_tap+0x2e/0x1b0 [ 1770.244817][T27513] netlink_unicast+0x82f/0x9e0 [ 1770.244857][T27513] ? __pfx_netlink_unicast+0x10/0x10 [ 1770.244890][T27513] ? netlink_sendmsg+0x642/0xb30 [ 1770.244908][T27513] ? skb_put+0x11b/0x210 [ 1770.244932][T27513] netlink_sendmsg+0x805/0xb30 [ 1770.244965][T27513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1770.244991][T27513] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1770.245026][T27513] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1770.245046][T27513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1770.245068][T27513] __sock_sendmsg+0x21c/0x270 [ 1770.245101][T27513] ____sys_sendmsg+0x505/0x830 [ 1770.245130][T27513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1770.245164][T27513] ? import_iovec+0x74/0xa0 [ 1770.245202][T27513] ___sys_sendmsg+0x21f/0x2a0 [ 1770.245228][T27513] ? __pfx____sys_sendmsg+0x10/0x10 [ 1770.245292][T27513] ? __fget_files+0x2a/0x420 [ 1770.245312][T27513] ? __fget_files+0x3a0/0x420 [ 1770.245344][T27513] __x64_sys_sendmsg+0x19b/0x260 [ 1770.245371][T27513] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1770.245414][T27513] ? do_syscall_64+0xbe/0xfa0 [ 1770.245448][T27513] do_syscall_64+0xfa/0xfa0 [ 1770.245475][T27513] ? lockdep_hardirqs_on+0x9c/0x150 [ 1770.245504][T27513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.245526][T27513] ? clear_bhb_loop+0x60/0xb0 [ 1770.245552][T27513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.245573][T27513] RIP: 0033:0x7fde25d8f6c9 [ 1770.245593][T27513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1770.245611][T27513] RSP: 002b:00007fde26cbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1770.245635][T27513] RAX: ffffffffffffffda RBX: 00007fde25fe5fa0 RCX: 00007fde25d8f6c9 [ 1770.245651][T27513] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1770.245665][T27513] RBP: 00007fde26cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1770.245679][T27513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1770.245692][T27513] R13: 00007fde25fe6038 R14: 00007fde25fe5fa0 R15: 00007fde2610fa28 [ 1770.245727][T27513] [ 1770.827073][T27513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1770.947075][T27521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5667'. [ 1770.957064][T27521] openvswitch: netlink: Message has 16 unknown bytes. [ 1771.110692][T27403] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1771.166102][T27532] fuse: Unknown parameter 'rootmode00000000000000000060000' [ 1771.179507][T27403] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1771.280105][T27403] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1771.294188][T27403] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1771.373190][T23478] Bluetooth: hci5: command 0x0405 tx timeout [ 1771.416144][T27403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1771.486619][T27403] 8021q: adding VLAN 0 to HW filter on device team0 [ 1771.558574][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.565800][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1771.592803][T16656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.600067][T16656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1771.613558][T23478] Bluetooth: hci3: command 0x0405 tx timeout [ 1771.613590][T27398] Bluetooth: hci1: command 0x0406 tx timeout [ 1771.680674][T27398] Bluetooth: hci0: command 0x0c1a tx timeout [ 1772.068401][T27403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1772.080522][T27398] Bluetooth: hci4: command 0x0c1a tx timeout [ 1772.622312][T27403] veth0_vlan: entered promiscuous mode [ 1772.664873][T27403] veth1_vlan: entered promiscuous mode [ 1772.948732][T27403] veth0_macvtap: entered promiscuous mode [ 1772.969065][T27403] veth1_macvtap: entered promiscuous mode [ 1773.017092][T27403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1773.119526][T27403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1773.177978][T16656] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.327419][T16656] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.431740][T16656] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.502460][ T7599] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.650130][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1773.680578][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1773.759934][ T7599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1773.760335][T27398] Bluetooth: hci0: command 0x0c1a tx timeout [ 1773.810191][ T7599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1774.171019][T27398] Bluetooth: hci4: command 0x0c1a tx timeout [ 1774.348210][T17720] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1774.390955][T27565] ipip0: entered promiscuous mode [ 1774.396178][T27565] ipip0: entered allmulticast mode [ 1774.481013][T13875] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1774.640829][T13875] usb 6-1: Using ep0 maxpacket: 8 [ 1774.651418][T17720] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1774.682292][T13875] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1774.695866][T17720] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1774.720736][T13875] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1774.730187][T17720] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1774.743455][T13875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.751864][T17720] usb 5-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 1774.771091][T13875] usb 6-1: Product: syz [ 1774.779130][T17720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.790458][T13875] usb 6-1: Manufacturer: syz [ 1774.807672][T13875] usb 6-1: SerialNumber: syz [ 1774.825178][T17720] usb 5-1: config 0 descriptor?? [ 1774.834918][T13875] usb 6-1: config 0 descriptor?? [ 1774.874034][T13875] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1774.898922][T13875] usb 6-1: selecting invalid altsetting 1 [ 1775.091018][T17720] usbhid 5-1:0.0: can't add hid device: -71 [ 1775.097538][T17720] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1775.109773][T17720] usb 5-1: USB disconnect, device number 91 [ 1775.438274][T13875] gspca_stk014: init reg: 0x00 [ 1775.453119][T13875] stk014 6-1:0.0: probe with driver stk014 failed with error -5 [ 1775.652035][ T5893] usb 6-1: USB disconnect, device number 50 [ 1775.865411][T27398] Bluetooth: hci0: command 0x0c1a tx timeout [ 1775.983491][T27585] vlan2: entered allmulticast mode [ 1775.988695][T27585] veth0_to_bond: entered allmulticast mode [ 1776.251959][T27398] Bluetooth: hci4: command 0x0c1a tx timeout [ 1776.266484][T27584] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5683'. [ 1776.275509][T27584] hsr_slave_0: entered allmulticast mode [ 1776.871573][T27595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1776.916994][T27596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1777.027857][T27604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1777.610552][T27619] program syz.6.5691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1777.760183][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1778.135121][ T30] audit: type=1326 audit(1762567372.232:7556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27624 comm="syz.4.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1778.157614][ C0] vkms_vblank_simulate: vblank timer overrun [ 1778.210876][ T30] audit: type=1326 audit(1762567372.232:7557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27624 comm="syz.4.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1778.235115][ T30] audit: type=1326 audit(1762567372.262:7558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27624 comm="syz.4.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1778.301842][ T30] audit: type=1326 audit(1762567372.262:7559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27624 comm="syz.4.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1778.324291][ C0] vkms_vblank_simulate: vblank timer overrun [ 1778.330971][ T5893] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1778.357509][ T30] audit: type=1326 audit(1762567372.262:7560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27624 comm="syz.4.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1778.456065][ T30] audit: type=1326 audit(1762567372.262:7561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27624 comm="syz.4.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1778.500773][ T5893] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1778.510382][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.528437][ T5893] usb 6-1: Product: syz [ 1778.537272][ T5893] usb 6-1: Manufacturer: syz [ 1778.547728][ T5893] usb 6-1: SerialNumber: syz [ 1778.567002][ T5893] usb 6-1: config 0 descriptor?? [ 1778.626559][ T30] audit: type=1326 audit(1762567372.262:7562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27624 comm="syz.4.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1778.743685][ T30] audit: type=1326 audit(1762567372.262:7563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27624 comm="syz.4.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1778.799288][ T5893] usb 6-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1778.807853][ T5893] f81604 6-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 1778.878680][ T30] audit: type=1326 audit(1762567372.262:7564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27624 comm="syz.4.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1778.922138][ T5893] f81604 6-1:0.0: probe with driver f81604 failed with error -121 [ 1778.950392][ T30] audit: type=1326 audit(1762567372.262:7565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27624 comm="syz.4.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1778.973100][ C0] vkms_vblank_simulate: vblank timer overrun [ 1779.075912][T27634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1779.087447][T27634] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1779.119512][T27634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1779.133544][T27634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1779.141015][T27634] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1779.150405][T27634] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1779.360054][T27647] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 1779.368713][T27647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1779.384479][T27647] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5701'. [ 1779.991782][T27658] netlink: 'syz.0.5702': attribute type 3 has an invalid length. [ 1779.999682][T27658] netlink: 'syz.0.5702': attribute type 2 has an invalid length. [ 1780.020616][T17720] usb 6-1: USB disconnect, device number 51 [ 1780.086944][T27662] binder: BINDER_SET_CONTEXT_MGR already set [ 1780.250468][T27662] binder: 27650:27662 ioctl 4018620d 200000000040 returned -16 [ 1780.370092][T19672] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 1781.064801][T19672] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1781.130248][T19672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.130294][T27398] Bluetooth: hci1: command 0x0406 tx timeout [ 1781.144935][T23478] Bluetooth: hci5: command 0x0405 tx timeout [ 1781.151352][T23478] Bluetooth: hci2: command 0x0406 tx timeout [ 1781.182031][T27674] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5704'. [ 1781.200983][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 1781.207111][T27398] Bluetooth: hci0: command 0x0c1a tx timeout [ 1781.213360][T27398] Bluetooth: hci3: command 0x0405 tx timeout [ 1781.451882][T27674] team1: entered promiscuous mode [ 1781.510217][T19672] usb 4-1: config 0 descriptor?? [ 1781.532223][T19672] hub 4-1:0.0: bad descriptor, ignoring hub [ 1781.538201][T19672] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1781.572588][T27674] team1: entered allmulticast mode [ 1783.094999][T27683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.114287][T27683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.302340][ T5893] usb 4-1: USB disconnect, device number 114 [ 1783.780262][T19672] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1783.796242][T27698] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1783.910226][T19672] usb 1-1: device descriptor read/64, error -71 [ 1784.124202][T27706] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1784.178993][T19672] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1784.310297][T19672] usb 1-1: device descriptor read/64, error -71 [ 1784.380073][ T5893] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1784.422100][T19672] usb usb1-port1: attempt power cycle [ 1784.522217][ T5893] usb 6-1: device descriptor read/64, error -71 [ 1784.693918][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1784.693935][ T30] audit: type=1326 audit(1762567378.782:7593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1784.740362][ T30] audit: type=1326 audit(1762567378.782:7594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1784.788111][ T30] audit: type=1326 audit(1762567378.782:7595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1784.813626][T19672] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1784.821538][ T5893] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1784.841088][T19672] usb 1-1: device descriptor read/8, error -71 [ 1784.910056][ T30] audit: type=1326 audit(1762567378.782:7596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1784.970417][ T5893] usb 6-1: device descriptor read/64, error -71 [ 1784.977207][ T30] audit: type=1326 audit(1762567378.782:7597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1785.019614][ T30] audit: type=1326 audit(1762567378.782:7598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1785.069881][ T30] audit: type=1326 audit(1762567378.782:7599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1785.095941][ T5893] usb usb6-port1: attempt power cycle [ 1785.150082][T19672] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1785.226830][ T30] audit: type=1326 audit(1762567378.792:7600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1785.260180][T19672] usb 1-1: device descriptor read/8, error -71 [ 1785.295065][ T30] audit: type=1326 audit(1762567378.792:7601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1785.345450][ T30] audit: type=1326 audit(1762567378.792:7602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.5713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1785.380725][T19672] usb usb1-port1: unable to enumerate USB device [ 1785.490111][ T5893] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1785.522256][ T5893] usb 6-1: device descriptor read/8, error -71 [ 1785.581821][T27711] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 1785.593690][T27711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1785.610878][T27711] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5714'. [ 1785.781715][ T5893] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1785.841040][ T5893] usb 6-1: device descriptor read/8, error -71 [ 1786.012297][ T5893] usb usb6-port1: unable to enumerate USB device [ 1787.452377][T27737] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5721'. [ 1787.571762][T27738] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5721'. [ 1787.651217][T27737] FAULT_INJECTION: forcing a failure. [ 1787.651217][T27737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1787.720565][T13888] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 1787.743772][T27737] CPU: 1 UID: 0 PID: 27737 Comm: syz.4.5721 Not tainted syzkaller #0 PREEMPT(full) [ 1787.743802][T27737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1787.743814][T27737] Call Trace: [ 1787.743824][T27737] [ 1787.743833][T27737] dump_stack_lvl+0x189/0x250 [ 1787.743858][T27737] ? __pfx____ratelimit+0x10/0x10 [ 1787.743878][T27737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1787.743899][T27737] ? __pfx__printk+0x10/0x10 [ 1787.743915][T27737] ? __might_fault+0xb0/0x130 [ 1787.743944][T27737] should_fail_ex+0x414/0x560 [ 1787.743970][T27737] _copy_from_user+0x2d/0xb0 [ 1787.743990][T27737] ___sys_recvmsg+0x12e/0x510 [ 1787.744011][T27737] ? __pfx____sys_recvmsg+0x10/0x10 [ 1787.744045][T27737] ? __fget_files+0x3a0/0x420 [ 1787.744067][T27737] __x64_sys_recvmsg+0x198/0x260 [ 1787.744086][T27737] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1787.744109][T27737] ? __pfx_ksys_write+0x10/0x10 [ 1787.744132][T27737] ? do_syscall_64+0xbe/0xfa0 [ 1787.744155][T27737] do_syscall_64+0xfa/0xfa0 [ 1787.744175][T27737] ? lockdep_hardirqs_on+0x9c/0x150 [ 1787.744195][T27737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.744210][T27737] ? clear_bhb_loop+0x60/0xb0 [ 1787.744227][T27737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.744241][T27737] RIP: 0033:0x7f701158f6c9 [ 1787.744255][T27737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1787.744267][T27737] RSP: 002b:00007f7012479038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1787.744283][T27737] RAX: ffffffffffffffda RBX: 00007f70117e5fa0 RCX: 00007f701158f6c9 [ 1787.744294][T27737] RDX: 0000000000010182 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1787.744304][T27737] RBP: 00007f7012479090 R08: 0000000000000000 R09: 0000000000000000 [ 1787.744312][T27737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1787.744321][T27737] R13: 00007f70117e6038 R14: 00007f70117e5fa0 R15: 00007f701190fa28 [ 1787.744344][T27737] [ 1787.944975][ C1] vkms_vblank_simulate: vblank timer overrun [ 1788.185433][T13888] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1788.194608][T13888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.259670][T13888] usb 1-1: config 0 descriptor?? [ 1788.349131][T13888] hub 1-1:0.0: bad descriptor, ignoring hub [ 1788.409039][T13888] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1788.998052][T27757] C: renamed from team_slave_0 (while UP) [ 1789.087933][T27757] netlink: 'syz.4.5727': attribute type 2 has an invalid length. [ 1789.098982][T27757] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5727'. [ 1789.122841][T27757] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1790.057557][T27764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5729'. [ 1791.221959][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5734'. [ 1791.289052][T19672] usb 1-1: USB disconnect, device number 110 [ 1791.370177][T13888] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1791.912477][T13888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1791.922873][T13888] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1792.014791][T13888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1792.030121][T19672] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1792.053774][T13888] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1792.080094][T13888] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1792.255310][T13888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.276374][T13888] usb 7-1: config 0 descriptor?? [ 1792.290084][T19672] usb 4-1: Using ep0 maxpacket: 8 [ 1792.312391][T19672] usb 4-1: config 1 has an invalid descriptor of length 151, skipping remainder of the config [ 1792.323914][T19672] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1792.359519][T19672] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1792.370080][T19672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.378217][T19672] usb 4-1: Product: syz [ 1792.423160][T19672] usb 4-1: Manufacturer: syz [ 1792.427851][T19672] usb 4-1: SerialNumber: syz [ 1792.498161][T13888] hdpvr 7-1:0.0: firmware version 0x0 dated [ 1792.506470][T13888] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 1792.675316][T19672] usb 4-1: USB disconnect, device number 115 [ 1792.700304][T13888] hdpvr 7-1:0.0: device init failed [ 1792.705743][T13888] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 1792.756230][T13888] usb 7-1: USB disconnect, device number 3 [ 1792.771235][T27797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5737'. [ 1792.934916][T27799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5738'. [ 1793.113446][T27799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5738'. [ 1793.136524][T27803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5738'. [ 1793.146073][T27803] FAULT_INJECTION: forcing a failure. [ 1793.146073][T27803] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.159189][T27803] CPU: 0 UID: 0 PID: 27803 Comm: syz.0.5738 Not tainted syzkaller #0 PREEMPT(full) [ 1793.159218][T27803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1793.159230][T27803] Call Trace: [ 1793.159239][T27803] [ 1793.159248][T27803] dump_stack_lvl+0x189/0x250 [ 1793.159281][T27803] ? __pfx____ratelimit+0x10/0x10 [ 1793.159309][T27803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1793.159337][T27803] ? __pfx__printk+0x10/0x10 [ 1793.159364][T27803] ? __lock_acquire+0xab9/0xd20 [ 1793.159392][T27803] should_fail_ex+0x414/0x560 [ 1793.159428][T27803] should_failslab+0xa8/0x100 [ 1793.159451][T27803] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1793.159481][T27803] ? skb_clone+0x212/0x3a0 [ 1793.159510][T27803] skb_clone+0x212/0x3a0 [ 1793.159537][T27803] __netlink_deliver_tap+0x404/0x850 [ 1793.159570][T27803] ? netlink_deliver_tap+0x2e/0x1b0 [ 1793.159592][T27803] netlink_deliver_tap+0x19c/0x1b0 [ 1793.159614][T27803] netlink_dump+0x92b/0xe90 [ 1793.159658][T27803] ? __pfx_netlink_dump+0x10/0x10 [ 1793.159717][T27803] netlink_recvmsg+0x676/0xa30 [ 1793.159747][T27803] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1793.159774][T27803] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1793.159807][T27803] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1793.159826][T27803] ? security_socket_recvmsg+0x7e/0x2e0 [ 1793.159848][T27803] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1793.159868][T27803] sock_recvmsg+0x22c/0x270 [ 1793.159901][T27803] ____sys_recvmsg+0x1c9/0x460 [ 1793.159933][T27803] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1793.159975][T27803] ? import_iovec+0x74/0xa0 [ 1793.160005][T27803] ___sys_recvmsg+0x1b5/0x510 [ 1793.160034][T27803] ? __pfx____sys_recvmsg+0x10/0x10 [ 1793.160084][T27803] ? __fget_files+0x3a0/0x420 [ 1793.160122][T27803] __x64_sys_recvmsg+0x198/0x260 [ 1793.160149][T27803] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1793.160202][T27803] ? __pfx_ksys_write+0x10/0x10 [ 1793.160236][T27803] ? do_syscall_64+0xbe/0xfa0 [ 1793.160270][T27803] do_syscall_64+0xfa/0xfa0 [ 1793.160299][T27803] ? lockdep_hardirqs_on+0x9c/0x150 [ 1793.160329][T27803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.160350][T27803] ? clear_bhb_loop+0x60/0xb0 [ 1793.160376][T27803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.160397][T27803] RIP: 0033:0x7f8dd9b8f6c9 [ 1793.160415][T27803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1793.160434][T27803] RSP: 002b:00007f8dda980038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1793.160457][T27803] RAX: ffffffffffffffda RBX: 00007f8dd9de6090 RCX: 00007f8dd9b8f6c9 [ 1793.160472][T27803] RDX: 0000000000010182 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1793.160486][T27803] RBP: 00007f8dda980090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.160499][T27803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.160512][T27803] R13: 00007f8dd9de6128 R14: 00007f8dd9de6090 R15: 00007f8dd9f0fa28 [ 1793.160547][T27803] [ 1793.659656][T27816] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1794.130100][T17720] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1794.323759][T17720] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1794.333195][T17720] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.357122][T17720] usb 7-1: config 0 descriptor?? [ 1794.369470][T17720] hub 7-1:0.0: bad descriptor, ignoring hub [ 1794.376216][T17720] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1794.400328][T19672] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1794.595160][T27833] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5747'. [ 1794.712719][T19672] usb 1-1: Using ep0 maxpacket: 16 [ 1794.739772][T19672] usb 1-1: config 5 has an invalid interface number: 253 but max is 0 [ 1794.748301][T19672] usb 1-1: config 5 has no interface number 0 [ 1794.755154][T19672] usb 1-1: config 5 interface 253 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1794.777928][T19672] usb 1-1: config 5 interface 253 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1794.807774][T19672] usb 1-1: config 5 interface 253 has no altsetting 0 [ 1794.833350][T19672] usb 1-1: New USB device found, idVendor=05c6, idProduct=6000, bcdDevice= c.ea [ 1794.857932][T19672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.878547][T19672] usb 1-1: Product: syz [ 1794.888001][T19672] usb 1-1: Manufacturer: syz [ 1794.917694][T19672] usb 1-1: SerialNumber: syz [ 1795.005702][T27836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5748'. [ 1795.123321][ T7599] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.195206][T19672] option 1-1:5.253: GSM modem (1-port) converter detected [ 1795.224023][T19672] usb 1-1: USB disconnect, device number 111 [ 1795.388802][T19672] option 1-1:5.253: device disconnected [ 1795.621447][T27848] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5750'. [ 1795.980598][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1795.980618][ T30] audit: type=1326 audit(1762567390.082:7613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27854 comm="syz.3.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1796.109295][ T30] audit: type=1326 audit(1762567390.112:7614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27854 comm="syz.3.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1796.282734][ T30] audit: type=1326 audit(1762567390.112:7615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27854 comm="syz.3.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1796.443384][ T30] audit: type=1326 audit(1762567390.122:7616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27854 comm="syz.3.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1796.467628][ T30] audit: type=1326 audit(1762567390.122:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27854 comm="syz.3.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1796.545306][ T30] audit: type=1326 audit(1762567390.122:7618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27854 comm="syz.3.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1796.703400][T13888] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1796.796501][ T30] audit: type=1326 audit(1762567390.122:7619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27854 comm="syz.3.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1796.880869][T19672] usb 7-1: USB disconnect, device number 4 [ 1796.930193][T13888] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1796.967205][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.973806][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.981678][ T30] audit: type=1326 audit(1762567390.122:7620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27854 comm="syz.3.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1796.984250][T13888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1797.021851][T13888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1797.031739][T13888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1797.050211][T13888] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1797.059297][T13888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.097378][T13888] usb 1-1: config 0 descriptor?? [ 1797.102600][ T30] audit: type=1326 audit(1762567390.122:7621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27854 comm="syz.3.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1797.181883][ T30] audit: type=1326 audit(1762567390.122:7622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27854 comm="syz.3.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fde25d8f6c9 code=0x7ffc0000 [ 1797.579832][T13888] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1797.661658][T27875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5761'. [ 1797.714572][T27869] kvm: kvm [27868]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0xc1) = 0x1 [ 1799.434956][T27905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5768'. [ 1799.551320][T27905] team9: entered promiscuous mode [ 1799.560913][T27905] team9: entered allmulticast mode [ 1799.849207][T27909] tipc: Enabling of bearer rejected, already enabled [ 1799.878999][T27909] syzkaller0: entered promiscuous mode [ 1799.911304][T27909] syzkaller0: entered allmulticast mode [ 1799.971286][T13888] usb 1-1: USB disconnect, device number 112 [ 1800.069768][T27913] ipip0: entered promiscuous mode [ 1800.075883][T27913] ipip0: entered allmulticast mode [ 1801.391422][T27932] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1801.441328][T27935] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5778'. [ 1801.647518][T27943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1801.853190][T27950] Cannot find add_set index 1 as target [ 1802.041353][T27947] netlink: 'syz.6.5780': attribute type 1 has an invalid length. [ 1802.632080][T27960] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5784'. [ 1802.710584][T27960] team2: entered promiscuous mode [ 1802.721188][T27960] team2: entered allmulticast mode [ 1803.149463][T27972] ipip0: entered promiscuous mode [ 1803.155021][T27972] ipip0: entered allmulticast mode [ 1803.938259][T27982] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5791'. [ 1804.110149][T13896] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1804.306299][T13896] usb 1-1: Using ep0 maxpacket: 32 [ 1804.325724][T13896] usb 1-1: config 0 has an invalid interface number: 250 but max is 2 [ 1804.334844][T13896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.346327][T13896] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1804.363761][T13896] usb 1-1: config 0 has no interface number 0 [ 1804.410566][T13896] usb 1-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 1804.420429][T13896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.428554][T13896] usb 1-1: Product: syz [ 1804.433926][T13896] usb 1-1: Manufacturer: syz [ 1804.452467][T13896] usb 1-1: SerialNumber: syz [ 1804.477940][T13896] usb 1-1: config 0 descriptor?? [ 1804.565014][T13896] uvcvideo 1-1:0.250: probe with driver uvcvideo failed with error -22 [ 1804.618002][T27990] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5792'. [ 1804.765685][T13888] usb 1-1: USB disconnect, device number 113 [ 1805.667950][T28044] ptrace attach of "./syz-executor exec"[20193] was attempted by "\x09      ./file0  H @  nl80211 system.posix_acl_default    \x0aX \x0a\x0b  , ( \x07  ct      @  @ \x07\x09  syz0 \x09  syz2    \x0a( \x0a ^ \x09  syz0  @ , \x0a  \x09  sy [ 1805.716210][T28040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5799'. [ 1805.935739][T27990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1805.955491][T27990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1805.973739][T27990] bond0 (unregistering): Released all slaves [ 1806.192555][T28040] team10: entered promiscuous mode [ 1806.203460][T28040] team10: entered allmulticast mode [ 1809.270510][T28086] FAULT_INJECTION: forcing a failure. [ 1809.270510][T28086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1809.369890][T28086] CPU: 0 UID: 0 PID: 28086 Comm: syz.5.5812 Not tainted syzkaller #0 PREEMPT(full) [ 1809.369921][T28086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1809.369935][T28086] Call Trace: [ 1809.369949][T28086] [ 1809.369959][T28086] dump_stack_lvl+0x189/0x250 [ 1809.369993][T28086] ? __pfx____ratelimit+0x10/0x10 [ 1809.370023][T28086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1809.370051][T28086] ? __pfx__printk+0x10/0x10 [ 1809.370072][T28086] ? __might_fault+0xb0/0x130 [ 1809.370114][T28086] should_fail_ex+0x414/0x560 [ 1809.370151][T28086] _copy_from_user+0x2d/0xb0 [ 1809.370179][T28086] vti6_siocdevprivate+0x1af/0x700 [ 1809.370213][T28086] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 1809.370241][T28086] ? trace_contention_end+0x39/0x120 [ 1809.370292][T28086] ? netdev_name_node_lookup+0xdf/0x120 [ 1809.370322][T28086] dev_ifsioc+0xb57/0xf00 [ 1809.370362][T28086] dev_ioctl+0x84c/0x1150 [ 1809.370397][T28086] sock_ioctl+0x719/0x790 [ 1809.370425][T28086] ? __pfx_sock_ioctl+0x10/0x10 [ 1809.370455][T28086] ? __fget_files+0x3a0/0x420 [ 1809.370475][T28086] ? __fget_files+0x2a/0x420 [ 1809.370498][T28086] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1809.370522][T28086] ? __pfx_sock_ioctl+0x10/0x10 [ 1809.370547][T28086] __se_sys_ioctl+0xfc/0x170 [ 1809.370577][T28086] do_syscall_64+0xfa/0xfa0 [ 1809.370605][T28086] ? lockdep_hardirqs_on+0x9c/0x150 [ 1809.370644][T28086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.370665][T28086] ? clear_bhb_loop+0x60/0xb0 [ 1809.370691][T28086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.370711][T28086] RIP: 0033:0x7f322298f6c9 [ 1809.370730][T28086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1809.370748][T28086] RSP: 002b:00007f32238b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1809.370771][T28086] RAX: ffffffffffffffda RBX: 00007f3222be5fa0 RCX: 00007f322298f6c9 [ 1809.370786][T28086] RDX: 0000200000000180 RSI: 00000000000089f1 RDI: 0000000000000003 [ 1809.370801][T28086] RBP: 00007f32238b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1809.370815][T28086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1809.370827][T28086] R13: 00007f3222be6038 R14: 00007f3222be5fa0 R15: 00007f3222d0fa28 [ 1809.370863][T28086] [ 1810.053664][T28092] input: syz0 as /devices/virtual/input/input162 [ 1810.190396][T28102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5815'. [ 1810.277062][T28102] team5: entered promiscuous mode [ 1810.302314][T28102] team5: entered allmulticast mode [ 1810.408131][T28105] misc userio: Begin command sent, but we're already running [ 1811.322855][T28118] netlink: 'syz.3.5821': attribute type 12 has an invalid length. [ 1811.364014][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1811.364035][ T30] audit: type=1400 audit(1762567405.452:7645): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A04AB5B2509B86803 pid=28115 comm="syz.3.5821" [ 1812.342834][T28130] netlink: 'syz.4.5825': attribute type 39 has an invalid length. [ 1812.397761][T28131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5825'. [ 1812.453740][T28131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5825'. [ 1813.550068][T27280] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1813.693231][T28148] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5831'. [ 1813.710135][T27280] usb 5-1: Using ep0 maxpacket: 32 [ 1813.738466][T27280] usb 5-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 1813.777508][T27280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.805958][T27280] usb 5-1: config 0 descriptor?? [ 1813.824157][T27280] go7007 5-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 1813.906559][T28151] netlink: 'syz.6.5832': attribute type 3 has an invalid length. [ 1814.077980][T27280] usb 5-1: USB disconnect, device number 92 [ 1814.167795][T28158] netlink: 'syz.5.5834': attribute type 11 has an invalid length. [ 1814.428983][T28161] team0: Port device vxlan0 added [ 1814.447417][T16656] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1814.485944][T16656] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1814.513198][T16656] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1815.630895][T19672] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1815.690250][T13896] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1815.790458][T27280] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1815.832113][T19672] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.844360][T19672] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1815.853726][T13896] usb 5-1: Using ep0 maxpacket: 8 [ 1815.878007][T19672] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1815.889134][T13896] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1815.900071][T13896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1815.927962][T13896] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1815.928694][T19672] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1815.950166][T13896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1815.980299][T19672] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.999442][T19672] usb 7-1: Product: syz [ 1816.014456][T13896] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1816.030490][T13896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1816.043237][T19672] usb 7-1: Manufacturer: syz [ 1816.044091][T27280] usb 6-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 16 [ 1816.047908][T19672] usb 7-1: SerialNumber: syz [ 1816.068107][T27280] usb 6-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1816.098150][T27280] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1816.113158][T13896] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1816.128601][T27280] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1816.138135][T27280] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.146382][T27280] usb 6-1: Product: љ [ 1816.156352][T27280] usb 6-1: Manufacturer: Ё [ 1816.161672][T27280] usb 6-1: SerialNumber: 筂鵴ഔ鯑촤䝵킫霅罕猨쁬殜㕁爙鋥힝ᦌ䂍ి哅ኄᴧ쇋ꫬ틓푤⫼㟼婩뒱ꉼ⡬詧褙鎾ⴏ㟃㤓♼炇㠪濸 [ 1816.189189][T13896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1816.227039][T13896] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1816.230966][T28188] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1816.247149][T13896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1816.291671][T13896] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1816.344381][T13896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1816.382863][T13896] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1816.402309][T13896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.497012][T13896] usb 5-1: Product: syz [ 1816.506390][T28187] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5842'. [ 1816.515670][T13896] usb 5-1: Manufacturer: syz [ 1816.531524][T13896] usb 5-1: SerialNumber: syz [ 1816.550507][T27280] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 1816.620276][T19672] uvcvideo 7-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1816.629216][T27280] usb 6-1: USB disconnect, device number 56 [ 1816.659275][T19672] uvcvideo 7-1:220.0: No valid video chain found. [ 1816.674842][T27280] usblp0: removed [ 1816.730889][T19672] usb 7-1: USB disconnect, device number 5 [ 1816.804381][T13896] adutux 5-1:168.0: interrupt endpoints not found [ 1816.832706][T13896] usb 5-1: USB disconnect, device number 93 [ 1816.890650][T28202] input: syz0 as /devices/virtual/input/input164 [ 1817.124152][T28206] netlink: 'syz.5.5849': attribute type 3 has an invalid length. [ 1817.133114][T28206] netlink: 812 bytes leftover after parsing attributes in process `syz.5.5849'. [ 1817.157060][T28208] netlink: 'syz.5.5849': attribute type 3 has an invalid length. [ 1817.190365][T28208] netlink: 812 bytes leftover after parsing attributes in process `syz.5.5849'. [ 1817.442639][T28220] ipip0: entered promiscuous mode [ 1817.447848][T28220] ipip0: entered allmulticast mode [ 1817.720840][T28226] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5855'. [ 1817.830550][T28230] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1818.158424][T28234] loop2: detected capacity change from 0 to 7 [ 1818.200350][T28234] Dev loop2: unable to read RDB block 7 [ 1818.216314][T28234] loop2: unable to read partition table [ 1818.281380][T28234] loop2: partition table beyond EOD, truncated [ 1818.312534][T28234] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1818.677508][T28241] misc userio: Begin command sent, but we're already running [ 1818.851312][T28247] syzkaller0: entered promiscuous mode [ 1818.877419][T28247] syzkaller0: entered allmulticast mode [ 1819.364011][T28264] fuse: Bad value for 'fd' [ 1819.388340][T28264] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5868'. [ 1820.001666][T28279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5872'. [ 1820.330100][T17720] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 1820.607169][T17720] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1820.616671][T17720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.932455][T17720] usb 4-1: config 0 descriptor?? [ 1820.967641][T17720] hub 4-1:0.0: bad descriptor, ignoring hub [ 1820.982099][T17720] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1822.536648][T28306] netlink: 'syz.5.5879': attribute type 3 has an invalid length. [ 1822.544851][T28306] netlink: 'syz.5.5879': attribute type 2 has an invalid length. [ 1823.560636][T19672] usb 4-1: USB disconnect, device number 116 [ 1824.215390][T28335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5886'. [ 1824.388396][T28340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5888'. [ 1826.676627][T28373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5897'. [ 1826.854336][T28371] batadv_slave_1: entered promiscuous mode [ 1826.964424][T28352] fuse: Unknown parameter 'Qroup_id' [ 1827.089768][T28379] program syz.5.5899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1827.368515][T28383] loop4: detected capacity change from 0 to 2560 [ 1827.405597][T28382] buffer_io_error: 5 callbacks suppressed [ 1827.406006][T28382] Buffer I/O error on dev loop4, logical block 1, async page read [ 1827.435464][T28382] Buffer I/O error on dev loop4, logical block 1, async page read [ 1827.449679][T28382] Buffer I/O error on dev loop4, logical block 1, async page read [ 1827.456416][T28370] batadv_slave_1: left promiscuous mode [ 1827.459114][T28382] Buffer I/O error on dev loop4, logical block 1, async page read [ 1827.475485][ T7973] Buffer I/O error on dev loop4, logical block 0, async page read [ 1827.674639][T13875] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1827.721057][T28382] Buffer I/O error on dev loop4, logical block 1, async page read [ 1827.724299][ T7973] Buffer I/O error on dev loop4, logical block 0, async page read [ 1827.759671][T28382] Buffer I/O error on dev loop4, logical block 2, async page read [ 1827.768799][ T7973] Buffer I/O error on dev loop4, logical block 0, async page read [ 1827.811274][ T7973] Buffer I/O error on dev loop4, logical block 0, async page read [ 1827.860104][T13875] usb 1-1: Using ep0 maxpacket: 8 [ 1828.018676][T13875] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 1828.072787][T13875] usb 1-1: config 0 has no interface number 0 [ 1828.078962][T13875] usb 1-1: config 0 interface 235 has no altsetting 0 [ 1828.307624][T13875] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=92.0d [ 1828.389403][T13875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.477546][T13875] usb 1-1: Product: syz [ 1828.492687][T13875] usb 1-1: Manufacturer: syz [ 1828.497351][T13875] usb 1-1: SerialNumber: syz [ 1828.527955][T13875] usb 1-1: config 0 descriptor?? [ 1829.314471][T17720] usb 1-1: USB disconnect, device number 114 [ 1830.090598][T28409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5909'. [ 1830.107290][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880593e6000: rx timeout, send abort [ 1830.115749][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059d12c00: rx timeout, send abort [ 1830.124299][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880593e6000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1830.138715][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059d12c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1830.915912][T28428] netlink: 'syz.6.5914': attribute type 3 has an invalid length. [ 1830.923851][T28428] netlink: 'syz.6.5914': attribute type 2 has an invalid length. [ 1831.310141][T13897] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1831.511997][T28436] program syz.0.5916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1831.577500][T28437] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1831.608232][T13897] usb 5-1: Using ep0 maxpacket: 32 [ 1831.702630][T13897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.738365][T13897] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1831.789881][T28439] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5917'. [ 1831.892317][T13897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.915819][T13897] usb 5-1: Product: syz [ 1831.927406][T13897] usb 5-1: Manufacturer: syz [ 1831.936599][T13897] usb 5-1: SerialNumber: syz [ 1832.031049][T13897] usb 5-1: config 0 descriptor?? [ 1832.062755][T13897] usb 5-1: bad CDC descriptors [ 1832.068567][T13897] usb 5-1: unsupported MDLM descriptors [ 1832.894573][T27280] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1833.082217][T27280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.093655][T27280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1833.103924][T27280] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1833.248758][T27280] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1833.259887][T27280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.329225][T27280] usb 1-1: config 0 descriptor?? [ 1833.330433][T13896] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1833.574189][T13896] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1833.582503][T13896] usb 7-1: config 0 has no interface number 0 [ 1833.592621][T13896] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1833.602007][T13896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.610282][T13896] usb 7-1: Product: syz [ 1833.622249][T13896] usb 7-1: Manufacturer: syz [ 1833.631904][T13896] usb 7-1: SerialNumber: syz [ 1833.658696][T13896] usb 7-1: config 0 descriptor?? [ 1833.771872][T27280] hid_parser_main: 8 callbacks suppressed [ 1833.771895][T27280] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1833.807671][T27280] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1833.887767][T13875] usb 5-1: USB disconnect, device number 94 [ 1833.907210][T13896] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1833.959069][T13896] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1834.045879][T27280] usb 1-1: USB disconnect, device number 115 [ 1834.053039][T13896] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1834.105245][T13896] usb 7-1: media controller created [ 1834.167508][T28456] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5923'. [ 1834.215184][T28462] fido_id[28462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1834.292898][T13896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1834.372215][T13875] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1834.540130][T13875] usb 5-1: Using ep0 maxpacket: 32 [ 1834.549856][T13875] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1834.563066][T13875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.593013][T13875] usb 5-1: Product: syz [ 1834.602787][T13875] usb 5-1: Manufacturer: syz [ 1834.646881][T13875] usb 5-1: SerialNumber: syz [ 1834.655219][T13875] usb 5-1: config 0 descriptor?? [ 1834.770566][T13875] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1835.106213][T13875] gspca_stk1135: reg_w 0x0 err -71 [ 1835.116807][T13875] gspca_stk1135: serial bus timeout: status=0x00 [ 1835.135507][T13875] gspca_stk1135: Sensor write failed [ 1835.180119][T13875] gspca_stk1135: serial bus timeout: status=0x00 [ 1835.220276][T13875] gspca_stk1135: Sensor write failed [ 1835.223872][T13896] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1835.236978][T13875] gspca_stk1135: serial bus timeout: status=0x00 [ 1835.243996][T13875] gspca_stk1135: Sensor read failed [ 1835.249588][T13875] gspca_stk1135: serial bus timeout: status=0x00 [ 1835.275527][T13875] gspca_stk1135: Sensor read failed [ 1835.304679][T13875] gspca_stk1135: Detected sensor type unknown (0x0) [ 1835.325120][T13875] gspca_stk1135: serial bus timeout: status=0x00 [ 1835.347811][T13875] gspca_stk1135: Sensor read failed [ 1835.378577][T13875] gspca_stk1135: serial bus timeout: status=0x00 [ 1835.411724][T13875] gspca_stk1135: Sensor read failed [ 1835.437014][T13875] gspca_stk1135: serial bus timeout: status=0x00 [ 1835.459487][T13875] gspca_stk1135: Sensor write failed [ 1835.485754][T13875] gspca_stk1135: serial bus timeout: status=0x00 [ 1835.518909][T13875] gspca_stk1135: Sensor write failed [ 1835.529701][T13875] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 1835.566130][T13875] usb 5-1: USB disconnect, device number 95 [ 1835.936106][T23478] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1835.948071][T23478] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1835.957189][T23478] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1835.968078][T23478] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1835.978830][T23478] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1836.300553][T13896] usb 7-1: USB disconnect, device number 6 [ 1836.547546][T16952] syz_tun (unregistering): left allmulticast mode [ 1836.982335][T28471] chnl_net:caif_netlink_parms(): no params data found [ 1837.230322][T28493] netlink: 'syz.5.5933': attribute type 3 has an invalid length. [ 1837.238222][T28493] netlink: 'syz.5.5933': attribute type 2 has an invalid length. [ 1837.508837][ T7599] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1837.550615][ T7599] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.620135][ T5893] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1837.901832][T28499] syzkaller1: entered promiscuous mode [ 1837.920363][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1837.929130][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 1837.937675][ T5893] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1837.947189][T28499] syzkaller1: entered allmulticast mode [ 1837.953028][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.007546][T27677] Bluetooth: hci6: command tx timeout [ 1838.031428][ T5893] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1838.166589][ T7599] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1838.177850][ T7599] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.239881][T28495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.280644][T28495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.457129][ T7599] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1838.486415][ T7599] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.498206][ T5893] gspca_nw80x: reg_r err -71 [ 1838.505179][ T5893] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 1838.585632][ T5893] usb 5-1: USB disconnect, device number 96 [ 1838.861218][T28471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.877303][T28471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.908684][T28471] bridge_slave_0: entered allmulticast mode [ 1838.921160][T28471] bridge_slave_0: entered promiscuous mode [ 1838.945714][T28471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.980324][T28471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1838.987742][T28471] bridge_slave_1: entered allmulticast mode [ 1839.002741][T28471] bridge_slave_1: entered promiscuous mode [ 1839.109726][T28471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1839.147844][T28471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1839.491119][ T30] audit: type=1326 audit(1762567433.582:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28522 comm="syz.4.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1839.526590][ T30] audit: type=1326 audit(1762567433.582:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28522 comm="syz.4.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1839.552495][ T30] audit: type=1326 audit(1762567433.582:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28522 comm="syz.4.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1839.575865][ T30] audit: type=1326 audit(1762567433.582:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28522 comm="syz.4.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1839.600836][ T30] audit: type=1326 audit(1762567433.582:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28522 comm="syz.4.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1839.603582][T28471] team0: Port device team_slave_0 added [ 1839.632521][ T30] audit: type=1326 audit(1762567433.582:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28522 comm="syz.4.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1839.656216][ T30] audit: type=1326 audit(1762567433.582:7652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28522 comm="syz.4.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1839.710935][ T30] audit: type=1326 audit(1762567433.582:7653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28522 comm="syz.4.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1839.713090][T28471] team0: Port device team_slave_1 added [ 1839.735626][ T30] audit: type=1326 audit(1762567433.582:7654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28522 comm="syz.4.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1839.767752][ T30] audit: type=1326 audit(1762567433.582:7655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28522 comm="syz.4.5942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701158f6c9 code=0x7ffc0000 [ 1840.110124][T27677] Bluetooth: hci6: command tx timeout [ 1840.257423][T28471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1840.287360][T28471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1840.386224][T28471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1840.422183][T28471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1840.438582][T28471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1840.538061][T28471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1840.549599][ T7599] bridge_slave_1: left allmulticast mode [ 1840.640191][ T7599] bridge_slave_1: left promiscuous mode [ 1840.651001][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.723096][ T7599] bridge_slave_0: left allmulticast mode [ 1840.732151][ T7599] bridge_slave_0: left promiscuous mode [ 1840.740341][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.160236][T27677] Bluetooth: hci6: command tx timeout [ 1842.252641][ T7599] dvmrp8 (unregistering): left allmulticast mode [ 1842.816831][ T7599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1842.828209][ T7599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1842.847589][ T7599] bond0 (unregistering): Released all slaves [ 1842.900262][T13888] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1842.980691][ T7599] bond1 (unregistering): Released all slaves [ 1843.056193][T13888] usb 5-1: device descriptor read/64, error -71 [ 1843.115185][ T7599] bond2 (unregistering): Released all slaves [ 1843.238824][ T7599] bond3 (unregistering): Released all slaves [ 1843.310985][T13888] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1843.338760][T28558] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5949'. [ 1843.460126][T13888] usb 5-1: device descriptor read/64, error -71 [ 1843.545212][ T7599] : left promiscuous mode [ 1843.571337][T13888] usb usb5-port1: attempt power cycle [ 1843.586740][T28471] hsr_slave_0: entered promiscuous mode [ 1843.607765][T28471] hsr_slave_1: entered promiscuous mode [ 1843.615134][T28471] debugfs: 'hsr0' already exists in 'hsr' [ 1843.621400][T28471] Cannot create hsr debugfs directory [ 1843.762882][ T7599] tipc: Disabling bearer [ 1843.794475][ T7599] tipc: Left network mode [ 1843.980150][T13888] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1844.011899][T13888] usb 5-1: device descriptor read/8, error -71 [ 1844.254401][T27677] Bluetooth: hci6: command tx timeout [ 1844.260187][T13888] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1844.290988][T13888] usb 5-1: device descriptor read/8, error -71 [ 1844.340536][T28593] netlink: 'syz.3.5958': attribute type 13 has an invalid length. [ 1844.409166][T13888] usb usb5-port1: unable to enumerate USB device [ 1844.422748][T28593] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5958'. [ 1844.633543][ T7599] hsr_slave_0: left promiscuous mode [ 1844.664738][ T7599] hsr_slave_1: left promiscuous mode [ 1844.687000][ T7599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1844.719618][ T7599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1844.730193][ T7599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1844.744483][ T7599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1844.841145][ T7599] veth1_macvtap: left promiscuous mode [ 1844.846774][ T7599] veth0_macvtap: left promiscuous mode [ 1844.865245][ T7599] veth1_vlan: left promiscuous mode [ 1844.885732][ T7599] veth0_vlan: left promiscuous mode [ 1845.621672][T28616] netlink: 'syz.5.5960': attribute type 3 has an invalid length. [ 1845.629652][T28616] netlink: 'syz.5.5960': attribute type 2 has an invalid length. [ 1847.142566][ T7599] team0 (unregistering): Port device team_slave_1 removed [ 1847.192716][ T7599] team0 (unregistering): Port device team_slave_0 removed [ 1848.192549][T28640] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5964'. [ 1848.280489][T28642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5967'. [ 1848.918350][T28643] bridge0: entered promiscuous mode [ 1848.927971][T28643] bridge0: port 3(macvtap1) entered blocking state [ 1848.935443][T28643] bridge0: port 3(macvtap1) entered disabled state [ 1848.943343][T28643] macvtap1: entered allmulticast mode [ 1848.949060][T28643] bridge0: entered allmulticast mode [ 1848.966267][T28643] macvtap1: left allmulticast mode [ 1848.971873][T28643] bridge0: left allmulticast mode [ 1849.055913][T28643] bridge0: left promiscuous mode [ 1849.151964][ T5893] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1849.347561][ T5893] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1849.357108][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.396391][ T5893] usb 7-1: config 0 descriptor?? [ 1849.444578][ T5893] hub 7-1:0.0: bad descriptor, ignoring hub [ 1849.460550][ T5893] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1849.499200][T28653] input: syz0 as /devices/virtual/input/input167 [ 1849.618913][T28471] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1849.702589][T28471] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1849.761665][T28471] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1849.880062][T28471] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1850.590313][T28471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1850.694128][T28471] 8021q: adding VLAN 0 to HW filter on device team0 [ 1850.729184][ T7599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.736409][ T7599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1850.814714][ T7599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.822011][ T7599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1851.218977][T28471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1851.334331][T28471] veth0_vlan: entered promiscuous mode [ 1851.389225][T28471] veth1_vlan: entered promiscuous mode [ 1851.468353][T28471] veth0_macvtap: entered promiscuous mode [ 1851.489220][T28471] veth1_macvtap: entered promiscuous mode [ 1851.529601][T28471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1851.560892][T28471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1851.732332][ T7599] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.774732][T28023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.881363][T13875] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1851.926520][T28023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1852.004447][T28023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1852.066085][T13875] usb 4-1: Using ep0 maxpacket: 32 [ 1852.087796][T13875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1852.165469][T13875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1852.176560][T13888] usb 7-1: USB disconnect, device number 7 [ 1852.218227][T13875] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1852.279874][T13875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.365855][T13875] usb 4-1: config 0 descriptor?? [ 1852.385225][T28023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1852.416453][T13875] hub 4-1:0.0: USB hub found [ 1852.428099][T28023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1852.597655][T13875] hub 4-1:0.0: 1 port detected [ 1852.632850][ T7599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1852.659408][ T7599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1852.799766][T28680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.811915][T28680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.305188][T28684] usb 4-1: USB disconnect, device number 117 [ 1853.770409][T28713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5978'. [ 1853.894718][ T7599] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1855.180170][T13875] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 1855.351499][T13875] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1855.370173][T13875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.575358][T13875] usb 1-1: config 0 descriptor?? [ 1855.615149][T13875] hub 1-1:0.0: bad descriptor, ignoring hub [ 1855.627286][T13875] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1858.430783][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.437438][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.250085][T13897] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1859.467033][T13897] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1859.480377][T13897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.505136][T13897] usb 5-1: config 0 descriptor?? [ 1859.629884][T19672] usb 1-1: USB disconnect, device number 116 [ 1859.637600][T13897] hub 5-1:0.0: bad descriptor, ignoring hub [ 1859.701414][T13897] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1860.657217][T28785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5991'. [ 1862.080919][T13888] usb 5-1: USB disconnect, device number 101 [ 1862.253985][T28788] IPv6: sit1: Disabled Multicast RS [ 1862.301322][T28788] sit1: entered allmulticast mode [ 1862.995354][T28810] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5998'. [ 1863.680187][T13875] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1864.110047][T28684] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1864.212188][T13875] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1864.243425][T13875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.286766][T28684] usb 7-1: config 0 has no interfaces? [ 1864.293038][T28684] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1864.325288][T28684] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.364785][T13875] usb 6-1: config 0 descriptor?? [ 1864.413373][T28684] usb 7-1: config 0 descriptor?? [ 1864.513257][T13875] hub 6-1:0.0: bad descriptor, ignoring hub [ 1864.522698][T13875] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1864.656661][T28822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1864.670059][T28822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1864.742619][T13888] usb 7-1: USB disconnect, device number 8 [ 1866.773015][T13875] usb 6-1: USB disconnect, device number 57 [ 1866.910083][T13888] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1866.958285][T28845] input: syz1 as /devices/virtual/input/input168 [ 1867.036516][T28848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1867.350063][ T5893] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1867.395991][T13888] usb 7-1: Using ep0 maxpacket: 8 [ 1867.415016][T13888] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1867.425629][T13888] usb 7-1: config 4 has an invalid interface number: 30 but max is 0 [ 1867.438282][T13888] usb 7-1: config 4 has no interface number 0 [ 1867.445141][T13888] usb 7-1: config 4 interface 30 has no altsetting 0 [ 1867.456366][T13888] usb 7-1: string descriptor 0 read error: -22 [ 1867.463268][T13888] usb 7-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1867.600017][T13888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.628448][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 1867.646634][T13888] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1867.664086][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1867.685140][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1867.687078][T13888] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1867.749725][ T5893] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1867.765856][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.788686][ T5893] usb 4-1: config 0 descriptor?? [ 1867.819401][ T5893] hub 4-1:0.0: USB hub found [ 1867.839451][T13888] dvb-usb: bulk message failed: -22 (2/0) [ 1867.887932][T13888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1867.898285][T13888] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1867.929828][T13888] usb 7-1: media controller created [ 1867.936401][T13888] dvb-usb: bulk message failed: -22 (6/0) [ 1867.945068][T13888] dw2102: i2c transfer failed. [ 1867.958248][T13888] dvb-usb: bulk message failed: -22 (6/0) [ 1867.968131][T13888] dw2102: i2c transfer failed. [ 1868.030762][T13888] dvb-usb: bulk message failed: -22 (6/0) [ 1868.047068][T13888] dw2102: i2c transfer failed. [ 1868.067301][T13888] dvb-usb: bulk message failed: -22 (6/0) [ 1868.094493][T13888] dw2102: i2c transfer failed. [ 1868.118276][T13888] dvb-usb: bulk message failed: -22 (6/0) [ 1868.148890][T13888] dw2102: i2c transfer failed. [ 1868.159108][T13888] dvb-usb: bulk message failed: -22 (6/0) [ 1868.170190][T13888] dw2102: i2c transfer failed. [ 1868.175055][T13888] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1868.263810][ T5893] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1868.390404][T13888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1868.542492][T13888] dvb-usb: bulk message failed: -22 (3/0) [ 1868.550081][T13888] dw2102: command 0x0e transfer failed. [ 1868.562809][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 1868.566661][T13888] dvb-usb: bulk message failed: -22 (3/0) [ 1868.568868][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1868.592797][T13888] dw2102: command 0x0e transfer failed. [ 1868.777694][ T5893] usb 4-1: USB disconnect, device number 118 [ 1868.900557][T13888] dvb-usb: bulk message failed: -22 (3/0) [ 1868.910584][T13888] dw2102: command 0x0e transfer failed. [ 1868.930264][T13888] dvb-usb: bulk message failed: -22 (3/0) [ 1868.936061][T13888] dw2102: command 0x0e transfer failed. [ 1869.008545][T13888] dvb-usb: bulk message failed: -22 (1/0) [ 1869.034831][T13888] dw2102: command 0x51 transfer failed. [ 1869.052953][T13888] dvb-usb: bulk message failed: -22 (5/0) [ 1869.063235][T13888] dw2102: i2c probe for address 0x68 failed. [ 1869.069762][T13888] dvb-usb: bulk message failed: -22 (5/0) [ 1869.076556][T13888] dw2102: i2c probe for address 0x69 failed. [ 1869.101838][T13888] dvb-usb: bulk message failed: -22 (5/0) [ 1869.107654][T13888] dw2102: i2c probe for address 0x6a failed. [ 1869.135943][T13888] dw2102: probing for demodulator failed. Is the external power switched on? [ 1869.193869][T13888] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1869.438631][T13888] rc_core: IR keymap rc-tt-1500 not found [ 1869.467296][T28871] input: syz0 as /devices/virtual/input/input170 [ 1869.474305][T13888] Registered IR keymap rc-empty [ 1869.494288][T13888] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1869.551644][T13888] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input169 [ 1869.600806][T13888] dvb-usb: schedule remote query interval to 250 msecs. [ 1869.620217][T13888] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1869.626356][T13888] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1869.645226][T13888] usb 7-1: USB disconnect, device number 9 [ 1869.706031][T13888] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1869.792583][ T5893] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1870.030055][T13897] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1870.051867][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1870.070232][ T5893] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1870.070311][T13888] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1870.107362][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.154277][ T5893] usb 6-1: config 0 descriptor?? [ 1870.169387][ T5893] pwc: Askey VC010 type 2 USB webcam detected. [ 1870.236848][T13897] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1870.246635][T13897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.256687][T13888] usb 7-1: Using ep0 maxpacket: 8 [ 1870.270537][T13888] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1870.271583][T13897] usb 5-1: config 0 descriptor?? [ 1870.284290][T13888] usb 7-1: config 179 has no interface number 0 [ 1870.292496][T13888] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1870.297733][T13897] hub 5-1:0.0: bad descriptor, ignoring hub [ 1870.313232][T13897] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1870.313698][T13888] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1870.379417][T13888] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1870.418556][T13888] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1870.534835][T13888] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1870.548390][T13888] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1870.580342][ T5893] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1870.584613][T13888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.589202][ T5893] pwc: recv_control_msg error -32 req 02 val 2700 [ 1870.608927][ T5893] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1870.612972][T28869] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1870.637254][ T5893] pwc: recv_control_msg error -32 req 04 val 1000 [ 1870.752224][ T5893] pwc: recv_control_msg error -32 req 04 val 1300 [ 1870.797045][ T5893] pwc: recv_control_msg error -32 req 04 val 1400 [ 1870.936968][T13888] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input171 [ 1871.318814][T13897] usb 7-1: USB disconnect, device number 10 [ 1871.318879][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1871.333183][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1873.292347][T13896] usb 5-1: USB disconnect, device number 102 [ 1873.448142][T28905] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1874.138399][ T5893] pwc: recv_control_msg error -71 req 04 val 1500 [ 1874.145496][ T5893] pwc: recv_control_msg error -71 req 02 val 2500 [ 1874.218747][ T5893] pwc: recv_control_msg error -71 req 02 val 2400 [ 1874.256124][ T5893] pwc: recv_control_msg error -71 req 02 val 2600 [ 1874.302220][ T5893] pwc: recv_control_msg error -71 req 02 val 2900 [ 1874.344037][ T5893] pwc: recv_control_msg error -71 req 02 val 2800 [ 1874.398895][ T5893] pwc: recv_control_msg error -71 req 04 val 1100 [ 1874.422532][ T5893] pwc: recv_control_msg error -71 req 04 val 1200 [ 1874.455509][ T5893] pwc: Registered as video103. [ 1874.493780][ T5893] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input172 [ 1874.534481][T28915] tipc: Started in network mode [ 1874.566575][T28915] tipc: Node identity ce8d9e1cc81a, cluster identity 4711 [ 1874.585753][ T5893] usb 6-1: USB disconnect, device number 58 [ 1874.618930][T28915] tipc: Enabled bearer , priority 0 [ 1874.692723][T28919] syzkaller0: entered promiscuous mode [ 1874.698339][T28919] syzkaller0: entered allmulticast mode [ 1874.959618][T28923] input: syz0 as /devices/virtual/input/input173 [ 1875.019550][T28928] ipip0: entered promiscuous mode [ 1875.150073][T13896] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1875.322568][T13896] usb 5-1: Using ep0 maxpacket: 8 [ 1875.336966][T28928] ipip0: entered allmulticast mode [ 1875.477555][T28915] tipc: Resetting bearer [ 1875.495183][T13896] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1875.511272][T13896] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1875.519825][T28911] tipc: Resetting bearer [ 1875.549532][T13896] usb 5-1: can't read configurations, error -71 [ 1875.609204][T28911] tipc: Disabling bearer [ 1876.107461][T28944] ipip0: entered promiscuous mode [ 1876.112719][T28944] ipip0: entered allmulticast mode [ 1876.148920][T28945] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1876.284137][ T5921] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1876.485615][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1876.497964][ T5921] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1876.513811][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1876.536488][ T5921] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1876.555168][ T5921] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1876.577863][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.632953][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1876.632973][ T30] audit: type=1326 audit(1762567470.722:7665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28947 comm="syz.4.6036" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f701158f6c9 code=0x0 [ 1876.664871][ T5921] usb 6-1: config 0 descriptor?? [ 1876.879522][ T5921] hdpvr 6-1:0.0: firmware version 0xd dated jl;S11!vOp [ 1876.879522][ T5921] 4(r [ 1876.879522][ T5921] d2}d~٭^r [ 1877.096504][T28941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1877.113933][T28941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.181032][T13896] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1877.195994][ T5921] hdpvr 6-1:0.0: device init failed [ 1877.202117][ T5921] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 1877.219148][ T5921] usb 6-1: USB disconnect, device number 59 [ 1877.480031][T13896] usb 7-1: Using ep0 maxpacket: 32 [ 1877.487480][T13896] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1877.496824][T13896] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1877.506397][T13896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.533884][T13896] usb 7-1: Product: syz [ 1877.538153][T13896] usb 7-1: Manufacturer: syz [ 1877.550298][T13896] usb 7-1: SerialNumber: syz [ 1877.573901][T13896] usb 7-1: config 0 descriptor?? [ 1877.597900][T13896] gs_usb 7-1:0.0: Required endpoints not found [ 1877.877188][T28952] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1877.918064][T13896] usb 7-1: USB disconnect, device number 11 [ 1878.120372][T28967] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6039'. [ 1878.252771][T28965] misc userio: Begin command sent, but we're already running [ 1879.564642][T28986] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6044'. [ 1881.150862][T28990] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1881.424782][T28973] fuse: Unknown parameter 'Qroup_id' [ 1881.480663][ T5893] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1881.677461][ T5893] usb 4-1: device descriptor read/64, error -71 [ 1882.190069][ T5893] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1883.328472][T29012] syzkaller0: entered promiscuous mode [ 1883.334385][T29012] syzkaller0: entered allmulticast mode [ 1883.428511][T29016] openvswitch: netlink: Flow actions attr not present in new flow. [ 1884.328205][T29029] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6058'. [ 1884.390130][T13896] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 1884.526216][T29033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1884.755741][T13896] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1884.766079][T13896] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1884.807406][T13896] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1884.845579][T13896] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1884.859996][T13896] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1884.883233][T13896] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1884.891113][T13896] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1884.902093][T13896] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1884.938296][T13896] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1884.950854][T13896] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1885.034454][T13896] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1885.042382][T13896] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1885.122740][T13896] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1885.183673][T13896] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1885.245057][T13896] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1885.262420][T13896] usb 7-1: string descriptor 0 read error: -22 [ 1885.269203][T13896] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1885.280230][T13896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.473439][ T5893] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1885.554027][T13896] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1885.729193][ T5921] usb 7-1: USB disconnect, device number 12 [ 1885.785732][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 1885.794053][ T5893] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1885.803502][ T5893] usb 4-1: config 0 has no interface number 0 [ 1885.809960][ T5893] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1885.824121][ T5893] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1885.834931][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.844955][ T5893] usb 4-1: Product: syz [ 1885.867509][ T5893] usb 4-1: Manufacturer: syz [ 1885.888625][ T5893] usb 4-1: SerialNumber: syz [ 1885.991267][ T5893] usb 4-1: config 0 descriptor?? [ 1886.025664][ T5893] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1886.055374][ T5893] em28xx 4-1:0.132: Video interface 132 found: [ 1886.456271][ T5893] em28xx 4-1:0.132: unknown em28xx chip ID (161) [ 1887.058993][ T5893] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1887.072027][ T5893] em28xx 4-1:0.132: board has no eeprom [ 1887.221840][ T5893] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1887.238112][ T5893] em28xx 4-1:0.132: analog set to bulk mode. [ 1887.252419][T13896] em28xx 4-1:0.132: Registering V4L2 extension [ 1887.727006][T29060] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1887.818482][T29061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6066'. [ 1887.900164][T29059] em28xx 4-1:0.132: reading from i2c device at 0x8 failed: couldn't get the received message from the bridge (error=-5) [ 1888.091470][T28684] usb 4-1: USB disconnect, device number 121 [ 1888.101142][T13896] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1888.102398][T28684] em28xx 4-1:0.132: Disconnecting em28xx [ 1888.150086][T19672] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1888.280957][T19672] usb 1-1: device descriptor read/64, error -71 [ 1888.352658][T13896] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1888.366122][T13896] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1888.542008][T19672] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1888.640109][T13896] em28xx 4-1:0.132: No AC97 audio processor [ 1888.738050][T13896] usb 4-1: Decoder not found [ 1888.760081][T13896] em28xx 4-1:0.132: failed to create media graph [ 1888.977994][T19672] usb 1-1: device descriptor read/64, error -71 [ 1888.984445][T13896] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1889.022032][T13896] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1889.040503][T29067] ================================================================== [ 1889.048626][T29067] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 1889.056033][T29067] Read of size 8 at addr ffff888079044740 by task v4l_id/29067 [ 1889.063587][T29067] [ 1889.065928][T29067] CPU: 1 UID: 0 PID: 29067 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1889.065948][T29067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1889.065960][T29067] Call Trace: [ 1889.065967][T29067] [ 1889.065976][T29067] dump_stack_lvl+0x189/0x250 [ 1889.066006][T29067] ? __virt_addr_valid+0x1c8/0x5c0 [ 1889.066030][T29067] ? rcu_is_watching+0x15/0xb0 [ 1889.066051][T29067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1889.066075][T29067] ? rcu_is_watching+0x15/0xb0 [ 1889.066095][T29067] ? lock_release+0x4b/0x3e0 [ 1889.066111][T29067] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1889.066135][T29067] ? __virt_addr_valid+0x1c8/0x5c0 [ 1889.066159][T29067] ? __virt_addr_valid+0x4a5/0x5c0 [ 1889.066183][T29067] print_report+0xca/0x240 [ 1889.066204][T29067] ? v4l2_fh_open+0xac/0x420 [ 1889.066221][T29067] kasan_report+0x118/0x150 [ 1889.066239][T29067] ? v4l2_fh_open+0xac/0x420 [ 1889.066260][T29067] v4l2_fh_open+0xac/0x420 [ 1889.066276][T29067] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1889.066310][T29067] em28xx_v4l2_open+0x157/0x9a0 [ 1889.066341][T29067] v4l2_open+0x1bf/0x3a0 [ 1889.066362][T29067] chrdev_open+0x4cc/0x5e0 [ 1889.066379][T29067] ? __pfx_chrdev_open+0x10/0x10 [ 1889.066397][T29067] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1889.066418][T29067] ? __pfx_chrdev_open+0x10/0x10 [ 1889.066433][T29067] do_dentry_open+0x953/0x13f0 [ 1889.066458][T29067] vfs_open+0x3b/0x340 [ 1889.066475][T29067] ? path_openat+0x2ecd/0x3830 [ 1889.066497][T29067] path_openat+0x2ee5/0x3830 [ 1889.066533][T29067] ? __pfx_path_openat+0x10/0x10 [ 1889.066563][T29067] do_filp_open+0x1fa/0x410 [ 1889.066584][T29067] ? __lock_acquire+0xab9/0xd20 [ 1889.066601][T29067] ? __pfx_do_filp_open+0x10/0x10 [ 1889.066631][T29067] ? _raw_spin_unlock+0x28/0x50 [ 1889.066652][T29067] ? alloc_fd+0x64c/0x6c0 [ 1889.066682][T29067] do_sys_openat2+0x121/0x1c0 [ 1889.066703][T29067] ? __pfx_do_sys_openat2+0x10/0x10 [ 1889.066723][T29067] ? exc_page_fault+0x82/0x100 [ 1889.066748][T29067] ? do_user_addr_fault+0xc85/0x1380 [ 1889.066766][T29067] __x64_sys_openat+0x138/0x170 [ 1889.066789][T29067] do_syscall_64+0xfa/0xfa0 [ 1889.066813][T29067] ? lockdep_hardirqs_on+0x9c/0x150 [ 1889.066837][T29067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.066854][T29067] ? clear_bhb_loop+0x60/0xb0 [ 1889.066875][T29067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.066891][T29067] RIP: 0033:0x7f43e38a7407 [ 1889.066908][T29067] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1889.066923][T29067] RSP: 002b:00007ffea32b6bc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1889.066942][T29067] RAX: ffffffffffffffda RBX: 00007f43e3f57880 RCX: 00007f43e38a7407 [ 1889.066955][T29067] RDX: 0000000000000000 RSI: 00007ffea32b7f1a RDI: ffffffffffffff9c [ 1889.066967][T29067] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1889.066977][T29067] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1889.066987][T29067] R13: 00007ffea32b6e10 R14: 00007f43e40be000 R15: 000055906e0b34d8 [ 1889.067007][T29067] [ 1889.067013][T29067] [ 1889.370087][T29067] Allocated by task 13896: [ 1889.374515][T29067] kasan_save_track+0x3e/0x80 [ 1889.379204][T29067] __kasan_kmalloc+0x93/0xb0 [ 1889.383804][T29067] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1889.389184][T29067] em28xx_v4l2_init+0x10b/0x2e70 [ 1889.394133][T29067] em28xx_init_extension+0x120/0x1c0 [ 1889.399424][T29067] process_scheduled_works+0xae1/0x17b0 [ 1889.404973][T29067] worker_thread+0x8a0/0xda0 [ 1889.409566][T29067] kthread+0x711/0x8a0 [ 1889.413644][T29067] ret_from_fork+0x4bc/0x870 [ 1889.418233][T29067] ret_from_fork_asm+0x1a/0x30 [ 1889.423001][T29067] [ 1889.425330][T29067] Freed by task 13896: [ 1889.429391][T29067] kasan_save_track+0x3e/0x80 [ 1889.434077][T29067] __kasan_save_free_info+0x46/0x50 [ 1889.439288][T29067] __kasan_slab_free+0x5c/0x80 [ 1889.444084][T29067] kfree+0x19a/0x6d0 [ 1889.447986][T29067] em28xx_v4l2_init+0x1683/0x2e70 [ 1889.453021][T29067] em28xx_init_extension+0x120/0x1c0 [ 1889.458313][T29067] process_scheduled_works+0xae1/0x17b0 [ 1889.463860][T29067] worker_thread+0x8a0/0xda0 [ 1889.468459][T29067] kthread+0x711/0x8a0 [ 1889.472535][T29067] ret_from_fork+0x4bc/0x870 [ 1889.477126][T29067] ret_from_fork_asm+0x1a/0x30 [ 1889.481908][T29067] [ 1889.484233][T29067] The buggy address belongs to the object at ffff888079044000 [ 1889.484233][T29067] which belongs to the cache kmalloc-8k of size 8192 [ 1889.498294][T29067] The buggy address is located 1856 bytes inside of [ 1889.498294][T29067] freed 8192-byte region [ffff888079044000, ffff888079046000) [ 1889.512360][T29067] [ 1889.514685][T29067] The buggy address belongs to the physical page: [ 1889.521111][T29067] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79040 [ 1889.529870][T29067] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1889.538390][T29067] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1889.546369][T29067] page_type: f5(slab) [ 1889.550359][T29067] raw: 00fff00000000040 ffff88801a027280 ffffea0001853e00 dead000000000005 [ 1889.558947][T29067] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1889.567534][T29067] head: 00fff00000000040 ffff88801a027280 ffffea0001853e00 dead000000000005 [ 1889.576205][T29067] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1889.584880][T29067] head: 00fff00000000003 ffffea0001e41001 00000000ffffffff 00000000ffffffff [ 1889.593558][T29067] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1889.602225][T29067] page dumped because: kasan: bad access detected [ 1889.608654][T29067] page_owner tracks the page as allocated [ 1889.614368][T29067] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5480, tgid 5480 (S35iptables), ts 54549063785, free_ts 54465551939 [ 1889.634865][T29067] post_alloc_hook+0x240/0x2a0 [ 1889.639648][T29067] get_page_from_freelist+0x2365/0x2440 [ 1889.645197][T29067] __alloc_frozen_pages_noprof+0x181/0x370 [ 1889.651008][T29067] alloc_pages_mpol+0x232/0x4a0 [ 1889.655860][T29067] allocate_slab+0x96/0x350 [ 1889.660368][T29067] ___slab_alloc+0xf56/0x1990 [ 1889.665050][T29067] __slab_alloc+0x65/0x100 [ 1889.669465][T29067] __kmalloc_cache_noprof+0x411/0x6f0 [ 1889.674844][T29067] tomoyo_init_log+0x111f/0x1f70 [ 1889.679791][T29067] tomoyo_supervisor+0x340/0x1480 [ 1889.684830][T29067] tomoyo_find_next_domain+0x488/0x1aa0 [ 1889.690386][T29067] tomoyo_bprm_check_security+0x11c/0x180 [ 1889.696118][T29067] security_bprm_check+0x89/0x270 [ 1889.701152][T29067] bprm_execve+0x8ee/0x1450 [ 1889.705663][T29067] do_execveat_common+0x510/0x6a0 [ 1889.710696][T29067] __x64_sys_execve+0x94/0xb0 [ 1889.715383][T29067] page last free pid 5478 tgid 5478 stack trace: [ 1889.721714][T29067] __free_frozen_pages+0xbc4/0xd30 [ 1889.726852][T29067] __slab_free+0x2e7/0x390 [ 1889.731285][T29067] qlist_free_all+0x97/0x140 [ 1889.735979][T29067] kasan_quarantine_reduce+0x148/0x160 [ 1889.741453][T29067] __kasan_slab_alloc+0x22/0x80 [ 1889.746314][T29067] __kmalloc_noprof+0x3c3/0x7f0 [ 1889.751189][T29067] tomoyo_supervisor+0xbd5/0x1480 [ 1889.756239][T29067] tomoyo_env_perm+0x149/0x1e0 [ 1889.761007][T29067] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 1889.766673][T29067] tomoyo_bprm_check_security+0x11c/0x180 [ 1889.772399][T29067] security_bprm_check+0x89/0x270 [ 1889.777436][T29067] bprm_execve+0x8ee/0x1450 [ 1889.781958][T29067] do_execveat_common+0x510/0x6a0 [ 1889.786996][T29067] __x64_sys_execve+0x94/0xb0 [ 1889.791684][T29067] do_syscall_64+0xfa/0xfa0 [ 1889.796202][T29067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.802102][T29067] [ 1889.804428][T29067] Memory state around the buggy address: [ 1889.810056][T29067] ffff888079044600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1889.818141][T29067] ffff888079044680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1889.826218][T29067] >ffff888079044700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1889.834294][T29067] ^ [ 1889.840450][T29067] ffff888079044780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1889.848516][T29067] ffff888079044800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1889.856599][T29067] ================================================================== [ 1889.867589][T28684] em28xx 4-1:0.132: Closing input extension SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1889.910273][T19672] usb usb1-port1: attempt power cycle [ 1890.100328][T29067] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1890.107585][T29067] CPU: 1 UID: 0 PID: 29067 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1890.116617][T29067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1890.126679][T29067] Call Trace: [ 1890.129994][T29067] [ 1890.132933][T29067] dump_stack_lvl+0x99/0x250 [ 1890.137544][T29067] ? __asan_memcpy+0x40/0x70 [ 1890.142164][T29067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1890.147374][T29067] ? __pfx__printk+0x10/0x10 [ 1890.151977][T29067] vpanic+0x237/0x6d0 [ 1890.155975][T29067] ? __pfx_vpanic+0x10/0x10 [ 1890.160488][T29067] ? preempt_schedule+0xae/0xc0 [ 1890.165349][T29067] ? __pfx_preempt_schedule+0x10/0x10 [ 1890.170737][T29067] panic+0xb9/0xc0 [ 1890.174476][T29067] ? __pfx_panic+0x10/0x10 [ 1890.178903][T29067] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1890.184820][T29067] ? is_module_address+0x17/0xf0 [ 1890.189769][T29067] ? v4l2_fh_open+0xac/0x420 [ 1890.194364][T29067] check_panic_on_warn+0x89/0xb0 [ 1890.199318][T29067] ? v4l2_fh_open+0xac/0x420 [ 1890.203914][T29067] end_report+0x78/0x160 [ 1890.208278][T29067] kasan_report+0x129/0x150 [ 1890.212787][T29067] ? v4l2_fh_open+0xac/0x420 [ 1890.217387][T29067] v4l2_fh_open+0xac/0x420 [ 1890.221811][T29067] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1890.227806][T29067] em28xx_v4l2_open+0x157/0x9a0 [ 1890.232674][T29067] v4l2_open+0x1bf/0x3a0 [ 1890.236933][T29067] chrdev_open+0x4cc/0x5e0 [ 1890.241358][T29067] ? __pfx_chrdev_open+0x10/0x10 [ 1890.246303][T29067] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1890.252637][T29067] ? __pfx_chrdev_open+0x10/0x10 [ 1890.257578][T29067] do_dentry_open+0x953/0x13f0 [ 1890.262354][T29067] vfs_open+0x3b/0x340 [ 1890.266429][T29067] ? path_openat+0x2ecd/0x3830 [ 1890.271205][T29067] path_openat+0x2ee5/0x3830 [ 1890.275818][T29067] ? __pfx_path_openat+0x10/0x10 [ 1890.280773][T29067] do_filp_open+0x1fa/0x410 [ 1890.285283][T29067] ? __lock_acquire+0xab9/0xd20 [ 1890.290141][T29067] ? __pfx_do_filp_open+0x10/0x10 [ 1890.295188][T29067] ? _raw_spin_unlock+0x28/0x50 [ 1890.300048][T29067] ? alloc_fd+0x64c/0x6c0 [ 1890.304396][T29067] do_sys_openat2+0x121/0x1c0 [ 1890.309081][T29067] ? __pfx_do_sys_openat2+0x10/0x10 [ 1890.314291][T29067] ? exc_page_fault+0x82/0x100 [ 1890.319077][T29067] ? do_user_addr_fault+0xc85/0x1380 [ 1890.324366][T29067] __x64_sys_openat+0x138/0x170 [ 1890.329225][T29067] do_syscall_64+0xfa/0xfa0 [ 1890.333741][T29067] ? lockdep_hardirqs_on+0x9c/0x150 [ 1890.338958][T29067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.345027][T29067] ? clear_bhb_loop+0x60/0xb0 [ 1890.349715][T29067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.355613][T29067] RIP: 0033:0x7f43e38a7407 [ 1890.360035][T29067] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1890.379653][T29067] RSP: 002b:00007ffea32b6bc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1890.388076][T29067] RAX: ffffffffffffffda RBX: 00007f43e3f57880 RCX: 00007f43e38a7407 [ 1890.396059][T29067] RDX: 0000000000000000 RSI: 00007ffea32b7f1a RDI: ffffffffffffff9c [ 1890.404033][T29067] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1890.412007][T29067] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1890.419980][T29067] R13: 00007ffea32b6e10 R14: 00007f43e40be000 R15: 000055906e0b34d8 [ 1890.427969][T29067] [ 1890.431324][T29067] Kernel Offset: disabled [ 1890.435649][T29067] Rebooting in 86400 seconds..