last executing test programs: 32.090028013s ago: executing program 2 (id=2602): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[]}]}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="001502000000efe61f0ea420d2ece531c3ebd22ad186c75791ce28c60830854a1d5acb15e373d68a0dfdf7a38fee90"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x20, 0x31, 0xf, "fee509f042a0acf1e551534bea3f6a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea43", 0x7f}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}, {&(0x7f0000001400)="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", 0xf9e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690", 0x4}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x4d, 0xa, 0x1, "55ac07d4010400000000000000019dd37828c92b0000002000", 0x47314356}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 30.057700674s ago: executing program 2 (id=2614): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000740)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0xb, 0x2, "31e9"}, &(0x7f0000000980)={0x40, 0xf, 0x2}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "29c1"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x83}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x70}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x7e}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="2021e1000000e10decc6159ac49050436e04dc32753faa2e9b9e56914fc9a44fb1f7c2f23d31663c831c2e02698a9667edd8c1f3b1bfb1ab48ccd2bf67f4f8f77b148a6d1861d59cba7a61409ad6ca99796589d56fee1e75df1fc89babaa593df820c4645678fb08802d3906fe99cbd2294505be0849db6d80a83895964da137a0eac6fca1ff6ddaeb95070c3de7bd1216e823c18d07947581d1873cf885c4d617f30f71f91c73454fdec371de75f0cc959c9bb7fc73b87fd6f5ac853d89e67a7cb9a2a7c8feeca2cb9490c59b18666d3349cbe888eec4dab43e50247b5f900454888107"], &(0x7f0000000100)=ANY=[@ANYBLOB="0003620000001103a7b1b10a79b53fee904ee780d1a8cf8d70781f17ce2ffc1e25f6cd33b3064be5e7be3ba3b49e63bf7015252fc744ac0af819bf7cf2916bb113053a2aba05004233b7a42d502853d3ad1e23d9a8249fcf18cd08fe58497387fc3257088aa7510b"]}, &(0x7f00000004c0)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="0016ab000000b420de4bb47751e1739808234f4387b2df9ce8387f5b41b70f5aa526ac71acf0e1705eca980eee5122c45a11ef647460b6bd83bc059c68933b4ace72d2e0a81f88982f0ab87bbad622518b3a228c7b25cc110cecb57ad509dcc7a5cc000084cbdcac26f76430f4ebf7ee4b24e31062104707fad33bb10d39317eb403b2b2af6b70d53919d733408b05bf182890cb83044faae1ff06e4174bf807289bf09908d96c3ab36a29f21b639af6e8"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)=ANY=[@ANYBLOB="2000a400000000a2b9d61cfe8ae8ef8a4bcb7cdda152ae827c8fd67793343a6cbdc84ef482323cc5509634fe7c042fa6c865ba9e19afcec23909d0e698771c802faf7b283bcc9de02b3badd200000000ffffffff0b92ad66de8bf8cbb85a4fe56f9bf8e555bda50d47cd7ede250870ebb1dcce0c38790297d68de8f4c91fe3dae96000fcc712157619c29bac41231f2118ef2f5c371da96330486f9a2280c9864e80989a8371cdfbe577"], &(0x7f0000000440)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x10}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000180)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 26.049301452s ago: executing program 2 (id=2624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x260, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x230, 0x2, {{0x8, [0x3, 0x6, 0x10, 0xe, 0xe, 0xf, 0x0, 0xb, 0x0, 0xf, 0x8, 0x2, 0x2, 0x7, 0x0, 0x10], 0x1, [0x4, 0x6, 0x9, 0x8e4c, 0x4, 0x3, 0x5, 0x9, 0x7fff, 0x7ff, 0x8, 0xc76, 0x8, 0x0, 0x100, 0x7], [0x3, 0x5, 0x1000, 0x9, 0x3d, 0x1, 0x832d, 0x2, 0x67a7, 0x1, 0xb, 0x40, 0x2, 0xb22b, 0xfff, 0x4]}, [@TCA_MQPRIO_MAX_RATE64={0x70, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x2}, {0xc, 0x4, 0x7fff}, {0xc, 0x4, 0xffffffffffffffff}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x100000001}, {0xc, 0x4, 0xe}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0xf}, {0xc, 0x4, 0xff}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MAX_RATE64={0xa0, 0x4, 0x0, 0x1, [{0xc, 0x4, 0xffff}, {0xc, 0x4, 0xffffffff00000000}, {0xc, 0x4, 0x8000000000000000}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0xfff}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xfffffffffffffffd}, {0xc, 0x4, 0xb}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x3}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x58, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xaa}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0xe}, {0xc, 0x3, 0x1000}]}, @TCA_MQPRIO_MAX_RATE64={0x58, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x8}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xc}, {0xc}, {0xc, 0x4, 0xec44}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x7ff}]}, @TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x260}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 25.055272642s ago: executing program 2 (id=2627): r0 = fanotify_init(0x200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a00793628bd7000fddbdf25ff7f00000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000c4) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x238, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x51) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f00000001c0)={0x5, @capture={0x0, 0x0, {0x0, 0xfffffffd}, 0x10, 0xfffffff8}}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) stat(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x58c02, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYRES32, @ANYRESOCT=r0, @ANYRES8=r4, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="9996d04d75eab89d6321b4cf1f11c6ef1e5671716d4e24b7739a9e76ffc347161c95c7cbc7ef1f5ad5f1a66cacc6b8f9018272ed028a77f4cd8d3d14153312e517dd7613c3c66155ad4721556ad06d4befc8f625707fec6c487bfb38ceaa1541971ffa7410f9cf26fc4b8dcc9365f48620e85c05aee3885136f8fd1f16894c2a807dce8339e99e72eeba9ef6f1698f8691cde347f1", @ANYRES16=r8, @ANYRESDEC=0xee01, @ANYBLOB=',uid>', @ANYRESDEC=r8, @ANYBLOB=',appraise_type=imasig,\x00'], 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r10 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x10000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r10, 0x16) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r12 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) read(r12, &(0x7f0000000140)=""/109, 0x6d) fanotify_mark(r0, 0x1, 0x48008cd7, r3, 0x0) 21.965397651s ago: executing program 2 (id=2636): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'erspan0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000b40)={0x0, 0xffffffffffffffc7, &(0x7f0000000600)=[{&(0x7f0000000640)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x46) r7 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r9, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="576332f56236be7cfa73a36e5e436485a425bc1b921f22ca2d2a337eadf8319fe6a960f0f3b068e86c81441ebd2df73b1face8317ea70caa41f5e55b8523aabbbcdf1da83f227ae1208115de48e2a3fb3d4e4fd419b77a9b8c34a78300e6faa7a8362f89116b85ec1441bd2a13b9cce2ccfc334aba8b9cf61e3061b4b6f93b6ee030ce3a7e5f386f60059793878ca0df7398efba666be33efb40dfcf4a30d81e151d4e9bb23b8440047b2d849f7582e803", 0xb1}, {&(0x7f0000000680)="6125358b15cfd1b7424c9e026a766ce3b8a4d5bbf0f78ee9c3b094e0c9d272479e798bf977e94be9f42cef87292cbd0c9be18fc48fb0f00fd841aa51a584228890bba345d617e165c3fac9723e53765adc8c13fe93245e4a7e08c5645773b400c755e91dc0af29f46715267afb7947afc0addf510da112fa8b654757a5020f411ed2656909a86fdc6c9ea745882e029f4cefe31858b1facf0c08ea2c59f629dc17b7c3658802215a6f05a9f1", 0xac}, {&(0x7f00000003c0)="49f417814105a46aac87547e8a344dfb0996ec95076a3d12e699218ca98f4bffcfad38993d93bb646043", 0x2a}, {&(0x7f0000000780)="f318b45a3d8aed513e90235d54300a6373f775e36a58ca0f53e3ddcd8b8dccb6a2fc05b6d6f9ecba74e748a991ffbf264467e94b4622db20df0382c1ff1ca8dc6a9f6e05a36e6261f8b9e13e1b8753dd636e8f239d1de3b3f326ef84075a654a454e9f764f190397daee88879aafaa6b81a213802075e23b5dae233523677cbb255ff674afad254ed56fead3035b7bfc225c3d6b235d04d21e516562b0f5f513a7", 0xa1}, {&(0x7f0000000840)="4df37d3624c065eee5f80b7203eb165997617c9d9c98453a7b12458794916e34c2306f321a10e2a52e4651755b7c3b327ba4e778b3c2325b25a00c7909bb00c4c11383282420d9d19c646d545bc67f5d031389fc9fcdc529905ea64d202e493f2eb151a66d555d94946942bcc350f28561f55b9d77d7f402bc8d6f5a958c4ca6bc4c6d7bc99782c5c9d1a35c84b557d29ff533aa244ed6284055338502695a6605660d5763c464a8f68b3178ae21", 0xae}], 0x5, &(0x7f0000000900)=[{0x88, 0x10a, 0x9, "4a6c4c313fb87ee7b5253ac5691001d14e962f43cc66d6432f54e68969165e3f5b5b917b552b721a675ee63edfd8693e949c8a23f03e22eb79c4304c77e701ef9f5b6ddb463087b577861f18bb4ccdb5a43c9bd0acd5c7eff67ed38113ce3706ac84fe777ba0ef077eacdeb6189fe51beef770fe0cdc08b8"}, {0x78, 0x10e, 0x96, "441ca7fddda290dae91e8b290f9a642b066eb2b552ce05ee55be7847bcf07d1d8c31ae790e11969960a62268cb112e53fad6f0e76016d4d57bbf3c33ac20281251fa8c6a47e0bc92230f46f92c58c0d540bd3e8d721f33440919485bd7aa80bfeebf34fc9ee837"}, {0x50, 0x112, 0x24, "99030750f6ddb8744a9be51ac55291b7179d901b69d68583c345dcc2770692fa6ae1a83efb8145a8330b90c65fa083e333a66f67ff3adf520dea91"}, {0x28, 0x116, 0x5, "b118faf3db121fc5d85fc9e5065a1bc379a2874f98"}, {0x10, 0x3a, 0x40}, {0x28, 0x116, 0x24, "18b8c31bbf03e8598596534166b293f904e0"}, {0x58, 0x10e, 0xb, "319c6bae61c5cfef1b1ff11a4066b9f04611f5705cb9113068ef7583e8dd15a12d6dee5ef5f6532579cf788e88ece806fe56d31bc8d122993a3d29a26d850ff8fdb605edc5d0709d"}], 0x208}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x34}}, 0x0) 21.742918365s ago: executing program 2 (id=2637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x260, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x230, 0x2, {{0x8, [0x3, 0x6, 0x10, 0xe, 0xe, 0xf, 0x0, 0xb, 0x0, 0xf, 0x8, 0x2, 0x2, 0x7, 0x0, 0x10], 0x1, [0x4, 0x6, 0x9, 0x8e4c, 0x4, 0x3, 0x5, 0x9, 0x7fff, 0x7ff, 0x8, 0xc76, 0x8, 0x0, 0x100, 0x7], [0x3, 0x5, 0x1000, 0x9, 0x3d, 0x1, 0x832d, 0x2, 0x67a7, 0x1, 0xb, 0x40, 0x2, 0xb22b, 0xfff, 0x4]}, [@TCA_MQPRIO_MAX_RATE64={0x70, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x2}, {0xc, 0x4, 0x7fff}, {0xc, 0x4, 0xffffffffffffffff}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x100000001}, {0xc, 0x4, 0xe}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0xf}, {0xc, 0x4, 0xff}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MAX_RATE64={0xa0, 0x4, 0x0, 0x1, [{0xc, 0x4, 0xffff}, {0xc, 0x4, 0xffffffff00000000}, {0xc, 0x4, 0x8000000000000000}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0xfff}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xfffffffffffffffd}, {0xc, 0x4, 0xb}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x3}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x58, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xaa}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0xe}, {0xc, 0x3, 0x1000}]}, @TCA_MQPRIO_MAX_RATE64={0x58, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x8}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xc}, {0xc}, {0xc, 0x4, 0xec44}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x7ff}]}, @TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x260}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 21.416956895s ago: executing program 32 (id=2637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x260, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x230, 0x2, {{0x8, [0x3, 0x6, 0x10, 0xe, 0xe, 0xf, 0x0, 0xb, 0x0, 0xf, 0x8, 0x2, 0x2, 0x7, 0x0, 0x10], 0x1, [0x4, 0x6, 0x9, 0x8e4c, 0x4, 0x3, 0x5, 0x9, 0x7fff, 0x7ff, 0x8, 0xc76, 0x8, 0x0, 0x100, 0x7], [0x3, 0x5, 0x1000, 0x9, 0x3d, 0x1, 0x832d, 0x2, 0x67a7, 0x1, 0xb, 0x40, 0x2, 0xb22b, 0xfff, 0x4]}, [@TCA_MQPRIO_MAX_RATE64={0x70, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x2}, {0xc, 0x4, 0x7fff}, {0xc, 0x4, 0xffffffffffffffff}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x100000001}, {0xc, 0x4, 0xe}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0xf}, {0xc, 0x4, 0xff}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MAX_RATE64={0xa0, 0x4, 0x0, 0x1, [{0xc, 0x4, 0xffff}, {0xc, 0x4, 0xffffffff00000000}, {0xc, 0x4, 0x8000000000000000}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0xfff}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xfffffffffffffffd}, {0xc, 0x4, 0xb}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x3}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x58, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xaa}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0xe}, {0xc, 0x3, 0x1000}]}, @TCA_MQPRIO_MAX_RATE64={0x58, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x8}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xc}, {0xc}, {0xc, 0x4, 0xec44}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x7ff}]}, @TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x260}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 9.625892909s ago: executing program 4 (id=2669): fsopen(&(0x7f0000000100)='coda\x00', 0x0) 9.463116339s ago: executing program 4 (id=2670): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) semget$private(0x0, 0x1, 0x5db) listen(0xffffffffffffffff, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ptrace(0x10, 0x1) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = getpgid(0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x11, 0x0, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) add_key(&(0x7f0000000200)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) 8.205840941s ago: executing program 1 (id=2672): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94) write$uinput_user_dev(r2, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_DESTROY(r2, 0x5502) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x10, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0, 0x8004, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 7.968252407s ago: executing program 4 (id=2673): mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x4000010, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000641000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004d1000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 7.620120068s ago: executing program 4 (id=2676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x65bb, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x351a, 0x100, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000000)={0x5c, 0x5, 0x46}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x2, 0xf3}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}]}}}]}, 0x4c}}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r11, &(0x7f00000000c0)={0x1d, 0x0, 0x2000000000000001, {0x0, 0x0, 0x3}, 0xfe}, 0x18) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101000000000000000001000000090001007300003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a010300000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e74657200040002801400018006000100636f756e7465720080040280140000001000010000000000000000000000000a0000000000"], 0xe4}}, 0x0) 6.221930192s ago: executing program 1 (id=2677): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'erspan0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000b40)={0x0, 0xffffffffffffffc7, &(0x7f0000000600)=[{&(0x7f0000000640)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x46) r7 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r9, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="576332f56236be7cfa73a36e5e436485a425bc1b921f22ca2d2a337eadf8319fe6a960f0f3b068e86c81441ebd2df73b1face8317ea70caa41f5e55b8523aabbbcdf1da83f227ae1208115de48e2a3fb3d4e4fd419b77a9b8c34a78300e6faa7a8362f89116b85ec1441bd2a13b9cce2ccfc334aba8b9cf61e3061b4b6f93b6ee030ce3a7e5f386f60059793878ca0df7398efba666be33efb40dfcf4a30d81e151d4e9bb23b8440047b2d849f7582e803", 0xb1}, {0x0}, {&(0x7f0000000680)="6125358b15cfd1b7424c9e026a766ce3b8a4d5bbf0f78ee9c3b094e0c9d272479e798bf977e94be9f42cef87292cbd0c9be18fc48fb0f00fd841aa51a584228890bba345d617e165c3fac9723e53765adc8c13fe93245e4a7e08c5645773b400c755e91dc0af29f46715267afb7947afc0addf510da112fa8b654757a5020f411ed2656909a86fdc6c9ea745882e029f4cefe31858b1facf0c08ea2c59f629dc17b7c3658802215a6f05a9f1", 0xac}, {&(0x7f00000003c0)="49f417814105a46aac87547e8a344dfb0996ec95076a3d12e699218ca98f4bffcfad38993d93bb646043", 0x2a}, {&(0x7f0000000780)="f318b45a3d8aed513e90235d54300a6373f775e36a58ca0f53e3ddcd8b8dccb6a2fc05b6d6f9ecba74e748a991ffbf264467e94b4622db20df0382c1ff1ca8dc6a9f6e05a36e6261f8b9e13e1b8753dd636e8f239d1de3b3f326ef84075a654a454e9f764f190397daee88879aafaa6b81a213802075e23b5dae233523677cbb255ff674afad254ed56fead3035b7bfc225c3d6b235d04d21e516562b0f5f513a7", 0xa1}, {&(0x7f0000000840)="4df37d3624c065eee5f80b7203eb165997617c9d9c98453a7b12458794916e34c2306f321a10e2a52e4651755b7c3b327ba4e778b3c2325b25a00c7909bb00c4c11383282420d9d19c646d545bc67f5d031389fc9fcdc529905ea64d202e493f2eb151a66d555d94946942bcc350f28561f55b9d77d7f402bc8d6f5a958c4ca6bc4c6d7bc99782c5c9d1a35c84b557d29ff533aa244ed6284055338502695a6605660d5763c464a8f68b3178ae21", 0xae}], 0x6, &(0x7f0000000900)=[{0x88, 0x10a, 0x9, "4a6c4c313fb87ee7b5253ac5691001d14e962f43cc66d6432f54e68969165e3f5b5b917b552b721a675ee63edfd8693e949c8a23f03e22eb79c4304c77e701ef9f5b6ddb463087b577861f18bb4ccdb5a43c9bd0acd5c7eff67ed38113ce3706ac84fe777ba0ef077eacdeb6189fe51beef770fe0cdc08b8"}, {0x78, 0x10e, 0x96, "441ca7fddda290dae91e8b290f9a642b066eb2b552ce05ee55be7847bcf07d1d8c31ae790e11969960a62268cb112e53fad6f0e76016d4d57bbf3c33ac20281251fa8c6a47e0bc92230f46f92c58c0d540bd3e8d721f33440919485bd7aa80bfeebf34fc9ee837"}, {0x50, 0x112, 0x24, "99030750f6ddb8744a9be51ac55291b7179d901b69d68583c345dcc2770692fa6ae1a83efb8145a8330b90c65fa083e333a66f67ff3adf520dea91"}, {0x28, 0x116, 0x5, "b118faf3db121fc5d85fc9e5065a1bc379a2874f98"}, {0x10, 0x3a, 0x40}, {0x28, 0x116, 0x24, "18b8c31bbf03e8598596534166b293f904e0"}, {0x58, 0x10e, 0xb, "319c6bae61c5cfef1b1ff11a4066b9f04611f5705cb9113068ef7583e8dd15a12d6dee5ef5f6532579cf788e88ece806fe56d31bc8d122993a3d29a26d850ff8fdb605edc5d0709d"}], 0x208}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x34}}, 0x0) 5.945613338s ago: executing program 4 (id=2678): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000240)={0x14, 0x0, 0x0}, &(0x7f0000000900)={0x44, &(0x7f0000000580)={0x20, 0x9, 0x4, "03fd64f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x84, 0x3, "28ca34"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "72cb3c"}}) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x114600, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0)="b40a", 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r4, 0x0, 0x25a5, 0x0) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/33, 0x21) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="ea3d8100", 0x6, 0x48b01, &(0x7f0000000080)={0x11, 0x8100, r5}, 0x14) 4.748598195s ago: executing program 3 (id=2681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xa0}, {@in, 0x0, 0x32}, @in6=@loopback, {0xffffffffffbffffe, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffffffffffd}, {}, 0x70bd25, 0x0, 0xa, 0x1, 0x0, 0x9c}}, 0xf0}}, 0x800) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000008c0)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) 4.49992834s ago: executing program 1 (id=2682): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffffe, 0x12, r0, 0x0) io_uring_enter(r0, 0x7fb6, 0x26a7, 0x1, &(0x7f0000000000)={[0x401]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffffe, 0x12, r0, 0x0) (async) io_uring_enter(r0, 0x7fb6, 0x26a7, 0x1, &(0x7f0000000000)={[0x401]}, 0x8) (async) 4.42144611s ago: executing program 3 (id=2683): r0 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000040)={0xf030000, 0x1, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x980001, 0x0, '\x00', @value64=0xffffffffffffffff}}) ptrace(0x10, r0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r5, 0x8992, &(0x7f0000000000)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x8080000, 0x0, 0xf000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff1000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0xdddd1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x11000, 0x0, 0xf, 0x0, 0x0, 0x80, 0x54, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xddccb004, 0x80a0000, 0x9}, {0xeeef0000, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x60000010, 0x0, 0x0, 0x0, 0x0, 0x1c02, 0x5900, [0x0, 0x0, 0x10000, 0xfffffffffffffffe]}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="01f5050000000000300012800b00010067656e65766500002000028005000400010000a214000700fc0200000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) ptrace$setopts(0x4200, r0, 0xedc7, 0x455b843fbd864c4f) 4.084166958s ago: executing program 3 (id=2684): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x49, 0x1003ff}, 0xffffffff, 0x7}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x88, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000000300)=0x4) close(r0) io_setup(0x8, &(0x7f0000000600)=0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0x400000}]) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x49, 0x1003ff}, 0xffffffff, 0x7}) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) (async) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x88, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000000300)=0x4) (async) close(r0) (async) io_setup(0x8, &(0x7f0000000600)) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) (async) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0x400000}]) (async) 3.717463592s ago: executing program 3 (id=2686): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x2) fanotify_mark(r1, 0x11, 0x4800001b, r0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (fail_nth: 9) 3.685737813s ago: executing program 0 (id=2687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0xd, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x60}}, 0x4000010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x401, 0xffffffff, 0x10004, 0xb99a, 0x0, "194f2f9592b10000000000000000f0ffffff00"}) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x6, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="f7ff00000407050025bd70000000000000000001"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x14) 3.630993546s ago: executing program 5 (id=2638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x0, 0xa, 0x3, "0000000000006c67f4bf40070c00", 0x3147504d}) r3 = syz_open_dev$vim2m(&(0x7f0000002840), 0x200, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000002880)={0x1, @pix_mp={0x9, 0xbc0, 0x34524742, 0x3, 0x7, [{0x0, 0x6}, {0x200, 0x95}, {0x5, 0xf3}, {0x80000001}, {0x2753, 0x5e}, {0xffffffff, 0x1}, {0x7, 0xfffffffc}, {0x9, 0x9}], 0x2, 0x5, 0x1, 0x1, 0x4}}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000b5a996be65e90b195cc67c6c2ebb428a14b09dacdf21adcce7fa960ecb4db72ab01d602655f7e5a3a48581e48ec81ef3a1a056e45e7fccb632cd317a3aaf27185ed07b79216ba301f5a114c8a64cfcaec583ab81f4548e14c400b6c6d15dffbac3a7b4da5fe581d578912c763312450e00cf14294f82838b4a7fdee4312f5f23ba1e4676daa63dfc69a7e35b765581aab9e2788f6a96b07bf59eb0a701d7350383d1e44bc147998a8331d7", @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990009000000230000001c007a800c000300b63425ba6dc9d6c40c00030016ff381e0e7c7e1c"], 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x8000) 3.301334319s ago: executing program 3 (id=2688): syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000009140007800800114000000000050015000c7facd5050005000a000000050001000700000005000400000000000900020073797a320000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x4, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001811", @ANYRES32, @ANYRES64], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000400)="b011d0cfce62e9195a2a2d9c41189f5896679b21a1f6a2c8a136d01bf5c619a4", 0x20) r6 = accept$alg(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1}, 0x81}], 0x1, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) r7 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000), 0x4) socket$kcm(0x2, 0x1000000000000002, 0x0) 3.268097312s ago: executing program 1 (id=2689): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x10, 0x89, {0x89, 0x24, "d7597a46d7bf7500d2282c35d3dd7d485859ca4b9b10c9c6841b4c0a624daec479b3df7b21c5914b3e8e3a88e191deb31f575d7538bb069087a0dee683b837bb32a494392240f44aec951af2925d908c8bf5db9d7128ab3d6b6885aaca8db1b05c93c5418928686bb88409b8d295c5950951fcc34c25950d6e8f24497e03f51b646855030e50a4"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000640)={0x20, 0x14, 0xf7, "cdc225ee039365bf5055dc97577d1a4a90b9356a9645c9b383aa8c0669c84b83afd096d871d5bf8a70df2fbdb0dec1a1878b8e5b12755e26dca1c53c079c6933d511385262406266276c4775d15c93dad7785aa26e17607ddefffa141adeab774210a0c41a152b2b1f331588664d0eb9d013cc7a4a88925e24daa3c6227d7718ba5726b24b62e31173b4bd89f73f23e88c23971503c166a1a56b972a1b9ca8c466875c8b123b6c601390f977516fb9cc0f37286d242a43b6436c03b61b9d7cf217a41b693c8bbfe1760b3f631299e42946cac26d2b7f9b7aba4bf0f906554119e550e288a6aa158ec0ffd135f239aa1c99462edb657dbc"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x81, 0x3, "3b73c5"}, &(0x7f00000003c0)={0x20, 0x82, 0x2, "d356"}, &(0x7f0000000400)={0x20, 0x83, 0x2, "c84c"}, &(0x7f0000000440)={0x20, 0x84, 0x1, '4'}, &(0x7f0000000480)={0x20, 0x85, 0x3, "14bfae"}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unshare(0x2c020400) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f00000000c0)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x10, 0x89, {0x89, 0x24, "d7597a46d7bf7500d2282c35d3dd7d485859ca4b9b10c9c6841b4c0a624daec479b3df7b21c5914b3e8e3a88e191deb31f575d7538bb069087a0dee683b837bb32a494392240f44aec951af2925d908c8bf5db9d7128ab3d6b6885aaca8db1b05c93c5418928686bb88409b8d295c5950951fcc34c25950d6e8f24497e03f51b646855030e50a4"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000640)={0x20, 0x14, 0xf7, "cdc225ee039365bf5055dc97577d1a4a90b9356a9645c9b383aa8c0669c84b83afd096d871d5bf8a70df2fbdb0dec1a1878b8e5b12755e26dca1c53c079c6933d511385262406266276c4775d15c93dad7785aa26e17607ddefffa141adeab774210a0c41a152b2b1f331588664d0eb9d013cc7a4a88925e24daa3c6227d7718ba5726b24b62e31173b4bd89f73f23e88c23971503c166a1a56b972a1b9ca8c466875c8b123b6c601390f977516fb9cc0f37286d242a43b6436c03b61b9d7cf217a41b693c8bbfe1760b3f631299e42946cac26d2b7f9b7aba4bf0f906554119e550e288a6aa158ec0ffd135f239aa1c99462edb657dbc"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x81, 0x3, "3b73c5"}, &(0x7f00000003c0)={0x20, 0x82, 0x2, "d356"}, &(0x7f0000000400)={0x20, 0x83, 0x2, "c84c"}, &(0x7f0000000440)={0x20, 0x84, 0x1, '4'}, &(0x7f0000000480)={0x20, 0x85, 0x3, "14bfae"}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unshare(0x2c020400) (async) socket$l2tp(0x2, 0x2, 0x73) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f00000000c0)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket(0x840000000002, 0x3, 0x100) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) 3.172678088s ago: executing program 5 (id=2690): openat$iommufd(0xffffffffffffff9c, 0x0, 0x7c9102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) epoll_create(0x101) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a01010000000000000000020000000900010073797a30000000000900020073797a3200000000600004805c0001800c0001007061796c6f6164004c0002800800044000000000080006400000000208000240000000000800054000000000080003400000000008000140000000130800044000000072080003400000002e080002400000000220000000120a0102000000000000000007000000000000140000001100010000000000000000000000000a000000000000000000"], 0xd4}}, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000380)={0x57ef, 0x6}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) setsockopt$sock_int(r4, 0x1, 0x5, 0x0, 0x0) recvfrom(r4, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x9) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000021c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3fe0000000000, 0xfffffffd}}, 0x30) 2.685376556s ago: executing program 0 (id=2691): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'erspan0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000b40)={0x0, 0xffffffffffffffc7, &(0x7f0000000600)=[{&(0x7f0000000640)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x46) r7 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r9, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="576332f56236be7cfa73a36e5e436485a425bc1b921f22ca2d2a337eadf8319fe6a960f0f3b068e86c81441ebd2df73b1face8317ea70caa41f5e55b8523aabbbcdf1da83f227ae1208115de48e2a3fb3d4e4fd419b77a9b8c34a78300e6faa7a8362f89116b85ec1441bd2a13b9cce2ccfc334aba8b9cf61e3061b4b6f93b6ee030ce3a7e5f386f60059793878ca0df7398efba666be33efb40dfcf4a30d81e151d4e9bb23b8440047b2d849f7582e803", 0xb1}, {0x0}, {&(0x7f0000000680)="6125358b15cfd1b7424c9e026a766ce3b8a4d5bbf0f78ee9c3b094e0c9d272479e798bf977e94be9f42cef87292cbd0c9be18fc48fb0f00fd841aa51a584228890bba345d617e165c3fac9723e53765adc8c13fe93245e4a7e08c5645773b400c755e91dc0af29f46715267afb7947afc0addf510da112fa8b654757a5020f411ed2656909a86fdc6c9ea745882e029f4cefe31858b1facf0c08ea2c59f629dc17b7c3658802215a6f05a9f1", 0xac}, {&(0x7f00000003c0)="49f417814105a46aac87547e8a344dfb0996ec95076a3d12e699218ca98f4bffcfad38993d93bb646043", 0x2a}, {&(0x7f0000000780)="f318b45a3d8aed513e90235d54300a6373f775e36a58ca0f53e3ddcd8b8dccb6a2fc05b6d6f9ecba74e748a991ffbf264467e94b4622db20df0382c1ff1ca8dc6a9f6e05a36e6261f8b9e13e1b8753dd636e8f239d1de3b3f326ef84075a654a454e9f764f190397daee88879aafaa6b81a213802075e23b5dae233523677cbb255ff674afad254ed56fead3035b7bfc225c3d6b235d04d21e516562b0f5f513a7", 0xa1}, {&(0x7f0000000840)="4df37d3624c065eee5f80b7203eb165997617c9d9c98453a7b12458794916e34c2306f321a10e2a52e4651755b7c3b327ba4e778b3c2325b25a00c7909bb00c4c11383282420d9d19c646d545bc67f5d031389fc9fcdc529905ea64d202e493f2eb151a66d555d94946942bcc350f28561f55b9d77d7f402bc8d6f5a958c4ca6bc4c6d7bc99782c5c9d1a35c84b557d29ff533aa244ed6284055338502695a6605660d5763c464a8f68b3178ae21", 0xae}], 0x6, &(0x7f0000000900)=[{0x88, 0x10a, 0x9, "4a6c4c313fb87ee7b5253ac5691001d14e962f43cc66d6432f54e68969165e3f5b5b917b552b721a675ee63edfd8693e949c8a23f03e22eb79c4304c77e701ef9f5b6ddb463087b577861f18bb4ccdb5a43c9bd0acd5c7eff67ed38113ce3706ac84fe777ba0ef077eacdeb6189fe51beef770fe0cdc08b8"}, {0x78, 0x10e, 0x96, "441ca7fddda290dae91e8b290f9a642b066eb2b552ce05ee55be7847bcf07d1d8c31ae790e11969960a62268cb112e53fad6f0e76016d4d57bbf3c33ac20281251fa8c6a47e0bc92230f46f92c58c0d540bd3e8d721f33440919485bd7aa80bfeebf34fc9ee837"}, {0x50, 0x112, 0x24, "99030750f6ddb8744a9be51ac55291b7179d901b69d68583c345dcc2770692fa6ae1a83efb8145a8330b90c65fa083e333a66f67ff3adf520dea91"}, {0x28, 0x116, 0x5, "b118faf3db121fc5d85fc9e5065a1bc379a2874f98"}, {0x10, 0x3a, 0x40}, {0x28, 0x116, 0x24, "18b8c31bbf03e8598596534166b293f904e0"}, {0x58, 0x10e, 0xb, "319c6bae61c5cfef1b1ff11a4066b9f04611f5705cb9113068ef7583e8dd15a12d6dee5ef5f6532579cf788e88ece806fe56d31bc8d122993a3d29a26d850ff8fdb605edc5d0709d"}], 0x208}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x34}}, 0x0) 1.612412273s ago: executing program 4 (id=2692): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb', 0x4) fcntl$getownex(r2, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) listen(0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x23c}}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000180)=ANY=[], 0x1000f) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r4, &(0x7f0000001540)={&(0x7f0000000500)=@pppoe={0x2a, 0x0, {0x0, @local, 'nicvf0\x00'}}, 0x80, 0x0}, 0x0) 892.387432ms ago: executing program 3 (id=2693): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r3 = memfd_secret(0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000140)={{r4}, 0x48000, 0xe7a, 0xd}) socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x2, 0x4, 0x0, 0x2, 0xc, 0x0, 0x1, 0x0, [@sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5a, 0x6}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x60}}, 0x0) recvmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000000c0)=""/108, 0x6c}, {&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000200)=""/199, 0xc7}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x4}, 0x5}, {{0x0, 0x0, 0x0}, 0xffff6e84}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0x7f, 0x11457213}}, 0x0, 0x1200) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001a40)=0x14) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "1cb315f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}]}}]}, 0x154}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000001c00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x190000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0xd8, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000001}, 0x20) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xda4ad4d8387828c, 0x0) syz_usb_connect(0x6, 0x1dc, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x110, 0x7, 0x0, 0x7, 0x10, 0x9}, 0x3b, &(0x7f00000003c0)={0x5, 0xf, 0x3b, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x5e, 0x8, 0xfffe, 0x39}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "453f49c2a37975c547bf231c6b64dc84"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "fa7af8fdb165221b583b611401f10312"}]}, 0x7, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x804}}, {0x97, &(0x7f0000000680)=@string={0x97, 0x3, "92d494d78d4b9c1298a8a5588fb2568cc96a8993c887b2b008fd20738c4df90899ae94552fc094444dad735a0e395f82dbe2076451371024f6b7cd1df1731a98364a0a6779768a6510a5ce3c27f91ab3933cc27a294f6d7b9792aea27d68a50348ef83caaaaeeb682d03d401679c634519b8a8f87192309b2e98b551fb7ab5e7dba9c4c43cbc87894868caaa02b9b4257258ed994e"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x3009}}, {0x2e, &(0x7f0000001880)=ANY=[@ANYBLOB="2e031cd18834ef5f8677e29770cd4c3418251f0dec3bd00460ee362a4a2fd9e266e0f364e80516183b320a3e57cf"]}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x408}}]}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000340)={'veth0_to_batadv\x00', @random="c102bd49b447"}) ioctl$TUNSETGROUP(r3, 0x400454ce, 0xffffffffffffffff) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4010250000002503d3b64653c784c92c648c099e201c076cfdaac1d923e15e56d8314296480234d9abd4e7"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002000000ff2505a8e44000010203010902240001014e20ff090400070207010308090501020004fa2b56090582021000405b03"], &(0x7f0000000100)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xf, 0x0, 0x9, 0x40, 0x2}, 0x35, &(0x7f00000000c0)={0x5, 0xf, 0x35, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xac, "8f8075b3386aba88e00f7fef6be2dd04"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x2, 0x1, 0x8, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xf1, 0x5, 0x3}]}}) 855.634958ms ago: executing program 0 (id=2694): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r0, 0x1, 0x70bd28}, 0x14}}, 0x0) 717.483701ms ago: executing program 0 (id=2695): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010015, 0x0, 0x40700}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x24, 0x101, 0x70bd22, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4048957}, 0x40000) 401.526846ms ago: executing program 0 (id=2696): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0xec}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f00000000c0)=0x2) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000100)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000240)={&(0x7f0000000140)=""/229, 0xe5}) fcntl$setlease(r2, 0x400, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000480)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000004c0)={"10e5057548be3d6436531313ffa19e2d", r3, r4, {0x81, 0x41e5}, {0x10001, 0x5}, 0x0, [0xed55, 0x100000001, 0x0, 0x3, 0x0, 0x0, 0x6, 0x81, 0x5, 0x7, 0x9, 0x1fd5c000000, 0x80, 0x2, 0xffffffffffffff20, 0xf]}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x4400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000800)={0xffffffffffffffff}, 0x11e0830ea26217ac, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000880)={0x13, 0x10, 0xfa00, {&(0x7f0000000600), r6, 0x2}}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x4018, r2}, 0x18) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000940)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x4000010, r5, 0x8000000) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000980)) sendmsg$inet_sctp(r5, &(0x7f0000000c80)={&(0x7f00000009c0)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="fb692deec8822f00c89aa2db233a45dea201167ec9134f90bc57cb4de55cd80294466e6a5667e9a32e69c90557beb3c40862d56cfb7d63112770183f351302e79c43742eb9c4b639ca3f2c04898d9b66b2ab5a411661b6fd8b691399fac9010f442cb403bcc54f04570cf269e30653e57108335fc3c17eed95e390f426ee535b102fcc91dbb03d51c5786945fb9a584e1b0fd45fff83021aa546cab1dc45c82797645f4b95ddee6ba8565a8f6472053c6dbef700346df06d4d6befcbf6930b69fc", 0xc1}, {&(0x7f0000000b00)="b2ea418bcf49d032b9b8f6c3888b23dfad1e474459b414814e4a8b007782ae5b546103ca127fe1f95934d910c0273573eef6a93a8960012091544d0eb5390c5c824dc8a874ab9dca9f82d712a8748ff56ffe0dccb9d35a1a98259752b7688c1a6da3acfe7def547a15fe74aaff6c2027198992b9d4dde6c7c5a32ae87a917447106f93904af6db25167563f86a", 0x8d}], 0x2, &(0x7f0000000c00)=[@authinfo={0x18, 0x84, 0x6, {0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}], 0x50, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000cc0)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r5) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x90, r7, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0dc06a1d9e64f73e897bf70d56"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c50bc7aae881b10e8921ed9336"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ca7fe2b625852fce34b9932372"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "62261bfa71"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5f46172fb5e572610d0f110d8c"}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x8800}, 0x4800) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000f40)=[@text16={0x10, &(0x7f0000000f00)="0f23d30f01c5baf80c66b854aee08a66efbafc0c66ed66b8010000000f01d9ea00001701f3ac0f3806ba00002e0ff3c8660fc7316767f6eb", 0x38}], 0x1, 0x8, &(0x7f0000000f80)=[@dstype0={0x6, 0x5}, @cstype3={0x5, 0x7}], 0x2) faccessat2(r9, &(0x7f0000000fc0)='./file0\x00', 0x0, 0x1000) socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000001040)='./file0\x00', 0x600000, 0x6b) 113.710208ms ago: executing program 1 (id=2697): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x400}, 0x1c) close(r0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES32], 0xec) 65.452248ms ago: executing program 0 (id=2698): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000003140), 0x800) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004280)="ba5b8ea61489f0f38300fd701eb516b4c60bbe2ff4823e4606fb2bb264192217c6fa28b332cf26b91e1d9164bd551945a835ae0d1cbd61c683a32fcfc15e84e91526d14a8f3a5e20426db65cd52292757c753315dcfc610cc8fec0689484ec083ec9b5abb9fae2bf0a3b615f0dea062169cf61a9f0cb3f29a6c28752f80c082728c300e1ecca8a70b8e500dea6d9152bc6627bfd3018cfb624a1b541defe58da6df08027d67434aaa60468d9fc3772251814262313bc9f879561d5479379d0bcc9736efeb8b2927751c83c2beb3cebe9a44b8962332c6298095dd686e96a86ff0ea7add27ad201b64b7340ce6dfa43464a8270f0f11b1485389f8b4e85756be2ebcc8a560a2edf06e44cc43d256501a1e44283fc4c14cd5a17a8538c602de6eaa0db28eb73343825ef7d295cf1af0d4a3154db224d319f1c109a09bf3a723e5bf7c69aa82ce7150de7713ac205e73945a7f94b1cdfb1376f2e41a70fb7d39cc4e38e60c2ca1ab7937defac79abe448aed5be52805b47f4811729cccc363b0dd88472950ce5afedf7e3ee53e567540674d48528c0dd9c341ba63fe213d5c907889e1a048e7c239306ef73a03cdd8c2636831949418bc4b651e523f781f3588ce069c174e7195d6a15a14f09d14b1f7bb2b33d37421e63ddfa269ab8b62a0ee3d97d516a5bb00b8125e38eb3a536a0b17b54621febb2936dbba1079139474afcbdb0ce42811d1e4c345eddf278b16de9ef061afa842c4596f93d7f4b25a1e04efa933b7c3c9f69a6e998acc68e22b11bb935fa8715134028a6cdaecec54089c2a0c689dbb9b54114b03889ffc4230be929a2b27b04f8db25c52f0e994d55197cf4a035a060a5d0a5bb702bb1c5c4cd8762cfa2bd55440960be8fa8a21193cefb0ea9fd71854f8201129ea98e89224f80b50d3280b2ca4675719b12be1544eb3d1c9aa6d0b8fb3bbc76895d9bb836683f84fdd22fe08add2f5b05afdc35c1ca9464ff38c5023c6e83c08d4782056cfa79f5afcb6a64b3588611d728a201dd5347a476b41e230ca9d495df26795e8f3f3aaa3bf94f9b7480c2a6c699cf91a48f7b1f6cd489f65fe73e13c009e18d70ba6f14d2d6f1553ebda5e195342486f18229b2627418b336bebce7c27aab37618dc9f2451d9eb0680101af466f33aff9a8b12961e2cd01e815f673190e7c3cbf84cf0d233679cdd5cac74c4fc4d784398fedd4f52c098632d8e10a12f34cbfb256ba61362432ec74732abc64c3b711f2aab8273ef88e31897d2e503bb80493c0a1182d638420beb6ef9e11aca868c9fc61aa787ca8dbac99df545ce2d5d5c4fc7e31e415e5c2b06a32abeab7306c528bd22c23135e94fafa4271ad4bb229871909786a2252b8214a30f09bea5913b84079d2fe6845d75013a15069002b0e0956e4c81c2a9f75fcc040c47ad4c23a4f2797c8d9c43f87cbbe0786b11967d5ad1dcbc5fe39b61615ba16392337b78bd5e5fc9ad9d646be0ab3a8d246309e056fa66d34ddef99b7371713b9e2827a30d54645664743af794ebbe927e43df9146950aa24058b81ce7f9555d1987baa47c486bc4180db65b897eb21ff2529423c88f2227ef4eef0b035ccc9d11f895d18ed9f00504d9db260d1561a5cc3692a52dac20d64ed22c50da171b223fcfe0a7e451c8341deb63e3ed6ffca9fd79aac6c8cd4e58a4c2af8acd487bea4846b7c222add7872d21ab64567800fee1b1669f631201335fbc5d1b3d9045b000055edc3bd551518216893d708a44b438e4479e33508c12fe031e8f7a1968912eb7cbe4053f5940063c2fb5770387db74dd8707a71b7671cc5abf42012a9ee638c60f59d9678b22fc536ffb953843ed6c66ab9bcf7cf5ff249a440aa726339b9a96fd3a0e3c3ed11ab910ebdc3e0eba99809fbd8bf1580f0a140924bedce7e90ee7e0d8bb9f8cbc990da15772e67d36991a25c38b77ef6d01357ccbbf6549103955a4dc82e0b1cd5e16907a4e7f488b0949934947a7b69f3956b3b62c9d357c9a3329dda4b827437c6d0efc7f5b767253c0a7b463ec9ec9064142f0b14a1c617ef9b7130a51cc2b98079337edfac68c8b777b73bd58097daa9f64ca3b9daabcc53dfce7be8dcd83b73f453023d5732ab3bb95a80845e6e427ba688518ef7425cf036ad42df97b339ab880c949081ebe5f4c051823cd12679164984abc2a2e3676e7e44c20643e48a2f2440ef1b541b9baf3e8a7db7a0f01c5217ef20038474d9c1207e72fd71a25d5a8f7b91be13b3a3b9d57edcf7c88b0a3b4a060a7e03a5667e5b444b0057dd5ab4e1c85e09f5552faa5654bba884bdca0247f12b3244a0f7a0492e321eb418cfa75915d76e9e26d734345fbd6e9b40f9c47b203ebbfbad6b330ec90adac0e1b03745e48a1eb3fa3c079d47062bf5a779c3479e6f5c4b8800a1e7513fcdfa0a6c6bcaccc6f736a0ec4031d7fa23c89bb6a8702a694aa87e88521490a5dbd5d0e5775b561ef9d4376e367e31a83df641c55d3801f573ef7a2ea945379f9d07a04cf8bae55e51599719f79ca33917c421ff63a335e11b4f266f5171e27b60b544f893cc8fec2bd191ff7ed87476e31979df4f01d71af376541bf09c0147d3ccb91285e6eff7c44fc8031e3a03b47abea0828e42861d2747259e1f7815d1d18bc8efcc36a27643fbbbf33eeed6b5036773a305a901da08f858e1909ff3ea335bb48200020044b0711b67615a0626017da66274e804883aa858d04707d443805caceb8bd239e31ea7a446752fe789205bb083f1ca90d1589c43e8bb152801fff7bf3853d8bfcdd630b41aa3fe1f09bdc4cb1ec33885c21b883935468dfa05063f9d7c1faf14115ed359122187a90b2045c96650b2be20f1519edaa1d3597d2bb22e08954d00f7addb14b639258c75698a98046028c6f9ff187086b569cd4856d97ea1799722158e8418dde709acb7fcf890edeedf6f49c7d79ee5df4c535d53bb54ecd4a3031471262190d44b1d86a5410f34b80e387eee07acb83acb7de24b2df74b0b9bd6179e132d1a5e70fb52a2f704df3851e264192663297183b1dcf9e7f1a2c746991c2f239308201a1daa8b2478079af02204c8244adc87dfcc0397a4db01f1f079c39bed4b12a5c5e4cc0b0c66e83691ddb7e7c30d23a1b97ae7e0fdb56564ba2999c7aecced3e0fd1d185bdc1c27f4404f11177275563d1303dbdd6947277d90ff461425f6e6aa64a69a1463861f83fedd00d0c3f8c21eb9184cc02f501ab353cdcd3ec8da677e8da8472d22bf14f34bd5c4335dcb59d8a645a7074f604cf2defbd2fa005b0b88d64f010f1902612a3006dbd0c0c6af178ae888dcddd074845fd691dfe45d56311f491549581b225d6997703eb55cbd60beabb8d468d07ef9e6d8ad78521a455dd0595a66c2d5bef407cf266c4837e8b41ec5b08e7f097abc73e0e36ab26e101e5f994f672c741a49e608d93843e84a42162f0774436fded89e7e753902869178a9346c237266943780da10ac18b6a8abb97b558d4fb331fd90820b2a3b64b11776e7d4f53a1bb0f6695319120905d8d32f9042c3a40c2c47f89b4622cde88af69f732bb6438085a7c614a9cb913a7753feacbc54e32c33431230c78b252b4bc0874b1e07d85e7cb3b07957916d448bba0e9d97c320a7fca0e01948cf7507fb3bd94221e3b92ba3c55f00a4569d64c3eb3936a2fae6db0d527b55e40171f2df19b84cfcd57332eba0765eebabbd9e6a9bc8e1f43829d170025cd465318a28ef062815445264aee30b5976da2480cd70d23255b6f240ea6f211560b767ea16b8738f8e85398d4df771b1005e5d590062d55434d504b5e9be5a8b3d2b3b41413cfc2a808318679ef0b2607d6ef00496234956cdf74ba8332051a8facb438dceada860d3aad5cb33385023d224715cc28cec354686541f66902a883c4552528b078aadc8528a442dab2e68451d9ad0966687c6d8fd696652af8d43ffd37e7ccb96d5a0bf6d72c37685512e90bd085d5f46d36ef55af96e2eaa1f5d5ce44460413578d716f963df48ac4ce00130bb44db351e4fb52f8b2ae0a944c49514da5d740f3891c34b0681066f0c2f7c26a80a44018832051d2c358df63f6e339da476150cf834100f26e73ed4bbd82107c2fcd401955bcf1c83c2a1a1b1f72c60da8f9c5647113364cff4a204af27f131883e993e436c186b5319f1d2475842d032baaf41722e697e2d1fe83717e1fb6be097fea1fba7d354ebf8d688d78b0df5c11a49f3f3a2a134ba1157372820cf67138b7672bc6e115219df45ffbc31074cd6ef7ce0ec8574bda2c839a086335164894a9ccd2da9b53c95ea12f6499ced7e2011720f0fcc32fc6fd00a8a206754abec3525674040f63cad36056425d329cae87d1e76cdcb43fa95151f250362666eed4a3924551919da9d6ffb8094d836340ea3cfd1d4916b6b631bb0886f696e60b604c4d7fdd55e282e22c549814ce6f75bd3460488d3500ce58aa241a6a8c5d50af901df1b85dbd32fced3dfc4d510f08ccaf81fdae78db2d5bf7676f0b2ab72fe3f43878f7dc43e4bab02047ff51c02b37b1db2f68068fdee95f59248a633ee9dd1153b0a54129197fe8fea93fc473ce6097704da00fc25c99adbd1e24e5532868e8b1c2649699385a480785c88d837513a33ea024af35adf57c6c7a0bc8f5495d7424235116a79739c86842bb35e9ca5da7798f7ae3ccd9434dad566b70bed82c644cb65ddb37e94a2f06c332b32a829aad2ddc813ebcc07e07e5587f7f7ab27bafa0aac1441a809fba549bd3fa7b8c16851c3d22d7ba41ebb1b19f8e9f5d114950a5798ad8ed4d1b5bb4ddc6f3cecdd719baa78ad32d0fb94b8156811f9ef54ab2a29738e2e596b1424b19ef39d0a354c3e8aa6227f4fb2787b10cfc615dc356800066f800718edb658bb3b85d775c0724e7c2942c8cacf420a0e23fc2bc40d078ca5f4fb9d95236c8c35008c43e864b2ee0d7f2a634978c6c34bc2b5040a29ca1b1c60a92d7ff86b3c9dd90ebf3fb212d4c23d69be399837b92fa04dca5075ea7877561ab64664d12a1e1ff39cc20f4518b460ae9f87995bd3ae66272f3f24a47c6340cb0318b67acdb26064bcccf7ccba386e07127d9ffbda288cf2924623902d9f4be97605ab5dd02a969f44de8a94abd68020c1f47033ac2b7d0e9431035e358f7d876a119e31b154b6e66815f286a41a23cba9fea4dc4febb5210b291202e8dbeb6ee9e006f108ddf891ece25c7311e7f4c788c37e8a39382405627a547e609393cffd1cbfadf90ff9060a14700539d497dafb6a249e4ec814a9e68d7a954a3c51776af6fd839b9b4b1af37797431c15794508731fd5be32edc6514ee16681f9934b0d83185ca69820d3a590d511e9f5f3ee5bf33f6ed22d507481bd7f05aa644ff19809d49a3c2924cc408ddb839d6f07cf0894ec6a6372c453d23aa324802308833027861946679abd540548abb956743cf0ccb3925caff0c597334b72e8d081c7aa9822207426b16539e370678a2fda3f34555d721570e725e3eab5cce6e0f7faaa3580f6c7d7eedbab4a0b7af72d3daa450e467917181bb2c3eaec374209f7e74a4e9195487316e7c934d3f4d0a0ffd73ae1c0855690d5f03d04ad567dcdfc366f92bf13c3e667dbce23e2b64232c11f641bd7cac7f1f9eee72eb98a5cc28226afcd1fefec1b275186c48f063fc2e99448569bb5a903ad450a5812b17c8fa3a7ae639734974d368ad0968b2ff1381c128ab00b837d765e36bfdaf8d5284975faf739b9882a0db327ea522fbd71c3a708cc674bee98602540804d856829826a95543c0168af63ff084c46ed81320f5d6bcca8fe5955091caeb78ddf53b819ff91bce937e02025beaff559462045263a3ff132dfdb5024747bb5afcdf8dee04a8085a9268790256483e7f33fde71478f8772339154952dff0e1acffe87ee37f830c30b89042b778cc87fbbb7967fb0110a54ea4a7bbdc575a93dfcd4f1841c9a75dce63f90afed202aceb7a9593d0deece3adfd66b4f40f50c0cc1822835bfba2b20f25d991f8ed85204e9b56da4709e3c1544a96fcb914c327aa8d6e7e22b21c3745f579483a1959a2766cb34a961572c6b1cedc06cbb4299053514fbb384f8192f4a5e0483667c685b3fd032a9c01471651bd7f8503eb7a9b564f779f9d33b120fb9eae779e37b28c82790917da2d763186401bf9b9d3a50572dbd7f7ac54a5afed50594e175ecb23f9c9fb949bbf84b94ec580a1d70aa405d645ee0848517d239d5dd0c0474e0b50991236b57d6af5325621399fa647946be8b27bff179dabfbf084cd7bc3fdb5313636ba7ee5264e90d76add5b41c3d23fbcb2e9066f187bba2770abea27f2aaf8cbe545f216e5bdecb3a584511970314058474803a24f88903bbd69e333e2c9046183c7945736a0f39676b64b12b319c3ce11107679c67d87ab6e9e1d2d28905674e9da798e2026cb544d4ae356991d29ed4bd38f2a5a7c6cf2a30b1b6d48700cce7eb573e84a46c25070525f67d45538704ca3cf53be6c44e84fbb40387803e6db47b373cd36783689b7f93eb27287570dae90d21214a85d6bfa898fcc2181af6e25daea786d7d50afa58731b4fac9c9d2861c802cfa6ef854e747217c0a894a28d21d0a43b9de43985c4756c29b561029ef95cfdc27bf38f26dac2fdf97cc58d9c1c59bf4ee59768ad51a1d0d8de92d0e2c723b1ddf411d23566ce0b72cc227d41fb63b6a13188fe72525ad316fae05f5aa7233f7bfed187f1b1f87a861afb173552f5d7c9bc7acc95107bbc323c376044a01ab13da42d1ab27b86dc3de3b157e47790b78896bcb2c532a7b7487bb6f24c4021c42357df52e4d5848b5584609a482dea46d173d2a695958002abd093c25f002116f8afc55e729024a4dedf5a4d3c626ebd9367fc18e7e4c7554fba0ad7349c5d526ea6dbd2c03ff33580b15fec3c1f827e885db592b47015544f6b1d400bde1133afa0071f68feebd987a807cc6d5b1b8827410c0b6d46c4b0cf6a5df999f71ba3ef4d9dae246d3e58e7428d98a33076ffc525946780d0100000000000000b872f0999d47c6e424317bd8b0e2f70ac10dfaa19990e2a3f744ea5b32996dc228ff8de836b5ecb7e56cfb3dbf48172b5ff09eecf14439b8bbc5cf3ccc9863ef5547fa2896b73196cdcab97954f9acbec8e7d2626b1a3b8983fa31961ef8c8684ee824f343933cd73d516e1f8086556ab718010022319ab39f72b9e7989e50ec8681f3f6a778e7d23c8be2f4c26bc0ed855947107e93cc9e7515fe67b0c3b6e43d9fb157be2b2f2d9c799de55214974ec254f54cb6c20a76e656cd753502499750238164f1cefc37636e9eb4038053b631c95d80bc50e248ef5692eeb3f0c86aa50476eeb8f80f7115a4c410dd80264c123ff0b62b6291db85865816cc36871b061984a4afc440029c338684330a640e9b31e06eea4ded4e15d92c44a28368138aed08699aee772ac5734e74a65a6b8acd6cb86b2bcf12330ea808524ee838adfa3c185d24e3b2e5e89a5c9b95a659298a4935549e218d4bb4da58a2a663251ffae5c6137f8e70a86a3a26f4bdf2187fa4b9fb3c822ab961846fc01d247530c89daed7ef18a14cba3b47d369980cf48049021cbaa271caee8e00aea56ac7b5c29899348ae129ba840c39f33a7c2f0b2fefb5291d23ea7e5aa91101585576d9996a05897341e41063bf9cae137ed985283bbe3abe8e5a2754378e2ca7f1287056c8a05459d6a47ae4933c43879287b7ee557f3af6b047775ce76aa064be50caec22382a5e735765910fdd926d148ff77f42ee9f60fedb0c4158e02a385934c84521d52be0e0e0dddb0bae54acc1685919cc0d62192950c2e476d169f3533ff9dd440c6092450e15e5199d1d302bd81c3f1df78e71a39df0194beb1ff8dac956129b7be3d39b6505b17d2fb309859d6de62cf58760a4623267ec5496588d2ab5407e31a132f26fe29ece80ad80653ca190b83c9ac8345259087f0a84a001fbfb49c7442ab371d30897b94779039f17857ea96afb9fa41db33d7f3dcf123244975a1714a96db05fc1bcac173081dfaae090b16c05aca4dc98afd5798347b2cfc60ba92eb5e237752d64df1982ef13b116f6b010b0d2eca243f0f991a3f34a486bf58e06d6f922e07413d5844ff279559f8c401785e0207ece4ce7dc53c7705e2647a3c352902efb136fb0f6952eb8acebf90e7e56e831c228cc319e9d079d89d2ff1d43fc1a1139c2d7893ae246747a8c0c1c34c28cf5d6ea9b6c71b3e966b3f32259a19c3e35e4a08d4dd27052033fd7f1437ce9cd2088b31b8ba974558dedb1f8d4355e224e1b8df8da3bc93cb3f9b582ac379dcd0104a3f146d6d3fb699de99cccd099beabe63841a2dba61a465b258692fd98c9d4ff1fbc7212ea2066c5367f64707e7b2e14c51d78a5328d044ac33b1313502b986ac0462c6c3455f60f727e3e895b1e4df196d4f7a9e21c53a6500f0dc6e957530164bc648ebfedb6c973ae8fe49a92fca7274f29edcb202356775baab723f9e3a03a1d24d6dda56853ef0a91ca8bc7c530e28ee896efd1a1f5866206dd82e0eb554f4afedd9e87562903b49963d72d8caca7bb0975252f8f5578287e583aac618995a941299fa0973e67ae44469336e45b68f978fedfc8785e333610f8029b194226f86e770ac987cb84f9c76e5ccaaefe64bfcadf5635bee6077e05364e8872100003c9442e1c7cadd6f98e0dc9e2db17eabc8e6307ffd485dd06935a423d5c9cff832cc1d481e49d6dc00176d0342fdab19cec251b6fbed3ab6374ecd022de617cb2720ffebfb8b98b426cb445439b7b088fc7d9ed9a91989f2bbad8519070a6f916df7c49e3184fef1753387a5a2b5b991e04de915e053c471d198b843fb0afe5a68cf8fffe65bab08f6f5425d458a55de6355558bc5049e3a176977630a45de0b7076cdda2a167003090bbbfba5618ba2f6481cdb1386d1fb3c44a35c4d0cf9ca14dad697078fa4a062e55515c8cd69c6b2e911b19f637cba7c6ca26b3b4b2a74fd5cbc64f269fa5d6f9628830962db2d7ee04a6c37673c593771e568e8dd6cb965e67e6f4be91e625c1015160c234e8893eac8ba39708b9f32e519abfb9c5b2562e424d6eb2c8a737a830997821fc294c559d14d7c0bc8fb03ceb44f1bce3f63c46607ba95d70cb8098d30e1e3e6c5957ed3b4bb1b96d3c3879098247483e6c4f669bd556387b346bfc5497fd76a8e89bf185968f3e3dd58214ec024f5a4a180b31eefef8233bbcac8d9706b35476cd5d4cbe86034928f5c4a3c07fbd3e19ec89536aaa4fcbc2c7212ad2b5c3213a32d760e9883149f1770ef77a1313bcbbd41ebe246e847aac1baf975fdd326bf81fc68e19ce8cc7f056f5be524f35fdc7f4c0420c36846ce5415c725291ebe4964090e5c59d6844ad02acb37c437486e677b0b48c8bfced79275ff64f4be33b3492d40b8496754a36b9657efbaeb2e958de29b2de4c2346de000039c2877e1a21bf2b550d0ac6cce5feb72faaccb3ba47f498c460669ca345b5561f99b5f2f020a2c01b9d95399064eed1b7e75b802f3e70239b1c58c75f9067ca4543ec5d5e32fbfbb36d9ba9db1682c7c63e91f399752c155dc5077a2dacfdd6f9e52031290be704314d5ebdcccf9f30985dbae514d0283f6c4b7e3ebdd46b6279e8031b3847a8b46240053ce76bee81fa7b62266a1b501153aacda0803809cb4671d53f6e55dad8fd508373c1c2c9353a1c9f8de2509eacbe8e1733477880c549e327a8db5aae29169ac886cd5086b7f4e8823549c44e48fcc3683fd045dd93677336998c4016dc31823ec36a0d2ceca92c131cb3d8d5e08275f40f70943de8bbcf583a8985c30dbacef8425aaca57dc860753c31c17194f71c5d316572bcf81ab8db62e06c1ee39c6a24dd0f68d82c75762842c9bbb70127029154cb768aafd308471eb518c8aecf27c0efd01883961ce002a6231189293d00dc4d71824d2af860b7b3efc3c282b2719dc737bc5c3ac23dd7dd1420472d64acf6bb2d97503804a67cf9516e28167ab8fd38acf90ce56cfb304b59a5960f4f38963db71bd7ead69178d8ce52b74297ea3a0cdd55bb1eb849c02f8a87610bc7fc48a7af7d6e56cc41cff303afadeb6b4592605c3c3c2385c9a165c1c7e30194c0e994499472b08aaaaca3707b9baf3185f5b1314853d50d7b86f255615fd4009f07b87085bcc44c865f7e14d29e64f95001bc00c68afc3a0a0555027d460519f15264289c0918cf594b5ad37252575a9484a1de681f70745d2c6248581cd3702767115637c7cf7bc15a63775b90c285be77db8b85dc08ab81bb307694417a8d1c4aa1ed8716bc58a35e1dc8e23cde3748c6a93370397dd5c41371fbe45b86e3180e410dec137bd47730c7fdb7e062cafae686201b69071f6027ac38c191c333d27f5cc814c4522859598e7e54a04a7deae272533ae39e296785124efb6714089e6567b8db2cb403d87bea3a718b925825b914764ead06b48727e4c42bee1a36e9844f35c79fb50c89e4d9ad6a7b464299fcd10037166c2cecd017bfc184ef59fe2575e93a139a47e2baf5482f3a5d248413c87a39baf7e1eb1441ceb37f5df211844834808cd4df62b2e0b0b0a75da0e27720b5ae54fe00518e951e21ba4e1bc2d454e7bbfb86e3aaf7b9a25e354e56aeebd11e832471fc8edd0d3b4d3c123779cee870c86d97d703bc44b639a2fc49855fa54e9304de1dcedf90df397733fa94792c1bf0685335b027f3de1ac8f7f007f61ea9e51988f1fcbaf982b5b808645c4eb2fcaaca3c10667eddc4007061eaf3c250744baae0332bff7c9f077ede4b593853f4a165dcfee11b75d5107d1a86a6669c231415eef1dbb58f0b829ef03f4ee0e6acc787b1ad31807852ec4269d23322304842ac0cb13cd53e7e4479cb7fd9d7b4ecd722ecfea4c59f69760323d9930b03cba558cbe30711447ca93a01596d2bc245e9908738b1de17f07c9eeaa28472e08570a3129e81c874a894b23b1d8a77c1b4275fdea8adf5ff10bad0ebd41073059c3a900801699d4c1b023336ed5d675b57db4770f85b0cf1e0dab135633936ceaffbc4a8a1dd58bec1fd3fbcee9be9874158abd4376928b2023191d2c87f3657943a60dcb16212704cfbee381e58194c5671b594494c60325512773dc7dc38da37d8b275becb97f472067bfd7d3594afd78a0803839248c75fdce6b62711026cc32e1e3aa01152175a3096603394e773883790e96622a2b347ebe569eb26d4010115cfa611d4deb83ae4b0753b528fea440c95d5650acb53931f8ef6b6614b2aefd0754c5484b6139ad18a0cc23efbc3def8595ca45ef24cb6083c93261381a111f2ef450f5f95a343de96d4d426d3a7a72526b09b825a75df24dbf4d51a5b77f8cb948bcb78c4b4c09da92aeaf9855d40b0d5d8eabc5fe57c555f58ba0125e29512d2295b0c9ddba45f37a346e7826a4e3bcfa40a54be096f695adf9e66bc9f369556ac26c6fe46d4bd80ac949cd31e1390c14387a81cb5cf814944e60a2937", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0xfffffffffffffffe, 0x800000000400000, 0x81, 0x8, {0x1, 0xfffffffffffffffd, 0x6, 0x80000000004, 0x400000000000, 0x6, 0x6, 0xfffffffd, 0x4, 0x1000, 0x3fffffd, 0x0, 0x0, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0xa00, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0xd5, '\x00', 0x0, @fallback=0x28, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, &(0x7f0000000340)=[r5], 0x0, 0x10, 0x1}, 0x94) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) 0s ago: executing program 1 (id=2699): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='reno', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x86) fchdir(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r5, 0x7323, 0x0, 0x5, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r9, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea43", 0x7f}, {&(0x7f0000001400)="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", 0xf9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fddbaf1bff01a4e9c33db278", 0xba}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690", 0x4}], 0x1}}], 0x3, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r10, &(0x7f0000000040)=@random={'osx.', '\x00'}) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r9, 0x0, 0x0, 0x800) kernel console output (not intermixed with test programs): ss 0) [ 682.824706][ T5919] usb 5-1: config 0 descriptor?? [ 682.863851][ T5921] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 683.285743][ T5919] Bluetooth: Can't get state to change to load configuration err [ 683.293892][ T5919] Bluetooth: Loading sysconfig file failed [ 683.300362][ T5919] ath3k 5-1:0.0: probe with driver ath3k failed with error -16 [ 683.398337][ T5921] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 683.529107][ T5919] usb 5-1: USB disconnect, device number 83 [ 684.018470][ T5921] em28xx 3-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 684.029947][ T5921] em28xx 3-1:0.0: board has no eeprom [ 684.405225][T12253] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 684.567046][T12253] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 684.575557][T12253] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.586696][T12253] usb 1-1: config 0 has no interface number 0 [ 684.593575][T12253] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 684.604035][T12253] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.621308][T12253] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 684.630804][T12253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.640140][T12253] usb 1-1: Product: syz [ 684.644712][T12253] usb 1-1: Manufacturer: syz [ 684.650127][T12253] usb 1-1: SerialNumber: syz [ 684.663543][T12253] usb 1-1: config 0 descriptor?? [ 684.997155][ T9] usb 4-1: USB disconnect, device number 92 [ 685.058639][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 685.093057][T12253] usb 1-1: USB disconnect, device number 82 [ 685.107600][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 685.159790][ T9] keyspan 4-1:0.11: device disconnected [ 685.227292][ T5921] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 685.245406][ T5921] em28xx 3-1:0.0: dvb set to bulk mode. [ 685.264955][ T914] em28xx 3-1:0.0: Binding DVB extension [ 685.358944][ T914] em28xx 3-1:0.0: Registering input extension [ 685.849513][T14193] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2306'. [ 685.877839][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.884987][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.015706][ T5919] usb 3-1: USB disconnect, device number 75 [ 686.057498][ T5919] em28xx 3-1:0.0: Disconnecting em28xx [ 686.067361][ T5919] em28xx 3-1:0.0: Closing input extension [ 686.190589][ T5919] em28xx 3-1:0.0: Freeing device [ 686.655265][ T5919] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 686.713827][T14207] FAULT_INJECTION: forcing a failure. [ 686.713827][T14207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.783682][T14207] CPU: 0 UID: 0 PID: 14207 Comm: syz.1.2309 Not tainted syzkaller #0 PREEMPT(full) [ 686.783706][T14207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 686.783716][T14207] Call Trace: [ 686.783722][T14207] [ 686.783730][T14207] dump_stack_lvl+0x189/0x250 [ 686.783753][T14207] ? __pfx____ratelimit+0x10/0x10 [ 686.783770][T14207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 686.783787][T14207] ? __pfx__printk+0x10/0x10 [ 686.783819][T14207] should_fail_ex+0x414/0x560 [ 686.783847][T14207] _copy_to_user+0x31/0xb0 [ 686.783869][T14207] simple_read_from_buffer+0xe1/0x170 [ 686.783901][T14207] proc_fail_nth_read+0x1b3/0x220 [ 686.783934][T14207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 686.783956][T14207] ? rw_verify_area+0x2a6/0x4d0 [ 686.783975][T14207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 686.783994][T14207] vfs_read+0x200/0xa30 [ 686.784022][T14207] ? __pfx_vfs_read+0x10/0x10 [ 686.784045][T14207] ? do_sys_openat2+0x154/0x1c0 [ 686.784059][T14207] ? kmem_cache_free+0x19b/0x690 [ 686.784094][T14207] ksys_read+0x145/0x250 [ 686.784116][T14207] ? __pfx_ksys_read+0x10/0x10 [ 686.784141][T14207] ? do_syscall_64+0xbe/0x3b0 [ 686.784162][T14207] do_syscall_64+0xfa/0x3b0 [ 686.784179][T14207] ? lockdep_hardirqs_on+0x9c/0x150 [ 686.784196][T14207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.784213][T14207] ? clear_bhb_loop+0x60/0xb0 [ 686.784234][T14207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.784249][T14207] RIP: 0033:0x7f1fa2f8d8dc [ 686.784265][T14207] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 686.784279][T14207] RSP: 002b:00007f1fa3e60030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 686.784298][T14207] RAX: ffffffffffffffda RBX: 00007f1fa31e5fa0 RCX: 00007f1fa2f8d8dc [ 686.784312][T14207] RDX: 000000000000000f RSI: 00007f1fa3e600a0 RDI: 0000000000000004 [ 686.784323][T14207] RBP: 00007f1fa3e60090 R08: 0000000000000000 R09: 0000000000000000 [ 686.784334][T14207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.784343][T14207] R13: 00007f1fa31e6038 R14: 00007f1fa31e5fa0 R15: 00007f1fa330fa28 [ 686.784369][T14207] [ 687.065247][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 687.447082][T14204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.460166][T14204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.501214][T14204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2308'. [ 687.516243][ T5899] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 687.709979][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.721367][ T5899] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 687.736615][ T5899] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 687.755366][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.771443][ T5899] usb 2-1: config 0 descriptor?? [ 687.840048][ T5920] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 688.008869][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 688.022580][ T5920] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 688.035230][ T5920] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 688.138603][ T5920] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.248629][ T5920] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 688.303205][ T5899] Bluetooth: Can't get state to change to load configuration err [ 688.311223][ T5899] Bluetooth: Loading sysconfig file failed [ 688.321325][ T914] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 688.340839][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 688.365370][ T5899] ath3k 2-1:0.0: probe with driver ath3k failed with error -16 [ 688.397801][ T5920] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 688.447397][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.468050][ T5920] usb 5-1: config 0 descriptor?? [ 688.479016][ T914] usb 1-1: config 172 has an invalid interface number: 24 but max is 0 [ 688.491030][ T914] usb 1-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 688.538432][ T914] usb 1-1: config 172 has no interface number 0 [ 688.568980][ T914] usb 1-1: config 172 interface 24 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 688.590573][ T5921] usb 2-1: USB disconnect, device number 74 [ 688.604678][ T914] usb 1-1: config 172 interface 24 has no altsetting 0 [ 688.619082][ T914] usb 1-1: New USB device found, idVendor=1a72, idProduct=1000, bcdDevice=b7.e2 [ 688.642925][ T914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.662758][ T914] usb 1-1: Product: syz [ 688.682954][ T914] usb 1-1: Manufacturer: syz [ 688.684436][T14218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.688123][ T914] usb 1-1: SerialNumber: syz [ 688.700018][T14218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.999374][ T5920] usbhid 5-1:0.0: can't add hid device: -71 [ 690.006201][ T5920] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 690.094651][ T5919] usb 3-1: unable to get BOS descriptor or descriptor too short [ 690.136817][ T5919] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 690.170616][ T5919] usb 3-1: can't read configurations, error -71 [ 690.178159][ T5920] usb 5-1: USB disconnect, device number 84 [ 690.355266][ T5921] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 690.505796][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 690.516155][ T5921] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 690.532515][ T5921] usb 2-1: can't read configurations, error -61 [ 690.576609][T14265] FAULT_INJECTION: forcing a failure. [ 690.576609][T14265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.590768][T14265] CPU: 0 UID: 0 PID: 14265 Comm: syz.4.2321 Not tainted syzkaller #0 PREEMPT(full) [ 690.590793][T14265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 690.590805][T14265] Call Trace: [ 690.590813][T14265] [ 690.590821][T14265] dump_stack_lvl+0x189/0x250 [ 690.590847][T14265] ? __pfx____ratelimit+0x10/0x10 [ 690.590866][T14265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.590886][T14265] ? __pfx__printk+0x10/0x10 [ 690.590924][T14265] should_fail_ex+0x414/0x560 [ 690.590953][T14265] _copy_to_user+0x31/0xb0 [ 690.590977][T14265] simple_read_from_buffer+0xe1/0x170 [ 690.591005][T14265] proc_fail_nth_read+0x1b3/0x220 [ 690.591027][T14265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 690.591054][T14265] ? rw_verify_area+0x2a6/0x4d0 [ 690.591074][T14265] ? __lock_acquire+0xab9/0xd20 [ 690.591088][T14265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 690.591110][T14265] vfs_read+0x200/0xa30 [ 690.591130][T14265] ? fdget_pos+0x247/0x320 [ 690.591148][T14265] ? __pfx___mutex_lock+0x10/0x10 [ 690.591172][T14265] ? __pfx_vfs_read+0x10/0x10 [ 690.591195][T14265] ? __fget_files+0x2a/0x420 [ 690.591222][T14265] ? __fget_files+0x3a0/0x420 [ 690.591244][T14265] ? __fget_files+0x2a/0x420 [ 690.591276][T14265] ksys_read+0x145/0x250 [ 690.591301][T14265] ? __pfx_ksys_read+0x10/0x10 [ 690.591328][T14265] ? do_syscall_64+0xbe/0x3b0 [ 690.591351][T14265] do_syscall_64+0xfa/0x3b0 [ 690.591368][T14265] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.591387][T14265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.591402][T14265] ? clear_bhb_loop+0x60/0xb0 [ 690.591421][T14265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.591437][T14265] RIP: 0033:0x7f0dff58d8dc [ 690.591452][T14265] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 690.591465][T14265] RSP: 002b:00007f0e003a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 690.591482][T14265] RAX: ffffffffffffffda RBX: 00007f0dff7e5fa0 RCX: 00007f0dff58d8dc [ 690.591502][T14265] RDX: 000000000000000f RSI: 00007f0e003a80a0 RDI: 0000000000000003 [ 690.591513][T14265] RBP: 00007f0e003a8090 R08: 0000000000000000 R09: 0000000000000000 [ 690.591524][T14265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.591534][T14265] R13: 00007f0dff7e6038 R14: 00007f0dff7e5fa0 R15: 00007f0dff90fa28 [ 690.591561][T14265] [ 690.665307][ T5921] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 690.992606][T14271] FAULT_INJECTION: forcing a failure. [ 690.992606][T14271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.006706][T14271] CPU: 1 UID: 0 PID: 14271 Comm: syz.4.2322 Not tainted syzkaller #0 PREEMPT(full) [ 691.006731][T14271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 691.006751][T14271] Call Trace: [ 691.006760][T14271] [ 691.006768][T14271] dump_stack_lvl+0x189/0x250 [ 691.006794][T14271] ? __pfx____ratelimit+0x10/0x10 [ 691.006817][T14271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 691.006836][T14271] ? __pfx__printk+0x10/0x10 [ 691.006871][T14271] should_fail_ex+0x414/0x560 [ 691.006901][T14271] _copy_to_user+0x31/0xb0 [ 691.006924][T14271] simple_read_from_buffer+0xe1/0x170 [ 691.006952][T14271] proc_fail_nth_read+0x1b3/0x220 [ 691.006974][T14271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 691.006997][T14271] ? rw_verify_area+0x2a6/0x4d0 [ 691.007017][T14271] ? __lock_acquire+0xab9/0xd20 [ 691.007032][T14271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 691.007053][T14271] vfs_read+0x200/0xa30 [ 691.007072][T14271] ? fdget_pos+0x247/0x320 [ 691.007092][T14271] ? __pfx___mutex_lock+0x10/0x10 [ 691.007110][T14271] ? __pfx_vfs_read+0x10/0x10 [ 691.007128][T14271] ? __fget_files+0x2a/0x420 [ 691.007150][T14271] ? __fget_files+0x3a0/0x420 [ 691.007167][T14271] ? __fget_files+0x2a/0x420 [ 691.007193][T14271] ksys_read+0x145/0x250 [ 691.007212][T14271] ? __pfx_ksys_read+0x10/0x10 [ 691.007233][T14271] ? do_syscall_64+0xbe/0x3b0 [ 691.007253][T14271] do_syscall_64+0xfa/0x3b0 [ 691.007268][T14271] ? lockdep_hardirqs_on+0x9c/0x150 [ 691.007283][T14271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.007296][T14271] ? clear_bhb_loop+0x60/0xb0 [ 691.007313][T14271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.007327][T14271] RIP: 0033:0x7f0dff58d8dc [ 691.007342][T14271] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 691.007354][T14271] RSP: 002b:00007f0e003a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 691.007370][T14271] RAX: ffffffffffffffda RBX: 00007f0dff7e5fa0 RCX: 00007f0dff58d8dc [ 691.007381][T14271] RDX: 000000000000000f RSI: 00007f0e003a80a0 RDI: 0000000000000003 [ 691.007390][T14271] RBP: 00007f0e003a8090 R08: 0000000000000000 R09: 0000000000000000 [ 691.007399][T14271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.007407][T14271] R13: 00007f0dff7e6038 R14: 00007f0dff7e5fa0 R15: 00007f0dff90fa28 [ 691.007432][T14271] [ 691.534743][ T914] ftdi_sio 1-1:172.24: FTDI USB Serial Device converter detected [ 691.568725][ T914] ftdi_sio ttyUSB0: unknown device type: 0xb7e2 [ 691.613835][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 691.628973][ T914] usb 1-1: USB disconnect, device number 83 [ 691.639654][ T5921] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 691.660364][ T914] ftdi_sio 1-1:172.24: device disconnected [ 691.669980][ T5921] usb 2-1: can't read configurations, error -61 [ 691.688614][ T5921] usb usb2-port1: attempt power cycle [ 691.708561][T14279] FAULT_INJECTION: forcing a failure. [ 691.708561][T14279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.723375][T14279] CPU: 0 UID: 0 PID: 14279 Comm: syz.0.2325 Not tainted syzkaller #0 PREEMPT(full) [ 691.723391][T14279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 691.723398][T14279] Call Trace: [ 691.723403][T14279] [ 691.723407][T14279] dump_stack_lvl+0x189/0x250 [ 691.723424][T14279] ? __pfx____ratelimit+0x10/0x10 [ 691.723435][T14279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 691.723447][T14279] ? __pfx__printk+0x10/0x10 [ 691.723462][T14279] ? __might_fault+0xb0/0x130 [ 691.723481][T14279] should_fail_ex+0x414/0x560 [ 691.723499][T14279] _copy_from_user+0x2d/0xb0 [ 691.723513][T14279] core_sys_select+0x549/0xa20 [ 691.723533][T14279] ? __pfx_core_sys_select+0x10/0x10 [ 691.723558][T14279] ? __pfx_set_user_sigmask+0x10/0x10 [ 691.723575][T14279] __se_sys_pselect6+0x27a/0x300 [ 691.723592][T14279] ? __pfx___se_sys_pselect6+0x10/0x10 [ 691.723605][T14279] ? __pfx_ksys_write+0x10/0x10 [ 691.723617][T14279] ? rcu_is_watching+0x15/0xb0 [ 691.723638][T14279] ? __x64_sys_pselect6+0x21/0xf0 [ 691.723653][T14279] do_syscall_64+0xfa/0x3b0 [ 691.723663][T14279] ? lockdep_hardirqs_on+0x9c/0x150 [ 691.723674][T14279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.723683][T14279] ? clear_bhb_loop+0x60/0xb0 [ 691.723695][T14279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.723705][T14279] RIP: 0033:0x7f4a3e18eec9 [ 691.723714][T14279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.723723][T14279] RSP: 002b:00007f4a3f0c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 691.723734][T14279] RAX: ffffffffffffffda RBX: 00007f4a3e3e5fa0 RCX: 00007f4a3e18eec9 [ 691.723742][T14279] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 0000000000000040 [ 691.723748][T14279] RBP: 00007f4a3f0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 691.723754][T14279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.723760][T14279] R13: 00007f4a3e3e6038 R14: 00007f4a3e3e5fa0 R15: 00007f4a3e50fa28 [ 691.723775][T14279] [ 692.055291][ T5921] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 692.083758][T14281] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 692.092303][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 692.099698][ T5921] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 692.107588][ T5921] usb 2-1: can't read configurations, error -61 [ 692.247278][ T5921] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 692.286018][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 692.287276][T14292] FAULT_INJECTION: forcing a failure. [ 692.287276][T14292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.293086][ T5921] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 692.310048][T14292] CPU: 0 UID: 0 PID: 14292 Comm: syz.0.2331 Not tainted syzkaller #0 PREEMPT(full) [ 692.310074][T14292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 692.310085][T14292] Call Trace: [ 692.310093][T14292] [ 692.310101][T14292] dump_stack_lvl+0x189/0x250 [ 692.310130][T14292] ? __pfx____ratelimit+0x10/0x10 [ 692.310149][T14292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.310168][T14292] ? __pfx__printk+0x10/0x10 [ 692.310213][T14292] should_fail_ex+0x414/0x560 [ 692.310242][T14292] _copy_from_user+0x2d/0xb0 [ 692.310264][T14292] __copy_msghdr+0x3c5/0x5b0 [ 692.310289][T14292] ___sys_sendmsg+0x1a5/0x2a0 [ 692.310318][T14292] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.310373][T14292] ? __fget_files+0x2a/0x420 [ 692.310396][T14292] ? __fget_files+0x3a0/0x420 [ 692.310428][T14292] __x64_sys_sendmsg+0x19b/0x260 [ 692.310453][T14292] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 692.310483][T14292] ? __pfx_ksys_write+0x10/0x10 [ 692.310503][T14292] ? rcu_is_watching+0x15/0xb0 [ 692.310527][T14292] ? do_syscall_64+0xbe/0x3b0 [ 692.310549][T14292] do_syscall_64+0xfa/0x3b0 [ 692.310567][T14292] ? lockdep_hardirqs_on+0x9c/0x150 [ 692.310585][T14292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.310601][T14292] ? clear_bhb_loop+0x60/0xb0 [ 692.310622][T14292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.310639][T14292] RIP: 0033:0x7f4a3e18eec9 [ 692.310657][T14292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.310673][T14292] RSP: 002b:00007f4a3f0c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.310692][T14292] RAX: ffffffffffffffda RBX: 00007f4a3e3e5fa0 RCX: 00007f4a3e18eec9 [ 692.310706][T14292] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 692.310717][T14292] RBP: 00007f4a3f0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 692.310727][T14292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.310738][T14292] R13: 00007f4a3e3e6038 R14: 00007f4a3e3e5fa0 R15: 00007f4a3e50fa28 [ 692.310766][T14292] [ 692.335194][ T5919] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 692.443269][ T5921] usb 2-1: can't read configurations, error -61 [ 692.571159][ T5921] usb usb2-port1: unable to enumerate USB device [ 692.721907][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.749186][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 692.770343][ T5919] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 692.795197][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.875321][ T5919] usb 4-1: config 0 descriptor?? [ 692.981538][T14310] fuse: Bad value for 'fd' [ 693.076694][T14312] FAULT_INJECTION: forcing a failure. [ 693.076694][T14312] name failslab, interval 1, probability 0, space 0, times 0 [ 693.103117][T14312] CPU: 0 UID: 0 PID: 14312 Comm: syz.4.2336 Not tainted syzkaller #0 PREEMPT(full) [ 693.103143][T14312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 693.103154][T14312] Call Trace: [ 693.103162][T14312] [ 693.103171][T14312] dump_stack_lvl+0x189/0x250 [ 693.103196][T14312] ? __pfx____ratelimit+0x10/0x10 [ 693.103215][T14312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.103237][T14312] ? __pfx__printk+0x10/0x10 [ 693.103266][T14312] ? __pfx___might_resched+0x10/0x10 [ 693.103285][T14312] ? fs_reclaim_acquire+0x7d/0x100 [ 693.103313][T14312] should_fail_ex+0x414/0x560 [ 693.103343][T14312] should_failslab+0xa8/0x100 [ 693.103368][T14312] kmem_cache_alloc_node_noprof+0x77/0x710 [ 693.103391][T14312] ? __alloc_skb+0x112/0x2d0 [ 693.103409][T14312] ? netlink_autobind+0xdb/0x300 [ 693.103435][T14312] __alloc_skb+0x112/0x2d0 [ 693.103458][T14312] netlink_sendmsg+0x5c6/0xb30 [ 693.103493][T14312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.103517][T14312] ? aa_sock_msg_perm+0xf1/0x1d0 [ 693.103536][T14312] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 693.103552][T14312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.103573][T14312] __sock_sendmsg+0x219/0x270 [ 693.103593][T14312] ____sys_sendmsg+0x505/0x830 [ 693.103621][T14312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 693.103652][T14312] ? import_iovec+0x74/0xa0 [ 693.103677][T14312] ___sys_sendmsg+0x21f/0x2a0 [ 693.103701][T14312] ? __pfx____sys_sendmsg+0x10/0x10 [ 693.103759][T14312] ? __fget_files+0x2a/0x420 [ 693.103781][T14312] ? __fget_files+0x3a0/0x420 [ 693.103815][T14312] __x64_sys_sendmsg+0x19b/0x260 [ 693.103839][T14312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 693.103871][T14312] ? __pfx_ksys_write+0x10/0x10 [ 693.103890][T14312] ? rcu_is_watching+0x15/0xb0 [ 693.103915][T14312] ? do_syscall_64+0xbe/0x3b0 [ 693.103937][T14312] do_syscall_64+0xfa/0x3b0 [ 693.103952][T14312] ? lockdep_hardirqs_on+0x9c/0x150 [ 693.103968][T14312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.103984][T14312] ? clear_bhb_loop+0x60/0xb0 [ 693.104003][T14312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.104019][T14312] RIP: 0033:0x7f0dff58eec9 [ 693.104034][T14312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.104048][T14312] RSP: 002b:00007f0e003a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.104067][T14312] RAX: ffffffffffffffda RBX: 00007f0dff7e5fa0 RCX: 00007f0dff58eec9 [ 693.104079][T14312] RDX: 0000000020024090 RSI: 00002000000001c0 RDI: 0000000000000003 [ 693.104091][T14312] RBP: 00007f0e003a8090 R08: 0000000000000000 R09: 0000000000000000 [ 693.104103][T14312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.104113][T14312] R13: 00007f0dff7e6038 R14: 00007f0dff7e5fa0 R15: 00007f0dff90fa28 [ 693.104141][T14312] [ 693.413174][ T5919] Bluetooth: Can't get state to change to load configuration err [ 693.421066][ T5919] Bluetooth: Loading sysconfig file failed [ 693.427054][ T5919] ath3k 4-1:0.0: probe with driver ath3k failed with error -16 [ 693.531848][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'. [ 693.900466][T14320] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2340'. [ 693.939620][ T5921] usb 4-1: USB disconnect, device number 93 [ 696.674047][T14370] FAULT_INJECTION: forcing a failure. [ 696.674047][T14370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.706855][T14370] CPU: 1 UID: 0 PID: 14370 Comm: syz.0.2350 Not tainted syzkaller #0 PREEMPT(full) [ 696.706881][T14370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 696.706892][T14370] Call Trace: [ 696.706900][T14370] [ 696.706909][T14370] dump_stack_lvl+0x189/0x250 [ 696.706989][T14370] ? __pfx____ratelimit+0x10/0x10 [ 696.707009][T14370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.707028][T14370] ? __pfx__printk+0x10/0x10 [ 696.707049][T14370] ? __might_fault+0xb0/0x130 [ 696.707079][T14370] should_fail_ex+0x414/0x560 [ 696.707102][T14370] _copy_from_user+0x2d/0xb0 [ 696.707121][T14370] ___sys_sendmsg+0x158/0x2a0 [ 696.707140][T14370] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.707190][T14370] ? __might_fault+0xb0/0x130 [ 696.707210][T14370] __sys_sendmmsg+0x227/0x430 [ 696.707231][T14370] ? __pfx___sys_sendmmsg+0x10/0x10 [ 696.707246][T14370] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 696.707280][T14370] ? ksys_write+0x22a/0x250 [ 696.707299][T14370] ? __pfx_ksys_write+0x10/0x10 [ 696.707313][T14370] ? rcu_is_watching+0x15/0xb0 [ 696.707333][T14370] __x64_sys_sendmmsg+0xa0/0xc0 [ 696.707351][T14370] do_syscall_64+0xfa/0x3b0 [ 696.707366][T14370] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.707382][T14370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.707397][T14370] ? clear_bhb_loop+0x60/0xb0 [ 696.707413][T14370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.707426][T14370] RIP: 0033:0x7f4a3e18eec9 [ 696.707439][T14370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.707452][T14370] RSP: 002b:00007f4a3f084038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 696.707468][T14370] RAX: ffffffffffffffda RBX: 00007f4a3e3e6180 RCX: 00007f4a3e18eec9 [ 696.707479][T14370] RDX: 00000000000004ff RSI: 00002000000092c0 RDI: 0000000000000005 [ 696.707488][T14370] RBP: 00007f4a3f084090 R08: 0000000000000000 R09: 0000000000000000 [ 696.707497][T14370] R10: 000000000000fdff R11: 0000000000000246 R12: 0000000000000001 [ 696.707506][T14370] R13: 00007f4a3e3e6218 R14: 00007f4a3e3e6180 R15: 00007f4a3e50fa28 [ 696.707528][T14370] [ 697.005504][T12253] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 697.360841][T12253] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 697.415343][T12253] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 697.485366][T12253] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 697.517976][T14372] openvswitch: netlink: Flow actions attr not present in new flow. [ 697.565625][T12253] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 697.610611][T12253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.757271][T12253] usbtmc 2-1:16.0: bulk endpoints not found [ 698.016062][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2355'. [ 698.705303][ T5920] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 699.067589][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 699.078802][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 699.101286][ T5920] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 699.110634][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.123188][ T5920] usb 5-1: Product: syz [ 699.133124][ T5920] usb 5-1: Manufacturer: syz [ 699.145766][ T5920] usb 5-1: SerialNumber: syz [ 699.162843][ T5920] usb 5-1: config 0 descriptor?? [ 699.197659][ T5920] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 699.214875][ T5920] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 699.785647][ T5920] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 700.266733][ T5921] usb 2-1: USB disconnect, device number 79 [ 700.517117][ T5920] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 700.610550][ T5920] em28xx 5-1:0.0: board has no eeprom [ 700.935220][ T5920] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 700.965238][ T5920] em28xx 5-1:0.0: dvb set to bulk mode. [ 700.970870][ T5832] em28xx 5-1:0.0: Binding DVB extension [ 701.040357][T12253] usb 5-1: USB disconnect, device number 85 [ 701.047281][T12253] em28xx 5-1:0.0: Disconnecting em28xx [ 701.256428][ T5832] em28xx 5-1:0.0: Registering input extension [ 701.263793][T12253] em28xx 5-1:0.0: Closing input extension [ 701.281912][T14422] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 701.328208][T12253] em28xx 5-1:0.0: Freeing device [ 701.585610][T14429] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2369'. [ 701.745792][ T5921] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 701.915403][ T5832] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 701.925613][T14442] tipc: Enabled bearer , priority 0 [ 701.928715][ T5921] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 701.965439][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.978347][T14441] tipc: Disabling bearer [ 701.994216][ T5921] usb 1-1: config 0 descriptor?? [ 702.039378][T14444] rtc_cmos 00:00: Alarms can be up to one day in the future [ 702.058112][ T5921] cp210x 1-1:0.0: cp210x converter detected [ 702.075695][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 702.083048][ T5832] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 702.091694][ T5832] usb 5-1: config 0 has no interface number 0 [ 702.116342][ T5832] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 702.132972][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.185362][ T5832] usb 5-1: Product: syz [ 702.200525][ T5832] usb 5-1: Manufacturer: syz [ 702.210668][ T5832] usb 5-1: SerialNumber: syz [ 702.246956][ T5832] usb 5-1: config 0 descriptor?? [ 702.268741][ T5832] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 702.525246][ T5920] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 702.738973][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 702.747977][ T5921] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 702.773591][ T5920] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.795769][ T5921] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 702.820104][ T5920] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.830651][ T5921] usb 1-1: cp210x converter now attached to ttyUSB0 [ 702.958384][ T5921] usb 1-1: USB disconnect, device number 84 [ 702.986280][ T5832] gspca_spca1528: reg_w err -110 [ 703.023845][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 703.025830][ T5921] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 703.041107][ T5832] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 703.077019][ T5920] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 703.121035][ T5921] cp210x 1-1:0.0: device disconnected [ 703.134202][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.243805][ T5920] usb 4-1: config 0 descriptor?? [ 704.305238][ T5921] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 704.505383][ T5921] usb 2-1: device descriptor read/64, error -71 [ 704.798503][T14466] FAULT_INJECTION: forcing a failure. [ 704.798503][T14466] name failslab, interval 1, probability 0, space 0, times 0 [ 704.811532][ T5921] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 704.837278][ T5832] usb 5-1: USB disconnect, device number 86 [ 704.885571][T14466] CPU: 0 UID: 0 PID: 14466 Comm: syz.2.2379 Not tainted syzkaller #0 PREEMPT(full) [ 704.885600][T14466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 704.885611][T14466] Call Trace: [ 704.885619][T14466] [ 704.885628][T14466] dump_stack_lvl+0x189/0x250 [ 704.885649][T14466] ? __pfx____ratelimit+0x10/0x10 [ 704.885661][T14466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.885672][T14466] ? __pfx__printk+0x10/0x10 [ 704.885690][T14466] ? __pfx___might_resched+0x10/0x10 [ 704.885701][T14466] ? fs_reclaim_acquire+0x7d/0x100 [ 704.885718][T14466] should_fail_ex+0x414/0x560 [ 704.885736][T14466] should_failslab+0xa8/0x100 [ 704.885753][T14466] kmem_cache_alloc_node_noprof+0x77/0x710 [ 704.885766][T14466] ? __alloc_skb+0x112/0x2d0 [ 704.885778][T14466] ? netlink_autobind+0xdb/0x300 [ 704.885793][T14466] __alloc_skb+0x112/0x2d0 [ 704.885806][T14466] netlink_sendmsg+0x5c6/0xb30 [ 704.885823][T14466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.885837][T14466] ? aa_sock_msg_perm+0xf1/0x1d0 [ 704.885847][T14466] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 704.885857][T14466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.885868][T14466] __sock_sendmsg+0x219/0x270 [ 704.885880][T14466] ____sys_sendmsg+0x505/0x830 [ 704.885896][T14466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 704.885913][T14466] ? import_iovec+0x74/0xa0 [ 704.885928][T14466] ___sys_sendmsg+0x21f/0x2a0 [ 704.885943][T14466] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.885973][T14466] ? __fget_files+0x2a/0x420 [ 704.885988][T14466] ? __fget_files+0x3a0/0x420 [ 704.886007][T14466] __x64_sys_sendmsg+0x19b/0x260 [ 704.886028][T14466] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 704.886046][T14466] ? __pfx_ksys_write+0x10/0x10 [ 704.886058][T14466] ? rcu_is_watching+0x15/0xb0 [ 704.886072][T14466] ? do_syscall_64+0xbe/0x3b0 [ 704.886086][T14466] do_syscall_64+0xfa/0x3b0 [ 704.886096][T14466] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.886106][T14466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.886116][T14466] ? clear_bhb_loop+0x60/0xb0 [ 704.886128][T14466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.886138][T14466] RIP: 0033:0x7f31ecb8eec9 [ 704.886147][T14466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.886156][T14466] RSP: 002b:00007f31eadf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.886167][T14466] RAX: ffffffffffffffda RBX: 00007f31ecde5fa0 RCX: 00007f31ecb8eec9 [ 704.886174][T14466] RDX: 0000000000008004 RSI: 0000200000000000 RDI: 0000000000000003 [ 704.886181][T14466] RBP: 00007f31eadf6090 R08: 0000000000000000 R09: 0000000000000000 [ 704.886187][T14466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.886193][T14466] R13: 00007f31ecde6038 R14: 00007f31ecde5fa0 R15: 00007f31ecf0fa28 [ 704.886208][T14466] [ 704.965280][ T5921] usb 2-1: device descriptor read/64, error -71 [ 705.084080][ T5921] usb usb2-port1: attempt power cycle [ 705.555261][ T5921] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 705.620002][ T5921] usb 2-1: device descriptor read/8, error -71 [ 705.748311][T14480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2385'. [ 705.844168][T14481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2385'. [ 705.855680][ T5921] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 705.878225][ T5921] usb 2-1: device descriptor read/8, error -71 [ 705.900405][T14480] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 705.959839][T12253] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 705.985769][ T5921] usb usb2-port1: unable to enumerate USB device [ 706.115289][T12253] usb 3-1: Using ep0 maxpacket: 32 [ 706.119647][T12253] usb 3-1: config 0 has an invalid interface number: 129 but max is 0 [ 706.119671][T12253] usb 3-1: config 0 has no interface number 0 [ 706.125449][T12253] usb 3-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.0c [ 706.125477][T12253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.125495][T12253] usb 3-1: Product: syz [ 706.125510][T12253] usb 3-1: Manufacturer: syz [ 706.125524][T12253] usb 3-1: SerialNumber: syz [ 706.128377][T12253] usb 3-1: config 0 descriptor?? [ 706.161553][ T5920] usbhid 4-1:0.0: can't add hid device: -71 [ 706.161659][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 706.166085][ T5920] usb 4-1: USB disconnect, device number 94 [ 707.558644][ T5920] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 707.697003][ T5920] usb 4-1: device descriptor read/64, error -71 [ 707.955782][ T5920] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 708.125233][ T5920] usb 4-1: device descriptor read/64, error -71 [ 708.236005][ T5920] usb usb4-port1: attempt power cycle [ 708.265323][ T5832] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 708.438570][ T5832] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 708.446887][ T5832] usb 1-1: config 0 has no interface number 0 [ 708.456278][ T5832] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 708.465692][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.473727][ T5832] usb 1-1: Product: syz [ 708.481268][ T5832] usb 1-1: Manufacturer: syz [ 708.486069][ T5832] usb 1-1: SerialNumber: syz [ 708.493310][ T5832] usb 1-1: config 0 descriptor?? [ 708.595383][ T5920] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 708.616142][ T5920] usb 4-1: device descriptor read/8, error -71 [ 708.707059][ T5832] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 708.722010][ T5832] usb 1-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 708.732054][ T5832] usb 1-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 708.761508][T12253] usb 3-1: USB disconnect, device number 78 [ 708.855209][ T5920] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 708.894423][ T5920] usb 4-1: device descriptor read/8, error -71 [ 708.911758][T14518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2397'. [ 709.032662][ T5920] usb usb4-port1: unable to enumerate USB device [ 709.544739][T14528] FAULT_INJECTION: forcing a failure. [ 709.544739][T14528] name failslab, interval 1, probability 0, space 0, times 0 [ 709.574504][T14528] CPU: 1 UID: 0 PID: 14528 Comm: syz.4.2401 Not tainted syzkaller #0 PREEMPT(full) [ 709.574528][T14528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 709.574534][T14528] Call Trace: [ 709.574540][T14528] [ 709.574546][T14528] dump_stack_lvl+0x189/0x250 [ 709.574562][T14528] ? __pfx____ratelimit+0x10/0x10 [ 709.574574][T14528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 709.574592][T14528] ? __pfx__printk+0x10/0x10 [ 709.574609][T14528] ? __pfx___might_resched+0x10/0x10 [ 709.574621][T14528] ? fs_reclaim_acquire+0x7d/0x100 [ 709.574638][T14528] should_fail_ex+0x414/0x560 [ 709.574657][T14528] should_failslab+0xa8/0x100 [ 709.574674][T14528] kmem_cache_alloc_node_noprof+0x77/0x710 [ 709.574687][T14528] ? __alloc_skb+0x112/0x2d0 [ 709.574698][T14528] ? netlink_autobind+0xdb/0x300 [ 709.574713][T14528] __alloc_skb+0x112/0x2d0 [ 709.574727][T14528] netlink_sendmsg+0x5c6/0xb30 [ 709.574743][T14528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.574757][T14528] ? aa_sock_msg_perm+0xf1/0x1d0 [ 709.574767][T14528] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 709.574776][T14528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.574788][T14528] __sock_sendmsg+0x219/0x270 [ 709.574799][T14528] ____sys_sendmsg+0x505/0x830 [ 709.574815][T14528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.574835][T14528] ? import_iovec+0x74/0xa0 [ 709.574850][T14528] ___sys_sendmsg+0x21f/0x2a0 [ 709.574864][T14528] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.574895][T14528] ? __fget_files+0x2a/0x420 [ 709.574909][T14528] ? __fget_files+0x3a0/0x420 [ 709.574928][T14528] __x64_sys_sendmsg+0x19b/0x260 [ 709.574943][T14528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 709.574961][T14528] ? __pfx_ksys_write+0x10/0x10 [ 709.574973][T14528] ? rcu_is_watching+0x15/0xb0 [ 709.574987][T14528] ? do_syscall_64+0xbe/0x3b0 [ 709.575000][T14528] do_syscall_64+0xfa/0x3b0 [ 709.575010][T14528] ? lockdep_hardirqs_on+0x9c/0x150 [ 709.575020][T14528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.575029][T14528] ? clear_bhb_loop+0x60/0xb0 [ 709.575041][T14528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.575051][T14528] RIP: 0033:0x7f0dff58eec9 [ 709.575060][T14528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.575070][T14528] RSP: 002b:00007f0e003a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.575081][T14528] RAX: ffffffffffffffda RBX: 00007f0dff7e5fa0 RCX: 00007f0dff58eec9 [ 709.575094][T14528] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 709.575105][T14528] RBP: 00007f0e003a8090 R08: 0000000000000000 R09: 0000000000000000 [ 709.575115][T14528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.575123][T14528] R13: 00007f0dff7e6038 R14: 00007f0dff7e5fa0 R15: 00007f0dff90fa28 [ 709.575147][T14528] [ 710.353130][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2407'. [ 710.362233][ T5920] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 710.508381][ T5920] usb 3-1: device descriptor read/64, error -71 [ 710.675226][T12253] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 710.749612][ T5920] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 710.812214][T12253] usb 5-1: device descriptor read/64, error -71 [ 710.876110][T14565] ip6gre2: entered promiscuous mode [ 710.896187][ T5920] usb 3-1: device descriptor read/64, error -71 [ 710.929465][T14564] syz_tun: entered allmulticast mode [ 711.005430][ T5920] usb usb3-port1: attempt power cycle [ 711.085183][T12253] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 711.225250][ T5921] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 711.232977][T12253] usb 5-1: device descriptor read/64, error -71 [ 711.345572][T12253] usb usb5-port1: attempt power cycle [ 711.356235][ T5920] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 711.386002][ T5920] usb 3-1: device descriptor read/8, error -71 [ 711.392500][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 711.408351][ T5921] usb 2-1: config 0 has an invalid interface number: 241 but max is 0 [ 711.417440][ T5921] usb 2-1: config 0 has no interface number 0 [ 711.423524][ T5921] usb 2-1: config 0 interface 241 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 711.435978][ T5921] usb 2-1: config 0 interface 241 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 711.448309][ T5921] usb 2-1: config 0 interface 241 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 711.459319][ T5921] usb 2-1: config 0 interface 241 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 711.534783][ T5921] usb 2-1: config 0 interface 241 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 711.638419][ T5921] usb 2-1: config 0 interface 241 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 711.665210][ T5920] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 711.685328][T12253] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 711.703904][ T5921] usb 2-1: config 0 interface 241 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 711.717210][T12253] usb 5-1: device descriptor read/8, error -71 [ 711.734199][ T5920] usb 3-1: device descriptor read/8, error -71 [ 711.845756][ T5920] usb usb3-port1: unable to enumerate USB device [ 711.855828][ T5921] usb 2-1: New USB device found, idVendor=0489, idProduct=e000, bcdDevice=78.aa [ 711.886901][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.894956][ T5921] usb 2-1: Product: syz [ 711.930530][ T5921] usb 2-1: Manufacturer: syz [ 711.955699][T12253] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 711.976026][T12253] usb 5-1: device descriptor read/8, error -71 [ 711.994445][ T5921] usb 2-1: SerialNumber: syz [ 712.066172][ T5921] usb 2-1: config 0 descriptor?? [ 712.100875][T12253] usb usb5-port1: unable to enumerate USB device [ 712.127306][ T5921] cp210x 2-1:0.241: cp210x converter detected [ 712.199412][T14571] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2414'. [ 712.209639][T14571] netlink: zone id is out of range [ 712.214787][T14571] netlink: zone id is out of range [ 712.220535][T14571] netlink: zone id is out of range [ 712.226339][T14571] netlink: get zone limit has 8 unknown bytes [ 712.290251][T14573] syzkaller1: entered promiscuous mode [ 712.295909][T14573] syzkaller1: entered allmulticast mode [ 712.424875][T14575] netlink: 'syz.3.2416': attribute type 1 has an invalid length. [ 712.436035][T14575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 712.837626][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2417'. [ 713.678846][T14589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 713.913720][T12253] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 714.072645][T12253] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 714.081330][T12253] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 714.105917][T14594] sctp: [Deprecated]: syz.0.2421 (pid 14594) Use of int in maxseg socket option. [ 714.105917][T14594] Use struct sctp_assoc_value instead [ 714.135405][T12253] usb 5-1: config 8 has no interface number 0 [ 714.144021][T12253] usb 5-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 714.166734][T12253] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 714.178320][T12253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.190640][ T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 714.294613][T12253] usb 5-1: NFC: intf ffff88807ef77000 id ffffffff8e6eb3e0 [ 714.412241][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.431924][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 714.456951][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 714.477014][ T9] usb 3-1: SerialNumber: syz [ 714.498908][T14583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.513453][T14583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.550138][T12253] usb 5-1: USB disconnect, device number 91 [ 714.595956][ T9] usb 3-1: bad CDC descriptors [ 715.158188][T12253] usb 3-1: USB disconnect, device number 83 [ 715.466072][T14607] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 715.483523][ T5921] cp210x 2-1:0.241: failed to get vendor val 0x370b size 1: -71 [ 715.501798][ T5921] cp210x 2-1:0.241: querying part number failed [ 715.527122][ T5921] usb 2-1: cp210x converter now attached to ttyUSB0 [ 715.570761][ T5921] usb 2-1: USB disconnect, device number 84 [ 715.594072][ T5921] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 715.603754][ T5921] cp210x 2-1:0.241: device disconnected [ 715.713224][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 715.713243][ T30] audit: type=1326 audit(1759534725.430:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14614 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa2f8eec9 code=0x7ffc0000 [ 715.763087][ T30] audit: type=1326 audit(1759534725.460:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14614 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1fa2f8eec9 code=0x7ffc0000 [ 715.788840][ T30] audit: type=1326 audit(1759534725.460:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14614 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa2f8eec9 code=0x7ffc0000 [ 715.815197][ T30] audit: type=1326 audit(1759534725.460:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14614 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1fa2f8eec9 code=0x7ffc0000 [ 715.838619][ T30] audit: type=1326 audit(1759534725.460:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14614 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa2f8eec9 code=0x7ffc0000 [ 715.861518][ T30] audit: type=1326 audit(1759534725.460:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14614 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1fa2f8eec9 code=0x7ffc0000 [ 715.884930][ T30] audit: type=1326 audit(1759534725.460:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14614 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa2f8eec9 code=0x7ffc0000 [ 715.936935][ T30] audit: type=1326 audit(1759534725.460:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14614 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa2f8eec9 code=0x7ffc0000 [ 715.961805][ T30] audit: type=1326 audit(1759534725.470:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14614 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1fa2f8eec9 code=0x7ffc0000 [ 715.986541][ T30] audit: type=1326 audit(1759534725.470:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14614 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa2f8eec9 code=0x7ffc0000 [ 716.975299][ T5921] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 717.125253][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 717.132132][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 717.144417][ T5921] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 717.153841][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.161955][ T5921] usb 3-1: Product: syz [ 717.166288][ T5921] usb 3-1: Manufacturer: syz [ 717.170888][ T5921] usb 3-1: SerialNumber: syz [ 717.178071][ T5921] usb 3-1: config 0 descriptor?? [ 717.186219][ T5921] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 717.195896][ T5921] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 717.338331][T14638] syzkaller1: entered promiscuous mode [ 717.344016][T14638] syzkaller1: entered allmulticast mode [ 717.755406][ T5919] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 717.789389][ T5921] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 717.884084][T14645] input: syz1 as /devices/virtual/input/input56 [ 717.958241][ T5919] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 717.969182][ T5919] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 717.982929][ T5919] usb 2-1: config 8 has no interface number 0 [ 718.006252][ T5919] usb 2-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 718.056162][ T5919] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 718.065342][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.083034][ T5919] usb 2-1: NFC: intf ffff888025aea000 id ffffffff8e6eb3e0 [ 718.294801][T14640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.314155][T14640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.005190][ T5919] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 719.157969][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 719.172817][ T5919] usb 5-1: config 0 has an invalid interface number: 229 but max is 0 [ 719.182626][ T5919] usb 5-1: config 0 has no interface number 0 [ 719.188887][ T5919] usb 5-1: config 0 interface 229 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 719.199632][ T5919] usb 5-1: config 0 interface 229 altsetting 7 endpoint 0x81 has invalid maxpacket 33791, setting to 1024 [ 719.211692][ T5919] usb 5-1: config 0 interface 229 altsetting 7 bulk endpoint 0x81 has invalid maxpacket 1024 [ 719.218937][T14660] openvswitch: netlink: Flow key attr not present in new flow. [ 719.223103][ T5919] usb 5-1: config 0 interface 229 has no altsetting 0 [ 719.241185][ T5919] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 719.248212][T14661] binder: 14656:14661 ioctl c0306201 200000000180 returned -14 [ 719.251847][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.269691][ T5919] usb 5-1: Product: syz [ 719.274723][ T5919] usb 5-1: Manufacturer: syz [ 719.279915][ T5919] usb 5-1: SerialNumber: syz [ 719.288338][ T5919] usb 5-1: config 0 descriptor?? [ 719.295310][T14653] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 719.304096][ T5919] mcba_usb 5-1:0.229: Can't find endpoints [ 719.715825][T14652] bridge0: port 1(macsec0) entered blocking state [ 719.722744][T14652] bridge0: port 1(macsec0) entered disabled state [ 719.730907][T14652] macsec0: entered allmulticast mode [ 719.753058][T14652] veth1_macvtap: entered allmulticast mode [ 719.891498][ T5921] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 719.915918][ T5921] em28xx 3-1:0.0: board has no eeprom [ 719.922974][T14652] macsec0: entered promiscuous mode [ 719.951411][T14652] bridge0: port 1(macsec0) entered blocking state [ 719.958287][T14652] bridge0: port 1(macsec0) entered forwarding state [ 720.035890][ T5921] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 720.044546][ T5921] em28xx 3-1:0.0: dvb set to bulk mode. [ 720.052047][ T914] em28xx 3-1:0.0: Binding DVB extension [ 720.064551][ T5921] usb 3-1: USB disconnect, device number 84 [ 720.092815][ T5921] em28xx 3-1:0.0: Disconnecting em28xx [ 720.367093][ T914] em28xx 3-1:0.0: Registering input extension [ 720.614359][ T5921] em28xx 3-1:0.0: Closing input extension [ 720.663095][ T914] usb 2-1: USB disconnect, device number 85 [ 720.697514][ T5921] em28xx 3-1:0.0: Freeing device [ 720.964558][ T5919] usb 5-1: USB disconnect, device number 92 [ 721.085382][ T5921] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 721.267548][ T5921] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 721.287435][ T5921] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 721.312804][ T5921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 721.325261][ T5921] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 721.337916][ T5921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 721.351545][ T5921] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 721.507901][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 721.577916][ T5921] usb 3-1: Product: syz [ 721.711844][ T5921] usb 3-1: Manufacturer: syz [ 721.825447][ T5919] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 722.136796][ T5921] cdc_wdm 3-1:1.0: skipping garbage [ 722.142130][ T5921] cdc_wdm 3-1:1.0: skipping garbage [ 722.149696][ T5921] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 722.195496][ T5921] usb 3-1: USB disconnect, device number 85 [ 722.222154][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 722.266594][ T5919] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.351247][ T5919] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 722.385259][ T5919] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 722.444956][ T5919] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 722.454119][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.484916][ T5919] usb 5-1: Product: syz [ 722.624901][ T5919] usb 5-1: Manufacturer: syz [ 722.629749][ T5919] usb 5-1: SerialNumber: syz [ 722.643733][ T5919] cdc_ncm 5-1:1.0: skipping garbage [ 722.651346][ T5919] cdc_ncm 5-1:1.0: skipping garbage [ 722.658581][ T5919] cdc_ncm 5-1:1.0: skipping garbage [ 722.667132][ T5919] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 722.682496][ T5919] cdc_ncm 5-1:1.0: bind() failure [ 722.844995][ T9] usb 5-1: USB disconnect, device number 93 [ 723.037187][ T5919] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 723.195755][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 723.203165][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 723.223546][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 723.250040][ T5919] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 723.290893][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 723.324196][ T5919] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 724.337279][T14721] fuse: Bad value for 'fd' [ 724.410925][ T5919] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 724.420218][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.455549][ T5919] usb 3-1: Product: syz [ 724.471441][ T5919] usb 3-1: Manufacturer: syz [ 724.515642][ T5919] usb 3-1: SerialNumber: syz [ 724.536744][ T5919] usb 3-1: config 0 descriptor?? [ 724.552368][ T5919] kvaser_usb 3-1:0.0: error -EMSGSIZE: Cannot get software info [ 724.560232][ T5919] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 724.685375][T10861] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 724.762584][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2452'. [ 724.772460][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2452'. [ 724.887903][T10861] usb 2-1: unable to get BOS descriptor or descriptor too short [ 724.945631][ T5919] usb 3-1: USB disconnect, device number 86 [ 724.946798][T10861] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 724.970939][T10861] usb 2-1: string descriptor 0 read error: -22 [ 724.977400][T10861] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 724.986839][T10861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.136843][T10861] usb 2-1: reset high-speed USB device number 86 using dummy_hcd [ 725.725348][T10861] usb 2-1: device descriptor read/64, error -71 [ 725.975298][T10861] usb 2-1: reset high-speed USB device number 86 using dummy_hcd [ 725.985295][ T5919] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 726.146847][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 726.163893][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 61, changing to 4 [ 726.185157][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 28271, setting to 1023 [ 726.197625][T14722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.239154][T10861] usb 2-1: unable to get BOS descriptor or descriptor too short [ 726.250080][ T5919] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 726.267667][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.273584][T10861] usb 2-1: device firmware changed [ 726.286234][ T5919] usb 3-1: Product: syz [ 726.290426][ T5919] usb 3-1: Manufacturer: syz [ 726.295033][ T5919] usb 3-1: SerialNumber: syz [ 726.311638][T10861] usb 2-1: USB disconnect, device number 86 [ 726.346597][ T5919] usb 3-1: config 0 descriptor?? [ 726.574152][ T5919] usb 3-1: no audio or video endpoints found [ 727.585274][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2469'. [ 728.700197][ T9] usb 3-1: USB disconnect, device number 87 [ 729.405345][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 729.415191][ T914] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 729.783499][ T914] usb 2-1: device descriptor read/64, error -71 [ 729.816080][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 729.824941][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 729.835510][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 729.854689][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 729.963119][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 729.993724][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 730.003274][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 730.011702][ T9] usb 3-1: Product: syz [ 730.017615][ T9] usb 3-1: Manufacturer: syz [ 730.026169][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 730.034898][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 730.041799][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 730.048426][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 730.225386][ T914] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 730.375397][ T914] usb 2-1: device descriptor read/64, error -71 [ 730.390489][T14805] FAULT_INJECTION: forcing a failure. [ 730.390489][T14805] name failslab, interval 1, probability 0, space 0, times 0 [ 730.424079][T14805] CPU: 1 UID: 0 PID: 14805 Comm: syz.3.2476 Not tainted syzkaller #0 PREEMPT(full) [ 730.424104][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 730.424116][T14805] Call Trace: [ 730.424123][T14805] [ 730.424133][T14805] dump_stack_lvl+0x189/0x250 [ 730.424159][T14805] ? __pfx____ratelimit+0x10/0x10 [ 730.424178][T14805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 730.424198][T14805] ? __pfx__printk+0x10/0x10 [ 730.424227][T14805] ? __pfx___might_resched+0x10/0x10 [ 730.424250][T14805] should_fail_ex+0x414/0x560 [ 730.424279][T14805] should_failslab+0xa8/0x100 [ 730.424306][T14805] __kmalloc_cache_noprof+0x6f/0x6f0 [ 730.424330][T14805] ? alloc_pipe_info+0xe9/0x4d0 [ 730.424358][T14805] alloc_pipe_info+0xe9/0x4d0 [ 730.424383][T14805] splice_direct_to_actor+0xa5d/0xcc0 [ 730.424408][T14805] ? __lock_acquire+0xab9/0xd20 [ 730.424436][T14805] ? __pfx_aa_file_perm+0x10/0x10 [ 730.424454][T14805] ? __lock_acquire+0xab9/0xd20 [ 730.424469][T14805] ? __pfx_direct_splice_actor+0x10/0x10 [ 730.424492][T14805] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 730.424537][T14805] do_splice_direct+0x181/0x270 [ 730.424567][T14805] ? __pfx_do_splice_direct+0x10/0x10 [ 730.424588][T14805] ? common_file_perm+0x1b5/0x230 [ 730.424604][T14805] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 730.424623][T14805] ? bpf_lsm_file_permission+0x9/0x20 [ 730.424682][T14805] ? security_file_permission+0x75/0x290 [ 730.424705][T14805] ? rw_verify_area+0x255/0x4d0 [ 730.424731][T14805] do_sendfile+0x4da/0x7e0 [ 730.424748][T14805] ? __pfx_vfs_write+0x10/0x10 [ 730.424774][T14805] ? __pfx_do_sendfile+0x10/0x10 [ 730.424791][T14805] ? __fget_files+0x3a0/0x420 [ 730.424825][T14805] __se_sys_sendfile64+0x13e/0x190 [ 730.424844][T14805] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 730.424867][T14805] ? rcu_is_watching+0x15/0xb0 [ 730.424891][T14805] ? do_syscall_64+0xbe/0x3b0 [ 730.424914][T14805] do_syscall_64+0xfa/0x3b0 [ 730.424931][T14805] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.424949][T14805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.424966][T14805] ? clear_bhb_loop+0x60/0xb0 [ 730.424985][T14805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.425002][T14805] RIP: 0033:0x7f737c78eec9 [ 730.425019][T14805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.425033][T14805] RSP: 002b:00007f737a9b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 730.425052][T14805] RAX: ffffffffffffffda RBX: 00007f737c9e6180 RCX: 00007f737c78eec9 [ 730.425065][T14805] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 730.425078][T14805] RBP: 00007f737a9b4090 R08: 0000000000000000 R09: 0000000000000000 [ 730.425088][T14805] R10: 000000008000fb00 R11: 0000000000000246 R12: 0000000000000001 [ 730.425097][T14805] R13: 00007f737c9e6218 R14: 00007f737c9e6180 R15: 00007f737cb0fa28 [ 730.425122][T14805] [ 730.805918][T14801] openvswitch: netlink: Message has 5368 unknown bytes. [ 730.842916][ T914] usb usb2-port1: attempt power cycle [ 730.855963][T14801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.185197][ T914] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 731.206685][ T914] usb 2-1: device descriptor read/8, error -71 [ 731.235210][T10861] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 731.388097][T10861] usb 5-1: config 0 has no interfaces? [ 731.396914][T10861] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 731.406548][T10861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.414674][T10861] usb 5-1: Product: syz [ 731.419842][T10861] usb 5-1: Manufacturer: syz [ 731.424542][T10861] usb 5-1: SerialNumber: syz [ 731.434782][T10861] usb 5-1: config 0 descriptor?? [ 731.445335][ T914] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 731.486239][ T914] usb 2-1: device descriptor read/8, error -71 [ 731.605645][ T914] usb usb2-port1: unable to enumerate USB device [ 731.667164][ T9] usb 5-1: USB disconnect, device number 94 [ 731.925382][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 732.067355][T12253] usb 3-1: USB disconnect, device number 88 [ 733.987522][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2492'. [ 734.099265][T14860] syz_tun: entered promiscuous mode [ 734.371469][T14869] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2494'. [ 734.383086][T14869] syzkaller0: entered promiscuous mode [ 734.388891][T14869] syzkaller0: entered allmulticast mode [ 734.750065][T14877] netlink: 'syz.1.2496': attribute type 8 has an invalid length. [ 735.540676][T14885] bridge0: port 1(macsec0) entered disabled state [ 735.572524][T14888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2500'. [ 735.748943][T14885] veth1_macvtap: left allmulticast mode [ 735.805262][T10861] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 735.814757][ T6631] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.834059][ T6631] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.921133][ T6631] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.956902][ T6631] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.965470][T10861] usb 4-1: Using ep0 maxpacket: 32 [ 736.045843][T10861] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 736.063903][T10861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.082604][T10861] usb 4-1: Product: syz [ 736.087250][T10861] usb 4-1: Manufacturer: syz [ 736.091861][T10861] usb 4-1: SerialNumber: syz [ 736.099797][T10861] usb 4-1: config 0 descriptor?? [ 736.108613][T10861] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 736.325311][ T5919] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 736.520381][ T5919] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 736.545193][ T5919] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 736.613943][ T5919] usb 5-1: config 8 has no interface number 0 [ 736.655383][ T5919] usb 5-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 736.705302][ T5919] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 736.715799][T14890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.756846][T14890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.764734][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.831348][ T5919] usb 5-1: NFC: intf ffff88807a902000 id ffffffff8e6eb3e0 [ 737.098740][T14896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.111840][T14896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.124611][T14924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2510'. [ 738.012979][T10861] gspca_stk1135: reg_w 0x200 err -71 [ 738.021221][T10861] gspca_stk1135: serial bus timeout: status=0x00 [ 738.029802][T10861] gspca_stk1135: Sensor write failed [ 738.039801][T10861] gspca_stk1135: serial bus timeout: status=0x00 [ 738.052152][T10861] gspca_stk1135: Sensor write failed [ 738.075452][T10861] gspca_stk1135: serial bus timeout: status=0x00 [ 738.114164][T10861] gspca_stk1135: Sensor read failed [ 738.123353][T10861] gspca_stk1135: serial bus timeout: status=0x00 [ 738.147778][T10861] gspca_stk1135: Sensor read failed [ 738.162003][T10861] gspca_stk1135: Detected sensor type unknown (0x0) [ 738.179171][T10861] gspca_stk1135: serial bus timeout: status=0x00 [ 738.193529][T10861] gspca_stk1135: Sensor read failed [ 738.208309][T10861] gspca_stk1135: serial bus timeout: status=0x00 [ 738.227580][T10861] gspca_stk1135: Sensor read failed [ 738.243039][T10861] gspca_stk1135: serial bus timeout: status=0x00 [ 738.264265][T10861] gspca_stk1135: Sensor write failed [ 738.406842][T10861] gspca_stk1135: serial bus timeout: status=0x00 [ 738.435284][T10861] gspca_stk1135: Sensor write failed [ 738.485752][T10861] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 738.546714][T10861] usb 4-1: USB disconnect, device number 99 [ 739.045062][T12253] usb 5-1: USB disconnect, device number 95 [ 739.109091][T10861] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 739.202624][T14940] netlink: 'syz.4.2516': attribute type 29 has an invalid length. [ 739.272476][T10861] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 739.281620][T10861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.306074][T14941] netlink: 'syz.4.2516': attribute type 29 has an invalid length. [ 739.314568][T14944] netlink: 'syz.4.2516': attribute type 29 has an invalid length. [ 739.357855][T14940] usb usb8: usbfs: process 14940 (syz.4.2516) did not claim interface 0 before use [ 739.408754][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2516'. [ 739.515528][T10861] usb 4-1: Product: syz [ 739.520875][T10861] usb 4-1: Manufacturer: syz [ 739.536999][T14944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2516'. [ 739.553510][T10861] usb 4-1: SerialNumber: syz [ 739.697796][T10861] usb 4-1: config 0 descriptor?? [ 739.724446][T10861] hub 4-1:0.0: bad descriptor, ignoring hub [ 739.742040][T10861] hub 4-1:0.0: probe with driver hub failed with error -5 [ 740.029105][T10861] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 740.051964][T10861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 740.063334][T10861] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 740.080200][T10861] usb 4-1: media controller created [ 740.196195][T10861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 740.227291][T14953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2519'. [ 740.326977][T14953] bond2: option resend_igmp: invalid value (511) [ 740.377449][T14953] bond2: option resend_igmp: allowed values 0 - 255 [ 740.416741][T14953] bond2 (unregistering): Released all slaves [ 740.444914][T10861] DVB: Unable to find symbol dib7000p_attach() [ 740.451295][T10861] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 740.586523][T10861] rc_core: IR keymap rc-dib0700-rc5 not found [ 740.592686][T10861] Registered IR keymap rc-empty [ 740.598151][T10861] dvb-usb: could not initialize remote control. [ 740.611087][T10861] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 740.645194][ T5920] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 740.795679][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 740.815270][ T5920] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 740.827650][ T5920] usb 5-1: config 0 has no interface number 0 [ 740.846383][ T5920] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 740.860602][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.869212][ T5920] usb 5-1: Product: syz [ 740.873390][ T5920] usb 5-1: Manufacturer: syz [ 740.873898][ T5921] usb 4-1: USB disconnect, device number 100 [ 740.878314][ T5920] usb 5-1: SerialNumber: syz [ 740.895969][ T5920] usb 5-1: config 0 descriptor?? [ 740.920590][ T5921] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 741.045258][T12253] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 741.075304][T10861] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 741.108875][ T5920] radio-si470x 5-1:0.35: this is not a si470x device. [ 741.195290][T12253] usb 2-1: Using ep0 maxpacket: 32 [ 741.205218][T12253] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 741.214519][T12253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.222842][T12253] usb 2-1: Product: syz [ 741.228191][T12253] usb 2-1: Manufacturer: syz [ 741.232798][T12253] usb 2-1: SerialNumber: syz [ 741.241383][T12253] usb 2-1: config 0 descriptor?? [ 741.246734][T10861] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 741.257060][T10861] usb 3-1: config 0 interface 0 has no altsetting 0 [ 741.268474][T12253] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 741.274820][T10861] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 741.284406][T10861] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 741.292733][T10861] usb 3-1: Product: syz [ 741.297008][T10861] usb 3-1: Manufacturer: syz [ 741.301654][T10861] usb 3-1: SerialNumber: syz [ 741.313214][T10861] usb 3-1: config 0 descriptor?? [ 741.327639][ T5920] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 741.327833][T10861] usb 3-1: selecting invalid altsetting 0 [ 741.361489][ T5920] usb 5-1: USB disconnect, device number 96 [ 741.479182][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2523'. [ 741.529705][ T9] usb 3-1: USB disconnect, device number 89 [ 741.871023][T14965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.888262][T14965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.568981][T14991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2527'. [ 743.218249][T14995] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2528'. [ 743.286170][T12253] gspca_stk1135: reg_w 0x200 err -71 [ 743.329703][T12253] gspca_stk1135: serial bus timeout: status=0x00 [ 743.336597][T12253] gspca_stk1135: Sensor write failed [ 743.347281][T12253] gspca_stk1135: serial bus timeout: status=0x00 [ 743.355829][T12253] gspca_stk1135: Sensor write failed [ 743.363785][T12253] gspca_stk1135: serial bus timeout: status=0x00 [ 743.393698][T12253] gspca_stk1135: Sensor read failed [ 743.445895][T12253] gspca_stk1135: serial bus timeout: status=0x00 [ 743.464286][T12253] gspca_stk1135: Sensor read failed [ 743.493867][T12253] gspca_stk1135: Detected sensor type unknown (0x0) [ 743.507923][T12253] gspca_stk1135: serial bus timeout: status=0x00 [ 743.527372][T12253] gspca_stk1135: Sensor read failed [ 743.540307][T12253] gspca_stk1135: serial bus timeout: status=0x00 [ 743.558985][T12253] gspca_stk1135: Sensor read failed [ 743.572038][T12253] gspca_stk1135: serial bus timeout: status=0x00 [ 743.601224][T12253] gspca_stk1135: Sensor write failed [ 743.627316][T12253] gspca_stk1135: serial bus timeout: status=0x00 [ 743.646053][T12253] gspca_stk1135: Sensor write failed [ 743.701447][T12253] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 743.737164][T12253] usb 2-1: USB disconnect, device number 91 [ 745.269983][T15025] ip6gre1: entered promiscuous mode [ 746.547476][T15044] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 746.556962][T15044] team0: Port device batadv1 added [ 746.643599][T15045] FAULT_INJECTION: forcing a failure. [ 746.643599][T15045] name failslab, interval 1, probability 0, space 0, times 0 [ 746.716378][T15045] CPU: 0 UID: 0 PID: 15045 Comm: syz.0.2542 Not tainted syzkaller #0 PREEMPT(full) [ 746.716403][T15045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 746.716413][T15045] Call Trace: [ 746.716422][T15045] [ 746.716430][T15045] dump_stack_lvl+0x189/0x250 [ 746.716455][T15045] ? __pfx____ratelimit+0x10/0x10 [ 746.716475][T15045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 746.716495][T15045] ? __pfx__printk+0x10/0x10 [ 746.716523][T15045] ? __lock_acquire+0xab9/0xd20 [ 746.716548][T15045] should_fail_ex+0x414/0x560 [ 746.716577][T15045] should_failslab+0xa8/0x100 [ 746.716604][T15045] kmem_cache_alloc_noprof+0x74/0x6e0 [ 746.716626][T15045] ? skb_clone+0x212/0x3a0 [ 746.716654][T15045] skb_clone+0x212/0x3a0 [ 746.716679][T15045] __netlink_deliver_tap+0x404/0x850 [ 746.716712][T15045] ? netlink_deliver_tap+0x2e/0x1b0 [ 746.716733][T15045] netlink_deliver_tap+0x19c/0x1b0 [ 746.716755][T15045] netlink_unicast+0x7fa/0x9e0 [ 746.716782][T15045] ? __pfx_netlink_unicast+0x10/0x10 [ 746.716802][T15045] ? netlink_sendmsg+0x642/0xb30 [ 746.716820][T15045] ? skb_put+0x11b/0x210 [ 746.716851][T15045] netlink_sendmsg+0x805/0xb30 [ 746.716881][T15045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.716904][T15045] ? aa_sock_msg_perm+0xf1/0x1d0 [ 746.716923][T15045] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 746.716940][T15045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.716959][T15045] __sock_sendmsg+0x219/0x270 [ 746.716979][T15045] ____sys_sendmsg+0x505/0x830 [ 746.717007][T15045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 746.717038][T15045] ? import_iovec+0x74/0xa0 [ 746.717063][T15045] ___sys_sendmsg+0x21f/0x2a0 [ 746.717087][T15045] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.717146][T15045] ? __fget_files+0x2a/0x420 [ 746.717169][T15045] ? __fget_files+0x3a0/0x420 [ 746.717203][T15045] __x64_sys_sendmsg+0x19b/0x260 [ 746.717227][T15045] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 746.717259][T15045] ? __pfx_ksys_write+0x10/0x10 [ 746.717278][T15045] ? rcu_is_watching+0x15/0xb0 [ 746.717303][T15045] ? do_syscall_64+0xbe/0x3b0 [ 746.717327][T15045] do_syscall_64+0xfa/0x3b0 [ 746.717344][T15045] ? lockdep_hardirqs_on+0x9c/0x150 [ 746.717362][T15045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.717379][T15045] ? clear_bhb_loop+0x60/0xb0 [ 746.717400][T15045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.717420][T15045] RIP: 0033:0x7f4a3e18eec9 [ 746.717444][T15045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.717459][T15045] RSP: 002b:00007f4a3f0a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.717479][T15045] RAX: ffffffffffffffda RBX: 00007f4a3e3e6090 RCX: 00007f4a3e18eec9 [ 746.717492][T15045] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 746.717503][T15045] RBP: 00007f4a3f0a5090 R08: 0000000000000000 R09: 0000000000000000 [ 746.717514][T15045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.717523][T15045] R13: 00007f4a3e3e6128 R14: 00007f4a3e3e6090 R15: 00007f4a3e50fa28 [ 746.717552][T15045] [ 747.028489][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2543'. [ 747.207701][T15045] netlink: set zone limit has 8 unknown bytes [ 747.279647][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.286033][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.465208][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 747.465220][ T30] audit: type=1326 audit(1759534757.170:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3e18eec9 code=0x7ffc0000 [ 747.569493][ T30] audit: type=1326 audit(1759534757.170:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3e18eec9 code=0x7ffc0000 [ 747.610520][ T30] audit: type=1326 audit(1759534757.170:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3e18eec9 code=0x7ffc0000 [ 747.723958][ T30] audit: type=1326 audit(1759534757.170:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f4a3e18eec9 code=0x7ffc0000 [ 747.784736][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2544'. [ 747.810162][ T30] audit: type=1326 audit(1759534757.170:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3e18eec9 code=0x7ffc0000 [ 747.833100][ T30] audit: type=1326 audit(1759534757.180:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a3e18eec9 code=0x7ffc0000 [ 748.134100][ T30] audit: type=1326 audit(1759534757.180:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3e18eec9 code=0x7ffc0000 [ 748.214839][ T30] audit: type=1326 audit(1759534757.180:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a3e18eec9 code=0x7ffc0000 [ 748.405465][ T30] audit: type=1326 audit(1759534757.180:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3e18eec9 code=0x7ffc0000 [ 748.467298][ T30] audit: type=1326 audit(1759534757.180:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a3e18eec9 code=0x7ffc0000 [ 749.607825][ T5920] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 749.787300][ T5920] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 749.797249][ T5920] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 749.805935][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 749.815542][ T5920] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 749.826870][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5D, changing to 0xD [ 749.840411][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 749.852733][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 749.864741][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 749.882479][ T5920] usb 2-1: string descriptor 0 read error: -22 [ 749.889130][ T5920] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 749.905344][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.926394][ T5920] usb 2-1: config 0 descriptor?? [ 749.934668][ T5920] hub 2-1:0.0: bad descriptor, ignoring hub [ 749.941004][ T5920] hub 2-1:0.0: probe with driver hub failed with error -5 [ 750.325582][ T5920] usb 2-1: USB disconnect, device number 92 [ 752.247275][T15118] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2560'. [ 752.778814][T15132] FAULT_INJECTION: forcing a failure. [ 752.778814][T15132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.893421][T15132] CPU: 1 UID: 0 PID: 15132 Comm: syz.2.2563 Not tainted syzkaller #0 PREEMPT(full) [ 752.893446][T15132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 752.893457][T15132] Call Trace: [ 752.893465][T15132] [ 752.893473][T15132] dump_stack_lvl+0x189/0x250 [ 752.893497][T15132] ? __pfx____ratelimit+0x10/0x10 [ 752.893516][T15132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 752.893535][T15132] ? __pfx__printk+0x10/0x10 [ 752.893566][T15132] should_fail_ex+0x414/0x560 [ 752.893592][T15132] _copy_to_user+0x31/0xb0 [ 752.893613][T15132] simple_read_from_buffer+0xe1/0x170 [ 752.893641][T15132] proc_fail_nth_read+0x1b3/0x220 [ 752.893663][T15132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 752.893686][T15132] ? rw_verify_area+0x2a6/0x4d0 [ 752.893705][T15132] ? __lock_acquire+0xab9/0xd20 [ 752.893718][T15132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 752.893733][T15132] vfs_read+0x200/0xa30 [ 752.893748][T15132] ? fdget_pos+0x247/0x320 [ 752.893763][T15132] ? __pfx___mutex_lock+0x10/0x10 [ 752.893778][T15132] ? __pfx_vfs_read+0x10/0x10 [ 752.893795][T15132] ? __fget_files+0x2a/0x420 [ 752.893816][T15132] ? __fget_files+0x3a0/0x420 [ 752.893832][T15132] ? __fget_files+0x2a/0x420 [ 752.893856][T15132] ksys_read+0x145/0x250 [ 752.893874][T15132] ? __pfx_ksys_read+0x10/0x10 [ 752.893888][T15132] ? rcu_is_watching+0x15/0xb0 [ 752.893907][T15132] ? do_syscall_64+0xbe/0x3b0 [ 752.893932][T15132] do_syscall_64+0xfa/0x3b0 [ 752.893949][T15132] ? lockdep_hardirqs_on+0x9c/0x150 [ 752.893967][T15132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.893983][T15132] ? clear_bhb_loop+0x60/0xb0 [ 752.894002][T15132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.894017][T15132] RIP: 0033:0x7f31ecb8d8dc [ 752.894031][T15132] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 752.894044][T15132] RSP: 002b:00007f31eadf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 752.894060][T15132] RAX: ffffffffffffffda RBX: 00007f31ecde5fa0 RCX: 00007f31ecb8d8dc [ 752.894071][T15132] RDX: 000000000000000f RSI: 00007f31eadf60a0 RDI: 0000000000000007 [ 752.894081][T15132] RBP: 00007f31eadf6090 R08: 0000000000000000 R09: 0000000000000000 [ 752.894090][T15132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.894100][T15132] R13: 00007f31ecde6038 R14: 00007f31ecde5fa0 R15: 00007f31ecf0fa28 [ 752.894126][T15132] [ 752.911116][T15129] tipc: Started in network mode [ 753.185261][T15129] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 753.197829][T15129] tipc: Enabled bearer , priority 10 [ 753.634454][T15141] loop4: detected capacity change from 0 to 2560 [ 753.642044][T15141] Buffer I/O error on dev loop4, logical block 0, async page read [ 753.651550][T15141] Buffer I/O error on dev loop4, logical block 0, async page read [ 753.665271][T15141] Buffer I/O error on dev loop4, logical block 0, async page read [ 753.673368][T15141] Buffer I/O error on dev loop4, logical block 0, async page read [ 753.710849][T15143] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 753.715022][T15141] loop4: unable to read partition table [ 753.719700][T15143] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 753.757898][T15143] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 753.776746][T15143] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 753.795498][T15143] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 753.816471][T15143] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 753.855320][T15141] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 754.034069][T15148] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 754.270454][T15150] tipc: Enabling of bearer rejected, already enabled [ 754.317298][ T5919] tipc: Node number set to 4269801488 [ 754.464225][T15152] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2571'. [ 756.975251][ T5919] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 757.125330][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 757.146780][ T5919] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 757.156132][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.181750][ T5919] usb 4-1: config 0 descriptor?? [ 757.206646][ T5919] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 757.345931][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 757.425259][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2586'. [ 757.446431][T15201] ipvlan0: entered promiscuous mode [ 757.451869][T15201] ipvlan0: entered allmulticast mode [ 757.457270][T15201] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 757.471961][T15201] fuse: Bad value for 'fd' [ 757.485453][ T9] usb 2-1: device descriptor read/64, error -71 [ 757.610138][T15188] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 757.745206][ T9] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 757.895655][ T9] usb 2-1: device descriptor read/64, error -71 [ 757.902222][ T5919] gspca_nw80x: reg_r err -110 [ 757.907084][ T5919] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 758.015447][ T9] usb usb2-port1: attempt power cycle [ 758.369722][T15207] FAULT_INJECTION: forcing a failure. [ 758.369722][T15207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 758.383364][ T9] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 758.391507][T15207] CPU: 0 UID: 0 PID: 15207 Comm: syz.0.2589 Not tainted syzkaller #0 PREEMPT(full) [ 758.391530][T15207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 758.391539][T15207] Call Trace: [ 758.391546][T15207] [ 758.391553][T15207] dump_stack_lvl+0x189/0x250 [ 758.391577][T15207] ? __pfx____ratelimit+0x10/0x10 [ 758.391595][T15207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 758.391615][T15207] ? __pfx__printk+0x10/0x10 [ 758.391716][T15207] should_fail_ex+0x414/0x560 [ 758.391747][T15207] _copy_to_user+0x31/0xb0 [ 758.391771][T15207] simple_read_from_buffer+0xe1/0x170 [ 758.391799][T15207] proc_fail_nth_read+0x1b3/0x220 [ 758.391821][T15207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 758.391849][T15207] ? rw_verify_area+0x2a6/0x4d0 [ 758.391865][T15207] ? __lock_acquire+0xab9/0xd20 [ 758.391878][T15207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 758.391894][T15207] vfs_read+0x200/0xa30 [ 758.391911][T15207] ? fdget_pos+0x247/0x320 [ 758.391926][T15207] ? __pfx___mutex_lock+0x10/0x10 [ 758.391942][T15207] ? __pfx_vfs_read+0x10/0x10 [ 758.391959][T15207] ? __fget_files+0x2a/0x420 [ 758.391988][T15207] ? __fget_files+0x3a0/0x420 [ 758.392007][T15207] ? __fget_files+0x2a/0x420 [ 758.392033][T15207] ksys_read+0x145/0x250 [ 758.392052][T15207] ? __pfx_ksys_read+0x10/0x10 [ 758.392066][T15207] ? rcu_is_watching+0x15/0xb0 [ 758.392086][T15207] ? do_syscall_64+0xbe/0x3b0 [ 758.392105][T15207] do_syscall_64+0xfa/0x3b0 [ 758.392118][T15207] ? lockdep_hardirqs_on+0x9c/0x150 [ 758.392133][T15207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.392146][T15207] ? clear_bhb_loop+0x60/0xb0 [ 758.392163][T15207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.392176][T15207] RIP: 0033:0x7f4a3e18d8dc [ 758.392190][T15207] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 758.392202][T15207] RSP: 002b:00007f4a3f0c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 758.392217][T15207] RAX: ffffffffffffffda RBX: 00007f4a3e3e5fa0 RCX: 00007f4a3e18d8dc [ 758.392228][T15207] RDX: 000000000000000f RSI: 00007f4a3f0c60a0 RDI: 0000000000000008 [ 758.392236][T15207] RBP: 00007f4a3f0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 758.392245][T15207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.392261][T15207] R13: 00007f4a3e3e6038 R14: 00007f4a3e3e5fa0 R15: 00007f4a3e50fa28 [ 758.392284][T15207] [ 758.632801][ C0] vkms_vblank_simulate: vblank timer overrun [ 758.655755][ T9] usb 2-1: device descriptor read/8, error -71 [ 758.905205][ T9] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 758.926093][ T9] usb 2-1: device descriptor read/8, error -71 [ 758.985300][T10861] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 759.035619][ T9] usb usb2-port1: unable to enumerate USB device [ 759.125308][T10861] usb 5-1: device descriptor read/64, error -71 [ 759.365265][T10861] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 759.495191][T10861] usb 5-1: device descriptor read/64, error -71 [ 759.555326][T12253] usb 4-1: USB disconnect, device number 101 [ 759.605462][T10861] usb usb5-port1: attempt power cycle [ 759.945203][T10861] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 759.977764][T10861] usb 5-1: device descriptor read/8, error -71 [ 760.227850][T10861] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 760.266297][T10861] usb 5-1: device descriptor read/8, error -71 [ 760.395571][T10861] usb usb5-port1: unable to enumerate USB device [ 760.425470][T12253] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 760.665175][T12253] usb 3-1: Using ep0 maxpacket: 8 [ 760.676836][T12253] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 760.711842][T12253] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 760.750943][T12253] usb 3-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 760.765247][T12253] usb 3-1: config 127 has no interface number 0 [ 760.772063][T12253] usb 3-1: config 127 interface 171 has no altsetting 0 [ 760.782284][T12253] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 760.791557][T12253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.800055][T12253] usb 3-1: Product: syz [ 760.804226][T12253] usb 3-1: Manufacturer: syz [ 760.809684][T12253] usb 3-1: SerialNumber: syz [ 761.005233][T10861] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 761.028337][T12253] xr_serial 3-1:127.171: skipping garbage [ 761.067167][T12253] usb 3-1: USB disconnect, device number 90 [ 761.167516][T10861] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 761.178680][T10861] usb 4-1: config 0 interface 0 has no altsetting 0 [ 761.185828][T10861] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 761.196048][T10861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.207017][T10861] usb 4-1: config 0 descriptor?? [ 761.212687][T15237] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 761.697272][T15241] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2603'. [ 761.720969][T10861] konepure 0003:1E7D:2DBE.0019: item fetching failed at offset 0/2 [ 761.756472][T10861] konepure 0003:1E7D:2DBE.0019: parse failed [ 761.765420][T10861] konepure 0003:1E7D:2DBE.0019: probe with driver konepure failed with error -22 [ 761.875218][ T5921] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 761.924964][ T5920] usb 4-1: USB disconnect, device number 102 [ 762.014903][T15255] batadv_slave_1: entered promiscuous mode [ 762.047704][ T5921] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 762.055991][ T5921] usb 3-1: config 0 has no interface number 0 [ 762.062149][ T5921] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 762.071332][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.086057][ T5921] usb 3-1: config 0 descriptor?? [ 762.092793][T15251] batadv_slave_1: left promiscuous mode [ 762.100057][ T5921] cp210x 3-1:0.1: cp210x converter detected [ 762.500907][ T5921] cp210x 3-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 762.767990][ T5921] usb 3-1: cp210x converter now attached to ttyUSB0 [ 762.836909][ T914] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 762.955200][T10861] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 762.971586][ T5921] usb 3-1: USB disconnect, device number 91 [ 762.981858][ T5921] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 763.009558][ T5921] cp210x 3-1:0.1: device disconnected [ 763.061080][ T914] usb 4-1: Using ep0 maxpacket: 32 [ 763.072771][ T914] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 763.097204][ T914] usb 4-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 763.119363][ T914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.150329][ T914] usb 4-1: Product: syz [ 763.166821][T10861] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 763.177801][T10861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.193047][ T914] usb 4-1: Manufacturer: syz [ 763.235944][T10861] usb 2-1: config 0 descriptor?? [ 763.241302][ T914] usb 4-1: SerialNumber: syz [ 763.255584][T10861] cp210x 2-1:0.0: cp210x converter detected [ 763.271338][ T914] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input62 [ 763.375261][ T5919] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 763.473918][ T5190] bcm5974 4-1:1.0: could not read from device [ 763.484186][ T5190] bcm5974 4-1:1.0: could not read from device [ 763.508839][ T5190] bcm5974 4-1:1.0: could not read from device [ 763.512403][ T914] usb 4-1: USB disconnect, device number 103 [ 763.685838][ T5190] bcm5974 4-1:1.0: could not read from device [ 763.841565][ T5920] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 764.015417][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 764.025177][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 764.053676][ T5920] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 764.069346][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.089785][ T5920] usb 3-1: Product: syz [ 764.098240][ T5920] usb 3-1: Manufacturer: syz [ 764.107631][ T5920] usb 3-1: SerialNumber: syz [ 764.129181][ T5920] usb 3-1: config 0 descriptor?? [ 764.315915][ T5920] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 764.423040][ T5920] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 764.452263][T12253] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 764.469091][ T5919] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 764.477482][ T5919] usb 5-1: can't read configurations, error -71 [ 764.615287][T12253] usb 4-1: Using ep0 maxpacket: 32 [ 764.623231][T12253] usb 4-1: unable to get BOS descriptor or descriptor too short [ 764.632946][T12253] usb 4-1: config 255 has an invalid interface number: 81 but max is 0 [ 764.641381][T12253] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 764.652418][T12253] usb 4-1: config 255 has no interface number 0 [ 764.662188][T12253] usb 4-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 764.693483][T12253] usb 4-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 764.718529][T12253] usb 4-1: config 255 interface 81 has no altsetting 0 [ 764.744387][T12253] usb 4-1: string descriptor 0 read error: -22 [ 764.770613][T12253] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 764.805178][T12253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.893053][ T5920] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 764.905466][T12253] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:255.81/input/input63 [ 766.126298][T15296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 766.465286][ T5919] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 766.741508][ T5919] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.044611][ T5920] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 767.085286][ T5920] em28xx 3-1:0.0: board has no eeprom [ 767.092214][ T5919] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 767.102033][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 767.113357][ T5919] usb 5-1: SerialNumber: syz [ 767.165432][ T5919] usb 5-1: bad CDC descriptors [ 767.175196][ T5920] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 767.185248][ T5920] em28xx 3-1:0.0: dvb set to bulk mode. [ 767.202961][ T5919] em28xx 3-1:0.0: Binding DVB extension [ 767.236988][ T5920] usb 3-1: USB disconnect, device number 92 [ 767.268326][ T5920] em28xx 3-1:0.0: Disconnecting em28xx [ 767.328748][T10861] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 767.353307][T10861] cp210x 2-1:0.0: querying part number failed [ 767.408597][ T5921] usb 5-1: USB disconnect, device number 103 [ 767.420487][ T9] usb 4-1: USB disconnect, device number 104 [ 767.462134][T10861] usb 2-1: cp210x converter now attached to ttyUSB0 [ 767.504373][ T5919] em28xx 3-1:0.0: Registering input extension [ 767.562956][T10861] usb 2-1: USB disconnect, device number 97 [ 767.603777][ T5920] em28xx 3-1:0.0: Closing input extension [ 767.611471][T10861] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 767.643887][T10861] cp210x 2-1:0.0: device disconnected [ 767.751360][ T5920] em28xx 3-1:0.0: Freeing device [ 768.730502][T15328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.795328][ T9] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 768.895807][T15328] team0: Device gtp0 is up. Set it down before adding it as a team port [ 769.158233][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.177212][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.191658][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 769.216390][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 769.250061][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.279955][ T9] usb 4-1: config 0 descriptor?? [ 769.465284][ T5920] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 769.657857][ T5920] usb 3-1: config 0 has no interfaces? [ 769.663691][ T5920] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 769.794629][ T9] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 769.816986][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.841902][ T5920] usb 3-1: config 0 descriptor?? [ 770.042399][T15305] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 770.049129][T15305] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 770.061593][T15305] vhci_hcd vhci_hcd.0: Device attached [ 770.100046][T15343] vhci_hcd: connection closed [ 770.101977][ T5921] usb 4-1: USB disconnect, device number 105 [ 770.113633][T14254] vhci_hcd: stop threads [ 770.140133][T14254] vhci_hcd: release socket [ 770.144864][T14254] vhci_hcd: disconnect device [ 771.197123][ T5920] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 771.365289][ T5921] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 771.375401][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 771.382567][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.393135][ T5920] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 771.402328][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.413472][ T5920] usb 2-1: config 0 descriptor?? [ 771.422026][ T5920] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 771.515649][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 771.522527][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 771.534346][ T5921] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 771.543639][ T5921] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 771.551909][ T5921] usb 4-1: Product: syz [ 771.556177][ T5921] usb 4-1: Manufacturer: syz [ 771.560777][ T5921] usb 4-1: SerialNumber: syz [ 771.625941][ T9] usb 3-1: USB disconnect, device number 93 [ 771.771190][ T5921] usb 4-1: Handspring Visor / Palm OS: port 79, is for unknown use [ 771.781421][ T5921] usb 4-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 771.789936][ T5921] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 771.931853][T14254] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.974179][ T5921] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 771.990743][ T5921] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 772.004074][ T5921] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 772.020036][ T5921] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 772.035398][ T5921] usb 4-1: USB disconnect, device number 106 [ 772.056585][ T5921] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 772.061661][T14254] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.102160][ T5921] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 772.126463][ T5921] visor 4-1:1.0: device disconnected [ 772.190405][T14254] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.358950][T14254] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.885905][ T5832] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 773.039227][ T5920] gspca_vc032x: reg_w err -71 [ 773.045869][ T5920] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 773.065655][ T5920] usb 2-1: USB disconnect, device number 98 [ 773.077577][ T5832] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 773.391902][ T5832] usb 1-1: USB disconnect, device number 85 [ 773.399332][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 773.433630][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 773.444422][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 773.456843][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 773.464520][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 773.614969][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 773.626429][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 773.634830][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 773.652310][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 773.660174][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 774.035338][ T5921] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 774.231360][T12253] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 774.264393][T12253] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 774.336268][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 774.382614][T14254] bond1 (unregistering): (slave gretap1): Releasing active interface [ 774.393329][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.438916][ T5921] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 774.455921][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.474876][ T5921] usb 1-1: Product: syz [ 774.499476][ T5921] usb 1-1: Manufacturer: syz [ 774.511153][ T5921] usb 1-1: SerialNumber: syz [ 774.577889][ T5921] usb 1-1: config 0 descriptor?? [ 774.616170][ T5921] cdc_phonet 1-1:0.0: probe with driver cdc_phonet failed with error -22 [ 774.831784][T15394] fido_id[15394]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 775.003721][T15405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.023809][T15405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.084588][T14254] bond0 (unregistering): Released all slaves [ 775.137689][T14254] bond1 (unregistering): Released all slaves [ 775.284151][T14254] tipc: Disabling bearer [ 775.444952][T14254] tipc: Left network mode [ 775.543880][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2646'. [ 775.553507][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2646'. [ 775.675383][ T5840] Bluetooth: hci4: command tx timeout [ 775.686749][ T5920] usb 1-1: USB disconnect, device number 86 [ 776.129507][T15426] ip6gre1: entered promiscuous mode [ 777.076444][T15431] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 777.083107][T15431] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 777.694722][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2654'. [ 778.027145][T14254] hsr_slave_0: left promiscuous mode [ 778.043633][T14254] hsr_slave_1: left promiscuous mode [ 778.376009][T14254] veth1_macvtap: left promiscuous mode [ 778.385312][T14254] veth0_macvtap: left promiscuous mode [ 778.391034][T14254] veth1_vlan: left promiscuous mode [ 778.396533][T14254] veth0_vlan: left promiscuous mode [ 778.415174][ T5832] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 778.584378][ T5832] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 778.600021][ T5832] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 778.627395][ T5832] usb 1-1: config 8 has no interface number 0 [ 778.675563][ T5832] usb 1-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 778.785824][ T5832] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 778.909456][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.988337][ T5832] usb 1-1: NFC: intf ffff8880306d9000 id ffffffff8e6eb3e0 [ 779.170709][T15477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.180920][T15477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.979869][T15382] chnl_net:caif_netlink_parms(): no params data found [ 780.406671][T15382] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.416744][T15382] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.428530][T15382] bridge_slave_0: entered allmulticast mode [ 780.437248][T15382] bridge_slave_0: entered promiscuous mode [ 780.457728][T15382] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.467041][T15382] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.482991][T15382] bridge_slave_1: entered allmulticast mode [ 780.577371][T15382] bridge_slave_1: entered promiscuous mode [ 780.624533][T15499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2658'. [ 780.637868][T15499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.688207][T15501] FAULT_INJECTION: forcing a failure. [ 780.688207][T15501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.724396][T15501] CPU: 0 UID: 0 PID: 15501 Comm: syz.1.2662 Not tainted syzkaller #0 PREEMPT(full) [ 780.724421][T15501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 780.724431][T15501] Call Trace: [ 780.724443][T15501] [ 780.724452][T15501] dump_stack_lvl+0x189/0x250 [ 780.724476][T15501] ? __pfx____ratelimit+0x10/0x10 [ 780.724496][T15501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 780.724515][T15501] ? __pfx__printk+0x10/0x10 [ 780.724549][T15501] should_fail_ex+0x414/0x560 [ 780.724583][T15501] _copy_to_user+0x31/0xb0 [ 780.724613][T15501] simple_read_from_buffer+0xe1/0x170 [ 780.724652][T15501] proc_fail_nth_read+0x1b3/0x220 [ 780.724674][T15501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 780.724696][T15501] ? rw_verify_area+0x2a6/0x4d0 [ 780.724716][T15501] ? __lock_acquire+0xab9/0xd20 [ 780.724732][T15501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 780.724760][T15501] vfs_read+0x200/0xa30 [ 780.724780][T15501] ? fdget_pos+0x247/0x320 [ 780.724799][T15501] ? __pfx___mutex_lock+0x10/0x10 [ 780.724820][T15501] ? __pfx_vfs_read+0x10/0x10 [ 780.724842][T15501] ? __fget_files+0x2a/0x420 [ 780.724869][T15501] ? __fget_files+0x3a0/0x420 [ 780.724888][T15501] ? __fget_files+0x2a/0x420 [ 780.724920][T15501] ksys_read+0x145/0x250 [ 780.724940][T15501] ? __pfx_ksys_read+0x10/0x10 [ 780.724956][T15501] ? rcu_is_watching+0x15/0xb0 [ 780.724980][T15501] ? do_syscall_64+0xbe/0x3b0 [ 780.725001][T15501] do_syscall_64+0xfa/0x3b0 [ 780.725017][T15501] ? lockdep_hardirqs_on+0x9c/0x150 [ 780.725035][T15501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.725051][T15501] ? clear_bhb_loop+0x60/0xb0 [ 780.725068][T15501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.725082][T15501] RIP: 0033:0x7f1fa2f8d8dc [ 780.725098][T15501] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 780.725112][T15501] RSP: 002b:00007f1fa3e60030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 780.725130][T15501] RAX: ffffffffffffffda RBX: 00007f1fa31e5fa0 RCX: 00007f1fa2f8d8dc [ 780.725141][T15501] RDX: 000000000000000f RSI: 00007f1fa3e600a0 RDI: 0000000000000004 [ 780.725151][T15501] RBP: 00007f1fa3e60090 R08: 0000000000000000 R09: 0000000000000000 [ 780.725160][T15501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.725170][T15501] R13: 00007f1fa31e6038 R14: 00007f1fa31e5fa0 R15: 00007f1fa330fa28 [ 780.725199][T15501] [ 780.995610][T15382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.008676][T15382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.018101][ T5920] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 781.188359][ T5920] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 781.197423][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.205540][ T5920] usb 4-1: Product: syz [ 781.209708][ T5920] usb 4-1: Manufacturer: syz [ 781.214286][ T5920] usb 4-1: SerialNumber: syz [ 781.220687][ T5920] usb 4-1: config 0 descriptor?? [ 781.270422][T14254] IPVS: stop unused estimator thread 0... [ 781.318370][T15382] team0: Port device team_slave_0 added [ 781.348779][T15382] team0: Port device team_slave_1 added [ 781.412288][T12253] usb 1-1: USB disconnect, device number 87 [ 781.630252][ T5920] usb 4-1: USB disconnect, device number 107 [ 782.302546][T15382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.428466][T15382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.832749][T15382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.000719][T15382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.009761][T15382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.112953][T15382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.982455][T15382] hsr_slave_0: entered promiscuous mode [ 784.002403][T15382] hsr_slave_1: entered promiscuous mode [ 784.528426][T15574] ptrace attach of "./syz-executor exec"[5855] was attempted by "./syz-executor exec"[15574] [ 785.500051][T15580] macvtap1: entered promiscuous mode [ 785.507351][T15580] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 785.533347][T15583] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 785.689068][T15587] input: syz1 as /devices/virtual/input/input65 [ 786.241518][T15382] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 786.542621][T15382] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 786.894146][T15382] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 786.924315][T15382] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 787.648580][T15382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.732305][T15382] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.751650][T14252] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.758801][T14252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.529384][T14252] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.536619][T14252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.655238][ T5921] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 788.749958][T15382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.807164][ T5921] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 788.838869][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.898850][ T5921] usb 5-1: config 0 descriptor?? [ 788.947257][T15382] veth0_vlan: entered promiscuous mode [ 788.958396][ T5921] cp210x 5-1:0.0: cp210x converter detected [ 788.989440][T15382] veth1_vlan: entered promiscuous mode [ 789.164100][ T5921] usb 5-1: cp210x converter now attached to ttyUSB0 [ 789.181303][T15382] veth0_macvtap: entered promiscuous mode [ 789.240167][T15382] veth1_macvtap: entered promiscuous mode [ 789.326834][T15382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.340953][T15382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.373734][T14254] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.404029][T14254] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.433510][T15641] geneve3: entered promiscuous mode [ 789.454245][T14254] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.513995][T14254] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.740417][ T6631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.761629][ T6631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.884205][T14254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.894524][T14254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.981985][T15659] FAULT_INJECTION: forcing a failure. [ 789.981985][T15659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.009670][T15659] CPU: 1 UID: 0 PID: 15659 Comm: syz.3.2686 Not tainted syzkaller #0 PREEMPT(full) [ 790.009696][T15659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 790.009707][T15659] Call Trace: [ 790.009715][T15659] [ 790.009723][T15659] dump_stack_lvl+0x189/0x250 [ 790.009754][T15659] ? __pfx____ratelimit+0x10/0x10 [ 790.009773][T15659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 790.009793][T15659] ? __pfx__printk+0x10/0x10 [ 790.009828][T15659] should_fail_ex+0x414/0x560 [ 790.009858][T15659] _copy_to_user+0x31/0xb0 [ 790.009882][T15659] simple_read_from_buffer+0xe1/0x170 [ 790.009910][T15659] proc_fail_nth_read+0x1b3/0x220 [ 790.009932][T15659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 790.009955][T15659] ? rw_verify_area+0x2a6/0x4d0 [ 790.009974][T15659] ? __lock_acquire+0xab9/0xd20 [ 790.009990][T15659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 790.010009][T15659] vfs_read+0x200/0xa30 [ 790.010028][T15659] ? fdget_pos+0x247/0x320 [ 790.010048][T15659] ? __pfx___mutex_lock+0x10/0x10 [ 790.010067][T15659] ? __pfx_vfs_read+0x10/0x10 [ 790.010089][T15659] ? __fget_files+0x2a/0x420 [ 790.010117][T15659] ? __fget_files+0x3a0/0x420 [ 790.010137][T15659] ? __fget_files+0x2a/0x420 [ 790.010168][T15659] ksys_read+0x145/0x250 [ 790.010192][T15659] ? __pfx_ksys_read+0x10/0x10 [ 790.010210][T15659] ? rcu_is_watching+0x15/0xb0 [ 790.010235][T15659] ? do_syscall_64+0xbe/0x3b0 [ 790.010258][T15659] do_syscall_64+0xfa/0x3b0 [ 790.010275][T15659] ? lockdep_hardirqs_on+0x9c/0x150 [ 790.010292][T15659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.010309][T15659] ? clear_bhb_loop+0x60/0xb0 [ 790.010330][T15659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.010346][T15659] RIP: 0033:0x7f737c78d8dc [ 790.010362][T15659] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 790.010377][T15659] RSP: 002b:00007f737a9f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 790.010396][T15659] RAX: ffffffffffffffda RBX: 00007f737c9e5fa0 RCX: 00007f737c78d8dc [ 790.010408][T15659] RDX: 000000000000000f RSI: 00007f737a9f60a0 RDI: 0000000000000006 [ 790.010419][T15659] RBP: 00007f737a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 790.010430][T15659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.010440][T15659] R13: 00007f737c9e6038 R14: 00007f737c9e5fa0 R15: 00007f737cb0fa28 [ 790.010468][T15659] [ 790.419867][T15666] kAFS: unable to lookup cell 'Þ({^ú@' [ 790.685227][ T914] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 790.717082][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2690'. [ 790.851591][ T914] usb 2-1: Using ep0 maxpacket: 32 [ 790.865357][ T914] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 790.873944][ T914] usb 2-1: config 0 has no interface number 0 [ 790.880846][ T914] usb 2-1: config 0 interface 89 has no altsetting 0 [ 790.922817][ T914] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 790.933816][ T914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.992477][ T914] usb 2-1: Product: syz [ 791.003940][ T914] usb 2-1: Manufacturer: syz [ 791.012635][ T914] usb 2-1: SerialNumber: syz [ 791.026116][ T914] usb 2-1: config 0 descriptor?? [ 791.047430][ T914] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 791.058472][ T914] em28xx 2-1:0.89: Video interface 89 found: bulk [ 791.980967][T12253] usb 5-1: USB disconnect, device number 104 [ 792.004218][T12253] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 792.037348][T12253] cp210x 5-1:0.0: device disconnected [ 792.311965][ T914] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 792.738846][ T914] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 792.775164][ T914] em28xx 2-1:0.89: board has no eeprom [ 792.978398][T15699] kvm: kvm [15698]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x40600 [ 793.025169][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 793.182828][ T914] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 793.194419][ T914] em28xx 2-1:0.89: analog set to bulk mode. [ 793.218021][T12253] em28xx 2-1:0.89: Registering V4L2 extension [ 793.275284][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 793.310992][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.321527][ T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 793.335337][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 793.341949][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 793.351332][T12253] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 793.351749][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.374174][ T9] usb 4-1: config 0 descriptor?? [ 793.390931][T12253] em28xx 2-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 793.405640][T15670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.436318][T15670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.508706][T12253] em28xx 2-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 793.509067][ T5920] usb 2-1: USB disconnect, device number 99 [ 793.555777][ T5920] em28xx 2-1:0.89: Disconnecting em28xx [ 793.601733][T12253] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 793.653321][T12253] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 793.678016][T12253] em28xx 2-1:0.89: No AC97 audio processor [ 793.733617][T12253] usb 2-1: Decoder not found [ 793.762312][T12253] em28xx 2-1:0.89: failed to create media graph [ 793.816883][T12253] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 793.879415][T15714] ================================================================== [ 793.887511][T15714] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 793.894968][T15714] Read of size 8 at addr ffff88802f98c740 by task v4l_id/15714 [ 793.902515][T15714] [ 793.904847][T15714] CPU: 0 UID: 0 PID: 15714 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 793.904870][T15714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 793.904882][T15714] Call Trace: [ 793.904890][T15714] [ 793.904898][T15714] dump_stack_lvl+0x189/0x250 [ 793.904921][T15714] ? __virt_addr_valid+0x1c8/0x5c0 [ 793.904942][T15714] ? rcu_is_watching+0x15/0xb0 [ 793.904962][T15714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 793.904981][T15714] ? rcu_is_watching+0x15/0xb0 [ 793.904999][T15714] ? lock_release+0x4b/0x3e0 [ 793.905015][T15714] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 793.905032][T15714] ? __virt_addr_valid+0x1c8/0x5c0 [ 793.905121][T15714] ? __virt_addr_valid+0x4a5/0x5c0 [ 793.905140][T15714] print_report+0xca/0x240 [ 793.905155][T15714] ? v4l2_fh_open+0xac/0x420 [ 793.905175][T15714] kasan_report+0x118/0x150 [ 793.905199][T15714] ? v4l2_fh_open+0xac/0x420 [ 793.905223][T15714] v4l2_fh_open+0xac/0x420 [ 793.905245][T15714] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 793.905266][T15714] em28xx_v4l2_open+0x157/0x9a0 [ 793.905290][T15714] v4l2_open+0x1bc/0x3a0 [ 793.905356][T15714] chrdev_open+0x4cc/0x5e0 [ 793.905379][T15714] ? __pfx_chrdev_open+0x10/0x10 [ 793.905400][T15714] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 793.905419][T15714] ? __pfx_chrdev_open+0x10/0x10 [ 793.905440][T15714] do_dentry_open+0x953/0x13f0 [ 793.905463][T15714] vfs_open+0x3b/0x340 [ 793.905479][T15714] ? path_openat+0x2ecd/0x3830 [ 793.905499][T15714] path_openat+0x2ee5/0x3830 [ 793.905532][T15714] ? __pfx_path_openat+0x10/0x10 [ 793.905558][T15714] do_filp_open+0x1fa/0x410 [ 793.905574][T15714] ? __lock_acquire+0xab9/0xd20 [ 793.905590][T15714] ? __pfx_do_filp_open+0x10/0x10 [ 793.905615][T15714] ? _raw_spin_unlock+0x28/0x50 [ 793.905629][T15714] ? alloc_fd+0x64c/0x6c0 [ 793.905654][T15714] do_sys_openat2+0x121/0x1c0 [ 793.905673][T15714] ? __pfx_do_sys_openat2+0x10/0x10 [ 793.905690][T15714] ? exc_page_fault+0x76/0xf0 [ 793.905708][T15714] ? do_user_addr_fault+0xc85/0x1380 [ 793.905727][T15714] __x64_sys_openat+0x138/0x170 [ 793.905746][T15714] do_syscall_64+0xfa/0x3b0 [ 793.905764][T15714] ? lockdep_hardirqs_on+0x9c/0x150 [ 793.905781][T15714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.905798][T15714] ? clear_bhb_loop+0x60/0xb0 [ 793.905816][T15714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.905833][T15714] RIP: 0033:0x7f5042aa7407 [ 793.905848][T15714] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 793.905863][T15714] RSP: 002b:00007ffff5e1b750 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 793.905882][T15714] RAX: ffffffffffffffda RBX: 00007f50432aa880 RCX: 00007f5042aa7407 [ 793.905895][T15714] RDX: 0000000000000000 RSI: 00007ffff5e1cf1c RDI: ffffffffffffff9c [ 793.905907][T15714] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 793.905917][T15714] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 793.905928][T15714] R13: 00007ffff5e1b9a0 R14: 00007f5043411000 R15: 000055a931b394d8 [ 793.905946][T15714] [ 793.905952][T15714] [ 794.015255][T12253] em28xx 2-1:0.89: Registering snapshot button... [ 794.017541][T15714] Allocated by task 12253: [ 794.017552][T15714] kasan_save_track+0x3e/0x80 [ 794.017576][T15714] __kasan_kmalloc+0x93/0xb0 [ 794.228460][T15714] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 794.233841][T15714] em28xx_v4l2_init+0x10b/0x2e70 [ 794.238778][T15714] em28xx_init_extension+0x120/0x1c0 [ 794.244092][T15714] process_scheduled_works+0xade/0x17b0 [ 794.249629][T15714] worker_thread+0x8a0/0xda0 [ 794.254221][T15714] kthread+0x70e/0x8a0 [ 794.258297][T15714] ret_from_fork+0x436/0x7d0 [ 794.262880][T15714] ret_from_fork_asm+0x1a/0x30 [ 794.267639][T15714] [ 794.269954][T15714] Freed by task 12253: [ 794.274011][T15714] kasan_save_track+0x3e/0x80 [ 794.278676][T15714] __kasan_save_free_info+0x46/0x50 [ 794.283856][T15714] __kasan_slab_free+0x5c/0x80 [ 794.288604][T15714] kfree+0x19a/0x6d0 [ 794.292484][T15714] em28xx_v4l2_init+0x1683/0x2e70 [ 794.297490][T15714] em28xx_init_extension+0x120/0x1c0 [ 794.302761][T15714] process_scheduled_works+0xade/0x17b0 [ 794.308291][T15714] worker_thread+0x8a0/0xda0 [ 794.312863][T15714] kthread+0x70e/0x8a0 [ 794.316918][T15714] ret_from_fork+0x436/0x7d0 [ 794.321591][T15714] ret_from_fork_asm+0x1a/0x30 [ 794.326352][T15714] [ 794.328666][T15714] The buggy address belongs to the object at ffff88802f98c000 [ 794.328666][T15714] which belongs to the cache kmalloc-8k of size 8192 [ 794.342703][T15714] The buggy address is located 1856 bytes inside of [ 794.342703][T15714] freed 8192-byte region [ffff88802f98c000, ffff88802f98e000) [ 794.356753][T15714] [ 794.359066][T15714] The buggy address belongs to the physical page: [ 794.365487][T15714] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f988 [ 794.374226][T15714] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 794.382713][T15714] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 794.390240][T15714] page_type: f5(slab) [ 794.394210][T15714] raw: 00fff00000000040 ffff88813fe27280 ffffea0001d89800 0000000000000004 [ 794.402779][T15714] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 794.411350][T15714] head: 00fff00000000040 ffff88813fe27280 ffffea0001d89800 0000000000000004 [ 794.420009][T15714] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 794.428663][T15714] head: 00fff00000000003 ffffea0000be6201 00000000ffffffff 00000000ffffffff [ 794.437316][T15714] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 794.445967][T15714] page dumped because: kasan: bad access detected [ 794.452361][T15714] page_owner tracks the page as allocated [ 794.458061][T15714] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 14834, tgid 14833 (syz.1.2486), ts 732217780940, free_ts 732158000579 [ 794.478017][T15714] post_alloc_hook+0x240/0x2a0 [ 794.482771][T15714] get_page_from_freelist+0x2365/0x2440 [ 794.488301][T15714] __alloc_frozen_pages_noprof+0x181/0x370 [ 794.494097][T15714] alloc_pages_mpol+0x232/0x4a0 [ 794.498936][T15714] allocate_slab+0x96/0x3a0 [ 794.503421][T15714] ___slab_alloc+0xe94/0x1920 [ 794.508080][T15714] __slab_alloc+0x65/0x100 [ 794.512477][T15714] __kvmalloc_node_noprof+0x6ba/0x910 [ 794.517833][T15714] xdp_umem_pin_pages+0x57/0x350 [ 794.522753][T15714] xdp_umem_create+0x677/0x8e0 [ 794.527494][T15714] xsk_setsockopt+0x7b0/0x8d0 [ 794.532156][T15714] do_sock_setsockopt+0x17c/0x1b0 [ 794.537171][T15714] __x64_sys_setsockopt+0x13f/0x1b0 [ 794.542354][T15714] do_syscall_64+0xfa/0x3b0 [ 794.546840][T15714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.553243][T15714] page last free pid 14830 tgid 14830 stack trace: [ 794.559727][T15714] __free_frozen_pages+0xbc4/0xd30 [ 794.564825][T15714] __put_partials+0x146/0x170 [ 794.569482][T15714] put_cpu_partial+0x1f2/0x2e0 [ 794.574316][T15714] __slab_free+0x2b9/0x390 [ 794.578711][T15714] qlist_free_all+0x97/0x140 [ 794.583281][T15714] kasan_quarantine_reduce+0x148/0x160 [ 794.588725][T15714] __kasan_slab_alloc+0x22/0x80 [ 794.593559][T15714] __kmalloc_noprof+0x3c3/0x7f0 [ 794.598400][T15714] tomoyo_encode+0x28b/0x550 [ 794.602970][T15714] tomoyo_path_perm+0x2b3/0x4b0 [ 794.607802][T15714] tomoyo_path_symlink+0xa3/0xe0 [ 794.612732][T15714] security_path_symlink+0x177/0x380 [ 794.618193][T15714] do_symlinkat+0x107/0x3f0 [ 794.622686][T15714] __x64_sys_symlinkat+0x95/0xb0 [ 794.627608][T15714] do_syscall_64+0xfa/0x3b0 [ 794.632101][T15714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.638599][T15714] [ 794.640907][T15714] Memory state around the buggy address: [ 794.646519][T15714] ffff88802f98c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 794.654566][T15714] ffff88802f98c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 794.662614][T15714] >ffff88802f98c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 794.670657][T15714] ^ [ 794.676790][T15714] ffff88802f98c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 794.684864][T15714] ffff88802f98c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 794.692908][T15714] ================================================================== [ 794.709325][T12253] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input66 [ 794.757011][T15714] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 794.764323][T15714] CPU: 1 UID: 0 PID: 15714 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 794.773434][T15714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 794.783664][T15714] Call Trace: [ 794.786937][T15714] [ 794.790123][T15714] dump_stack_lvl+0x99/0x250 [ 794.794709][T15714] ? __asan_memcpy+0x40/0x70 [ 794.799287][T15714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.804474][T15714] ? __pfx__printk+0x10/0x10 [ 794.809059][T15714] vpanic+0x237/0x6d0 [ 794.813034][T15714] ? __pfx_vpanic+0x10/0x10 [ 794.817523][T15714] ? preempt_schedule+0xae/0xc0 [ 794.822372][T15714] ? __pfx_preempt_schedule+0x10/0x10 [ 794.827749][T15714] panic+0xb9/0xc0 [ 794.831472][T15714] ? __pfx_panic+0x10/0x10 [ 794.835887][T15714] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 794.841768][T15714] ? is_module_address+0x17/0xf0 [ 794.846702][T15714] ? v4l2_fh_open+0xac/0x420 [ 794.851282][T15714] check_panic_on_warn+0x89/0xb0 [ 794.856217][T15714] ? v4l2_fh_open+0xac/0x420 [ 794.860811][T15714] end_report+0x78/0x160 [ 794.865048][T15714] kasan_report+0x129/0x150 [ 794.869545][T15714] ? v4l2_fh_open+0xac/0x420 [ 794.874170][T15714] v4l2_fh_open+0xac/0x420 [ 794.878575][T15714] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 794.884542][T15714] em28xx_v4l2_open+0x157/0x9a0 [ 794.889388][T15714] v4l2_open+0x1bc/0x3a0 [ 794.893626][T15714] chrdev_open+0x4cc/0x5e0 [ 794.898036][T15714] ? __pfx_chrdev_open+0x10/0x10 [ 794.902969][T15714] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 794.909288][T15714] ? __pfx_chrdev_open+0x10/0x10 [ 794.914306][T15714] do_dentry_open+0x953/0x13f0 [ 794.919064][T15714] vfs_open+0x3b/0x340 [ 794.923115][T15714] ? path_openat+0x2ecd/0x3830 [ 794.927863][T15714] path_openat+0x2ee5/0x3830 [ 794.932453][T15714] ? __pfx_path_openat+0x10/0x10 [ 794.937392][T15714] do_filp_open+0x1fa/0x410 [ 794.941882][T15714] ? __lock_acquire+0xab9/0xd20 [ 794.946720][T15714] ? __pfx_do_filp_open+0x10/0x10 [ 794.951741][T15714] ? _raw_spin_unlock+0x28/0x50 [ 794.956578][T15714] ? alloc_fd+0x64c/0x6c0 [ 794.960901][T15714] do_sys_openat2+0x121/0x1c0 [ 794.965570][T15714] ? __pfx_do_sys_openat2+0x10/0x10 [ 794.970760][T15714] ? exc_page_fault+0x76/0xf0 [ 794.975428][T15714] ? do_user_addr_fault+0xc85/0x1380 [ 794.980699][T15714] __x64_sys_openat+0x138/0x170 [ 794.985540][T15714] do_syscall_64+0xfa/0x3b0 [ 794.990031][T15714] ? lockdep_hardirqs_on+0x9c/0x150 [ 794.995308][T15714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.001358][T15714] ? clear_bhb_loop+0x60/0xb0 [ 795.006019][T15714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.011912][T15714] RIP: 0033:0x7f5042aa7407 [ 795.016327][T15714] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 795.035942][T15714] RSP: 002b:00007ffff5e1b750 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 795.044347][T15714] RAX: ffffffffffffffda RBX: 00007f50432aa880 RCX: 00007f5042aa7407 [ 795.052307][T15714] RDX: 0000000000000000 RSI: 00007ffff5e1cf1c RDI: ffffffffffffff9c [ 795.060266][T15714] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 795.068225][T15714] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 795.076187][T15714] R13: 00007ffff5e1b9a0 R14: 00007f5043411000 R15: 000055a931b394d8 [ 795.084159][T15714] [ 795.087463][T15714] Kernel Offset: disabled [ 795.091781][T15714] Rebooting in 86400 seconds..