last executing test programs: 14.207709434s ago: executing program 4 (id=132): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000080)={0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="12210000552038b14201040000010902380001000000000904005900092582000000000000"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x97, 0x1, 0x0, r5, 0x0}]) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) ioctl$USBDEVFS_BULK(r6, 0x5523, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d0010000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000080011100fe8000000000000000000000000000bbac1e000100000000000000000000000020010000000000000000000000000000fe8800000000000000000000000001012b0200000135000002000200e00000010000000000f7ffffffffffffab1414aa000000000000000000000000fc020000000000000000000000000000fe88000000000000000000000000000133040000ff34000002000200fc010000000000000000000000000001fe800000000000000000000000000035ac1414aa000000000000000000000000fc0200000000000000000000000000013c000000000000000a0008000a01010200000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000fe80000000000000000000000000003f3c0000000535000002000a00e0000002000000000000000000000000fe8000000000000000000000000000bbfc010000000000000000000000000001fc000000000000000000000000000001330400000335000002000200"], 0x1d0}}, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x10, 0xb, {0xb, 0x7, "ac732a036da37d0c2d"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f00000002c0)={0x0, 0xf, 0x1d, "84e5ad776458b63bad222a9f7d7565c8e8d359c007e65ac0f1afc672c4"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}}) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r7, 0x0, 0x0) 12.560101543s ago: executing program 3 (id=139): socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000020b804020240000102030109021b00010106c040090101e30905010200020703030000000000"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x51a9497) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty, 0x0, 0xfffffffc}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b40)=ANY=[@ANYBLOB="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"], 0x5288}}, 0x0) 11.500673486s ago: executing program 1 (id=141): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$USBDEVFS_REAPURB(r3, 0x4004550d, &(0x7f0000000380)) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x541b, 0x20000000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, 0x0, 0x0, &(0x7f0000000380)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcda) 10.047434252s ago: executing program 4 (id=143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) cachestat(r4, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001002200000000000400000000000000100000000000000020"], 0x24, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 9.942154605s ago: executing program 1 (id=144): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$loop(0x0, 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0xffffffff9673e35d]}}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004085}, 0x18) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000040), 0x2, r4, 0xcccccccc}) r8 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x6d, 0x0, &(0x7f0000001040)) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000"], 0x0) 8.471174288s ago: executing program 3 (id=145): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000260b0a0002000180c200000c00000c"], 0x34}, 0x1, 0x0, 0x0, 0x42044}, 0x20040010) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26000411}, 0x800) 8.373368616s ago: executing program 3 (id=146): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x8013, r1, 0xf6690000) r2 = socket$inet(0x2, 0x803, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100), 0x1}, {0x0, 0x56}], 0x2, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x6}) sendmmsg$inet6(r3, &(0x7f0000009000)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)='n', 0x1}], 0x1}}], 0x1, 0x4004850) sendto$inet6(r3, &(0x7f0000002800)="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", 0x1000, 0x48899, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r5, 0x10e, 0x5, &(0x7f0000000080)=""/166, &(0x7f0000000140)=0xa6) 7.80287097s ago: executing program 0 (id=148): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, 0x0, &(0x7f0000000040)) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001ac0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf255200000008000300", @ANYRES32=0x0, @ANYBLOB="04502a00"], 0x20}}, 0x40080) 7.459769716s ago: executing program 0 (id=149): read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) personality(0x4000009) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8918, &(0x7f0000000000)={'ip6tnl0\x00', @random="0200ff7fffff"}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="ffffff62787b2a", @ANYRES32=0x0, @ANYBLOB="0380000080000000"], 0x20}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0x5, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 7.384048592s ago: executing program 4 (id=150): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4, @remote, 0x528}, {0xa, 0x4e23, 0x4068d6a4, @mcast2, 0x9da}, 0xffffffffffffffff, 0x3}}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2, 0x3, 0xf8) sendto$unix(r3, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}}, 0xa0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x90, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0x5}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x60, 0x2, [@TCA_CGROUP_ACT={0x5c, 0x1, [@m_vlan={0x0, 0x2, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x0, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x0, 0x2, {{0x81, 0x3, 0x2, 0x8, 0x4}, 0x10003}}, @TCA_VLAN_PUSH_VLAN_ID={0x0, 0x3, 0xbd9}]}, {0x0, 0x6, "a9d8464c5ab884a68dc47d1b7d8db6aba25e4a91e46025e86423614c3a18d4fcfb5bbd4e232ecda4479e1440815dc84c3963de18b110baef937ad63f8e30e10cd6b6dbac127777074ae19c0e01da73b900eeb103140e4ad1a3bc"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x3, 0x3}}}}, @m_ife={0x0, 0x17, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x0, 0x5, 0x4}, @TCA_IFE_METALST={0x0, 0x6, [@IFE_META_PRIO={0x0, 0x3, @void}, @IFE_META_TCINDEX={0x0, 0x5, @val=0x9}, @IFE_META_PRIO={0x0, 0x3, @void}]}, @TCA_IFE_DMAC={0x0, 0x3, @local}, @TCA_IFE_TYPE={0x0, 0x5, 0x200}, @TCA_IFE_METALST={0x0, 0x6, [@IFE_META_TCINDEX={0x0, 0x5, @void}, @IFE_META_TCINDEX={0x0, 0x5, @val=0x1ed}, @IFE_META_SKBMARK={0x0, 0x1, @val=0x5}]}, @TCA_IFE_PARMS={0x0, 0x1, {{0x8, 0xfffeffff, 0x5, 0x8001, 0x8}}}, @TCA_IFE_METALST={0x0, 0x6, [@IFE_META_TCINDEX={0x0, 0x5, @void}]}]}, {0x0, 0x6, "6187abd7c37c75300b7b9a3f6ee33a5045a6fc5d2986cf429c6f57c115263296944f2bf08b2f98648c11180f54cb6ad529d14624956216158d2d0c58b4965a62716e3ae85afd5fe98c3b66dd05d367e5b4af8d8ddc05f5f69ddfea87ed474cc0612add347ea26ea50e04532c521f8919854ae495683dc5fbb6e34d6002c80d8546437b3e9cb755be917480ab81687905c9abae5bc63d8c60105aa14bb4332ebecd7da9b2a7a0a9"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x2}}}}, @m_mpls={0x0, 0x3, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x0, 0x7, 0x4}, @TCA_MPLS_PARMS={0x0, 0x2, {{0x7fffffff, 0x6, 0x1, 0x2, 0x1}, 0x2}}, @TCA_MPLS_TTL={0x0, 0x7, 0xfa}]}, {0x0, 0x6, "c7e30abff9c6788ab454e08bc89bbff6d36b7979a71385ee3fcea252fa87587ff8738c3dc5476d61886dd65e78f9377a716f5a6417c0de62c791ea7165a6145205e91027e82e41f662f14289174adeecff902a9cdde068b09ecd9b8a0155969205e7bab9338dc1e5164f032cf6047c52af42d37473aea1dcff94ddd4cff2cf136b20a2ba6b70bfe49bd674aee775873952e2752b26e0c32b58e079ae72784ca2c74f730d18fd63951738ff2b1682ba69abfed92f08daf44194c345af6258c356895601e13d5a0230f241c0522069eb3689cfbf6457dbe42682e358fe1cfc60df183f574b9a55c8e87b70f47255ea"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_mirred={0x0, 0x18, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x0, 0x2, {{0x9, 0xc2a, 0x3, 0x695, 0x4}, 0x4}}]}, {0x0, 0x6, "1839bc91a16025c4689085e85dbab06b207cd70860e3c1bd98e9e6bdf572e952981ad3fe26a3ce96cc2e4d98d4d8368a893ccee85848732e32633e4e537aa01a54fdfa4b78db4816cd2936c6dfbf7b201c7ea216e0cec1fb33d9777ffccd157cbe0c67e9448a1eb52f08044e416617f50391d88ff4c60ebde79f07d1c8f2b936fbeb77b09ec229cb263396e5e595fcf0b7eb3ec7ce978c2ddbc9de89ca"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x0, 0x2, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0xfff1, 0xa}}, @TCA_SKBEDIT_PARMS={0x0, 0x2, {0x2d27eb32, 0x3, 0x3, 0x1d, 0x4}}, @TCA_SKBEDIT_PARMS={0x0, 0x2, {0x2, 0x97, 0x10000000, 0x9, 0x3a4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0x101}]}, {0x0, 0x6, "ae19438468275f7b62ce5c4b5fec8d01f393f4ba29c7f07b9c5b88cd1c70b26ad01791c5de5e39b600a33ea323b7ec7081233282b74722b5dac696df906c6cc995008cfb0a2773825d2af5e0864d244daa9e525f85795b10bbddb4e3441f407c0a047a7d912dfcd8fff558270a573fece0972612c4024ba1d50dd6b00a0f6bd5a2de95db1d20f366c9cf9aa755dda60ba7f8f4e7d444a848b302cd8c1b745aa66801bad633719ca16c92e13cca80abff9296171190a60160b6c142afb95522892871e66fe1a037de0497"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}}, 0x20040050) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r9, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) 7.28337489s ago: executing program 0 (id=151): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fe, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0xe0, @loopback}}, 0x100, 0x916d, 0x300, 0x0, 0x54}, 0x9c) 7.205823972s ago: executing program 3 (id=153): socket$packet(0x11, 0x2, 0x300) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0xffffffffffffffff, 0x141501) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') r2 = socket(0x840000000002, 0x3, 0xff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000001280)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x0, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x7, 0x3, 0x7, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0x2, 0x48, '\x00', 0x97}, {0x9, 0x9, 0x80, '\x00', 0x8}, {0xfa, 0xce, 0x6, '\x00', 0x6}, {0x17, 0x9, 0x4, '\x00', 0xcf}, {0x4, 0xd, 0xf, '\x00', 0xb}, {0x98, 0x9, 0x4, '\x00', 0xff}, {0x1, 0x5, 0xf9, '\x00', 0x9}, {0xd, 0x6, 0x8, '\x00', 0x9}, {0x2, 0x4, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x52, '\x00', 0x7f}, {0x9, 0x1, 0x6, '\x00', 0x8}, {0x2, 0x10, 0x4, '\x00', 0x8}, {0x1, 0xe, 0x80, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0xb, '\x00', 0xf4}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x9, '\x00', 0xc}, {0x89, 0x7, 0x94, '\x00', 0x21}, {0x5, 0xeb, 0xc0, '\x00', 0x5e}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x80000001, 0x100) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x25f8593}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x9}}], 0x10}}], 0x1b, 0x24004044) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000140)=0x7) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$video(&(0x7f00000001c0), 0x2, 0x101000) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0xfffffffe, 0x3136564e, 0x6, 0xc, [{0x3, 0x10001}, {0x9, 0x5}, {0x800004, 0x9}, {0x2, 0x5}, {0x9, 0x5}, {0x1964, 0x10000}, {0x5, 0x402}, {0x7, 0x3000000}], 0xd, 0x7, 0x1, 0x1, 0x7}}) ioctl$KVM_GET_TSC_KHZ_vm(r4, 0xaea3) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 6.304161152s ago: executing program 1 (id=154): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x13, "71feaf33432ed6fe90107884be157e88b3e578"}) (fail_nth: 5) 5.711722398s ago: executing program 1 (id=156): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) 4.651561613s ago: executing program 2 (id=157): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0x4) r2 = getpid() openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x41, 0x0) syz_open_procfs(r2, &(0x7f0000000140)='cgroup\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000017e000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2e5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_pidfd_open(r2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 4.611648411s ago: executing program 1 (id=158): socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000020b804020240000102030109021b00010106c040090101e30905010200020703030000000000"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x51a9497) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty, 0x0, 0xfffffffc}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b40)=ANY=[@ANYBLOB="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"], 0x5288}}, 0x0) 4.264575195s ago: executing program 0 (id=159): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}], 0x20}}], 0x1, 0x4044004) 4.080048015s ago: executing program 0 (id=160): socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000240)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r4, &(0x7f0000000000)=0x2b00, 0x12) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x240000) ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="d80000001400810c4e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb0900073905a2b4f76c70cbc981e700001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1601000000eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e006000000000000e87fbb9ad809d5e1cace81b341139fe3cd40", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r4, 0x3b64) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.984387538s ago: executing program 4 (id=161): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0xf, 0x28, "f0803bb547c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000002c0)={0x40, 0x8, 0x2, "2bec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000300)={0x40, 0xe, 0x2, "b9d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000700)={0x40, 0x9, 0x1, 'n'}, 0x0, 0x0, 0x0, 0x0}) 3.590357625s ago: executing program 3 (id=162): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r0, 0x400, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x1800) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000000c0)='ubifs\x00', 0x0) socket$netlink(0x10, 0x3, 0x15) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x27, 0x1000, 0x30000, 0x100, 0x0, 0x8, 0x10002, 0x0, 0x0, 0x20}}, 0x50) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050040010082"}}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0xb31c, 0x4) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c81, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYRES16], 0x0) syz_usb_control_io(r8, 0x0, 0x0) 3.192920161s ago: executing program 4 (id=163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r2, &(0x7f0000000140)=[{&(0x7f00000026c0)="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", 0x150}, {&(0x7f00000006c0)="5578352f1a192c35f014d2b5f16fa1e2fe5805a62473b5fe2c81c302a7d5f83bd73cc084aade8d893b0ec78eea64654b059bec10c24ac2e3bd83b4582cc865f27780d618efa0161208b7e8d860b3891732cab6b03f7870ec688805c9029129e5a73ea3835d40892d240afbe8d889f7e827a50f4adf01f1376c6f7f8c876cd4f2e768425312071a2772988bda0bc653fd55f8cd9494c2f45f6f0b060ba0fc514babf025e32c724ae35cfea4e9051d14dab7d8dce65a3d62092ccf2a75100b08ba7190fd482aa4f6d717d514ed4120dd2af1cc41bd8de244395c79f0525abea64cb6625c1d6153114965d87b024bb20566433ebfb22edc72c213d62538b678ff544e8254d99cc0b06c1fac66d762cdcce6c672a5e33f98e7fc85ea0056d496e383c18af7b4cae8d7985c5ea9427887cb17117a0a9cfb214607a47c6d68d90d36a735486134d925a88a3446009b9bbb5b3af2d7d568fe08f7096b851387c5e08c452d310eface68d212c2a878d26fb16443dd6452eeea83f5f21af67618109ad985064460a686460fe8110ee90ae44b100d766c379e91cf131d67aec68d9dca7944d8fa24640c1c6920e7a8e3e7a97be3dca7a0f753fe93ecd0594de09d5e42edc1a232268b52e65fbfa2205b57959e075e59c42c0bd1fded8b4fcea4bb6fa588047f9b5174670f377731b4c291f5d2de3e6a5b475a29bd54ae6df34a95f512eca3e9c394ac20bd61c40b6d4220c29dd873c2ad6778b7578d0e16d507fd7bc2b6ac85f1eab734960b27751058db897fd6414d663c2c50700b69c15a8f50a78a0414d7a2e281dde5a94410ffbee9cfd66250119031c4912624150a413fc24d907fb1b22707f0812b3de71d3d3a05f666c38b9e33d7326e8366ff9485ab1fa768ed3c7f9ee8fccc770d3000e284607c75e6de20f35422f0482acd6bc56716d24a3e888e4d84263ea8e11cd45086274126e2ab0e8eab64dd7d08d2a8ec71e678d2608b1b4a24549387c011db5536b826552b1567b27c068d441ecc2e22ade2c36991eec69b173e13ec256023daa8b081c2a3defc4d30e6365c6fa68338bf628d471e892f8f3e73cd73a1b0ad12dd4fb309eca47cc6aaeeea83c78e9335e2532ccb584a04bff5911dad2fa4e42ac3491d59eda778c7af779978cf68a06563b3992fcc8da4aa849e7f61ba71423c5ddb03adf148539754105e50a7bd1a36387561cf2ab1d2656ace84429344c27019a29019764624580a46896927c2d21d930f9bdaea841596e8a21b451cc35e3dc823a6737ffeb68a3ae31e137eb1ac6e4a5e6db21c1b2781272e4899d35f136b6102d22e84305f64b6832f35b14ca1e8d74b07cd6c10dc1d8979ccaf8fca7a21bfe097dd153eef6d390ed8887adb07516d4652ffdb3159c758024d9d2c2fda182d912ed477085afe39a90d26098c0eea67457afa067bd921b23c039f7c564e661f68dd7124c52926e33d07b944fbfe8daf3c92a1cb8fd6a251fdd449426aaeef8d78f23329b10f30cbc78f0b387e7288e632efa65d6d43ca3b1687d0f0011d62f65986776e36e8eb05ad5cd41028648cd252edef50da0ce84475cebf14b32a5d56fa123a43ed5e3ade21261251a919ca6e946446c6fc370e0f3fdd95909dd22af81d8e721b37ea52c2391226afdd1eed8e70aeab8857a1990c18c8c7578fb16b571a34cf032dab5946b9556daedda1532eaf9351e03758665537ae6d1dce8adbeeceb2ca580b43b44ff8fd32ae235025406749841a95ddd76a0685e5b97abd8cb1eabb39defb24aeea484b776b97f5412fffdb6d5c0656de257851ef42dedd9511a96c5ca6140a84858fb90b722542c04d983b3efc3f104e7b76c4c7cb1f503445d591bdb6334152a9df41f315718c5bd251e28421f04d276edeb3b56b5c591b3867f493855aba73b17173f6777339dcc584a0a4019dc6275fd221fd84bd3a42dc865bda94cca0b7d62ef8964da8e90db182c56b8447ac54ccfbcf55b635d4dc138ced51ee3fc3e685a8b7adfd310336de924c5bffc0e26ef0429bcd97f21a7bc9911d9ff4dceff6aa6b686f8571c5e9e0b9e95f80d6931527cbfce9b1714dbaf5bec90998048f62addea0d62fefec1eea89a89c4e6da12b566b3d19f60d611949e7dac983d02017ba8819039766e808ea1e9cd754057d4cdd32e11ed77f025744012e609dbc6b0c6254ae023ce4c7b4e11876d96c823294fd513f48d6ec4602a1e476507decad495c53ff3ea3d270be7a98d56def10fb9955f67c6d23f08abaec01265a8d7bef87d07c04bc427a46c161b362fb0f5e7c6cafb411f04dc5da5845a3f6c5692bc4a964668b65f9834be97e6e27276a6a6ff2b4ab783b00fc987686a3b6ef1c9377771b5c0607d429beba0e02324bbe320afefd0c79a7ae1a94fa8f6409bb91e8aca37e25e71c4d17abf5fc7fedcdb7816e7a00c4336b782b7c23b0cf1ce3f3f32c4cde1171374edd4d93ca3bbb4f5a048f05cf129ea28b733173021ae43b79fbc4d339bf64656992edf714fbf08af793632025692d2f8250719249d140231feea005005ec405339f90fc79d23006d7530e98f523c04310c1cbd1c7bfb58393e3cfe4b037828cfb84ee6c27128769ea6990e55ac3174fe139b9b9615e22a836d1b36814bfe5e2a06ee7041931b9bac86e8260e35a1400226c479b1f10576acd10081019e202fb68c08315908627f081e2f3047a794020292e568549b790be102cde5babbc18d2f69e8eac8d576bc86828d7e06abae656ce1172642e44f7220396b8a679a5bc6f7103f11ae7f7597e2f080b5958100bb93d4b9b692f3f5b732991153b1ab89a61630e78250cbd809fa95e7774f933dd6d06a3948367a74f473dacf3cfc9b69847593871627638f87688d4fb85b6a7b0a7003629df118fc481a89788400f1b139898f2d5e35832b2f90d7f6e779816868f021c51014933c8eecfe1eb132758d19ee4e6f1bbbde5aa3f2c2f323c85dc8dedca157bfbce405c6f44b3ed6005727e9f69e5d11fa26a4941450d26b9e6609d18c3bf4566077076bae8290c3fcbefbc69ae25a92b62d3f270e0a67c8b42aee0533bb197705c92270c67d160dfb2c3d5932068d129f6083229947d1bef5645120f4e63c27e3747446ceec2b552cff28b635b8b53edaaefa5aa85fea51722e55570816151b6f53f3dfd75f472361d02747245a3441eb418beca9b51fb7fab0d6c46da9f0f75bd83442455987b0aeb714e3a730e78bd4122b6517a896a25d9c7b4a5c101e68bf671c85d804466e3319dc3fdbeab2b265ffe5d7b021611890442868cc3141585b27416a6ec39cc4d880a4dd46c50b01c3d058322f35ee7bb25c6fa5c12165af4d5a221243af1036bfce941f67fb70c8ff6becb5403a7d412ca33a201efda781af1e28d692fe6122718aa66d1b853bbbe3938764d0ef7c101628b33cd2b79f670eb18578553af8b2dc2c43adcd8291ebe83e4fb1175f7b7bba3c913b7cdda22328818b168fb47e62faf3c27b37d3668dbb0f0010cda712399ade4f2add0a22672fd025973ba8e0ebefa24e1be310477e23d1c30bedf68f9ecaf5d239ea19c298dd645d7cef67aaca73cc4df63e4684b9dcc284bac4c2c79e5c5d2c71c4be672a6023845b9e7332fe4cb953725a9b21bcd8350f0f7658b9dbff33d5701485a155a66ba71860d18522c419fa4ea9b3c3a22433213bf0463aec5806677537801d317c38c4dc1cee72eb071bd0e54948378d12dce18aaf93676ba12ac91412da9971d1fba4073eb8be7e42ddecb3af3c5bdd04ca3db9ae89e5dab3d9e3969ee095505f20127452ef90ae95a332a18b31d34b356965784b585ec110950b104f25424edffdf5340c56357bd2d21697c9c9ff9c49cd25af6762201cc904d54ea72c29d704b27abea36e6b1ee88694ea0d279ce8946ef723a1a371a506ddb781c70c975d474642897903f47acb085f1440772c61f96096f6b4c126a02ec4fd32ec7a7e782e410953a6f017f48d7503622a79fd31d95a8e3cab88d4b51c92106b887fa69110dc14d65ecd8c2bbc268b09da48c78ca7324850dd70998fd39aee57f89aab1f8a587566858806e9a36cea0ea61f1be153a7adec84a390c07772663d0557a0f6f42f52b99ee5f1aa857d6aa4fed58d0f61c7d364389fc14ec27b46a8e4f094b6f446349c8d4b4ece5b58a73a6b99e26920b76241ba416b430af558f3d2e0e110a5577ba9275b9f0e9fa4a4731bcfee41aabcb3356e7997522f0d023595614b9eaa62a3b8adc89491977f71e0d3e2e81d7a8c174b9e1f7e8137abc367a19c8e9b9a19e75c6eaa664dd14a7b751458f88f8b870769e8f47faeb75c33cbf1e29a54e3847726bb33242193e140250652f829873e61d70ac929b2c2dcafd06c5ce11d01fef1c9d59c64b4576abe038bdfedca62d3e7f2dcde6c57119e507513acd1a4f0f4af37b8783b0d5c11911cae8d5487d21f134a395d165336cfeebecd0d498c04e7f34c6fc791dd89daf4b0c82714893c032ed91258b1f0de5afd7f3a902b336b18e03435bdb29558ccb9e05cb8a2c8ea258224e2b827a6d4c2cddeca78db6ea1e5837f302d2c626edbeaa24c0a7df3fd86e22b3c8ec7303968c8c74da541c03d5eb3e1fe1cf7da300bb0b171e13e5068e82c424283a3486b8b0600c17933474d9d007a3b2ebe04347a5d4ea974e7c404ff9222b4cd7b76d2dc6aca9a56a7c87d80bb13b01e605280ddf3fd85e18ed4220923de88db4ffd26693fe751302a0cec01ed053565d8023957b6ad07f935758c0922a36d47317b920efc8500132d2510b56d60f6d159275f60a2a0ec400edb1597fb53f8ef1859d249548d871d0582c8eb62ca3a5141a3d84a220928ba4f12e69314aec5347cbe7f9a367d306ec8256540e97da6ae746e176964d7c8022cc265a379bdb4cf3d96303724b27b07c82d116f9c17bce9a1cb13cec173fde66a2f064fc21822c0fda3e4c508eff9fd016213404081013e294cbd940db79ccaa4b38800b4a5b2169832a69d84a98d91520e9102c5719ab3d263feafdebabb9671b9099d7e202f8a958d2b80a8b98e43dc0b2b874f769a8898428530b6298d57709f5f9303896ed1802946d5c1d1a72d7cd76c985a03da395d9499034d7b14b3f71fbe0ccf68498694cf9f7365815dc39502c60d8400ee0892b8ac281f465576701083933ca48376a4f25f8cbea6872d00bc4b126e6ad08f468cb13ac26d8354040470782a9e5619d75101d85cea3b39f8c4293d9db25d1e393b094d43b65c02f595fc77de7874a9a72dc704db3235efdc89b7c153d33fdf8faa4c34a9d564c34ce89af27d8e7137627f07098c21dfb4ae777ed985d1170e863d75321962d9b33f07a7ab133857b80e0fdc7844f8aa3454b4871f67015e54df826828c26761b53826c15ee18ffa76127449822f1ed7e808d094e43fba2aad7e83141dabe54845840563e44e8d1bdc58d5a13912a4368531b09b1044757aad21f911631804654a65d86272a92b7d0d809b21997d88a9d2b82b8a0b4b68dd215a99cf21961a5ec94a67ef20d82e6785c11039673bdf64c5c900ee7790b296024ad6fb836b4771d71a27257b09bfab0a8c229e9e3007d36b664d6c372522879b8f535a248bca316ca58ad315b2adc58a4359e066be3a87a53a5506af18cac87374bcb5b268d4114e49aed30c5edae035525885aefee426a6672522cd0ba648c05a49021bb851664c732e11b556b63fef33eb8e5ebfb0015e2146711c72eb3a748a63b34625f9c7e7d", 0xff8}, {&(0x7f00000016c0)="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", 0xffd}, {&(0x7f00000046c0)="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", 0xeac}], 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca274263f67fc7ddf972d00", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) r4 = dup(r1) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x3, 0x5, 0x8001, 0x6, 0x2, 0x200, 0x9}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x157741, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4}) syz_open_procfs(0x0, &(0x7f00000002c0)='timerslack_ns\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 3.192528893s ago: executing program 0 (id=164): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$loop(0x0, 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0xffffffff9673e35d]}}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004085}, 0x18) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000040), 0x2, r4, 0xcccccccc}) r8 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x6d, 0x0, &(0x7f0000001040)) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000"], 0x0) 2.724301988s ago: executing program 2 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf251900000008000300", @ANYRES32=r1, @ANYBLOB="1ade8e922fb41881d361f9c057531a9f2e37a4fceacdde29178d54091f4a4e69451d02b4924fac4859b4bdb83bf822d5fc880d0119e981bc7fbb5d635a5fef4b35c974906134e88a9b7744ee2ab13e28a3f12f5d"], 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4004000) 2.5758748s ago: executing program 4 (id=166): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000110000000200000000000000000000000000003200"], 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x20, 0x2001, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa1, 0x400000000, 0x3, 0x20000, 0xffffffffffffffff, 0x40000, 0xffffffff}, {0xfffffffffffffff9, 0x2d}, 0x0, 0x4}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x0, 0xe, 0x4000000, 0x3}}, 0xe8) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) (async) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000002c0)={0xff, r2, 0x80000}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x2, 0x7, 0x4, '\x00', 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x972, 0x0, 0x0, 0x0, 0x0, '\x00', 0x20}) (async) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x972, 0x0, 0x0, 0x0, 0x0, '\x00', 0x20}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c40000001b"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1ff}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24008845}, 0xc891) (async) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24008845}, 0xc891) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000009, 0x810, r8, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000f637920ac053f02d8e000000001090212000110000000090400000003d602"], 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 2.513562643s ago: executing program 2 (id=167): syz_emit_ethernet(0x2a, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4000, 0x0, 0x0, 0x2b, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xff}}, @echo={0x8, 0x0, 0x0, 0x6}}}}}, 0x0) 2.094886965s ago: executing program 2 (id=168): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) 1.855386633s ago: executing program 2 (id=169): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000001980)={0x0, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r0, 0xd6849000) r1 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="10000000820404001c0012800b00010062726964676500000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = accept$alg(r1, 0x0, 0x0) fsopen(&(0x7f0000001bc0)='omfs\x00', 0x0) sendmmsg$alg(r2, &(0x7f0000001b40)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="02dd16243432d303db59d17eae46693637ad2fec863f435df622bbe2b8e15f67ec991c574ea1926d447a9ccab8dadbaae89cd0aed2db8e5798ee20599e89e358eb46b4d077cf929e8e23709e31879a2663ac3b3b8b180093ee94488e6b18b8b9ef3f4ad435641b27244399a17e8cd988082bedec897c1eb2279ddda7f23ad63b188829b4d1a8b59045a6b7", 0x8b}, {&(0x7f0000000340)="fe23ee095a18f9c1c5de9080f8e6565fb87611313e374a7e1f261d393f15bb0d84b3ced00e58f6efe3b61a0575dfc2cb3b3bfb0ca4089e2115d77a11f112aad4def636b273bd33e33aa82c961e5a2f16c341ecc51229a5b7a4d08013a639df394b71537da60b3a16aa5b8c6882dffa2d9639618ede14bdb5ad5ba9fe442b6bc5a1885ffdf3542bca7c75835947433087340b1163698aab61a29733aeca7b7b29cf5d057c920ad26610e1e13150f2363cc4cfa7b295bee71a31c2204bbad123d94bf752e3b427aae0b87e3f22ba9605edc0af", 0xd2}, {&(0x7f0000000440)="3fc1e844b10973908b20c667d406dd48e13b0584175a9b81c8bbdb81f93f34ff431c754020d90830cd7e1ff5dc64a837a0488a31b7877695a6a8fa1d51dd8a638dd665ab9aae2dfeef7094d13eb2fba48a3b54914c9253491f0203eacbc89d8d30b083c149ff68d5c1e907339849850204c2d8077ed399758df0c897b4dbcc2ae1a930980edcbd658b70c201c4d514e1e3155455fbd50c6b95b724a8fc07b0c3ffbed6b58561a4770c1e36493ff5de880a81c759089bb840a7264e9b053ce9c096d92276ebfd7c0bc6e708873c00cccc19de69f99a", 0xd5}, {&(0x7f0000000240)="3e611a02db4cb08d57b2130c7c3af0310b8020ee9e59beb10cd062711d98457f25f764644dd46908e95a7de493d710a068dc6f24f85c32755c7f04453bd4c556486d7f2e546e23349682ce73c891f6653aa396856a960fe3d11faaccd90efa62cf576177e0221879af70da29bfdbf714c62e422081fe18c6efa6d7f8992ff7bc6a07294ec07dfdd0d9ef567cb68f2bf5c8abdc8cf3f7b58916acce35e8e7dd10c8fcbf424c207339d3ad78694c258b4ec9", 0xb1}, {&(0x7f0000000540)="86bd36e423a36f0e288ed5a3bcea283913f6144b2b61357a7234152226a23cd776cd1608baefa28ccf8ad6843ad85971454c99e7272c969fd4198ccaeb7b0544d2b8afa7f37914caa2811cd63bdcab4a730112f671d1833a79ad981f9177ac8b5659f2bcc86d5d6e99e4bcd02b391759502c38d36fc17dbe1b1cdd71eaea99ecc44ac8bd33b3d7f367ed1e54d1f0107b355bc6bc20bd229c79ea9f40d1723ddc33d0012e07fc92b054fae1e99b7667652c1c2bcdcbeb516ded25c8cc85a8a258cac4d740238f285868e2958d1ab4eff12309d35888d7ea88020dbf83dc316ffd559ec5de0bde736dd75110", 0xeb}, {&(0x7f0000000640)="2dd5cb28f6f9a58cedee0ff118ab8ee8f19ca7f45714815dde30f0c2ba32f6c37d40c91121c3bb894e09bd568dc41351bc66eb0e9a9e8780f3810dc67d34242a8d08a0135a46b93db0ec8c3860986d410bf2bbca4e9eaa003315736d8f19bbb313b9209ee29150241222a75fe7a846fdde702088e2f50cc6267e0f85182ed7b520a892061df27a9e22e3d03d5cc9ee6282564e2fb54354371a8659d35d849839869f29", 0xa3}], 0x6, &(0x7f0000000780)=[@iv={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0xf8, 0x117, 0x2, 0xfffffffffffffd2e, "9b8ab6bc8e5f9bdda1eb751829e35e58e11b090eea442bed6abc6505bfebce389d2d5d6e0632a4edc4e90def2d34ccc09aa173bc307883fe6a89d8e74e567e2fd78d1d265dc86308f05c5fc36c78d25c60da513bffceb74b974629976cdb0bc8194f58c7fd0953e802ef5fd2bfbf6d06845c869e0be8d7816039e4fe3fe2d7106a9282e838b513f8cc3d9f7de4e8df748ddefcaa1038bb45df01b680ff559c70f3887299d4694828942c8457122e04214b2269803affbc5979aa9f997756830634bf333ab17c03a3936f37f16634d40e57424199b225a73fd0138d9676a90ed7"}, @iv={0x40, 0x117, 0x2, 0x2b, "f26da6c196a148d3c8a2e817dd6febd6efa0e59e48009d7e5957d955fdd8ac20cc440eba34c1e724eb4e8d"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x11e0, 0x8800}, {0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001980)}], 0x1, &(0x7f0000001a00)=[@assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x30, 0x117, 0x2, 0x16, "556907053cf754ba9a62d8be18efec22eacccaabefce"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x80000000}, @op={0x18}, @iv={0x78, 0x117, 0x2, 0x63, "d25b29dbdefaaf1ec71eb11357d7d340437f63df08858e8bd5fb95bd436e00690a565337957f051ae7b1044ca29def2d11446cadf016bb82fbc3023518f5d9b6a76a2f27e353f6acf79f89e615c4a431feb8f75542e9c52bcbb559c271158d7578f410"}], 0x108, 0x41}], 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 1.639257609s ago: executing program 2 (id=170): getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) syz_open_dev$video(0x0, 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10000, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x40}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x2}, 0x10}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f00000016c0)={0x800008, 0x0}) 305.673271ms ago: executing program 3 (id=171): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./bus\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000100)='./bus\x00', 0x8910, 0x4004) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) socket$packet(0x11, 0x3, 0x300) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000840)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000380)={0x1, 0x20, 0xfffffd0a, 0x10001, 0x0, 0x6, 0x5, 0x0, 0xfbfffffffffffffd, 0x9, 0xffffffbb}) 0s ago: executing program 1 (id=172): rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 63.638298][ T5812] cgroup: Unknown subsys name 'net' [ 63.768483][ T5812] cgroup: Unknown subsys name 'cpuset' [ 63.777445][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.089321][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.008861][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.023255][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.031774][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.040250][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.040802][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.047993][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.056234][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.070293][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.076204][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.084618][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.090314][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.092354][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.099779][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.107055][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.121128][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.122325][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.136080][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.138464][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.143642][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.157279][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.161664][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.169140][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.184612][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.192914][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.200464][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.802313][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 67.813180][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 67.889547][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 67.900064][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 67.956855][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 68.099254][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.107046][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.114147][ T5840] bridge_slave_0: entered allmulticast mode [ 68.121616][ T5840] bridge_slave_0: entered promiscuous mode [ 68.133946][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.141103][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.148386][ T5839] bridge_slave_0: entered allmulticast mode [ 68.155200][ T5839] bridge_slave_0: entered promiscuous mode [ 68.183442][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.191170][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.198515][ T5840] bridge_slave_1: entered allmulticast mode [ 68.205292][ T5840] bridge_slave_1: entered promiscuous mode [ 68.217319][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.224416][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.231689][ T5839] bridge_slave_1: entered allmulticast mode [ 68.238568][ T5839] bridge_slave_1: entered promiscuous mode [ 68.292523][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.299734][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.306904][ T5842] bridge_slave_0: entered allmulticast mode [ 68.313727][ T5842] bridge_slave_0: entered promiscuous mode [ 68.348311][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.355482][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.362616][ T5841] bridge_slave_0: entered allmulticast mode [ 68.369690][ T5841] bridge_slave_0: entered promiscuous mode [ 68.376893][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.384007][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.391341][ T5842] bridge_slave_1: entered allmulticast mode [ 68.398326][ T5842] bridge_slave_1: entered promiscuous mode [ 68.408002][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.429161][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.438869][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.446205][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.453330][ T5841] bridge_slave_1: entered allmulticast mode [ 68.460397][ T5841] bridge_slave_1: entered promiscuous mode [ 68.478552][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.487828][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.494979][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.502619][ T5843] bridge_slave_0: entered allmulticast mode [ 68.509526][ T5843] bridge_slave_0: entered promiscuous mode [ 68.519456][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.562444][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.569638][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.576805][ T5843] bridge_slave_1: entered allmulticast mode [ 68.583589][ T5843] bridge_slave_1: entered promiscuous mode [ 68.610564][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.621997][ T5840] team0: Port device team_slave_0 added [ 68.647931][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.659880][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.671106][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.693018][ T5840] team0: Port device team_slave_1 added [ 68.719501][ T5839] team0: Port device team_slave_0 added [ 68.727668][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.768459][ T5839] team0: Port device team_slave_1 added [ 68.776138][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.796303][ T5842] team0: Port device team_slave_0 added [ 68.803777][ T5841] team0: Port device team_slave_0 added [ 68.810587][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.817709][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.843620][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.876729][ T5842] team0: Port device team_slave_1 added [ 68.896788][ T5841] team0: Port device team_slave_1 added [ 68.902921][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.910158][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.936151][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.957561][ T5843] team0: Port device team_slave_0 added [ 68.991656][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.998679][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.025029][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.037895][ T5843] team0: Port device team_slave_1 added [ 69.043980][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.050932][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.076879][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.125143][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.132127][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.158068][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.170690][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.177815][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.203975][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.216284][ T5829] Bluetooth: hci3: command tx timeout [ 69.221882][ T5829] Bluetooth: hci2: command tx timeout [ 69.225474][ T5837] Bluetooth: hci1: command tx timeout [ 69.242082][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.249113][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.275112][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.295681][ T5144] Bluetooth: hci4: command tx timeout [ 69.296314][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.301382][ T5144] Bluetooth: hci0: command tx timeout [ 69.308546][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.339804][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.351427][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.358777][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.385038][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.412420][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.419528][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.445762][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.495863][ T5840] hsr_slave_0: entered promiscuous mode [ 69.502095][ T5840] hsr_slave_1: entered promiscuous mode [ 69.543258][ T5839] hsr_slave_0: entered promiscuous mode [ 69.549569][ T5839] hsr_slave_1: entered promiscuous mode [ 69.555668][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 69.561460][ T5839] Cannot create hsr debugfs directory [ 69.641604][ T5842] hsr_slave_0: entered promiscuous mode [ 69.647898][ T5842] hsr_slave_1: entered promiscuous mode [ 69.653827][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 69.659583][ T5842] Cannot create hsr debugfs directory [ 69.671126][ T5841] hsr_slave_0: entered promiscuous mode [ 69.677520][ T5841] hsr_slave_1: entered promiscuous mode [ 69.683629][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 69.689532][ T5841] Cannot create hsr debugfs directory [ 69.724487][ T5843] hsr_slave_0: entered promiscuous mode [ 69.731064][ T5843] hsr_slave_1: entered promiscuous mode [ 69.737691][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 69.743417][ T5843] Cannot create hsr debugfs directory [ 70.193765][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.208423][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.218339][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.237447][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.293918][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.309198][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.318990][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.340423][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.408208][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.426989][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.446890][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.457268][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.530006][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.546671][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.567036][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.577964][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.606568][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.708894][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.718650][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.729676][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.740372][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.752782][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.771481][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.778685][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.805755][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.812881][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.866849][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.880724][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.924635][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.951125][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.971754][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.978905][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.989238][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.996373][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.013722][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.020905][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.040093][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.047263][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.104284][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.139316][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.155035][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.184851][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.219578][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.221810][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.226722][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.234275][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.247640][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.262109][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.269249][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.286729][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.293837][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.301868][ T5144] Bluetooth: hci2: command tx timeout [ 71.301906][ T5837] Bluetooth: hci3: command tx timeout [ 71.307748][ T5144] Bluetooth: hci1: command tx timeout [ 71.333926][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.341052][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.377022][ T5144] Bluetooth: hci0: command tx timeout [ 71.377033][ T5837] Bluetooth: hci4: command tx timeout [ 71.442011][ T5840] veth0_vlan: entered promiscuous mode [ 71.458872][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.477279][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.487283][ T5840] veth1_vlan: entered promiscuous mode [ 71.581190][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.591307][ T5841] veth0_vlan: entered promiscuous mode [ 71.611351][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.623689][ T5840] veth0_macvtap: entered promiscuous mode [ 71.635215][ T5840] veth1_macvtap: entered promiscuous mode [ 71.643496][ T5839] veth0_vlan: entered promiscuous mode [ 71.659929][ T5841] veth1_vlan: entered promiscuous mode [ 71.722022][ T5843] veth0_vlan: entered promiscuous mode [ 71.734268][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.756901][ T5839] veth1_vlan: entered promiscuous mode [ 71.774239][ T5843] veth1_vlan: entered promiscuous mode [ 71.798049][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.813693][ T5841] veth0_macvtap: entered promiscuous mode [ 71.831857][ T5842] veth0_vlan: entered promiscuous mode [ 71.851960][ T5841] veth1_macvtap: entered promiscuous mode [ 71.860598][ T165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.871250][ T165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.891182][ T5842] veth1_vlan: entered promiscuous mode [ 71.898986][ T165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.908042][ T165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.947049][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.959997][ T5843] veth0_macvtap: entered promiscuous mode [ 71.982285][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.994886][ T5843] veth1_macvtap: entered promiscuous mode [ 72.010891][ T5839] veth0_macvtap: entered promiscuous mode [ 72.031192][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.056430][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.074577][ T5839] veth1_macvtap: entered promiscuous mode [ 72.092237][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.105138][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.126917][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.141593][ T5842] veth0_macvtap: entered promiscuous mode [ 72.157753][ T5842] veth1_macvtap: entered promiscuous mode [ 72.170496][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.172579][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.194203][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.212426][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.252763][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.263843][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.278992][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.300540][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.309890][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.346526][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.354670][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.357324][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.371327][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.382490][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.404827][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.419091][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.454814][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.473357][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.477752][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.484891][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.505010][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.529316][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.541985][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.631920][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.691430][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.701087][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.774423][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.806347][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.881106][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.903792][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.941853][ T5919] FAULT_INJECTION: forcing a failure. [ 72.941853][ T5919] name failslab, interval 1, probability 0, space 0, times 0 [ 72.965528][ T5919] CPU: 0 UID: 0 PID: 5919 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(full) [ 72.965552][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.965569][ T5919] Call Trace: [ 72.965576][ T5919] [ 72.965583][ T5919] dump_stack_lvl+0xe8/0x150 [ 72.965615][ T5919] should_fail_ex+0x412/0x560 [ 72.965643][ T5919] should_failslab+0xa8/0x100 [ 72.965665][ T5919] ? skb_clone+0x212/0x3a0 [ 72.965687][ T5919] kmem_cache_alloc_noprof+0x87/0x650 [ 72.965705][ T5919] ? __netlink_lookup+0xc6/0x8b0 [ 72.965730][ T5919] skb_clone+0x212/0x3a0 [ 72.965752][ T5919] __netlink_deliver_tap+0x404/0x850 [ 72.965792][ T5919] ? netlink_deliver_tap+0x2e/0x1b0 [ 72.965819][ T5919] netlink_deliver_tap+0x19c/0x1b0 [ 72.965844][ T5919] netlink_unicast+0x7e3/0x9b0 [ 72.965875][ T5919] ? __pfx_netlink_unicast+0x10/0x10 [ 72.965901][ T5919] ? netlink_sendmsg+0x650/0xb40 [ 72.965916][ T5919] ? skb_put+0x11b/0x210 [ 72.965936][ T5919] netlink_sendmsg+0x813/0xb40 [ 72.965961][ T5919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.965982][ T5919] ? aa_sock_msg_perm+0xf1/0x1b0 [ 72.966009][ T5919] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 72.966033][ T5919] ____sys_sendmsg+0x972/0x9f0 [ 72.966060][ T5919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.966089][ T5919] ? import_iovec+0x73/0xa0 [ 72.966111][ T5919] ___sys_sendmsg+0x2a5/0x360 [ 72.966145][ T5919] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.966198][ T5919] ? __fget_files+0x2a/0x420 [ 72.966223][ T5919] ? __fget_files+0x3a0/0x420 [ 72.966258][ T5919] __x64_sys_sendmsg+0x1bd/0x2a0 [ 72.966282][ T5919] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 72.966312][ T5919] ? __pfx_ksys_write+0x10/0x10 [ 72.966341][ T5919] do_syscall_64+0x14d/0xf80 [ 72.966360][ T5919] ? trace_irq_disable+0x3b/0x150 [ 72.966385][ T5919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.966403][ T5919] ? clear_bhb_loop+0x40/0x90 [ 72.966425][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.966443][ T5919] RIP: 0033:0x7fcf0a39c799 [ 72.966466][ T5919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.966481][ T5919] RSP: 002b:00007fcf085f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.966501][ T5919] RAX: ffffffffffffffda RBX: 00007fcf0a616090 RCX: 00007fcf0a39c799 [ 72.966514][ T5919] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 72.966525][ T5919] RBP: 00007fcf085f6090 R08: 0000000000000000 R09: 0000000000000000 [ 72.966536][ T5919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.966547][ T5919] R13: 00007fcf0a616128 R14: 00007fcf0a616090 R15: 00007fcf0a73fa48 [ 72.966576][ T5919] [ 72.968083][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.043812][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.078799][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.166815][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.361516][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.378321][ T5837] Bluetooth: hci1: command tx timeout [ 73.383744][ T5837] Bluetooth: hci3: command tx timeout [ 73.389621][ T5144] Bluetooth: hci2: command tx timeout [ 73.390051][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.455630][ T5837] Bluetooth: hci0: command tx timeout [ 73.461319][ T5144] Bluetooth: hci4: command tx timeout [ 73.522024][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.533556][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.749915][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 73.780615][ T5931] loop2: detected capacity change from 0 to 7 [ 73.809267][ T5934] fuse: Unknown parameter 'subj_t{pe' [ 73.830319][ T5819] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 73.843382][ T5819] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 73.850888][ T5819] Dev loop2: unable to read RDB block 7 [ 73.866122][ T5819] loop2: unable to read partition table [ 73.873209][ T5819] loop2: partition table beyond EOD, truncated [ 73.886282][ T5931] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 73.896756][ T5931] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 73.903450][ T5931] Dev loop2: unable to read RDB block 7 [ 73.909325][ T5931] loop2: unable to read partition table [ 73.915156][ T5931] loop2: partition table beyond EOD, truncated [ 73.925702][ T5931] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 74.227312][ T29] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 74.318422][ T5194] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 74.350103][ T5194] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 74.375939][ T5194] Dev loop2: unable to read RDB block 7 [ 74.406497][ T5194] loop2: unable to read partition table [ 74.414531][ T5194] loop2: partition table beyond EOD, truncated [ 74.424972][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 74.462329][ T29] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 74.514079][ T29] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 74.577551][ T29] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.597871][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.617987][ T29] usb 1-1: Product: syz [ 74.636548][ T29] usb 1-1: Manufacturer: syz [ 74.650173][ T29] usb 1-1: SerialNumber: syz [ 74.662050][ T5951] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.714504][ T29] cdc_mbim 1-1:1.0: skipping garbage [ 74.728724][ T5953] Zero length message leads to an empty skb [ 74.894035][ T5931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 74.928628][ T5931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.206323][ T5960] trusted_key: encrypted_key: keyword 'n»w' not recognized [ 75.305475][ T5958] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.525509][ T5958] usb 3-1: device descriptor read/64, error -71 [ 75.584435][ T5837] Bluetooth: hci3: command tx timeout [ 75.585113][ T5931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.589984][ T5144] Bluetooth: hci2: command tx timeout [ 75.620495][ T5837] Bluetooth: hci1: command tx timeout [ 75.626410][ T5829] Bluetooth: hci0: command tx timeout [ 75.626422][ T5837] Bluetooth: hci4: command tx timeout [ 75.649531][ T5931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.679130][ T29] cdc_mbim 1-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 75.691791][ T29] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 76.078837][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.088098][ T5958] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.107276][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.139312][ T29] cdc_mbim 1-1:1.0: setting tx_max = 60 [ 76.170547][ T29] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 76.191430][ T29] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 76.298442][ T5958] usb 3-1: device descriptor read/64, error -71 [ 76.312372][ T29] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 76.363564][ T29] usb 1-1: USB disconnect, device number 2 [ 76.415174][ T5976] FAULT_INJECTION: forcing a failure. [ 76.415174][ T5976] name failslab, interval 1, probability 0, space 0, times 0 [ 76.417215][ T5958] usb usb3-port1: attempt power cycle [ 76.451113][ T5976] CPU: 0 UID: 0 PID: 5976 Comm: syz.3.16 Not tainted syzkaller #0 PREEMPT(full) [ 76.451136][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.451144][ T5976] Call Trace: [ 76.451150][ T5976] [ 76.451156][ T5976] dump_stack_lvl+0xe8/0x150 [ 76.451181][ T5976] should_fail_ex+0x412/0x560 [ 76.451204][ T5976] should_failslab+0xa8/0x100 [ 76.451222][ T5976] ? skb_clone+0x212/0x3a0 [ 76.451238][ T5976] kmem_cache_alloc_noprof+0x87/0x650 [ 76.451252][ T5976] ? __netlink_lookup+0xc6/0x8b0 [ 76.451271][ T5976] skb_clone+0x212/0x3a0 [ 76.451291][ T5976] __netlink_deliver_tap+0x404/0x850 [ 76.451330][ T5976] ? netlink_deliver_tap+0x2e/0x1b0 [ 76.451350][ T5976] netlink_deliver_tap+0x19c/0x1b0 [ 76.451370][ T5976] netlink_unicast+0x7e3/0x9b0 [ 76.451394][ T5976] ? __pfx_netlink_unicast+0x10/0x10 [ 76.451415][ T5976] ? netlink_sendmsg+0x650/0xb40 [ 76.451427][ T5976] ? skb_put+0x11b/0x210 [ 76.451443][ T5976] netlink_sendmsg+0x813/0xb40 [ 76.451462][ T5976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.451477][ T5976] ? aa_sock_msg_perm+0xf1/0x1b0 [ 76.451499][ T5976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 76.451517][ T5976] ____sys_sendmsg+0x972/0x9f0 [ 76.451540][ T5976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.451563][ T5976] ? import_iovec+0x73/0xa0 [ 76.451581][ T5976] ___sys_sendmsg+0x2a5/0x360 [ 76.451603][ T5976] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.451650][ T5976] ? __fget_files+0x2a/0x420 [ 76.451675][ T5976] ? __fget_files+0x3a0/0x420 [ 76.451707][ T5976] __x64_sys_sendmsg+0x1bd/0x2a0 [ 76.451729][ T5976] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 76.451760][ T5976] ? __pfx_ksys_write+0x10/0x10 [ 76.451791][ T5976] do_syscall_64+0x14d/0xf80 [ 76.451812][ T5976] ? trace_irq_disable+0x3b/0x150 [ 76.451836][ T5976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.451855][ T5976] ? clear_bhb_loop+0x40/0x90 [ 76.451878][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.451896][ T5976] RIP: 0033:0x7fcae239c799 [ 76.451914][ T5976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.451929][ T5976] RSP: 002b:00007fcae05ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.451949][ T5976] RAX: ffffffffffffffda RBX: 00007fcae2615fa0 RCX: 00007fcae239c799 [ 76.451962][ T5976] RDX: 0000000000000800 RSI: 0000200000000240 RDI: 0000000000000003 [ 76.451974][ T5976] RBP: 00007fcae05ee090 R08: 0000000000000000 R09: 0000000000000000 [ 76.451984][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.451994][ T5976] R13: 00007fcae2616038 R14: 00007fcae2615fa0 R15: 00007fcae273fa48 [ 76.452021][ T5976] [ 76.878981][ T5984] FAULT_INJECTION: forcing a failure. [ 76.878981][ T5984] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.921413][ T5984] CPU: 1 UID: 0 PID: 5984 Comm: syz.1.19 Not tainted syzkaller #0 PREEMPT(full) [ 76.921439][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.921450][ T5984] Call Trace: [ 76.921458][ T5984] [ 76.921465][ T5984] dump_stack_lvl+0xe8/0x150 [ 76.921496][ T5984] should_fail_ex+0x412/0x560 [ 76.921526][ T5984] _copy_from_iter+0x1d3/0x1670 [ 76.921558][ T5984] ? rcu_is_watching+0x15/0xb0 [ 76.921588][ T5984] ? __pfx__copy_from_iter+0x10/0x10 [ 76.921623][ T5984] ? netlink_sendmsg+0x650/0xb40 [ 76.921639][ T5984] ? skb_put+0x11b/0x210 [ 76.921661][ T5984] netlink_sendmsg+0x6c0/0xb40 [ 76.921686][ T5984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.921706][ T5984] ? aa_sock_msg_perm+0xf1/0x1b0 [ 76.921734][ T5984] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 76.921757][ T5984] ____sys_sendmsg+0x972/0x9f0 [ 76.921786][ T5984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.921815][ T5984] ? import_iovec+0x73/0xa0 [ 76.921846][ T5984] ___sys_sendmsg+0x2a5/0x360 [ 76.921872][ T5984] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.921924][ T5984] ? __fget_files+0x2a/0x420 [ 76.921950][ T5984] ? __fget_files+0x3a0/0x420 [ 76.921985][ T5984] __x64_sys_sendmsg+0x1bd/0x2a0 [ 76.922009][ T5984] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 76.922039][ T5984] ? __pfx_ksys_write+0x10/0x10 [ 76.922069][ T5984] do_syscall_64+0x14d/0xf80 [ 76.922089][ T5984] ? trace_irq_disable+0x3b/0x150 [ 76.922114][ T5984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.922132][ T5984] ? clear_bhb_loop+0x40/0x90 [ 76.922154][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.922171][ T5984] RIP: 0033:0x7f510819c799 [ 76.922188][ T5984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.922203][ T5984] RSP: 002b:00007f510900d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.922223][ T5984] RAX: ffffffffffffffda RBX: 00007f5108415fa0 RCX: 00007f510819c799 [ 76.922236][ T5984] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 76.922247][ T5984] RBP: 00007f510900d090 R08: 0000000000000000 R09: 0000000000000000 [ 76.922258][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.922268][ T5984] R13: 00007f5108416038 R14: 00007f5108415fa0 R15: 00007f510853fa48 [ 76.922296][ T5984] [ 77.222591][ T5980] FAULT_INJECTION: forcing a failure. [ 77.222591][ T5980] name failslab, interval 1, probability 0, space 0, times 0 [ 77.267769][ T5980] CPU: 0 UID: 0 PID: 5980 Comm: syz.3.18 Not tainted syzkaller #0 PREEMPT(full) [ 77.267785][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.267792][ T5980] Call Trace: [ 77.267799][ T5980] [ 77.267804][ T5980] dump_stack_lvl+0xe8/0x150 [ 77.267824][ T5980] should_fail_ex+0x412/0x560 [ 77.267842][ T5980] should_failslab+0xa8/0x100 [ 77.267856][ T5980] ? ptlock_alloc+0x20/0x70 [ 77.267866][ T5980] kmem_cache_alloc_noprof+0x87/0x650 [ 77.267881][ T5980] ptlock_alloc+0x20/0x70 [ 77.267890][ T5980] pte_alloc_one+0x7a/0x370 [ 77.267908][ T5980] do_pte_missing+0x12c2/0x3490 [ 77.267929][ T5980] handle_mm_fault+0x1bec/0x3310 [ 77.267951][ T5980] ? handle_mm_fault+0xee/0x3310 [ 77.267970][ T5980] ? __pfx_handle_mm_fault+0x10/0x10 [ 77.267994][ T5980] ? lock_mm_and_find_vma+0xa7/0x340 [ 77.268007][ T5980] do_user_addr_fault+0x75b/0x1340 [ 77.268028][ T5980] exc_page_fault+0x6a/0xc0 [ 77.268041][ T5980] asm_exc_page_fault+0x26/0x30 [ 77.268051][ T5980] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 77.268067][ T5980] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 77.268075][ T5980] RSP: 0018:ffffc9000481fbd8 EFLAGS: 00050212 [ 77.268086][ T5980] RAX: 00007ffffffff001 RBX: 0000000000000024 RCX: 0000000000000024 [ 77.268093][ T5980] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffc9000481fc40 [ 77.268100][ T5980] RBP: ffffc9000481fd30 R08: ffffc9000481fc63 R09: 1ffff92000903f8c [ 77.268107][ T5980] R10: dffffc0000000000 R11: fffff52000903f8d R12: 0000000000000008 [ 77.268114][ T5980] R13: 1ffff92000903f84 R14: ffffc9000481fc40 R15: 00002000000000c0 [ 77.268130][ T5980] _copy_from_user+0x7a/0xb0 [ 77.268142][ T5980] set_termios+0x20f/0x710 [ 77.268159][ T5980] ? __pfx_set_termios+0x10/0x10 [ 77.268184][ T5980] tty_mode_ioctl+0x4a6/0x7d0 [ 77.268200][ T5980] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 77.268214][ T5980] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 77.268234][ T5980] ? n_tty_ioctl_helper+0x84/0x4d0 [ 77.268249][ T5980] ? __pfx_n_tty_ioctl+0x10/0x10 [ 77.268261][ T5980] tty_ioctl+0x9c5/0xde0 [ 77.268271][ T5980] ? __pfx_tty_ioctl+0x10/0x10 [ 77.268280][ T5980] __se_sys_ioctl+0xfc/0x170 [ 77.268300][ T5980] do_syscall_64+0x14d/0xf80 [ 77.268311][ T5980] ? trace_irq_disable+0x3b/0x150 [ 77.268326][ T5980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.268336][ T5980] ? clear_bhb_loop+0x40/0x90 [ 77.268349][ T5980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.268358][ T5980] RIP: 0033:0x7fcae239c799 [ 77.268368][ T5980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.268375][ T5980] RSP: 002b:00007fcae05ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.268385][ T5980] RAX: ffffffffffffffda RBX: 00007fcae2615fa0 RCX: 00007fcae239c799 [ 77.268392][ T5980] RDX: 00002000000000c0 RSI: 0000000000005402 RDI: 0000000000000004 [ 77.268399][ T5980] RBP: 00007fcae05ee090 R08: 0000000000000000 R09: 0000000000000000 [ 77.268404][ T5980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.268410][ T5980] R13: 00007fcae2616038 R14: 00007fcae2615fa0 R15: 00007fcae273fa48 [ 77.268425][ T5980] [ 77.275857][ T5958] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 78.676674][ T5992] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.21' sets config #2 [ 78.772422][ T5958] usb 3-1: device descriptor read/8, error -71 [ 79.475442][ T5958] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 79.515177][ T5958] usb 3-1: Using ep0 maxpacket: 32 [ 79.535929][ T5958] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 79.554886][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.829299][ T6017] fuse: Bad value for 'fd' [ 80.091593][ T5958] usb 3-1: config 0 descriptor?? [ 80.144770][ T5958] gspca_main: sunplus-2.14.0 probing 041e:400b [ 81.318615][ T5958] gspca_sunplus: reg_w_riv err -71 [ 81.335513][ T5958] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 81.368351][ T5958] usb 3-1: USB disconnect, device number 5 [ 81.507491][ T10] cfg80211: failed to load regulatory.db [ 81.801598][ T29] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 81.997011][ T29] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 82.005292][ T29] usb 1-1: config 0 has no interface number 0 [ 82.011462][ T29] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 82.048784][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.075626][ T5908] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.084646][ T29] usb 1-1: config 0 descriptor?? [ 82.094852][ T29] usb 1-1: selecting invalid altsetting 1 [ 82.159050][ T29] dvb_ttusb_budget: ttusb_init_controller: error [ 82.194507][ T29] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 82.211069][ T6041] netlink: 1 bytes leftover after parsing attributes in process `syz.2.33'. [ 82.265668][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 82.296109][ T5908] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 82.307932][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.324661][ T6029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.343153][ T5908] usb 5-1: Product: syz [ 82.361362][ T6029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.364439][ T5908] usb 5-1: Manufacturer: syz [ 82.389068][ T5908] usb 5-1: SerialNumber: syz [ 82.401092][ T29] DVB: Unable to find symbol cx22700_attach() [ 82.406530][ T5908] usb 5-1: config 0 descriptor?? [ 82.485347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.595864][ T29] DVB: Unable to find symbol tda10046_attach() [ 82.615965][ T29] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 82.641097][ T5908] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 82.648500][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.807808][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 82.823703][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 82.847649][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 82.865420][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.892383][ T6048] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 82.908369][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 83.631603][ T6063] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.37' sets config #2 [ 84.005439][ T29] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.173931][ T29] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 84.211759][ T29] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.225390][ T29] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.239457][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.250774][ T29] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.448853][ T29] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.472080][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.492673][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'. [ 84.503611][ T29] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.512620][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39'. [ 84.532861][ T29] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.575059][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.583744][ T29] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.594574][ T29] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.606386][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.614200][ T29] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.626740][ T29] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.639393][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.652885][ T29] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.664650][ T29] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.677180][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.687853][ T29] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.699574][ T29] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.712441][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.730177][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.740435][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.750362][ T29] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.764073][ T29] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.794863][ T5958] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 84.805534][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.806386][ T5957] usb 1-1: USB disconnect, device number 3 [ 84.833395][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.848961][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.858443][ T29] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 84.876684][ T29] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 84.908113][ T29] usb 2-1: Product: syz [ 84.916783][ T29] usb 2-1: Manufacturer: syz [ 84.921488][ T29] usb 2-1: SerialNumber: syz [ 84.992732][ T29] usb 2-1: config 0 descriptor?? [ 85.015188][ T29] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 85.223379][ T6066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.38'. [ 85.285446][ T5957] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.417407][ T5287] usb 4-1: USB disconnect, device number 2 [ 85.449505][ T5957] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 85.503685][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.579342][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.629716][ T5957] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 85.701498][ T5957] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 85.746379][ T5957] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 85.766132][ T5957] usb 1-1: Manufacturer: syz [ 85.798654][ T5957] usb 1-1: config 0 descriptor?? [ 86.025439][ T5287] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.175432][ T5287] usb 4-1: Using ep0 maxpacket: 16 [ 86.182584][ T5287] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 86.191123][ T5287] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.201333][ T5287] usb 4-1: config 0 has no interface number 0 [ 86.210006][ T5287] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 86.220209][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.228671][ T5287] usb 4-1: Product: syz [ 86.232918][ T5287] usb 4-1: Manufacturer: syz [ 86.237787][ T5287] usb 4-1: SerialNumber: syz [ 86.246874][ T5957] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 86.254408][ T5287] usb 4-1: config 0 descriptor?? [ 86.277330][ T5957] appleir 0003:05AC:8243.0001: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 86.721667][ T5957] usb 2-1: USB disconnect, device number 2 [ 86.840720][ T5957] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 87.195410][ T5957] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.385980][ T5957] usb 2-1: Using ep0 maxpacket: 16 [ 87.442379][ T5957] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 87.463409][ T5957] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.524074][ T5957] usb 2-1: config 0 has no interface number 0 [ 87.537543][ T5957] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 87.560967][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.584626][ T5957] usb 2-1: Product: syz [ 87.599143][ T5957] usb 2-1: Manufacturer: syz [ 87.604641][ T5958] usb 3-1: unable to get BOS descriptor or descriptor too short [ 87.640222][ T5958] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 87.649719][ T5957] usb 2-1: SerialNumber: syz [ 87.660725][ T5958] usb 3-1: can't read configurations, error -71 [ 87.690827][ T5957] usb 2-1: config 0 descriptor?? [ 87.920915][ T10] usb 1-1: USB disconnect, device number 4 [ 87.925653][ T6097] mmap: syz.4.46 (6097) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.259614][ T6102] can: request_module (can-proto-0) failed. [ 88.336922][ T5908] usb write operation failed. (-110) [ 88.345825][ T5908] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 88.358857][ T5908] dvbdev: DVB: registering new adapter (Terratec H7) [ 88.371486][ T5908] usb 5-1: media controller created [ 88.391924][ T5908] usb read operation failed. (-32) [ 88.405182][ T5908] usb write operation failed. (-32) [ 88.426375][ T5908] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 89.106514][ T5958] usb 4-1: USB disconnect, device number 3 [ 89.497167][ T6126] binder: BINDER_SET_CONTEXT_MGR already set [ 89.503439][ T6126] binder: 6120:6126 ioctl 4018620d 200000000040 returned -16 [ 89.610435][ T6128] FAULT_INJECTION: forcing a failure. [ 89.610435][ T6128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.633688][ T6128] CPU: 1 UID: 0 PID: 6128 Comm: syz.3.52 Not tainted syzkaller #0 PREEMPT(full) [ 89.633717][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.633730][ T6128] Call Trace: [ 89.633736][ T6128] [ 89.633741][ T6128] dump_stack_lvl+0xe8/0x150 [ 89.633760][ T6128] should_fail_ex+0x412/0x560 [ 89.633779][ T6128] _copy_to_user+0x31/0xb0 [ 89.633792][ T6128] simple_read_from_buffer+0xe1/0x170 [ 89.633810][ T6128] proc_fail_nth_read+0x1bb/0x230 [ 89.633828][ T6128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.633844][ T6128] ? rw_verify_area+0x2a6/0x4d0 [ 89.633854][ T6128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.633869][ T6128] vfs_read+0x20c/0xa70 [ 89.633879][ T6128] ? fdget_pos+0x246/0x320 [ 89.633891][ T6128] ? __pfx___mutex_lock+0x10/0x10 [ 89.633904][ T6128] ? __pfx_vfs_read+0x10/0x10 [ 89.633915][ T6128] ? __fget_files+0x2a/0x420 [ 89.633932][ T6128] ? __fget_files+0x3a0/0x420 [ 89.633946][ T6128] ? __fget_files+0x2a/0x420 [ 89.633965][ T6128] ksys_read+0x150/0x270 [ 89.633977][ T6128] ? __pfx_ksys_read+0x10/0x10 [ 89.633993][ T6128] do_syscall_64+0x14d/0xf80 [ 89.634005][ T6128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.634015][ T6128] ? clear_bhb_loop+0x40/0x90 [ 89.634027][ T6128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.634037][ T6128] RIP: 0033:0x7fcae235cfce [ 89.634047][ T6128] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.634055][ T6128] RSP: 002b:00007fcae05edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.634067][ T6128] RAX: ffffffffffffffda RBX: 00007fcae05ee6c0 RCX: 00007fcae235cfce [ 89.634074][ T6128] RDX: 000000000000000f RSI: 00007fcae05ee0a0 RDI: 0000000000000005 [ 89.634080][ T6128] RBP: 00007fcae05ee090 R08: 0000000000000000 R09: 0000000000000000 [ 89.634086][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.634092][ T6128] R13: 00007fcae2616038 R14: 00007fcae2615fa0 R15: 00007fcae273fa48 [ 89.634107][ T6128] [ 90.713358][ T10] usb 2-1: USB disconnect, device number 3 [ 91.542307][ T6141] netlink: 88 bytes leftover after parsing attributes in process `syz.3.56'. [ 91.625784][ T5287] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 91.792947][ T6133] process 'syz.4.53' launched './file2' with NULL argv: empty string added [ 91.832946][ T6133] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 92.125408][ T5958] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 92.285410][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 92.292197][ T5958] usb 3-1: config 2 has an invalid interface number: 241 but max is 0 [ 92.309016][ T5958] usb 3-1: config 2 has no interface number 0 [ 92.315132][ T5958] usb 3-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.351276][ T5958] usb 3-1: config 2 interface 241 has no altsetting 0 [ 92.365287][ T5958] usb 3-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 92.407482][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.437430][ T5958] usb 3-1: Product: syz [ 92.460696][ T5958] usb 3-1: Manufacturer: syz [ 92.470803][ T5958] usb 3-1: SerialNumber: syz [ 92.491409][ T5958] ti_usb_3410_5052 3-1:2.241: TI USB 3410 1 port adapter converter detected [ 92.518561][ T5958] ti_usb_3410_5052 3-1:2.241: missing endpoints [ 92.746702][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.799718][ T5892] usb 3-1: USB disconnect, device number 8 [ 92.956508][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 92.964080][ T10] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 92.973153][ T10] usb 1-1: config 0 has no interface number 0 [ 92.979963][ T10] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 92.990177][ T10] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.001706][ T10] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 93.026813][ T10] usb 1-1: config 0 interface 196 has no altsetting 0 [ 93.038400][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 93.055379][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.074597][ T10] usb 1-1: Product: syz [ 93.078846][ T10] usb 1-1: Manufacturer: syz [ 93.083502][ T10] usb 1-1: SerialNumber: syz [ 93.097754][ T10] usb 1-1: config 0 descriptor?? [ 93.106694][ T6162] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 93.855511][ T10] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 93.885446][ T10] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 94.006099][ T5287] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.135439][ T5957] usb 1-1: USB disconnect, device number 5 [ 94.152108][ T5287] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 94.184481][ T5287] usb 2-1: can't read configurations, error -71 [ 94.514553][ T6192] syz.4.73 uses obsolete (PF_INET,SOCK_PACKET) [ 94.524642][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 94.553622][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'. [ 95.358229][ T6213] netlink: 88 bytes leftover after parsing attributes in process `syz.0.76'. [ 95.800688][ T6211] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 96.209966][ T6222] netlink: 'syz.3.80': attribute type 4 has an invalid length. [ 96.238077][ T6222] netlink: 'syz.3.80': attribute type 4 has an invalid length. [ 97.095538][ T5287] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 97.701884][ T6252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.734314][ T10] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 97.747888][ T6252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.765413][ T10] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 97.853010][ T10] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 98.182703][ T10] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 98.237943][ T10] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 98.321852][ T10] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 98.369831][ T10] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 98.395399][ T10] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 98.405705][ T10] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 98.423291][ T10] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 98.474312][ T10] hid-generic 00A0:0006:0003.0002: hidraw0: HID v0.05 Device [syz0] on syz0 [ 98.645345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.665354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.809242][ T6261] trusted_key: encrypted_key: keyword 'n»w' not recognized [ 98.818704][ T6261] trusted_key: encrypted_key: keyword 'n»w' not recognized [ 100.118713][ T6266] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 100.196787][ T6269] loop2: detected capacity change from 0 to 7 [ 100.205406][ T6269] Dev loop2: unable to read RDB block 7 [ 100.211151][ T6269] loop2: AHDI p1 p2 p3 p4 [ 100.215838][ T6269] loop2: partition table partially beyond EOD, truncated [ 100.241131][ T6269] loop2: p1 start 1601398130 is beyond EOD, truncated [ 100.248719][ T6269] loop2: p2 start 1702059890 is beyond EOD, truncated [ 100.270640][ T6269] loop2: p3 size 3070370205 extends beyond EOD, truncated [ 100.374692][ T5287] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.418993][ T5287] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 100.459338][ T5287] usb 2-1: can't read configurations, error -71 [ 100.805938][ T5818] udevd[5818]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 101.021671][ T6279] loop2: detected capacity change from 0 to 7 [ 101.054493][ T6279] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 101.084800][ T6279] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 101.108217][ T6279] Dev loop2: unable to read RDB block 7 [ 101.124524][ T6279] loop2: unable to read partition table [ 101.130715][ T6279] loop2: partition table beyond EOD, truncated [ 101.152081][ T6279] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 101.181430][ T5194] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 101.192412][ T5194] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 101.226186][ T5194] Dev loop2: unable to read RDB block 7 [ 101.234794][ T5194] loop2: unable to read partition table [ 101.264420][ T5194] loop2: partition table beyond EOD, truncated [ 101.803057][ T6298] usb usb8: usbfs: process 6298 (syz.4.101) did not claim interface 0 before use [ 101.894626][ T6299] warning: `syz.4.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.025764][ T6303] netlink: 'syz.3.103': attribute type 4 has an invalid length. [ 102.048155][ T6303] netlink: 'syz.3.103': attribute type 4 has an invalid length. [ 102.070179][ T5287] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.084832][ T5908] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 102.286703][ T5287] usb 1-1: Using ep0 maxpacket: 32 [ 102.294101][ T5287] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 102.317295][ T5287] usb 1-1: config 0 has no interface number 0 [ 102.331681][ T5287] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 102.635355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.708533][ T5908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.744892][ T5287] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.756328][ T5908] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 102.775485][ T5287] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 102.797535][ T5908] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 102.815444][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.823499][ T5287] usb 1-1: config 0 interface 196 has no altsetting 0 [ 102.833818][ T5908] usb 3-1: Product: syz [ 102.843859][ T5908] usb 3-1: Manufacturer: syz [ 102.849248][ T5287] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 102.924833][ T5908] usb 3-1: SerialNumber: syz [ 102.929557][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.951334][ T5908] usb 3-1: config 0 descriptor?? [ 102.958222][ T5287] usb 1-1: Product: syz [ 103.012199][ T5287] usb 1-1: Manufacturer: syz [ 103.027427][ T5287] usb 1-1: SerialNumber: syz [ 103.095752][ T5287] usb 1-1: config 0 descriptor?? [ 103.123933][ T6297] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 103.376774][ T6312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.512446][ T6312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.602510][ T5287] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 103.627160][ T5287] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 103.807946][ T5957] usb 1-1: USB disconnect, device number 6 [ 104.684541][ T6329] netlink: 'syz.0.109': attribute type 10 has an invalid length. [ 104.715832][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.723821][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.779207][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.786407][ T6329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.794491][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.801677][ T6329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.853905][ T6329] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 104.880671][ T6330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.889572][ T6330] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 104.929313][ T6330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.065718][ T29] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.235440][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 105.251082][ T29] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 105.262162][ T29] usb 4-1: config 0 has no interface number 0 [ 105.268666][ T29] usb 4-1: config 0 interface 35 altsetting 0 has an endpoint descriptor with address 0x7A, changing to 0xA [ 105.285530][ T29] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xA has an invalid bInterval 70, changing to 10 [ 105.310809][ T29] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 105.336284][ T29] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=3e.04 [ 105.345788][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.354435][ T29] usb 4-1: Product: syz [ 105.360090][ T29] usb 4-1: Manufacturer: syz [ 105.364749][ T29] usb 4-1: SerialNumber: syz [ 105.377697][ T29] usb 4-1: config 0 descriptor?? [ 105.575809][ T29] usb 3-1: USB disconnect, device number 9 [ 105.636323][ T5287] usb 4-1: USB disconnect, device number 4 [ 105.803992][ T6352] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 106.023318][ T6350] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 106.556592][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 106.618405][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 106.643752][ T6362] netlink: 'syz.4.117': attribute type 4 has an invalid length. [ 106.661167][ T6362] netlink: 'syz.4.117': attribute type 4 has an invalid length. [ 106.975429][ T5957] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.223698][ T5957] usb 4-1: Using ep0 maxpacket: 16 [ 107.241140][ T5957] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 107.250383][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.278864][ T5957] usb 4-1: config 0 descriptor?? [ 107.292761][ T5957] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 107.339234][ T5958] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.493809][ T5957] usb 4-1: Detected FT232B [ 107.551627][ T5958] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.562810][ T5958] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.580826][ T5958] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 107.606634][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.625219][ T5958] usb 1-1: Product: syz [ 107.663592][ T5958] usb 1-1: Manufacturer: syz [ 107.670532][ T5958] usb 1-1: SerialNumber: syz [ 107.729074][ T5958] usb 1-1: config 0 descriptor?? [ 107.895968][ T5957] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 107.907688][ T5957] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 107.946015][ T5957] usb 4-1: USB disconnect, device number 5 [ 108.114370][ T5957] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 108.143621][ T5957] ftdi_sio 4-1:0.0: device disconnected [ 108.462960][ T6393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.475811][ T6393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.619717][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.627581][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.676811][ T6400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.128'. [ 108.797208][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.808639][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.926936][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.935965][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.985437][ T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.392859][ T6404] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 109.476493][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.521827][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.552990][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.591936][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 109.608573][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 109.634938][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.658829][ T29] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 109.674122][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.691164][ T6411] netlink: 88 bytes leftover after parsing attributes in process `syz.1.130'. [ 109.870486][ T29] usb 4-1: config 0 descriptor?? [ 110.095555][ T29] usb 4-1: USB disconnect, device number 6 [ 110.247230][ T6418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.256693][ T6418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.409359][ T6421] FAULT_INJECTION: forcing a failure. [ 110.409359][ T6421] name failslab, interval 1, probability 0, space 0, times 0 [ 110.424590][ T5958] usb 1-1: USB disconnect, device number 7 [ 110.645644][ T6418] tipc: Failed to remove unknown binding: 66,1,1/0:2171125733/2171125735 [ 110.678044][ T6421] CPU: 1 UID: 0 PID: 6421 Comm: syz.2.133 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.678072][ T6421] Tainted: [L]=SOFTLOCKUP [ 110.678079][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.678089][ T6421] Call Trace: [ 110.678097][ T6421] [ 110.678104][ T6421] dump_stack_lvl+0xe8/0x150 [ 110.678135][ T6421] should_fail_ex+0x412/0x560 [ 110.678166][ T6421] should_failslab+0xa8/0x100 [ 110.678189][ T6421] ? skb_clone+0x212/0x3a0 [ 110.678211][ T6421] kmem_cache_alloc_noprof+0x87/0x650 [ 110.678236][ T6421] skb_clone+0x212/0x3a0 [ 110.678259][ T6421] pfkey_sendmsg+0x4a3/0x1120 [ 110.678284][ T6421] ? __lock_acquire+0x6b5/0x2cf0 [ 110.678319][ T6421] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 110.678366][ T6421] ? aa_sock_msg_perm+0xf1/0x1b0 [ 110.678394][ T6421] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.678418][ T6421] ____sys_sendmsg+0x972/0x9f0 [ 110.678438][ T6421] ? __lock_acquire+0x6b5/0x2cf0 [ 110.678477][ T6421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.678507][ T6421] ? import_iovec+0x73/0xa0 [ 110.678529][ T6421] ___sys_sendmsg+0x2a5/0x360 [ 110.678556][ T6421] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.678582][ T6421] ? kstrtouint+0x6e/0xe0 [ 110.678632][ T6421] ? __fget_files+0x2a/0x420 [ 110.678657][ T6421] ? __fget_files+0x3a0/0x420 [ 110.678693][ T6421] __sys_sendmmsg+0x27c/0x4e0 [ 110.678720][ T6421] ? __pfx___sys_sendmmsg+0x10/0x10 [ 110.678738][ T6421] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 110.678784][ T6421] ? ksys_write+0x242/0x270 [ 110.678806][ T6421] ? __pfx_ksys_write+0x10/0x10 [ 110.678832][ T6421] __x64_sys_sendmmsg+0xa0/0xc0 [ 110.678855][ T6421] do_syscall_64+0x14d/0xf80 [ 110.678875][ T6421] ? trace_irq_disable+0x3b/0x150 [ 110.678900][ T6421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.678918][ T6421] ? clear_bhb_loop+0x40/0x90 [ 110.678940][ T6421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.678957][ T6421] RIP: 0033:0x7f25ded9c799 [ 110.678974][ T6421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.678989][ T6421] RSP: 002b:00007f25dfc29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 110.679008][ T6421] RAX: ffffffffffffffda RBX: 00007f25df015fa0 RCX: 00007f25ded9c799 [ 110.679021][ T6421] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 110.679032][ T6421] RBP: 00007f25dfc29090 R08: 0000000000000000 R09: 0000000000000000 [ 110.679043][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.679053][ T6421] R13: 00007f25df016038 R14: 00007f25df015fa0 R15: 00007f25df13fa48 [ 110.679083][ T6421] [ 111.555854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 111.678527][ T6433] netlink: 'syz.2.137': attribute type 4 has an invalid length. [ 111.697705][ T6433] netlink: 'syz.2.137': attribute type 4 has an invalid length. [ 111.997551][ T5958] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.015481][ T5814] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.155698][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 112.162580][ T5958] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 112.171945][ T5958] usb 4-1: config 0 has no interface number 0 [ 112.175720][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 112.185014][ T5958] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.186629][ T5814] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 112.203474][ T5814] usb 1-1: config 0 has no interface number 0 [ 112.203728][ T5958] usb 4-1: config 0 interface 89 has no altsetting 0 [ 112.209766][ T5814] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.228885][ T5958] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 112.248182][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.258328][ T5958] usb 4-1: Product: syz [ 112.263123][ T5958] usb 4-1: Manufacturer: syz [ 112.268701][ T5814] usb 1-1: config 0 interface 89 has no altsetting 0 [ 112.269218][ T5958] usb 4-1: SerialNumber: syz [ 112.289732][ T5814] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 112.299245][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.329557][ T5814] usb 1-1: Product: syz [ 112.333816][ T5814] usb 1-1: Manufacturer: syz [ 112.335245][ T5958] usb 4-1: config 0 descriptor?? [ 112.338758][ T5814] usb 1-1: SerialNumber: syz [ 112.354769][ T5958] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 112.368285][ T5958] em28xx 4-1:0.89: Video interface 89 found: [ 112.407397][ T5814] usb 1-1: config 0 descriptor?? [ 112.425617][ T5814] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 112.440017][ T5814] em28xx 1-1:0.89: Video interface 89 found: [ 112.640177][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.669105][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.807060][ T6435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.017771][ T6435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.185105][ T6444] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 113.263497][ T5958] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 113.276829][ T5814] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 114.158610][ T5958] em28xx 4-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 114.175583][ T5958] em28xx 4-1:0.89: board has no eeprom [ 114.968859][ T29] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 115.059994][ T5814] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 115.105186][ T5814] em28xx 1-1:0.89: board has no eeprom [ 115.150740][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.177471][ T29] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 115.197678][ T5814] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 115.215897][ T5814] em28xx 1-1:0.89: analog set to bulk mode. [ 115.237503][ T5908] em28xx 1-1:0.89: Registering V4L2 extension [ 115.275376][ T5958] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 115.283882][ T5958] em28xx 4-1:0.89: analog set to bulk mode. [ 115.317002][ T29] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 115.357643][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.403160][ T29] usb 2-1: Product: syz [ 115.523211][ T29] usb 2-1: Manufacturer: syz [ 115.554921][ T5908] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 115.587857][ T5908] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 115.602330][ T5908] em28xx 1-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 115.712748][ T5827] usb 4-1: USB disconnect, device number 7 [ 115.728325][ T5827] em28xx 4-1:0.89: Disconnecting em28xx [ 115.774756][ T29] usb 2-1: SerialNumber: syz [ 115.810161][ T5908] em28xx 1-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 115.831470][ T29] usb 2-1: config 0 descriptor?? [ 115.877524][ T5908] em28xx 1-1:0.89: Config register raw data: 0xfffffffb [ 115.906148][ T5908] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 115.913202][ T5908] em28xx 1-1:0.89: No AC97 audio processor [ 116.019908][ T5908] usb 1-1: Decoder not found [ 116.033707][ T5908] em28xx 1-1:0.89: failed to create media graph [ 116.057191][ T6468] netlink: 36 bytes leftover after parsing attributes in process `syz.3.146'. [ 116.114123][ T5908] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 116.143600][ T6471] tipc: Started in network mode [ 116.183385][ T6471] tipc: Node identity 864eb7f33c4b, cluster identity 4711 [ 116.229663][ T6471] tipc: Enabled bearer , priority 0 [ 116.235654][ T5908] em28xx 1-1:0.89: Registering snapshot button... [ 116.308960][ T6473] syzkaller0: entered promiscuous mode [ 116.314604][ T6473] syzkaller0: entered allmulticast mode [ 116.327542][ T6475] tipc: Resetting bearer [ 116.344602][ T29] usb 1-1: USB disconnect, device number 8 [ 116.351578][ T5908] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input5 [ 116.422308][ T29] em28xx 1-1:0.89: Disconnecting em28xx [ 116.444407][ T5908] em28xx 1-1:0.89: Remote control support is not available for this card. [ 116.503924][ T5957] em28xx 4-1:0.89: Registering V4L2 extension [ 116.551510][ T6469] tipc: Resetting bearer [ 116.604876][ T6469] tipc: Disabling bearer [ 116.737699][ T5957] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 116.761472][ T5957] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 116.789974][ T5957] em28xx 4-1:0.89: No AC97 audio processor [ 116.803910][ T5957] usb 4-1: Decoder not found [ 116.828495][ T5957] em28xx 4-1:0.89: failed to create media graph [ 116.892540][ T5957] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 116.949447][ T5957] em28xx 4-1:0.89: Registering snapshot button... [ 116.998389][ T5957] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input6 [ 117.061889][ T5957] em28xx 4-1:0.89: Remote control support is not available for this card. [ 117.125591][ T6489] netlink: 88 bytes leftover after parsing attributes in process `syz.4.150'. [ 117.202999][ T29] em28xx 1-1:0.89: Closing input extension [ 117.210591][ T29] em28xx 1-1:0.89: Deregistering snapshot button [ 117.769424][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.776627][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.809262][ T5827] em28xx 4-1:0.89: Closing input extension [ 117.815096][ T5827] em28xx 4-1:0.89: Deregistering snapshot button [ 117.829507][ T6498] Invalid argument reading file caps for ./file0 [ 117.851427][ T5958] usb 2-1: USB disconnect, device number 8 [ 117.935499][ T29] em28xx 1-1:0.89: Freeing device [ 118.004934][ T6496] Cannot find del_set index 2 as target [ 118.181347][ T6502] FAULT_INJECTION: forcing a failure. [ 118.181347][ T6502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.195452][ T6502] CPU: 1 UID: 0 PID: 6502 Comm: syz.1.154 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.195481][ T6502] Tainted: [L]=SOFTLOCKUP [ 118.195487][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.195498][ T6502] Call Trace: [ 118.195505][ T6502] [ 118.195513][ T6502] dump_stack_lvl+0xe8/0x150 [ 118.195542][ T6502] should_fail_ex+0x412/0x560 [ 118.195590][ T6502] _copy_to_user+0x31/0xb0 [ 118.195604][ T6502] copy_siginfo_to_user+0x22/0xc0 [ 118.195619][ T6502] x64_setup_rt_frame+0x77b/0xcb0 [ 118.195641][ T6502] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 118.195657][ T6502] arch_do_signal_or_restart+0x424/0x830 [ 118.195670][ T6502] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 118.195685][ T6502] ? __pfx_n_tty_ioctl+0x10/0x10 [ 118.195702][ T6502] exit_to_user_mode_loop+0x86/0x480 [ 118.195714][ T6502] ? rcu_is_watching+0x15/0xb0 [ 118.195732][ T6502] do_syscall_64+0x32d/0xf80 [ 118.195744][ T6502] ? trace_irq_disable+0x3b/0x150 [ 118.195759][ T6502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.195769][ T6502] ? clear_bhb_loop+0x40/0x90 [ 118.195781][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.195791][ T6502] RIP: 0033:0x7f510819c797 [ 118.195802][ T6502] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 118.195810][ T6502] RSP: 002b:00007f510900d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.195821][ T6502] RAX: 0000000000000010 RBX: 00007f5108415fa0 RCX: 00007f510819c799 [ 118.195828][ T6502] RDX: 00002000000000c0 RSI: 0000000000005403 RDI: 0000000000000005 [ 118.195835][ T6502] RBP: 00007f510900d090 R08: 0000000000000000 R09: 0000000000000000 [ 118.195841][ T6502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.195847][ T6502] R13: 00007f5108416038 R14: 00007f5108415fa0 R15: 00007f510853fa48 [ 118.195862][ T6502] [ 118.554114][ T5827] em28xx 4-1:0.89: Freeing device [ 118.720542][ T6506] FAULT_INJECTION: forcing a failure. [ 118.720542][ T6506] name failslab, interval 1, probability 0, space 0, times 0 [ 118.808208][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.818463][ T6506] CPU: 1 UID: 0 PID: 6506 Comm: syz.2.155 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.818491][ T6506] Tainted: [L]=SOFTLOCKUP [ 118.818498][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.818508][ T6506] Call Trace: [ 118.818516][ T6506] [ 118.818523][ T6506] dump_stack_lvl+0xe8/0x150 [ 118.818554][ T6506] should_fail_ex+0x412/0x560 [ 118.818585][ T6506] should_failslab+0xa8/0x100 [ 118.818611][ T6506] __kmalloc_noprof+0xe8/0x760 [ 118.818632][ T6506] ? rcu_is_watching+0x15/0xb0 [ 118.818656][ T6506] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 118.818685][ T6506] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 118.818714][ T6506] genl_family_rcv_msg_doit+0xd9/0x330 [ 118.818737][ T6506] ? __asan_memcpy+0x40/0x70 [ 118.818756][ T6506] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 118.818786][ T6506] ? apparmor_capable+0x126/0x170 [ 118.818809][ T6506] ? bpf_lsm_capable+0x9/0x20 [ 118.818833][ T6506] ? security_capable+0x7e/0x2c0 [ 118.818865][ T6506] genl_rcv_msg+0x61c/0x7a0 [ 118.818893][ T6506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.818913][ T6506] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 118.818935][ T6506] ? __lock_acquire+0x6b5/0x2cf0 [ 118.818970][ T6506] netlink_rcv_skb+0x232/0x4b0 [ 118.818998][ T6506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.819021][ T6506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.819065][ T6506] ? down_read+0x272/0x2e0 [ 118.819085][ T6506] ? genl_rcv+0xd/0x40 [ 118.819107][ T6506] genl_rcv+0x28/0x40 [ 118.819126][ T6506] netlink_unicast+0x80f/0x9b0 [ 118.819159][ T6506] ? __pfx_netlink_unicast+0x10/0x10 [ 118.819186][ T6506] ? netlink_sendmsg+0x650/0xb40 [ 118.819201][ T6506] ? skb_put+0x11b/0x210 [ 118.819224][ T6506] netlink_sendmsg+0x813/0xb40 [ 118.819257][ T6506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.819278][ T6506] ? aa_sock_msg_perm+0xf1/0x1b0 [ 118.819305][ T6506] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 118.819329][ T6506] ____sys_sendmsg+0x972/0x9f0 [ 118.819359][ T6506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.819389][ T6506] ? import_iovec+0x73/0xa0 [ 118.819413][ T6506] ___sys_sendmsg+0x2a5/0x360 [ 118.819440][ T6506] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.819498][ T6506] ? __fget_files+0x2a/0x420 [ 118.819524][ T6506] ? __fget_files+0x3a0/0x420 [ 118.819560][ T6506] __x64_sys_sendmsg+0x1bd/0x2a0 [ 118.819584][ T6506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.819616][ T6506] ? __pfx_ksys_write+0x10/0x10 [ 118.819647][ T6506] do_syscall_64+0x14d/0xf80 [ 118.819667][ T6506] ? trace_irq_disable+0x3b/0x150 [ 118.819693][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.819711][ T6506] ? clear_bhb_loop+0x40/0x90 [ 118.819734][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.819750][ T6506] RIP: 0033:0x7f25ded9c799 [ 118.819764][ T6506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.819779][ T6506] RSP: 002b:00007f25dfc29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.819798][ T6506] RAX: ffffffffffffffda RBX: 00007f25df015fa0 RCX: 00007f25ded9c799 [ 118.819811][ T6506] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 118.819822][ T6506] RBP: 00007f25dfc29090 R08: 0000000000000000 R09: 0000000000000000 [ 118.819833][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.819844][ T6506] R13: 00007f25df016038 R14: 00007f25df015fa0 R15: 00007f25df13fa48 [ 118.819873][ T6506] [ 119.868039][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.885375][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.920227][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.967800][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.983310][ T6516] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.195453][ T796] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 120.249500][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.266433][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.329934][ T6520] netlink: 132 bytes leftover after parsing attributes in process `syz.0.160'. [ 120.556673][ T796] usb 2-1: Using ep0 maxpacket: 32 [ 120.580899][ T796] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 120.594798][ T796] usb 2-1: config 0 has no interface number 0 [ 120.617170][ T796] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.638445][ T796] usb 2-1: config 0 interface 89 has no altsetting 0 [ 120.648278][ T796] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 120.657685][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.665808][ T796] usb 2-1: Product: syz [ 120.678188][ T796] usb 2-1: Manufacturer: syz [ 120.686996][ T796] usb 2-1: SerialNumber: syz [ 120.706646][ T796] usb 2-1: config 0 descriptor?? [ 120.720330][ T796] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 120.738946][ T796] em28xx 2-1:0.89: Video interface 89 found: [ 121.183156][ T6514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.195823][ T6514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.485510][ T5814] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 121.535612][ T5958] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 121.551728][ T6537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.165'. [ 121.609157][ T796] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 121.625946][ T5814] usb 4-1: device descriptor read/64, error -71 [ 121.635001][ T6539] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=764 (1528 ns) > initial count (368 ns). Using initial count to start timer. [ 121.653789][ T6540] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=764 (1528 ns) > initial count (368 ns). Using initial count to start timer. [ 121.748652][ T5958] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.749562][ T6539] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=764 (1528 ns) > initial count (392 ns). Using initial count to start timer. [ 121.790388][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.166'. [ 121.830490][ T5958] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 121.864217][ T5958] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 121.875414][ T5814] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 121.884394][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.894703][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.907774][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.931738][ T5958] usb 1-1: Product: syz [ 121.952311][ T5958] usb 1-1: Manufacturer: syz [ 121.968262][ T5958] usb 1-1: SerialNumber: syz [ 122.055284][ T5958] usb 1-1: config 0 descriptor?? [ 122.075466][ T5814] usb 4-1: device descriptor read/64, error -71 [ 122.232708][ T5814] usb usb4-port1: attempt power cycle [ 122.635698][ T5814] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 122.776968][ T5814] usb 4-1: device descriptor read/8, error -71 [ 123.015424][ T5814] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 123.046979][ T5814] usb 4-1: device descriptor read/8, error -71 [ 123.156648][ T5814] usb usb4-port1: unable to enumerate USB device [ 123.471609][ T796] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 123.506051][ T796] em28xx 2-1:0.89: board has no eeprom [ 123.585391][ T796] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 123.593744][ T796] em28xx 2-1:0.89: analog set to bulk mode. [ 123.615008][ T5814] em28xx 2-1:0.89: Registering V4L2 extension [ 123.700405][ T5814] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 123.747021][ T5814] em28xx 2-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 123.823487][ T5814] em28xx 2-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 123.862286][ T5814] em28xx 2-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 123.881517][ T5814] em28xx 2-1:0.89: Config register raw data: 0xfffffffb [ 123.909269][ T5814] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 123.919744][ T5814] em28xx 2-1:0.89: No AC97 audio processor [ 123.983755][ T5814] usb 2-1: Decoder not found [ 124.160245][ T29] usb 2-1: USB disconnect, device number 9 [ 124.170080][ T5814] em28xx 2-1:0.89: failed to create media graph [ 124.171478][ T29] em28xx 2-1:0.89: Disconnecting em28xx [ 124.205154][ T5814] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 124.224468][ T5814] em28xx 2-1:0.89: Registering snapshot button... [ 124.224753][ T6558] ================================================================== [ 124.238972][ T6558] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 124.246338][ T6558] Read of size 8 at addr ffff88802b5e8790 by task v4l_id/6558 [ 124.253786][ T6558] [ 124.256110][ T6558] CPU: 1 UID: 0 PID: 6558 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 124.256130][ T6558] Tainted: [L]=SOFTLOCKUP [ 124.256134][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.256140][ T6558] Call Trace: [ 124.256145][ T6558] [ 124.256150][ T6558] dump_stack_lvl+0xe8/0x150 [ 124.256167][ T6558] print_report+0xba/0x230 [ 124.256180][ T6558] ? v4l2_fh_open+0xac/0x420 [ 124.256193][ T6558] kasan_report+0x117/0x150 [ 124.256207][ T6558] ? v4l2_fh_open+0xac/0x420 [ 124.256221][ T6558] v4l2_fh_open+0xac/0x420 [ 124.256234][ T6558] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 124.256248][ T6558] em28xx_v4l2_open+0x157/0x9a0 [ 124.256258][ T6558] ? do_raw_spin_lock+0x12b/0x2f0 [ 124.256270][ T6558] v4l2_open+0x1bf/0x3a0 [ 124.256284][ T6558] chrdev_open+0x4cd/0x5e0 [ 124.256297][ T6558] ? __pfx_chrdev_open+0x10/0x10 [ 124.256309][ T6558] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 124.256321][ T6558] ? __pfx_chrdev_open+0x10/0x10 [ 124.256332][ T6558] do_dentry_open+0x785/0x14e0 [ 124.256349][ T6558] vfs_open+0x3b/0x340 [ 124.256362][ T6558] ? path_openat+0x2df0/0x3860 [ 124.256373][ T6558] path_openat+0x2e08/0x3860 [ 124.256387][ T6558] ? __pfx_stack_trace_save+0x10/0x10 [ 124.256398][ T6558] ? stack_depot_save_flags+0x33/0x810 [ 124.256414][ T6558] ? __pfx_path_openat+0x10/0x10 [ 124.256424][ T6558] ? __x64_sys_openat+0x138/0x170 [ 124.256438][ T6558] ? do_syscall_64+0x14d/0xf80 [ 124.256449][ T6558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.256460][ T6558] ? __lock_acquire+0x6b5/0x2cf0 [ 124.256474][ T6558] do_file_open+0x23e/0x4a0 [ 124.256485][ T6558] ? __pfx_do_file_open+0x10/0x10 [ 124.256500][ T6558] ? _raw_spin_unlock+0x28/0x50 [ 124.256509][ T6558] ? alloc_fd+0x64b/0x6c0 [ 124.256525][ T6558] do_sys_openat2+0x113/0x200 [ 124.256539][ T6558] ? __pfx_do_sys_openat2+0x10/0x10 [ 124.256554][ T6558] ? exc_page_fault+0x6a/0xc0 [ 124.256565][ T6558] ? do_user_addr_fault+0xc6f/0x1340 [ 124.256578][ T6558] __x64_sys_openat+0x138/0x170 [ 124.256594][ T6558] do_syscall_64+0x14d/0xf80 [ 124.256604][ T6558] ? trace_irq_disable+0x3b/0x150 [ 124.256619][ T6558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.256632][ T6558] ? clear_bhb_loop+0x40/0x90 [ 124.256643][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.256652][ T6558] RIP: 0033:0x7fef786a7407 [ 124.256666][ T6558] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 124.256674][ T6558] RSP: 002b:00007ffc0ea20020 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 124.256691][ T6558] RAX: ffffffffffffffda RBX: 00007fef78e21880 RCX: 00007fef786a7407 [ 124.256698][ T6558] RDX: 0000000000000000 RSI: 00007ffc0ea21f1c RDI: ffffffffffffff9c [ 124.256705][ T6558] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 124.256711][ T6558] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 124.256717][ T6558] R13: 00007ffc0ea20270 R14: 00007fef78f88000 R15: 00005580f98f34d8 [ 124.256728][ T6558] [ 124.256731][ T6558] [ 124.555914][ T6558] Allocated by task 5814: [ 124.560224][ T6558] kasan_save_track+0x3e/0x80 [ 124.564902][ T6558] __kasan_kmalloc+0x93/0xb0 [ 124.569473][ T6558] __kmalloc_cache_noprof+0x31c/0x660 [ 124.574823][ T6558] em28xx_v4l2_init+0x10b/0x2e70 [ 124.579750][ T6558] em28xx_init_extension+0x120/0x1c0 [ 124.585024][ T6558] process_scheduled_works+0xb6e/0x18c0 [ 124.590566][ T6558] worker_thread+0xa53/0xfc0 [ 124.595154][ T6558] kthread+0x388/0x470 [ 124.599212][ T6558] ret_from_fork+0x51e/0xb90 [ 124.603792][ T6558] ret_from_fork_asm+0x1a/0x30 [ 124.608552][ T6558] [ 124.610866][ T6558] Freed by task 5814: [ 124.614832][ T6558] kasan_save_track+0x3e/0x80 [ 124.619494][ T6558] kasan_save_free_info+0x46/0x50 [ 124.624516][ T6558] __kasan_slab_free+0x5c/0x80 [ 124.629268][ T6558] kfree+0x1c1/0x630 [ 124.633147][ T6558] em28xx_v4l2_init+0x1683/0x2e70 [ 124.638166][ T6558] em28xx_init_extension+0x120/0x1c0 [ 124.643439][ T6558] process_scheduled_works+0xb6e/0x18c0 [ 124.648977][ T6558] worker_thread+0xa53/0xfc0 [ 124.653556][ T6558] kthread+0x388/0x470 [ 124.657609][ T6558] ret_from_fork+0x51e/0xb90 [ 124.662188][ T6558] ret_from_fork_asm+0x1a/0x30 [ 124.666944][ T6558] [ 124.669254][ T6558] The buggy address belongs to the object at ffff88802b5e8000 [ 124.669254][ T6558] which belongs to the cache kmalloc-8k of size 8192 [ 124.683289][ T6558] The buggy address is located 1936 bytes inside of [ 124.683289][ T6558] freed 8192-byte region [ffff88802b5e8000, ffff88802b5ea000) [ 124.697243][ T6558] [ 124.699549][ T6558] The buggy address belongs to the physical page: [ 124.705959][ T6558] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b5e8 [ 124.714710][ T6558] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 124.723190][ T6558] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 124.730727][ T6558] page_type: f5(slab) [ 124.734692][ T6558] raw: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 124.743265][ T6558] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 124.751833][ T6558] head: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 124.760485][ T6558] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 124.769140][ T6558] head: 00fff00000000003 ffffea0000ad7a01 00000000ffffffff 00000000ffffffff [ 124.777797][ T6558] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 124.786447][ T6558] page dumped because: kasan: bad access detected [ 124.792867][ T6558] page_owner tracks the page as allocated [ 124.798571][ T6558] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10124581474, free_ts 0 [ 124.818273][ T6558] post_alloc_hook+0x231/0x280 [ 124.823037][ T6558] get_page_from_freelist+0x24dc/0x2580 [ 124.828573][ T6558] __alloc_frozen_pages_noprof+0x18d/0x380 [ 124.834369][ T6558] allocate_slab+0x77/0x660 [ 124.838862][ T6558] refill_objects+0x331/0x3c0 [ 124.843529][ T6558] __pcs_replace_empty_main+0x2e6/0x730 [ 124.849068][ T6558] __kmalloc_noprof+0x474/0x760 [ 124.853901][ T6558] __usb_create_hcd+0x67/0x920 [ 124.858654][ T6558] vhci_hcd_probe+0x1e6/0x3e0 [ 124.863318][ T6558] platform_probe+0xf9/0x190 [ 124.867899][ T6558] really_probe+0x267/0xaf0 [ 124.872394][ T6558] __driver_probe_device+0x18c/0x320 [ 124.877671][ T6558] driver_probe_device+0x4f/0x240 [ 124.882687][ T6558] __device_attach_driver+0x279/0x430 [ 124.888051][ T6558] bus_for_each_drv+0x258/0x2f0 [ 124.892888][ T6558] __device_attach+0x2c5/0x450 [ 124.897643][ T6558] page_owner free stack trace missing [ 124.902994][ T6558] [ 124.905300][ T6558] Memory state around the buggy address: [ 124.910918][ T6558] ffff88802b5e8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.918963][ T6558] ffff88802b5e8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.927005][ T6558] >ffff88802b5e8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.935049][ T6558] ^ [ 124.939616][ T6558] ffff88802b5e8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.947659][ T6558] ffff88802b5e8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.955701][ T6558] ================================================================== [ 124.966561][ T5814] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input7 [ 125.038504][ T5958] usb 1-1: USB disconnect, device number 9 [ 125.091777][ T5814] em28xx 2-1:0.89: Remote control support is not available for this card. [ 125.128367][ T29] em28xx 2-1:0.89: Closing input extension [ 125.134208][ T29] em28xx 2-1:0.89: Deregistering snapshot button [ 125.234796][ T6558] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 125.242043][ T6558] CPU: 1 UID: 0 PID: 6558 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 125.252552][ T6558] Tainted: [L]=SOFTLOCKUP [ 125.256877][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.266929][ T6558] Call Trace: [ 125.270195][ T6558] [ 125.273117][ T6558] vpanic+0x56c/0xa60 [ 125.277107][ T6558] ? __pfx_vpanic+0x10/0x10 [ 125.281618][ T6558] panic+0xc5/0xd0 [ 125.285330][ T6558] ? __pfx_panic+0x10/0x10 [ 125.289746][ T6558] ? preempt_schedule_thunk+0x16/0x30 [ 125.295099][ T6558] ? preempt_schedule_thunk+0x16/0x30 [ 125.300452][ T6558] ? v4l2_fh_open+0xac/0x420 [ 125.305027][ T6558] check_panic_on_warn+0x89/0xb0 [ 125.309955][ T6558] ? v4l2_fh_open+0xac/0x420 [ 125.314542][ T6558] end_report+0x73/0x180 [ 125.318779][ T6558] ? v4l2_fh_open+0xac/0x420 [ 125.323356][ T6558] kasan_report+0x128/0x150 [ 125.327848][ T6558] ? v4l2_fh_open+0xac/0x420 [ 125.332420][ T6558] v4l2_fh_open+0xac/0x420 [ 125.336819][ T6558] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 125.342780][ T6558] em28xx_v4l2_open+0x157/0x9a0 [ 125.347620][ T6558] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.352641][ T6558] v4l2_open+0x1bf/0x3a0 [ 125.356870][ T6558] chrdev_open+0x4cd/0x5e0 [ 125.361273][ T6558] ? __pfx_chrdev_open+0x10/0x10 [ 125.366193][ T6558] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 125.372517][ T6558] ? __pfx_chrdev_open+0x10/0x10 [ 125.377463][ T6558] do_dentry_open+0x785/0x14e0 [ 125.382236][ T6558] vfs_open+0x3b/0x340 [ 125.386309][ T6558] ? path_openat+0x2df0/0x3860 [ 125.391053][ T6558] path_openat+0x2e08/0x3860 [ 125.395643][ T6558] ? __pfx_stack_trace_save+0x10/0x10 [ 125.400998][ T6558] ? stack_depot_save_flags+0x33/0x810 [ 125.406461][ T6558] ? __pfx_path_openat+0x10/0x10 [ 125.411404][ T6558] ? __x64_sys_openat+0x138/0x170 [ 125.416428][ T6558] ? do_syscall_64+0x14d/0xf80 [ 125.421179][ T6558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.427247][ T6558] ? __lock_acquire+0x6b5/0x2cf0 [ 125.432188][ T6558] do_file_open+0x23e/0x4a0 [ 125.436675][ T6558] ? __pfx_do_file_open+0x10/0x10 [ 125.441686][ T6558] ? _raw_spin_unlock+0x28/0x50 [ 125.446527][ T6558] ? alloc_fd+0x64b/0x6c0 [ 125.451556][ T6558] do_sys_openat2+0x113/0x200 [ 125.456232][ T6558] ? __pfx_do_sys_openat2+0x10/0x10 [ 125.461436][ T6558] ? exc_page_fault+0x6a/0xc0 [ 125.466094][ T6558] ? do_user_addr_fault+0xc6f/0x1340 [ 125.471362][ T6558] __x64_sys_openat+0x138/0x170 [ 125.476234][ T6558] do_syscall_64+0x14d/0xf80 [ 125.480811][ T6558] ? trace_irq_disable+0x3b/0x150 [ 125.485826][ T6558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.491879][ T6558] ? clear_bhb_loop+0x40/0x90 [ 125.496555][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.502430][ T6558] RIP: 0033:0x7fef786a7407 [ 125.506838][ T6558] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 125.526435][ T6558] RSP: 002b:00007ffc0ea20020 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 125.534832][ T6558] RAX: ffffffffffffffda RBX: 00007fef78e21880 RCX: 00007fef786a7407 [ 125.542789][ T6558] RDX: 0000000000000000 RSI: 00007ffc0ea21f1c RDI: ffffffffffffff9c [ 125.550746][ T6558] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 125.558706][ T6558] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 125.566659][ T6558] R13: 00007ffc0ea20270 R14: 00007fef78f88000 R15: 00005580f98f34d8 [ 125.574618][ T6558] [ 125.577771][ T6558] Kernel Offset: disabled [ 125.582078][ T6558] Rebooting in 86400 seconds..