last executing test programs: 13m59.675944206s ago: executing program 32 (id=1128): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x8, 0x0, 0x5, 0x0}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x908) 10m25.158651456s ago: executing program 33 (id=2314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000740)={0x8, 0x0, [{0x2, 0x4, 0x1, 0x0, @adapter={0x87e, 0x10, 0x1, 0xfffff6df}}, {0x2, 0x2, 0x0, 0x0, @sint={0x6, 0x2}}, {0x80, 0x3, 0x1, 0x0, @irqchip={0x80, 0x6}}, {0x0, 0x1, 0x0, 0x0, @irqchip={0x10000, 0x59f0}}, {0x2, 0x3, 0x0, 0x0, @sint={0xd60, 0xa6}}, {0x2596d635, 0x4, 0x0, 0x0, @sint={0x71, 0x5}}, {0x0, 0x1, 0x0, 0x0, @msi={0x2, 0x4fc, 0x0, 0xfffffffa}}, {0xfffffff1, 0x2, 0x1, 0x0, @sint={0x0, 0xfffffffa}}]}) close(r3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x801) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000005c0)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x8040, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000001003e00", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7201}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x323a}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) 8m27.109919616s ago: executing program 5 (id=2894): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000004, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x300, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 8m27.002288215s ago: executing program 5 (id=2896): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f00107f00000000010902120001000000000904"], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000002240)=""/155, 0x9b}], 0x1, 0x8, 0x5) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000340)={0x2, 0x1, 0xffffff81, 0x0, 0xffffffff, 0x8}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="24010000170001000000000000000000fc0000000000000000000000000000000000000000000000e0000001000000000000000000000000fc0000000000000000000000000000002001000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001ffffffff00000000000000000000000000000000000000000a0000c000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000800000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c9b8000000000000000000000000000000000000000000000000000000000000000004000000"], 0x124}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x80000001, 0x0, 0x8}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000001600)=0x1, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x10, 0x80003, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000fff1000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000, 0x1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast2, @in6=@private0, 0x4e22, 0x8, 0x4e21, 0x2, 0x2, 0x90, 0x20, 0x11, r7, r8}, {0x7fffffff, 0x2, 0x0, 0x6c2a, 0x9, 0x3, 0x3, 0x7fff}, {0x5958b493, 0xfffffffffffffff2, 0x4}, 0x737, 0x6e6bbe, 0x1, 0x1, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x3502, 0x4, 0x2, 0x2, 0xfa, 0x8e, 0x9}}, 0xe4) 8m25.396539852s ago: executing program 5 (id=2907): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x500, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 8m25.361652426s ago: executing program 5 (id=2908): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x500, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 8m25.252666759s ago: executing program 5 (id=2909): r0 = userfaultfd(0x80001) r1 = openat$vim2m(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000003c0)={0x2, @vbi={0x455eb137, 0x5, 0x7, 0x20343059, [0x5], [0x52ab, 0xd], 0x13a}}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_clone3(&(0x7f00000023c0)={0x400000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r2) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) socket$inet6(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xf9\xff\xff\xff\xff\xff\xff\xff+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r4 = openat2$dir(0xffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x200002, 0x148, 0x18}, 0x18) openat$fb0(0xffffffffffffff9c, 0x0, 0x141000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40040023, 0x1000, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x43, 0x0, @fd, 0x11e, 0x5, 0x0, 0x5, 0x0, {0x3, r8}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x48, 0x4007, @fd_index=0x1, 0x0, 0x8, 0xd7, 0x0, 0x0, {0x3}}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) statx(r4, &(0x7f0000000200)='./file0\x00', 0x4000, 0x80, &(0x7f0000000240)) syz_usb_control_io$rtl8150(r3, &(0x7f0000002780)={0xc, &(0x7f0000002700)={0x0, 0x21, 0x78, {0x78, 0xd, "977a32abf0a65aa9b9e79af08349b4b81288af128b040e4b2340b1adf7ca850a49932e634588bf0150b8b31374802490fe6dba9586daa7fcac07fe53a122a5aef7360e704a46d7f2ebfffda7859597d2586a980087ea72d25272cb23527a5a79836706a50be7acc118ede6c1156663e35a0d863bc578"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}}, &(0x7f0000002940)={0x18, &(0x7f00000027c0)={0x20, 0x3, 0x60, "d9970c11893cdd7a0161a396b1627c6f3c51ee78c65f47f9acd6345354d85bcea8d64505862e11fd5a5015023f438c16cff3fbdf162f9db13abe72c1285837bee7b0eb97f2162d799974b0ed8751c5ed47386246050497981b4d7e1dcb37cb87"}, &(0x7f0000002840)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002880)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000028c0)={0xc0, 0x5, 0x5, "f432d64abb"}, &(0x7f0000002900)={0x40, 0x5, 0x5, "08d1595031"}}) 8m22.020508425s ago: executing program 5 (id=2933): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x40086602, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, &(0x7f0000000540)={0x1c, "584fc4dfae9a34fb1ffbb539b436cc843759a57bf235d2f60200"}}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) pwrite64(r5, &(0x7f0000000400), 0x0, 0x9a) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000001c0)={0x4, 0x0, 0x1, {0x2, @pix={0x2, 0x0, 0x34325842, 0x4, 0xad, 0x2, 0xa, 0xdfc, 0x1, 0x4, 0x2, 0x2}}, 0x7f}) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000040)}}) socket$nl_netfilter(0x10, 0x3, 0xc) 8m6.475728975s ago: executing program 34 (id=2933): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x40086602, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, &(0x7f0000000540)={0x1c, "584fc4dfae9a34fb1ffbb539b436cc843759a57bf235d2f60200"}}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) pwrite64(r5, &(0x7f0000000400), 0x0, 0x9a) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000001c0)={0x4, 0x0, 0x1, {0x2, @pix={0x2, 0x0, 0x34325842, 0x4, 0xad, 0x2, 0xa, 0xdfc, 0x1, 0x4, 0x2, 0x2}}, 0x7f}) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000040)}}) socket$nl_netfilter(0x10, 0x3, 0xc) 7m21.117593103s ago: executing program 7 (id=3176): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce010282970902120001000000000904000000020201"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x300000c) socket$netlink(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001200)=ANY=[@ANYBLOB="0500000008000000ed00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000004"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7m16.775815191s ago: executing program 7 (id=3195): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) r4 = openat$fb0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000280)={0x2bc, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45844}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0xfffffffffffffda8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r7, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/45, 0x2d}], 0x1) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88848b96648e582003c9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000002c0)=0x0) setpriority(0x0, r9, 0x1) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) 7m15.737946099s ago: executing program 7 (id=3202): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) io_setup(0x2007, &(0x7f0000000980)=0x0) eventfd2(0x9, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x7, 0x4) io_pgetevents(r3, 0x2, 0x0, 0x0, 0x0, 0x0) io_submit(r3, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x40, 0x0, 0x46}) 7m12.366270812s ago: executing program 7 (id=3215): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x20, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 7m10.719903578s ago: executing program 7 (id=3225): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000000018000000000000001ae92daeb950001000600000000000000009675df181f122af24ab235aad373b4d6280b8af93942422df5a6452ad5aa0b5a0e89eebb02976daf17749f50b163bc9ec604ea87ca9be24cbc9081f8bb10481b43f98b98a6419aa67ec76f7e527988b79d6eca79b5a45ce65e5dc9bbf9b80922a7fa4721246a8f71ea215d3020f44ab74623c68453eecd1bc45a7a7feb36a3f13c7e4598b665d20a4da9ba0cd4d90297f602feb49966b6c0648e8e7b438d282dba277ec3db3c8d0b1acf45a961446e40d63a0dd57f29612875ebdd856d53db0ef0548c934444b47349eb6be7b7d59dec4eadd6"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) setrlimit(0xf, &(0x7f0000000000)={0x0, 0x3}) timer_create(0x3, 0x0, &(0x7f0000000300)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)="8c", 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)=""/17, &(0x7f00000000c0)=0x14) timer_settime(0x0, 0x0, &(0x7f0000000080), 0x0) unshare(0x40000000) unshare(0x28000600) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc2c45512, &(0x7f0000000640)={{0x7, 0x2000000, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x7, 0xfffffffd, 0x80000001, 0x0, 0x0, 0x1, 0xfffffffc, 0xfffffffd, 0x4400006, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xfffffff5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x3, 0x20000003, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40, 0x7ffffbff, 0x4, 0x200, 0x0, 0x0, 0x0, 0x8000, 0xe73e, 0x0, 0x0, 0xffffffca, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81, 0x3, 0x7fff, 0x3883, 0x800, 0x402, 0x0, 0x0, 0x4, 0x8, 0xce5b, 0x0, 0x0, 0x0, 0x8, 0x408, 0x0, 0x8, 0x9, 0x100, 0x0, 0x1, 0x0, 0x0, 0x10004000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400f4cb, 0x0, 0x0, 0x0, 0x7, 0x0, 0xa, 0x0, 0x0, 0x3, 0x1, 0x788, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4]}) mkdir(0x0, 0x8) inotify_init() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) futex(0x0, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x9) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xffb) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaa35211adaf01f018008004500003000000020fc0290780000001ce00003000306647800fa00094570fff600650005010400030a010102ac1414aa"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x1f, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 7m9.904475155s ago: executing program 7 (id=3228): r0 = socket$packet(0x11, 0x2, 0x300) io_uring_setup(0x1124, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x3, 0x0, 0x3, 0x13}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$key(0xf, 0x3, 0x2) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0xa}}, {{0xa, 0x0, 0x0, @remote, 0x9}}}, 0x104) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0x14, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}, 0x5d5}], 0x1, 0x10002, 0x0) 6m54.840524667s ago: executing program 35 (id=3228): r0 = socket$packet(0x11, 0x2, 0x300) io_uring_setup(0x1124, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x3, 0x0, 0x3, 0x13}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$key(0xf, 0x3, 0x2) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0xa}}, {{0xa, 0x0, 0x0, @remote, 0x9}}}, 0x104) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0x14, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}, 0x5d5}], 0x1, 0x10002, 0x0) 6m14.528284678s ago: executing program 8 (id=3436): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x16, 0x21, 0x5c, 0x7fffffff}]}) getgroups(0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6m12.670171558s ago: executing program 8 (id=3444): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r0, r1}, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000002030101000000faffffffffffffff000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x2c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)) syz_pidfd_open(0x0, 0x0) move_pages(0x0, 0x6, &(0x7f0000000300)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000340)=[0x1, 0x4, 0x2, 0x2, 0x7f, 0xa28, 0xa5cc, 0x2], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) openat$uhid(0xffffff9c, &(0x7f00000003c0), 0x802, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) 6m10.838601793s ago: executing program 8 (id=3449): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000000200), 0x4) listen(r3, 0x0) close(0x3) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x625, 0x0, 0x0, "", [@address_filter={0x28, 0x23, {@in=@private=0xa010102, @in=@private=0xa010100, 0x2, 0x6, 0x9}}]}, 0x38}}, 0x20040810) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000440)=0x10) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000300)={0xffffffff, {{0xa, 0x4e21, 0x400, @empty, 0x80000001}}, {{0xa, 0x4e22, 0x75, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7145591d}}}, 0x104) r5 = socket$inet_smc(0x2b, 0x1, 0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0xc0000069) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000012c0)=@raw={'raw\x00', 0x8, 0x3, 0xc94, 0x340, 0x25, 0x148, 0x0, 0x60, 0xc00, 0x2a8, 0x2a8, 0xc00, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x4, 0xd5, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00', {0xffff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xa, 0x4, 0xec1, 'syz1\x00', {0xbdc}}}}, {{@ip={@broadcast, @multicast1, 0xffffffff, 0xffffff00, 'veth1_to_bond\x00', 'gre0\x00'}, 0x0, 0x878, 0x8c0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x3ff}, {0x59}, {0x4, 0x3}, {0x0, 0x2}, {0x2, 0x1}, {0x8}, {0xffffffff, 0x3}, {0x77, 0x1}, {0x9, 0x2}, {0x1b91, 0x1}, {0xd76, 0x3}], [{0xe670, 0x5}, {0x9, 0x6}, {0x6, 0xb792}, {0x1, 0x7}, {0xf912, 0x4}, {0x7, 0x1}, {0x8c2b, 0x3}, {0x3, 0x4}, {0x1, 0x6}, {0x4, 0x400}, {0xca, 0x9}], 0x2}, {[{0x4, 0x1}, {0x1}, {0x4, 0x2}, {0xa, 0x3}, {0x355, 0x3}, {0x3ff, 0x2}, {0x8}, {0xffffff34, 0x1}, {0x2, 0x3}, {0x4}, {0x6b46, 0x3}], [{0x2, 0x5}, {0x2, 0x9}, {0xfffffffa, 0x88}, {0xfffff000, 0x175a}, {0x7, 0x200}, {0x8000}, {0x3ff}, {0x2, 0x6de89782}, {0x6, 0x519a}, {0x0, 0x8}, {0x7, 0x88}], 0x0, 0x7}, {[{0x0, 0x2}, {0x8f8}, {0x8, 0x3}, {0x2, 0x2}, {0x80000001, 0x1}, {0x2, 0x3}, {0x6}, {0x8001, 0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x2}], [{0x3fbe27c4, 0x9}, {0xdf, 0x7fff}, {0x8, 0x5}, {0x8, 0x5}, {0x3, 0x3}, {0xffff, 0x8}, {0x7, 0x6}, {0xffff, 0x8}, {0x4e24, 0x81}, {0x1, 0x84}, {0x101, 0x8}], 0xb, 0x5}, {[{0x2, 0x3}, {0x401, 0x1}, {0x40, 0x2}, {0x2, 0x2}, {0x80000000}, {0x2, 0x1}, {0xb, 0x3}, {0x8, 0x1}, {0x4, 0x1}, {0x5}, {0x8}], [{0xb, 0x7ff}, {0x1000, 0x1}, {0x9, 0xf}, {0x2, 0x8}, {0x2, 0x101}, {0x5, 0x7fff}, {0x7, 0x4}, {0x7, 0x4}, {0xfffff800, 0xffffff80}, {0x0, 0xfffffffe}, {0x5, 0x7}], 0x3, 0xa}, {[{0x8, 0x2}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x9, 0x3}, {0x17c087d, 0x2}, {0x7fff, 0x3}, {0x80, 0x3}, {0x0, 0x3}, {0x40, 0x1}, {0x9, 0x2}], [{0x80000000, 0xfffffffc}, {0xfffffd00, 0x7}, {0x5, 0xc10}, {0xeb1d, 0x10001}, {0x8, 0x2}, {0xaf9c, 0x283}, {0x4, 0x2}, {0x7f, 0x9}, {0x400, 0x38000000}, {0x2, 0xb}, {0x2, 0x2}], 0x5, 0x1}, {[{0x535}, {0xffff, 0x3}, {0x3, 0x1}, {0xe}, {0x1, 0x2}, {0x7}, {0x4, 0x3}, {0x5}, {0x8, 0x3}, {0x37, 0x1}, {0x8}], [{0x4, 0x200}, {0x0, 0x9}, {0x4, 0x81}, {0xfffffc00, 0xfff}, {0x2, 0x1}, {0x3ff, 0x8}, {0x9, 0x6}, {0x40, 0x101}, {0xfffffffe, 0x7e05d4a7}, {0x0, 0x866}, {0x5, 0x6}], 0x1, 0x6}, {[{0x26, 0x2}, {0x3}, {0x401, 0x1}, {0x7fffffff, 0x1}, {0xff, 0x2}, {0x99e0}, {0x4}, {0x6}, {0x6417, 0x1}, {0x8}, {0x0, 0x1}], [{0x2, 0x1}, {0x8104, 0x9}, {0x9, 0xe}, {0x100, 0x9}, {0x9, 0x400075}, {0xede, 0xff}, {0x3, 0x9f}, {0xfffffffe, 0x1}, {0x94, 0x5}, {0x4, 0x9}, {0x2, 0x9}], 0x2, 0x7}, {[{0x6}, {0x5, 0x3}, {0x3ff, 0x3}, {0x80, 0x2}, {0x6, 0x2}, {}, {0x18000, 0x2}, {0x2, 0x2}, {0x8, 0x2}, {0x133, 0x3}, {0xd, 0x2}], [{0x80, 0xbca}, {0x1, 0xab9f}, {0x6, 0x1}, {0x0, 0x7}, {0x8, 0x1fd}, {0x49, 0x7}, {0x1, 0x63d14f22}, {0x2, 0x8}, {0x8727, 0x401}, {0x3, 0x1}, {0x8, 0xf}], 0x9, 0x8}, {[{0x7}, {0xc}, {0xfffffffb, 0x2}, {0x5, 0x2}, {0x7}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x40, 0x2}, {0x10, 0x2}, {0xfff, 0x1}], [{0x402, 0xfff}, {0x5, 0x1}, {0xc4, 0x9}, {0x8, 0x9}, {0x3, 0x5}, {0x5, 0x6}, {0x5, 0xa}, {0x200, 0x8}, {0x2, 0x6}, {0xfffffe1e}, {0x1ed, 0x6}], 0x5, 0x3}, {[{0xfffffff7, 0x2}, {0x5, 0x3}, {0x0, 0x3}, {0x80, 0x2}, {0x10001, 0x1}, {0xa, 0x2}, {0x4000000, 0x1}, {0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x8, 0x1}], [{0x0, 0x77d}, {0x0, 0x3935}, {0x0, 0x4cf6}, {0x200, 0xfffffff3}, {0x10001, 0x401}, {0xffff, 0x7}, {0x4, 0x6}, {0x8001, 0x6}, {0x4, 0xffffffff}, {0x5}, {0x80, 0x3}], 0x5, 0xb}, {[{0x5791}, {0xfffffff8}, {0x2, 0x2}, {0x4, 0x1}, {0x6, 0x2}, {0x96ea, 0x1}, {0x5, 0x3}, {0x2}, {0x8}, {0x3, 0x2}, {0x8}], [{0x6800000, 0x9}, {0x2, 0x9}, {0x5, 0x1000}, {0xfffffbff, 0x7}, {0x8001, 0x3}, {0x3, 0x7}, {0x3}, {0xffffffff, 0xf73}, {0x6, 0x4}, {0x6, 0x2}, {0x4, 0x7}], 0x6, 0xa}], 0x23}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0xcf0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r6, 0xfffffffffffffffe, 0x29) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000100)='&,[$[}!,\x00', 0x0, r4) landlock_restrict_self(r6, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) 6m10.551241449s ago: executing program 8 (id=3451): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000000c0)={0x1, 'pim6reg0\x00', {}, 0xe388}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000002000010000000000000000000a202000000000000000000008000d000a00000014000200fc000000000000000000000000000000050016002f00000014000100fe8000000000000011000000000000bb"], 0x54}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x328, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r6, {0xf}, {0x0, 0xfff3}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x2fc, 0x2, [@TCA_U32_SEL={0x1e4, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x9, 0xffff, 0x3, 0x8, [{0x6, 0x400000, 0x0, 0x2}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x1}, {0x7, 0x1, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0xc0000000, 0x81, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0x9}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x7fffffff, 0x54, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0xdefb, 0x6, 0x401}, {0x404, 0xaef2, 0xffff, 0x1}, {0x2, 0x8, 0x800, 0x4}]}}, @TCA_U32_SEL={0x114, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x7, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0x8000, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x3ff, 0x80000001, 0x3, 0xa6d}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x2, 0x6, 0x7}, {0x7fff, 0x5, 0x401, 0xc42b}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x328}}, 0x24040094) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r7, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0xa, 0x7) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000440)={r8, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x13, 0x0, 0xe, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "e7431ae0778a8e17e2000000000000ffff0000000000000000000000000500", [0x1f00000000000000, 0x2]}}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x7, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="aa8d8f624adb5a", 0x0, 0x3, 0x20, 0xc, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'sit0\x00'}) 6m10.501682689s ago: executing program 4 (id=3452): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x1fff, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000280001801400040003000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 6m9.449502925s ago: executing program 4 (id=3456): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000003c00010326bd7000fedbdf250c0000000800030014"], 0x1c}}, 0x800) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='syzkaller0\x00', 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}], 0x1}) syz_usb_control_io$printer(r2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e24, 0xa, @local, 0x9}]}, &(0x7f0000000080)=0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180000002000000080c4b66d87e90da2660a708e61bc00000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000837d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xa, 0x657, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) write$UHID_CREATE2(r8, &(0x7f0000000340)=ANY=[], 0x118) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r10 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r10}}, 0x58) ioctl$PPPIOCGUNIT(r7, 0x80047456, &(0x7f0000000040)) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000080), 0x4) readahead(r7, 0x58, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r6, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) socket$kcm(0x10, 0x2, 0x0) 6m7.742031173s ago: executing program 8 (id=3460): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xb, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xc9ca]}, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xe, 0x401}, 0x1c) socket(0x10, 0x2, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/151}, {&(0x7f0000001300)=""/80}, {&(0x7f0000001600)=""/134}], 0x0, &(0x7f0000001440)=""/193}, 0xffffeff8}], 0x80000000000010a, 0x0, 0x0) syz_clone(0xa04800, &(0x7f0000000080)="af623717659f33356e596528e3f9dc807d230479522f43100ed564f8c0f7bd6e", 0x20, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet(r0, &(0x7f0000001580)={0x2, 0x4e20, @multicast2}, 0x10) keyctl$search(0xa, 0x0, &(0x7f0000000080)='user\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001380)=0x0) sched_getattr(r4, &(0x7f00000013c0)={0x38}, 0x38, 0x0) setxattr$security_capability(0x0, &(0x7f00000011c0), 0x0, 0x0, 0x5) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') preadv(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x96, 0x0) 6m6.57959605s ago: executing program 8 (id=3464): pipe(&(0x7f0000000300)) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x700, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x700}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@setlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x404}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfb}}, @IFLA_MTU={0x8, 0x4, 0x7}]}, 0x5c}}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x18) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r3, 0x54) socket(0x1e, 0x805, 0x0) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000040), 0x0, 0x20004010, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f0000002a00)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000340)=""/175, 0xaf}, 0x8}, {{&(0x7f0000000400)=@hci, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000480)=""/57, 0x39}, {&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000580)=""/72, 0x48}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/44, 0x2c}, {&(0x7f0000001680)=""/121, 0x79}, {&(0x7f0000001700)=""/90, 0x5a}, {&(0x7f0000001780)=""/5, 0x5}, {0x0}, {&(0x7f00000027c0)=""/216, 0xd8}], 0xa, &(0x7f0000002940)=""/156, 0x9c}, 0xf9a}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) timer_create(0x0, 0x0, 0x0) timer_delete(0x0) sched_setattr(0x0, 0x0, 0x0) 6m6.366951024s ago: executing program 4 (id=3465): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) r4 = openat$fb0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000280)={0x2bc, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45844}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0xfffffffffffffda8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r7, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/45, 0x2d}], 0x1) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88848b96648e582003c9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000002c0)=0x0) setpriority(0x0, r9, 0x1) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) 6m4.768742678s ago: executing program 4 (id=3472): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r0, r1}, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000002030101000000faffffffffffffff000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x2c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)) syz_pidfd_open(0x0, 0x0) move_pages(0x0, 0x6, &(0x7f0000000300)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000340)=[0x1, 0x4, 0x2, 0x2, 0x7f, 0xa28, 0xa5cc, 0x2], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) openat$uhid(0xffffff9c, &(0x7f00000003c0), 0x802, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) 6m4.302058454s ago: executing program 4 (id=3475): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000003c00010326bd7000fedbdf250c0000000800030014"], 0x1c}}, 0x800) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='syzkaller0\x00', 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}], 0x1}) syz_usb_control_io$printer(r2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e24, 0xa, @local, 0x9}]}, &(0x7f0000000080)=0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180000002000000080c4b66d87e90da2660a708e61bc00000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000837d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xa, 0x657, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) write$UHID_CREATE2(r8, &(0x7f0000000340)=ANY=[], 0x118) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r10 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r10}}, 0x58) ioctl$PPPIOCGUNIT(r7, 0x80047456, &(0x7f0000000040)) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000080), 0x4) readahead(r7, 0x58, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r6, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) socket$kcm(0x10, 0x2, 0x0) 6m1.125196973s ago: executing program 4 (id=3489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffb) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003540)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd30, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0x5}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x90, 0x2, [@TCA_MATCHALL_ACT={0x8c, 0x2, [@m_ife={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x0, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x200}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8008}, @IFE_META_PRIO={0x8, 0x3, @val=0x1faed}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xc4}}, 0x0) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x3001, 0x2) 5m50.740581399s ago: executing program 36 (id=3464): pipe(&(0x7f0000000300)) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x700, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x700}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@setlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x404}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfb}}, @IFLA_MTU={0x8, 0x4, 0x7}]}, 0x5c}}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x18) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r3, 0x54) socket(0x1e, 0x805, 0x0) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000040), 0x0, 0x20004010, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f0000002a00)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000340)=""/175, 0xaf}, 0x8}, {{&(0x7f0000000400)=@hci, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000480)=""/57, 0x39}, {&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000580)=""/72, 0x48}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/44, 0x2c}, {&(0x7f0000001680)=""/121, 0x79}, {&(0x7f0000001700)=""/90, 0x5a}, {&(0x7f0000001780)=""/5, 0x5}, {0x0}, {&(0x7f00000027c0)=""/216, 0xd8}], 0xa, &(0x7f0000002940)=""/156, 0x9c}, 0xf9a}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) timer_create(0x0, 0x0, 0x0) timer_delete(0x0) sched_setattr(0x0, 0x0, 0x0) 5m46.03613951s ago: executing program 37 (id=3489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffb) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003540)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd30, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0x5}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x90, 0x2, [@TCA_MATCHALL_ACT={0x8c, 0x2, [@m_ife={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x0, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x200}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8008}, @IFE_META_PRIO={0x8, 0x3, @val=0x1faed}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xc4}}, 0x0) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x3001, 0x2) 5m8.014198466s ago: executing program 6 (id=3634): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c00000019d2c65b4fb0b5013f"], 0xc}}], 0x1, 0x4000000) 5m7.879858259s ago: executing program 6 (id=3636): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) getgroups(0x8, &(0x7f0000000540)=[0xffffffffffffffff, 0x0, 0xee01, 0xee00, 0xee00, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc890c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5efdec38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f07000000000000009d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91818efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339bc2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebc631d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b50000000000000006e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d790000000000000004bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c0100000000000000a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close(0x3) write$char_usb(r0, 0x0, 0x0) fsync(r0) 5m6.031636614s ago: executing program 6 (id=3648): syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@local, @random="0020e0ffff07", @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev, {[@ssrr={0x89, 0x17, 0x6f, [@multicast1, @local, @multicast1, @broadcast, @broadcast]}, @timestamp={0x44, 0x4, 0xf1, 0x3}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x22c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_int(r7, 0x29, 0x7, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0xa000, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x440d0}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) r10 = open(&(0x7f0000000180)='./file0\x00', 0x6440, 0x81) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x13, r10, 0xd000) ioctl$UFFDIO_UNREGISTER(r10, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000000000/0x3000)=nil, 0x3000}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r11, 0x101, 0x20}, &(0x7f0000000200)=0xc) 5m5.66373328s ago: executing program 6 (id=3652): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f64653d3030303030043030303030303030303030303438303d00000000476b331cfca3152c32a6d5d7b8c7", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x81001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbc7000011400000f000000080034000e24ffff08000300", @ANYRES32=r8, @ANYBLOB="0500330001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44040}, 0x20040050) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1000000d, 0x2001, 0xfffffffe, 0x9, 0x100000001, 0xfffffe0000000000, 0x9bc6, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r9, &(0x7f0000000080)={0x2, 0xea6, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r9, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) socket$key(0xf, 0x3, 0x2) 5m4.071996656s ago: executing program 6 (id=3658): r0 = getpid() syz_pidfd_open(r0, 0x0) syz_pidfd_open(r0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000180)={0x0, 0x0, 0x7}) landlock_restrict_self(0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = syz_usb_connect$hid(0x1, 0x10, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x502b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xff, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x10, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xf4, 0x1, 0xa}}]}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x14) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) socket$kcm(0x2, 0x200000000000001, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) syz_io_uring_submit(0x0, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r7 = dup2(r6, r6) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5m3.776214036s ago: executing program 6 (id=3660): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x101403, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) r2 = syz_io_uring_setup(0x836, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f00000010c0)={0x8, {"eddd025b60fdc30a063f172d718c2bd6b3645eadae0f767eb61f2421975b0064d30faba72ba63ab33c4ee2a6cb2f0cb187830255738dd670e8e178672a7473488a157b83ca0ed9657299e98243c15b6b8e08f34570dda445b526949a9b3aebdb97dda475e54a098f1ae57c4774c8ef81d36c77d309e0c817fba3415591dd26a637e43bec5f0fb193d8671889d89ac77bd90ee5efac63bf9eafc61f393e33aaa503760afad0e395042048defbc27ecc254790f419072feb3d5fb4815364072248a42bb88952f316952ea727ae850143819fb80a77407a2309c90ee7894bee7c5862bf14672cc9036bf0ccba7769b5d57b757b550180000000000000a7f0840d7040084b449eb5445ea40b3b9811a66d5228839907fba91ba8a5ca95b4600fcd98f93af794a412e97404d6f40a61e802f6112ff259a29ca8fb98ffce8fd12509883e812e7edb4a643fe4aac56bb01f69823bd6f4ebd618d81cb3d463eea2c9bae30b888a824043a71d5f3319b146848d63a5415f5ed47b33cafa473cc2c91c425a2d24bf5d8e627e6fc63f58a7b08180ce16e5aa7015478cfbebba3045ec5dd620f69659f3fe11af23b095b43ced6a48afaf3d9a78762d40ada3b1fead7884620e213f28a9a2e6bcda0b88347c8eb3f6be8be3fc2d507eaae0430ccd836d4790038d25d65091e6e7ee9bec612b4a5d90e9e878c9c57fd1aa28ee9fab64d2d3bec12ae68a974c0f64365548a5db8a1d8fc9e32b38df32e826a3d2a88ae824a5faa87d7a25373728da5322ebc73db3d9ac8c64db9c90b18d67b7770966a3b8a1079f5b83f21482ff8b1cc1c699a0a5a135b6fe2791abb556603e3255e89922de5bca02d57ace9f6d486a363891b6c15e3c0000000047e9617351e98a040f2e7019ddee08f2d6cdc9de2f7a32ea65d266513fa7821c24c90ae39268757eefacfe94d53c740747c86429eadbead0a3576549442f4f77d846df8d54b37fc280bd5b9320f872756706357b9813318a6bfeb77d4ddec55ab5592da2c6d05b3c021182485b96a634013c5ad5ba55f07d07211c0db03ccb5981f5955df2e86cd0f62f6ba66fe4abf695ebc6629e42f6ce96a132883f148eeeacdff13b1cbfa73cbc70b8c5b677682d7c60d1a1311b1222aef1edb4e231c869a18f9ae8eeba4eb4cba8a4a56703cd90710b2208bce8e9a18aaf4e7c47474c08ff85c307d660607bddfe49ac714e0fcdfefedddafa452dfe0341c8a8f07e62e4486699a740feda4b7b2bc635308eb6990f3dfa9065aa8b26ad0ac66fe86dbf2dfb5f0c4b0cad557d4fa4b61116aa57a285a705e1d87d3f8d560b5fd3f8c5df3dc22bd4edb36c1c2e78c0b69863f576d3053ceb21ecb287faf64bb7a3cfe3c28eb7c2335a3af5a29308dac5f7d6f48f46da8370124c37e5a3c9fdfd3d78a082030b2233f02fae54012d2ad2b1c1ec2a35a130a5d3f76b5f9a10a4d31ca41c5c2f58a40c058a48e5dd8a71adbabcbca341e46a6ad538491025e79db3c59350b229ae433537e54b62968ff582f041080719fb88778884da1c79ff28398d8edfcd931043b64bf75b944e735d6d0fa62ed1e3550fe9fa5c1f063b06fb8e13909c87efffe72481ada2d01522a93c70266aa3991c7141ecca2bc618fe54d7529a0c2a46469ca4b2086e112fdf4e1266ca6b5fd4b0fbea280dd246f622f0da6d0f3e3b0357dc0744132e66d8b035662ad5cd3faedd2f743e24ecfed2efd6fd3aed1402bdbc66af3c0b77b7962966649591d7d5985c81a063d46ddf07656f2b049f5811b310e567027bc1b6d44fc892d37aeda8cacc704c1dcc1a7ef759937416e01163027b81befa86772ddf576c37f3151792c4358d1fa418bcd250dc41effa988116589b110d31a59486123769e50f5b3985b4660919f08dd5c96ab8ab03322d0c61890f90e56970f0aa13a96bcfa97139d5627ed6a5558dee292bf0a6e5ad23341c7dc3464a05b9045cc3abbfc0448bf9ca044fd188569cc0c57e07105d1fa1efd44529b6592fa718e092c1a3fa3e56689c9c5168a5619bf2109bde2dca59ad16735e597402c1896d4e24f56c9d4bbc1f0b3a0135b7028a402c6a1a78de57a838b1871477d7b43dff3779fdb50b2ec9a3ae11fab7f715e7979e64a0f0d54d025105d1f768cdad112aeb2eac1c8042aff6fb975a16c64080ba4e0de0af9b8a975a2b6af6a05dff8ae848f6b80f2bd80c56e4683e67a3aaad0e72242b0f0f07d7d7a64a8669e75a99ba4fdb2ba239c5ef28c8f1dc0b2459698b374f1035a75eafde3d90d69afa489ee2d7f7958a5cc51e574203bab464ddd4d08abbb77c8874c6ce692d078bdc309d73ccb49c9d60a269c77601e82e1c824fca2a43605f8453943d23794785096da2ff56547389009e27a908cfcea03ede09c392e0bafa30891e23fbacdf08b49cbd2f4083f94c3c71877ffac86d426e5fe08fa9541f837f2de8440e0b2226b664a45a564f1357e804c24cd2cef95564a1e0041736ced508a63af4e9f4ae9f690084f8c67db3b3569fb86225b6cce291da8057200d1f86899081ebfa5274625ada6ee793fe4246d97157d608099a6adf81eb88bb37cdb64a18ed0e13a0cfeea3af2164a59b8a90a4a1dfad6f03cc27ccbcc879c2b54a57a6d81e01dbd9d7440e9f1a1f608617a308214b58a9090022b7c6631cda308a0aa13dd68159bd8578afeb5402b0e227ef709d8c58929fba262ff4ec70c3a8f68b98f92380201112f560c216d5dc61ad466ee08c1af18982617597436c6a0e0077bb2dab8932175fb30aafceb4d63b4b8aa4a1c2f3867a83855d418ae75b3029dff960a5a4fcbe0fb84828633d535413e0c70a26b2485dddaa7c52256ad85d5f71778af39692fb8553850bbac096d8d9c9145e0ed7903b5d530005f29493a5aa7e0c04b62cc07f2bcfa31a48ce7c167abdd145af8c25fb882b64e41a9b51ae77209d82a9095e1d80711e1c802302b92ad8e413bc9b200e57c6038a46bfc9468b5fdda7f3e57e676c99d4dde6b3a86ed2cb9a55cf199835ef9d858f5a692c4036b32ea07c76c29faa5e2241afab129340b6e2ad94baea982429225cfac726dbf137f6477432a31808a281c9af3c4bef4a2f508721ec71fc1c374fca4d4e25ed9754a41ebfcaaac7637caa13791a64ff995d3cd984ed8cecccc491de80596f8db8d3fe6a6f2b208d065fb6fbb5569bf7cd8a8162271ca5e5ed2b3b98f28d81b3b498345c48492c8fe2e6181f527bbe4ce6600f9e33fb65609bc4318ecf4ca151d3095232820a84704311f0bd3532178cf1e6ef9483b1f52ec2992e84aaf1239c99faeab989bd9848223e90093e71eb650660255fce7bd85872e413fe219859d18ef67f1f07a590ceadc1c687820c3c7cf9e2ff9609199c4b49fd74553507c1c7f45b5b1b40c96c0c984977f476ed686f8710248677847f5c0989df0eca6be3df498acfcfbca85bb986c8d844c19f62b06b95d8d6f4e4367040d45e494271f29546f1086f88fdc549402bd669e9aed5fe000000ef7668d3abeadb430d30534aef0a3a9a125bdeaa11647bafe6e1303b967d29718ac301cadbb43654a36b78ff91836584a5e3472db8db4ded526ecfef2efa2279c17639d3aef1587d5b8bbc8abec3a28dba276613c514a50fe243a588ecdb77ab1525088507f5a0537ba59062416beb479538806f04e70bc192c1fd46377c6105116cd21b75f29f91b67317ce4bd67dea18f560765dabf8f0cebfb770339aa2558df698e1ee22adc7b81b16b2e7fb06e7b5c2ca98c71aec18bc23b11d3b84c6a10aa866c5f438fc2d928fc89ce0902492cd79d6a1ffce27a66031cc24d1b82e9e8b6bdcb6b37f89531e048ae5ee10483dccbb734ba20a15b145fdeadfc461e146d8882133b4e6c6ba30d316ee0bf0bf40f26639077d090d1df3b943e78ba5ece82fcd4576cf3a87d7a9ad080b2cce7371e5bd671ad37e35ff03dfb6684ac0d4eda69154444aef2a173ba093bc87839e41388b2101f72a9b6cf675efbb231b007c11a7b452df89a584f459b23340c0dae21a4146968b66ac9b08d2408830ccec4e6fb1dd665c3023a3b32042b1facfb0bd4d5b9861fe5b0abee3313264b5abe61b1e145bc11121dc87bf1a6008433dedd4d7977b082400136bfceb33a2a3ceea9a6b67b8f85b604970c3ad474db7356f802bc840afe833c9056c037b2ea240b5846149682e14e4e126c7f88b9eb2c7384da631fbab63754611d52b4107dfd10fdf46e557be95a07e6ae64cbeb2d420bcfd87a2f52ecbfe5eba301e3c86761c1545b876e5951106e91be75e9d22301674bca4d729fffd9812cb984910b976c2a74966caf3d75ba7dc7f4275d24caf3bc94376a3579e8575c69401ea75d14e27f98eb7a05eccebd36ea89c4ac0dec65eb613d7f052c6b75b398c65249449b0693164a51c0c224ac1bb4f0781d2d10b96519131b6df9541aa1e7511820f71ab1d497234862f475356d9664a9fbbf0285738a143842820d5b795dcca64a24de4bae802fae01d82fec5548e108c4e750e8f1580d2ebd6bde06622db32c1f47eca183a81ecfde3b6a187c47f7984d2c6051f2ace7ac2bfc5da0cd4b0e57e69bf39551cc5443e12e9ce113cff2cecdd2802e5b9c5a1107e1ed982b93b8e986afa379ac1c6a5ee67e966c72bf149f9ba1c169bafe3d58e18e56438ad4a4db4826edb5eb4ff27808ddd7f87eb31cf232effc9bfff7305d91696e17058217d2d5596ae9082a1cc98d60b854b2ff76718d981c20d68ecf4f1a8dcd5f9f06162df324b84b246e5e11d6722003f32e3396e30c11724db17210c37dfa080c1be2fbeea1c92e084f72386fb29856bc25a16a53f97f44a5e81fd55872772eebdd0db3a5bdf0c28d34a48f8d707a97a3b89367c98e30dbe9c02444177a8fbaa605c6051157e41fade8432af5233ee030ad6fb7572ee4e7bd687dd855fe112ac46a7b1abe88771eb3b49e3d583efe7b79394ca4687acfc262af45dbf4736e9e17d39ea5f8e81f6ed7f242c5a09da7f22f37ce9d5e6222fa71aed8ee69e501d30cd98f5c5275d5dcc1f112c3dbd2cca465f7442d952353613ac5b30222cf153c598c15c102b0dd0d99e45595d98ab365fda3f6e3bdf29b66a8d0a43c1c6a109e3056015a49e4f9ed7522163da86b9e2bf14d7c0ff026261f96feabc0b1c64ba130acb2c4927a783bed9f4e1d38f0a1351000334010b99585c24fb9a7a24809e4bffc3448c778dbeeed816225b2173fae0975e1b9c19213dc33bab3a9bbe8f62e306a1aecac5484d3f23421f5064c16aa4fa67de32222115928c0f3b114593dd0c791c590be61e0b97ed0b0e0dcdb238eb1290466d9c10dfaa8c7fcd0bf659897d945df86d936c67e42924d47a4245fb3d6f8ec538d59c100c6e52100317ea41a1fd253ddd54b13b6a2807ea729d3fd7e1b0461cc78b2c7c889b9ad3ec0398399ff645f3ab988b8a52d9f09a430cfa0390c4c5ad3a392ef28a9f4056d77b712df09b69d7d93617c4783133f9abab2d6935d54f59d0c1b5ea4dba28af7bbfeaf29009618c436ddec116f8966b4ae89ceca545daef5a48f1668231731af7abc502df9f7d308998b92adbfdf0937186a9cbcd4267dc1d0e399b27dacc07ca37f76ceb42f13e4de89dd484a91dc8a2bebece95c6400fde8bdc6d2857454f562f04422b632925c84fb501998ab096363acafea06790c298a76267ca63d81763343fa1fbbbeecba24ca939b3f4d577a5129fd3c407cada9151a12b04e76d664b232cf05c9ad000", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x1, 0xfffffffffffffffc]}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r7, 0x0, 0x0}) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r11, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r10, &(0x7f00000001c0)='m', 0xfffffdfc}]) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x10000000000000, 0x1, 0x2, 0xa8}, 0x0, &(0x7f0000000000)={0x1f, 0x4, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) io_uring_enter(r2, 0x3514, 0x9141, 0x69, 0x0, 0x0) 5m3.497390264s ago: executing program 38 (id=3660): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x101403, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) r2 = syz_io_uring_setup(0x836, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x1, 0xfffffffffffffffc]}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r7, 0x0, 0x0}) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r11, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r10, &(0x7f00000001c0)='m', 0xfffffdfc}]) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x10000000000000, 0x1, 0x2, 0xa8}, 0x0, &(0x7f0000000000)={0x1f, 0x4, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) io_uring_enter(r2, 0x3514, 0x9141, 0x69, 0x0, 0x0) 11.660870838s ago: executing program 3 (id=5049): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) close(0x3) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r2 = getpgrp(0x0) r3 = getpgid(0xffffffffffffffff) r4 = fcntl$getown(r0, 0x9) r5 = gettid() timer_create(0x5, &(0x7f00000005c0)={0x0, 0x21, 0x0, @tid=r5}, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) r7 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r8, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r9, 0x8002}], 0x1, 0x0, 0x0, 0x0) r10 = dup2(r8, r9) fcntl$setown(r10, 0x8, r7) tkill(r7, 0x13) r11 = syz_open_procfs(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) write$FUSE_LK(r11, &(0x7f0000000200)={0x28, 0x0, 0x0, {{0x1, 0x0, 0x1, r12}}}, 0x28) r13 = openat$cgroup_root(0xffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@delqdisc={0x114, 0x25, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xf}, {0x2, 0x8}, {0xa, 0x983f0f0d56c91c76}}, [@TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xff, 0xffff, 0x8, 0x2, 0x1, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x3, 0x81, 0x3, 0x0, 0x0, 0xa0000000, 0x5}}, {0xe, 0x2, [0x8, 0x2006, 0x81, 0x3, 0x1]}}, {{0x1c, 0x1, {0x6, 0xf, 0x7, 0x1, 0x1, 0x6, 0x1, 0x3}}, {0xa, 0x2, [0x1, 0x8001, 0x800]}}, {{0x1c, 0x1, {0x60, 0x5, 0x7, 0xb3f, 0x1, 0x1, 0x0, 0x2}}, {0x8, 0x2, [0x5, 0x4]}}]}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xb, 0x5, 0x3076, 0x4bf074eb, 0x80000000, 0x4, 0x2, 0x2, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x7, 0xc9}}, @qdisc_kind_options=@q_mq={0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfd}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', r15, r10, 0x5, 0x2, 0x1}, 0x50) syz_clone3(&(0x7f0000000440)={0xeea7ac40606a7935, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x25}, &(0x7f0000000200)=""/129, 0x81, &(0x7f00000002c0)=""/140, &(0x7f00000003c0)=[r2, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r7, r12], 0x9, {r13}}, 0x58) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @raw_data=[0x5, 0x5, 0x9dc, 0x81, 0x4, 0x0, 0x7, 0x6, 0x7, 0x5f, 0x7, 0x3aab, 0x8, 0x7, 0xff, 0x8, 0x6, 0xc2ac, 0x95, 0x10001, 0x5, 0x4, 0x1, 0x7, 0x197, 0x80, 0x2, 0x1, 0x3, 0x4, 0x101, 0x83c2]}) 9.48867551s ago: executing program 3 (id=5053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x4, @local, 0x4}], 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="c040000000", @ANYRES16=r4, @ANYBLOB="01000cbd7010ffdbdf2505000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 9.405853266s ago: executing program 3 (id=5056): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1e}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x20, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7f, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x0, 0x4}}}}}]}}]}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000010c0)={0x3c, 0xd, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x28}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x906bad51dc037f2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x9, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800450000200000000000119078000000000000000000004e20000c9078010000008286754e4b6be2dcb916949336e0d5b2f258f6690b3f3a3eb798a49923a9da5c74fc74063fab14fe0d68ccef096d3599b80a905cc43fbaf3379fd403412404ae5e51c9a625b2adfd428453d925d0d68a"], 0x0) syz_open_pts(r4, 0x100) syz_usb_control_io(r3, 0x0, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000040)={@broadcast, @empty, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, "03", "60004000000062cf004ab77f8437"}}}}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000200)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB='@\"E'], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x0) 9.203764607s ago: executing program 2 (id=5058): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000700)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x4e23, 0x3, 0x4e21, 0x4, 0xa, 0xa0, 0x20, 0x0, r1, 0xee00}, {0x6, 0x7fffffffffffffff, 0x3, 0x80, 0x1, 0x0, 0x10000, 0x253}, {0x4, 0x8, 0x8, 0x10000}, 0x3ff, 0x6e6bb3, 0x2, 0x1, 0x1, 0xd75f4fb4d09601f5}, {{@in=@multicast2, 0x4d3, 0x2b}, 0xa, @in=@broadcast, 0x34ff, 0x3, 0x3, 0x8, 0xdf5c, 0xc9, 0xfd}}, 0xe4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="14007a51a3240fad8b8cbe463f9aa315608d2e72b79deccd8602f813725d454bcd63f92452249fe962f4e767186627253f257b155f9dd352a06af2b98039669a2bde102a7fb29b3770a1b55ce90c5f1db5dfc2dd60cfdbcdad5ca4b4197d569ff53da9ea3399aa2cba563b92fd219501251983118f8b0c6f7215472a9ef7a022fffb0f0a9cbf033016570749026e3acb726a793e177a45c069f06933ee1c8305e2c79f113f7d8b1ed281f1c71837f0b494bff44ea2391bac3d8095b06987af945714a664217c1ed4c4e52997b157558c5a5d8b1dfb5d014ecc105bfd6ac54b3704362f7b3e", @ANYRES16, @ANYBLOB="0100000000000000000054000000"], 0x14}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r10, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880) close(r8) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000600)="a3"}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd70000000000044000000", @ANYRES32=r3, @ANYBLOB="0c00238004001600"], 0x28}, 0x1, 0x0, 0x0, 0x220080d0}, 0x0) 9.135473865s ago: executing program 2 (id=5059): r0 = userfaultfd(0x80001) r1 = openat$vim2m(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000003c0)={0x2, @vbi={0x455eb137, 0x5, 0x7, 0x20343059, [0x5], [0x52ab, 0xd], 0x13a}}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_clone3(&(0x7f00000023c0)={0x400000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r2) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) socket$inet6(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xf9\xff\xff\xff\xff\xff\xff\xff+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r4 = openat2$dir(0xffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x200002, 0x148, 0x18}, 0x18) openat$fb0(0xffffffffffffff9c, &(0x7f0000000600), 0x141000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40040023, 0x1000, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x48, 0x4007, @fd_index=0x1, 0x0, 0x8, 0xd7, 0x0, 0x0, {0x3}}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) statx(r4, 0x0, 0x4000, 0x80, &(0x7f0000000240)) syz_usb_control_io$rtl8150(r3, &(0x7f0000002780)={0xc, &(0x7f0000002700)={0x0, 0x21, 0x78, {0x78, 0xd, "977a32abf0a65aa9b9e79af08349b4b81288af128b040e4b2340b1adf7ca850a49932e634588bf0150b8b31374802490fe6dba9586daa7fcac07fe53a122a5aef7360e704a46d7f2ebfffda7859597d2586a980087ea72d25272cb23527a5a79836706a50be7acc118ede6c1156663e35a0d863bc578"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}}, &(0x7f0000002940)={0x18, &(0x7f00000027c0)={0x20, 0x3, 0x60, "d9970c11893cdd7a0161a396b1627c6f3c51ee78c65f47f9acd6345354d85bcea8d64505862e11fd5a5015023f438c16cff3fbdf162f9db13abe72c1285837bee7b0eb97f2162d799974b0ed8751c5ed47386246050497981b4d7e1dcb37cb87"}, &(0x7f0000002840)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002880)={0x0, 0x8, 0x1, 0x5}, 0x0, &(0x7f0000002900)={0x40, 0x5, 0x5, "08d1595031"}}) 8.608838846s ago: executing program 1 (id=5060): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) keyctl$join(0x1, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) io_setup(0x2007, 0x0) eventfd2(0x9, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x7, 0x4) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0x0, 0xc2ff, 0x0, 0x40, 0x0, 0x46}) 8.030469781s ago: executing program 9 (id=5061): syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0xe}}]}]}}}}}}}, 0x0) 7.957033237s ago: executing program 9 (id=5062): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, 0x0, 0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x803, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}]}, 0x44}}, 0x20000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x6000801) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000ffffffff0010000000000000", @ANYRES32, @ANYBLOB="0000000400000015000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') read$FUSE(r8, &(0x7f0000000580)={0x2020}, 0x2020) (async, rerun: 32) pread64(r4, &(0x7f0000000400)=""/234, 0xea, 0x5) (rerun: 32) read$FUSE(r8, &(0x7f0000002c40)={0x2020}, 0x2020) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x74, r7, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0xfffffffffffffe8e) (async, rerun: 32) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 64) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) (rerun: 64) 7.795589549s ago: executing program 9 (id=5063): process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000840)='cmdline\x00') pread64(r3, 0x0, 0x0, 0x81) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x0, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) (async) syz_open_procfs(0x0, &(0x7f0000000840)='cmdline\x00') (async) pread64(r3, 0x0, 0x0, 0x81) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x0, 0x2], 0x0, 0x200306}) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 7.667838112s ago: executing program 0 (id=5064): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000003c00010326bd7000fedbdf250c0000000800030014"], 0x1c}}, 0x800) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='syzkaller0\x00', 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}], 0x1}) syz_usb_control_io$printer(r2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e24, 0xa, @local, 0x9}]}, &(0x7f0000000080)=0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180000002000000080c4b66d87e90da2660a708e", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000837d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xa, 0x657, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) write$UHID_CREATE2(r8, &(0x7f0000000340)=ANY=[], 0x118) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r10 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r10}}, 0x58) ioctl$PPPIOCGUNIT(r7, 0x80047456, &(0x7f0000000040)) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000080), 0x4) readahead(r7, 0x58, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r6, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) socket$kcm(0x10, 0x2, 0x0) 7.580000042s ago: executing program 9 (id=5065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22483, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}}, 0x24}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xffffffff, 0x6361, 0x3, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x8, 0x9, 0x7, 0xffffffffffffffff}}]}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240000e1}, 0x4890) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4005) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048000}, 0x4000840) 6.48360653s ago: executing program 1 (id=5066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x4, @local, 0x4}], 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="c040000000", @ANYRES16=r4, @ANYBLOB="01000cbd7010ffdbdf2505000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 6.331334136s ago: executing program 1 (id=5067): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 6.234149411s ago: executing program 3 (id=5068): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000050c0)={0x2020, 0x0, 0x0}, 0x2020) syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b"], 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) write$FUSE_ATTR(r0, &(0x7f0000007100)={0x78, 0x0, r3, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x23, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x7fffffff, 0x4}}}, 0x78) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}, 0x1, 0x4000, 0x0, 0x44000}, 0x4040) socket$tipc(0x1e, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)="09000000e70014000000d6f18f8e950088a800008100"/32, 0x20, 0x24000801, &(0x7f0000000000)={0x11, 0x8100, r12, 0x1, 0x8, 0x6, @remote}, 0x14) 6.040346882s ago: executing program 2 (id=5069): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000700)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x4e23, 0x3, 0x4e21, 0x4, 0xa, 0xa0, 0x20, 0x0, r1, 0xee00}, {0x6, 0x7fffffffffffffff, 0x3, 0x80, 0x1, 0x0, 0x10000, 0x253}, {0x4, 0x8, 0x8, 0x10000}, 0x3ff, 0x6e6bb3, 0x2, 0x1, 0x1, 0xd75f4fb4d09601f5}, {{@in=@multicast2, 0x4d3, 0x2b}, 0xa, @in=@broadcast, 0x34ff, 0x3, 0x3, 0x8, 0xdf5c, 0xc9, 0xfd}}, 0xe4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="14007a51a3240fad8b8cbe463f9aa315608d2e72b79deccd8602f813725d454bcd63f92452249fe962f4e767186627253f257b155f9dd352a06af2b98039669a2bde102a7fb29b3770a1b55ce90c5f1db5dfc2dd60cfdbcdad5ca4b4197d569ff53da9ea3399aa2cba563b92fd219501251983118f8b0c6f7215472a9ef7a022fffb0f0a9cbf033016570749026e3acb726a793e177a45c069f06933ee1c8305e2c79f113f7d8b1ed281f1c71837f0b494bff44ea2391bac3d8095b06987af945714a664217c1ed4c4e52997b157558c5a5d8b1dfb5d014ecc105bfd6ac54b3704362f7b3e", @ANYRES16, @ANYBLOB="0100000000000000000054000000"], 0x14}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r10, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880) close(r8) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000600)="a3"}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd70000000000044000000", @ANYRES32=r3, @ANYBLOB="0c00238004001600"], 0x28}, 0x1, 0x0, 0x0, 0x220080d0}, 0x0) 5.830102801s ago: executing program 2 (id=5070): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'veth0_vlan\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.780828371s ago: executing program 0 (id=5071): r0 = getpid() syz_pidfd_open(r0, 0x0) syz_pidfd_open(r0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000180)={0x0, 0x0, 0x7}) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = syz_usb_connect$hid(0x1, 0x10, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x502b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xff, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x10, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xf4, 0x1, 0xa}}]}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x14) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) socket$kcm(0x2, 0x200000000000001, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) syz_io_uring_submit(0x0, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r7 = dup2(r6, r6) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) lseek(0xffffffffffffffff, 0x851, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5.307761902s ago: executing program 1 (id=5072): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) close(0x3) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r2 = getpgrp(0x0) r3 = getpgid(0xffffffffffffffff) r4 = fcntl$getown(r0, 0x9) r5 = gettid() timer_create(0x5, &(0x7f00000005c0)={0x0, 0x21, 0x0, @tid=r5}, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) r7 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r8, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r9, 0x8002}], 0x1, 0x0, 0x0, 0x0) r10 = dup2(r8, r9) fcntl$setown(r10, 0x8, r7) tkill(r7, 0x13) r11 = syz_open_procfs(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) write$FUSE_LK(r11, &(0x7f0000000200)={0x28, 0x0, 0x0, {{0x1, 0x0, 0x1, r12}}}, 0x28) r13 = openat$cgroup_root(0xffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@delqdisc={0x114, 0x25, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xf}, {0x2, 0x8}, {0xa, 0x983f0f0d56c91c76}}, [@TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xff, 0xffff, 0x8, 0x2, 0x1, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x3, 0x81, 0x3, 0x0, 0x0, 0xa0000000, 0x5}}, {0xe, 0x2, [0x8, 0x2006, 0x81, 0x3, 0x1]}}, {{0x1c, 0x1, {0x6, 0xf, 0x7, 0x1, 0x1, 0x6, 0x1, 0x3}}, {0xa, 0x2, [0x1, 0x8001, 0x800]}}, {{0x1c, 0x1, {0x60, 0x5, 0x7, 0xb3f, 0x1, 0x1, 0x0, 0x2}}, {0x8, 0x2, [0x5, 0x4]}}]}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xb, 0x5, 0x3076, 0x4bf074eb, 0x80000000, 0x4, 0x2, 0x2, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x7, 0xc9}}, @qdisc_kind_options=@q_mq={0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfd}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', r15, r10, 0x5, 0x2, 0x1}, 0x50) syz_clone3(&(0x7f0000000440)={0xeea7ac40606a7935, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x25}, &(0x7f0000000200)=""/129, 0x81, &(0x7f00000002c0)=""/140, &(0x7f00000003c0)=[r2, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r7, r12], 0x9, {r13}}, 0x58) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @raw_data=[0x5, 0x5, 0x9dc, 0x81, 0x4, 0x0, 0x7, 0x6, 0x7, 0x5f, 0x7, 0x3aab, 0x8, 0x7, 0xff, 0x8, 0x6, 0xc2ac, 0x95, 0x10001, 0x5, 0x4, 0x1, 0x7, 0x197, 0x80, 0x2, 0x1, 0x3, 0x4, 0x101, 0x83c2]}) 2.608569902s ago: executing program 2 (id=5073): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, &(0x7f0000000040)={0x58, 0x9, 0x4, 0x2, 0x2, {}, {0x5, 0x0, 0x7, 0x2, 0xf7, 0x6, "4e5ed31d"}, 0xfffffff9, 0x4, {}, 0x7}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$usbfs(0x0, 0xffffffff, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r8, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r10, 0x40045612, &(0x7f0000000080)=0x2) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 2.416480518s ago: executing program 0 (id=5074): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x15, 0x0, 0x1, 0x20000}]}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x20, 0x3, 0x2, 0x3, 0x0, 0x3, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)={0x24, 0x5e, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x24}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x2, 0x3, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x7}}) r3 = openat$vsock(0xffffff9c, &(0x7f0000000080), 0x113001, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xf80, 0x0, 0x1, 0xe7, '\x00', r2, r3, 0x3, 0x3}, 0x50) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x35, 0xfe, 0x65, 0x10, 0x1aca, 0xb28e, 0x9232, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xd, 0x1, 0x90, 0x2, [{{0x9, 0x4, 0x32, 0xa7, 0x2, 0x1, 0x3, 0x9e, 0x8, [], [{{0x9, 0x5, 0x8, 0x6, 0x10, 0x6, 0x4, 0x8}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x4, 0x2, 0x66}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 2.405362027s ago: executing program 9 (id=5075): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) connect$can_bcm(r0, &(0x7f0000001cc0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x4004800) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10002, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x7fff25c8, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x5, 0x0, 0xffffffff, 0xffffffff, 0x302e, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x3, 0x9, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x80) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$EVIOCSABS2F(r7, 0x401845ef, &(0x7f0000000140)={0x31, 0x3, 0x80000000, 0x1000, 0x1000, 0x1d7}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000040)=0x2563, 0x4) sendto$inet(r9, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r9, &(0x7f0000008e80), 0x0, 0x2020, 0x0) sendmsg$IPSET_CMD_HEADER(r8, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x2c, 0xc, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x40044) 2.372045996s ago: executing program 1 (id=5076): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000540)={{}, 0x0, 0x16, @unused=[0xc, 0x8, 0x9, 0x7fffffffffffffff], @name="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"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c09425, &(0x7f0000000980)={"f90654136c79277117d03122a86119d3", 0x0, 0x0, {0x7fffffff, 0x9}, {0x8, 0x1ad73b3d}, 0x9, [0x400, 0xcc, 0x9, 0x7fffffff, 0x7fff, 0x8000000000000000, 0x8000, 0x6, 0x7, 0x4, 0x9, 0xc, 0xfffffffffffffff8, 0x7, 0x7f, 0x3]}) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r9, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x4}) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="170928bd7000000000000100ffff0500070000000000080009000100000008000a0000000000060002000100000008001700", @ANYRES32], 0x3c}, 0x1, 0x620b}, 0x0) 2.240214173s ago: executing program 3 (id=5077): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000540)={{}, 0x0, 0x16, @unused=[0xc, 0x8, 0x9, 0x7fffffffffffffff], @name="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"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c09425, &(0x7f0000000980)={"f90654136c79277117d03122a86119d3", 0x0, 0x0, {0x7fffffff, 0x9}, {0x8, 0x1ad73b3d}, 0x9, [0x400, 0xcc, 0x9, 0x7fffffff, 0x7fff, 0x8000000000000000, 0x8000, 0x6, 0x7, 0x4, 0x9, 0xc, 0xfffffffffffffff8, 0x7, 0x7f, 0x3]}) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r9, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x4}) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="170928bd7000000000000100ffff0500070000000000080009000100000008000a0000000000060002000100000008001700", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) 1.472305628s ago: executing program 2 (id=5078): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1e}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x20, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7f, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x0, 0x4}}}}}]}}]}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000010c0)={0x3c, 0xd, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x28}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x906bad51dc037f2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x9, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800450000200000000000119078000000000000000000004e20000c9078010000008286754e4b6be2dcb916949336e0d5b2f258f6690b3f3a3eb798a49923a9da5c74fc74063fab14fe0d68ccef096d3599b80a905cc43fbaf3379fd403412404ae5e51c9a625b2adfd428453d925d0d68a"], 0x0) syz_open_pts(r4, 0x100) syz_usb_control_io(r3, 0x0, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000040)={@broadcast, @empty, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, "03", "60004000000062cf004ab77f8437"}}}}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000200)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB='@\"E'], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x0) 492.548957ms ago: executing program 0 (id=5079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700880000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 330.187585ms ago: executing program 0 (id=5080): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000700)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x4e23, 0x3, 0x4e21, 0x4, 0xa, 0xa0, 0x20, 0x0, r1, 0xee00}, {0x6, 0x7fffffffffffffff, 0x3, 0x80, 0x1, 0x0, 0x10000, 0x253}, {0x4, 0x8, 0x8, 0x10000}, 0x3ff, 0x6e6bb3, 0x2, 0x1, 0x1, 0xd75f4fb4d09601f5}, {{@in=@multicast2, 0x4d3, 0x2b}, 0xa, @in=@broadcast, 0x34ff, 0x3, 0x3, 0x8, 0xdf5c, 0xc9, 0xfd}}, 0xe4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="14007a51a3240fad8b8cbe463f9aa315608d2e72b79deccd8602f813725d454bcd63f92452249fe962f4e767186627253f257b155f9dd352a06af2b98039669a2bde102a7fb29b3770a1b55ce90c5f1db5dfc2dd60cfdbcdad5ca4b4197d569ff53da9ea3399aa2cba563b92fd219501251983118f8b0c6f7215472a9ef7a022fffb0f0a9cbf033016570749026e3acb726a793e177a45c069f06933ee1c8305e2c79f113f7d8b1ed281f1c71837f0b494bff44ea2391bac3d8095b06987af945714a664217c1ed4c4e52997b157558c5a5d8b1dfb5d014ecc105bfd6ac54b3704362f7b3e", @ANYRES16, @ANYBLOB="0100000000000000000054000000"], 0x14}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r10, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880) close(r8) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000600)="a3"}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd70000000000044000000", @ANYRES32=r3, @ANYBLOB="0c00238004001600"], 0x28}, 0x1, 0x0, 0x0, 0x220080d0}, 0x0) 305.95791ms ago: executing program 1 (id=5081): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000003c00010326bd7000fedbdf250c0000000800030014"], 0x1c}}, 0x800) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='syzkaller0\x00', 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}], 0x1}) syz_usb_control_io$printer(r2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e24, 0xa, @local, 0x9}]}, &(0x7f0000000080)=0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180000002000000080c4b66d87e90da2660a708e", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000837d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xa, 0x657, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) write$UHID_CREATE2(r8, &(0x7f0000000340)=ANY=[], 0x118) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r10 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r10}}, 0x58) ioctl$PPPIOCGUNIT(r7, 0x80047456, &(0x7f0000000040)) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000080), 0x4) readahead(r7, 0x58, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r6, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) socket$kcm(0x10, 0x2, 0x0) 292.944596ms ago: executing program 3 (id=5082): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000400)) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000300)='./file2\x00', 0xc401, 0x2) execveat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x1000) r4 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_MEM_REGION(r4, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1) syz_io_uring_setup(0x4ad9, &(0x7f00000004c0)={0x0, 0x9731, 0x4000, 0x3, 0x145}, &(0x7f00000003c0), 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r7, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000100)=0x2) 229.501014ms ago: executing program 0 (id=5083): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'veth0_vlan\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 9 (id=5084): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff0304"], 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000040), 0x3b) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x4221, 0x0, 0x0}], 0x2}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) kernel console output (not intermixed with test programs): x1d0 [ 1079.174419][T22977] ___sys_sendmsg+0x2a5/0x360 [ 1079.174437][T22977] ? __pfx____sys_sendmsg+0x10/0x10 [ 1079.174453][T22977] ? get_pid_task+0x20/0x1f0 [ 1079.174462][T22977] ? get_pid_task+0x20/0x1f0 [ 1079.174470][T22977] ? get_pid_task+0x20/0x1f0 [ 1079.174492][T22977] ? __fget_files+0x2a/0x420 [ 1079.174507][T22977] ? __fget_files+0x3a0/0x420 [ 1079.174526][T22977] __sys_sendmsg+0x183/0x260 [ 1079.174541][T22977] ? __pfx___sys_sendmsg+0x10/0x10 [ 1079.174567][T22977] __do_fast_syscall_32+0x20d/0x640 [ 1079.174578][T22977] ? do_fast_syscall_32+0x33/0x70 [ 1079.174587][T22977] ? asm_int80_emulation+0x1a/0x20 [ 1079.174597][T22977] ? do_int80_emulation+0x274/0x4d0 [ 1079.174606][T22977] ? trace_irq_disable+0x3b/0x150 [ 1079.174623][T22977] do_fast_syscall_32+0x33/0x70 [ 1079.174634][T22977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1079.174648][T22977] RIP: 0023:0xf7f83f6c [ 1079.174660][T22977] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1079.174668][T22977] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1079.174680][T22977] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 1079.174688][T22977] RDX: 0000000022000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1079.174695][T22977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1079.174700][T22977] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1079.174707][T22977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1079.174721][T22977] [ 1079.543426][T16787] usb 1-1: USB disconnect, device number 12 [ 1079.574703][T16787] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1080.250746][T22988] binder: 22987:22988 ioctl c0306201 80000440 returned -14 [ 1080.322731][T22990] FAULT_INJECTION: forcing a failure. [ 1080.322731][T22990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.338388][T22990] CPU: 0 UID: 0 PID: 22990 Comm: syz.1.4745 Tainted: G L syzkaller #0 PREEMPT(full) [ 1080.338420][T22990] Tainted: [L]=SOFTLOCKUP [ 1080.338427][T22990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1080.338439][T22990] Call Trace: [ 1080.338447][T22990] [ 1080.338455][T22990] dump_stack_lvl+0xe8/0x150 [ 1080.338485][T22990] should_fail_ex+0x412/0x560 [ 1080.338514][T22990] _copy_from_user+0x2d/0xb0 [ 1080.338538][T22990] vlan_ioctl_handler+0xbd/0x630 [ 1080.338565][T22990] ? __pfx___mutex_lock+0x10/0x10 [ 1080.338581][T22990] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1080.338598][T22990] ? tomoyo_path_number_perm+0x219/0x630 [ 1080.338617][T22990] ? do_vfs_ioctl+0x1166/0x1530 [ 1080.338638][T22990] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1080.338658][T22990] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1080.338680][T22990] sock_ioctl+0x668/0x7f0 [ 1080.338700][T22990] ? __pfx_sock_ioctl+0x10/0x10 [ 1080.338732][T22990] compat_sock_ioctl+0x288/0xcb0 [ 1080.338755][T22990] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1080.338777][T22990] ? __fget_files+0x3a0/0x420 [ 1080.338802][T22990] ? __fget_files+0x2a/0x420 [ 1080.338844][T22990] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1080.338869][T22990] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1080.338892][T22990] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1080.338914][T22990] ? __fget_files+0x3a0/0x420 [ 1080.338942][T22990] ? fput+0xa0/0xd0 [ 1080.338965][T22990] ? ksys_write+0x242/0x270 [ 1080.338992][T22990] __do_fast_syscall_32+0x20d/0x640 [ 1080.339011][T22990] ? do_fast_syscall_32+0x33/0x70 [ 1080.339026][T22990] ? asm_int80_emulation+0x1a/0x20 [ 1080.339043][T22990] ? do_int80_emulation+0x274/0x4d0 [ 1080.339060][T22990] ? trace_irq_disable+0x3b/0x150 [ 1080.339088][T22990] do_fast_syscall_32+0x33/0x70 [ 1080.339105][T22990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1080.339127][T22990] RIP: 0023:0xf6feef6c [ 1080.339144][T22990] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1080.339161][T22990] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1080.339182][T22990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008983 [ 1080.339195][T22990] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1080.339207][T22990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1080.339216][T22990] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1080.339227][T22990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1080.339254][T22990] [ 1080.672849][T22993] binder: 22992:22993 ioctl c0306201 80000440 returned -14 [ 1080.817896][ T5827] usb 3-1: USB disconnect, device number 87 [ 1080.822722][T22998] sit1: entered allmulticast mode [ 1080.927903][T23002] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1081.187184][T23008] sctp: [Deprecated]: syz.9.4747 (pid 23008) Use of int in maxseg socket option. [ 1081.187184][T23008] Use struct sctp_assoc_value instead [ 1081.255264][T23011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4751'. [ 1081.288809][T23011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4751'. [ 1081.577019][T23022] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1081.596570][ T5907] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1081.755068][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 1081.763776][ T5907] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1081.775209][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.830197][ T5907] usb 1-1: config 0 descriptor?? [ 1081.873397][T23028] FAULT_INJECTION: forcing a failure. [ 1081.873397][T23028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1081.924022][T23028] CPU: 0 UID: 0 PID: 23028 Comm: syz.3.4756 Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.924053][T23028] Tainted: [L]=SOFTLOCKUP [ 1081.924059][T23028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1081.924070][T23028] Call Trace: [ 1081.924077][T23028] [ 1081.924085][T23028] dump_stack_lvl+0xe8/0x150 [ 1081.924115][T23028] should_fail_ex+0x412/0x560 [ 1081.924143][T23028] _copy_to_user+0x31/0xb0 [ 1081.924170][T23028] simple_read_from_buffer+0xe1/0x170 [ 1081.924198][T23028] proc_fail_nth_read+0x1bb/0x230 [ 1081.924224][T23028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1081.924247][T23028] ? rw_verify_area+0x2a6/0x4d0 [ 1081.924259][T23028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1081.924273][T23028] vfs_read+0x20c/0xa70 [ 1081.924282][T23028] ? fdget_pos+0x246/0x320 [ 1081.924300][T23028] ? __pfx___mutex_lock+0x10/0x10 [ 1081.924310][T23028] ? __pfx_vfs_read+0x10/0x10 [ 1081.924321][T23028] ? __fget_files+0x2a/0x420 [ 1081.924337][T23028] ? __fget_files+0x3a0/0x420 [ 1081.924351][T23028] ? __fget_files+0x2a/0x420 [ 1081.924368][T23028] ksys_read+0x150/0x270 [ 1081.924380][T23028] ? __pfx_ksys_read+0x10/0x10 [ 1081.924392][T23028] ? asm_int80_emulation+0x1a/0x20 [ 1081.924406][T23028] do_int80_emulation+0x173/0x4d0 [ 1081.924415][T23028] ? trace_irq_disable+0x3b/0x150 [ 1081.924438][T23028] ? asm_int80_emulation+0x1a/0x20 [ 1081.924447][T23028] ? clear_bhb_loop+0x40/0x90 [ 1081.924458][T23028] ? clear_bhb_loop+0x40/0x90 [ 1081.924470][T23028] asm_int80_emulation+0x1a/0x20 [ 1081.924480][T23028] RIP: 0023:0xf71d5b6b [ 1081.924494][T23028] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1081.924504][T23028] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1081.924516][T23028] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548d5d0 [ 1081.924523][T23028] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1081.924530][T23028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1081.924536][T23028] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1081.924542][T23028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1081.924557][T23028] [ 1082.333855][ T5907] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1082.343665][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1082.353639][ T5907] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1082.363416][ T5907] usb 1-1: media controller created [ 1082.380585][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1082.393373][T23030] FAULT_INJECTION: forcing a failure. [ 1082.393373][T23030] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.509812][T23030] CPU: 1 UID: 0 PID: 23030 Comm: syz.2.4757 Tainted: G L syzkaller #0 PREEMPT(full) [ 1082.509845][T23030] Tainted: [L]=SOFTLOCKUP [ 1082.509853][T23030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1082.509864][T23030] Call Trace: [ 1082.509873][T23030] [ 1082.509881][T23030] dump_stack_lvl+0xe8/0x150 [ 1082.509912][T23030] should_fail_ex+0x412/0x560 [ 1082.509938][T23030] should_failslab+0xa8/0x100 [ 1082.509962][T23030] __kmalloc_noprof+0xe8/0x760 [ 1082.509983][T23030] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1082.510017][T23030] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1082.510050][T23030] genl_family_rcv_msg_doit+0xd9/0x330 [ 1082.510081][T23030] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1082.510112][T23030] ? apparmor_capable+0x126/0x170 [ 1082.510139][T23030] ? bpf_lsm_capable+0x9/0x20 [ 1082.510168][T23030] ? security_capable+0x7e/0x2c0 [ 1082.510195][T23030] genl_rcv_msg+0x61c/0x7a0 [ 1082.510227][T23030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1082.510251][T23030] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1082.510268][T23030] ? __pfx_nl80211_del_station+0x10/0x10 [ 1082.510288][T23030] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1082.510331][T23030] ? __lock_acquire+0x6b5/0x2cf0 [ 1082.510366][T23030] netlink_rcv_skb+0x232/0x4b0 [ 1082.510389][T23030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1082.510417][T23030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1082.510455][T23030] ? down_read+0x272/0x2e0 [ 1082.510473][T23030] ? genl_rcv+0xd/0x40 [ 1082.510499][T23030] genl_rcv+0x28/0x40 [ 1082.510523][T23030] netlink_unicast+0x80f/0x9b0 [ 1082.510551][T23030] ? __pfx_netlink_unicast+0x10/0x10 [ 1082.510572][T23030] ? netlink_sendmsg+0x650/0xb40 [ 1082.510593][T23030] ? skb_put+0x11b/0x210 [ 1082.510620][T23030] netlink_sendmsg+0x813/0xb40 [ 1082.510651][T23030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1082.510677][T23030] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1082.510700][T23030] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1082.510722][T23030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1082.510743][T23030] ____sys_sendmsg+0xa68/0xad0 [ 1082.510778][T23030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1082.510809][T23030] ? kstrtoull+0x12f/0x1d0 [ 1082.510836][T23030] ___sys_sendmsg+0x2a5/0x360 [ 1082.510868][T23030] ? __pfx____sys_sendmsg+0x10/0x10 [ 1082.510896][T23030] ? get_pid_task+0x20/0x1f0 [ 1082.510914][T23030] ? get_pid_task+0x20/0x1f0 [ 1082.510930][T23030] ? get_pid_task+0x20/0x1f0 [ 1082.510972][T23030] ? __fget_files+0x2a/0x420 [ 1082.510996][T23030] ? __fget_files+0x3a0/0x420 [ 1082.511030][T23030] __sys_sendmsg+0x183/0x260 [ 1082.511059][T23030] ? __pfx___sys_sendmsg+0x10/0x10 [ 1082.511105][T23030] __do_fast_syscall_32+0x20d/0x640 [ 1082.511124][T23030] ? do_fast_syscall_32+0x33/0x70 [ 1082.511141][T23030] ? asm_int80_emulation+0x1a/0x20 [ 1082.511158][T23030] ? do_int80_emulation+0x274/0x4d0 [ 1082.511172][T23030] ? trace_irq_disable+0x3b/0x150 [ 1082.511199][T23030] do_fast_syscall_32+0x33/0x70 [ 1082.511218][T23030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1082.511239][T23030] RIP: 0023:0xf7fc3f6c [ 1082.511256][T23030] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1082.511271][T23030] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1082.511292][T23030] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001140 [ 1082.511306][T23030] RDX: 0000000020080800 RSI: 0000000000000000 RDI: 0000000000000000 [ 1082.511318][T23030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1082.511336][T23030] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1082.511348][T23030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1082.511376][T23030] [ 1082.982686][ T5907] DVB: Unable to find symbol dib7000p_attach() [ 1082.989303][ T5907] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1083.099583][T23042] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4761'. [ 1083.115335][ T5907] rc_core: IR keymap rc-dib0700-rc5 not found [ 1083.122037][ T5907] Registered IR keymap rc-empty [ 1083.127860][ T5907] dvb-usb: could not initialize remote control. [ 1083.134493][ T5907] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1083.261261][ T5907] usb 1-1: USB disconnect, device number 13 [ 1083.316946][ T5907] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1083.382859][T23050] syzkaller0: entered promiscuous mode [ 1083.389579][T23050] syzkaller0: entered allmulticast mode [ 1083.847025][T23057] FAULT_INJECTION: forcing a failure. [ 1083.847025][T23057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.895532][T23057] CPU: 0 UID: 0 PID: 23057 Comm: syz.0.4765 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.895562][T23057] Tainted: [L]=SOFTLOCKUP [ 1083.895570][T23057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1083.895580][T23057] Call Trace: [ 1083.895588][T23057] [ 1083.895596][T23057] dump_stack_lvl+0xe8/0x150 [ 1083.895622][T23057] should_fail_ex+0x412/0x560 [ 1083.895643][T23057] _copy_to_user+0x31/0xb0 [ 1083.895665][T23057] simple_read_from_buffer+0xe1/0x170 [ 1083.895689][T23057] proc_fail_nth_read+0x1bb/0x230 [ 1083.895714][T23057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1083.895736][T23057] ? rw_verify_area+0x2a6/0x4d0 [ 1083.895751][T23057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1083.895771][T23057] vfs_read+0x20c/0xa70 [ 1083.895784][T23057] ? __fget_files+0x2a/0x420 [ 1083.895803][T23057] ? fdget_pos+0x246/0x320 [ 1083.895825][T23057] ? __pfx___mutex_lock+0x10/0x10 [ 1083.895841][T23057] ? __pfx_vfs_read+0x10/0x10 [ 1083.895857][T23057] ? __fget_files+0x2a/0x420 [ 1083.895880][T23057] ? __fget_files+0x3a0/0x420 [ 1083.895898][T23057] ? __fget_files+0x2a/0x420 [ 1083.895923][T23057] ksys_read+0x150/0x270 [ 1083.895940][T23057] ? __pfx_ksys_read+0x10/0x10 [ 1083.895957][T23057] ? asm_int80_emulation+0x1a/0x20 [ 1083.895976][T23057] do_int80_emulation+0x173/0x4d0 [ 1083.895990][T23057] ? trace_irq_disable+0x3b/0x150 [ 1083.896011][T23057] ? asm_int80_emulation+0x1a/0x20 [ 1083.896025][T23057] ? clear_bhb_loop+0x40/0x90 [ 1083.896040][T23057] ? clear_bhb_loop+0x40/0x90 [ 1083.896057][T23057] asm_int80_emulation+0x1a/0x20 [ 1083.896072][T23057] RIP: 0023:0xf7105b6b [ 1083.896086][T23057] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1083.896099][T23057] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1083.896116][T23057] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53c65d0 [ 1083.896127][T23057] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1083.896136][T23057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1083.896145][T23057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1083.896155][T23057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1083.896175][T23057] [ 1084.207932][T23063] FAULT_INJECTION: forcing a failure. [ 1084.207932][T23063] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.261154][T23063] CPU: 1 UID: 0 PID: 23063 Comm: syz.0.4767 Tainted: G L syzkaller #0 PREEMPT(full) [ 1084.261201][T23063] Tainted: [L]=SOFTLOCKUP [ 1084.261208][T23063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1084.261220][T23063] Call Trace: [ 1084.261228][T23063] [ 1084.261236][T23063] dump_stack_lvl+0xe8/0x150 [ 1084.261267][T23063] should_fail_ex+0x412/0x560 [ 1084.261292][T23063] should_failslab+0xa8/0x100 [ 1084.261315][T23063] __kmalloc_noprof+0xe8/0x760 [ 1084.261333][T23063] ? rcu_is_watching+0x15/0xb0 [ 1084.261356][T23063] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1084.261388][T23063] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1084.261420][T23063] genl_family_rcv_msg_doit+0xd9/0x330 [ 1084.261446][T23063] ? __asan_memcpy+0x40/0x70 [ 1084.261475][T23063] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1084.261502][T23063] ? __pfx___mutex_lock+0x10/0x10 [ 1084.261519][T23063] ? __pfx_genl_get_cmd+0x10/0x10 [ 1084.261542][T23063] ? __pfx_tipc_nl_net_set+0x10/0x10 [ 1084.261567][T23063] ? __dev_queue_xmit+0x274/0x38a0 [ 1084.261601][T23063] genl_rcv_msg+0x61c/0x7a0 [ 1084.261631][T23063] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1084.261654][T23063] ? __pfx_tipc_nl_net_set+0x10/0x10 [ 1084.261675][T23063] ? __lock_acquire+0x6b5/0x2cf0 [ 1084.261705][T23063] netlink_rcv_skb+0x232/0x4b0 [ 1084.261728][T23063] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1084.261756][T23063] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1084.261792][T23063] ? down_read+0x272/0x2e0 [ 1084.261810][T23063] ? genl_rcv+0xd/0x40 [ 1084.261837][T23063] genl_rcv+0x28/0x40 [ 1084.261859][T23063] netlink_unicast+0x80f/0x9b0 [ 1084.261886][T23063] ? __pfx_netlink_unicast+0x10/0x10 [ 1084.261908][T23063] ? netlink_sendmsg+0x650/0xb40 [ 1084.261928][T23063] ? skb_put+0x11b/0x210 [ 1084.261953][T23063] netlink_sendmsg+0x813/0xb40 [ 1084.261981][T23063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1084.262004][T23063] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1084.262026][T23063] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1084.262048][T23063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1084.262068][T23063] ____sys_sendmsg+0xa68/0xad0 [ 1084.262101][T23063] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1084.262130][T23063] ? kstrtoull+0x12f/0x1d0 [ 1084.262166][T23063] ___sys_sendmsg+0x2a5/0x360 [ 1084.262200][T23063] ? __pfx____sys_sendmsg+0x10/0x10 [ 1084.262228][T23063] ? get_pid_task+0x20/0x1f0 [ 1084.262243][T23063] ? get_pid_task+0x20/0x1f0 [ 1084.262258][T23063] ? get_pid_task+0x20/0x1f0 [ 1084.262299][T23063] ? __fget_files+0x2a/0x420 [ 1084.262323][T23063] ? __fget_files+0x3a0/0x420 [ 1084.262357][T23063] __sys_sendmsg+0x183/0x260 [ 1084.262385][T23063] ? __pfx___sys_sendmsg+0x10/0x10 [ 1084.262429][T23063] __do_fast_syscall_32+0x20d/0x640 [ 1084.262448][T23063] ? do_fast_syscall_32+0x33/0x70 [ 1084.262465][T23063] ? asm_int80_emulation+0x1a/0x20 [ 1084.262481][T23063] ? do_int80_emulation+0x274/0x4d0 [ 1084.262498][T23063] ? trace_irq_disable+0x3b/0x150 [ 1084.262525][T23063] do_fast_syscall_32+0x33/0x70 [ 1084.262544][T23063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1084.262563][T23063] RIP: 0023:0xf7f04f6c [ 1084.262578][T23063] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1084.262592][T23063] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1084.262612][T23063] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800007c0 [ 1084.262625][T23063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1084.262636][T23063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1084.262646][T23063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1084.262657][T23063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1084.262681][T23063] [ 1084.913213][T23075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4771'. [ 1084.934788][T23075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4771'. [ 1084.956303][T23073] sctp: [Deprecated]: syz.0.4769 (pid 23073) Use of int in maxseg socket option. [ 1084.956303][T23073] Use struct sctp_assoc_value instead [ 1085.292495][T23081] syzkaller0: entered promiscuous mode [ 1085.306308][T23081] syzkaller0: entered allmulticast mode [ 1085.785280][ T5827] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1085.975105][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 1085.999289][ T5827] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1085.999644][T23089] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4777'. [ 1086.041398][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.079483][ T5827] usb 4-1: config 0 descriptor?? [ 1086.311104][ T5827] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1086.345453][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1086.374113][ T5827] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1086.389266][ T5827] usb 4-1: media controller created [ 1086.422421][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1086.611083][ T5827] DVB: Unable to find symbol dib7000p_attach() [ 1086.671987][ T5827] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1086.835126][T23105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4779'. [ 1087.115059][ T5827] rc_core: IR keymap rc-dib0700-rc5 not found [ 1087.184779][ T5827] Registered IR keymap rc-empty [ 1087.283617][T23113] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4783'. [ 1087.303640][ T5827] dvb-usb: could not initialize remote control. [ 1087.328974][ T5827] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1087.402034][ T5827] usb 4-1: USB disconnect, device number 81 [ 1087.587651][ T5827] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1087.651246][T23115] tipc: Cannot configure node identity twice [ 1087.729084][T23121] syzkaller0: entered promiscuous mode [ 1087.734605][T23121] syzkaller0: entered allmulticast mode [ 1087.937249][T23125] batman_adv: batadv0: Adding interface: dummy0 [ 1087.953796][T23125] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.989287][T23125] batman_adv: batadv0: Interface activated: dummy0 [ 1088.283879][T23135] sctp: [Deprecated]: syz.2.4789 (pid 23135) Use of int in maxseg socket option. [ 1088.283879][T23135] Use struct sctp_assoc_value instead [ 1088.379750][T23139] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4791'. [ 1089.607571][ T798] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1089.676426][T23152] binder: 23151:23152 ioctl c0306201 80000440 returned -14 [ 1089.775277][ T798] usb 1-1: Using ep0 maxpacket: 32 [ 1089.806539][ T798] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1089.819752][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4796'. [ 1089.843201][ T798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.864229][ T798] usb 1-1: config 0 descriptor?? [ 1089.880811][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4796'. [ 1089.906180][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4796'. [ 1089.932225][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4796'. [ 1089.950631][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4796'. [ 1089.971708][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4796'. [ 1089.990744][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4796'. [ 1090.010266][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4796'. [ 1090.031715][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4796'. [ 1090.093705][ T798] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1090.121599][ T798] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1090.171996][ T798] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1090.181440][ T798] usb 1-1: media controller created [ 1090.194489][ T798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1090.343466][ T798] DVB: Unable to find symbol dib7000p_attach() [ 1090.360647][ T798] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1090.470497][T23172] FAULT_INJECTION: forcing a failure. [ 1090.470497][T23172] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.483573][ T798] rc_core: IR keymap rc-dib0700-rc5 not found [ 1090.495113][ T798] Registered IR keymap rc-empty [ 1090.506071][ T798] dvb-usb: could not initialize remote control. [ 1090.512663][T23172] CPU: 0 UID: 0 PID: 23172 Comm: syz.1.4801 Tainted: G L syzkaller #0 PREEMPT(full) [ 1090.512699][T23172] Tainted: [L]=SOFTLOCKUP [ 1090.512707][T23172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1090.512717][T23172] Call Trace: [ 1090.512725][T23172] [ 1090.512732][T23172] dump_stack_lvl+0xe8/0x150 [ 1090.512761][T23172] should_fail_ex+0x412/0x560 [ 1090.512787][T23172] should_failslab+0xa8/0x100 [ 1090.512812][T23172] __kvmalloc_node_noprof+0x178/0x8a0 [ 1090.512834][T23172] ? kvm_vcpu_ioctl_set_cpuid+0xe4/0x5c0 [ 1090.512859][T23172] ? _copy_from_user+0x94/0xb0 [ 1090.512888][T23172] kvm_vcpu_ioctl_set_cpuid+0xe4/0x5c0 [ 1090.512917][T23172] kvm_arch_vcpu_ioctl+0x163e/0x2c70 [ 1090.512942][T23172] ? __lock_acquire+0x6b5/0x2cf0 [ 1090.512969][T23172] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1090.512994][T23172] ? __lock_acquire+0x6b5/0x2cf0 [ 1090.513020][T23172] ? __lock_acquire+0x6b5/0x2cf0 [ 1090.513052][T23172] ? unwind_next_frame+0xa5/0x23c0 [ 1090.513107][T23172] ? is_bpf_text_address+0x26/0x2b0 [ 1090.513131][T23172] ? is_bpf_text_address+0x292/0x2b0 [ 1090.513149][T23172] ? is_bpf_text_address+0x26/0x2b0 [ 1090.513171][T23172] ? kernel_text_address+0xa5/0xe0 [ 1090.513193][T23172] ? __kernel_text_address+0xd/0x30 [ 1090.513212][T23172] ? unwind_get_return_address+0x4d/0x90 [ 1090.513238][T23172] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1090.513257][T23172] ? arch_stack_walk+0xfb/0x150 [ 1090.513289][T23172] ? __lock_acquire+0x6b5/0x2cf0 [ 1090.513315][T23172] ? stack_trace_save+0xa9/0x100 [ 1090.513334][T23172] ? __pfx_stack_trace_save+0x10/0x10 [ 1090.513351][T23172] ? kasan_save_free_info+0x46/0x50 [ 1090.513379][T23172] ? stack_depot_save_flags+0x33/0x810 [ 1090.513401][T23172] ? format_decode+0xd0/0xe10 [ 1090.513427][T23172] ? __mutex_trylock_common+0x158/0x260 [ 1090.513458][T23172] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1090.513488][T23172] ? rcu_is_watching+0x15/0xb0 [ 1090.513512][T23172] ? trace_contention_end+0x3d/0x150 [ 1090.513546][T23172] ? __mutex_lock+0x319/0x1300 [ 1090.513571][T23172] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 1090.513592][T23172] ? __pfx___mutex_lock+0x10/0x10 [ 1090.513616][T23172] ? kasan_quarantine_put+0xbb/0x1f0 [ 1090.513642][T23172] kvm_vcpu_ioctl+0x7e4/0xfd0 [ 1090.513667][T23172] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1090.513683][T23172] ? do_vfs_ioctl+0x1166/0x1530 [ 1090.513706][T23172] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1090.513752][T23172] kvm_vcpu_compat_ioctl+0x204/0x390 [ 1090.513772][T23172] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1090.513790][T23172] ? __fget_files+0x3a0/0x420 [ 1090.513820][T23172] ? __fget_files+0x2a/0x420 [ 1090.513847][T23172] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1090.513872][T23172] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1090.513896][T23172] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1090.513919][T23172] ? __fget_files+0x3a0/0x420 [ 1090.513950][T23172] ? fput+0xa0/0xd0 [ 1090.513975][T23172] ? ksys_write+0x242/0x270 [ 1090.514004][T23172] __do_fast_syscall_32+0x20d/0x640 [ 1090.514025][T23172] ? do_fast_syscall_32+0x33/0x70 [ 1090.514041][T23172] ? asm_int80_emulation+0x1a/0x20 [ 1090.514059][T23172] ? do_int80_emulation+0x274/0x4d0 [ 1090.514082][T23172] ? trace_irq_disable+0x3b/0x150 [ 1090.514111][T23172] do_fast_syscall_32+0x33/0x70 [ 1090.514130][T23172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1090.514153][T23172] RIP: 0023:0xf6feef6c [ 1090.514170][T23172] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1090.514187][T23172] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1090.514208][T23172] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae8a [ 1090.514220][T23172] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 1090.514232][T23172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1090.514242][T23172] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1090.514254][T23172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1090.514280][T23172] [ 1090.911377][ T798] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1090.981333][ T798] usb 1-1: USB disconnect, device number 14 [ 1091.052053][ T798] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1091.448091][T23187] binder: 23186:23187 ioctl c0306201 80000440 returned -14 [ 1091.801826][T23200] sctp: [Deprecated]: syz.1.4808 (pid 23200) Use of int in maxseg socket option. [ 1091.801826][T23200] Use struct sctp_assoc_value instead [ 1091.895678][T23202] syzkaller0: entered promiscuous mode [ 1091.902638][T23202] syzkaller0: entered allmulticast mode [ 1092.587752][T23210] netlink: 'syz.2.4815': attribute type 6 has an invalid length. [ 1092.765840][T23219] binder: 23218:23219 ioctl c0306201 80000440 returned -14 [ 1093.141541][ T5827] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1093.335402][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 1093.348931][ T5827] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1093.358388][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.377249][ T5827] usb 4-1: config 0 descriptor?? [ 1093.591953][ T5827] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1093.605634][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1093.622128][ T5827] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1093.629513][ T5827] usb 4-1: media controller created [ 1093.651776][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1093.716072][ T5827] DVB: Unable to find symbol dib7000p_attach() [ 1093.722429][ T5827] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1093.814989][ T5827] rc_core: IR keymap rc-dib0700-rc5 not found [ 1093.821252][ T5827] Registered IR keymap rc-empty [ 1093.849273][ T5827] dvb-usb: could not initialize remote control. [ 1093.857351][ T5827] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1094.064566][ T5827] usb 4-1: USB disconnect, device number 82 [ 1094.113517][ T5827] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1094.727910][T23234] __nla_validate_parse: 95 callbacks suppressed [ 1094.727931][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4822'. [ 1094.761628][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4822'. [ 1094.794168][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4822'. [ 1094.815193][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4822'. [ 1094.833599][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4822'. [ 1094.862461][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4822'. [ 1094.877682][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4822'. [ 1094.902671][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4822'. [ 1094.930442][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4822'. [ 1094.948720][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4822'. [ 1095.401537][T23257] sctp: [Deprecated]: syz.0.4827 (pid 23257) Use of int in maxseg socket option. [ 1095.401537][T23257] Use struct sctp_assoc_value instead [ 1095.646937][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1095.942309][T23262] FAULT_INJECTION: forcing a failure. [ 1095.942309][T23262] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.995895][T23262] CPU: 1 UID: 0 PID: 23262 Comm: syz.1.4828 Tainted: G L syzkaller #0 PREEMPT(full) [ 1095.995927][T23262] Tainted: [L]=SOFTLOCKUP [ 1095.995934][T23262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1095.995946][T23262] Call Trace: [ 1095.995954][T23262] [ 1095.995964][T23262] dump_stack_lvl+0xe8/0x150 [ 1095.995995][T23262] should_fail_ex+0x412/0x560 [ 1095.996022][T23262] should_failslab+0xa8/0x100 [ 1095.996046][T23262] __kmalloc_noprof+0xe8/0x760 [ 1095.996067][T23262] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1095.996101][T23262] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1095.996136][T23262] genl_family_rcv_msg_doit+0xd9/0x330 [ 1095.996169][T23262] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1095.996209][T23262] ? apparmor_capable+0x126/0x170 [ 1095.996236][T23262] ? bpf_lsm_capable+0x9/0x20 [ 1095.996260][T23262] ? security_capable+0x7e/0x2c0 [ 1095.996286][T23262] genl_rcv_msg+0x61c/0x7a0 [ 1095.996324][T23262] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1095.996348][T23262] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1095.996366][T23262] ? __pfx_nl80211_connect+0x10/0x10 [ 1095.996388][T23262] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1095.996407][T23262] ? __lock_acquire+0x6b5/0x2cf0 [ 1095.996441][T23262] netlink_rcv_skb+0x232/0x4b0 [ 1095.996464][T23262] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1095.996490][T23262] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1095.996524][T23262] ? down_read+0x272/0x2e0 [ 1095.996542][T23262] ? genl_rcv+0xd/0x40 [ 1095.996568][T23262] genl_rcv+0x28/0x40 [ 1095.996592][T23262] netlink_unicast+0x80f/0x9b0 [ 1095.996620][T23262] ? __pfx_netlink_unicast+0x10/0x10 [ 1095.996641][T23262] ? netlink_sendmsg+0x650/0xb40 [ 1095.996661][T23262] ? skb_put+0x11b/0x210 [ 1095.996689][T23262] netlink_sendmsg+0x813/0xb40 [ 1095.996719][T23262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1095.996745][T23262] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1095.996768][T23262] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1095.996790][T23262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1095.996811][T23262] ____sys_sendmsg+0xa68/0xad0 [ 1095.996844][T23262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1095.996880][T23262] ? kstrtoull+0x12f/0x1d0 [ 1095.996907][T23262] ___sys_sendmsg+0x2a5/0x360 [ 1095.996943][T23262] ? __pfx____sys_sendmsg+0x10/0x10 [ 1095.996971][T23262] ? get_pid_task+0x20/0x1f0 [ 1095.996988][T23262] ? get_pid_task+0x20/0x1f0 [ 1095.997004][T23262] ? get_pid_task+0x20/0x1f0 [ 1095.997046][T23262] ? __fget_files+0x2a/0x420 [ 1095.997072][T23262] ? __fget_files+0x3a0/0x420 [ 1095.997106][T23262] __sys_sendmsg+0x183/0x260 [ 1095.997134][T23262] ? __pfx___sys_sendmsg+0x10/0x10 [ 1095.997178][T23262] __do_fast_syscall_32+0x20d/0x640 [ 1095.997197][T23262] ? do_fast_syscall_32+0x33/0x70 [ 1095.997213][T23262] ? asm_int80_emulation+0x1a/0x20 [ 1095.997229][T23262] ? do_int80_emulation+0x274/0x4d0 [ 1095.997244][T23262] ? trace_irq_disable+0x3b/0x150 [ 1095.997270][T23262] do_fast_syscall_32+0x33/0x70 [ 1095.997287][T23262] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1095.997315][T23262] RIP: 0023:0xf6feef6c [ 1095.997331][T23262] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1095.997345][T23262] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1095.997364][T23262] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1095.997377][T23262] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1095.997388][T23262] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1095.997398][T23262] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1095.997408][T23262] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1095.997435][T23262] [ 1096.010363][T23265] binder: 23264:23265 ioctl c0306201 80000440 returned -14 [ 1096.739073][T23275] syzkaller0: entered promiscuous mode [ 1096.744595][T23275] syzkaller0: entered allmulticast mode [ 1096.907990][T19226] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1097.069387][T19226] usb 4-1: Using ep0 maxpacket: 32 [ 1097.095623][ T5928] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1097.097903][T19226] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1097.122120][T19226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.140602][T19226] usb 4-1: config 0 descriptor?? [ 1097.245009][ T5928] usb 3-1: device descriptor read/64, error -71 [ 1097.369390][T19226] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1097.386893][T19226] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1097.413034][T19226] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1097.420378][T19226] usb 4-1: media controller created [ 1097.444435][T19226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1097.505065][ T5928] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 1097.543142][T19226] DVB: Unable to find symbol dib7000p_attach() [ 1097.549529][T19226] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1097.631835][T19226] rc_core: IR keymap rc-dib0700-rc5 not found [ 1097.638180][T19226] Registered IR keymap rc-empty [ 1097.653753][ T5928] usb 3-1: device descriptor read/64, error -71 [ 1097.662836][T19226] dvb-usb: could not initialize remote control. [ 1097.669409][T19226] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1097.765736][ T5928] usb usb3-port1: attempt power cycle [ 1097.884186][T19226] usb 4-1: USB disconnect, device number 83 [ 1097.940657][T19226] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1098.118328][ T5928] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1098.165934][ T5928] usb 3-1: device descriptor read/8, error -71 [ 1098.407348][ T5928] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1098.446060][ T5928] usb 3-1: device descriptor read/8, error -71 [ 1098.566432][ T5928] usb usb3-port1: unable to enumerate USB device [ 1098.735021][ T5928] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1098.895070][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 1098.902460][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.918147][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.928495][ T5928] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1098.938131][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.949772][ T5928] usb 4-1: config 0 descriptor?? [ 1098.963283][ T5928] hub 4-1:0.0: USB hub found [ 1099.165025][ T5928] hub 4-1:0.0: 1 port detected [ 1099.222076][T23297] binder: 23296:23297 ioctl c0306201 80000440 returned -14 [ 1099.292762][T23299] gretap0: entered promiscuous mode [ 1099.300792][T23299] gretap0: left promiscuous mode [ 1099.346279][ T5929] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1099.481607][T23303] sctp: [Deprecated]: syz.9.4843 (pid 23303) Use of int in maxseg socket option. [ 1099.481607][T23303] Use struct sctp_assoc_value instead [ 1099.518402][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1099.530658][ T5929] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 1099.540145][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.553658][ T5929] usb 1-1: config 0 descriptor?? [ 1099.850673][ T5929] usbhid 1-1:0.0: can't add hid device: -71 [ 1099.883915][ T5929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1099.932326][ T5929] usb 1-1: USB disconnect, device number 15 [ 1100.037356][T23312] __nla_validate_parse: 97 callbacks suppressed [ 1100.037379][T23312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4844'. [ 1100.069023][T23312] bridge0: entered promiscuous mode [ 1100.080579][T23312] bridge0: left promiscuous mode [ 1100.446822][ T5928] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 1100.477305][ T5928] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 1100.513303][ T5928] usbhid 4-1:0.0: can't add hid device: -32 [ 1100.523408][ T5928] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1100.570594][ T5928] usb 4-1: USB disconnect, device number 84 [ 1101.178999][T23327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4848'. [ 1101.247583][T23327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4848'. [ 1101.620292][T23330] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4849'. [ 1101.818821][T23331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4845'. [ 1102.197228][T23335] syzkaller0: entered promiscuous mode [ 1102.203557][T23335] syzkaller0: entered allmulticast mode [ 1102.538209][T23337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4850'. [ 1103.125761][T23342] binder: 23341:23342 ioctl c0306201 80000440 returned -14 [ 1103.666359][T23353] Invalid option length (1047154) for dns_resolver key [ 1104.598871][T23362] sctp: [Deprecated]: syz.1.4857 (pid 23362) Use of int in maxseg socket option. [ 1104.598871][T23362] Use struct sctp_assoc_value instead [ 1104.887204][T23366] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4859'. [ 1104.898422][T23366] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4859'. [ 1104.907758][T23366] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4859'. [ 1104.916976][T23366] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4859'. [ 1105.162639][T23372] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1105.232469][T23374] __nla_validate_parse: 47 callbacks suppressed [ 1105.232573][T23374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4860'. [ 1105.258471][ T5928] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1105.438094][ T5928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.448402][ T5928] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1105.482988][ T5928] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1105.512081][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.540161][ T5928] usb 1-1: Product: syz [ 1105.553656][ T5928] usb 1-1: Manufacturer: syz [ 1105.569019][ T5928] usb 1-1: SerialNumber: syz [ 1105.597173][ T5928] usb 1-1: config 0 descriptor?? [ 1106.315051][ T5928] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1106.325177][ T5929] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1106.466930][ T5928] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.478042][ T5928] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.487985][ T5928] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1106.501068][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1106.508581][ T5928] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 1106.517823][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.526814][ T5929] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1106.536790][ T5928] usb 4-1: config 0 descriptor?? [ 1106.542463][ T5929] usb 3-1: config 0 has no interface number 0 [ 1106.551460][ T5929] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1106.563554][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.571709][ T5929] usb 3-1: Product: syz [ 1106.576456][ T5929] usb 3-1: Manufacturer: syz [ 1106.581077][ T5929] usb 3-1: SerialNumber: syz [ 1106.588158][ T5929] usb 3-1: config 0 descriptor?? [ 1106.759831][T23391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.772465][T23391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.799135][T23390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.809812][T23390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.824630][ T5929] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1106.835657][ T5929] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1106.847451][ T5929] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1106.856196][ T5929] usb 3-1: media controller created [ 1106.869743][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1107.078295][ T5929] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1107.190383][ T5928] a4tech 0003:09DA:001A.0018: item fetching failed at offset 0/2 [ 1107.202608][ T5928] a4tech 0003:09DA:001A.0018: parse failed [ 1107.209507][ T5928] a4tech 0003:09DA:001A.0018: probe with driver a4tech failed with error -22 [ 1107.426324][ T5928] usb 4-1: USB disconnect, device number 85 [ 1107.992837][ T798] usb 1-1: USB disconnect, device number 16 [ 1108.464036][T23409] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4871'. [ 1108.587692][T23411] syzkaller0: entered promiscuous mode [ 1108.598553][T23411] syzkaller0: entered allmulticast mode [ 1109.208567][ T5929] usb 3-1: USB disconnect, device number 92 [ 1109.470254][T23424] sctp: [Deprecated]: syz.2.4874 (pid 23424) Use of int in maxseg socket option. [ 1109.470254][T23424] Use struct sctp_assoc_value instead [ 1109.640098][T23427] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x38415262, 3, 0, 0, 0) [ 1111.603254][T23433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4876'. [ 1111.866193][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'. [ 1111.875368][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'. [ 1111.884263][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'. [ 1111.893342][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'. [ 1111.902361][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'. [ 1111.911701][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'. [ 1111.920659][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'. [ 1111.929764][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'. [ 1111.939144][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'. [ 1112.075062][ T5929] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1112.239939][ T5929] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.252437][ T5929] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.263586][ T5929] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1112.279352][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1112.288110][ T5929] usb 3-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 1112.300180][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.300667][T23449] FAULT_INJECTION: forcing a failure. [ 1112.300667][T23449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.354331][T23449] CPU: 0 UID: 0 PID: 23449 Comm: syz.0.4883 Tainted: G L syzkaller #0 PREEMPT(full) [ 1112.354361][T23449] Tainted: [L]=SOFTLOCKUP [ 1112.354368][T23449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1112.354387][T23449] Call Trace: [ 1112.354395][T23449] [ 1112.354402][T23449] dump_stack_lvl+0xe8/0x150 [ 1112.354432][T23449] should_fail_ex+0x412/0x560 [ 1112.354457][T23449] _copy_from_user+0x2d/0xb0 [ 1112.354483][T23449] get_compat_msghdr+0xb3/0x4c0 [ 1112.354506][T23449] ? __lock_acquire+0x6b5/0x2cf0 [ 1112.354529][T23449] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1112.354554][T23449] ? kstrtoull+0x12f/0x1d0 [ 1112.354577][T23449] ___sys_sendmsg+0x201/0x360 [ 1112.354605][T23449] ? __pfx____sys_sendmsg+0x10/0x10 [ 1112.354631][T23449] ? get_pid_task+0x20/0x1f0 [ 1112.354646][T23449] ? get_pid_task+0x20/0x1f0 [ 1112.354660][T23449] ? get_pid_task+0x20/0x1f0 [ 1112.354694][T23449] ? __fget_files+0x2a/0x420 [ 1112.354716][T23449] ? __fget_files+0x3a0/0x420 [ 1112.354744][T23449] __sys_sendmsg+0x183/0x260 [ 1112.354771][T23449] ? __pfx___sys_sendmsg+0x10/0x10 [ 1112.354803][T23449] __do_fast_syscall_32+0x20d/0x640 [ 1112.354814][T23449] ? do_fast_syscall_32+0x33/0x70 [ 1112.354824][T23449] ? asm_int80_emulation+0x1a/0x20 [ 1112.354834][T23449] ? do_int80_emulation+0x274/0x4d0 [ 1112.354843][T23449] ? trace_irq_disable+0x3b/0x150 [ 1112.354860][T23449] do_fast_syscall_32+0x33/0x70 [ 1112.354870][T23449] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1112.354883][T23449] RIP: 0023:0xf7f04f6c [ 1112.354898][T23449] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1112.354912][T23449] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1112.354930][T23449] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800056c0 [ 1112.354941][T23449] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1112.354951][T23449] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1112.354962][T23449] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1112.354972][T23449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1112.354995][T23449] [ 1112.583419][ T5929] usb 3-1: config 0 descriptor?? [ 1112.695134][T17916] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1112.805608][T23436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.836433][T23436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.846793][T17916] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1112.855250][T17916] usb 4-1: config 0 has no interface number 0 [ 1112.872674][T17916] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1112.896262][T17916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.942724][T17916] usb 4-1: Product: syz [ 1112.952465][T17916] usb 4-1: Manufacturer: syz [ 1112.957258][ T5928] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1112.978108][T17916] usb 4-1: SerialNumber: syz [ 1113.001662][T17916] usb 4-1: config 0 descriptor?? [ 1113.134367][T23461] sctp: [Deprecated]: syz.1.4886 (pid 23461) Use of int in maxseg socket option. [ 1113.134367][T23461] Use struct sctp_assoc_value instead [ 1113.154835][ T5928] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1113.163401][ T5928] usb 1-1: config 0 has no interface number 0 [ 1113.172086][ T5928] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1113.181722][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.189943][ T5928] usb 1-1: Product: syz [ 1113.194398][ T5928] usb 1-1: Manufacturer: syz [ 1113.199334][ T5928] usb 1-1: SerialNumber: syz [ 1113.232802][T23448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.256060][ T5928] usb 1-1: config 0 descriptor?? [ 1113.289836][T23448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.311294][ T5929] a4tech 0003:09DA:001A.0019: item fetching failed at offset 0/2 [ 1113.323457][ T5929] a4tech 0003:09DA:001A.0019: parse failed [ 1113.339876][ T5929] a4tech 0003:09DA:001A.0019: probe with driver a4tech failed with error -22 [ 1113.350130][T17916] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1113.380793][T17916] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1113.422842][T17916] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1113.444204][T17916] usb 4-1: media controller created [ 1113.473007][T23455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.486440][T23455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.502937][T17916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1113.542855][ T5928] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1113.583329][ T5928] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1113.614674][ T798] usb 3-1: USB disconnect, device number 93 [ 1113.630445][ T5928] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1113.657451][ T5928] usb 1-1: media controller created [ 1113.704545][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1113.804739][ T5928] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 1114.715539][T17916] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1115.555016][ T5929] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1115.646686][T23483] syzkaller0: entered promiscuous mode [ 1115.658129][T23483] syzkaller0: entered allmulticast mode [ 1115.714981][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 1115.785460][ T5929] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1115.817695][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1115.859192][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 30768, setting to 1024 [ 1115.873794][ T5928] usb 1-1: USB disconnect, device number 17 [ 1115.896433][T17916] usb 4-1: USB disconnect, device number 86 [ 1115.935131][ T5929] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1115.982986][T23490] binder: 23489:23490 ioctl c0306201 80000440 returned -14 [ 1116.006100][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1116.084419][ T5929] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1116.123533][ T5929] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1116.136905][ T797] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1116.143133][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.159740][ T10] usb 10-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1116.185177][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.200166][ T5929] usb 3-1: Manufacturer: syz [ 1116.211262][ T797] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1116.225067][ T10] dvb_usb_ec168 10-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 1116.252145][ T5929] usb 3-1: config 0 descriptor?? [ 1116.269852][ T10] usb 10-1: USB disconnect, device number 45 [ 1116.282398][ T797] usb 2-1: USB disconnect, device number 52 [ 1116.577116][T19226] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1116.585050][ T5929] rc_core: IR keymap rc-hauppauge not found [ 1116.591168][ T5929] Registered IR keymap rc-empty [ 1116.603704][ T5929] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1116.646926][ T5929] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1116.666302][ T5929] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1116.692574][ T5929] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input310 [ 1116.724222][ T5929] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1116.754739][T19226] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1116.765594][ T5929] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1116.773571][T19226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.794329][ T5929] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1116.815212][T19226] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1116.815571][ T5929] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1116.825112][T19226] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1116.839594][T19226] usb 1-1: Manufacturer: syz [ 1116.861169][T19226] usb 1-1: config 0 descriptor?? [ 1116.866507][ T5929] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1116.895328][ T5929] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1116.905812][ T5929] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1116.926793][ T5929] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1116.956167][T19226] rc_core: IR keymap rc-hauppauge not found [ 1116.956693][ T5929] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1116.962207][T19226] Registered IR keymap rc-empty [ 1116.980254][T19226] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 1117.000813][T19226] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input311 [ 1117.001205][ T5929] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1117.055461][ T797] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1117.076304][ T5929] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1117.106710][ T5929] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1117.249714][ T797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.260394][ T797] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1117.270269][ T797] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1117.279674][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.305780][ T797] usb 2-1: config 0 descriptor?? [ 1117.325398][ T797] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1117.333129][ T797] dvb-usb: bulk message failed: -22 (3/0) [ 1117.358107][ T797] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1117.370357][ T797] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1117.377783][ T797] usb 2-1: media controller created [ 1117.385554][ T797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1117.431493][ T797] dvb-usb: bulk message failed: -22 (6/0) [ 1117.440464][ T797] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1117.451289][ T797] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input312 [ 1117.466165][ T797] dvb-usb: schedule remote query interval to 150 msecs. [ 1117.473188][ T797] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1117.603282][T23501] dvb-usb: bulk message failed: -22 (2/0) [ 1117.632737][ T797] dvb-usb: bulk message failed: -22 (1/0) [ 1117.638954][ T797] dvb-usb: error while querying for an remote control event. [ 1117.802242][T23509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.810957][ T797] dvb-usb: bulk message failed: -22 (1/0) [ 1117.817424][T23509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.826362][ T797] dvb-usb: error while querying for an remote control event. [ 1117.992141][ T797] dvb-usb: bulk message failed: -22 (1/0) [ 1117.998834][ T797] dvb-usb: error while querying for an remote control event. [ 1118.169944][ T797] dvb-usb: bulk message failed: -22 (1/0) [ 1118.176052][ T797] dvb-usb: error while querying for an remote control event. [ 1118.347524][ T797] dvb-usb: bulk message failed: -22 (1/0) [ 1118.355084][ T797] dvb-usb: error while querying for an remote control event. [ 1118.535209][ T797] dvb-usb: bulk message failed: -22 (1/0) [ 1118.542745][ T797] dvb-usb: error while querying for an remote control event. [ 1118.691151][T23515] __nla_validate_parse: 92 callbacks suppressed [ 1118.691171][T23515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4899'. [ 1118.715211][ T797] dvb-usb: bulk message failed: -22 (1/0) [ 1118.721651][ T797] dvb-usb: error while querying for an remote control event. [ 1118.887118][ T797] dvb-usb: bulk message failed: -22 (1/0) [ 1118.895019][ T797] dvb-usb: error while querying for an remote control event. [ 1119.069853][ T797] dvb-usb: bulk message failed: -22 (1/0) [ 1119.088655][ T797] dvb-usb: error while querying for an remote control event. [ 1119.201839][ T10] usb 1-1: USB disconnect, device number 18 [ 1119.255045][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 1119.261281][ T5929] dvb-usb: error while querying for an remote control event. [ 1119.455005][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 1119.460912][ T5929] dvb-usb: error while querying for an remote control event. [ 1119.612008][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4900'. [ 1119.633892][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4900'. [ 1119.642919][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 1119.648803][ T5929] dvb-usb: error while querying for an remote control event. [ 1119.670587][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4900'. [ 1119.696061][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4900'. [ 1119.722144][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4900'. [ 1119.739675][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4900'. [ 1119.758036][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4900'. [ 1119.770802][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4900'. [ 1119.780877][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4900'. [ 1119.825067][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 1119.833168][ T5929] dvb-usb: error while querying for an remote control event. [ 1119.891182][ T5929] usb 2-1: USB disconnect, device number 53 [ 1119.962951][ T5929] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1120.255037][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1120.346296][ T5929] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1120.416977][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1120.425660][ T10] usb 1-1: config 0 has no interface number 0 [ 1120.434197][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1120.443641][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.451955][ T10] usb 1-1: Product: syz [ 1120.459664][ T10] usb 1-1: Manufacturer: syz [ 1120.464711][ T10] usb 1-1: SerialNumber: syz [ 1120.479905][ T10] usb 1-1: config 0 descriptor?? [ 1120.515151][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 1120.522571][ T5929] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1120.536374][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.551093][ T5929] usb 2-1: config 0 descriptor?? [ 1120.694250][T23531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.719400][T23531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.742593][ T10] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1120.756601][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1120.767170][ T5929] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1120.779364][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1120.787883][ T10] usb 1-1: media controller created [ 1120.794847][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1120.823655][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1120.861949][ T5929] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1120.869759][ T5929] usb 2-1: media controller created [ 1120.962537][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1121.016924][ T10] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1121.210098][ T5929] DVB: Unable to find symbol dib7000p_attach() [ 1121.220856][ T5929] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1121.237864][ T797] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1121.326094][ T5929] rc_core: IR keymap rc-dib0700-rc5 not found [ 1121.340938][ T5929] Registered IR keymap rc-empty [ 1121.367658][ T5929] dvb-usb: could not initialize remote control. [ 1121.373965][ T5929] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1121.408052][T23556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.436024][ T797] usb 10-1: config 0 has no interfaces? [ 1121.451975][ T797] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1121.466956][T23556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.486163][ T797] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.509949][T19226] usb 2-1: USB disconnect, device number 54 [ 1121.518202][ T797] usb 10-1: config 0 descriptor?? [ 1121.644864][T19226] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1121.731790][ T5929] usb 10-1: USB disconnect, device number 46 [ 1122.232455][T23568] FAULT_INJECTION: forcing a failure. [ 1122.232455][T23568] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.246902][T23568] CPU: 0 UID: 0 PID: 23568 Comm: syz.1.4915 Tainted: G L syzkaller #0 PREEMPT(full) [ 1122.246924][T23568] Tainted: [L]=SOFTLOCKUP [ 1122.246931][T23568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1122.246943][T23568] Call Trace: [ 1122.246950][T23568] [ 1122.246958][T23568] dump_stack_lvl+0xe8/0x150 [ 1122.246988][T23568] should_fail_ex+0x412/0x560 [ 1122.247020][T23568] should_failslab+0xa8/0x100 [ 1122.247044][T23568] __kmalloc_noprof+0xe8/0x760 [ 1122.247065][T23568] ? tomoyo_encode+0x28b/0x550 [ 1122.247093][T23568] tomoyo_encode+0x28b/0x550 [ 1122.247120][T23568] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1122.247154][T23568] ? tomoyo_path_number_perm+0x219/0x630 [ 1122.247173][T23568] tomoyo_path_number_perm+0x246/0x630 [ 1122.247186][T23568] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1122.247198][T23568] ? __lock_acquire+0x6b5/0x2cf0 [ 1122.247227][T23568] ? __fget_files+0x2a/0x420 [ 1122.247253][T23568] ? __fget_files+0x3a0/0x420 [ 1122.247277][T23568] ? __fget_files+0x2a/0x420 [ 1122.247306][T23568] security_file_ioctl_compat+0xc3/0x2a0 [ 1122.247330][T23568] __ia32_compat_sys_ioctl+0x139/0x950 [ 1122.247344][T23568] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1122.247357][T23568] ? __fget_files+0x3a0/0x420 [ 1122.247374][T23568] ? fput+0xa0/0xd0 [ 1122.247393][T23568] ? ksys_write+0x242/0x270 [ 1122.247431][T23568] __do_fast_syscall_32+0x20d/0x640 [ 1122.247453][T23568] ? do_fast_syscall_32+0x33/0x70 [ 1122.247469][T23568] ? asm_int80_emulation+0x1a/0x20 [ 1122.247480][T23568] ? do_int80_emulation+0x274/0x4d0 [ 1122.247491][T23568] do_fast_syscall_32+0x33/0x70 [ 1122.247501][T23568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1122.247514][T23568] RIP: 0023:0xf6feef6c [ 1122.247524][T23568] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1122.247536][T23568] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1122.247556][T23568] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004048aecb [ 1122.247570][T23568] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1122.247581][T23568] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1122.247592][T23568] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1122.247604][T23568] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1122.247625][T23568] [ 1122.247639][T23568] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1122.765143][T17916] usb 10-1: new full-speed USB device number 47 using dummy_hcd [ 1122.939165][T17916] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.950505][T17916] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1122.959603][T17916] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1122.968853][T17916] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.979399][T17916] usb 10-1: config 0 descriptor?? [ 1122.989296][T17916] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1122.996078][T17916] dvb-usb: bulk message failed: -22 (3/0) [ 1123.004151][T17916] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1123.013755][T17916] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1123.021711][T17916] usb 10-1: media controller created [ 1123.030412][T17916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1123.046538][T17916] dvb-usb: bulk message failed: -22 (6/0) [ 1123.056199][T17916] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1123.069548][T17916] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input314 [ 1123.098317][T17916] dvb-usb: schedule remote query interval to 150 msecs. [ 1123.109836][T17916] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1123.136966][ T10] usb 1-1: USB disconnect, device number 19 [ 1123.268331][T17916] dvb-usb: bulk message failed: -22 (1/0) [ 1123.278563][T17916] dvb-usb: error while querying for an remote control event. [ 1123.445430][T17916] dvb-usb: bulk message failed: -22 (1/0) [ 1123.457321][T17916] dvb-usb: error while querying for an remote control event. [ 1123.625092][T17916] dvb-usb: bulk message failed: -22 (1/0) [ 1123.648233][T17916] dvb-usb: error while querying for an remote control event. [ 1123.824983][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 1123.832598][ T5929] dvb-usb: error while querying for an remote control event. [ 1123.915018][T17916] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1124.006217][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 1124.015093][ T5929] dvb-usb: error while querying for an remote control event. [ 1124.030650][T19226] usb 10-1: USB disconnect, device number 47 [ 1124.086276][T17916] usb 2-1: Using ep0 maxpacket: 32 [ 1124.117948][T19226] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1124.132327][T17916] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1124.183136][T17916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.228905][T17916] usb 2-1: config 0 descriptor?? [ 1124.464300][T23596] syzkaller0: entered promiscuous mode [ 1124.476772][T17916] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1124.519663][T23596] syzkaller0: entered allmulticast mode [ 1124.531077][T17916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1124.580846][T17916] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1124.618800][T17916] usb 2-1: media controller created [ 1124.706097][T17916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1124.934578][T17916] DVB: Unable to find symbol dib7000p_attach() [ 1124.959013][T17916] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1125.235179][T17916] rc_core: IR keymap rc-dib0700-rc5 not found [ 1125.257530][T17916] Registered IR keymap rc-empty [ 1125.262613][T17916] dvb-usb: could not initialize remote control. [ 1125.275635][T17916] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1125.319849][T17916] usb 2-1: USB disconnect, device number 55 [ 1125.388536][T17916] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1125.950114][T23620] __nla_validate_parse: 95 callbacks suppressed [ 1125.950184][T23620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4930'. [ 1126.059067][T19226] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1126.259362][T19226] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1126.285252][T19226] usb 1-1: config 0 has no interface number 0 [ 1126.316722][T19226] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1126.342771][T19226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.376954][T19226] usb 1-1: Product: syz [ 1126.381170][T19226] usb 1-1: Manufacturer: syz [ 1126.413787][T19226] usb 1-1: SerialNumber: syz [ 1126.445570][T19226] usb 1-1: config 0 descriptor?? [ 1126.679550][T23619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.718402][T23619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.776435][T19226] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1126.806683][T19226] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1126.846560][T19226] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1126.870231][T19226] usb 1-1: media controller created [ 1126.907135][T19226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1127.045638][T19226] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1128.199210][T23600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1128.208375][T23600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1128.217950][T23600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1128.227640][T23600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1128.236856][T23600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1128.245984][T23600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1128.255007][T23600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1128.263960][T23600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1128.272986][T23600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1128.311724][T23632] FAULT_INJECTION: forcing a failure. [ 1128.311724][T23632] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.324862][T23632] CPU: 1 UID: 0 PID: 23632 Comm: syz.3.4933 Tainted: G L syzkaller #0 PREEMPT(full) [ 1128.324896][T23632] Tainted: [L]=SOFTLOCKUP [ 1128.324903][T23632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1128.324915][T23632] Call Trace: [ 1128.324922][T23632] [ 1128.324930][T23632] dump_stack_lvl+0xe8/0x150 [ 1128.324957][T23632] should_fail_ex+0x412/0x560 [ 1128.324982][T23632] should_failslab+0xa8/0x100 [ 1128.325006][T23632] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1128.325037][T23632] ? __alloc_skb+0x1d0/0x7d0 [ 1128.325060][T23632] ? __local_bh_enable_ip+0xd0/0x130 [ 1128.325095][T23632] __alloc_skb+0x1d0/0x7d0 [ 1128.325119][T23632] ? netlink_ack_tlv_len+0x6c/0x210 [ 1128.325143][T23632] netlink_ack+0x146/0xa50 [ 1128.325162][T23632] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1128.325187][T23632] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1128.325206][T23632] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1128.325225][T23632] ? __lock_acquire+0x6b5/0x2cf0 [ 1128.325259][T23632] netlink_rcv_skb+0x2b6/0x4b0 [ 1128.325282][T23632] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1128.325309][T23632] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1128.325344][T23632] ? down_read+0x272/0x2e0 [ 1128.325361][T23632] ? genl_rcv+0xd/0x40 [ 1128.325386][T23632] genl_rcv+0x28/0x40 [ 1128.325409][T23632] netlink_unicast+0x80f/0x9b0 [ 1128.325435][T23632] ? __pfx_netlink_unicast+0x10/0x10 [ 1128.325455][T23632] ? netlink_sendmsg+0x650/0xb40 [ 1128.325474][T23632] ? skb_put+0x11b/0x210 [ 1128.325499][T23632] netlink_sendmsg+0x813/0xb40 [ 1128.325527][T23632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1128.325551][T23632] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1128.325575][T23632] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1128.325596][T23632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1128.325618][T23632] ____sys_sendmsg+0xa68/0xad0 [ 1128.325652][T23632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1128.325682][T23632] ? kstrtoull+0x12f/0x1d0 [ 1128.325709][T23632] ___sys_sendmsg+0x2a5/0x360 [ 1128.325740][T23632] ? __pfx____sys_sendmsg+0x10/0x10 [ 1128.325768][T23632] ? get_pid_task+0x20/0x1f0 [ 1128.325786][T23632] ? get_pid_task+0x20/0x1f0 [ 1128.325802][T23632] ? get_pid_task+0x20/0x1f0 [ 1128.325862][T23632] ? __fget_files+0x2a/0x420 [ 1128.325888][T23632] ? __fget_files+0x3a0/0x420 [ 1128.325922][T23632] __sys_sendmsg+0x183/0x260 [ 1128.325951][T23632] ? __pfx___sys_sendmsg+0x10/0x10 [ 1128.325996][T23632] __do_fast_syscall_32+0x20d/0x640 [ 1128.326017][T23632] ? do_fast_syscall_32+0x33/0x70 [ 1128.326034][T23632] ? asm_int80_emulation+0x1a/0x20 [ 1128.326052][T23632] ? do_int80_emulation+0x274/0x4d0 [ 1128.326069][T23632] ? trace_irq_disable+0x3b/0x150 [ 1128.326103][T23632] do_fast_syscall_32+0x33/0x70 [ 1128.326122][T23632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1128.326144][T23632] RIP: 0023:0xf709ef6c [ 1128.326162][T23632] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1128.326179][T23632] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1128.326199][T23632] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 1128.326213][T23632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1128.326223][T23632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1128.326233][T23632] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1128.326245][T23632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1128.326272][T23632] [ 1129.074994][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1129.226949][ T10] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1129.236057][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.247975][ T10] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1129.257752][ T10] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1129.265960][ T10] usb 2-1: Manufacturer: syz [ 1129.273369][ T10] usb 2-1: config 0 descriptor?? [ 1129.372742][T19226] usb 1-1: USB disconnect, device number 20 [ 1129.504981][ T10] rc_core: IR keymap rc-hauppauge not found [ 1129.511072][ T10] Registered IR keymap rc-empty [ 1129.535229][ T10] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 1129.571173][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input316 [ 1130.099230][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1130.270339][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1130.284637][ T10] usb 1-1: config 1 has no interface number 1 [ 1130.291540][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1130.337326][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1130.347183][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.357531][ T10] usb 1-1: Product: syz [ 1130.361813][ T10] usb 1-1: Manufacturer: syz [ 1130.370993][ T10] usb 1-1: SerialNumber: syz [ 1131.184665][ T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1131.369224][ T10] usb 1-1: USB disconnect, device number 21 [ 1131.463793][T18288] udevd[18288]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1131.607617][T23672] __nla_validate_parse: 41 callbacks suppressed [ 1131.607638][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4944'. [ 1131.686700][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4944'. [ 1131.707674][T23671] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4942'. [ 1131.737727][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4944'. [ 1131.791404][ T10] usb 2-1: USB disconnect, device number 56 [ 1131.798564][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4944'. [ 1131.852045][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4944'. [ 1131.924026][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4944'. [ 1131.982051][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4944'. [ 1132.029863][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4944'. [ 1132.059593][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4944'. [ 1132.350460][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1132.586789][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.602135][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1132.656579][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1132.666688][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.685209][ T10] usb 2-1: Product: syz [ 1132.695255][ T10] usb 2-1: Manufacturer: syz [ 1132.700946][ T10] usb 2-1: SerialNumber: syz [ 1132.710106][ T10] usb 2-1: config 0 descriptor?? [ 1133.038041][T23686] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1133.045752][T23686] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1133.077520][T23686] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1133.085398][T23686] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1133.164082][T23686] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1133.722615][T23706] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1133.734449][T23706] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 1133.805081][ T5929] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1133.965144][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 1133.985580][ T5929] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1133.986474][ T10] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1134.034464][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.058968][ T5929] usb 4-1: config 0 descriptor?? [ 1134.168350][ T10] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1134.193962][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.231026][ T10] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1134.249223][ T10] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1134.273030][ T10] usb 10-1: Manufacturer: syz [ 1134.285567][ T5929] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1134.297030][ T10] usb 10-1: config 0 descriptor?? [ 1134.343320][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1134.382262][ T5929] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1134.399101][ T5929] usb 4-1: media controller created [ 1134.443263][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1134.515752][ T10] rc_core: IR keymap rc-hauppauge not found [ 1134.532574][ T10] Registered IR keymap rc-empty [ 1134.556658][ T10] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc1 [ 1134.590290][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc1/input317 [ 1134.611063][ T5929] DVB: Unable to find symbol dib7000p_attach() [ 1134.637023][ T5929] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1134.815041][ T5929] rc_core: IR keymap rc-dib0700-rc5 not found [ 1134.831772][ T5929] Registered IR keymap rc-empty [ 1134.849736][ T5929] dvb-usb: could not initialize remote control. [ 1134.864766][ T5929] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1134.901677][ T5929] usb 4-1: USB disconnect, device number 87 [ 1134.935292][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 1135.026842][ T10] usb 2-1: USB disconnect, device number 57 [ 1135.051427][ T5929] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1135.085684][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 1135.165160][ T5143] Bluetooth: hci5: command 0x0419 tx timeout [ 1135.171255][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 1135.245853][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 1136.710943][T17916] usb 10-1: USB disconnect, device number 48 [ 1136.880264][T23757] __nla_validate_parse: 96 callbacks suppressed [ 1136.880279][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4968'. [ 1136.928966][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4968'. [ 1136.985294][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4968'. [ 1137.013099][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4968'. [ 1137.040661][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4968'. [ 1137.052598][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4968'. [ 1137.062264][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4968'. [ 1137.077662][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4968'. [ 1137.087561][ T5827] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1137.090741][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4968'. [ 1137.104444][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4968'. [ 1137.216372][T23766] binder: 23765:23766 ioctl c0306201 80000440 returned -14 [ 1137.255227][ T5827] usb 4-1: Using ep0 maxpacket: 8 [ 1137.296676][ T5827] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1137.340157][ T5827] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1137.368387][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.377891][ T5827] usb 4-1: Product: syz [ 1137.389998][ T5827] usb 4-1: Manufacturer: syz [ 1137.395854][ T5827] usb 4-1: SerialNumber: syz [ 1137.421489][ T5827] usb 4-1: config 0 descriptor?? [ 1137.442309][ T5827] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1137.476995][ T5827] usb 4-1: setting power ON [ 1137.481590][ T5827] dvb-usb: bulk message failed: -22 (2/0) [ 1137.513296][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1137.545568][ T5827] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1137.565072][ T5827] usb 4-1: media controller created [ 1137.593627][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1137.639721][T23754] dvb-usb: bulk message failed: -22 (3/0) [ 1137.657475][T23754] dvb-usb: bulk message failed: -22 (3/0) [ 1137.663249][ T5827] usb 4-1: selecting invalid altsetting 6 [ 1137.681355][ T5827] usb 4-1: digital interface selection failed (-22) [ 1137.694988][ T5827] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1137.719138][ T5827] usb 4-1: setting power OFF [ 1137.723779][ T5827] dvb-usb: bulk message failed: -22 (2/0) [ 1137.733051][ T5827] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1137.748230][ T5827] (NULL device *): no alternate interface [ 1137.787534][ T5827] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1137.851944][ T5827] usb 4-1: USB disconnect, device number 88 [ 1138.438750][T23792] FAULT_INJECTION: forcing a failure. [ 1138.438750][T23792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.495877][T23792] CPU: 1 UID: 0 PID: 23792 Comm: syz.1.4979 Tainted: G L syzkaller #0 PREEMPT(full) [ 1138.495909][T23792] Tainted: [L]=SOFTLOCKUP [ 1138.495917][T23792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1138.495929][T23792] Call Trace: [ 1138.495937][T23792] [ 1138.495945][T23792] dump_stack_lvl+0xe8/0x150 [ 1138.495978][T23792] should_fail_ex+0x412/0x560 [ 1138.496005][T23792] _copy_to_user+0x31/0xb0 [ 1138.496032][T23792] __copy_siginfo_to_user32+0xd3/0x150 [ 1138.496062][T23792] ? __pfx___copy_siginfo_to_user32+0x10/0x10 [ 1138.496119][T23792] ia32_setup_rt_frame+0x6ba/0xae0 [ 1138.496160][T23792] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 1138.496192][T23792] arch_do_signal_or_restart+0x460/0x830 [ 1138.496216][T23792] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1138.496245][T23792] ? fput+0xa0/0xd0 [ 1138.496273][T23792] exit_to_user_mode_loop+0x86/0x480 [ 1138.496295][T23792] ? rcu_is_watching+0x15/0xb0 [ 1138.496322][T23792] __do_fast_syscall_32+0x415/0x640 [ 1138.496341][T23792] ? do_fast_syscall_32+0x33/0x70 [ 1138.496358][T23792] ? asm_int80_emulation+0x1a/0x20 [ 1138.496376][T23792] ? do_int80_emulation+0x274/0x4d0 [ 1138.496397][T23792] do_fast_syscall_32+0x33/0x70 [ 1138.496416][T23792] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1138.496438][T23792] RIP: 0023:0xf6feef6a [ 1138.496454][T23792] Code: 03 c9 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 [ 1138.496463][T23792] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1138.496475][T23792] RAX: 0000000000000036 RBX: 0000000000000003 RCX: 0000000000005404 [ 1138.496482][T23792] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1138.496488][T23792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1138.496494][T23792] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1138.496500][T23792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1138.496514][T23792] [ 1139.135065][T17916] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1139.288787][T17916] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1139.302624][T17916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.313850][T17916] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1139.323130][T17916] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1139.338330][ T5929] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1139.355110][T17916] usb 4-1: Manufacturer: syz [ 1139.362251][T23807] binder: 23806:23807 ioctl c0306201 80000440 returned -14 [ 1139.375871][T17916] usb 4-1: config 0 descriptor?? [ 1139.485301][ T10] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1139.495778][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 1139.521051][ T5929] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1139.535067][T17916] rc_core: IR keymap rc-hauppauge not found [ 1139.546697][T17916] Registered IR keymap rc-empty [ 1139.553900][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1139.564532][T17916] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 1139.575266][ T5929] usb 2-1: Product: syz [ 1139.579465][ T5929] usb 2-1: Manufacturer: syz [ 1139.584132][ T5929] usb 2-1: SerialNumber: syz [ 1139.592741][T17916] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input319 [ 1139.606982][ T5929] usb 2-1: config 0 descriptor?? [ 1139.636810][ T5929] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1139.655836][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1139.786585][ T10] usb 10-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1139.799139][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.813143][ T10] usb 10-1: config 0 descriptor?? [ 1139.971613][T23804] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1139.978343][T23804] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1139.984618][T23804] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1139.991475][T23804] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1140.003398][T23804] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1140.089203][T23824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.098384][T23824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.245033][T17916] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1140.397179][T17916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.407521][T17916] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1140.416555][T17916] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1140.425714][T17916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.438463][T17916] usb 1-1: config 0 descriptor?? [ 1140.452876][T17916] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1140.459702][T17916] dvb-usb: bulk message failed: -22 (3/0) [ 1140.468730][T17916] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1140.478224][T17916] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1140.485417][T17916] usb 1-1: media controller created [ 1140.490711][T23823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.492952][T17916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1140.503621][T23823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.530381][T17916] dvb-usb: bulk message failed: -22 (6/0) [ 1140.536555][T17916] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1140.548245][T17916] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input320 [ 1140.564421][T17916] dvb-usb: schedule remote query interval to 150 msecs. [ 1140.571973][T17916] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1140.668874][T23820] dvb-usb: bulk message failed: -22 (2/0) [ 1140.693950][T23828] FAULT_INJECTION: forcing a failure. [ 1140.693950][T23828] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.709284][T23828] CPU: 0 UID: 0 PID: 23828 Comm: syz.2.4991 Tainted: G L syzkaller #0 PREEMPT(full) [ 1140.709316][T23828] Tainted: [L]=SOFTLOCKUP [ 1140.709324][T23828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1140.709336][T23828] Call Trace: [ 1140.709345][T23828] [ 1140.709353][T23828] dump_stack_lvl+0xe8/0x150 [ 1140.709384][T23828] should_fail_ex+0x412/0x560 [ 1140.709415][T23828] should_failslab+0xa8/0x100 [ 1140.709440][T23828] __kmalloc_noprof+0xe8/0x760 [ 1140.709458][T23828] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1140.709493][T23828] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1140.709525][T23828] genl_family_rcv_msg_doit+0xd9/0x330 [ 1140.709558][T23828] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1140.709591][T23828] ? apparmor_capable+0x126/0x170 [ 1140.709619][T23828] ? bpf_lsm_capable+0x9/0x20 [ 1140.709643][T23828] ? security_capable+0x7e/0x2c0 [ 1140.709679][T23828] genl_rcv_msg+0x61c/0x7a0 [ 1140.709712][T23828] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1140.709737][T23828] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1140.709755][T23828] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 1140.709777][T23828] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1140.709796][T23828] ? __lock_acquire+0x6b5/0x2cf0 [ 1140.709830][T23828] netlink_rcv_skb+0x232/0x4b0 [ 1140.709853][T23828] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1140.709881][T23828] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1140.709919][T23828] ? down_read+0x272/0x2e0 [ 1140.709936][T23828] ? genl_rcv+0xd/0x40 [ 1140.709962][T23828] genl_rcv+0x28/0x40 [ 1140.709984][T23828] netlink_unicast+0x80f/0x9b0 [ 1140.710011][T23828] ? __pfx_netlink_unicast+0x10/0x10 [ 1140.710032][T23828] ? netlink_sendmsg+0x650/0xb40 [ 1140.710053][T23828] ? skb_put+0x11b/0x210 [ 1140.710080][T23828] netlink_sendmsg+0x813/0xb40 [ 1140.710112][T23828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1140.710137][T23828] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1140.710162][T23828] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1140.710183][T23828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1140.710205][T23828] ____sys_sendmsg+0xa68/0xad0 [ 1140.710240][T23828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1140.710271][T23828] ? kstrtoull+0x12f/0x1d0 [ 1140.710299][T23828] ___sys_sendmsg+0x2a5/0x360 [ 1140.710330][T23828] ? __pfx____sys_sendmsg+0x10/0x10 [ 1140.710358][T23828] ? get_pid_task+0x20/0x1f0 [ 1140.710376][T23828] ? get_pid_task+0x20/0x1f0 [ 1140.710392][T23828] ? get_pid_task+0x20/0x1f0 [ 1140.710434][T23828] ? __fget_files+0x2a/0x420 [ 1140.710458][T23828] ? __fget_files+0x3a0/0x420 [ 1140.710493][T23828] __sys_sendmsg+0x183/0x260 [ 1140.710522][T23828] ? __pfx___sys_sendmsg+0x10/0x10 [ 1140.710569][T23828] __do_fast_syscall_32+0x20d/0x640 [ 1140.710589][T23828] ? do_fast_syscall_32+0x33/0x70 [ 1140.710606][T23828] ? asm_int80_emulation+0x1a/0x20 [ 1140.710623][T23828] ? do_int80_emulation+0x274/0x4d0 [ 1140.710641][T23828] ? trace_irq_disable+0x3b/0x150 [ 1140.710677][T23828] do_fast_syscall_32+0x33/0x70 [ 1140.710696][T23828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1140.710719][T23828] RIP: 0023:0xf7fc3f6c [ 1140.710737][T23828] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1140.710753][T23828] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1140.710774][T23828] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1140.710788][T23828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1140.710799][T23828] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1140.710810][T23828] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1140.710822][T23828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1140.710850][T23828] [ 1141.073917][T17916] dvb-usb: bulk message failed: -22 (1/0) [ 1141.079744][T17916] dvb-usb: error while querying for an remote control event. [ 1141.087855][ T5929] gspca_sq905: sq905_read_data: usb_control_msg failed (-110) [ 1141.095684][ T5929] sq905 2-1:0.0: probe with driver sq905 failed with error -110 [ 1141.177728][ T5929] usb 2-1: USB disconnect, device number 58 [ 1141.246165][ T797] dvb-usb: bulk message failed: -22 (1/0) [ 1141.253491][ T797] dvb-usb: error while querying for an remote control event. [ 1141.353475][T19226] usb 4-1: USB disconnect, device number 89 [ 1141.406539][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 1141.434921][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 1141.475058][ T5929] dvb-usb: error while querying for an remote control event. [ 1141.609590][T19226] usb 1-1: USB disconnect, device number 22 [ 1141.707262][T19226] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1141.860678][T23843] binder: 23842:23843 ioctl c0306201 80000440 returned -14 [ 1142.045164][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 1142.045181][T23731] Bluetooth: hci5: command 0x0419 tx timeout [ 1142.051375][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 1142.057359][T23731] Bluetooth: hci1: command 0x0c1a tx timeout [ 1142.368776][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 1142.415097][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1142.484992][ T10] usb 10-1: USB disconnect, device number 49 [ 1142.694251][T23861] ptrace attach of "./syz-executor exec"[15383] was attempted by "./syz-executor exec"[23861] [ 1143.017940][T23872] __nla_validate_parse: 96 callbacks suppressed [ 1143.017962][T23872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5005'. [ 1143.050306][T23872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5005'. [ 1143.067449][T23872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5005'. [ 1143.082652][T23872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5005'. [ 1143.100838][T23872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5005'. [ 1143.116293][ T5929] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1143.131758][T23872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5005'. [ 1143.160537][T23872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5005'. [ 1143.171624][T23872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5005'. [ 1143.181883][T23872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5005'. [ 1143.193209][T23872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5005'. [ 1143.295118][T17916] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1143.307661][ T5929] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1143.326100][ T5929] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.338540][ T5929] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1143.348013][ T5929] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1143.356367][ T5929] usb 10-1: Manufacturer: syz [ 1143.368247][ T5929] usb 10-1: config 0 descriptor?? [ 1143.385994][T23878] binder: 23877:23878 ioctl c0306201 80000440 returned -14 [ 1143.464967][T17916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.497786][T17916] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1143.518628][T17916] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1143.529179][T17916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.545061][ T5929] rc_core: IR keymap rc-hauppauge not found [ 1143.558498][T17916] usb 1-1: config 0 descriptor?? [ 1143.582801][ T5929] Registered IR keymap rc-empty [ 1143.591713][T17916] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1143.601300][ T5929] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc1 [ 1143.612342][T17916] dvb-usb: bulk message failed: -22 (3/0) [ 1143.642877][ T5929] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc1/input321 [ 1143.655798][T17916] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1143.675534][T17916] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1143.694453][T17916] usb 1-1: media controller created [ 1143.746716][T17916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1143.793225][T17916] dvb-usb: bulk message failed: -22 (6/0) [ 1143.821027][T17916] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1143.828777][T23874] dvb-usb: bulk message failed: -22 (2/0) [ 1143.854569][T17916] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input322 [ 1143.900643][T17916] dvb-usb: schedule remote query interval to 150 msecs. [ 1143.925348][T17916] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1144.025369][ T5929] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1144.085004][T17916] dvb-usb: bulk message failed: -22 (1/0) [ 1144.091975][T17916] dvb-usb: error while querying for an remote control event. [ 1144.195053][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 1144.209345][ T5929] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1144.219324][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.234616][ T5929] usb 2-1: config 0 descriptor?? [ 1144.257580][T17916] dvb-usb: bulk message failed: -22 (1/0) [ 1144.263856][T17916] dvb-usb: error while querying for an remote control event. [ 1144.408768][T17916] usb 1-1: USB disconnect, device number 23 [ 1144.476407][T17916] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1144.943696][T23898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.009450][T23898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.381863][T23917] binder: 23916:23917 ioctl c0306201 80000440 returned -14 [ 1145.746693][T17916] usb 10-1: USB disconnect, device number 50 [ 1146.720763][ T5929] usbhid 2-1:0.0: can't add hid device: -71 [ 1146.743806][ T5929] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1146.773537][ T5929] usb 2-1: USB disconnect, device number 59 [ 1147.035002][T17916] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1147.215987][T17916] usb 1-1: Using ep0 maxpacket: 16 [ 1147.242383][T17916] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1147.265707][T23949] binder: 23948:23949 ioctl c0306201 80000440 returned -14 [ 1147.274994][T17916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.308247][T17916] usb 1-1: config 0 descriptor?? [ 1147.512519][T23946] program syz.9.5030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1147.685206][ T10] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1147.732107][T23969] syzkaller0: entered promiscuous mode [ 1147.758057][T23969] syzkaller0: entered allmulticast mode [ 1147.861460][ T10] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1147.880468][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.925711][T23976] FAULT_INJECTION: forcing a failure. [ 1147.925711][T23976] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.939137][ T10] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1147.950062][T23976] CPU: 1 UID: 0 PID: 23976 Comm: syz.9.5040 Tainted: G L syzkaller #0 PREEMPT(full) [ 1147.950094][T23976] Tainted: [L]=SOFTLOCKUP [ 1147.950101][T23976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1147.950116][T23976] Call Trace: [ 1147.950125][T23976] [ 1147.950134][T23976] dump_stack_lvl+0xe8/0x150 [ 1147.950165][T23976] should_fail_ex+0x412/0x560 [ 1147.950189][T23976] ? __d_alloc+0x37/0x6f0 [ 1147.950218][T23976] should_failslab+0xa8/0x100 [ 1147.950243][T23976] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1147.950280][T23976] __d_alloc+0x37/0x6f0 [ 1147.950307][T23976] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1147.950331][T23976] d_alloc_pseudo+0x21/0xc0 [ 1147.950351][T23976] alloc_file_pseudo+0xdd/0x240 [ 1147.950379][T23976] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1147.950404][T23976] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 1147.950428][T23976] ? hugetlbfs_get_inode+0x448/0x690 [ 1147.950455][T23976] hugetlb_file_setup+0x3ee/0x630 [ 1147.950477][T23976] ksys_mmap_pgoff+0x22e/0x760 [ 1147.950509][T23976] __do_fast_syscall_32+0x20d/0x640 [ 1147.950530][T23976] ? do_fast_syscall_32+0x33/0x70 [ 1147.950547][T23976] ? asm_int80_emulation+0x1a/0x20 [ 1147.950565][T23976] ? do_int80_emulation+0x274/0x4d0 [ 1147.950582][T23976] ? trace_irq_disable+0x3b/0x150 [ 1147.950612][T23976] do_fast_syscall_32+0x33/0x70 [ 1147.950631][T23976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1147.950653][T23976] RIP: 0023:0xf7f83f6c [ 1147.950671][T23976] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1147.950688][T23976] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 1147.950708][T23976] RAX: ffffffffffffffda RBX: 0000000080200000 RCX: 0000000000004000 [ 1147.950722][T23976] RDX: 0000000000000004 RSI: 000000000006c832 RDI: 00000000ffffffff [ 1147.950734][T23976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1147.950746][T23976] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1147.950757][T23976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1147.950783][T23976] [ 1147.953671][ T10] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1148.088331][T23967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.277279][T23967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.285262][ T10] usb 4-1: Manufacturer: syz [ 1148.310779][ T10] usb 4-1: config 0 descriptor?? [ 1148.426916][ T10] rc_core: IR keymap rc-hauppauge not found [ 1148.434741][ T10] Registered IR keymap rc-empty [ 1148.451429][ T10] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 1148.494042][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input323 [ 1148.523018][ T5929] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1148.675477][ T5929] usb 10-1: Using ep0 maxpacket: 32 [ 1148.684283][ T5929] usb 10-1: config 251 has an invalid interface number: 19 but max is 1 [ 1148.703530][ T5929] usb 10-1: config 251 has an invalid interface number: 217 but max is 1 [ 1148.721178][ T5929] usb 10-1: config 251 has no interface number 0 [ 1148.727656][ T5929] usb 10-1: config 251 has no interface number 1 [ 1148.734126][ T5929] usb 10-1: config 251 interface 19 has no altsetting 0 [ 1148.741956][ T5929] usb 10-1: config 251 interface 217 has no altsetting 0 [ 1148.771786][ T5929] usb 10-1: New USB device found, idVendor=12d1, idProduct=c4a9, bcdDevice=bd.40 [ 1148.781891][ T5929] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.790360][ T5929] usb 10-1: Product: syz [ 1148.795264][ T5929] usb 10-1: Manufacturer: syz [ 1148.810787][ T5929] usb 10-1: SerialNumber: syz [ 1148.878806][T23987] program syz.1.5043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1149.043242][T23978] __nla_validate_parse: 94 callbacks suppressed [ 1149.043265][T23978] netlink: 100 bytes leftover after parsing attributes in process `syz.9.5041'. [ 1149.085377][ T5929] option 10-1:251.19: GSM modem (1-port) converter detected [ 1149.101620][ T5929] uvcvideo 10-1:251.217: Found Unit with invalid ID 0 [ 1149.118612][ T5929] uvcvideo 10-1:251.217: Found UVC 252.03 device syz (12d1:c4a9) [ 1149.127918][ T5929] uvcvideo 10-1:251.217: No valid video chain found. [ 1149.162277][ T5929] usb 10-1: USB disconnect, device number 51 [ 1149.188344][ T5929] option 10-1:251.19: device disconnected [ 1149.851056][T17916] usbhid 1-1:0.0: can't add hid device: -71 [ 1149.867696][T17916] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1149.903397][T23994] binder: 23993:23994 ioctl c0306201 80000440 returned -14 [ 1149.935093][T17916] usb 1-1: USB disconnect, device number 24 [ 1150.353281][T24006] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5048'. [ 1150.398231][ T10] usb 4-1: USB disconnect, device number 90 [ 1150.509814][T24008] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1152.739533][T24028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5055'. [ 1152.799474][T24028] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1152.922432][T24023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5052'. [ 1152.944361][T24041] binder: 24040:24041 ioctl c0306201 80000440 returned -14 [ 1153.064985][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1153.075136][ T5929] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1153.111211][T24045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.135330][T24045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.225251][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1153.235963][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 1153.246472][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1153.274967][ T10] usb 1-1: config 179 has no interface number 0 [ 1153.294977][ T10] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1153.325162][ T10] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1153.347277][ T10] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1153.347752][ T5929] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1153.372646][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.374833][ T10] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1153.417640][ T10] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1153.454822][ T10] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1153.462282][ T5929] usb 4-1: config 0 descriptor?? [ 1153.479328][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1153.515131][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.554753][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input324 [ 1153.606505][ T5178] input input324: unable to receive magic message: -110 [ 1153.617657][ T5178] input input324: unable to receive magic message: -32 [ 1153.634493][ T5178] input input324: unable to receive magic message: -32 [ 1153.657711][ T5178] input input324: unable to receive magic message: -32 [ 1153.674305][ T5178] input input324: unable to receive magic message: -32 [ 1153.704150][ T5178] input input324: unable to receive magic message: -32 [ 1153.794010][ T10] usb 1-1: USB disconnect, device number 25 [ 1153.800089][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1154.228351][T24052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.252725][T24052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.336674][T24061] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1154.370955][T24061] kvm: pic: non byte read [ 1154.387957][T24061] kvm: pic: level sensitive irq not supported [ 1154.388087][T24061] kvm: pic: non byte read [ 1154.407902][T24061] kvm: pic: level sensitive irq not supported [ 1154.407970][T24061] kvm: pic: non byte read [ 1154.634645][T24070] syzkaller0: entered promiscuous mode [ 1154.647942][T24070] syzkaller0: entered allmulticast mode [ 1154.705463][T19226] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1154.889911][T19226] usb 1-1: Using ep0 maxpacket: 32 [ 1154.916386][T19226] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1154.932682][T19226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.967901][T19226] usb 1-1: config 0 descriptor?? [ 1155.192278][T19226] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1155.223910][T19226] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1155.254326][T19226] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1155.277403][T19226] usb 1-1: media controller created [ 1155.306705][T19226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1155.451652][T19226] DVB: Unable to find symbol dib7000p_attach() [ 1155.458508][T19226] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1155.585552][T19226] rc_core: IR keymap rc-dib0700-rc5 not found [ 1155.591698][T19226] Registered IR keymap rc-empty [ 1155.605198][T19226] dvb-usb: could not initialize remote control. [ 1155.613747][T19226] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1155.706011][T19226] usb 1-1: USB disconnect, device number 26 [ 1155.785804][T19226] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1155.867049][ T5929] usbhid 4-1:0.0: can't add hid device: -71 [ 1155.876994][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1155.900209][ T5929] usb 4-1: USB disconnect, device number 91 [ 1156.216597][T24088] binder: 24087:24088 ioctl c0306201 80000440 returned -14 [ 1156.435039][ T5929] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1156.633503][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 1156.747044][ T5929] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1156.877176][ T5929] usb 4-1: config 0 has no interface number 0 [ 1156.917197][ T5929] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1157.039142][ T5929] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1157.172025][ T5929] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1157.183257][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.193403][ T5929] usb 4-1: Product: syz [ 1157.205151][ T5929] usb 4-1: Manufacturer: syz [ 1157.289765][ T5929] usb 4-1: SerialNumber: syz [ 1157.370601][ T5929] usb 4-1: config 0 descriptor?? [ 1159.791000][ T5929] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1159.803895][ T5929] cx231xx 4-1:0.1: Not found matching IAD interface [ 1159.847214][ T5929] usb 4-1: USB disconnect, device number 92 [ 1159.861549][T24109] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5075'. [ 1159.924025][T24109] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1160.035007][ T5928] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1160.059313][T24119] sctp: [Deprecated]: syz.1.5076 (pid 24119) Use of int in maxseg socket option. [ 1160.059313][T24119] Use struct sctp_assoc_value instead [ 1160.211609][ T10] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1160.234988][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 1160.245199][ T5928] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1160.279076][T24122] sctp: [Deprecated]: syz.3.5077 (pid 24122) Use of int in maxseg socket option. [ 1160.279076][T24122] Use struct sctp_assoc_value instead [ 1160.296215][ T5928] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 1160.362517][ T5928] usb 1-1: config 13 has no interface number 0 [ 1160.385634][ T5928] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1160.411139][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 1160.439340][ T10] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1160.457865][ T5928] usb 1-1: config 13 interface 50 has no altsetting 0 [ 1160.469031][ T10] usb 10-1: config 179 has no interface number 0 [ 1160.489918][ T10] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1160.493085][ T5928] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1160.522243][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.535405][ T5928] usb 1-1: Product: syz [ 1160.539728][ T5928] usb 1-1: Manufacturer: syz [ 1160.544724][ T5928] usb 1-1: SerialNumber: syz [ 1160.583754][ T10] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1160.609498][T24112] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1160.622019][ T10] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1160.668584][ T10] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1160.730332][ T10] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1160.746280][T24124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.786301][T24124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.797284][ T10] usb 10-1: config 179 interface 65 has no altsetting 0 [ 1160.825029][ T10] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1160.834188][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.902924][ T5928] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1160.925678][T24125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.949511][ T5928] usb 1-1: MIDIStreaming interface descriptor not found [ 1160.976530][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input326 [ 1161.039763][T24125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.099310][ T5178] input input326: unable to receive magic message: -110 [ 1161.130532][ T5178] input input326: unable to receive magic message: -32 [ 1161.150824][ T5178] input input326: unable to receive magic message: -32 [ 1161.198770][ T5178] input input326: unable to receive magic message: -32 [ 1161.230498][ T5178] input input326: unable to receive magic message: -32 [ 1161.307816][T18259] input input326: unable to receive magic message: -32 [ 1161.373497][ T5929] usb 10-1: USB disconnect, device number 52 [ 1161.373581][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1161.405190][ T5928] usb 1-1: USB disconnect, device number 27 [ 1161.848900][T24130] binder: 24129:24130 ioctl c0306201 80000440 returned -14 [ 1161.960411][ T30] audit: type=1326 audit(1772045726.292:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.3.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1162.000158][ T30] audit: type=1326 audit(1772045726.292:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.3.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1162.038363][ T30] audit: type=1326 audit(1772045726.322:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.3.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1162.062087][ T30] audit: type=1326 audit(1772045726.322:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.3.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1162.085274][ T30] audit: type=1326 audit(1772045726.322:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.3.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1162.108909][ T30] audit: type=1326 audit(1772045726.342:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.3.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1162.142981][ T30] audit: type=1326 audit(1772045726.342:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.3.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1162.155010][ T5929] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1162.174134][ T30] audit: type=1326 audit(1772045726.342:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.3.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1162.196739][ T30] audit: type=1326 audit(1772045726.362:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.3.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1162.224249][ T30] audit: type=1326 audit(1772045726.362:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.3.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1162.376977][T24139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5083'. [ 1162.386126][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 1162.395028][ T5929] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1162.405009][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.416456][ T5929] usb 2-1: config 0 descriptor?? [ 1162.425123][T17916] usb 10-1: new full-speed USB device number 53 using dummy_hcd [ 1162.597287][T17916] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.607767][T17916] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1162.617709][T17916] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1162.635296][ T5929] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1162.643119][T17916] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.654649][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1162.669684][T17916] usb 10-1: config 0 descriptor?? [ 1162.675218][ T5929] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1162.688693][ T5929] usb 2-1: media controller created [ 1162.696345][T17916] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1162.706271][T17916] dvb-usb: bulk message failed: -22 (3/0) [ 1162.732852][T17916] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1162.745955][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1162.791497][T17916] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1162.807934][T17916] usb 10-1: media controller created [ 1162.820128][T17916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1162.842239][T17916] dvb-usb: bulk message failed: -22 (6/0) [ 1162.859012][T17916] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1162.888573][T17916] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input327 [ 1162.927704][T17916] dvb-usb: schedule remote query interval to 150 msecs. [ 1162.939858][T17916] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1162.949351][T24141] ------------[ cut here ]------------ [ 1162.949650][ T5929] DVB: Unable to find symbol dib7000p_attach() [ 1162.954965][T24141] usb 2-1: BOGUS control dir, pipe 80003c80 doesn't match bRequestType c0 [ 1162.955022][T24141] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.9.5084/24141 [ 1162.955093][T24141] Modules linked in: [ 1162.955136][T24141] CPU: 0 UID: 0 PID: 24141 Comm: syz.9.5084 Tainted: G L syzkaller #0 PREEMPT(full) [ 1162.955163][T24141] Tainted: [L]=SOFTLOCKUP [ 1162.955173][T24141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1162.955188][T24141] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 1162.955217][T24141] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 1162.955235][T24141] RSP: 0000:ffffc90003bff768 EFLAGS: 00010246 [ 1162.955255][T24141] RAX: 0000000000000000 RBX: ffff88802a660e00 RCX: 0000000080003c80 [ 1162.955271][T24141] RDX: ffff88807f4bac00 RSI: ffffffff8c7eeb40 RDI: ffffffff901eb390 [ 1162.955288][T24141] RBP: 1ffff1100415edf0 R08: 00000000000000c0 R09: 0000000000000000 [ 1162.955303][T24141] R10: ffffc90003bff860 R11: fffff5200077ff18 R12: ffff888076799100 [ 1162.955319][T24141] R13: ffff888020af6f80 R14: 0000000080003c80 R15: ffff88807f4bac00 [ 1162.955336][T24141] FS: 0000000000000000(0000) GS:ffff888125467000(0063) knlGS:00000000f5446b40 [ 1162.955355][T24141] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1162.955371][T24141] CR2: 0000000080002580 CR3: 00000000648a6000 CR4: 00000000003526f0 [ 1162.955390][T24141] DR0: 0000000040000005 DR1: 0000000100000000 DR2: 0000000000000005 [ 1162.955404][T24141] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1162.955419][T24141] Call Trace: [ 1162.955429][T24141] [ 1162.955446][T24141] ? __init_swait_queue_head+0xa9/0x150 [ 1162.955484][T24141] usb_start_wait_urb+0x12b/0x510 [ 1162.955516][T24141] ? rcu_is_watching+0x15/0xb0 [ 1162.955544][T24141] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1162.955572][T24141] ? trace_kmalloc+0x2a/0x110 [ 1162.955611][T24141] usb_control_msg+0x232/0x3e0 [ 1162.955645][T24141] dib0700_i2c_xfer+0xbb2/0xf80 [ 1162.955702][T24141] __i2c_transfer+0x79a/0x2020 [ 1162.955740][T24141] ? i2c_transfer+0xc8/0x2d0 [ 1162.955768][T24141] i2c_transfer+0x1cc/0x2d0 [ 1162.955797][T24141] i2cdev_ioctl_rdwr+0x460/0x740 [ 1162.955834][T24141] compat_i2cdev_ioctl+0x59f/0x5c0 [ 1162.955866][T24141] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1162.955904][T24141] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1162.955933][T24141] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1162.955960][T24141] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1162.955982][T24141] ? kmem_cache_free+0x187/0x630 [ 1162.956011][T24141] ? __se_sys_futex_time32+0x3ab/0x440 [ 1162.956046][T24141] ? rcu_is_watching+0x15/0xb0 [ 1162.956085][T24141] __do_fast_syscall_32+0x20d/0x640 [ 1162.956109][T24141] ? do_fast_syscall_32+0x33/0x70 [ 1162.956128][T24141] ? asm_int80_emulation+0x1a/0x20 [ 1162.956149][T24141] ? do_int80_emulation+0x274/0x4d0 [ 1162.956168][T24141] ? trace_irq_disable+0x3b/0x150 [ 1162.956203][T24141] do_fast_syscall_32+0x33/0x70 [ 1162.956223][T24141] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1162.956248][T24141] RIP: 0023:0xf7f83f6c [ 1162.956267][T24141] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1162.956285][T24141] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1162.956308][T24141] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000707 [ 1162.956323][T24141] RDX: 0000000080002580 RSI: 0000000000000000 RDI: 0000000000000000 [ 1162.956337][T24141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1162.956350][T24141] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1162.956364][T24141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1162.956395][T24141] [ 1162.956412][T24141] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1162.956427][T24141] CPU: 0 UID: 0 PID: 24141 Comm: syz.9.5084 Tainted: G L syzkaller #0 PREEMPT(full) [ 1162.956452][T24141] Tainted: [L]=SOFTLOCKUP [ 1162.956460][T24141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1162.956472][T24141] Call Trace: [ 1162.956482][T24141] [ 1162.956491][T24141] vpanic+0x56c/0xa60 [ 1162.956519][T24141] ? __pfx__printk+0x10/0x10 [ 1162.956538][T24141] ? __pfx_vpanic+0x10/0x10 [ 1162.956561][T24141] ? is_bpf_text_address+0x292/0x2b0 [ 1162.956581][T24141] ? is_bpf_text_address+0x26/0x2b0 [ 1162.956609][T24141] panic+0xc5/0xd0 [ 1162.956633][T24141] ? __pfx_panic+0x10/0x10 [ 1162.956674][T24141] __warn+0x315/0x4f0 [ 1162.956705][T24141] ? usb_submit_urb+0x1052/0x18b0 [ 1162.956732][T24141] ? usb_submit_urb+0x1052/0x18b0 [ 1162.956757][T24141] __report_bug+0x29a/0x540 [ 1162.956791][T24141] ? usb_submit_urb+0x1052/0x18b0 [ 1162.956817][T24141] ? __pfx___report_bug+0x10/0x10 [ 1162.956850][T24141] ? lockdep_hardirqs_on+0x7a/0x110 [ 1162.956882][T24141] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1162.956917][T24141] report_bug_entry+0x19a/0x290 [ 1162.956946][T24141] ? usb_submit_urb+0x1114/0x18b0 [ 1162.956972][T24141] ? usb_submit_urb+0x1119/0x18b0 [ 1162.956995][T24141] handle_bug+0xca/0x200 [ 1162.957017][T24141] exc_invalid_op+0x1a/0x50 [ 1162.957037][T24141] asm_exc_invalid_op+0x1a/0x20 [ 1162.957056][T24141] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 1162.957082][T24141] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 1162.957098][T24141] RSP: 0000:ffffc90003bff768 EFLAGS: 00010246 [ 1162.957115][T24141] RAX: 0000000000000000 RBX: ffff88802a660e00 RCX: 0000000080003c80 [ 1162.957130][T24141] RDX: ffff88807f4bac00 RSI: ffffffff8c7eeb40 RDI: ffffffff901eb390 [ 1162.957145][T24141] RBP: 1ffff1100415edf0 R08: 00000000000000c0 R09: 0000000000000000 [ 1162.957159][T24141] R10: ffffc90003bff860 R11: fffff5200077ff18 R12: ffff888076799100 [ 1162.957174][T24141] R13: ffff888020af6f80 R14: 0000000080003c80 R15: ffff88807f4bac00 [ 1162.957203][T24141] ? usb_submit_urb+0x10a3/0x18b0 [ 1162.957233][T24141] ? __init_swait_queue_head+0xa9/0x150 [ 1162.957266][T24141] usb_start_wait_urb+0x12b/0x510 [ 1162.957296][T24141] ? rcu_is_watching+0x15/0xb0 [ 1162.957322][T24141] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1162.957347][T24141] ? trace_kmalloc+0x2a/0x110 [ 1162.957382][T24141] usb_control_msg+0x232/0x3e0 [ 1162.957414][T24141] dib0700_i2c_xfer+0xbb2/0xf80 [ 1162.957459][T24141] __i2c_transfer+0x79a/0x2020 [ 1162.957493][T24141] ? i2c_transfer+0xc8/0x2d0 [ 1162.957520][T24141] i2c_transfer+0x1cc/0x2d0 [ 1162.957546][T24141] i2cdev_ioctl_rdwr+0x460/0x740 [ 1162.957580][T24141] compat_i2cdev_ioctl+0x59f/0x5c0 [ 1162.957610][T24141] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1162.957645][T24141] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1162.957672][T24141] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1162.957703][T24141] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1162.957724][T24141] ? kmem_cache_free+0x187/0x630 [ 1162.957750][T24141] ? __se_sys_futex_time32+0x3ab/0x440 [ 1162.957783][T24141] ? rcu_is_watching+0x15/0xb0 [ 1162.957821][T24141] __do_fast_syscall_32+0x20d/0x640 [ 1162.957843][T24141] ? do_fast_syscall_32+0x33/0x70 [ 1162.957862][T24141] ? asm_int80_emulation+0x1a/0x20 [ 1162.957881][T24141] ? do_int80_emulation+0x274/0x4d0 [ 1162.957899][T24141] ? trace_irq_disable+0x3b/0x150 [ 1162.957931][T24141] do_fast_syscall_32+0x33/0x70 [ 1162.957951][T24141] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1162.957974][T24141] RIP: 0023:0xf7f83f6c [ 1162.957991][T24141] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1162.958007][T24141] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1162.958026][T24141] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000707 [ 1162.958041][T24141] RDX: 0000000080002580 RSI: 0000000000000000 RDI: 0000000000000000 [ 1162.958054][T24141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1162.958066][T24141] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1162.958078][T24141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1162.958107][T24141] [ 1162.963045][T24141] Kernel Offset: disabled