last executing test programs: 41m15.47570658s ago: executing program 1 (id=3043): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e00010000000000000000000200000001000007000000000800010000000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000001680)={0x2020}, 0x2020) syz_usb_connect$cdc_ecm(0x0, 0x66, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0xed, 0x60, 0x3c, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x6, 0xfffa, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @mdlm_detail={0x4, 0x24, 0x13, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xb7, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x5, 0x5}}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 41m13.506190497s ago: executing program 1 (id=3052): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mknod$loop(0x0, 0xfff, 0x0) execve(0x0, 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7}, 0x1, 0x8, 0xffffffff, 0x8, r2, r2, 0x6f8a}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000800) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902120001000014000d04b8070096d1"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2b, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PTP_ENABLE_PPS(r8, 0x40043d04, 0x1) 41m8.279934514s ago: executing program 1 (id=3073): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x143a81) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x41e43, 0x14) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) chmod(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x400000000c0001, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x510a, 0x400, 0x3, 0x288}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0x78) 41m7.338015919s ago: executing program 1 (id=3077): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e21, 0x10000, @private1, 0xca}, {0xa, 0x4e21, 0x99f, @private2, 0x6}, 0x0, {[0x580cfda, 0x400, 0x9, 0x40, 0x2b4a, 0x1, 0x1000, 0x3]}}, 0x5c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x95, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000880)={0x516, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r4 = socket(0x2000000015, 0x80005, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x1a000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xd0}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r4, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000000000000050000000000000000000000030000000000f100ffffffff"]) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000000)={0x0, 0xe8f}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64], 0x20) 41m6.619998312s ago: executing program 1 (id=3079): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 41m6.45532694s ago: executing program 1 (id=3080): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) fchdir(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r2 = syz_io_uring_setup(0x107, &(0x7f0000000140)={0x0, 0x747f, 0x0, 0x4, 0xae}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) (fail_nth: 18) 41m5.712164742s ago: executing program 32 (id=3080): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) fchdir(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r2 = syz_io_uring_setup(0x107, &(0x7f0000000140)={0x0, 0x747f, 0x0, 0x4, 0xae}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) (fail_nth: 18) 11.370583498s ago: executing program 4 (id=12019): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@gettclass={0x24, 0x2a, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x14}, {0x6, 0xe}, {0xb, 0xc}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 9.27360761s ago: executing program 2 (id=12025): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ef17ee6000000000000109022400010000c0000904000003030000ea08210000010122070009058103ff03000000"], 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) preadv(r1, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0xc}, {0x0, 0x24}], 0x2, 0x0, 0x0) futex(&(0x7f0000000000)=0x3, 0x5, 0x1, 0x0, &(0x7f0000000200), 0xe5000002) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r2) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c4}, 0x4000800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000070440008fde859d2577429d80012fb4477ab7000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.446662608s ago: executing program 4 (id=12031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x40b, 0xf5, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x50, 0x3, "cd4b6abe42031763d02899c77f99ff5fe87a9d3ac869f3a860917523679a5eb46131471826390d810593448ba1ecbf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537"}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.969744816s ago: executing program 4 (id=12034): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x800000) 6.870806998s ago: executing program 5 (id=12035): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x60300, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xce23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) pselect6(0x40, &(0x7f0000000080)={0xc, 0x4, 0x401, 0x5, 0x6, 0x81, 0x3, 0x400}, 0x0, 0x0, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f0000000080)=ANY=[], 0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x400}, &(0x7f0000000180)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 6.3445275s ago: executing program 4 (id=12037): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) userfaultfd(0x801) syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x701502) epoll_create1(0x80000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288, 0x0, r1}, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0xd3, 0x1a, 0xd2, 0x40, 0x3f0, 0x581d, 0xbb42, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x0, 0x3, 0xff, 0x1, 0x7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x2, 0x86, 0x3}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0xb, 0x7f, 0x14}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x3) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 6.201987977s ago: executing program 0 (id=12038): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$inet(r6, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20000090) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x80800}) listen(r6, 0x5) io_uring_enter(r7, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022abd7000fbdbdf250200000008003f000c00000005003d0009000000"], 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x44) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r12, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @local}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) sendto$inet(r12, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 6.099808834s ago: executing program 2 (id=12039): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x24008804) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x1}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x6, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0, 0x64}}], 0x1, 0x20004840) ioctl$KVM_RUN(r2, 0xae80, 0x10000000) 6.099326989s ago: executing program 3 (id=12040): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x2000, {r1}}, 0x58) 6.020512178s ago: executing program 3 (id=12041): unshare(0x20000400) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xf, 0x0, &(0x7f00000000c0)) 5.91334399s ago: executing program 2 (id=12042): socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r3 = fcntl$getown(r2, 0x9) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) syz_open_procfs(r3, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000004c0)="f885628b836f367ff34fe87abf85fc4db9000000000000000051de18a0ef5b409a1721d600000000", 0x28, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="e14507b8c4e9a150a3c2b2a3a6c1aa39eb8ddec4e8923537f93a0022bf0b296b6a12005e89d144308da1c19452c58d4e7a2b17d8dd0badbe75c95f04ee7b7017d0c1891c5f7a74f93953f715bb98c05c8dd8352264c5061be835c9fb956286f2d2784c46f26f52c4ace94dffaad1b06ae7bfdb1e682c7eb63cbee759fa93b946a7ee91fc0eb6f39a8e33688559c43bc6423820e4a38c46b22d27e7bea37a5e762c3175d12c2239fe7ece72959eeb372418ba5a2f6d59001d4e982aa477afc1377119d0ecd3eb0c3bab3c861eb245f9", 0xcf, r6) r8 = getpgid(0x0) kcmp(r8, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r7, r4}, 0x0, 0x0, 0x0) r9 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, 0x0) syz_io_uring_setup(0x304, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @private0}]}, 0x2c}}, 0x0) 5.691990045s ago: executing program 3 (id=12043): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 5.56261357s ago: executing program 3 (id=12044): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0x3f3}, {0x6, 0x24, 0x1a, 0x0, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @broadcast, @multicast2}, "1a3f02eb38ad1bf6"}}}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.529904699s ago: executing program 5 (id=12045): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, 0x0, 0x10) recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0xffa1}, 0x5}, {{0x0, 0x0, 0x0}, 0xffff6e84}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0xa, 0x801, 0x84) 5.271820735s ago: executing program 5 (id=12046): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ptrace$getsig(0x4202, 0x0, 0x40, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6094, &(0x7f0000000740)={0x0, 0x5884, 0x10100, 0x1, 0x330, 0x0, r1}, &(0x7f0000000600)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x8, 0x0, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, 0x0, 0xa0) readv(r5, &(0x7f0000000700), 0x0) 4.513680525s ago: executing program 5 (id=12047): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/fscaps', 0x801, 0x110) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7, 0x24c, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x5, 0x3, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0x9}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000020b00000000000000ffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r6, &(0x7f0000004d80)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x802222, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000000000)=0x1) syz_io_uring_setup(0x615e, &(0x7f0000000140)={0x0, 0x66fb, 0x2000, 0x0, 0x22d}, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1a, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 4.077205099s ago: executing program 0 (id=12048): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'ip6erspan0\x00', {0x2, 0x4e21, @private=0xa010101}}) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@RTM_NEWMDB={0x18, 0x54, 0x300, 0x70bd2d, 0x25dfdbff, {0x7, r2}}, 0x18}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$inet(r4, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty}}}], 0x20}}], 0x1, 0x80) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') write$UHID_INPUT(r5, 0x0, 0x0) 3.407409812s ago: executing program 4 (id=12049): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0x1364, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x11b0, 0x2, [@TCA_MATCHALL_ACT={0x11ac, 0x2, [@m_sample={0x11c, 0x5, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xe5, 0x6, "38f25df555191be2c666d9a5f9fbf1c6674d930a6b49548795f779c04738d31476e7b46904303e774f670daac95204b3aa00967b9ec65d764b2e48bd715da197540ac2dbea2e115f4efd22ebb0c4531bf7fcd31b61547bd15f710737fab7ba50f6730bcf7c68fd6f6734dc220ebc37df3b8e187fddc4516e5f783c302bbc133134d2a06ab408a97de6505724f9be2eb62a565a1535810f54b758c56ab347d36db167b672425230830efb7606f51b3a894056ee7b74af7ad106d611b3d7c4a326bbd604993d9eba87f5d9d7c682cf9643bb5648bc70f946ebac22580878bb773b06"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x7}}}}, @m_ctinfo={0x90, 0x1b, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x72a0, 0x4, 0xffffffffeffffff1, 0x2, 0x9}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8001}]}, {0x39, 0x6, "89a75f1f9832982c0a59ad5c7b043805d7ff0d0a67a9df5adf2ac6dab7c5cfad8bbf15a9388f68544ed8dea9946ee57f3ffd502c80"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0xe4, 0x1d, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xc7f, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xa96}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x160e, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x9, 0x5, 0x3, 0x3bc}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x4, 0xe, 0x2800000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x92a, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xfd0, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x4, 0xfff, 0x4}}]}, {0x31, 0x6, "015c581fa268e87cd777a21a4aca6176b1acd3c4573cb5b8a04e655698f2a2beb41a6dd4120f7117c00a0e5775"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x9c, 0x3, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xb, 0x81, 0x2, 0xffffffff, 0x3}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}]}, {0x45, 0x6, "7c3b5bfcb83686732928afc192a22d90d27a9989759a481dd012b504df8599e1385efa6ed3eed4aa4eadeabe7be45721cade4f630ee42bca96886403cdc70c3430"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0xe7c, 0x9, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x401, 0x3, 0x7, 0x101}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe4, 0x7, 0x20000000, 0x0, 0x2}, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010101, 0xff000000}}]}, {0xe01, 0x6, "4e957b2e40365432dec10c9fab1e63487548082ddce56498c7fa08b74b6c47bdb4dfa946e9affb49a7c3646e18b2078c5d54277a1ba1e01ae29255e2a64f4fbbbda4a815c144963b2c0378c5c55b31bfc9c37c8075efe363dcf25fce5cb44fe1ae484a3d28a7ae911d6c97988be9c1588c1e94eccd9d6e81682b392c3a6407d3eeffcd688e443515b0d3f9426339ef89e6fe5bfb510702cde932acdc082611c61bbc40bc1959f3d634a3ebabf018f0f9b3e28b7ab07331746ae5ce8ca923d9928eaa13af3ed77b54fecda714e332f7dae240baf6dcbb6de658ef4bcbdefcb9b9a5904e9ef2af39aa6683964e092db84aabef115d897553babb4af9e56ca195f738e7de6f510e3ee095caf748411449afc6eb293d2972278d365c2344e37f9b6951d3874cbccc04b2b713300cd5cbaa0c33d3325d601607d2bd64dafb0ae1e5acf27681d081ae50c8bc98a1d99b658a90ccdf2e61df6b77fce6998ff1e8a99af7596c488036a9f39e414d831021398e972e23c1135c437c088148c38eb52969ef0319b3282f4ad8ca7d2161bfa0638db69580a2faf861bfce9f256e4260334ba48dc584f4dc8965fd3cbc20808757d3fb8496a198dee33743394387177686a154fc80a997aee0329f6098790818ba6b4b4141002ec8df3cb8fa9fecad93baf5aa5744cf3b0136ebae42cdaadb6b396c77fb788cec7dd3f7c58144a338ce29e4474fc1781b54cabad3baf16ea6c8f7486faee7c95dca03a4230bd2368724d12c28f30b1b11e6b88f612061ebbaa7033289f93baac8b05423163146124f6eaaca666272fa0cc58a82ae5ebe960138b0f93b95aa5065a24caa4bb033d82ec4420ad925480e6e98349e55bdf2383b0f4bf10f40619a24669b42ba994a05ce7d69f64376d869abc3588c24cce5b7db40bdb5c7432b93cec90f65bb5dd303080fef1f4a5b3e95643e8f9cebd217eb339e91f214680946f9e3c0ec42ef9b8b7d35d6388244cfd4c93f8d7454afd0db120038de2d72916c77351c629bcb99c5b36d1f8e594b0eaa8f72fef4ed8cf4e24fe68343dba8b23f20420404d4e1eea9b3027c0087333c35a64670a92b686df09351bf22982ada3b298e853f25b9897e17c9a18ad619c19607344658a2f0b3e719ba1cab0f69ae02f8cd539ee8506b2cc9b660bcd81a48da9c77eafe899ac7941b7d26f5765673d0848118443ef958a403a2cda831227419a273e02d4016a87b1a420ef2d1c44f8538e1bfc1d5b1e0361bbaaab543e3c7ae56f16b4efaceca57db9a27762a17a835cac1cb2a4a88a6e0c2bd266aa83dc5fb157d19d72153feac9f6e9980ec2a8aa075d0b58b82846109d3dc38894c81b18a7ca3d65e2e8f72abacb6c46e67a505e3310dbc95f59d725f913b6a27e24726b99cc10ee7dfbd2d586617fbd624d9ee08a2f031cd9413fa3643823128d1a12da61ca9a8014091026f310ad677851ed4d413897db4e26fef846719f2131f19d472e909c1259fbe329196d234edcb181af05fe671ff5241dd607ad3afc6035338e9032fb902e1b5fb47980323d7b850a735576f6faf80ce3d006345626e4437cf8e254f3cecff2f67fe6cfbeb3d5618ebd1e4a5180339134c2fa0eb6f37e5dce0616bf07121e2369d9bde1fec34af7f8d8f5faa14817f40e01ac585648ed99d12b5fa54447989081fa81872b66100528d2a9d62276488542c2d70e17873a53438f938a96f0b4875bd9d181fce48c9ae1cd5f117e691f87994412916ad07e43f0eb1a7899ae062db554da04ff1316b0ddbf483ab27c944b3c0356756374632626f5247318d1d9fabfe2dd5d4744690dbe7278adc96eaf0dc1c7fa5074358bb54f39e13a1fed263b34b02849ff82086b0854ba8066c5df13883e6feb6618e38d9c2a9635ddb5e8b47242c46fe178b6fb593592c07338ee3d05fae491403aa0bf4864d7bc8199b17edbfd0512367fa991f73f81dab8e62a588ae7fc80e85c15718aff3052afdbaf4ecfa65e9bc977ea093ded92fbf8f59714d6367523edcc44ef8592a0749a99e1b47d5fc97eb7bdbe54c6e963613998273e1ac234be61ae784746c2f9e7d90687a30d046707fd34a38f5b970daf86b44bd29acd957c3d5112b905c72c65c65e05fc2d06fdb518cd71e8d74d87272b3e46808bc170ac6b9996f3009f1729c83481c435f60a401d62370bc02e423fdbc10a101b5d20a0d5ec0c8416664ca603bc4796387c8356976aafdc13724accf37f46fd612dd3defc7db68ac6a220db6ed4b1a1e90eafef98c856826e1649a942a6f71857e67af7826e82c9c5cb002d408731fe54091b91f8c89c9e0c89ad7f97cfc0a077126ea433687136d915c02dfd12e20d7194451fdfb50d971080ed9772950fcd14c753899839ad2d97de208e8c1710f6c95fb6a75169415f52db19a76f8296c58473941fa5abf13b4db93e673ff98b2dae0191f36247100704550d5b681c97bc65f7132dfb6b926195625604b194d7b5bc48af843f88490b920bb1cdbdee52140dd95f540df667430426f2db6ec3ded88b1d58ac128b9ebfc5aa65399010b9d4870d0411c747c58a8b53b8d920905865f9ecdf2d955276ee417577cb1f2343d0ea5b1dfe2715bea0c73dfad46b099d0c524b22c2e2132e843a1edce348032ffdb53f840353fbee7d779299627b2ca1b70b3533c24bfb7c314c3e78d99bff94f3b64e599fd7848ddbc7fdc3bd5cbe0af5509f6c5e364bd3899b839636e3cc266a4be18fab28b332a9b1a6b6cb4d5b49820fe93735024f2506532a9e93c77a5416f1bde106e1f22889b43a97ab41110172b28985ca9f5f3de86adf93f74d5a5216059a827a5f77b89b0634b7bd37075b5762c492dc95d574d05f285e4f0a58a9bdec216c9d407477ceae32805c579f92cf63c7481701cc5b3e3c77983c6395f1e9aacfcbba5a9ac2d582cf924e3027c3c6e8fe04f1567ac7111189033f8d6c62e3238f591c7eb80b8cb57deb4e29252f70e7e80026cba8fe85fe5e551612b19a18cdd2f79e5c89063f235138a517c9d765e3bf8f91759af7aeabb9c27533853cbd043be609ae587f929798e47c85e385dd7049a4f0fa8750a15e02bac72ca3bb7c23247e68dbecc6aa2bbc6f051ba57e0f78fbc128737f4590c00b5009724473a1688ad0c9a38518eac15357ef2b0968a8200d4fe9cf7e80251351aa2f6b01c18885113dc9330096170e3afd810a2f67c3ba4aba622f6d1ed92be3cc2a4246c4702ec64e2b0632f30cbe7fb6ea661b4f730da2d8ce0691d3caa9b7e9ffdefe652742f7e6fdb302f7a8e76adec825feb3affb3cb32e017a91d73a801afa6ad7e439cdfc2c005cf8dc6c83779dc4d465122f3bd3039894c7c3ad98773b992c7b392d4a373c1e2d22fc02bce129c3e9e18a1536167f0a19eb48cbe9888ad8c5d1ae6e72e7d146e93b1583025492f3059beb36a9e3597b6c2546c1181f6403afd9c470288e37dc06a92827df48d725c0b9a00db755e7607c0a7100b9089fa7084b93334f0cff251451fcbd23597dcb26140b7ee6ac4d1cb52fc655293a2ce3decffd1ef6799d276e4d5a5822d70f06dd76072217f17f6415069a21aaa461d15d2099b3a539f5d3255206d08fd2bf19759bc8d459660b407a2b3956374d137e54ba323120eea9cac02f1b880531532b10e06117b0d8b2864cf0fb52788b522c227804b94a8da702a5ba05980be24d41f1b63f46fe50c8b1d5d1c93b84d1c6a81d7e130e40a860540d0c9661d018c39338bf4a9cf4924e4dda7851288a551d9d69ebdb34d4f1d0d994ecc0cb9b7bd6cb0089a8875c77e927b1b04c371c0594205f788f1eb5f30fc82377b1fc3ef35d8d28cf4aac5838b4f375053f1686246ee9d75ad27dd0aef443e972399451f1bdb770dfa176e2ce9e64b01c009876f5cea15062d10faaccb5fb6534b26dfe1db6b2d7649d7d589b7a87aeceeeb85add9e3bba88e23a46965a5b40dba0b5ee09a97d86db3012af765269526ae2c6dbdfec216df94d315f2a2faed583160ab99f2c4e77cd62523e70d8794940542ee9af60ce3cd268f638eea1e586d318099d661c6c5b9a4bbf0404efc66fb493318bd81c9f88c6265e1d4c8bdef4d8de77bb3bcc2cc35cf110b1196676e5e0d73029ca08a2919de69d94eb800140c2114883592d438c1d9bc661982fd24436b3fb4ba6763192e4b36673888846209e1ccfaea9ca68857197bae1c98b949fe7154a637a9c7a0851fc84d38446d2166117fbf7aff858cb617008945fb90e2f224e231cecda73991f3e146ec41587afd59f12fd09e8d44d4b997af304381210ac05ca8d5211569c9bd4b60b90777120c6e6cdf131f36ee56a96a9903df6d655b1ec69ce8da0b1b91a0e7f1fae9b76cb4f28161059ab1235696823dd9c46d4deabe84f44e6830b0e74dc58dbdb9836c693a876f5e8b63e4433f480f7b852b6fc2104b2adff47699ce54df0f8f9d81528668513043af1922b519a8fb4189cf60a3e3f15c4deba20e6f59e220f6ae426960168ec718cf52982f2b597665761cd024c2499c3e5854fcb90c6d654189ad59c59cebfdd88f877f7c23bb1c74c3a6e17e9d9a1a16551d7e6988fe863521d98a12658f563271dc53952fee11721d2114a77999241154d5234a69654fa75294dfaefedd99ef3a7db0d31969a9c47fbd737ec1cab18912a484ccc5a4f6df2dc6b99c2a834cddaef4a25d7382ceeb083fc866fed6cf2602bdab9b7d877488471d0589f563e6b8c4511816a90f14dbe135b82dbe79f0bef0afb75167912e08387ac199119d66d0b995a6fabf234f4465336f5b54bf354941460c7367e4b17520393929cd6e2bc477cce44cd07fd674b633a701b2d60e2f06c5f8b7882e9a9d3c762892048e8a4f11d21ee4957dca2d7d42d76fa20428bd25b21fbfbf8fe76183cf8a01a45b20fd051d0da075fdaeb43defa8a2f8b5a97ea28813e2e2048fe432b3f36e66184dd7d921534d7b93101d9c90379886672bf7bc9af631ff083dca73312e36bb02cfb6e58c97fd06cf7ed2a577d74aedb398015254abfc0981a13148e1c6"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x170, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x94, 0x1, [@m_mirred={0x60, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0x11, 0x6, "d527360c37d81b077c369a3b45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0xc8, 0x1, [@m_ctinfo={0xc4, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0x8d, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f28"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1364}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.066656228s ago: executing program 4 (id=12050): open(&(0x7f00000002c0)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x7, 0x3}}, 0x30) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}, {0x0}], 0x2, 0x3f, 0xf) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000000)={0x40, 0x11, 0x4, "2378589f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) userfaultfd(0x801) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000840)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "0608dd", 0x48, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], {0x4e23, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "199bcd0a605c1368c138cf19c0fdb72adb03bd242808f973", "cb4d2e17a35cc122c0a672f20f3abc15e17a96113bf031037c9299a15dfc3643"}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close(0x4) 2.801849826s ago: executing program 3 (id=12051): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000000)=0x9) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb98, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0xa6b1, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0xfffffffd, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x8, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x5a, 0xc584, 0xffff, 0xcd4, 0x7, 0x22, 0x401, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x6, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x7ff, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x5, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xe) ioctl$VT_SETMODE(r8, 0x5602, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="05160000102f00002c0012800b00010067726574617000001c00028006000e000100000008000700e0000001060010000100000008000a00", @ANYRES32=r4, @ANYBLOB="58fe45c953c24e7a44249d2da7f0a8a90c5f5279e2ba588230aba384ae12abb007ab4d842052b39932f6ca6c02a1b99e3e32c9ead23e4de3ad8bd5c5c7677c8af7d0263400a6ce2ab6d62470dca6145fab0b1ccde9bc3340881b284dc20c9429"], 0x54}}, 0x4000) 2.789688806s ago: executing program 2 (id=12052): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x6, 0xfe, 0x0, 0x7fff0006}, {0x4, 0x9, 0xe, 0x3}, {0xffff, 0x6, 0xa0}]}) clock_getres(0x4, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendto$packet(r1, 0x0, 0x0, 0x20000080, &(0x7f0000000300)={0x11, 0x1, r3, 0x1, 0x9}, 0x68) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000000040)) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xc7, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000005f304433b3c4d403b4c4ddca0e3cf4c122da00a646d2f5d832c05d66d0c0e7f6a1e88d3116c882674e74c604eab452ac64e43e8effe88a272982ecf2ef60b197aa20a77eb246d253986c65bb78cb8bd43cee3440b80f4fc8720bf57f597c50f8b2373f9a67f3e6511c9bcadd35d5cb65433d9e4a97b8a71c5fb1f84d973937eb4ce52122c6d0441ffca0a1bb962430859b3ebbb7782a4e014285611f3adb985f54b120b42a6b64a654918151ae42fa286de83507118c213a27209c9905c676164775c1aa94f5d41ad4a1660f0f3b24109bd9f70bb1ec61eb2516a8fbbf1dda"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000000140)="2700000014000707030e0000120f0a00110001926c7be920c72e0c7000f5fe0012ff000000078a", 0x27) 1.654245206s ago: executing program 0 (id=12053): unshare(0x20000400) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xf, 0x0, &(0x7f00000000c0)) 1.55740078s ago: executing program 0 (id=12054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, 0x0) 1.556348932s ago: executing program 2 (id=12055): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x60300, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xce23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) pselect6(0x40, &(0x7f0000000080)={0xc, 0x4, 0x401, 0x5, 0x6, 0x81, 0x3, 0x400}, 0x0, 0x0, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f0000000080)=ANY=[], 0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x400}, &(0x7f0000000180)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1.179302634s ago: executing program 0 (id=12056): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@mcast1, 0x1f, r2}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x48300, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x4, 0x8, r5, r6, 0xa000, '\x00', 0x1, 0x4, 0x9, 0x6, {0x6, 0x6}, {0x4}, {0x100000000, 0x9}, {0x8, 0xa04}, 0x4, 0x800007, 0x4, 0x3}}}}) sendmsg$nl_generic(r3, &(0x7f0000001740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001700)={&(0x7f0000000100)={0x15f8, 0x42, 0x4, 0x70bd27, 0x25dfdbff, {0x7}, [@nested={0x107, 0x78, 0x0, 0x1, [@generic="92278b429b427ccc2c1ebcc747c6844509dececb6d0c146dad070e2e438d8b9567d3f945768626ff8e04cea2e0b4ef1acb84cd741cf1868140ab68dbee788682e54b53a8a89900e51e67c0ee0374b611c01d29e73cc521dc9d1106983055d59e580aaaa422263c0a320d7d50ec4baf81af586f9d06886df191d927173ae00b31b306e415af88a04a92836465e86132add1fbd3b7b246d401f3132d9fdb9c2556adb113670b3909a035f27ab60fe71895f0915e407674a0f023af9761cd01e48c68b003895528f11cd90d77c9751780484f906249a83bfa903e54d9adeb5bf9b6d4510ededb2d04d0ae6bc24bf884edbd789434", @typed={0xc, 0xcb, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0xe8}]}, @generic="460f937bc8773323509c30fdd703ded7d4f9773c5743bd231389444450ed68a187a1d14153f6ea69860b6efc6401fa36d8684468477cd7d7aeeaca4168991454aec68b689859205be218554f2ab73901d9540f2112243848c511f4ad3f9308ff65505628a642b167e050fed18c1ba8", @nested={0x139c, 0x128, 0x0, 0x1, [@generic="cbc0e8da3054bc3cc069d31b6f42ed1627c1391cab11d476ab62df20cc526a6a9da72d1e545b6de89ade49373ad971e29d58f21bd23726f9348bb481898a2fcbb38b3177bca8f091b873d57bf4fff239ad1a726d14be93cfeaa8c5e05c484f274e374e744525ce13110ea44a75ce07123bd83b7220c1e57c5e25a87502bb695a8fc91a72116917837ce5086606d613199ebd96f9a908b1809b9a56876a6b80e30ceb89063ec63f96e19393cea18fda40ca17f2a44011215e4b61ff4631274b5c8114a2c9", @typed={0x8, 0xbb, 0x0, 0x0, @u32=0x80000000}, @typed={0x8, 0xf9, 0x0, 0x0, @uid=r5}, @generic="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", @typed={0x8, 0x2e, 0x0, 0x0, @fd=r1}, @generic="9e30d9becfbef319a9a481a8e32489791f85edcf5e8f82822a1b760d250d050f855979a098bdc94893aad1", @generic="90ac671d2b861de7a1c7444f4f22a35e5fe77be0671931d1a16e72648d75ef0fcae55bbc6729382a9ee26c59732be980ae37f5a4ecd9ded25ac86d62060ce210f3e40d6b8298dc4ab0a6d7410cd1bc16e1e208fa735c1b113bcb92a6d8a8fecaff356400f3b9d329e0884f0bed45471e4556a099f54547564001e2e1cb2c2cef2292b5bfbc4a09145141feb759e457fb48ea5b311d1ed54fe4ba6e6938a2b1b3c866934029322affa27a7962f855eb58bcbfa4364b1764849df05baf2eda1dbe55adbabe7485330e0f7eb1134219e619165f96caa6a81db168190c1ad752b4dc95d28fb8b9ba2ddaaee09d59c017bb4f52", @nested={0x4, 0xae}, @generic="55c8b54764db35a6860ffb0a910cdeda095e8d06b86f19ea8919654d4680b3504270509a0bf8301d313c6de0f5898cb70fade5651209ba10cad67b3c4b54d2c24a61e09fc7a57e8528074b76148e2f661bc7b2f19f7eaea943418638d328935a26184009f63b8d09de7c13e6b9b5ab71ae327ae09ab2542b297aa0afa5cd9b740ea0dd7ee5b401ce4fda4cdbb84e62321f38aae9d1a1a0c98dc1d417157ab9ad9b73d21354cc63ce1a6c094cb3d8fe1a456ce95d15d0c901351ed4b54b55598b9877e0ce5b1a24dba7cfcd8a35a551330f40486fdeaecb323cf11c466ad5754d0dc960ddcf4e6e95537692d183", @generic="0bb47cff1d076e895d323bdb4aff1e77054cbec95e2364c1bc0b0683f437a48c261629322fd3a14b14d5ba87353c26bbcae236c68f006fcaa3ec16cde6977c269a249befcae4b700dc25551685773170db982604ebffd918a04d58a658c262f8d0507065f841451742f14fde20e5fa1e57ab741a0ecb04cc90e508ca87234b37b98600bcea5d54bedb80ea864b472a9b817918d59c02db8d55c85d0c0918f984f5bcd7d223d28ddfa1a9a2b93dbe5b"]}, @nested={0xcf, 0x7d, 0x0, 0x1, [@generic="7d56db0dc7297ee056379cf38c81fce445a24d5e09899d2b15a723c0389ba0a9ddcd816750606c31e8d0af6b00d17e2232d3fd2e9af8d5478d331afec3bacd4855b4bc0fec6d43e43730013bbc017062d41b104046399888ffadb53e425509cfc10b62ffa93bc84659fb61322311c14b7cc4e4f1a459d55a24536b9b78560cd5e042cd9136a98d7b0c0623e7bde9310230f62ba8849ee4da8a05f36f458eecbf2eb44f7e2d087c11a2a1abab58b0b8c08597d4412de7cc273efce1eaffc0047de5b12c", @typed={0x8, 0xb9, 0x0, 0x0, @u32=0x7}]}]}, 0x15f8}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x28, 0x0, 0x0) 1.012923855s ago: executing program 5 (id=12057): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ptrace$getsig(0x4202, 0x0, 0x40, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6094, &(0x7f0000000740)={0x0, 0x5884, 0x10100, 0x1, 0x330, 0x0, r1}, &(0x7f0000000600)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x8, 0x0, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, 0x0, 0xa0) readv(r5, &(0x7f0000000700), 0x0) 943.335669ms ago: executing program 0 (id=12058): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r3 = io_uring_setup(0x28d5, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x214}) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x94, 0x5, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffbd264aa1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xbf}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x700, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2e8, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}]}, @NFTA_FLOWTABLE_HOOK={0x210, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'wg0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3e4}, 0x1, 0x0, 0x0, 0xd19ed028dd762825}, 0x8800) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r4, r4) setpgid(0x0, r4) wait4(r4, 0x0, 0x2, 0x0) ioprio_set$pid(0x1, r4, 0x4004) close(r3) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffdffe, 0x101, 0xfffffffffffffffd, 0x1fc, 0x108, 0x2c, 0x53000}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r6, 0x3) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x68152000) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000080)=0x30) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) 633.964299ms ago: executing program 3 (id=12059): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2000) close_range(r0, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$rds(0x15, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100, 0x400, &(0x7f0000000300)) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socket$packet(0x11, 0x2, 0x300) 540.027228ms ago: executing program 2 (id=12060): r0 = syz_io_uring_setup(0x6207, &(0x7f00000000c0)={0x0, 0x6d8c, 0x2000, 0x3, 0x13d}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x8a, 0x76, 0x88, 0x40, 0x1776, 0x501c, 0xf10d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x10, 0x4, [{{0x9, 0x4, 0xee, 0x1, 0x0, 0x5e, 0x10, 0x4e, 0x5}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000100)=0xfffffffa) r5 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0xa002) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f00000003c0)={0x1, 0x0, 0x0}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r7, 0x0, 0x0, 0x0, 0x40020100}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_io_uring_setup(0x183, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x1, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x8, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) io_uring_enter(r10, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r10, 0x18, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x10, {0x3, 0x207}, 0xcc}, 0x1) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r13 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r13, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f0000000480)={0xb6, 0x0, 0x200000}) ioctl$KVM_SET_LAPIC(r13, 0x4400ae8f, &(0x7f0000000880)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece4b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53605f70000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc7f00000000000000814618e976832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1b1f2ffffa1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce39dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f7d5959120dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9435ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4c0300000019ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca70c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823f215af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b89a537016eb211a1734c7af076e15453e3351917988f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f63435fa70f85398350f78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada133b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631def9f126c25ba4f37caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d3c23e80613e28387e955722905f624b8ee0c379632ff47c5b6f280472935af74e97a5a8110a4d74496fce8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fe6c9c46bffbe9dd03970800000000000000d372bdd60200c1ecf63c230406114d0fba2bd1c69ec1381b1cec6ddaa76e186719d81916430000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"}) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r14, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000181600004f17446fbafa13f224bb662e3b2edfc164a259f078bc1021b4dc226d6cf7a2055dbed377acc9fb5e", @ANYRESHEX=r5, @ANYBLOB="00000000020000009500000000000000", @ANYRES32=r3], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r15, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @remote}], 0x10) sendmsg$inet_sctp(r15, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000015c0)=[@init={0x18, 0x84, 0x0, {0x9, 0x9, 0x7, 0x4}}], 0x18, 0x8000}, 0x20000000) 0s ago: executing program 5 (id=12061): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0x4}]}]}, 0x74}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000feff00000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) kernel console output (not intermixed with test programs): 791][T30062] veth17: entered promiscuous mode [ 3226.187656][T30062] veth17: entered allmulticast mode [ 3227.321250][T30099] trusted_key: encrypted_key: insufficient parameters specified [ 3227.353466][T30102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11226'. [ 3227.372514][T30102] FAULT_INJECTION: forcing a failure. [ 3227.372514][T30102] name failslab, interval 1, probability 0, space 0, times 0 [ 3227.459649][T30102] CPU: 0 UID: 0 PID: 30102 Comm: syz.4.11226 Not tainted syzkaller #0 PREEMPT(full) [ 3227.459685][T30102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3227.459695][T30102] Call Trace: [ 3227.459703][T30102] [ 3227.459711][T30102] dump_stack_lvl+0x189/0x250 [ 3227.459736][T30102] ? __pfx____ratelimit+0x10/0x10 [ 3227.459755][T30102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3227.459772][T30102] ? __pfx__printk+0x10/0x10 [ 3227.459793][T30102] ? __lock_acquire+0xab9/0xd20 [ 3227.459825][T30102] should_fail_ex+0x414/0x560 [ 3227.459854][T30102] should_failslab+0xa8/0x100 [ 3227.459882][T30102] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3227.459902][T30102] ? skb_clone+0x212/0x3a0 [ 3227.459926][T30102] skb_clone+0x212/0x3a0 [ 3227.459950][T30102] __netlink_deliver_tap+0x404/0x850 [ 3227.459981][T30102] ? netlink_deliver_tap+0x2e/0x1b0 [ 3227.460001][T30102] netlink_deliver_tap+0x19c/0x1b0 [ 3227.460021][T30102] netlink_unicast+0x7fa/0x9e0 [ 3227.460053][T30102] ? __pfx_netlink_unicast+0x10/0x10 [ 3227.460078][T30102] ? netlink_sendmsg+0x642/0xb30 [ 3227.460094][T30102] ? skb_put+0x11b/0x210 [ 3227.460117][T30102] netlink_sendmsg+0x805/0xb30 [ 3227.460145][T30102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3227.460167][T30102] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3227.460187][T30102] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3227.460206][T30102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3227.460226][T30102] __sock_sendmsg+0x21c/0x270 [ 3227.460252][T30102] ____sys_sendmsg+0x52d/0x830 [ 3227.460280][T30102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3227.460310][T30102] ? import_iovec+0x74/0xa0 [ 3227.460335][T30102] ___sys_sendmsg+0x21f/0x2a0 [ 3227.460358][T30102] ? __pfx____sys_sendmsg+0x10/0x10 [ 3227.460416][T30102] ? __fget_files+0x2a/0x420 [ 3227.460431][T30102] ? __fget_files+0x3a0/0x420 [ 3227.460456][T30102] __sys_sendmmsg+0x227/0x430 [ 3227.460482][T30102] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3227.460500][T30102] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 3227.460546][T30102] ? ksys_write+0x22a/0x250 [ 3227.460569][T30102] ? __pfx_ksys_write+0x10/0x10 [ 3227.460587][T30102] ? rcu_is_watching+0x15/0xb0 [ 3227.460612][T30102] __x64_sys_sendmmsg+0xa0/0xc0 [ 3227.460634][T30102] do_syscall_64+0xfa/0x3b0 [ 3227.460651][T30102] ? lockdep_hardirqs_on+0x9c/0x150 [ 3227.460668][T30102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3227.460692][T30102] ? clear_bhb_loop+0x60/0xb0 [ 3227.460713][T30102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3227.460729][T30102] RIP: 0033:0x7f8f8af8eec9 [ 3227.460746][T30102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3227.460760][T30102] RSP: 002b:00007f8f8bee2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3227.460779][T30102] RAX: ffffffffffffffda RBX: 00007f8f8b1e5fa0 RCX: 00007f8f8af8eec9 [ 3227.460791][T30102] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 3227.460803][T30102] RBP: 00007f8f8bee2090 R08: 0000000000000000 R09: 0000000000000000 [ 3227.460812][T30102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3227.460822][T30102] R13: 00007f8f8b1e6038 R14: 00007f8f8b1e5fa0 R15: 00007f8f8b30fa28 [ 3227.460848][T30102] [ 3227.460900][T30102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11226'. [ 3227.830445][T30100] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11223'. [ 3227.830585][T30102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11226'. [ 3227.934933][T30113] netlink: 'syz.3.11228': attribute type 3 has an invalid length. [ 3228.495905][T30123] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.11232'. [ 3228.507792][T30123] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF' already exists in 'ieee80211' [ 3228.868906][T30146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11237'. [ 3228.928645][T30147] netlink: 'syz.0.11236': attribute type 4 has an invalid length. [ 3229.564746][T30164] netlink: 300 bytes leftover after parsing attributes in process `syz.0.11242'. [ 3229.779126][T23130] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 3229.931148][T23130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3229.942943][T23130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3229.953675][T23130] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3229.966980][T23130] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3229.976577][T23130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3229.998487][T23130] usb 4-1: config 0 descriptor?? [ 3230.236739][T23130] plantronics 0003:047F:FFFF.0083: reserved main item tag 0xd [ 3230.283872][T23130] plantronics 0003:047F:FFFF.0083: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 3230.352490][T23130] usb 4-1: USB disconnect, device number 2 [ 3230.382874][T30205] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11251'. [ 3230.511265][T30201] fido_id[30201]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 3230.919186][T25382] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3231.079309][T25382] usb 5-1: Using ep0 maxpacket: 8 [ 3231.088748][T25382] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3231.131645][T25382] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 3231.229208][T25382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3231.248533][T25382] usb 5-1: config 0 descriptor?? [ 3231.266301][T25382] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 3232.119328][T16063] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 3232.133703][T30217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3232.142585][T30217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3232.153054][T25382] gspca_vc032x: reg_w err -71 [ 3232.158946][T25382] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 3232.203931][T25382] usb 5-1: USB disconnect, device number 47 [ 3232.236258][T30266] loop6: detected capacity change from 0 to 2560 [ 3232.245723][T30265] buffer_io_error: 25 callbacks suppressed [ 3232.245738][T30265] Buffer I/O error on dev loop6, logical block 0, async page read [ 3232.279578][T16063] usb 4-1: Using ep0 maxpacket: 16 [ 3232.303202][T16063] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3232.309661][T30265] Buffer I/O error on dev loop6, logical block 0, async page read [ 3232.334541][T16063] usb 4-1: config 255 has an invalid interface number: 190 but max is 1 [ 3232.339179][T30265] Buffer I/O error on dev loop6, logical block 0, async page read [ 3232.369229][T16063] usb 4-1: config 255 has an invalid interface number: 137 but max is 1 [ 3232.386370][T30265] Buffer I/O error on dev loop6, logical block 0, async page read [ 3232.390599][T16063] usb 4-1: config 255 has no interface number 0 [ 3232.420145][T30265] Buffer I/O error on dev loop6, logical block 0, async page read [ 3232.429912][T30265] Buffer I/O error on dev loop6, logical block 0, async page read [ 3232.457657][T30265] Buffer I/O error on dev loop6, logical block 0, async page read [ 3232.467941][T16063] usb 4-1: config 255 has no interface number 1 [ 3232.488435][T16063] usb 4-1: config 255 interface 190 has no altsetting 0 [ 3232.499686][T30279] syzkaller0: entered promiscuous mode [ 3232.505178][T30279] syzkaller0: entered allmulticast mode [ 3232.524720][T30265] Buffer I/O error on dev loop6, logical block 0, async page read [ 3232.535342][T16063] usb 4-1: config 255 interface 137 has no altsetting 0 [ 3232.545302][T30265] ldm_validate_partition_table(): Disk read failed. [ 3232.558109][T16063] usb 4-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=e9.04 [ 3232.568581][T16063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3232.577688][T30279] tipc: Started in network mode [ 3232.583583][T30265] Buffer I/O error on dev loop6, logical block 0, async page read [ 3232.591537][T16063] usb 4-1: Product: syz [ 3232.595836][T30279] tipc: Node identity f6ed281615e7, cluster identity 4711 [ 3232.595991][T30265] Buffer I/O error on dev loop6, logical block 0, async page read [ 3232.603912][T16063] usb 4-1: Manufacturer: syz [ 3232.616438][T30279] tipc: Enabled bearer , priority 0 [ 3232.618958][T30265] Dev loop6: unable to read RDB block 0 [ 3232.623602][T16063] usb 4-1: SerialNumber: syz [ 3232.637362][T30283] netlink: 'syz.0.11262': attribute type 4 has an invalid length. [ 3232.641989][T30265] loop6: unable to read partition table [ 3232.648335][T30279] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 3232.699859][T30279] tipc: Resetting bearer [ 3232.761442][T30277] tipc: Resetting bearer [ 3232.780578][ T5236] ldm_validate_partition_table(): Disk read failed. [ 3232.800629][ T5236] Dev loop6: unable to read RDB block 0 [ 3232.813149][ T5236] loop6: unable to read partition table [ 3232.833054][T30287] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11263'. [ 3232.864090][T30277] tipc: Disabling bearer [ 3233.023337][T30250] can: request_module (can-proto-5) failed. [ 3233.055996][T30300] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.11265'. [ 3233.143139][T16063] usb 4-1: USB disconnect, device number 3 [ 3233.262238][ T30] audit: type=1804 audit(1758809291.031:1971): pid=30318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.11266" name="/newroot/419/file1" dev="fuse" ino=1 res=1 errno=0 [ 3233.490607][T30336] input: syz1 as /devices/virtual/input/input315 [ 3233.909710][T16063] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 3234.116586][T30356] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 3234.129372][T23130] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 3234.147562][T16063] usb 5-1: device descriptor read/64, error -71 [ 3234.369173][T23130] usb 4-1: Using ep0 maxpacket: 32 [ 3234.430606][T16063] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 3234.459696][T23130] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3234.477293][T23130] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 3234.496863][T23130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3234.517330][T23130] usb 4-1: Product: syz [ 3234.525939][T23130] usb 4-1: Manufacturer: syz [ 3234.535642][T23130] usb 4-1: SerialNumber: syz [ 3234.573835][T23130] usb 4-1: config 0 descriptor?? [ 3234.589408][T16063] usb 5-1: device descriptor read/64, error -71 [ 3234.603152][T23130] usb 4-1: bad CDC descriptors [ 3234.623141][T23130] usb 4-1: unsupported MDLM descriptors [ 3234.798218][T16063] usb usb5-port1: attempt power cycle [ 3234.888392][T25382] usb 4-1: USB disconnect, device number 4 [ 3235.190043][T16063] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 3235.211552][T16063] usb 5-1: device descriptor read/8, error -71 [ 3235.469317][T16063] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 3235.550890][T16063] usb 5-1: device descriptor read/8, error -71 [ 3235.643279][T30379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11278'. [ 3235.670369][T16063] usb usb5-port1: unable to enumerate USB device [ 3236.359974][T30404] loop6: detected capacity change from 0 to 524288000 [ 3237.428556][T26698] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 3237.784081][T26698] usb 6-1: Using ep0 maxpacket: 32 [ 3237.823191][T26698] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 3237.860150][T26698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3237.888890][T26698] usb 6-1: Product: syz [ 3237.911057][T26698] usb 6-1: Manufacturer: syz [ 3237.927786][T26698] usb 6-1: SerialNumber: syz [ 3237.953516][T26698] usb 6-1: config 0 descriptor?? [ 3237.988399][T26698] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 3238.769479][T26698] gspca_stk1135: reg_w 0x0 err -110 [ 3238.775948][T26698] gspca_stk1135: serial bus timeout: status=0x00 [ 3238.784722][T26698] gspca_stk1135: Sensor write failed [ 3238.809280][T26698] gspca_stk1135: serial bus timeout: status=0x00 [ 3238.821791][T26698] gspca_stk1135: Sensor write failed [ 3238.836885][T26698] gspca_stk1135: serial bus timeout: status=0x00 [ 3238.849196][T26698] gspca_stk1135: Sensor read failed [ 3238.867902][T26698] gspca_stk1135: serial bus timeout: status=0x00 [ 3238.884763][T26698] gspca_stk1135: Sensor read failed [ 3238.925784][T26698] gspca_stk1135: Detected sensor type unknown (0x0) [ 3238.951973][T26698] gspca_stk1135: serial bus timeout: status=0x00 [ 3238.977965][T26698] gspca_stk1135: Sensor read failed [ 3238.999117][T26698] gspca_stk1135: serial bus timeout: status=0x00 [ 3239.023670][T26698] gspca_stk1135: Sensor read failed [ 3239.045366][T26698] gspca_stk1135: serial bus timeout: status=0x00 [ 3239.069136][T26698] gspca_stk1135: Sensor write failed [ 3239.093687][T26698] gspca_stk1135: serial bus timeout: status=0x00 [ 3239.122567][T26698] gspca_stk1135: Sensor write failed [ 3239.141504][T26698] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 3239.774442][T10431] usb 6-1: USB disconnect, device number 127 [ 3240.112670][T30517] netlink: 'syz.3.11301': attribute type 4 has an invalid length. [ 3240.945729][T30546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11308'. [ 3241.529290][T10431] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 3241.682380][T10431] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3241.698700][T10431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3241.717386][T10431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3241.855984][T10431] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3241.951329][T10431] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3242.026129][T10431] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3242.051771][T10431] usb 5-1: Manufacturer: syz [ 3242.109316][T10431] usb 5-1: config 0 descriptor?? [ 3242.383296][T30574] Invalid logical block size (65519) [ 3242.562848][T30544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3242.573073][T30544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3242.618608][T10431] usbhid 5-1:0.0: can't add hid device: -71 [ 3242.636254][T10431] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3242.645957][T30578] netlink: 'syz.2.11313': attribute type 4 has an invalid length. [ 3242.836386][T10431] usb 5-1: USB disconnect, device number 52 [ 3242.933757][T30588] FAULT_INJECTION: forcing a failure. [ 3242.933757][T30588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3242.949543][T30588] CPU: 1 UID: 0 PID: 30588 Comm: syz.2.11315 Not tainted syzkaller #0 PREEMPT(full) [ 3242.949570][T30588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3242.949582][T30588] Call Trace: [ 3242.949591][T30588] [ 3242.949600][T30588] dump_stack_lvl+0x189/0x250 [ 3242.949626][T30588] ? __pfx____ratelimit+0x10/0x10 [ 3242.949645][T30588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3242.949665][T30588] ? __pfx__printk+0x10/0x10 [ 3242.949718][T30588] should_fail_ex+0x414/0x560 [ 3242.949748][T30588] _copy_to_user+0x31/0xb0 [ 3242.949771][T30588] simple_read_from_buffer+0xe1/0x170 [ 3242.949799][T30588] proc_fail_nth_read+0x1b3/0x220 [ 3242.949823][T30588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3242.949846][T30588] ? rw_verify_area+0x2a6/0x4d0 [ 3242.949866][T30588] ? __lock_acquire+0xab9/0xd20 [ 3242.949889][T30588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3242.949910][T30588] vfs_read+0x1fd/0xa30 [ 3242.949930][T30588] ? fdget_pos+0x247/0x320 [ 3242.949951][T30588] ? __pfx___mutex_lock+0x10/0x10 [ 3242.949970][T30588] ? __pfx_vfs_read+0x10/0x10 [ 3242.949993][T30588] ? __fget_files+0x2a/0x420 [ 3242.950015][T30588] ? __fget_files+0x3a0/0x420 [ 3242.950029][T30588] ? __fget_files+0x2a/0x420 [ 3242.950055][T30588] ksys_read+0x145/0x250 [ 3242.950079][T30588] ? __pfx_ksys_read+0x10/0x10 [ 3242.950097][T30588] ? rcu_is_watching+0x15/0xb0 [ 3242.950121][T30588] ? do_syscall_64+0xbe/0x3b0 [ 3242.950144][T30588] do_syscall_64+0xfa/0x3b0 [ 3242.950162][T30588] ? lockdep_hardirqs_on+0x9c/0x150 [ 3242.950180][T30588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3242.950197][T30588] ? clear_bhb_loop+0x60/0xb0 [ 3242.950219][T30588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3242.950236][T30588] RIP: 0033:0x7f52aa78d8dc [ 3242.950253][T30588] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3242.950269][T30588] RSP: 002b:00007f52ab6ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3242.950287][T30588] RAX: ffffffffffffffda RBX: 00007f52aa9e5fa0 RCX: 00007f52aa78d8dc [ 3242.950300][T30588] RDX: 000000000000000f RSI: 00007f52ab6ff0a0 RDI: 0000000000000004 [ 3242.950311][T30588] RBP: 00007f52ab6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 3242.950322][T30588] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 3242.950333][T30588] R13: 00007f52aa9e6038 R14: 00007f52aa9e5fa0 R15: 00007f52aab0fa28 [ 3242.950364][T30588] [ 3243.554625][T30599] pim6reg: entered allmulticast mode [ 3243.676231][T30606] netlink: 'syz.4.11319': attribute type 4 has an invalid length. [ 3243.726155][T30606] fuse: Invalid rootmode [ 3244.168811][T23130] IPVS: starting estimator thread 0... [ 3244.359250][T30627] IPVS: using max 35 ests per chain, 84000 per kthread [ 3245.294160][T26698] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 3245.453095][T26698] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3245.478822][T26698] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3245.517352][T30671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11330'. [ 3245.588350][T26698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3245.729196][T23130] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 3245.814470][T26698] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3245.859271][T23130] usb 5-1: device descriptor read/64, error -71 [ 3245.910393][T26698] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3246.149158][T23130] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 3246.395493][T23130] usb 5-1: device descriptor read/64, error -71 [ 3246.554138][T23130] usb usb5-port1: attempt power cycle [ 3246.991156][T23130] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 3247.148969][T23130] usb 5-1: device descriptor read/8, error -71 [ 3247.496915][T23130] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 3247.531515][T23130] usb 5-1: device descriptor read/8, error -71 [ 3247.849405][T23130] usb usb5-port1: unable to enumerate USB device [ 3247.946904][T10431] IPVS: starting estimator thread 0... [ 3248.105645][T30727] IPVS: using max 51 ests per chain, 122400 per kthread [ 3249.317464][T23130] usb 4-1: USB disconnect, device number 5 [ 3249.324222][T30656] delete_channel: no stack [ 3249.627398][T30767] netlink: 201248 bytes leftover after parsing attributes in process `syz.5.11345'. [ 3249.704232][T30772] fuse: Bad value for 'user_id' [ 3249.719245][T30772] fuse: Bad value for 'user_id' [ 3250.390397][T30786] syzkaller1: entered promiscuous mode [ 3250.397445][T30786] syzkaller1: entered allmulticast mode [ 3250.897137][T23130] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 3251.153194][T30802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11350'. [ 3251.162692][T23130] usb 5-1: Using ep0 maxpacket: 8 [ 3251.343252][T23130] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3251.446721][T23130] usb 5-1: config 8 has an invalid interface number: 24 but max is 0 [ 3251.487949][T23130] usb 5-1: config 8 has no interface number 0 [ 3251.525211][T23130] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 3251.545736][T30805] syzkaller0: entered promiscuous mode [ 3251.560829][T23130] usb 5-1: config 8 interface 24 has no altsetting 0 [ 3251.578609][T30805] syzkaller0: entered allmulticast mode [ 3251.860592][T23130] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 3251.870091][T23130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3251.878091][T23130] usb 5-1: Product: syz [ 3251.889860][T23130] usb 5-1: Manufacturer: syz [ 3251.908536][T23130] usb 5-1: SerialNumber: syz [ 3253.674274][T23130] vmk80xx 5-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 3253.709827][T23130] usb 5-1: USB disconnect, device number 57 [ 3257.558849][T30859] netlink: 88 bytes leftover after parsing attributes in process `syz.4.11362'. [ 3257.594446][T30862] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11361'. [ 3257.788850][T30872] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11363'. [ 3257.839245][T10431] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 3257.979426][T10431] usb 5-1: device descriptor read/64, error -71 [ 3258.173871][T30882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3258.229262][T10431] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 3258.327821][T25382] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 3258.389545][T10431] usb 5-1: device descriptor read/64, error -71 [ 3258.480667][T25382] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 3258.491977][T25382] usb 4-1: config 5 has no interface number 0 [ 3258.500282][T10431] usb usb5-port1: attempt power cycle [ 3258.577786][T25382] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 3258.617678][T25382] usb 4-1: config 5 interface 123 has no altsetting 0 [ 3258.635755][T25382] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 3258.655543][T25382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3258.679746][T25382] usb 4-1: Product: syz [ 3258.683961][T25382] usb 4-1: Manufacturer: syz [ 3258.688590][T25382] usb 4-1: SerialNumber: syz [ 3258.839373][T10431] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 3258.880354][T10431] usb 5-1: device descriptor read/8, error -71 [ 3259.040510][T25382] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 3259.120181][T25382] usb 4-1: USB disconnect, device number 6 [ 3259.144874][T10431] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 3259.203815][T10431] usb 5-1: device descriptor read/8, error -71 [ 3259.420157][T10431] usb usb5-port1: unable to enumerate USB device [ 3259.989308][T26698] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 3260.129484][T26698] usb 4-1: device descriptor read/64, error -71 [ 3260.369129][T26698] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 3260.520648][T26698] usb 4-1: device descriptor read/64, error -71 [ 3260.659550][T26698] usb usb4-port1: attempt power cycle [ 3261.009380][T26698] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 3261.050069][T26698] usb 4-1: device descriptor read/8, error -71 [ 3261.099117][T30922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11370'. [ 3261.409195][T26698] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 3261.440147][T26698] usb 4-1: device descriptor read/8, error -71 [ 3261.552112][T26698] usb usb4-port1: unable to enumerate USB device [ 3262.008431][T30945] program syz.2.11369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3262.118786][T30951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11374'. [ 3262.165838][T30948] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 3262.222714][T30953] kvm: Disabled LAPIC found during irq injection [ 3263.454109][T30983] pim6reg: entered allmulticast mode [ 3263.464339][T30996] pim6reg: left allmulticast mode [ 3263.536998][T30999] tipc: Enabling of bearer rejected, failed to enable media [ 3264.099401][T31015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11381'. [ 3264.485783][T31028] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11385'. [ 3264.629214][T10431] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 3264.781451][T10431] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3264.790433][T10431] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3264.804911][T10431] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3264.814320][T10431] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3264.904852][T10431] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3264.947151][T10431] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3264.956589][T10431] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3264.968886][T10431] usb 4-1: Product: syz [ 3264.978525][T10431] usb 4-1: Manufacturer: syz [ 3265.000637][T10431] cdc_wdm 4-1:1.0: skipping garbage [ 3265.006394][T10431] cdc_wdm 4-1:1.0: skipping garbage [ 3265.020979][T10431] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 3265.047439][T10431] cdc_wdm 4-1:1.0: Unknown control protocol [ 3265.319280][T28486] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 3265.459258][ C1] cdc_wdm 4-1:1.0: Unexpected error -71 [ 3265.461287][T23130] usb 4-1: USB disconnect, device number 11 [ 3265.464929][ C1] wdm_int_callback: 269 callbacks suppressed [ 3265.464949][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 3265.483303][ C1] wdm_int_callback: 269 callbacks suppressed [ 3265.483322][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 3265.495369][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 3265.504621][ C1] vkms_vblank_simulate: vblank timer overrun [ 3265.559716][T28486] usb 5-1: Using ep0 maxpacket: 32 [ 3265.574252][T28486] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 3265.639886][T31061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11389'. [ 3265.665513][T28486] usb 5-1: config 0 has no interface number 0 [ 3265.697711][T28486] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3265.789984][T28486] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 3265.802324][T28486] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3265.839453][T28486] usb 5-1: Product: syz [ 3265.849545][T28486] usb 5-1: Manufacturer: syz [ 3265.863765][T28486] usb 5-1: SerialNumber: syz [ 3265.877498][T28486] usb 5-1: config 0 descriptor?? [ 3265.888055][T28486] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 3265.910405][T28486] em28xx 5-1:0.132: Video interface 132 found: [ 3265.935124][T31068] bridge_slave_0: left allmulticast mode [ 3265.941551][T31068] bridge_slave_0: left promiscuous mode [ 3265.947517][T31068] bridge0: port 1(bridge_slave_0) entered disabled state [ 3266.046100][T31068] bridge_slave_1: left allmulticast mode [ 3266.053578][T31068] bridge_slave_1: left promiscuous mode [ 3266.064808][T31068] bridge0: port 2(bridge_slave_1) entered disabled state [ 3266.163752][T31068] bond0: (slave bond_slave_0): Releasing backup interface [ 3266.258875][T31068] bond0: (slave bond_slave_1): Releasing backup interface [ 3266.287857][T28486] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 3266.315401][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.321944][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.338628][T31068] team0: Port device team_slave_0 removed [ 3266.396615][T31068] team0: Port device team_slave_1 removed [ 3266.410502][T31068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3266.426018][T31068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3266.454672][T31079] trusted_key: encrypted_key: insufficient parameters specified [ 3266.484037][T31068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3266.495914][T31068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3266.704506][T28486] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 3266.766276][T28486] em28xx 5-1:0.132: board has no eeprom [ 3266.829172][T28486] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 3266.850742][T28486] em28xx 5-1:0.132: analog set to bulk mode. [ 3266.856982][T26698] em28xx 5-1:0.132: Registering V4L2 extension [ 3266.914176][T28486] usb 5-1: USB disconnect, device number 62 [ 3266.943808][T28486] em28xx 5-1:0.132: Disconnecting em28xx [ 3267.124345][T26698] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 3267.149421][T26698] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 3267.239762][T26698] em28xx 5-1:0.132: No AC97 audio processor [ 3267.250129][T26698] usb 5-1: Decoder not found [ 3267.254742][T26698] em28xx 5-1:0.132: failed to create media graph [ 3267.267243][T26698] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 3267.321445][T26698] em28xx 5-1:0.132: Remote control support is not available for this card. [ 3267.372943][T28486] em28xx 5-1:0.132: Closing input extension [ 3267.389401][T28486] em28xx 5-1:0.132: Freeing device [ 3267.699194][T31120] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3267.705828][T31120] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3267.743726][T31120] vhci_hcd vhci_hcd.0: Device attached [ 3267.769793][T31125] netdevsim netdevsim4: Direct firmware load for nel/config failed with error -2 [ 3267.781194][T31125] netdevsim netdevsim4: Falling back to sysfs fallback for: nel/config [ 3268.240438][T21902] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 3268.735571][T31121] vhci_hcd: connection reset by peer [ 3268.751679][T17554] vhci_hcd: stop threads [ 3268.762897][T17554] vhci_hcd: release socket [ 3268.772932][T17554] vhci_hcd: disconnect device [ 3270.789829][T10431] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 3270.949562][T10431] usb 5-1: Using ep0 maxpacket: 8 [ 3270.982716][T10431] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 3271.036278][T10431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3271.051856][T10431] usb 5-1: Product: syz [ 3271.062830][T10431] usb 5-1: Manufacturer: syz [ 3271.073831][T10431] usb 5-1: SerialNumber: syz [ 3271.107342][T10431] usb 5-1: config 0 descriptor?? [ 3271.369121][T10431] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3271.597626][T31166] trusted_key: encrypted_key: key user:syz not found [ 3272.470187][T10431] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 3272.799980][T31205] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 3273.339621][T21902] vhci_hcd: vhci_device speed not set [ 3273.660654][T25382] usb 5-1: USB disconnect, device number 63 [ 3273.880986][T31229] kvm: pic: non byte write [ 3274.357749][T31250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11423'. [ 3274.447351][T31250] bridge3: port 1(veth7) entered blocking state [ 3274.464275][T31250] bridge3: port 1(veth7) entered disabled state [ 3274.473517][T31250] veth7: entered allmulticast mode [ 3274.490921][T31250] veth7: entered promiscuous mode [ 3274.510364][T31266] FAULT_INJECTION: forcing a failure. [ 3274.510364][T31266] name failslab, interval 1, probability 0, space 0, times 0 [ 3274.527967][T31266] CPU: 0 UID: 0 PID: 31266 Comm: syz.3.11423 Not tainted syzkaller #0 PREEMPT(full) [ 3274.527989][T31266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3274.527999][T31266] Call Trace: [ 3274.528006][T31266] [ 3274.528014][T31266] dump_stack_lvl+0x189/0x250 [ 3274.528040][T31266] ? __pfx____ratelimit+0x10/0x10 [ 3274.528056][T31266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3274.528076][T31266] ? __pfx__printk+0x10/0x10 [ 3274.528102][T31266] ? __pfx___might_resched+0x10/0x10 [ 3274.528123][T31266] should_fail_ex+0x414/0x560 [ 3274.528150][T31266] should_failslab+0xa8/0x100 [ 3274.528175][T31266] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3274.528197][T31266] ? __alloc_skb+0x112/0x2d0 [ 3274.528219][T31266] __alloc_skb+0x112/0x2d0 [ 3274.528239][T31266] netlink_sendmsg+0x5c6/0xb30 [ 3274.528260][T31266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3274.528277][T31266] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3274.528293][T31266] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3274.528306][T31266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3274.528319][T31266] __sock_sendmsg+0x21c/0x270 [ 3274.528338][T31266] ____sys_sendmsg+0x505/0x830 [ 3274.528357][T31266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3274.528377][T31266] ? import_iovec+0x74/0xa0 [ 3274.528394][T31266] ___sys_sendmsg+0x21f/0x2a0 [ 3274.528410][T31266] ? __pfx____sys_sendmsg+0x10/0x10 [ 3274.528456][T31266] ? __fget_files+0x2a/0x420 [ 3274.528471][T31266] ? __fget_files+0x3a0/0x420 [ 3274.528508][T31266] __x64_sys_sendmsg+0x19b/0x260 [ 3274.528531][T31266] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3274.528559][T31266] ? __pfx_ksys_write+0x10/0x10 [ 3274.528578][T31266] ? rcu_is_watching+0x15/0xb0 [ 3274.528595][T31266] ? do_syscall_64+0xbe/0x3b0 [ 3274.528611][T31266] do_syscall_64+0xfa/0x3b0 [ 3274.528623][T31266] ? lockdep_hardirqs_on+0x9c/0x150 [ 3274.528638][T31266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3274.528654][T31266] ? clear_bhb_loop+0x60/0xb0 [ 3274.528674][T31266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3274.528690][T31266] RIP: 0033:0x7fcae7d8eec9 [ 3274.528707][T31266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3274.528722][T31266] RSP: 002b:00007fcae8c21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3274.528739][T31266] RAX: ffffffffffffffda RBX: 00007fcae7fe6180 RCX: 00007fcae7d8eec9 [ 3274.528751][T31266] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 3274.528763][T31266] RBP: 00007fcae8c21090 R08: 0000000000000000 R09: 0000000000000000 [ 3274.528773][T31266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3274.528782][T31266] R13: 00007fcae7fe6218 R14: 00007fcae7fe6180 R15: 00007fcae810fa28 [ 3274.528809][T31266] [ 3274.832498][T28486] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 3274.840922][T31263] veth0_to_bond: left allmulticast mode [ 3274.847189][T31263] veth0_to_bond: left promiscuous mode [ 3274.854716][T31263] bridge2: port 2(veth0_to_bond) entered disabled state [ 3274.867961][T31263] bridge3: port 2(veth0_to_bond) entered blocking state [ 3274.875412][T31263] bridge3: port 2(veth0_to_bond) entered disabled state [ 3274.882835][T31263] veth0_to_bond: entered allmulticast mode [ 3274.890868][T31263] veth0_to_bond: entered promiscuous mode [ 3275.001586][T28486] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3275.019352][T28486] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3275.028527][T28486] usb 5-1: config 220 interface 0 has no altsetting 0 [ 3275.051682][T28486] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3275.060969][T28486] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3275.070148][T28486] usb 5-1: Product: syz [ 3275.074343][T28486] usb 5-1: Manufacturer: syz [ 3275.079368][T28486] usb 5-1: SerialNumber: syz [ 3275.341842][ T30] audit: type=1326 audit(1758809333.111:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31268 comm="syz.0.11424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd6d8eec9 code=0x7ffc0000 [ 3275.346699][T31271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11424'. [ 3275.375753][ T30] audit: type=1326 audit(1758809333.111:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31268 comm="syz.0.11424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd6d8eec9 code=0x7ffc0000 [ 3275.593270][ T30] audit: type=1326 audit(1758809333.111:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31268 comm="syz.0.11424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcbd6d90de7 code=0x7ffc0000 [ 3275.676372][ T30] audit: type=1326 audit(1758809333.111:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31268 comm="syz.0.11424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcbd6d90d5c code=0x7ffc0000 [ 3275.769611][ T30] audit: type=1326 audit(1758809333.111:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31268 comm="syz.0.11424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcbd6d90c94 code=0x7ffc0000 [ 3275.838405][ T30] audit: type=1326 audit(1758809333.111:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31268 comm="syz.0.11424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcbd6d90c94 code=0x7ffc0000 [ 3275.865040][ T30] audit: type=1326 audit(1758809333.111:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31268 comm="syz.0.11424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcbd6d8db2a code=0x7ffc0000 [ 3275.865226][T31275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3275.898828][T31275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3275.909271][T31275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3275.918355][T31275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3275.950146][ T30] audit: type=1326 audit(1758809333.111:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31268 comm="syz.0.11424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd6d8eec9 code=0x7ffc0000 [ 3276.153826][ T30] audit: type=1326 audit(1758809333.111:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31268 comm="syz.0.11424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcbd6d8eec9 code=0x7ffc0000 [ 3276.209366][T21902] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 3276.499550][T21902] usb 4-1: Using ep0 maxpacket: 16 [ 3276.532146][T21902] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 3276.594432][T21902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3276.624119][ T30] audit: type=1326 audit(1758809333.111:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31268 comm="syz.0.11424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd6d8eec9 code=0x7ffc0000 [ 3276.775398][T21902] usb 4-1: Product: syz [ 3276.780002][T21902] usb 4-1: Manufacturer: syz [ 3276.796692][T21902] usb 4-1: SerialNumber: syz [ 3276.930970][T21902] usb 4-1: config 0 descriptor?? [ 3276.945765][T21902] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 3277.099507][T31312] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11428'. [ 3277.556909][T31285] netlink: 552 bytes leftover after parsing attributes in process `syz.3.11425'. [ 3277.574910][T21902] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 3277.693849][T28486] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 3277.761650][T28486] usb 5-1: No valid video chain found. [ 3277.859325][T28486] usb 5-1: USB disconnect, device number 64 [ 3278.308694][T31338] syzkaller1: entered promiscuous mode [ 3278.314654][T31338] syzkaller1: entered allmulticast mode [ 3279.009079][ T3525] usb 4-1: USB disconnect, device number 12 [ 3279.022587][ T3525] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 3279.225414][ T3525] visor 4-1:0.0: device disconnected [ 3280.848822][T31386] netlink: 'syz.0.11438': attribute type 1 has an invalid length. [ 3281.535656][T31404] sctp: [Deprecated]: syz.3.11441 (pid 31404) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3281.535656][T31404] Use struct sctp_sack_info instead [ 3282.404012][T31427] Invalid logical block size (1048576) [ 3282.922383][T25382] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 3283.085326][T25382] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3283.112628][T25382] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3283.121862][T25382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3283.135051][T25382] usb 5-1: Product: syz [ 3283.139301][T25382] usb 5-1: Manufacturer: syz [ 3283.148802][T25382] usb 5-1: SerialNumber: syz [ 3283.327972][T25382] usb 5-1: config 0 descriptor?? [ 3283.446006][T25382] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 3283.641965][T30863] udevd[30863]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3285.709342][ T3525] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 3285.838810][T31488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11458'. [ 3285.879871][ T3525] usb 4-1: Using ep0 maxpacket: 16 [ 3285.922566][ T3525] usb 4-1: config 0 has no interfaces? [ 3285.932515][ T3525] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 3285.950136][ T3525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3285.976181][ T3525] usb 4-1: config 0 descriptor?? [ 3286.265855][ T3525] usb 5-1: USB disconnect, device number 65 [ 3287.031663][T31517] netlink: 'syz.2.11463': attribute type 7 has an invalid length. [ 3287.042117][T31517] netlink: 'syz.2.11463': attribute type 8 has an invalid length. [ 3288.379282][T25382] usb 4-1: USB disconnect, device number 13 [ 3288.430294][T31542] FAULT_INJECTION: forcing a failure. [ 3288.430294][T31542] name failslab, interval 1, probability 0, space 0, times 0 [ 3288.449606][T31542] CPU: 1 UID: 0 PID: 31542 Comm: syz.4.11468 Not tainted syzkaller #0 PREEMPT(full) [ 3288.449633][T31542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3288.449643][T31542] Call Trace: [ 3288.449651][T31542] [ 3288.449659][T31542] dump_stack_lvl+0x189/0x250 [ 3288.449684][T31542] ? __pfx____ratelimit+0x10/0x10 [ 3288.449703][T31542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3288.449722][T31542] ? __pfx__printk+0x10/0x10 [ 3288.449747][T31542] ? __pfx___might_resched+0x10/0x10 [ 3288.449763][T31542] ? fs_reclaim_acquire+0x7d/0x100 [ 3288.449785][T31542] should_fail_ex+0x414/0x560 [ 3288.449813][T31542] should_failslab+0xa8/0x100 [ 3288.449837][T31542] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3288.449858][T31542] ? security_file_alloc+0x34/0x330 [ 3288.449884][T31542] security_file_alloc+0x34/0x330 [ 3288.449907][T31542] init_file+0x93/0x2f0 [ 3288.449929][T31542] alloc_empty_file+0x6e/0x1d0 [ 3288.449949][T31542] path_openat+0x107/0x3830 [ 3288.449967][T31542] ? arch_stack_walk+0xfc/0x150 [ 3288.449999][T31542] ? stack_trace_save+0x9c/0xe0 [ 3288.450021][T31542] ? stack_depot_save_flags+0x40/0x860 [ 3288.450052][T31542] ? kasan_save_track+0x4f/0x80 [ 3288.450071][T31542] ? kasan_save_track+0x3e/0x80 [ 3288.450089][T31542] ? __kasan_slab_alloc+0x6c/0x80 [ 3288.450109][T31542] ? getname_flags+0xb8/0x540 [ 3288.450126][T31542] ? __pfx_path_openat+0x10/0x10 [ 3288.450143][T31542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3288.450180][T31542] do_filp_open+0x1fa/0x410 [ 3288.450198][T31542] ? __lock_acquire+0xab9/0xd20 [ 3288.450221][T31542] ? __pfx_do_filp_open+0x10/0x10 [ 3288.450269][T31542] ? _raw_spin_unlock+0x28/0x50 [ 3288.450292][T31542] ? alloc_fd+0x64c/0x6c0 [ 3288.450325][T31542] do_sys_openat2+0x121/0x1c0 [ 3288.450348][T31542] ? __pfx_do_sys_openat2+0x10/0x10 [ 3288.450368][T31542] ? ksys_write+0x22a/0x250 [ 3288.450390][T31542] ? __pfx_ksys_write+0x10/0x10 [ 3288.450409][T31542] ? rcu_is_watching+0x15/0xb0 [ 3288.450430][T31542] __x64_sys_openat+0x138/0x170 [ 3288.450454][T31542] do_syscall_64+0xfa/0x3b0 [ 3288.450471][T31542] ? lockdep_hardirqs_on+0x9c/0x150 [ 3288.450489][T31542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3288.450505][T31542] ? clear_bhb_loop+0x60/0xb0 [ 3288.450526][T31542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3288.450542][T31542] RIP: 0033:0x7f8f8af8eec9 [ 3288.450559][T31542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3288.450573][T31542] RSP: 002b:00007f8f8bee2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3288.450592][T31542] RAX: ffffffffffffffda RBX: 00007f8f8b1e5fa0 RCX: 00007f8f8af8eec9 [ 3288.450605][T31542] RDX: 0000000000000000 RSI: 0000200000004280 RDI: ffffffffffffff9c [ 3288.450617][T31542] RBP: 00007f8f8bee2090 R08: 0000000000000000 R09: 0000000000000000 [ 3288.450628][T31542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3288.450639][T31542] R13: 00007f8f8b1e6038 R14: 00007f8f8b1e5fa0 R15: 00007f8f8b30fa28 [ 3288.450668][T31542] [ 3288.864762][T31553] netlink: 'syz.4.11472': attribute type 1 has an invalid length. [ 3288.912766][T31553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3288.943376][T31589] bond1: (slave gretap1): making interface the new active one [ 3289.008591][T31589] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 3289.149180][T25382] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 3289.167582][T31553] vlan0: entered allmulticast mode [ 3289.188083][T31553] bond1: entered allmulticast mode [ 3289.209301][T31553] gretap1: entered allmulticast mode [ 3289.216833][T31553] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 3289.314257][T25382] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3289.324309][T25382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3289.334244][T25382] usb 4-1: Product: syz [ 3289.338729][T25382] usb 4-1: Manufacturer: syz [ 3289.343976][T25382] usb 4-1: SerialNumber: syz [ 3290.840619][T25382] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 3290.901427][T31621] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.11475'. [ 3292.178597][T31634] dvmrp0: entered allmulticast mode [ 3292.188469][T25382] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 3292.239752][T25382] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 3292.268570][T25382] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3292.291355][T25382] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3292.305186][T25382] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 3292.347472][T25382] usb 4-1: USB disconnect, device number 14 [ 3292.464331][T31660] syzkaller0: entered promiscuous mode [ 3292.475742][T31660] syzkaller0: entered allmulticast mode [ 3292.669449][ T3525] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 3292.679195][T25382] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 3292.833052][ T3525] usb 5-1: config 0 has an invalid interface number: 147 but max is 0 [ 3292.841635][T25382] usb 4-1: Using ep0 maxpacket: 16 [ 3292.847052][ T3525] usb 5-1: config 0 has no interface number 0 [ 3292.859802][T25382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3292.861793][ T3525] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 3292.877973][T25382] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 3292.901817][T25382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3292.929803][ T3525] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 3292.935211][T25382] usb 4-1: config 0 descriptor?? [ 3292.939284][ T3525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3292.966264][ T3525] usb 5-1: Product: syz [ 3292.979167][ T3525] usb 5-1: Manufacturer: syz [ 3292.989105][ T3525] usb 5-1: SerialNumber: syz [ 3293.004521][ T3525] usb 5-1: config 0 descriptor?? [ 3293.016813][T31655] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3293.072418][ T3525] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3293.245287][ T3525] usb 5-1: USB disconnect, device number 66 [ 3293.251794][ T13] usb 5-1: Failed to submit usb control message: -71 [ 3293.280241][ T13] usb 5-1: unable to send the bmi data to the device: -71 [ 3293.287391][ T13] usb 5-1: unable to get target info from device [ 3293.314612][ T13] usb 5-1: could not get target info (-71) [ 3293.324794][ T13] usb 5-1: could not probe fw (-71) [ 3293.388643][T31643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3293.419846][T31643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3293.453033][T31643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3293.475189][T31643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3293.517813][T31643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3293.548785][T31643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3293.572915][T31643] rdma_op ffff88807d9681f0 conn xmit_rdma 0000000000000000 [ 3293.607154][T31708] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11488'. [ 3293.630587][T25382] apple 0003:05AC:0254.0084: hidraw0: USB HID v0.03 Device [HID 05ac:0254] on usb-dummy_hcd.3-1/input0 [ 3293.821791][ T3525] usb 4-1: USB disconnect, device number 15 [ 3294.067170][T31733] FAULT_INJECTION: forcing a failure. [ 3294.067170][T31733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3294.081105][T31733] CPU: 1 UID: 0 PID: 31733 Comm: syz.2.11492 Not tainted syzkaller #0 PREEMPT(full) [ 3294.081132][T31733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3294.081143][T31733] Call Trace: [ 3294.081151][T31733] [ 3294.081160][T31733] dump_stack_lvl+0x189/0x250 [ 3294.081185][T31733] ? __pfx____ratelimit+0x10/0x10 [ 3294.081205][T31733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3294.081225][T31733] ? __pfx__printk+0x10/0x10 [ 3294.081260][T31733] should_fail_ex+0x414/0x560 [ 3294.081289][T31733] _copy_to_user+0x31/0xb0 [ 3294.081311][T31733] simple_read_from_buffer+0xe1/0x170 [ 3294.081339][T31733] proc_fail_nth_read+0x1b3/0x220 [ 3294.081361][T31733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3294.081385][T31733] ? rw_verify_area+0x2a6/0x4d0 [ 3294.081405][T31733] ? __lock_acquire+0xab9/0xd20 [ 3294.081426][T31733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3294.081447][T31733] vfs_read+0x1fd/0xa30 [ 3294.081468][T31733] ? fdget_pos+0x247/0x320 [ 3294.081488][T31733] ? __pfx___mutex_lock+0x10/0x10 [ 3294.081510][T31733] ? __pfx_vfs_read+0x10/0x10 [ 3294.081533][T31733] ? __fget_files+0x2a/0x420 [ 3294.081554][T31733] ? __fget_files+0x3a0/0x420 [ 3294.081569][T31733] ? __fget_files+0x2a/0x420 [ 3294.081594][T31733] ksys_read+0x145/0x250 [ 3294.081618][T31733] ? __pfx_ksys_read+0x10/0x10 [ 3294.081636][T31733] ? rcu_is_watching+0x15/0xb0 [ 3294.081659][T31733] ? do_syscall_64+0xbe/0x3b0 [ 3294.081681][T31733] do_syscall_64+0xfa/0x3b0 [ 3294.081698][T31733] ? lockdep_hardirqs_on+0x9c/0x150 [ 3294.081716][T31733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3294.081734][T31733] ? clear_bhb_loop+0x60/0xb0 [ 3294.081755][T31733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3294.081773][T31733] RIP: 0033:0x7f52aa78d8dc [ 3294.081794][T31733] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3294.081809][T31733] RSP: 002b:00007f52ab6ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3294.081830][T31733] RAX: ffffffffffffffda RBX: 00007f52aa9e5fa0 RCX: 00007f52aa78d8dc [ 3294.081843][T31733] RDX: 000000000000000f RSI: 00007f52ab6ff0a0 RDI: 0000000000000007 [ 3294.081853][T31733] RBP: 00007f52ab6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 3294.081863][T31733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3294.081879][T31733] R13: 00007f52aa9e6038 R14: 00007f52aa9e5fa0 R15: 00007f52aab0fa28 [ 3294.081904][T31733] [ 3294.327657][ C1] vkms_vblank_simulate: vblank timer overrun [ 3295.178757][T25382] hid-generic 0000:0004:0000.0085: unknown main item tag 0x0 [ 3295.188005][T25382] hid-generic 0000:0004:0000.0085: unknown main item tag 0x0 [ 3295.209972][T25382] hid-generic 0000:0004:0000.0085: unknown main item tag 0x0 [ 3295.253982][T25382] hid-generic 0000:0004:0000.0085: hidraw0: HID v0.05 Device [syz0] on syz0 [ 3295.469143][T21902] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 3295.642993][T21902] usb 4-1: config 9 has an invalid interface number: 1 but max is 0 [ 3295.657452][T21902] usb 4-1: config 9 has no interface number 0 [ 3295.682423][T21902] usb 4-1: config 9 interface 1 has no altsetting 0 [ 3295.723133][T21902] usb 4-1: string descriptor 0 read error: -22 [ 3295.735084][T21902] usb 4-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 3295.794700][T21902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3295.854267][T21902] cx231xx 4-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 3295.881356][T21902] cx231xx 4-1:9.1: Not found matching IAD interface [ 3296.162167][T21902] usb 4-1: USB disconnect, device number 16 [ 3296.856261][T31804] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11505'. [ 3297.628751][T31812] input: syz1 as /devices/virtual/input/input317 [ 3297.661484][T31812] program syz.4.11508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3297.869344][T31817] netlink: 'syz.3.11509': attribute type 2 has an invalid length. [ 3297.877211][T31817] netlink: 119 bytes leftover after parsing attributes in process `syz.3.11509'. [ 3298.392009][T31808] ALSA: mixer_oss: invalid OSS volume 'u' [ 3299.167483][T31866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11524'. [ 3299.178312][T31866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11524'. [ 3299.191236][T31866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11524'. [ 3299.366716][T31876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11526'. [ 3299.757771][T31886] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11533'. [ 3300.114976][T31903] netlink: 276 bytes leftover after parsing attributes in process `syz.2.11537'. [ 3300.186497][T31898] bridge_slave_0: left allmulticast mode [ 3300.193741][T31898] bridge_slave_0: left promiscuous mode [ 3300.200046][T31898] bridge0: port 1(bridge_slave_0) entered disabled state [ 3300.803527][T31898] bridge_slave_1: left allmulticast mode [ 3300.810985][T31898] bridge_slave_1: left promiscuous mode [ 3300.818566][T31898] bridge0: port 2(bridge_slave_1) entered disabled state [ 3300.925207][T31898] veth0_to_bond: left allmulticast mode [ 3300.931941][T31898] veth0_to_bond: left promiscuous mode [ 3300.937957][T31898] bridge3: port 2(veth0_to_bond) entered disabled state [ 3300.984252][T31898] bond0: (slave bond_slave_0): Releasing backup interface [ 3301.006103][T31898] bond0: (slave bond_slave_1): Releasing backup interface [ 3301.029500][T31898] team0: Port device team_slave_0 removed [ 3301.100662][T31898] team0: Port device team_slave_1 removed [ 3301.110221][T31898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3301.125256][T31898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3301.249107][T31898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3301.267056][T31898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3301.423608][T31898] veth3: left allmulticast mode [ 3301.434199][T31898] veth3: left promiscuous mode [ 3301.451423][T31898] bridge2: port 1(veth3) entered disabled state [ 3301.485625][T31898] bond1: (slave veth5): Releasing active interface [ 3301.522978][T31898] veth7: left allmulticast mode [ 3301.528532][T31898] veth7: left promiscuous mode [ 3301.536591][T31898] bridge3: port 1(veth7) entered disabled state [ 3301.895991][T31919] FAULT_INJECTION: forcing a failure. [ 3301.895991][T31919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3301.989261][T31919] CPU: 0 UID: 0 PID: 31919 Comm: syz.2.11540 Not tainted syzkaller #0 PREEMPT(full) [ 3301.989287][T31919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3301.989297][T31919] Call Trace: [ 3301.989305][T31919] [ 3301.989312][T31919] dump_stack_lvl+0x189/0x250 [ 3301.989337][T31919] ? __pfx____ratelimit+0x10/0x10 [ 3301.989354][T31919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3301.989374][T31919] ? __pfx__printk+0x10/0x10 [ 3301.989405][T31919] should_fail_ex+0x414/0x560 [ 3301.989432][T31919] _copy_to_user+0x31/0xb0 [ 3301.989453][T31919] simple_read_from_buffer+0xe1/0x170 [ 3301.989481][T31919] proc_fail_nth_read+0x1b3/0x220 [ 3301.989502][T31919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3301.989523][T31919] ? rw_verify_area+0x2a6/0x4d0 [ 3301.989542][T31919] ? __lock_acquire+0xab9/0xd20 [ 3301.989561][T31919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3301.989579][T31919] vfs_read+0x1fd/0xa30 [ 3301.989597][T31919] ? fdget_pos+0x247/0x320 [ 3301.989613][T31919] ? __pfx___mutex_lock+0x10/0x10 [ 3301.989631][T31919] ? __pfx_vfs_read+0x10/0x10 [ 3301.989650][T31919] ? __fget_files+0x2a/0x420 [ 3301.989666][T31919] ? __fget_files+0x3a0/0x420 [ 3301.989677][T31919] ? __fget_files+0x2a/0x420 [ 3301.989697][T31919] ksys_read+0x145/0x250 [ 3301.989714][T31919] ? __fget_files+0x3a0/0x420 [ 3301.989729][T31919] ? __pfx_ksys_read+0x10/0x10 [ 3301.989754][T31919] ? do_syscall_64+0xbe/0x3b0 [ 3301.989776][T31919] do_syscall_64+0xfa/0x3b0 [ 3301.989791][T31919] ? lockdep_hardirqs_on+0x9c/0x150 [ 3301.989806][T31919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3301.989823][T31919] ? clear_bhb_loop+0x60/0xb0 [ 3301.989841][T31919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3301.989856][T31919] RIP: 0033:0x7f52aa78d8dc [ 3301.989872][T31919] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3301.989896][T31919] RSP: 002b:00007f52ab6ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3301.989914][T31919] RAX: ffffffffffffffda RBX: 00007f52aa9e5fa0 RCX: 00007f52aa78d8dc [ 3301.989925][T31919] RDX: 000000000000000f RSI: 00007f52ab6ff0a0 RDI: 0000000000000004 [ 3301.989936][T31919] RBP: 00007f52ab6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 3301.989947][T31919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3301.989957][T31919] R13: 00007f52aa9e6038 R14: 00007f52aa9e5fa0 R15: 00007f52aab0fa28 [ 3301.989987][T31919] [ 3302.687122][T31923] netlink: 'syz.4.11542': attribute type 1 has an invalid length. [ 3302.766116][T31923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3302.804064][T31925] bond2: (slave gretap2): making interface the new active one [ 3302.814450][T31925] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 3304.467156][T32015] batadv1: entered promiscuous mode [ 3304.639405][ T3525] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 3304.895735][ T3525] usb 4-1: config index 0 descriptor too short (expected 8028, got 92) [ 3304.965479][ T3525] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3304.985892][ T3525] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3304.995114][ T3525] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3305.009157][T32024] fuse: Bad value for 'fd' [ 3305.145599][ T3525] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3305.222815][ T3525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3305.257695][ T3525] usb 4-1: Product: syz [ 3305.295261][ T3525] usb 4-1: Manufacturer: syz [ 3305.325040][ T3525] usb 4-1: SerialNumber: syz [ 3305.471143][ T3525] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 3305.625025][ T3525] cdc_ncm 4-1:1.0: bind() failure [ 3305.672744][T32010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3305.716886][T32010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3305.828120][T32042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11561'. [ 3306.095882][T32010] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3306.103185][T32010] IPv6: NLM_F_CREATE should be set when creating new route [ 3306.112744][T32010] IPv6: NLM_F_CREATE should be set when creating new route [ 3306.537172][T32076] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.11567'. [ 3306.678196][T21902] usb 4-1: USB disconnect, device number 17 [ 3307.136570][T31985] delete_channel: no stack [ 3307.339402][ T3525] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 3307.502033][T32112] fuse: Bad value for 'fd' [ 3307.569357][ T3525] usb 5-1: Using ep0 maxpacket: 32 [ 3307.704535][ T3525] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 3307.750929][ T3525] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 3307.776656][ T3525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3307.809282][ T3525] usb 5-1: Product: syz [ 3307.818360][ T3525] usb 5-1: Manufacturer: syz [ 3308.001158][ T3525] usb 5-1: SerialNumber: syz [ 3308.075913][ T3525] usb 5-1: config 0 descriptor?? [ 3308.129462][T32092] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3308.142292][T21902] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 3308.156189][ T3525] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3308.236462][T32127] random: crng reseeded on system resumption [ 3308.337509][T21902] usb 4-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 3308.378106][T21902] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3308.418890][T32130] fuse: Bad value for 'fd' [ 3308.621643][T21902] usb 4-1: New USB device found, idVendor=10c4, idProduct=3e90, bcdDevice= 0.53 [ 3308.870528][T21902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3308.928298][T21902] usb 4-1: config 0 descriptor?? [ 3310.263311][T32155] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.11578'. [ 3310.620768][ T3525] usb 5-1: USB disconnect, device number 67 [ 3311.882576][T25382] usb 4-1: USB disconnect, device number 18 [ 3312.013637][T32229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11582'. [ 3312.228925][T32239] program syz.2.11583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3312.260659][T32242] fuse: Bad value for 'fd' [ 3314.449560][T28486] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 3315.479487][T32313] netlink: 'syz.3.11599': attribute type 11 has an invalid length. [ 3315.488656][T32313] netlink: 448 bytes leftover after parsing attributes in process `syz.3.11599'. [ 3315.589922][T28486] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 3315.751616][T28486] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3315.782604][T28486] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3315.990316][T28486] usb 5-1: config 220 interface 0 has no altsetting 0 [ 3316.012700][T28486] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3316.028196][T28486] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3316.045798][T28486] usb 5-1: Product: syz [ 3316.130517][T32332] fuse: Bad value for 'fd' [ 3316.281302][T28486] usb 5-1: Manufacturer: syz [ 3316.285940][T28486] usb 5-1: SerialNumber: syz [ 3316.947593][T32345] netlink: 'syz.2.11608': attribute type 1 has an invalid length. [ 3317.517160][T32376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3317.603578][T32376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3317.711486][T32341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3317.744185][T32341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3318.024354][ T3525] IPVS: starting estimator thread 0... [ 3318.119344][T32397] IPVS: using max 31 ests per chain, 74400 per kthread [ 3319.470879][T32432] FAULT_INJECTION: forcing a failure. [ 3319.470879][T32432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3319.593867][T13243] Bluetooth: hci2: command 0x0406 tx timeout [ 3319.599262][T32432] CPU: 0 UID: 0 PID: 32432 Comm: syz.0.11620 Not tainted syzkaller #0 PREEMPT(full) [ 3319.599288][T32432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3319.599311][T32432] Call Trace: [ 3319.599319][T32432] [ 3319.599328][T32432] dump_stack_lvl+0x189/0x250 [ 3319.599353][T32432] ? __pfx____ratelimit+0x10/0x10 [ 3319.599376][T32432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3319.599397][T32432] ? __pfx__printk+0x10/0x10 [ 3319.599431][T32432] should_fail_ex+0x414/0x560 [ 3319.599461][T32432] _copy_to_user+0x31/0xb0 [ 3319.599485][T32432] simple_read_from_buffer+0xe1/0x170 [ 3319.599515][T32432] proc_fail_nth_read+0x1b3/0x220 [ 3319.599537][T32432] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3319.599560][T32432] ? rw_verify_area+0x2a6/0x4d0 [ 3319.599580][T32432] ? __lock_acquire+0xab9/0xd20 [ 3319.599602][T32432] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3319.599623][T32432] vfs_read+0x1fd/0xa30 [ 3319.599651][T32432] ? fdget_pos+0x247/0x320 [ 3319.599671][T32432] ? __pfx___mutex_lock+0x10/0x10 [ 3319.599691][T32432] ? __pfx_vfs_read+0x10/0x10 [ 3319.599714][T32432] ? __fget_files+0x2a/0x420 [ 3319.599733][T32432] ? __fget_files+0x3a0/0x420 [ 3319.599748][T32432] ? __fget_files+0x2a/0x420 [ 3319.599773][T32432] ksys_read+0x145/0x250 [ 3319.599792][T32432] ? __pfx_filldir64+0x10/0x10 [ 3319.599815][T32432] ? __pfx_ksys_read+0x10/0x10 [ 3319.599841][T32432] ? do_syscall_64+0xbe/0x3b0 [ 3319.599864][T32432] do_syscall_64+0xfa/0x3b0 [ 3319.599880][T32432] ? lockdep_hardirqs_on+0x9c/0x150 [ 3319.599896][T32432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3319.599911][T32432] ? clear_bhb_loop+0x60/0xb0 [ 3319.599930][T32432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3319.599946][T32432] RIP: 0033:0x7fcbd6d8d8dc [ 3319.599962][T32432] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3319.599977][T32432] RSP: 002b:00007fcbd7b82030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3319.599996][T32432] RAX: ffffffffffffffda RBX: 00007fcbd6fe6180 RCX: 00007fcbd6d8d8dc [ 3319.600010][T32432] RDX: 000000000000000f RSI: 00007fcbd7b820a0 RDI: 0000000000000005 [ 3319.600022][T32432] RBP: 00007fcbd7b82090 R08: 0000000000000000 R09: 0000000000000000 [ 3319.600034][T32432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3319.600045][T32432] R13: 00007fcbd6fe6218 R14: 00007fcbd6fe6180 R15: 00007fcbd710fa28 [ 3319.600074][T32432] [ 3319.984620][T32431] loop6: detected capacity change from 0 to 524288000 [ 3320.026466][T28486] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 3320.033079][T28486] usb 5-1: No valid video chain found. [ 3320.045245][T28486] usb 5-1: USB disconnect, device number 69 [ 3321.004119][T32473] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 3321.010686][T32473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3321.050604][T32473] vhci_hcd vhci_hcd.0: Device attached [ 3321.059303][T28486] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 3321.172870][T32476] netlink: 'syz.2.11627': attribute type 21 has an invalid length. [ 3321.200119][T32476] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11627'. [ 3321.254231][T28486] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3321.300078][T25382] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 3321.309967][T28486] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3321.372915][T28486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3321.399594][T32473] can: request_module (can-proto-4) failed. [ 3321.430623][T28486] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3321.603589][T28486] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3321.764845][T32474] vhci_hcd: connection reset by peer [ 3321.881982][T17274] vhci_hcd: stop threads [ 3321.893667][T17274] vhci_hcd: release socket [ 3321.906732][T17274] vhci_hcd: disconnect device [ 3322.198546][T32492] fuse: Bad value for 'fd' [ 3324.307911][T10431] usb 5-1: USB disconnect, device number 70 [ 3324.318604][T32466] delete_channel: no stack [ 3324.392384][T32531] tipc: Enabled bearer , priority 0 [ 3324.517094][T32535] netlink: 'syz.4.11638': attribute type 7 has an invalid length. [ 3324.564509][T32535] netlink: 'syz.4.11638': attribute type 5 has an invalid length. [ 3324.573385][T32535] netlink: 17 bytes leftover after parsing attributes in process `syz.4.11638'. [ 3325.567395][T21902] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 3325.892049][T21902] usb 4-1: Using ep0 maxpacket: 16 [ 3325.904306][T21902] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 3325.916017][T21902] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3325.946594][T21902] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3325.957556][T21902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3325.975857][T21902] usb 4-1: Product: syz [ 3325.982494][T21902] usb 4-1: Manufacturer: syz [ 3325.987110][T21902] usb 4-1: SerialNumber: syz [ 3326.399953][T25382] vhci_hcd: vhci_device speed not set [ 3326.589347][ T3525] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 3326.651714][T32516] delete_channel: no stack [ 3326.753761][ T3525] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3326.766763][ T3525] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3326.810067][ T3525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3327.777344][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.784970][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3328.386986][T21902] usb 4-1: 0:2 : does not exist [ 3328.518170][T21902] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 3328.666257][ T3525] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3328.694314][T21902] usb 4-1: USB disconnect, device number 19 [ 3329.034991][ T3525] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3329.044242][T32635] netlink: 'syz.2.11657': attribute type 21 has an invalid length. [ 3329.054269][T32635] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11657'. [ 3329.073927][T32635] netlink: 'syz.2.11657': attribute type 5 has an invalid length. [ 3329.082335][T32635] netlink: 'syz.2.11657': attribute type 6 has an invalid length. [ 3329.090375][T32635] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11657'. [ 3329.170084][T32638] netlink: 92 bytes leftover after parsing attributes in process `syz.2.11657'. [ 3330.150077][T32657] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11660'. [ 3330.705002][T10431] usb 5-1: USB disconnect, device number 71 [ 3330.734812][T32576] delete_channel: no stack [ 3332.003526][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 3332.003539][ T30] audit: type=1326 audit(1758809389.771:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32708 comm="syz.4.11677" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f8af8eec9 code=0x0 [ 3332.031998][ C0] vkms_vblank_simulate: vblank timer overrun [ 3332.520278][T32727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11680'. [ 3333.726557][T32757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11689'. [ 3334.038036][T32759] IPv6: NLM_F_REPLACE set, but no existing node found! [ 3334.280513][T32761] IPVS: Unknown mcast interface: veth1_vlan [ 3334.674988][ T307] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11694'. [ 3334.684350][ T307] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11694'. [ 3335.866262][ T346] program syz.3.11706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3336.308748][ T349] program syz.3.11707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3336.730463][ T357] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11710'. [ 3336.898969][ T362] bridge_slave_0: left allmulticast mode [ 3336.905472][ T362] bridge_slave_0: left promiscuous mode [ 3336.915657][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 3337.534898][ T3525] IPVS: starting estimator thread 0... [ 3337.564970][ T362] bridge_slave_1: left allmulticast mode [ 3337.572841][ T362] bridge_slave_1: left promiscuous mode [ 3337.579035][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 3337.615917][ T362] veth0_to_bond: left allmulticast mode [ 3337.622847][ T362] veth0_to_bond: left promiscuous mode [ 3337.630601][ T362] bridge6: port 2(veth0_to_bond) entered disabled state [ 3337.639219][ T370] IPVS: using max 36 ests per chain, 86400 per kthread [ 3337.792586][ T362] bond0: (slave bond_slave_0): Releasing backup interface [ 3337.853309][ T362] bond0: (slave bond_slave_1): Releasing backup interface [ 3337.902338][ T362] team0: Port device team_slave_0 removed [ 3337.924805][ T362] team0: Port device team_slave_1 removed [ 3337.938366][ T362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3337.947446][ T362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3338.052254][ T362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3338.060055][ T362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3338.097557][ T362] veth5: left allmulticast mode [ 3338.111144][ T362] veth5: left promiscuous mode [ 3338.119358][ T362] bridge1: port 1(veth5) entered disabled state [ 3338.209891][ T386] fuse: Bad value for 'fd' [ 3338.371712][ T362] veth7: left allmulticast mode [ 3338.376690][ T362] veth7: left promiscuous mode [ 3338.382241][ T362] bridge2: port 1(veth7) entered disabled state [ 3338.405867][ T362] veth9: left allmulticast mode [ 3338.434930][ T362] veth9: left promiscuous mode [ 3338.442439][ T362] bridge3: port 1(veth9) entered disabled state [ 3338.532326][ T362] veth11: left allmulticast mode [ 3338.541488][ T362] veth11: left promiscuous mode [ 3338.566797][ T362] bridge4: port 1(veth11) entered disabled state [ 3338.594889][ T362] veth13: left allmulticast mode [ 3338.602421][ T362] veth13: left promiscuous mode [ 3338.613294][ T362] bridge5: port 1(veth13) entered disabled state [ 3338.715568][ T362] veth15: left allmulticast mode [ 3338.852594][ T362] veth15: left promiscuous mode [ 3338.887714][ T362] bridge6: port 1(veth15) entered disabled state [ 3339.086641][ T362] bond1: (slave gretap1): Releasing active interface [ 3339.096758][ T362] gretap1: left allmulticast mode [ 3339.205209][ T362] bond2: (slave gretap2): Releasing active interface [ 3339.551341][ T396] syzkaller0: entered promiscuous mode [ 3339.572103][ T396] syzkaller0: entered allmulticast mode [ 3341.409178][T25382] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 3341.589231][T25382] usb 5-1: device descriptor read/64, error -71 [ 3341.899175][T25382] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 3342.129245][T25382] usb 5-1: device descriptor read/64, error -71 [ 3342.249156][T25382] usb usb5-port1: attempt power cycle [ 3342.669329][T25382] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 3342.727142][T25382] usb 5-1: device descriptor read/8, error -71 [ 3343.009170][T25382] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 3343.057027][T25382] usb 5-1: device descriptor read/8, error -71 [ 3343.178842][T25382] usb usb5-port1: unable to enumerate USB device [ 3346.004613][ T470] FAULT_INJECTION: forcing a failure. [ 3346.004613][ T470] name failslab, interval 1, probability 0, space 0, times 0 [ 3346.050975][ T470] CPU: 0 UID: 0 PID: 470 Comm: syz.2.11732 Not tainted syzkaller #0 PREEMPT(full) [ 3346.051007][ T470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3346.051018][ T470] Call Trace: [ 3346.051045][ T470] [ 3346.051062][ T470] dump_stack_lvl+0x189/0x250 [ 3346.051089][ T470] ? __pfx____ratelimit+0x10/0x10 [ 3346.051108][ T470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3346.051127][ T470] ? __pfx__printk+0x10/0x10 [ 3346.051163][ T470] ? __pfx___might_resched+0x10/0x10 [ 3346.051180][ T470] ? fs_reclaim_acquire+0x7d/0x100 [ 3346.051202][ T470] should_fail_ex+0x414/0x560 [ 3346.051231][ T470] should_failslab+0xa8/0x100 [ 3346.051255][ T470] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 3346.051276][ T470] ? __d_alloc+0x36/0x7a0 [ 3346.051299][ T470] __d_alloc+0x36/0x7a0 [ 3346.051324][ T470] d_alloc_parallel+0xe5/0x15e0 [ 3346.051363][ T470] ? __lock_acquire+0xab9/0xd20 [ 3346.051391][ T470] ? __pfx_d_alloc_parallel+0x10/0x10 [ 3346.051417][ T470] ? __raw_spin_lock_init+0x45/0x100 [ 3346.051440][ T470] ? __init_waitqueue_head+0xa9/0x150 [ 3346.051464][ T470] __lookup_slow+0x116/0x3d0 [ 3346.051487][ T470] ? __pfx___lookup_slow+0x10/0x10 [ 3346.051517][ T470] ? d_lookup+0x8a/0xa0 [ 3346.051535][ T470] ? lookup_noperm+0x112/0x220 [ 3346.051558][ T470] simple_start_creating+0xfd/0x1e0 [ 3346.051575][ T470] ? __pfx_simple_start_creating+0x10/0x10 [ 3346.051605][ T470] start_creating+0x10f/0x180 [ 3346.051632][ T470] __debugfs_create_file+0x79/0x4f0 [ 3346.051660][ T470] debugfs_create_file_full+0x3f/0x60 [ 3346.051689][ T470] ref_tracker_dir_debugfs+0x14e/0x270 [ 3346.051706][ T470] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 3346.051751][ T470] ? rcu_is_watching+0x15/0xb0 [ 3346.051767][ T470] ? alloc_netdev_mqs+0xa3/0x11b0 [ 3346.051796][ T470] ? __raw_spin_lock_init+0x45/0x100 [ 3346.051819][ T470] alloc_netdev_mqs+0x26f/0x11b0 [ 3346.051839][ T470] ? __pfx_vlan_setup+0x10/0x10 [ 3346.051866][ T470] rtnl_create_link+0x31f/0xd10 [ 3346.051895][ T470] rtnl_newlink_create+0x25c/0xb00 [ 3346.051921][ T470] ? __lock_acquire+0xab9/0xd20 [ 3346.051949][ T470] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 3346.051973][ T470] ? __pfx___mutex_lock+0x10/0x10 [ 3346.052002][ T470] ? ns_capable+0x8a/0xf0 [ 3346.052024][ T470] rtnl_newlink+0x16d6/0x1c70 [ 3346.052044][ T470] ? netlink_sendmsg+0x805/0xb30 [ 3346.052076][ T470] ? __pfx_rtnl_newlink+0x10/0x10 [ 3346.052120][ T470] ? kasan_quarantine_put+0xdd/0x220 [ 3346.052139][ T470] ? lockdep_hardirqs_on+0x9c/0x150 [ 3346.052172][ T470] ? nlmon_xmit+0xb0/0x100 [ 3346.052190][ T470] ? kmem_cache_free+0x18f/0x400 [ 3346.052221][ T470] ? __local_bh_enable_ip+0x12d/0x1c0 [ 3346.052238][ T470] ? lockdep_hardirqs_on+0x9c/0x150 [ 3346.052254][ T470] ? __local_bh_enable_ip+0x12d/0x1c0 [ 3346.052270][ T470] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 3346.052291][ T470] ? __dev_queue_xmit+0x27b/0x3b50 [ 3346.052313][ T470] ? __dev_queue_xmit+0x27b/0x3b50 [ 3346.052332][ T470] ? __dev_queue_xmit+0x27b/0x3b50 [ 3346.052354][ T470] ? __dev_queue_xmit+0x1d79/0x3b50 [ 3346.052380][ T470] ? __lock_acquire+0xab9/0xd20 [ 3346.052428][ T470] ? __pfx_rtnl_newlink+0x10/0x10 [ 3346.052446][ T470] rtnetlink_rcv_msg+0x7cc/0xb70 [ 3346.052469][ T470] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 3346.052487][ T470] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3346.052503][ T470] ? ref_tracker_free+0x63a/0x7d0 [ 3346.052521][ T470] ? __asan_memcpy+0x40/0x70 [ 3346.052540][ T470] ? __pfx_ref_tracker_free+0x10/0x10 [ 3346.052569][ T470] netlink_rcv_skb+0x205/0x470 [ 3346.052589][ T470] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3346.052609][ T470] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3346.052642][ T470] ? netlink_deliver_tap+0x2e/0x1b0 [ 3346.052668][ T470] netlink_unicast+0x82c/0x9e0 [ 3346.052702][ T470] ? __pfx_netlink_unicast+0x10/0x10 [ 3346.052728][ T470] ? netlink_sendmsg+0x642/0xb30 [ 3346.052744][ T470] ? skb_put+0x11b/0x210 [ 3346.052768][ T470] netlink_sendmsg+0x805/0xb30 [ 3346.052797][ T470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3346.052820][ T470] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3346.052840][ T470] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3346.052859][ T470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3346.052877][ T470] __sock_sendmsg+0x21c/0x270 [ 3346.052903][ T470] ____sys_sendmsg+0x505/0x830 [ 3346.052929][ T470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3346.052957][ T470] ? import_iovec+0x74/0xa0 [ 3346.052983][ T470] ___sys_sendmsg+0x21f/0x2a0 [ 3346.053005][ T470] ? __pfx____sys_sendmsg+0x10/0x10 [ 3346.053065][ T470] ? __fget_files+0x2a/0x420 [ 3346.053081][ T470] ? __fget_files+0x3a0/0x420 [ 3346.053106][ T470] __x64_sys_sendmsg+0x19b/0x260 [ 3346.053128][ T470] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3346.053164][ T470] ? __pfx_ksys_write+0x10/0x10 [ 3346.053183][ T470] ? rcu_is_watching+0x15/0xb0 [ 3346.053205][ T470] ? do_syscall_64+0xbe/0x3b0 [ 3346.053227][ T470] do_syscall_64+0xfa/0x3b0 [ 3346.053244][ T470] ? lockdep_hardirqs_on+0x9c/0x150 [ 3346.053260][ T470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3346.053277][ T470] ? clear_bhb_loop+0x60/0xb0 [ 3346.053298][ T470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3346.053314][ T470] RIP: 0033:0x7f52aa78eec9 [ 3346.053330][ T470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3346.053345][ T470] RSP: 002b:00007f52ab6ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3346.053365][ T470] RAX: ffffffffffffffda RBX: 00007f52aa9e5fa0 RCX: 00007f52aa78eec9 [ 3346.053378][ T470] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000016 [ 3346.053389][ T470] RBP: 00007f52ab6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 3346.053400][ T470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3346.053411][ T470] R13: 00007f52aa9e6038 R14: 00007f52aa9e5fa0 R15: 00007f52aab0fa28 [ 3346.053442][ T470] [ 3346.654683][ T470] veth0: entered promiscuous mode [ 3346.662232][ T470] vlan2: entered promiscuous mode [ 3346.929161][ T3525] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 3347.079923][ T3525] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 3347.153889][ T3525] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 3347.163196][ T3525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3347.171346][ T3525] usb 5-1: Product: syz [ 3347.175530][ T3525] usb 5-1: Manufacturer: syz [ 3347.180168][ T3525] usb 5-1: SerialNumber: syz [ 3347.187131][ T3525] usb 5-1: config 0 descriptor?? [ 3347.194602][ T3525] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 3347.205965][ T3525] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3347.215815][ T3525] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 3347.225146][ T3525] usb 5-1: media controller created [ 3347.241935][ T3525] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3347.651600][ T476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3347.740486][ T515] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11740'. [ 3347.804942][ T476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3348.226175][ T3525] DVB: Unable to find symbol mt352_attach() [ 3348.405257][ T3525] DVB: Unable to find symbol nxt6000_attach() [ 3348.438981][ T3525] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 3348.516649][ T3525] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input319 [ 3348.581728][ T3525] dvb-usb: schedule remote query interval to 1000 msecs. [ 3348.609174][ T3525] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 3348.661880][ T3525] dvb-usb: bulk message failed: -22 (7/0) [ 3348.679496][ T3525] dvb-usb: bulk message failed: -22 (7/0) [ 3348.713479][ T3525] usb 5-1: USB disconnect, device number 76 [ 3348.976394][ T564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3349.354405][ T3525] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 3349.885337][ T602] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 3350.339117][T10431] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 3350.695131][T10431] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 3350.725572][T10431] usb 4-1: config 0 has no interface number 0 [ 3350.747540][T10431] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 3350.805597][T10431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3351.304498][T10431] usb 4-1: config 0 descriptor?? [ 3351.315650][T10431] usb 4-1: selecting invalid altsetting 1 [ 3351.334750][T10431] dvb_ttusb_budget: ttusb_init_controller: error [ 3351.348012][T10431] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 3351.613294][T10431] DVB: Unable to find symbol cx22700_attach() [ 3351.782788][T10431] DVB: Unable to find symbol tda10046_attach() [ 3351.987106][T10431] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 3351.997108][ T639] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11760'. [ 3352.044257][ T639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11760'. [ 3353.025740][ T659] debugfs: 'netdev:nicvf0' already exists in 'phy208' [ 3353.321876][ T3525] usb 4-1: USB disconnect, device number 20 [ 3353.354755][ T666] binder: 664:666 ioctl c0306201 200000000080 returned -14 [ 3353.682312][ T30] audit: type=1804 audit(1758809411.441:2002): pid=692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.11770" name="/newroot/267/file1" dev="fuse" ino=1 res=1 errno=0 [ 3353.684003][ T691] trusted_key: encrypted_key: insufficient parameters specified [ 3354.642617][ T739] fuse: Bad value for 'fd' [ 3354.908015][ T742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3355.637422][ T740] [U]  [ 3355.939227][ T760] input: syz1 as /devices/virtual/input/input320 [ 3356.074671][ T760] netlink: 'syz.2.11783': attribute type 1 has an invalid length. [ 3357.653680][ T830] fuse: Bad value for 'fd' [ 3361.266332][ T888] tipc: Enabling of bearer rejected, already enabled [ 3361.779224][ T898] fuse: Bad value for 'fd' [ 3362.823941][ T865] delete_channel: no stack [ 3363.819331][T10431] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 3363.897267][ T971] netlink: 'syz.4.11816': attribute type 21 has an invalid length. [ 3363.922760][ T971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11816'. [ 3364.023454][T10431] usb 4-1: config 0 has no interfaces? [ 3364.127219][T10431] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3364.188009][T10431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3364.281794][T10431] usb 4-1: Product: syz [ 3364.290845][T10431] usb 4-1: Manufacturer: syz [ 3364.310485][T10431] usb 4-1: SerialNumber: syz [ 3364.338151][T10431] usb 4-1: config 0 descriptor?? [ 3364.665920][ T951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11813'. [ 3366.059308][T16063] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 3366.231019][T16063] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3366.625149][T16063] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3366.722448][ T3525] usb 4-1: USB disconnect, device number 21 [ 3366.737068][T16063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3366.921286][T16063] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3367.221300][T16063] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3367.266671][ T1010] delete_channel: no stack [ 3367.302378][T16063] usb 5-1: USB disconnect, device number 77 [ 3367.339961][ T3525] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 3367.523787][ T3525] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3367.691570][ T3525] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3367.726130][ T3525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3367.906333][ T3525] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3368.106701][T30863] udevd[30863]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3368.127674][ T3525] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3368.274179][ T1044] delete_channel: no stack [ 3368.356250][ T3525] usb 4-1: USB disconnect, device number 22 [ 3368.749237][ T1092] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.11827'. [ 3368.801084][ T1098] delete_channel: no stack [ 3370.300204][ T1135] delete_channel: no stack [ 3370.549420][T10431] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 3370.623247][ T1141] syzkaller1: entered promiscuous mode [ 3370.647328][ T1141] syzkaller1: entered allmulticast mode [ 3370.709358][T10431] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3370.785789][T10431] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3370.856738][T10431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3371.009259][T25382] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 3371.234652][T10431] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3371.426155][T25382] usb 4-1: Using ep0 maxpacket: 8 [ 3371.476520][T25382] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3371.498789][T25382] usb 4-1: config 8 has an invalid interface number: 24 but max is 0 [ 3371.507002][T25382] usb 4-1: config 8 has no interface number 0 [ 3371.519867][T25382] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 3371.533004][T10431] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3371.555913][T25382] usb 4-1: config 8 interface 24 has no altsetting 0 [ 3371.584233][T25382] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 3371.593718][T25382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3371.602651][T25382] usb 4-1: Product: syz [ 3371.684724][T25382] usb 4-1: Manufacturer: syz [ 3371.693464][T30863] udevd[30863]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3371.714104][T25382] usb 4-1: SerialNumber: syz [ 3371.780734][ T1160] FAULT_INJECTION: forcing a failure. [ 3371.780734][ T1160] name failslab, interval 1, probability 0, space 0, times 0 [ 3371.800821][ T1160] CPU: 1 UID: 0 PID: 1160 Comm: syz.2.11839 Not tainted syzkaller #0 PREEMPT(full) [ 3371.800846][ T1160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3371.800854][ T1160] Call Trace: [ 3371.800859][ T1160] [ 3371.800865][ T1160] dump_stack_lvl+0x189/0x250 [ 3371.800883][ T1160] ? __pfx____ratelimit+0x10/0x10 [ 3371.800895][ T1160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3371.800906][ T1160] ? __pfx__printk+0x10/0x10 [ 3371.800923][ T1160] ? __pfx___might_resched+0x10/0x10 [ 3371.800937][ T1160] should_fail_ex+0x414/0x560 [ 3371.800955][ T1160] should_failslab+0xa8/0x100 [ 3371.800972][ T1160] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3371.800987][ T1160] ? __alloc_skb+0x112/0x2d0 [ 3371.801000][ T1160] __alloc_skb+0x112/0x2d0 [ 3371.801012][ T1160] netlink_sendmsg+0x5c6/0xb30 [ 3371.801029][ T1160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3371.801041][ T1160] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3371.801052][ T1160] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3371.801063][ T1160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3371.801074][ T1160] __sock_sendmsg+0x21c/0x270 [ 3371.801091][ T1160] sock_write_iter+0x258/0x330 [ 3371.801107][ T1160] ? __pfx_sock_write_iter+0x10/0x10 [ 3371.801136][ T1160] do_iter_readv_writev+0x61c/0x8b0 [ 3371.801155][ T1160] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 3371.801168][ T1160] ? common_file_perm+0x1b5/0x230 [ 3371.801180][ T1160] ? bpf_lsm_file_permission+0x9/0x20 [ 3371.801191][ T1160] ? security_file_permission+0x75/0x290 [ 3371.801206][ T1160] ? rw_verify_area+0x255/0x4d0 [ 3371.801220][ T1160] vfs_writev+0x31a/0x960 [ 3371.801232][ T1160] ? __lock_acquire+0xab9/0xd20 [ 3371.801248][ T1160] ? __pfx_vfs_writev+0x10/0x10 [ 3371.801264][ T1160] ? __fget_files+0x2a/0x420 [ 3371.801275][ T1160] ? __fget_files+0x3a0/0x420 [ 3371.801283][ T1160] ? __fget_files+0x2a/0x420 [ 3371.801296][ T1160] do_writev+0x14d/0x2d0 [ 3371.801307][ T1160] ? __pfx_do_writev+0x10/0x10 [ 3371.801316][ T1160] ? rcu_is_watching+0x15/0xb0 [ 3371.801328][ T1160] ? do_syscall_64+0xbe/0x3b0 [ 3371.801342][ T1160] do_syscall_64+0xfa/0x3b0 [ 3371.801352][ T1160] ? lockdep_hardirqs_on+0x9c/0x150 [ 3371.801362][ T1160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3371.801371][ T1160] ? clear_bhb_loop+0x60/0xb0 [ 3371.801383][ T1160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3371.801392][ T1160] RIP: 0033:0x7f52aa78eec9 [ 3371.801403][ T1160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3371.801411][ T1160] RSP: 002b:00007f52ab6ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3371.801423][ T1160] RAX: ffffffffffffffda RBX: 00007f52aa9e5fa0 RCX: 00007f52aa78eec9 [ 3371.801430][ T1160] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000007 [ 3371.801436][ T1160] RBP: 00007f52ab6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 3371.801442][ T1160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3371.801448][ T1160] R13: 00007f52aa9e6038 R14: 00007f52aa9e5fa0 R15: 00007f52aab0fa28 [ 3371.801463][ T1160] [ 3372.104489][ C1] vkms_vblank_simulate: vblank timer overrun [ 3373.421615][T26698] usb 5-1: USB disconnect, device number 78 [ 3373.444891][ T1132] delete_channel: no stack [ 3374.728535][T25382] vmk80xx 4-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 3374.808977][T25382] usb 4-1: USB disconnect, device number 23 [ 3375.569367][T25382] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 3375.724595][T25382] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3375.741504][T25382] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3375.766725][T25382] usb 5-1: config 220 interface 0 has no altsetting 0 [ 3375.787660][T25382] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3375.810987][T25382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3375.832970][T25382] usb 5-1: Product: syz [ 3375.841898][T25382] usb 5-1: Manufacturer: syz [ 3375.869386][T25382] usb 5-1: SerialNumber: syz [ 3376.628478][ T1254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3376.656085][ T1254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3376.671931][ T1253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3376.684259][ T1253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3379.193253][ T1247] delete_channel: no stack [ 3379.369674][T25382] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 3379.376089][T25382] usb 5-1: No valid video chain found. [ 3379.428105][T25382] usb 5-1: USB disconnect, device number 79 [ 3380.118908][ T1323] fuse: Bad value for 'fd' [ 3381.887447][T13243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3381.902921][T13243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3381.913837][T13243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3381.926190][T13243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3381.937402][T13243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3382.718573][ T1464] fuse: Bad value for 'fd' [ 3382.953941][ T1355] chnl_net:caif_netlink_parms(): no params data found [ 3383.483993][ T1355] bridge0: port 1(bridge_slave_0) entered blocking state [ 3383.493608][ T1355] bridge0: port 1(bridge_slave_0) entered disabled state [ 3383.514871][ T1355] bridge_slave_0: entered allmulticast mode [ 3383.538275][ T1355] bridge_slave_0: entered promiscuous mode [ 3383.674156][ T1355] bridge0: port 2(bridge_slave_1) entered blocking state [ 3383.688587][ T1355] bridge0: port 2(bridge_slave_1) entered disabled state [ 3383.698677][ T1355] bridge_slave_1: entered allmulticast mode [ 3383.711421][ T1355] bridge_slave_1: entered promiscuous mode [ 3383.892181][ T1355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3383.979483][ T1355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3383.989450][T27607] Bluetooth: hci3: command tx timeout [ 3384.002296][ T1334] delete_channel: no stack [ 3384.172943][ T1355] team0: Port device team_slave_0 added [ 3384.188152][ T1355] team0: Port device team_slave_1 added [ 3384.276432][ T1355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3384.285637][ T1355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3384.327194][ T1355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3384.351160][ T1355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3384.358130][ T1355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3384.393972][ T1355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3384.451628][T12832] team0: Port device netdevsim0 removed [ 3384.596312][ T1355] hsr_slave_0: entered promiscuous mode [ 3384.615794][ T1355] hsr_slave_1: entered promiscuous mode [ 3384.627673][ T1355] debugfs: 'hsr0' already exists in 'hsr' [ 3384.667641][ T1355] Cannot create hsr debugfs directory [ 3384.725204][ T1657] netlink: 1792 bytes leftover after parsing attributes in process `syz.2.11889'. [ 3385.762167][ T1742] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 3386.069276][T27607] Bluetooth: hci3: command tx timeout [ 3386.109546][T12832] dummy0: left allmulticast mode [ 3386.114970][T12832] dummy0: left promiscuous mode [ 3386.179925][T12832] bridge0: port 3(dummy0) entered disabled state [ 3386.206331][T12832] bridge_slave_1: left allmulticast mode [ 3386.219749][T12832] bridge_slave_1: left promiscuous mode [ 3386.232106][T12832] bridge0: port 2(bridge_slave_1) entered disabled state [ 3386.283331][T12832] bridge_slave_0: left allmulticast mode [ 3386.297985][T12832] bridge_slave_0: left promiscuous mode [ 3386.322029][T12832] bridge0: port 1(bridge_slave_0) entered disabled state [ 3387.171204][T12832] veth5: left allmulticast mode [ 3387.176311][T12832] veth5: left promiscuous mode [ 3387.184386][T12832] bridge1: port 1(veth5) entered disabled state [ 3387.222694][T12832] veth7: left allmulticast mode [ 3387.227801][T12832] veth7: left promiscuous mode [ 3387.233949][T12832] bridge2: port 1(veth7) entered disabled state [ 3387.248980][T12832] veth9: left allmulticast mode [ 3387.254738][T12832] veth9: left promiscuous mode [ 3387.261555][T12832] bridge3: port 1(veth9) entered disabled state [ 3387.276920][T12832] veth11: left allmulticast mode [ 3387.285552][T12832] veth11: left promiscuous mode [ 3387.305908][T12832] bridge4: port 1(veth11) entered disabled state [ 3387.318107][T12832] veth13: left allmulticast mode [ 3387.323450][T12832] veth13: left promiscuous mode [ 3387.328742][T12832] bridge5: port 1(veth13) entered disabled state [ 3387.343284][T12832] veth15: left allmulticast mode [ 3387.348290][T12832] veth15: left promiscuous mode [ 3387.354675][T12832] bridge6: port 1(veth15) entered disabled state [ 3387.365669][T12832] veth17: left allmulticast mode [ 3387.371892][T12832] veth17: left promiscuous mode [ 3387.377085][T12832] bridge7: port 1(veth17) entered disabled state [ 3387.391375][T12832] veth0_to_bond: left allmulticast mode [ 3387.398356][T12832] veth0_to_bond: left promiscuous mode [ 3387.406146][T12832] bridge10: port 2(veth0_to_bond) entered disabled state [ 3387.417211][T12832] veth23: left allmulticast mode [ 3387.424411][T12832] veth23: left promiscuous mode [ 3387.430517][T12832] bridge10: port 1(veth23) entered disabled state [ 3387.955091][ C0] vkms_vblank_simulate: vblank timer overrun [ 3388.142861][ C0] vkms_vblank_simulate: vblank timer overrun [ 3388.170587][T27607] Bluetooth: hci3: command tx timeout [ 3388.292738][ T1777] input: syz1 as /devices/virtual/input/input321 [ 3388.336766][ C0] vkms_vblank_simulate: vblank timer overrun [ 3388.423106][ C0] vkms_vblank_simulate: vblank timer overrun [ 3389.194286][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.209381][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.605916][ C0] vkms_vblank_simulate: vblank timer overrun [ 3389.733153][ T1795] netlink: 'syz.4.11908': attribute type 21 has an invalid length. [ 3389.794302][ T1796] netlink: 'syz.4.11908': attribute type 21 has an invalid length. [ 3390.219027][ C0] vkms_vblank_simulate: vblank timer overrun [ 3390.242106][T13243] Bluetooth: hci3: command tx timeout [ 3390.702517][ C0] vkms_vblank_simulate: vblank timer overrun [ 3390.753807][ C0] vkms_vblank_simulate: vblank timer overrun [ 3391.520200][T12832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3391.538030][T12832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3391.569549][T12832] bond0 (unregistering): Released all slaves [ 3391.678895][ T1795] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11908'. [ 3391.699827][ T1796] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11908'. [ 3392.077245][T12832] tipc: Disabling bearer [ 3392.101118][T12832] tipc: Disabling bearer [ 3392.155398][T12832] tipc: Left network mode [ 3393.948067][ T1355] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3393.972205][ T1355] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3394.038896][ T1355] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3394.079664][T25382] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 3394.087371][T21902] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 3394.105396][T12832] hsr_slave_0: left promiscuous mode [ 3394.125790][T12832] hsr_slave_1: left promiscuous mode [ 3394.137593][T12832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3394.160602][T12832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3394.260686][T25382] usb 5-1: Using ep0 maxpacket: 32 [ 3394.276057][T25382] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 3394.293911][T21902] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3394.305020][T25382] usb 5-1: config 0 has no interface number 0 [ 3394.319199][T21902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3394.338985][T25382] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 3394.360297][T21902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3394.373964][T25382] usb 5-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 3394.387492][T25382] usb 5-1: Product: syz [ 3394.410663][T21902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3394.451948][T25382] usb 5-1: Manufacturer: syz [ 3394.480731][T25382] usb 5-1: SerialNumber: syz [ 3394.554510][T21902] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3394.566821][T21902] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3394.576484][T21902] usb 4-1: Manufacturer: syz [ 3394.583750][T25382] usb 5-1: config 0 descriptor?? [ 3394.594476][T25382] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 3394.608469][T25382] usb 5-1: selecting invalid altsetting 1 [ 3394.614485][T25382] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 3394.627315][T21902] usb 4-1: config 0 descriptor?? [ 3394.666446][T25382] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3394.687024][T25382] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 3394.696820][T25382] usb 5-1: media controller created [ 3394.786833][T25382] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3394.817667][T12832] team0 (unregistering): Port device vlan2 removed [ 3394.842177][ T1938] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11923'. [ 3394.927392][ T1938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11923'. [ 3395.010835][T25382] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 3395.018460][T25382] zl10353_read_register: readreg error (reg=127, ret==-32) [ 3395.054329][ T1925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3395.067264][ T1925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3395.162271][T21902] appleir 0003:05AC:8243.0086: unknown main item tag 0x0 [ 3395.210181][T25382] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 3395.267957][T12832] team0 (unregistering): Port device veth3 removed [ 3395.282573][T21902] appleir 0003:05AC:8243.0086: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 3395.435982][T25382] usb 5-1: USB disconnect, device number 80 [ 3396.515804][ T2020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3396.532032][ T2020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3397.025617][T12832] team0 (unregistering): Port device team_slave_1 removed [ 3397.162975][T12832] team0 (unregistering): Port device team_slave_0 removed [ 3397.546403][ T2028] netlink: 'syz.2.11932': attribute type 13 has an invalid length. [ 3397.926923][T25382] usb 4-1: USB disconnect, device number 24 [ 3398.515847][ T1355] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3398.721113][ T2048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3399.557584][ T1355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3399.575870][ T2074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11941'. [ 3399.726907][ T1355] 8021q: adding VLAN 0 to HW filter on device team0 [ 3399.814046][T17275] bridge0: port 1(bridge_slave_0) entered blocking state [ 3399.821282][T17275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3400.008883][ T1422] bridge0: port 2(bridge_slave_1) entered blocking state [ 3400.016176][ T1422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3400.309212][ T2092] syzkaller1: entered promiscuous mode [ 3400.314972][ T2092] syzkaller1: entered allmulticast mode [ 3400.896726][ T2107] trusted_key: encrypted_key: insufficient parameters specified [ 3400.910437][ T1355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3401.262065][ T1355] veth0_vlan: entered promiscuous mode [ 3401.308165][ T1355] veth1_vlan: entered promiscuous mode [ 3401.447867][ T1355] veth0_macvtap: entered promiscuous mode [ 3401.471046][ T1355] veth1_macvtap: entered promiscuous mode [ 3401.505435][ T1355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3401.560904][ T1355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3401.582333][ T566] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3401.595348][ T566] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3401.613987][ T566] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3401.677102][ T566] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3401.868837][ T2118] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11950'. [ 3401.927670][ T566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3401.943350][ T566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3402.006935][ T1422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3402.025482][ T1422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3402.232414][ T2136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11873'. [ 3402.415643][ T2142] FAULT_INJECTION: forcing a failure. [ 3402.415643][ T2142] name failslab, interval 1, probability 0, space 0, times 0 [ 3402.458637][ T2142] CPU: 1 UID: 0 PID: 2142 Comm: syz.4.11957 Not tainted syzkaller #0 PREEMPT(full) [ 3402.458656][ T2142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3402.458666][ T2142] Call Trace: [ 3402.458672][ T2142] [ 3402.458678][ T2142] dump_stack_lvl+0x189/0x250 [ 3402.458697][ T2142] ? __pfx____ratelimit+0x10/0x10 [ 3402.458710][ T2142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3402.458722][ T2142] ? __pfx__printk+0x10/0x10 [ 3402.458738][ T2142] ? __pfx___might_resched+0x10/0x10 [ 3402.458749][ T2142] ? fs_reclaim_acquire+0x7d/0x100 [ 3402.458776][ T2142] should_fail_ex+0x414/0x560 [ 3402.458804][ T2142] should_failslab+0xa8/0x100 [ 3402.458822][ T2142] __kmalloc_noprof+0xcb/0x4f0 [ 3402.458836][ T2142] ? tomoyo_encode+0x28b/0x550 [ 3402.458851][ T2142] tomoyo_encode+0x28b/0x550 [ 3402.458864][ T2142] tomoyo_realpath_from_path+0x58d/0x5d0 [ 3402.458881][ T2142] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3402.458896][ T2142] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3402.458912][ T2142] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3402.458935][ T2142] ? __lock_acquire+0xab9/0xd20 [ 3402.458965][ T2142] ? __fget_files+0x2a/0x420 [ 3402.458977][ T2142] ? __fget_files+0x2a/0x420 [ 3402.458985][ T2142] ? __fget_files+0x3a0/0x420 [ 3402.459000][ T2142] ? __fget_files+0x2a/0x420 [ 3402.459019][ T2142] security_file_ioctl+0xcb/0x2d0 [ 3402.459068][ T2142] __se_sys_ioctl+0x47/0x170 [ 3402.459090][ T2142] do_syscall_64+0xfa/0x3b0 [ 3402.459107][ T2142] ? lockdep_hardirqs_on+0x9c/0x150 [ 3402.459125][ T2142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3402.459139][ T2142] ? clear_bhb_loop+0x60/0xb0 [ 3402.459156][ T2142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3402.459176][ T2142] RIP: 0033:0x7f8f8af8eec9 [ 3402.459193][ T2142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3402.459206][ T2142] RSP: 002b:00007f8f8bee2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3402.459225][ T2142] RAX: ffffffffffffffda RBX: 00007f8f8b1e5fa0 RCX: 00007f8f8af8eec9 [ 3402.459236][ T2142] RDX: 00002000000010c0 RSI: 00000000c0cc5616 RDI: 0000000000000003 [ 3402.459243][ T2142] RBP: 00007f8f8bee2090 R08: 0000000000000000 R09: 0000000000000000 [ 3402.459249][ T2142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3402.459255][ T2142] R13: 00007f8f8b1e6038 R14: 00007f8f8b1e5fa0 R15: 00007f8f8b30fa28 [ 3402.459271][ T2142] [ 3402.787912][ T2142] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3403.365074][ C1] vkms_vblank_simulate: vblank timer overrun [ 3403.511186][ T2159] tipc: Started in network mode [ 3403.578501][ T2159] tipc: Node identity ea3c42ac1098, cluster identity 4711 [ 3403.599795][ T2159] tipc: Enabled bearer , priority 0 [ 3403.914956][ T2155] tipc: Resetting bearer [ 3403.985441][ T2154] tipc: Disabling bearer [ 3404.619182][T16063] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 3404.759644][T16063] usb 4-1: device descriptor read/64, error -71 [ 3405.019228][T16063] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 3405.209571][T16063] usb 4-1: device descriptor read/64, error -71 [ 3405.330154][T16063] usb usb4-port1: attempt power cycle [ 3405.705111][T16063] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 3405.760060][T16063] usb 4-1: device descriptor read/8, error -71 [ 3405.767063][T23130] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 3405.814796][ C1] vkms_vblank_simulate: vblank timer overrun [ 3406.049134][T23130] usb 5-1: Using ep0 maxpacket: 32 [ 3406.066751][T23130] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 3406.087628][T23130] usb 5-1: config 0 has no interface number 0 [ 3406.133095][T23130] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3406.149851][T23130] usb 5-1: config 0 interface 85 has no altsetting 0 [ 3406.180804][T23130] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 3406.183751][T16063] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 3406.201910][T23130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3406.210465][T23130] usb 5-1: Product: syz [ 3406.219295][T23130] usb 5-1: Manufacturer: syz [ 3406.229734][T23130] usb 5-1: SerialNumber: syz [ 3406.292067][T23130] usb 5-1: config 0 descriptor?? [ 3406.298324][T16063] usb 4-1: device descriptor read/8, error -71 [ 3406.323321][ T2249] netlink: 'syz.0.11978': attribute type 2 has an invalid length. [ 3406.479648][T16063] usb usb4-port1: unable to enumerate USB device [ 3406.942156][ T2277] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11979'. [ 3406.954914][ T2277] netlink: 'syz.5.11979': attribute type 7 has an invalid length. [ 3406.963910][ T2277] netlink: 'syz.5.11979': attribute type 8 has an invalid length. [ 3406.972429][ T2277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11979'. [ 3407.043100][ T2277] syz_tun: entered promiscuous mode [ 3407.065411][ T2277] batadv_slave_1: entered promiscuous mode [ 3407.083712][ T2277] erspan0: entered promiscuous mode [ 3407.095850][ T2277] debugfs: 'hsr1' already exists in 'hsr' [ 3407.101781][ T2277] Cannot create hsr debugfs directory [ 3407.368799][T23130] appletouch 5-1:0.85: Geyser mode initialized. [ 3407.411214][T23130] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input323 [ 3407.631818][T16063] usb 5-1: USB disconnect, device number 81 [ 3407.631979][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 3407.641943][ T2290] netlink: 'syz.0.11980': attribute type 4 has an invalid length. [ 3407.944147][ T2308] syzkaller1: entered promiscuous mode [ 3407.979848][ T2308] syzkaller1: entered allmulticast mode [ 3408.229777][T16063] appletouch 5-1:0.85: input: appletouch disconnected [ 3408.319522][T25382] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 3408.479219][T25382] usb 4-1: Using ep0 maxpacket: 8 [ 3408.504245][T25382] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3408.525586][T25382] usb 4-1: config 8 has an invalid interface number: 24 but max is 0 [ 3408.536124][T25382] usb 4-1: config 8 has no interface number 0 [ 3408.555297][T25382] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 3408.570507][T25382] usb 4-1: config 8 interface 24 has no altsetting 0 [ 3408.619483][T25382] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 3408.637300][T25382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3408.673429][T25382] usb 4-1: Product: syz [ 3408.697802][T25382] usb 4-1: Manufacturer: syz [ 3408.710836][T25382] usb 4-1: SerialNumber: syz [ 3408.800750][ T2351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11989'. [ 3408.972324][ T2354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11990'. [ 3409.371469][ T2370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11992'. [ 3410.878482][ T2398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11997'. [ 3411.401071][T25382] vmk80xx 4-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 3411.419424][T26698] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 3411.481261][T25382] usb 4-1: USB disconnect, device number 29 [ 3411.600716][ T2430] netlink: 364 bytes leftover after parsing attributes in process `syz.5.12000'. [ 3411.640971][T26698] usb 5-1: Using ep0 maxpacket: 8 [ 3411.661511][T26698] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 3411.685383][T26698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3411.736156][T26698] usb 5-1: config 0 descriptor?? [ 3411.983250][T26698] usb 5-1: USB disconnect, device number 82 [ 3412.068564][ T2456] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12005'. [ 3413.356652][ T2515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12013'. [ 3413.422108][ T2515] syzkaller1: entered promiscuous mode [ 3413.429551][ T2515] syzkaller1: entered allmulticast mode [ 3414.732753][ T2544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12017'. [ 3415.159823][T26698] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 3415.314774][T26698] usb 5-1: Using ep0 maxpacket: 32 [ 3415.328358][T26698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3415.509804][T26698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3415.623776][T26698] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3415.807707][T26698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3415.908528][T26698] usb 5-1: config 0 descriptor?? [ 3415.949614][T26698] hub 5-1:0.0: USB hub found [ 3416.120897][ T2581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12022'. [ 3416.172260][T26698] hub 5-1:0.0: 1 port detected [ 3416.203364][ T2583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12022'. [ 3416.240020][T16063] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 3416.416635][T16063] usb 6-1: config 0 has an invalid interface number: 65 but max is 3 [ 3416.450502][T16063] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3416.518527][T16063] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 3416.679992][T16063] usb 6-1: config 0 has no interface number 0 [ 3416.693515][T16063] usb 6-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=91.34 [ 3416.703063][T16063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3416.712044][T16063] usb 6-1: Product: syz [ 3416.716319][T16063] usb 6-1: Manufacturer: syz [ 3416.721014][T16063] usb 6-1: SerialNumber: syz [ 3416.727993][T16063] usb 6-1: config 0 descriptor?? [ 3416.779569][T26698] hub 5-1:0.0: activate --> -90 [ 3416.986430][T16063] flexcop_usb: set interface failed. [ 3417.009825][T16063] b2c2_flexcop_usb 6-1:0.65: probe with driver b2c2_flexcop_usb failed with error -22 [ 3417.105422][T16063] usb 6-1: USB disconnect, device number 2 [ 3417.120444][ T2611] fuse: Bad value for 'fd' [ 3417.936075][T26698] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 3418.291433][T25382] usb 5-1: USB disconnect, device number 83 [ 3419.729346][ T2693] netlink: 'syz.0.12036': attribute type 12 has an invalid length. [ 3419.821708][ T2693] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12036'. [ 3419.900869][ T2693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12036'. [ 3420.159515][T16063] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 3420.316339][ T2725] bridge0: entered promiscuous mode [ 3420.322283][ T2725] macsec1: entered promiscuous mode [ 3420.332847][ T2722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12038'. [ 3420.413561][T16063] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 3420.441000][T16063] usb 5-1: config 0 has no interface number 0 [ 3420.447348][T16063] usb 5-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 3420.465266][T16063] usb 5-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 3420.486710][T16063] usb 5-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 3420.637880][T16063] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 3420.674479][T16063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3420.712444][T16063] usb 5-1: Product: syz [ 3420.780840][T16063] usb 5-1: Manufacturer: syz [ 3420.785492][T16063] usb 5-1: SerialNumber: syz [ 3420.822734][T16063] usb 5-1: config 0 descriptor?? [ 3420.848683][ T2698] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3420.870333][ T2698] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3420.889291][T26698] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 3421.041140][T26698] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3421.092282][T26698] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3421.119477][T26698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3421.131322][ T2698] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3421.311139][T26698] usb 4-1: Product: syz [ 3421.315525][T26698] usb 4-1: Manufacturer: syz [ 3421.320798][T26698] usb 4-1: SerialNumber: syz [ 3421.719931][ T2698] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3421.740574][T16063] qmi_wwan 5-1:0.197: probe with driver qmi_wwan failed with error -22 [ 3422.010014][T25382] usb 5-1: USB disconnect, device number 84 [ 3422.239192][T16063] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 3422.463205][T16063] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3422.532619][T16063] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3422.557784][T16063] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3422.644516][T16063] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3422.677594][T16063] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3422.771881][T26698] cdc_ncm 4-1:1.0: bind() failure [ 3422.773862][T30863] udevd[30863]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3422.866953][T26698] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 3423.011302][T16063] usb 6-1: USB disconnect, device number 3 [ 3423.037915][ T2768] delete_channel: no stack [ 3423.059911][T26698] cdc_ncm 4-1:1.1: bind() failure [ 3423.135923][T26698] usb 4-1: USB disconnect, device number 30 [ 3423.599192][T16063] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 3423.671635][ T2866] input: syz1 as /devices/virtual/input/input324 [ 3423.782977][T16063] usb 5-1: Using ep0 maxpacket: 32 [ 3423.804797][T16063] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 3423.834403][T16063] usb 5-1: config 0 has no interface number 0 [ 3423.849165][T16063] usb 5-1: config 0 interface 89 has no altsetting 0 [ 3423.878084][T16063] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 3424.009653][T16063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3424.022924][T16063] usb 5-1: Product: syz [ 3424.045875][T16063] usb 5-1: Manufacturer: syz [ 3424.107813][T16063] usb 5-1: SerialNumber: syz [ 3424.136832][ T2866] netlink: 'syz.3.12051': attribute type 1 has an invalid length. [ 3424.283699][T16063] usb 5-1: config 0 descriptor?? [ 3424.326702][T16063] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 3424.418653][ T2876] gretap1: entered allmulticast mode [ 3424.485746][ T2876] bond2: (slave gretap1): making interface the new active one [ 3424.494697][ T2876] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 3424.667186][T16063] em28xx 5-1:0.89: Video interface 89 found: bulk [ 3425.072576][T16063] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 3425.499266][T16063] em28xx 5-1:0.89: AC97 command still being executed: not handled properly! [ 3425.691505][T16063] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 3425.717556][T16063] em28xx 5-1:0.89: board has no eeprom [ 3425.849319][T16063] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 3425.859464][T16063] em28xx 5-1:0.89: analog set to bulk mode. [ 3425.865694][T10431] em28xx 5-1:0.89: Registering V4L2 extension [ 3425.980702][T16063] usb 5-1: USB disconnect, device number 85 [ 3426.039625][T10431] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 3426.052690][T16063] em28xx 5-1:0.89: Disconnecting em28xx [ 3426.058384][T10431] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 3426.066097][T10431] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 3426.088778][T10431] em28xx 5-1:0.89: No AC97 audio processor [ 3426.158777][T10431] usb 5-1: Decoder not found [ 3426.180521][T10431] em28xx 5-1:0.89: failed to create media graph [ 3426.186845][T10431] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 3426.265033][T10431] em28xx 5-1:0.89: Registering snapshot button... [ 3426.273701][ T2961] ================================================================== [ 3426.281811][ T2961] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 3426.289383][ T2961] Read of size 8 at addr ffff88803c4ec740 by task v4l_id/2961 [ 3426.296851][ T2961] [ 3426.299186][ T2961] CPU: 0 UID: 0 PID: 2961 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 3426.299208][ T2961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3426.299220][ T2961] Call Trace: [ 3426.299227][ T2961] [ 3426.299234][ T2961] dump_stack_lvl+0x189/0x250 [ 3426.299259][ T2961] ? rcu_is_watching+0x15/0xb0 [ 3426.299276][ T2961] ? __kasan_check_byte+0x12/0x40 [ 3426.299299][ T2961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3426.299317][ T2961] ? rcu_is_watching+0x15/0xb0 [ 3426.299333][ T2961] ? lock_release+0x4b/0x3e0 [ 3426.299356][ T2961] ? __virt_addr_valid+0x1c8/0x5c0 [ 3426.299376][ T2961] ? __virt_addr_valid+0x4a5/0x5c0 [ 3426.299397][ T2961] print_report+0xca/0x240 [ 3426.299413][ T2961] ? v4l2_fh_open+0xc7/0x430 [ 3426.299431][ T2961] kasan_report+0x118/0x150 [ 3426.299454][ T2961] ? v4l2_fh_open+0xc7/0x430 [ 3426.299474][ T2961] v4l2_fh_open+0xc7/0x430 [ 3426.299511][ T2961] em28xx_v4l2_open+0x157/0x9a0 [ 3426.299540][ T2961] v4l2_open+0x20f/0x360 [ 3426.299560][ T2961] chrdev_open+0x4cc/0x5e0 [ 3426.299578][ T2961] ? __pfx_chrdev_open+0x10/0x10 [ 3426.299594][ T2961] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 3426.299620][ T2961] ? __pfx_chrdev_open+0x10/0x10 [ 3426.299635][ T2961] do_dentry_open+0x953/0x13f0 [ 3426.299658][ T2961] vfs_open+0x3b/0x340 [ 3426.299675][ T2961] ? path_openat+0x2ecd/0x3830 [ 3426.299695][ T2961] path_openat+0x2ee5/0x3830 [ 3426.299712][ T2961] ? arch_stack_walk+0xfc/0x150 [ 3426.299738][ T2961] ? stack_depot_save_flags+0x40/0x860 [ 3426.299768][ T2961] ? __pfx_path_openat+0x10/0x10 [ 3426.299786][ T2961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3426.299811][ T2961] do_filp_open+0x1fa/0x410 [ 3426.299828][ T2961] ? __lock_acquire+0xab9/0xd20 [ 3426.299848][ T2961] ? __pfx_do_filp_open+0x10/0x10 [ 3426.299871][ T2961] ? _raw_spin_unlock+0x28/0x50 [ 3426.299892][ T2961] ? alloc_fd+0x64c/0x6c0 [ 3426.299915][ T2961] do_sys_openat2+0x121/0x1c0 [ 3426.299929][ T2961] ? __pfx_do_sys_openat2+0x10/0x10 [ 3426.299945][ T2961] ? exc_page_fault+0x76/0xf0 [ 3426.299972][ T2961] ? do_user_addr_fault+0xc8a/0x1390 [ 3426.299996][ T2961] __x64_sys_openat+0x138/0x170 [ 3426.300015][ T2961] do_syscall_64+0xfa/0x3b0 [ 3426.300031][ T2961] ? lockdep_hardirqs_on+0x9c/0x150 [ 3426.300046][ T2961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3426.300062][ T2961] ? clear_bhb_loop+0x60/0xb0 [ 3426.300081][ T2961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3426.300098][ T2961] RIP: 0033:0x7fa16fea7407 [ 3426.300115][ T2961] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 3426.300130][ T2961] RSP: 002b:00007fff223bb3c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 3426.300148][ T2961] RAX: ffffffffffffffda RBX: 00007fa170606880 RCX: 00007fa16fea7407 [ 3426.300161][ T2961] RDX: 0000000000000000 RSI: 00007fff223bbf1b RDI: ffffffffffffff9c [ 3426.300174][ T2961] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 3426.300184][ T2961] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 3426.300195][ T2961] R13: 00007fff223bb610 R14: 00007fa17076d000 R15: 000055dafb7734d8 [ 3426.300211][ T2961] [ 3426.300216][ T2961] [ 3426.608815][ T2961] Allocated by task 10431: [ 3426.613222][ T2961] kasan_save_track+0x3e/0x80 [ 3426.617899][ T2961] __kasan_kmalloc+0x93/0xb0 [ 3426.622492][ T2961] __kmalloc_cache_noprof+0x230/0x3d0 [ 3426.627875][ T2961] em28xx_v4l2_init+0x10b/0x2e70 [ 3426.632820][ T2961] em28xx_init_extension+0x120/0x1c0 [ 3426.638109][ T2961] process_scheduled_works+0xae1/0x17b0 [ 3426.643684][ T2961] worker_thread+0x8a0/0xda0 [ 3426.648265][ T2961] kthread+0x70e/0x8a0 [ 3426.652330][ T2961] ret_from_fork+0x439/0x7d0 [ 3426.656913][ T2961] ret_from_fork_asm+0x1a/0x30 [ 3426.661672][ T2961] [ 3426.663985][ T2961] Freed by task 10431: [ 3426.668073][ T2961] kasan_save_track+0x3e/0x80 [ 3426.672754][ T2961] kasan_save_free_info+0x46/0x50 [ 3426.677776][ T2961] __kasan_slab_free+0x5b/0x80 [ 3426.682538][ T2961] kfree+0x18e/0x440 [ 3426.686436][ T2961] em28xx_v4l2_init+0x1683/0x2e70 [ 3426.691462][ T2961] em28xx_init_extension+0x120/0x1c0 [ 3426.696746][ T2961] process_scheduled_works+0xae1/0x17b0 [ 3426.702373][ T2961] worker_thread+0x8a0/0xda0 [ 3426.706994][ T2961] kthread+0x70e/0x8a0 [ 3426.711059][ T2961] ret_from_fork+0x439/0x7d0 [ 3426.715640][ T2961] ret_from_fork_asm+0x1a/0x30 [ 3426.720492][ T2961] [ 3426.722812][ T2961] The buggy address belongs to the object at ffff88803c4ec000 [ 3426.722812][ T2961] which belongs to the cache kmalloc-8k of size 8192 [ 3426.736857][ T2961] The buggy address is located 1856 bytes inside of [ 3426.736857][ T2961] freed 8192-byte region [ffff88803c4ec000, ffff88803c4ee000) [ 3426.750826][ T2961] [ 3426.753153][ T2961] The buggy address belongs to the physical page: [ 3426.759643][ T2961] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3c4e8 [ 3426.768409][ T2961] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3426.776990][ T2961] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3426.784973][ T2961] page_type: f5(slab) [ 3426.788965][ T2961] raw: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001 [ 3426.797554][ T2961] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 3426.806148][ T2961] head: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001 [ 3426.814814][ T2961] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 3426.823580][ T2961] head: 00fff00000000003 ffffea0000f13a01 00000000ffffffff 00000000ffffffff [ 3426.832352][ T2961] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 3426.841101][ T2961] page dumped because: kasan: bad access detected [ 3426.847684][ T2961] page_owner tracks the page as allocated [ 3426.853389][ T2961] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 18297, tgid 18295 (syz.2.9314), ts 2832174236715, free_ts 2831301360252 [ 3426.876314][ T2961] post_alloc_hook+0x240/0x2a0 [ 3426.881089][ T2961] get_page_from_freelist+0x21e4/0x22c0 [ 3426.886622][ T2961] __alloc_frozen_pages_noprof+0x181/0x370 [ 3426.892452][ T2961] alloc_pages_mpol+0x232/0x4a0 [ 3426.897306][ T2961] allocate_slab+0x8a/0x370 [ 3426.901814][ T2961] ___slab_alloc+0xbeb/0x1420 [ 3426.906490][ T2961] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 3426.913076][ T2961] kmalloc_reserve+0x136/0x290 [ 3426.917924][ T2961] __alloc_skb+0x142/0x2d0 [ 3426.922336][ T2961] netlink_dump+0x167/0xe90 [ 3426.926836][ T2961] netlink_recvmsg+0x676/0xa30 [ 3426.931597][ T2961] sock_recvmsg_nosec+0x183/0x1c0 [ 3426.936707][ T2961] ____sys_recvmsg+0x3aa/0x460 [ 3426.941464][ T2961] ___sys_recvmsg+0x1b5/0x510 [ 3426.946139][ T2961] do_recvmmsg+0x307/0x770 [ 3426.950552][ T2961] __x64_sys_recvmmsg+0x1af/0x240 [ 3426.955583][ T2961] page last free pid 18274 tgid 18272 stack trace: [ 3426.962075][ T2961] __free_frozen_pages+0xbc4/0xd30 [ 3426.967185][ T2961] __put_partials+0x156/0x1a0 [ 3426.971956][ T2961] put_cpu_partial+0x17c/0x250 [ 3426.976719][ T2961] __slab_free+0x2d5/0x3c0 [ 3426.981168][ T2961] qlist_free_all+0x97/0x140 [ 3426.985756][ T2961] kasan_quarantine_reduce+0x148/0x160 [ 3426.991206][ T2961] __kasan_slab_alloc+0x22/0x80 [ 3426.996052][ T2961] kmem_cache_alloc_bulk_noprof+0x4e0/0x790 [ 3427.001944][ T2961] __io_alloc_req_refill+0x9d/0x280 [ 3427.007138][ T2961] io_submit_sqes+0xbfd/0x1d30 [ 3427.011908][ T2961] io_sq_thread+0xc0b/0x1df0 [ 3427.016493][ T2961] ret_from_fork+0x439/0x7d0 [ 3427.021079][ T2961] ret_from_fork_asm+0x1a/0x30 [ 3427.025851][ T2961] [ 3427.028168][ T2961] Memory state around the buggy address: [ 3427.033792][ T2961] ffff88803c4ec600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3427.041846][ T2961] ffff88803c4ec680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3427.049997][ T2961] >ffff88803c4ec700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3427.058051][ T2961] ^ [ 3427.064198][ T2961] ffff88803c4ec780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3427.072256][ T2961] ffff88803c4ec800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3427.080308][ T2961] ================================================================== [ 3427.099482][T10431] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input325 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3427.198360][T10431] em28xx 5-1:0.89: Remote control support is not available for this card. [ 3427.207411][T16063] em28xx 5-1:0.89: Closing input extension [ 3427.221177][T16063] em28xx 5-1:0.89: Deregistering snapshot button [ 3427.411008][ T2961] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3427.418263][ T2961] CPU: 1 UID: 0 PID: 2961 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 3427.427302][ T2961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3427.437378][ T2961] Call Trace: [ 3427.440677][ T2961] [ 3427.443628][ T2961] dump_stack_lvl+0x99/0x250 [ 3427.448331][ T2961] ? __asan_memcpy+0x40/0x70 [ 3427.453116][ T2961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3427.458334][ T2961] ? __pfx__printk+0x10/0x10 [ 3427.462950][ T2961] vpanic+0x281/0x750 [ 3427.466938][ T2961] ? preempt_schedule+0xae/0xc0 [ 3427.471879][ T2961] ? __pfx_vpanic+0x10/0x10 [ 3427.476375][ T2961] ? preempt_schedule_common+0x83/0xd0 [ 3427.481869][ T2961] ? preempt_schedule+0xae/0xc0 [ 3427.486723][ T2961] ? __pfx_preempt_schedule+0x10/0x10 [ 3427.492182][ T2961] panic+0xb9/0xc0 [ 3427.495903][ T2961] ? __pfx_panic+0x10/0x10 [ 3427.500324][ T2961] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 3427.506229][ T2961] ? v4l2_fh_open+0xc7/0x430 [ 3427.510819][ T2961] check_panic_on_warn+0x89/0xb0 [ 3427.515759][ T2961] ? v4l2_fh_open+0xc7/0x430 [ 3427.520356][ T2961] end_report+0x78/0x160 [ 3427.524603][ T2961] kasan_report+0x129/0x150 [ 3427.529106][ T2961] ? v4l2_fh_open+0xc7/0x430 [ 3427.533699][ T2961] v4l2_fh_open+0xc7/0x430 [ 3427.538155][ T2961] em28xx_v4l2_open+0x157/0x9a0 [ 3427.543019][ T2961] v4l2_open+0x20f/0x360 [ 3427.547353][ T2961] chrdev_open+0x4cc/0x5e0 [ 3427.551775][ T2961] ? __pfx_chrdev_open+0x10/0x10 [ 3427.556737][ T2961] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 3427.563131][ T2961] ? __pfx_chrdev_open+0x10/0x10 [ 3427.568076][ T2961] do_dentry_open+0x953/0x13f0 [ 3427.573111][ T2961] vfs_open+0x3b/0x340 [ 3427.577182][ T2961] ? path_openat+0x2ecd/0x3830 [ 3427.581973][ T2961] path_openat+0x2ee5/0x3830 [ 3427.586569][ T2961] ? arch_stack_walk+0xfc/0x150 [ 3427.591601][ T2961] ? stack_depot_save_flags+0x40/0x860 [ 3427.597095][ T2961] ? __pfx_path_openat+0x10/0x10 [ 3427.602028][ T2961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3427.608104][ T2961] do_filp_open+0x1fa/0x410 [ 3427.612616][ T2961] ? __lock_acquire+0xab9/0xd20 [ 3427.617470][ T2961] ? __pfx_do_filp_open+0x10/0x10 [ 3427.622511][ T2961] ? _raw_spin_unlock+0x28/0x50 [ 3427.627363][ T2961] ? alloc_fd+0x64c/0x6c0 [ 3427.631754][ T2961] do_sys_openat2+0x121/0x1c0 [ 3427.636608][ T2961] ? __pfx_do_sys_openat2+0x10/0x10 [ 3427.641809][ T2961] ? exc_page_fault+0x76/0xf0 [ 3427.646583][ T2961] ? do_user_addr_fault+0xc8a/0x1390 [ 3427.651874][ T2961] __x64_sys_openat+0x138/0x170 [ 3427.656758][ T2961] do_syscall_64+0xfa/0x3b0 [ 3427.661280][ T2961] ? lockdep_hardirqs_on+0x9c/0x150 [ 3427.666476][ T2961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3427.672546][ T2961] ? clear_bhb_loop+0x60/0xb0 [ 3427.677223][ T2961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3427.683111][ T2961] RIP: 0033:0x7fa16fea7407 [ 3427.687523][ T2961] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 3427.707137][ T2961] RSP: 002b:00007fff223bb3c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 3427.715546][ T2961] RAX: ffffffffffffffda RBX: 00007fa170606880 RCX: 00007fa16fea7407 [ 3427.723524][ T2961] RDX: 0000000000000000 RSI: 00007fff223bbf1b RDI: ffffffffffffff9c [ 3427.731581][ T2961] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 3427.739550][ T2961] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 3427.747606][ T2961] R13: 00007fff223bb610 R14: 00007fa17076d000 R15: 000055dafb7734d8 [ 3427.755584][ T2961] [ 3427.758918][ T2961] Kernel Offset: disabled [ 3427.763251][ T2961] Rebooting in 86400 seconds..