last executing test programs: 22m58.793637925s ago: executing program 1 (id=66): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6b) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0xc8282, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0xb, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syslog(0x3, &(0x7f0000000100), 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r7, @ANYBLOB="080004007f00"], 0x50}}, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 22m57.662042434s ago: executing program 1 (id=69): r0 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) r3 = open_tree(0xffffffffffffffff, 0x0, 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mincore(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f000034d000/0x3000)=nil, 0x3000, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f00000001c0)) bind$can_raw(r0, &(0x7f0000000200), 0x10) 22m55.275867305s ago: executing program 1 (id=74): bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r2, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0), 0x0, 0x0, 0x0) 22m49.949337439s ago: executing program 1 (id=85): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0xfffffffd) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x202, 0x19, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "4c86b8b1f25c1517"}}, 0x48}}, 0x40000) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a000, 0x0) syz_io_uring_setup(0xb, 0x0, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000400)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x16, 0x15, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000002900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x8, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r7) 22m47.684946138s ago: executing program 1 (id=91): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280", @ANYRES32=r4], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 22m45.230235468s ago: executing program 1 (id=94): socket$inet(0x2, 0x803, 0x53792800) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000ed0000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0x5c5a0000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES64=0x0], 0x80}}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x2000}) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90b5f89ca0d76bc42c1573962787c5cbf3ee2ce8d48a9fe9ae8e4b7dfd7dfa696c320d85114cab1ad7689da12c9b73f28e218a7acb5d57b70af3d2b6b95f0633b269b0e6d64a4e16a6b295c96bdf493711c2d6eed50906f92504314b12b4719c24ff9c27e0a71232b51316ae4b9c97f78b0e244d6b63591fccb765a9"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000500)=""/38, &(0x7f0000000100)=0x9) 22m29.428780881s ago: executing program 32 (id=94): socket$inet(0x2, 0x803, 0x53792800) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000ed0000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0x5c5a0000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES64=0x0], 0x80}}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x2000}) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000500)=""/38, &(0x7f0000000100)=0x9) 18m33.982362315s ago: executing program 3 (id=821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 18m33.796569096s ago: executing program 3 (id=824): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0xb3d8aa3f318c3958) syz_open_dev$vim2m(0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 18m32.353826445s ago: executing program 3 (id=827): r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b"], 0x0) 18m31.892888397s ago: executing program 3 (id=828): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f00006e0000/0x4000)=nil], 0x0, &(0x7f0000000600), 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x121000, 0x40) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0xff, 0x34424752, 0x7, 0xa, [{0x419, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x4aa}, {0x1}, {0xfffffffb, 0x8e}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10102, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 18m31.459521796s ago: executing program 3 (id=829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYBLOB="1c005e80080005006d08fb"], 0x38}}, 0x0) 18m31.251003876s ago: executing program 3 (id=833): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb4100e10347dedcec01321400000014000000020000000000000001000013040000000500000000"], 0x0, 0x2e}, 0x28) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x4000401, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, 0x0, 0x9, 0xffff8800, 0x0, 0x9, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0xffffffff, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtaction={0x70, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0x8, 0xff}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 18m16.180148185s ago: executing program 33 (id=833): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb4100e10347dedcec01321400000014000000020000000000000001000013040000000500000000"], 0x0, 0x2e}, 0x28) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x4000401, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, 0x0, 0x9, 0xffff8800, 0x0, 0x9, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0xffffffff, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtaction={0x70, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0x8, 0xff}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10.584629856s ago: executing program 2 (id=4468): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10001, 0x0, 0x6, 0x20, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000340)="930029") r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x31c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r5, {0xf, 0x1e}, {0x0, 0xfff3}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x2f0, 0x2, [@TCA_U32_SEL={0x1d4, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x9, 0xffff, 0x3, 0x8, [{0x6, 0x400000, 0x0, 0x2}, {0x1a8f, 0x9, 0xfffff7ff, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x1}, {0x7, 0x1, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0xc0000000, 0x81, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x60, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0xa, 0xdefb, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x2, 0x8, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x104, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x7, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x4051}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x3ff, 0x80000001, 0x3, 0xa6d}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x2, 0x6, 0x7}, {0x7fff, 0x5, 0x401, 0xc42b}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x31c}}, 0x24040094) socket$inet_udplite(0x2, 0x2, 0x88) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0xa, 0x7) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42100, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000440)={r6, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x13, 0x0, 0xe, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "e7431ae0778a8e17e2000000000000ffff0000000000000000000000000500", [0x1f00000000000000, 0x2]}}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x7, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="aa8d8f624adb5a", 0x0, 0x3, 0x20, 0xc, 0x0}) 8.523497794s ago: executing program 2 (id=4473): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000d80)=[{{&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000680)="be6dddf030961022ef2228ada93bd07c81e3de239d52e0439b1935f9d8f900d383186783b1ca504f0ec1bf716274f9786e891765f281f0193b8f26b0ccda34f91950fd1cef71725086de614838ec4f0e89de20779150775186980a874d9a6eb95caab52a3eb98cc0ef28a307bf63d319a3055df1807e9e92174907ad73b0bb0e015f38c7f094a393ee9f6df9d8365e938c837ba56afa6c459c3cf1ffecc3798ff0a73c5b4419bc321c4579bbae3400b70ed54adbe3ddb47affd5a0e4feb6492136a27aeb1eaa14857931ac18fc09", 0xce}, {&(0x7f0000000540)="d8661850ffa401f0", 0x8}, {&(0x7f0000000780)="005d93384f886decff7f7ad5035a4ac82190c3651c906bf9fc86a5679f961bf78a94ffc76bd7a0d94ab099efc26dda698bf06e6419bc9383ceea23", 0x3b}], 0x3, &(0x7f0000000880)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r0, r0, r1]}}, @rights={{0x14, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff, r0]}}], 0x70, 0x8050}}, {{&(0x7f0000000940)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000009c0)="c39f7fabd964e328c84df302fabdc10610c513cc2e418af6662fc9f4beef8e1db0ea2cf803ad58a0433101db9880708b34b6cac4f5b437022d257671945eb1b6c65e54388c5a6613f0a8e99c2abc5a65b5a1a1a82d845e4f3820c1e1c969bea13152aa83413e103e41a89d5bf9ac061074e4f6f758b05bbc16856294aa38804c3218afaa1aecaccc8e56be8b5cdc", 0x8e}, {&(0x7f0000008200)="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", 0x1000}], 0x2, &(0x7f0000000b00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r0]}}], 0x24, 0x4}}, {{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="09c8105b5c9353a4dcb8a2256340926859149dadb5018a0abfd227a79b80af40d1e135fe6bdd6166513d09118d", 0x2d}, {&(0x7f0000000c00)="b3a2ceb6ae3de4b090c22b6ceff271d86583369063eaea7cfe67", 0x1a}, {&(0x7f0000000c40)="5081d9cadd89ad959098773cfd40d659fb9cdbf87c61d65d00a4fc1f2eae9dcfe2b52bc75135b2058aa6aa75a0219ef1adf81a13024464aa9d600d53bb572b77d6cbe79e78e1f3dff5dc55c91abb6b96edab4242c096368a79043396c1e5a9ce3a72e1ad1d820168d38e69b8043065a0f75f6b1d042cee87b4c2b0526377019bb13b2cb32f37bdc277757f775930fb76000f0a7b48cc2ba0fd94445baa627ce0c6ff05d20c3bbe54a2e9290460639fa36dfb2884d2342ba73f82ef8b395c7b5c7f95d8a89d0a", 0xc6}], 0x3, 0x0, 0x0, 0x40040}}], 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz1\x00', {0xf9e, 0x3, 0x4}, 0x4d, [0x8, 0x6, 0x9, 0xffffffff, 0x2, 0xfffffffc, 0x7fffffff, 0x80000001, 0x6, 0x1, 0xfd, 0x0, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x5, 0x8, 0xffff, 0x11, 0xe, 0x14, 0x20000000, 0x15098855, 0x6, 0x4, 0xfffffffb, 0x7fffffff, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x40000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x4, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x1, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0x7f, 0x36, 0x4, 0x81, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x6, 0xd, 0x2, 0xfffffffe, 0x6e38, 0x0, 0xa, 0x6, 0x3, 0x0, 0x5, 0x27, 0x4, 0xd, 0x80, 0xfff, 0x1000004, 0x0, 0x40000040, 0x1, 0x8, 0x1, 0x0, 0xb, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x17, 0x0, 0x1, 0x1, 0x20006, 0x6, 0xac, 0x2, 0x56, 0xcfb9], [0x3, 0xdb8, 0x9, 0xf, 0x2, 0x200006, 0x4000005, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x4, 0xee40000, 0x1, 0x1, 0x4, 0x950, 0x8, 0xffff, 0x0, 0x0, 0x40000007, 0x9, 0x4, 0x800, 0x7, 0x9, 0x10000, 0xfffffffd, 0x1, 0xfffffffe, 0x2, 0x0, 0x4, 0x8be, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x400, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x10002, 0xa, 0x6, 0x2, 0xfffffefe, 0xda15, 0xa, 0xffffffff, 0x10], [0x0, 0x5, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0x5, 0x6, 0x606, 0x1, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x6, 0x2, 0x0, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x10000006, 0x7, 0x101, 0x9, 0x3000000, 0x9, 0x4000006, 0x7, 0xfffffffd, 0x0, 0x1, 0x4, 0x10000b, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x1, 0x2015, 0x8000, 0x7, 0x7d, 0x8, 0x7, 0xfffdfffc, 0xb, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) r4 = dup(r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, 0xffffffffffffffff, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x7}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x541401, 0x0) r8 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 8.293121464s ago: executing program 6 (id=4474): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80000000000007c, 0x8000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = io_uring_setup(0x3457, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x38}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$tipc(0x1e, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8e, 0xfffa}, 0x1d, [0x5, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x4000021, 0x3, 0x7f, 0x6, 0x3, 0x39cc191a, 0x5f, 0x20, 0x5, 0x7, 0xffffff01, 0xa6, 0x3, 0x1, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe660, 0x4, 0x7, 0x104, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3c, 0x8f, 0x6, 0x10000008, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x4, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6, 0x9, 0x6, 0x3, 0x1, 0x4, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x1, 0x8000, 0x400c, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x7, 0xe24, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x0, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c9368e, 0x42, 0x2], [0x400, 0x5, 0x0, 0x5, 0xfffffffe, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x8005, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x4002, 0x800f38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x4, 0x7, 0x53cf697a, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x444, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x1, 0x10000b, 0x5, 0x938, 0x6, 0x6, 0x0, 0x7, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x80000002, 0x101, 0x10000, 0x3ff, 0x7ffe, 0x8, 0x200a620, 0x4, 0x5, 0x1, 0x2, 0x200, 0x60a7, 0xe, 0x6, 0x1, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x101, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x4, 0x10080, 0x5, 0x8, 0x30b1d693, 0x10001, 0x8, 0x7ff, 0x2, 0x3, 0x4, 0x4, 0x3, 0xdd81, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.095750351s ago: executing program 2 (id=4479): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) unshare(0x2040400) r9 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) unshare(0x3a020e80) fsmount(r9, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_udp(0xa, 0x2, 0x0) 6.912750766s ago: executing program 5 (id=4480): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3a) r1 = getegid() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000008280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0x1, 0x4, 0x80000001ffff, 0x16, 0x8, {0x4, 0x5, 0x200000a, 0x2fb, 0x3, 0xb, 0x6, 0x1, 0x4, 0xc000, 0x6, r4, r5, 0xc8, 0x1a4d06bf}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x1, 0x2}, [{}, {0x2, 0x6}, {0x2, 0x6}, {0x2, 0x1, 0xffffffffffffffff}, {}, {0x2, 0x7}, {0x2, 0x3}], {0x4, 0x4}, [{0x8, 0x5}, {0x8, 0x4}, {0x8, 0xf}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x3, 0xee01}, {0x8, 0x2, r1}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, r5}], {0x10, 0x2}, {0x20, 0x1}}, 0xa4, 0x2) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r6) r7 = socket$kcm(0x10, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r8, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b3980200000000000000740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x8, 0x400]}}) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x10, 0x10, "6972a16387920cfad256559f58af1ac31147a8bd9b98f15a744d3c03497fc60c69384e4c90a0ed09e1b7f957fb401fa9e05136d2dd259e85fba5a108da06e82d", "7ae7cae7925fbe121718e6de64227243f96d9685d5016b32c02336b2cae3a91e", [0x0, 0x4]}) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002001400010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c9531d5cfab768354e30aecab45509e722346f04d64cf0e2ca33f4c5817f515008519577b2859ee8c7bdcf9fea10", 0x88}, {&(0x7f0000000140)}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x2408c080) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x141441) ioctl$BLKROSET(r10, 0x125d, &(0x7f0000000180)=0x3) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r9, &(0x7f0000000300)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000200)={0x1, 0x3}, 0x4) ioctl$EVIOCGMASK(r11, 0x5b02, 0x0) 6.837872799s ago: executing program 6 (id=4481): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x181240, 0x8) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000380)='./file0\x00', 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x20000000000006) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80c00, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r3, r4, 0x1, 0x0) 5.989139648s ago: executing program 6 (id=4483): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x4000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) pipe(&(0x7f0000000240)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) syz_open_dev$video4linux(&(0x7f00000002c0), 0x0, 0x86000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x1, 0x2, 0x2000, 0x2000, &(0x7f00009c4000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x2, 0x3, 0x2000, 0x2000, &(0x7f00009c4000/0x2000)=nil}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) splice(r7, &(0x7f0000000080)=0x1, r0, 0x0, 0x400000ff, 0x1) 5.833609014s ago: executing program 0 (id=4484): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2181, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe5, 0x6, 0xa6, 0x0, 0x2b, 0x19}, {0x5000, 0x4000, 0xd, 0x0, 0x40, 0x5, 0x7, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0x0, 0xb, 0x7f, 0x8, 0x42, 0xb, 0x1, 0x8, 0x7, 0xe}, {0x10000, 0xd000, 0xb, 0x21, 0x15, 0x6, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x33391002, 0xe, 0x23, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x1}, {0x3000, 0x1, 0x8, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x1000, 0x10000, 0xe, 0x5, 0x3, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x29}, {0xd000, 0x7}, 0x80000034, 0x0, 0x8000000, 0x2024, 0x200000000000000a, 0x0, 0xb000, [0x6800000000000000, 0x4, 0x3, 0xff]}) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [{0x4b564d04, 0x0, 0x6}, {0x571, 0x0, 0x6}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x28, r5, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) r7 = socket(0x10, 0x803, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) sendmsg$tipc(r8, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x3, 0xffe0}, {0x13}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x14, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f}}, @TCA_U32_LINK={0x8, 0x3, 0xce5}]}}]}, 0x54}}, 0x24040084) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc050}, 0x4000004) r11 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r11, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 5.745746312s ago: executing program 4 (id=4485): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd8322"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, 0x0, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) 5.710445232s ago: executing program 6 (id=4486): inotify_init() socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) timer_create(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000340)={0x1, 0x6, 0x8, 0xffffffffffff72aa, 0xab, 0x2, 0x5, 0x5}, &(0x7f00000003c0)={0x9, 0xfffffffffffffff1, 0x9, 0x6, 0xd3, 0x8, 0x7fffffffffffffff, 0xff}, &(0x7f0000000400), &(0x7f0000000580)={&(0x7f0000000540)={[0xfffffffffffffffd]}, 0x8}) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0xdd86, 0x0, 0x3}, 0x80, 0x0}, 0x40011) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0x2, 0x0, 0x4, {0xc, 0x1000, 0x9, 0x240}}) 5.474675786s ago: executing program 2 (id=4487): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd8322"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, 0x0, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) 5.088403066s ago: executing program 0 (id=4488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80000000000007c, 0x8000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = io_uring_setup(0x3457, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x38}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4.010402435s ago: executing program 2 (id=4489): r0 = request_key(&(0x7f0000000440)='user\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='-\x00', 0xfffffffffffffffc) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x5d) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = gettid() sigaltstack(&(0x7f0000000480)={&(0x7f0000000600)=""/4126, 0x80000001, 0x101e}, 0x0) rt_sigqueueinfo(r2, 0x21, &(0x7f0000000100)={0x1f}) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x189440, 0x88) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe1, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}], 0x1}, 0x20040051) r6 = syz_open_dev$admmidi(&(0x7f00000002c0), 0x4, 0x284000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4024587b, &(0x7f0000000500)={{r6, &(0x7f0000000300)='gre0\x00', 0x2a6000, &(0x7f0000000340)={@align=0x9, {0x6, 0x5, 0x4}}, 0x7, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x9}, 0x0, &(0x7f0000000440)}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) r9 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) ioctl$VIDIOC_DQEVENT(r9, 0x80805659, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x3, {0xa, 0x4e21, 0x7ff, @local, 0x8bc3}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="5aae23419225ee211d38da3b2afae69b2f035a95c1876c40416f13d78e0e3d9f57784e9e4a4fe132895e9c94579e1874483903ce7e70a9edcc5d7dc9c1a63405f2aab5b8692206de7ca697435f977f991bfe8d3d7aa4888b49b6e807a5447553acdf27a73ee0ebc56b9150150d", 0x6d}, {&(0x7f00000001c0)="eed07fcae05a40ccd9496fac9e083c9249b6da9c15d6b38eebd5f091c747c1b91750c7ebf943a0899ed20ed3367bbf5198b0579c6a0fd7936d369e1620a36d92b419fcc51c267355888f22e01fdc99aeea1221d03131df50925cef92d2b5a41702f9c53b9bc397e36a6249960322a12f1a81b279a732bab599419b502792d932af9fa9165f3c29bf532f8333d7a28a414048e3798751586173e9064f9675a66f2b09d90c8a0a9a219873d66537a69e69a42d7ff4fc880e", 0xb7}], 0x2}, 0x4008085) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd0009058202"], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x8a, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0xd8, 0xc0, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "43e4"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0xfffd}, {0x6, 0x24, 0x1a, 0x80, 0x28}, [@obex={0x5, 0x24, 0x15, 0x4dd}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x7, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0xdc, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x98, 0x47, 0x2}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x0, 0xf2, 0x2, 0x8, 0xf0}, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f0f00"/15], 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xd4, &(0x7f0000000280)=@string={0xd4, 0x3, "13540fc0ffc8a908235b175711ce1e04468260915eef1b6d94d94892c35e71390e8295ff1d975db703a0e67c3189103801727cb8f9234a3a33d3b37bdf5e3758230c2c11c6c61ead6119f986543edd2dac7d5cf8da68c9a694b9638bea51cac2748cf0c55550f7e8a066d6ad012188bce39cd15c08cec90914ad6490c453fb9ad2bcca2f0132b29ac884373ec98979e70b7a0c3c328558340e152196e29f8acf1cd4005f4f9e32c2142232b9edea51c6f70f6f01a7b58a060f035903e1cdca5aef8dbda40eb952674e1acd419f63cba3fc70"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x401}}]}) syz_usb_control_io$printer(r10, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001640)="e9383459571c51fc93b8f0fc52d0185d99a3240464eb0e512935ee38867e604f90d6074bb2ce890242307b728de96c3ef4324bf799c073905b63e17e83b461c3b672", 0x42) r11 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000003680)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="549910ecb66b3a50", 0x8}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x800) recvmmsg(r11, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/7, 0x7}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000580)={r8, 0x4}, 0x8) 4.00594886s ago: executing program 4 (id=4490): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000d80)=[{{&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000680)="be6dddf030961022ef2228ada93bd07c81e3de239d52e0439b1935f9d8f900d383186783b1ca504f0ec1bf716274f9786e891765f281f0193b8f26b0ccda34f91950fd1cef71725086de614838ec4f0e89de20779150775186980a874d9a6eb95caab52a3eb98cc0ef28a307bf63d319a3055df1807e9e92174907ad73b0bb0e015f38c7f094a393ee9f6df9d8365e938c837ba56afa6c459c3cf1ffecc3798ff0a73c5b4419bc321c4579bbae3400b70ed54adbe3ddb47affd5a0e4feb6492136a27aeb1eaa14857931ac18fc09", 0xce}, {&(0x7f0000000540)="d8661850ffa401f0", 0x8}, {&(0x7f0000000780)="005d93384f886decff7f7ad5035a4ac82190c3651c906bf9fc86a5679f961bf78a94ffc76bd7a0d94ab099efc26dda698bf06e6419bc9383ceea23", 0x3b}], 0x3, &(0x7f0000000880)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r0, r0, r1]}}, @rights={{0x14, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff, r0]}}], 0x70, 0x8050}}, {{&(0x7f0000000940)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000009c0)="c39f7fabd964e328c84df302fabdc10610c513cc2e418af6662fc9f4beef8e1db0ea2cf803ad58a0433101db9880708b34b6cac4f5b437022d257671945eb1b6c65e54388c5a6613f0a8e99c2abc5a65b5a1a1a82d845e4f3820c1e1c969bea13152aa83413e103e41a89d5bf9ac061074e4f6f758b05bbc16856294aa38804c3218afaa1aecaccc8e56be8b5cdc", 0x8e}, {&(0x7f0000008200)="7cdd7b2809c3e11ea9445c549fc0a00a8f519d5d31de804f1434bd809972176e7b76b280ffa667e80ad9088ebeb4a09b235aeff9334a481debd38e36440bf7a8b3b87bee3fe6edeb568986c530059b19aff12cc8189903f90891085f1f7ced46d01934eb18b971b70b72575d8e56f4ec201ea663cbe4e1f676705ca1d60887ef783d7042ada1744910e2fbe96bf7e696a8f237e14187c402792bae11b2a52072878eb603eb18d99a5c5ae767dc425ad74b03784062658e179bcd922b852d2d25ffe5129376977ba11cae24f84755d7439e5cbcf6802a54026e5c4d80edb672502490dcb2d68612812b538be8b2808ed5d251d70aedaa89ebb551749c9228e09b6ec9fdbdc937f10fbe4a72206369d826674b345870b5a41348d6ff85013ecdcd13960a3b11c2e924e3d9cd8634b9505e8de6a1eaba39d1bab3af496db14d9eb732ea23971925c9e88fa8c251d97ee907683fb56bb6078895910d8f0ad0b76881b9a89dcbe7d945971eba7b3afef9668263657c70f76e12d505695479e0086b0092a9763b1299553ec4057d6339a1a23978367cf010f0c9a129a72dd8db92bca8eeef1528d543fe252e45da4ef90e4d0245a69ab7ec2bd75ee5124558d51fb07146c60ef77af5a42851354f050314f0cca5abbf77779f60c9941ea8e2b94e659c576b8afd81779084cb621a3c0e0a665d7d1c948a0b76ca448207ec0c593eb444a096478b41efd8af6226e5d34d49ef3ff0a7555724dc289af95b742e7bc91f7ac70f79b9b7bfeec4d42aa06944a36f1f7797d8484c4f0391c13ed3798d452e3455853e5146774f571d475a81eefe7fb766dc041044e6b41fa71a049f66901166e5e468be2e982632d9ed622fca70c2f7d35606ceaa672859cbdc3a14ad1568e1f816e57c175f571caf0ef8122d81a48f5a81a2aa855bb64011533bc16e304955f1f424bcd7fddc1f2baf6d5ddd76ac6c991bb72dc1d83c06b736a4facbe6541e1b7a91b2715de2e3d03d70d4aeca0bd190ec29d9db5beb1b98add7250d8b03690a15ed6c18ebe971ab900713daa0e40e8f8e4ccb8546790aaf7973cce12e7deeeb331f7fa2e411269e696ec84fb415004818d6aaf0d007737df4516b007b6fee25033accef9f7e44481e53bc83520dbed68406f9e40bc25c2121aa8d1fb6f393b05349aece5fd12fe54d2786fa1b1b00862c8f2bfcd06205a892e4edaace9aee80639acd4736f6726a193b68093eb778b21a3cd974d3ab6f08d973646d973dd58edd921791948c0b3398636ecefe74f6c79a00a0b6e81a0accf87ba95fcc38d6797e19bcd04e4445e9d4a4153f5838b295a65fdac460926d2dbab93e1545f8651437e69f06066f5ac03270a2f43269b88498eb89208333e84d24b751dd1aca9d7a06283c723199b020161111c6afc47c9f8606fe5de28d1219d868e2a59648d3fda5b6210e846ba8508ac86cdb2e31c29585eb0cab7a42f639e4c244e700255cc65610509f95f859a9ccfa557ff1481499e47ab26b4f681362f0000d0be9ef64296082887175908ebe3b5db997851470af44de542599a35337d15981c4ae60bb96cdb8d11bd57fc52b8e653136990e8a95d6bbbeaa6fd0efcede47b63228b87e882bd3f39962987f99a842b807dcb7b56c6626de6694254d4a0712f0b3fc33c97b06ec4618063f375127796aa8df839eb37d8e5da2846eeb60ee730ba651be1d96fe658e72ea926c5b8fe984aed73dccbb1a0591072f603a37fb471eb75c1462ce691502e977a0e2f64537e5d281a9251f1db0ae982971ab035bd77f411005b671c343ddfb3902b8c2863645595103e2eeb5d278f94a8a23def4859453304d4d3c27385d698e5d1334a9b8700ef3d1b549f030ebac8bb0910781f108e0835b522a8751939d55c013a36903dbaef0f77ff2762c08ceeb7f3f0832083fe81474ffa4cfc4813836bf42bda59aa935d9aea9d46d77a9a12248fcb97dfa66ada587338dd0a3aa5d28b3180d219bcb093fe78f038e24b8ff5bbfb9a14336616ffa706708b615f53e38c40b9b728d0c0ccffcb9f50a32e9167b0be8c93514243842ce04024d4bd59398f7d8059b567c495dc97038d3d7d9611d599b45cff3571becadccaa4d329725933b94d39b6a151d2b52dbfdcf0acbeb03826cdb72ef97b10a5723a338d981fddc6f5b7fa87117d77ac29a5dd19e073e8ea72f737bc44b8b52b61719d554d97f68a54b564f9779c7bde8d1e527b058e09d76aa38ecfa958bd9904cbc712da21c463bd1a71892b8b7a500fad93085ae752b67daec0b4ca872f6c3f424a8973a8c3a93cfcad09ee46d19d609858fdb6ffb7b2df8277fe982a95b367500e4be173f997bf2c9b4d27a57f5b9211708820efac63c15080e2fa6b4f9a310ef8517952d8fe97ef5fefccde7836a20abe70b3b8ee18bfbddf5f451bb6d8a9387aedc4dbe964036772f674abd47cd64dbbe0bf5456488c5b74d5189a502dc519b0bc7703cf99df2448787fa34d2a11a33d02c992b4ae1869ce68b1e1250f5cde2ea1622d12b3bd49355dc977735a80aa032967c056cc8cf49f3b3176896985998c25f10f1d0fa03be5d007323c81f72321f665c08dfa3dd469d6d4fd5db1fb63bfb2a99d0817f6cf070d1cc1735feaf696d20c5cc8ef13f2c7e97d4c8bd5b72be1c0e81e877e429602251a6f975d8b2aaf7209185165e71c44f65f114ba671330bded45fd598f62a2e0f0f8757a117f6530cf6aa2ef2a8274babcb3feb247e3a8699b2064bbdadf7f0beade96ac7895871b8de681adcff1b0fe3ee5e15b820fef6f6844714e2449a1779e292b69175e00ff577d700793fab3729514ef447a5b347e69691ef87c96e753185bc88c91dfe0c0c3c7cbfcb33e367ae8f6f4a43aaad048c56ad1f0567df929f298ed0f0aebd814d32c9edc140409a77915da4539ab57ec082a14fc45cd6a9f70fd743106d02c6f9cc12e4b6c3fd2b1b41b60d094c9c064b68cf044747778b0b28a7b28b71d8545c6159d52ee5adedf0882d66e58a2e843ee1da23be971e79e966f4e8b57b8445c234c0f90a757a5256edcf8b08cf188fed09ffa2b61b4c05bc92caffc8b4d3be116cee27304c74e9c767cd106c6cef192d3ebb0dec1d29a06737458ffad20142e18114bcb95c6ebcbb45cd45aa19c3e1e561921147c9ac24fe2abfeb865089fcbdf63bf9f464bc98bf9478561df1742bf169616ecf95cae86ecec0aa9669263b78d64305a0e84a417f9cd546c9d8165f756f157b57aa83d3347cf795fc4e592dc83534c5dec3372ed7bae0677a29299b46191c3de138c3371f2365ca7a9156963e24d8e9cc1fc1abc2916005083a2dbf3e0d9bbcb3eb0c659abe8ee01ebc799ecfde2d7d1ca105d04cec5db70f699079b689740d82681afbb777fb87f78f9d47ebff3896b0a32659bb5fe05e6e4ef7ba46d151d099365b4a59891a51822bf11ef5bd97f9d08a8512eaa9e07ceb3c648657ae64f62e0f4381f698db2cfb5303b11589f7aa21dee5132db3b31b3716b3c23af00892ff5f6e93d72aed1ad0d4b945fb0db307f8541ea2741f66665cc95c58c11dcbd4e01e82bba846fc296e144481129b986416e6e166a39ea9f518d0ffcffd7f11f0a3a8d908ff59079cd01249cf3ddd79e26a72ba67b18292bfc6eb455fa20f5a270a68eaa1016a6181dd5a391f032d29956d8c7fec986e27bd703de93d3cc00460a32a84f3317f1a2923063629fbaacd56e0a752aaf50a08d29acbc105f57ced22d4ec33a509cbbd4e55bcfaddbc8067455dc302928d051c5f22bd0e5dda8d3f0ce3975d2d5982a300cb6105f17659b618948651768c1f8623ae1e224c77b4b1df414815804b925c7beec390c0e7b17393dbcbfd440a240fb0a729d732a2efbdb6313058ce7a22ac6886cb5c8606fbf9030879a1b571a6b5e5e9f954964ffaa079233459db354f0f3f2b30776db5af350c1165085a13655758964d2d71bfdda974713097489de92e94c72a23d141123bcb5d0265944ebcaeb1a6a4043f20cfeeb1bc1697a882717e290040e7f345edf94e8bb7019a4589c08f7351762a88649be93b2874deab5908be16967962037fc5b548fd7bf49016c5d4013955ab8911161501747a8727ec900510e3e9894b3a32bbf60c0b0b5fea3327678f4840f6d8ce587e110a21b5f2cf96f079533c72b3670b1cb5431fbeb987bb3ae920440f121679f390fbfc351b0fa4e027bcf21a9521ce704728527c99496be57f4d575a6bcf060bf6c7a4bbf5bc07404471c321eb766e59678a142e6a710ab78e75935768cc823963b40b4e9bf83811db085a43d7f470f3a857447525bbfa6b9fb6df1c2a95531b54e70ef2fe9252bb9a0e32fbb777db535643c4fc50f465bb8aec5ed149a53b2abb963cbf3bc77f865fe9ff3ce3d7e715cab91bb7f8e7dae25ca9a90111b2e96d1e72a9e141a32e93b7d298c610d8a2d01c9f187d555e219f066666e11560696e21f66b4d97b395f65b088388f2f38097bbdc3c19caac66f066439b8895513d24d0bd1c75c16c0081a09e5b6e106e2be4edfd929fdda03fc4d9a68ffc87140a3591a8849ed8e2bac161032bfecc78f711464be0f63ded9a70a13da27f07c7f6bab3ec222e39d7af18d05cf9e7c1a11cd91e8954a9d854deb44e924c4060e869f5a694e396d17b4c7bcd8ffbfd1d7151189ada401ad4cfa6464417800f05a735c9193892d6d191aabe0c609e809fce612f08a8f132f2bf397c92dca122a96db91bbc14cde798c98b210800f34aca5cbda4cc7117d36511a178daf629e9dd5d0b1b7f95ee5ab728130b59ca6f48462dc44e6578961f389a396bc12982666f9549e377553d01abea154bb2e7a7892ce0cd7bc3c64517ec496a49fa8a395377b4afa72f546ebd87e3acb7d869897971e3dcf4367af2963640df51f7cb26bff9f9995459cca8fb989bb6d63e3ba9ffc24c6d07a196489b64bcf3e4171c9c3d14e17a7b9bdd73dd96430e7e5a2a78dca1c3be02c5cf4c0c51614f2e611143c2a61a1f2dd3404f47796f4548078b14ffa76c051f48c653ad2e8ca625ac018f0e038764f214970f5b1a89afddf336321530c4277ce16bb52c104d7729fb53bafa5f95ca67f6bd54f6eef9ff7dfe55fe9ca917c71095c0432868a38109a6ab585c174c962168c7bfa3db9d338c81254a01ee5e50a362b41b0416a193a2b228d699eda9392935646b84a19b45d379f42549de3ae890373c519df601a5a03801b8e13e580b8901f07570ef6bdfba23f9c72d3b5eca7a504b1c679562c5f961717aab2c6b40fb66e06c443964e4872490813798acc9a5e36249fe59ca3acd3ca52cbf603baa9efe1cd3e04efaa34efcaa958f3095793657d7e73e79fd3364c1e5a31e2deef89ebfe2350d6851e2ffccbc8f6430d1ff0d2b75d02ce7b9341efe9787ac13b191a6c7cd552c9fd94e1728d8004b770aa8ab4e058d4d48a4fa510b95b549dd378edb691389ef03cf565776f53b8c9b6c6ee8e14b673d4bbdae4e103a966f75031d7db589671493a52f4e99929875cd786520fba8e2946381e3779401344fa9142779ec058afca5b16f901350b976585ec841c226975e33eb17e8a01b16ceb7975694b4f523fa578122bda12b5c734dec0cc7fa19d3ea9280d4bab04de3a48a367a3a104ea5c38fa86e2fc3c0c9b0c8f0a9b6640cff94de72d0a5b0b6f6f0dcd280410b2073e5e86f05eda4e42e49903da76e553334c039a934add9260e1d43d04ca89ab6857f1226b51bce4b6f24f20ae32f19b2787b5e37b3eabae", 0x1000}], 0x2, &(0x7f0000000b00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r0]}}], 0x24, 0x4}}, {{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="09c8105b5c9353a4dcb8a2256340926859149dadb5018a0abfd227a79b80af40d1e135fe6bdd6166513d09118d", 0x2d}, {&(0x7f0000000c00)="b3a2ceb6ae3de4b090c22b6ceff271d86583369063eaea7cfe67", 0x1a}, {&(0x7f0000000c40)="5081d9cadd89ad959098773cfd40d659fb9cdbf87c61d65d00a4fc1f2eae9dcfe2b52bc75135b2058aa6aa75a0219ef1adf81a13024464aa9d600d53bb572b77d6cbe79e78e1f3dff5dc55c91abb6b96edab4242c096368a79043396c1e5a9ce3a72e1ad1d820168d38e69b8043065a0f75f6b1d042cee87b4c2b0526377019bb13b2cb32f37bdc277757f775930fb76000f0a7b48cc2ba0fd94445baa627ce0c6ff05d20c3bbe54a2e9290460639fa36dfb2884d2342ba73f82ef8b395c7b5c7f95d8a89d0a", 0xc6}], 0x3, 0x0, 0x0, 0x40040}}], 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz1\x00', {0xf9e, 0x3, 0x4}, 0x4d, [0x8, 0x6, 0x9, 0xffffffff, 0x2, 0xfffffffc, 0x7fffffff, 0x80000001, 0x6, 0x1, 0xfd, 0x0, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x5, 0x8, 0xffff, 0x11, 0xe, 0x14, 0x20000000, 0x15098855, 0x6, 0x4, 0xfffffffb, 0x7fffffff, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x40000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x4, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x1, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0x7f, 0x36, 0x4, 0x81, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x6, 0xd, 0x2, 0xfffffffe, 0x6e38, 0x0, 0xa, 0x6, 0x3, 0x0, 0x5, 0x27, 0x4, 0xd, 0x80, 0xfff, 0x1000004, 0x0, 0x40000040, 0x1, 0x8, 0x1, 0x0, 0xb, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x17, 0x0, 0x1, 0x1, 0x20006, 0x6, 0xac, 0x2, 0x56, 0xcfb9], [0x3, 0xdb8, 0x9, 0xf, 0x2, 0x200006, 0x4000005, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x4, 0xee40000, 0x1, 0x1, 0x4, 0x950, 0x8, 0xffff, 0x0, 0x0, 0x40000007, 0x9, 0x4, 0x800, 0x7, 0x9, 0x10000, 0xfffffffd, 0x1, 0xfffffffe, 0x2, 0x0, 0x4, 0x8be, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x400, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x10002, 0xa, 0x6, 0x2, 0xfffffefe, 0xda15, 0xa, 0xffffffff, 0x10], [0x0, 0x5, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0x5, 0x6, 0x606, 0x1, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x6, 0x2, 0x0, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x10000006, 0x7, 0x101, 0x9, 0x3000000, 0x9, 0x4000006, 0x7, 0xfffffffd, 0x0, 0x1, 0x4, 0x10000b, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x1, 0x2015, 0x8000, 0x7, 0x7d, 0x8, 0x7, 0xfffdfffc, 0xb, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x7}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x541401, 0x0) r8 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 3.678869305s ago: executing program 6 (id=4491): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80000000000007c, 0x8000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = io_uring_setup(0x3457, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x38}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8e, 0xfffa}, 0x1d, [0x5, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x4000021, 0x3, 0x7f, 0x6, 0x3, 0x39cc191a, 0x5f, 0x20, 0x5, 0x7, 0xffffff01, 0xa6, 0x3, 0x1, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe660, 0x4, 0x7, 0x104, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3c, 0x8f, 0x6, 0x10000008, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x4, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6, 0x9, 0x6, 0x3, 0x1, 0x4, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x1, 0x8000, 0x400c, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x7, 0xe24, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x0, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c9368e, 0x42, 0x2], [0x400, 0x5, 0x0, 0x5, 0xfffffffe, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x8005, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x4002, 0x800f38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x4, 0x7, 0x53cf697a, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x444, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x1, 0x10000b, 0x5, 0x938, 0x6, 0x6, 0x0, 0x7, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x80000002, 0x101, 0x10000, 0x3ff, 0x7ffe, 0x8, 0x200a620, 0x4, 0x5, 0x1, 0x2, 0x200, 0x60a7, 0xe, 0x6, 0x1, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x101, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x4, 0x10080, 0x5, 0x8, 0x30b1d693, 0x10001, 0x8, 0x7ff, 0x2, 0x3, 0x4, 0x4, 0x3, 0xdd81, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.597796754s ago: executing program 0 (id=4492): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r6, 0x401, 0x70bd2e, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x14008080) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x100) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x80, r10, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x0, 0x4, 0x0, {0x329, 0xf70, 0x0, 0x319, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xf, 0xa, 0x48}}, @NL80211_ATTR_SSID={0x5, 0x34, @random="a9"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x1, 0x0, {0x3, 0x0, 0x0, 0x3c0, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x2009, 0x3}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) 2.977068876s ago: executing program 5 (id=4493): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) (fail_nth: 1) 2.92203626s ago: executing program 4 (id=4494): socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x80000401) 2.0383222s ago: executing program 4 (id=4495): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB]) 1.96433029s ago: executing program 5 (id=4496): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x4000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) pipe(&(0x7f0000000240)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) syz_open_dev$video4linux(&(0x7f00000002c0), 0x0, 0x86000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x1, 0x2, 0x2000, 0x2000, &(0x7f00009c4000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x2, 0x3, 0x2000, 0x2000, &(0x7f00009c4000/0x2000)=nil}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) splice(r7, &(0x7f0000000080)=0x1, r0, 0x0, 0x400000ff, 0x1) 1.948611253s ago: executing program 0 (id=4497): dup(0xffffffffffffffff) select(0xb670293f642facc, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000940)="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", 0x1000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xa, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x200, 0xd6, 0x4f424752, 0x8, 0x3, [{0x3, 0xee7}, {0x200, 0x3}, {0x18, 0x4}, {0x0, 0x2}, {0x5, 0x6fff}, {0xfffffffa, 0x812c}, {0x9, 0x3}, {0x1000, 0x5}], 0xfb, 0x7, 0x1, 0x2}}) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) add_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x240440c4}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',', @ANYRES16], 0x2c}}, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) 1.92786641s ago: executing program 6 (id=4498): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x8085}, &(0x7f0000000400)=0x0, &(0x7f0000000280)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r3], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000140), 0x8) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$binfmt_elf64(r5, &(0x7f00000002c0)=ANY=[@ANYRES16=r4, @ANYRES8=r2], 0x78) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r7 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000452aa731bfcf4417330cb00000c00000000000000000000000000e50000000000000000000000000000000000ffffffffffffffff000000000000000000000000009d00000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100060044000500fe8000000000000017003c00000002000000ac1414aa000000000000000000000000ff340000040300"/177], 0xfc}}, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) fchdir(r8) openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/sysvipc/msg\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) pwritev(r12, &(0x7f0000000140)=[{&(0x7f0000000000)='\x00s', 0x2}], 0x1, 0x6, 0x8636) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000040)={&(0x7f0000000300)=[{0x9, 0x6811, 0x0, 0x0}, {0x6, 0x3210, 0x0, 0x0}, {0xfffe, 0x1210, 0x0, 0x0}], 0x3}) 1.926673517s ago: executing program 4 (id=4499): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x181240, 0x8) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000380)='./file0\x00', 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x20000000000006) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80c00, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) tee(r3, r4, 0x1, 0x0) 1.798215048s ago: executing program 5 (id=4500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) 1.728392437s ago: executing program 5 (id=4501): inotify_init() socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) timer_create(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000340)={0x1, 0x6, 0x8, 0xffffffffffff72aa, 0xab, 0x2, 0x5, 0x5}, &(0x7f00000003c0)={0x9, 0xfffffffffffffff1, 0x9, 0x6, 0xd3, 0x8, 0x7fffffffffffffff, 0xff}, &(0x7f0000000400), &(0x7f0000000580)={&(0x7f0000000540)={[0xfffffffffffffffd]}, 0x8}) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0xdd86, 0x0, 0x3}, 0x80, 0x0}, 0x40011) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0x2, 0x0, 0x4, {0xc, 0x1000, 0x9, 0x240}}) 1.725828695s ago: executing program 4 (id=4502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x3}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000007c0)={0x100000000000013b}) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_LINKMODE={0x5, 0x11, 0x4}]}, 0x58}}, 0x0) r12 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r13, 0x5402, &(0x7f0000000240)={0x8, 0x100001d, 0x4003, 0x83ffffc, 0xb, "69b78413000000000000002000"}) ioctl$TIOCPKT(r13, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TIOCSSOFTCAR(r13, 0x541a, &(0x7f0000000000)) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a2"], 0x0}, 0x0) 1.423888311s ago: executing program 2 (id=4503): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000db168920402000d92ca90102030109021200010000000009"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x5, 0x1, 0x0}) 983.458ms ago: executing program 0 (id=4504): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000d80)=[{{&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000680)="be6dddf030961022ef2228ada93bd07c81e3de239d52e0439b1935f9d8f900d383186783b1ca504f0ec1bf716274f9786e891765f281f0193b8f26b0ccda34f91950fd1cef71725086de614838ec4f0e89de20779150775186980a874d9a6eb95caab52a3eb98cc0ef28a307bf63d319a3055df1807e9e92174907ad73b0bb0e015f38c7f094a393ee9f6df9d8365e938c837ba56afa6c459c3cf1ffecc3798ff0a73c5b4419bc321c4579bbae3400b70ed54adbe3ddb47affd5a0e4feb6492136a27aeb1eaa14857931ac18fc09", 0xce}, {&(0x7f0000000540)="d8661850ffa401f0", 0x8}, {&(0x7f0000000780)="005d93384f886decff7f7ad5035a4ac82190c3651c906bf9fc86a5679f961bf78a94ffc76bd7a0d94ab099efc26dda698bf06e6419bc9383ceea23", 0x3b}], 0x3, &(0x7f0000000880)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r0, r0, r1]}}, @rights={{0x14, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff, r0]}}], 0x70, 0x8050}}, {{&(0x7f0000000940)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000009c0)="c39f7fabd964e328c84df302fabdc10610c513cc2e418af6662fc9f4beef8e1db0ea2cf803ad58a0433101db9880708b34b6cac4f5b437022d257671945eb1b6c65e54388c5a6613f0a8e99c2abc5a65b5a1a1a82d845e4f3820c1e1c969bea13152aa83413e103e41a89d5bf9ac061074e4f6f758b05bbc16856294aa38804c3218afaa1aecaccc8e56be8b5cdc", 0x8e}, {&(0x7f0000008200)="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", 0x1000}], 0x2, &(0x7f0000000b00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r0]}}], 0x24, 0x4}}, {{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="09c8105b5c9353a4dcb8a2256340926859149dadb5018a0abfd227a79b80af40d1e135fe6bdd6166513d09118d", 0x2d}, {&(0x7f0000000c00)="b3a2ceb6ae3de4b090c22b6ceff271d86583369063eaea7cfe67", 0x1a}, {&(0x7f0000000c40)="5081d9cadd89ad959098773cfd40d659fb9cdbf87c61d65d00a4fc1f2eae9dcfe2b52bc75135b2058aa6aa75a0219ef1adf81a13024464aa9d600d53bb572b77d6cbe79e78e1f3dff5dc55c91abb6b96edab4242c096368a79043396c1e5a9ce3a72e1ad1d820168d38e69b8043065a0f75f6b1d042cee87b4c2b0526377019bb13b2cb32f37bdc277757f775930fb76000f0a7b48cc2ba0fd94445baa627ce0c6ff05d20c3bbe54a2e9290460639fa36dfb2884d2342ba73f82ef8b395c7b5c7f95d8a89d0a", 0xc6}], 0x3, 0x0, 0x0, 0x40040}}], 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz1\x00', {0xf9e, 0x3, 0x4}, 0x4d, [0x8, 0x6, 0x9, 0xffffffff, 0x2, 0xfffffffc, 0x7fffffff, 0x80000001, 0x6, 0x1, 0xfd, 0x0, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x5, 0x8, 0xffff, 0x11, 0xe, 0x14, 0x20000000, 0x15098855, 0x6, 0x4, 0xfffffffb, 0x7fffffff, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x40000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x4, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x1, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0x7f, 0x36, 0x4, 0x81, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x6, 0xd, 0x2, 0xfffffffe, 0x6e38, 0x0, 0xa, 0x6, 0x3, 0x0, 0x5, 0x27, 0x4, 0xd, 0x80, 0xfff, 0x1000004, 0x0, 0x40000040, 0x1, 0x8, 0x1, 0x0, 0xb, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x17, 0x0, 0x1, 0x1, 0x20006, 0x6, 0xac, 0x2, 0x56, 0xcfb9], [0x3, 0xdb8, 0x9, 0xf, 0x2, 0x200006, 0x4000005, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x4, 0xee40000, 0x1, 0x1, 0x4, 0x950, 0x8, 0xffff, 0x0, 0x0, 0x40000007, 0x9, 0x4, 0x800, 0x7, 0x9, 0x10000, 0xfffffffd, 0x1, 0xfffffffe, 0x2, 0x0, 0x4, 0x8be, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x400, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x10002, 0xa, 0x6, 0x2, 0xfffffefe, 0xda15, 0xa, 0xffffffff, 0x10], [0x0, 0x5, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0x5, 0x6, 0x606, 0x1, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x6, 0x2, 0x0, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x10000006, 0x7, 0x101, 0x9, 0x3000000, 0x9, 0x4000006, 0x7, 0xfffffffd, 0x0, 0x1, 0x4, 0x10000b, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x1, 0x2015, 0x8000, 0x7, 0x7d, 0x8, 0x7, 0xfffdfffc, 0xb, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x7}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x541401, 0x0) r8 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 631.157238ms ago: executing program 5 (id=4505): inotify_init() socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) pselect6(0x40, &(0x7f0000000200)={0x5933, 0x1ff, 0x4, 0xfffffffffffffff7, 0x90000000000000, 0x64, 0x100, 0xfc}, &(0x7f0000000340)={0x1, 0x6, 0x8, 0xffffffffffff72aa, 0xab, 0x2, 0x5, 0x5}, &(0x7f00000003c0)={0x9, 0xfffffffffffffff1, 0x9, 0x6, 0xd3, 0x8, 0x7fffffffffffffff, 0xff}, &(0x7f0000000400), &(0x7f0000000580)={&(0x7f0000000540)={[0xfffffffffffffffd]}, 0x8}) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0xdd86, 0x0, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="00030200f0ff000000002d3922ff65b4355e953d23d27c69e074889fa8e7ee962184588e5fd8c5ee00a7472916f510027afb3654f0", 0x35}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be", 0x24}, {&(0x7f0000000140)}, {&(0x7f0000000540)="d6cbcbd01a9287bce454d54ecea0f66b7367fbf6880d", 0x16}], 0x4}, 0x40011) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000300)={0x16, @remote, 0x4e24, 0x0, 'sh\x00', 0x1, 0xc1, 0x2d}, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0x2, 0x0, 0x4, {0xc, 0x1000, 0x9, 0x240}}) 0s ago: executing program 0 (id=4506): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x3c}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x40002) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000100)=""/120, 0x78}) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4e24, 0x4e00, 0x18, 0x0, @wg=@data={0x4, 0x80, 0x8}}}}}}, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000280)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[], @llc={@llc={0xbc, 0x54, "c8"}}}}}}, 0x0) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) sched_getattr(r2, &(0x7f00000001c0)={0x38}, 0x38, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f0000000200)="92d9a5d2e17e17dd4a492ceac6b6b4456a001baa3d730edb55e8c2d6995a71bd93094893abcbb9f3b2dae001834a1921b08f1a5898f338b18c1703ce52c01f4bc8a0b3450ec765476b4e90bf7d0b6f23c0199c83838184dfd9e2c3bffd2f211e6750ac8dea30582829eda522fbae2541dc5bec016e28d774321de376a8e7b4287fd73481ab7f0a66dfd3932a098ad89e4854122f35629d6b51", &(0x7f0000000000)=""/39, &(0x7f00000002c0)="8da9eef7007225f0dfcc4f73727a9b4a3c894b6ddfaa7e611e3e242122077b628e608f84335eb88789507e74d9821852f01866aec7ed268fc37849064d759a09dc65531703fcd5de3d933ab3e950eaca031c40fb6f05c56bd85a2aa4ce461d754b938d53dac34c5fd70bb2ba44a1c654354aa10ebdeb0cfb86cb6f30b04860ac20fa19f6e3dd6c473e1a5ab3c692aa2d005160b4a744c7d881915dcd7f0d8e2643fc8c7d97e2007b99895ec0366bb5f1cfff73304340441bb2", &(0x7f0000000780)="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", 0x8, r5, 0x4}, 0x38) kernel console output (not intermixed with test programs): 051426][T21393] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1400.051447][T21393] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 1400.051462][T21393] RDX: 0000000020000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 1400.051475][T21393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1400.051487][T21393] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1400.051501][T21393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1400.051532][T21393] [ 1400.596576][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4137'. [ 1400.680694][T13714] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 1400.690972][T21407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4139'. [ 1400.779810][T21406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4138'. [ 1400.875046][T13714] usb 7-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1400.894531][T13714] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1400.920859][T13714] usb 7-1: Product: syz [ 1400.925125][T13714] usb 7-1: Manufacturer: syz [ 1400.934977][T13714] usb 7-1: SerialNumber: syz [ 1400.945296][T13714] usb 7-1: config 0 descriptor?? [ 1401.040705][ T1209] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1401.200352][T21397] input: syz1 as /devices/virtual/input/input82 [ 1401.220639][ T1209] usb 6-1: Using ep0 maxpacket: 32 [ 1401.232746][ T1209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.251515][ T1209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.270697][ T1209] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1401.283106][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.313576][T13714] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 1401.339122][T13714] peak_usb 7-1:0.0: unable to read PCAN-Chip USB firmware info (err -32) [ 1401.359084][T21418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4143'. [ 1401.365497][ T1209] usb 6-1: config 0 descriptor?? [ 1401.472049][T13714] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -32 [ 1401.498315][T13714] usb 7-1: USB disconnect, device number 48 [ 1401.645376][T21423] random: crng reseeded on system resumption [ 1401.698476][T21409] netlink: 'syz.5.4140': attribute type 1 has an invalid length. [ 1401.791775][T21409] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1402.137805][ T1209] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 1402.162580][ T1209] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 1402.182413][ T1209] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 1402.207350][ T1209] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 1402.246592][ T1209] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 1402.289987][ T1209] savu 0003:1E7D:2D5A.0020: unbalanced collection at end of report description [ 1402.401822][ T1209] savu 0003:1E7D:2D5A.0020: parse failed [ 1402.407687][ T1209] savu 0003:1E7D:2D5A.0020: probe with driver savu failed with error -22 [ 1402.442900][T21432] FAULT_INJECTION: forcing a failure. [ 1402.442900][T21432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1402.489520][ T1209] usb 6-1: USB disconnect, device number 75 [ 1402.498691][T21432] CPU: 0 UID: 0 PID: 21432 Comm: syz.6.4147 Tainted: G L syzkaller #0 PREEMPT(full) [ 1402.498716][T21432] Tainted: [L]=SOFTLOCKUP [ 1402.498722][T21432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1402.498732][T21432] Call Trace: [ 1402.498738][T21432] [ 1402.498745][T21432] dump_stack_lvl+0xe8/0x150 [ 1402.498771][T21432] should_fail_ex+0x412/0x560 [ 1402.498797][T21432] _copy_from_user+0x2d/0xb0 [ 1402.498814][T21432] sk_setsockopt+0x2b3/0x2e80 [ 1402.498830][T21432] ? __lock_acquire+0x6b5/0x2cf0 [ 1402.498854][T21432] ? __pfx_sk_setsockopt+0x10/0x10 [ 1402.498874][T21432] ? aa_sk_perm+0x6d5/0x900 [ 1402.498900][T21432] ? __pfx_aa_sk_perm+0x10/0x10 [ 1402.498921][T21432] ? aa_sock_opt_perm+0xff/0x1a0 [ 1402.498946][T21432] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1402.498966][T21432] do_sock_setsockopt+0x11b/0x1b0 [ 1402.498986][T21432] __ia32_sys_setsockopt+0x13d/0x1b0 [ 1402.499006][T21432] __do_fast_syscall_32+0x20d/0x640 [ 1402.499026][T21432] ? do_fast_syscall_32+0x33/0x70 [ 1402.499043][T21432] ? asm_int80_emulation+0x1a/0x20 [ 1402.499057][T21432] ? do_int80_emulation+0x274/0x4d0 [ 1402.499081][T21432] ? trace_irq_disable+0x3b/0x150 [ 1402.499106][T21432] do_fast_syscall_32+0x33/0x70 [ 1402.499124][T21432] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1402.499142][T21432] RIP: 0023:0xf700ef6c [ 1402.499155][T21432] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1402.499168][T21432] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1402.499183][T21432] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 1402.499193][T21432] RDX: 0000000000000003 RSI: 0000000080000b00 RDI: 0000000000000004 [ 1402.499202][T21432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1402.499211][T21432] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1402.499220][T21432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1402.499241][T21432] [ 1402.752964][T15427] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1402.929254][T15427] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1402.946895][T15427] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1402.969177][T15427] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1402.988520][T15427] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1403.020055][T15427] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1403.070363][T21437] loop6: detected capacity change from 0 to 524287487 [ 1403.078110][T21437] buffer_io_error: 24 callbacks suppressed [ 1403.078128][T21437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1403.118686][T15427] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1403.149120][T15427] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1403.165089][T21437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1403.174678][T21437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1403.182750][T21437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1403.190738][T21437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1403.198861][T21437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1403.207575][T21437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1403.215670][T21437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1403.224639][T21437] ldm_validate_partition_table(): Disk read failed. [ 1403.231465][T21437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1403.239418][T21437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1403.247544][T21437] Dev loop6: unable to read RDB block 0 [ 1403.253576][T21437] loop6: unable to read partition table [ 1403.260816][T21437] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1403.287309][T15427] usb 1-1: Product: syz [ 1403.311443][T15427] usb 1-1: Manufacturer: syz [ 1403.377385][T15427] cdc_wdm 1-1:1.0: skipping garbage [ 1403.383028][T15427] cdc_wdm 1-1:1.0: skipping garbage [ 1403.429433][T21440] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4149'. [ 1403.440622][T15427] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1403.446585][T15427] cdc_wdm 1-1:1.0: Unknown control protocol [ 1403.524579][T21442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4150'. [ 1403.680003][T21445] fuse: Bad value for 'fd' [ 1404.155479][T21451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4152'. [ 1404.370180][T21454] binder: 21453:21454 ioctl c0306201 800003c0 returned -14 [ 1404.711997][T21459] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4154'. [ 1404.721377][T21459] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4154'. [ 1404.730686][T21459] xt_bpf: check failed: parse error [ 1405.202111][T21464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4155'. [ 1405.211908][T21464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4155'. [ 1405.231068][T21464] xt_bpf: check failed: parse error [ 1405.486599][ C0] wdm_int_callback: 2061 callbacks suppressed [ 1405.486623][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1405.499338][ C0] wdm_int_callback: 2061 callbacks suppressed [ 1405.499355][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1405.513093][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1405.519734][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1405.526907][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1405.533543][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1405.539950][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1405.546551][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1405.552967][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1405.559568][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1405.565955][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1405.572586][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1405.579036][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1405.585661][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1405.591979][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1405.598608][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1405.604932][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1405.611676][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1405.618922][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1405.625563][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1405.660949][T15427] usb 1-1: USB disconnect, device number 73 [ 1405.660995][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1406.045282][T21470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4157'. [ 1406.423159][ T1209] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1406.471137][T21474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4159'. [ 1406.481304][T21474] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4159'. [ 1406.490579][T21474] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4159'. [ 1406.680678][ T1209] usb 7-1: Using ep0 maxpacket: 16 [ 1406.688951][ T1209] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1406.704505][T21483] random: crng reseeded on system resumption [ 1406.797932][ T1209] usb 7-1: config 2 has an invalid interface number: 200 but max is 0 [ 1406.847882][ T1209] usb 7-1: config 2 has no interface number 0 [ 1406.862117][ T1209] usb 7-1: config 2 interface 200 has no altsetting 0 [ 1406.902510][T21486] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4163'. [ 1406.931551][T15427] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1406.973686][ T1209] usb 7-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=43.53 [ 1406.999887][ T1209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.018928][ T1209] usb 7-1: Product: syz [ 1407.027694][ T1209] usb 7-1: Manufacturer: syz [ 1407.050372][ T1209] usb 7-1: SerialNumber: syz [ 1407.119043][T15427] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1407.128530][T15427] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1407.137440][T15427] usb 3-1: Product: syz [ 1407.148612][T15427] usb 3-1: Manufacturer: syz [ 1407.155742][T15427] usb 3-1: SerialNumber: syz [ 1407.169665][T15427] usb 3-1: config 0 descriptor?? [ 1407.337477][T21492] binder: 21491:21492 ioctl c0306201 800003c0 returned -14 [ 1407.398103][T21479] input: syz1 as /devices/virtual/input/input83 [ 1407.586188][T15427] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 1407.613821][T15427] peak_usb 3-1:0.0: unable to read PCAN-Chip USB firmware info (err -32) [ 1407.712271][T15427] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -32 [ 1407.731870][T21490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4164'. [ 1407.737937][ T1209] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1407.749201][T15427] usb 3-1: USB disconnect, device number 77 [ 1407.766292][ T1209] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 1407.794881][ T1209] pac7311 7-1:2.200: probe with driver pac7311 failed with error -71 [ 1407.829144][ T1209] usb 7-1: USB disconnect, device number 49 [ 1407.891265][T21499] FAULT_INJECTION: forcing a failure. [ 1407.891265][T21499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1407.947356][T21499] CPU: 0 UID: 0 PID: 21499 Comm: syz.5.4166 Tainted: G L syzkaller #0 PREEMPT(full) [ 1407.947404][T21499] Tainted: [L]=SOFTLOCKUP [ 1407.947410][T21499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1407.947421][T21499] Call Trace: [ 1407.947428][T21499] [ 1407.947435][T21499] dump_stack_lvl+0xe8/0x150 [ 1407.947463][T21499] should_fail_ex+0x412/0x560 [ 1407.947490][T21499] _copy_from_user+0x2d/0xb0 [ 1407.947508][T21499] get_compat_msghdr+0xb3/0x4c0 [ 1407.947525][T21499] ? __lock_acquire+0x6b5/0x2cf0 [ 1407.947549][T21499] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1407.947565][T21499] ? kstrtoull+0x12f/0x1d0 [ 1407.947590][T21499] ___sys_sendmsg+0x201/0x360 [ 1407.947613][T21499] ? __pfx____sys_sendmsg+0x10/0x10 [ 1407.947631][T21499] ? get_pid_task+0x20/0x1f0 [ 1407.947646][T21499] ? get_pid_task+0x20/0x1f0 [ 1407.947658][T21499] ? get_pid_task+0x20/0x1f0 [ 1407.947695][T21499] ? __fget_files+0x2a/0x420 [ 1407.947717][T21499] ? __fget_files+0x3a0/0x420 [ 1407.947746][T21499] __sys_sendmsg+0x183/0x260 [ 1407.947772][T21499] ? __pfx___sys_sendmsg+0x10/0x10 [ 1407.947804][T21499] __do_fast_syscall_32+0x20d/0x640 [ 1407.947824][T21499] ? do_fast_syscall_32+0x33/0x70 [ 1407.947841][T21499] ? asm_int80_emulation+0x1a/0x20 [ 1407.947856][T21499] ? do_int80_emulation+0x274/0x4d0 [ 1407.947872][T21499] ? trace_irq_disable+0x3b/0x150 [ 1407.947898][T21499] do_fast_syscall_32+0x33/0x70 [ 1407.947915][T21499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1407.947934][T21499] RIP: 0023:0xf70bef6c [ 1407.947948][T21499] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1407.947961][T21499] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1407.947978][T21499] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000380 [ 1407.947988][T21499] RDX: 0000000000048004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1407.947998][T21499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1407.948007][T21499] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1407.948016][T21499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1407.948037][T21499] [ 1408.298401][T21503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4167'. [ 1408.583426][T21514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4169'. [ 1408.593408][T21514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4169'. [ 1408.608754][T21514] xt_bpf: check failed: parse error [ 1408.764999][T13741] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 1408.816411][T21517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4172'. [ 1408.826537][T21517] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4172'. [ 1409.070187][T13741] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1409.080354][T13741] usb 6-1: not running at top speed; connect to a high speed hub [ 1409.098881][T13741] usb 6-1: config 1 has an invalid interface number: 93 but max is 0 [ 1409.110161][T13741] usb 6-1: config 1 has no interface number 0 [ 1409.123521][T13741] usb 6-1: config 1 interface 93 has no altsetting 0 [ 1409.143160][T13741] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 1409.158231][T13741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.178045][T13741] usb 6-1: Product: syz [ 1409.193067][T13741] usb 6-1: Manufacturer: syz [ 1409.207907][T13741] usb 6-1: SerialNumber: syz [ 1409.305538][T21528] fuse: Bad value for 'fd' [ 1409.394341][T21531] input: syz1 as /devices/virtual/input/input84 [ 1410.311383][ T1209] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1410.462449][ T1209] usb 3-1: device descriptor read/64, error -71 [ 1410.520827][T13724] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1410.534503][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1410.534523][ T30] audit: type=1326 audit(1773480317.231:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21544 comm="syz.6.4181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1410.644853][ T30] audit: type=1326 audit(1773480317.261:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21544 comm="syz.6.4181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1410.691671][T13724] usb 1-1: Using ep0 maxpacket: 32 [ 1410.697039][ T30] audit: type=1326 audit(1773480317.261:5421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21544 comm="syz.6.4181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1410.741405][ T1209] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1410.754972][T13724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.774590][ T30] audit: type=1326 audit(1773480317.261:5422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21544 comm="syz.6.4181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1410.800695][T13724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.826165][T13724] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1410.848586][T13724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.856908][ T30] audit: type=1326 audit(1773480317.261:5423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21544 comm="syz.6.4181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1410.902608][T13724] usb 1-1: config 0 descriptor?? [ 1410.908195][ T1209] usb 3-1: device descriptor read/64, error -71 [ 1410.920950][ T30] audit: type=1326 audit(1773480317.261:5424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21544 comm="syz.6.4181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1411.016956][ T30] audit: type=1326 audit(1773480317.261:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21544 comm="syz.6.4181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1411.057253][ T1209] usb usb3-port1: attempt power cycle [ 1411.111207][ T30] audit: type=1326 audit(1773480317.261:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21544 comm="syz.6.4181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1411.145921][T21543] netlink: 'syz.0.4180': attribute type 1 has an invalid length. [ 1411.176393][ T30] audit: type=1326 audit(1773480317.261:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21544 comm="syz.6.4181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1411.238078][ T30] audit: type=1326 audit(1773480317.261:5428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21544 comm="syz.6.4181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1411.358856][T13741] peak_usb 6-1:1.93 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1411.380492][T13741] peak_usb 6-1:1.93: unable to read PCAN-USB serial number (err -22) [ 1411.388312][T13724] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 1411.405550][T13724] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 1411.430965][ T1209] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1411.438767][T13724] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 1411.450671][T13710] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1411.469268][T13724] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 1411.479503][ T1209] usb 3-1: device descriptor read/8, error -71 [ 1411.492687][T13741] peak_usb 6-1:1.93: probe with driver peak_usb failed with error -22 [ 1411.503639][T13724] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 1411.520636][T13724] savu 0003:1E7D:2D5A.0021: unbalanced collection at end of report description [ 1411.531682][T13724] savu 0003:1E7D:2D5A.0021: parse failed [ 1411.544552][T13724] savu 0003:1E7D:2D5A.0021: probe with driver savu failed with error -22 [ 1411.565671][T13741] usb 6-1: USB disconnect, device number 76 [ 1411.600667][T13710] usb 7-1: Using ep0 maxpacket: 16 [ 1411.606017][T13724] usb 1-1: USB disconnect, device number 74 [ 1411.624993][T13710] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1411.644895][T13710] usb 7-1: config 2 has an invalid interface number: 200 but max is 0 [ 1411.658097][T13710] usb 7-1: config 2 has no interface number 0 [ 1411.681320][T13710] usb 7-1: config 2 interface 200 has no altsetting 0 [ 1411.696684][T21552] input: syz1 as /devices/virtual/input/input85 [ 1411.703709][T13710] usb 7-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=43.53 [ 1411.717783][T13710] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.736380][T13710] usb 7-1: Product: syz [ 1411.740702][ T1209] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1411.758473][T13710] usb 7-1: Manufacturer: syz [ 1411.764251][T13710] usb 7-1: SerialNumber: syz [ 1411.781334][ T1209] usb 3-1: device descriptor read/8, error -71 [ 1411.827213][T21554] FAULT_INJECTION: forcing a failure. [ 1411.827213][T21554] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.840332][T21554] CPU: 0 UID: 0 PID: 21554 Comm: syz.5.4184 Tainted: G L syzkaller #0 PREEMPT(full) [ 1411.840374][T21554] Tainted: [L]=SOFTLOCKUP [ 1411.840382][T21554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1411.840396][T21554] Call Trace: [ 1411.840405][T21554] [ 1411.840415][T21554] dump_stack_lvl+0xe8/0x150 [ 1411.840451][T21554] should_fail_ex+0x412/0x560 [ 1411.840488][T21554] should_failslab+0xa8/0x100 [ 1411.840523][T21554] __kmalloc_noprof+0xe8/0x760 [ 1411.840547][T21554] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1411.840585][T21554] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1411.840626][T21554] ? tomoyo_path_number_perm+0x219/0x630 [ 1411.840654][T21554] tomoyo_path_number_perm+0x246/0x630 [ 1411.840684][T21554] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1411.840715][T21554] ? __lock_acquire+0x6b5/0x2cf0 [ 1411.840778][T21554] ? __fget_files+0x2a/0x420 [ 1411.840814][T21554] ? __fget_files+0x3a0/0x420 [ 1411.840842][T21554] ? __fget_files+0x2a/0x420 [ 1411.840877][T21554] security_file_ioctl_compat+0xc3/0x2a0 [ 1411.840907][T21554] __ia32_compat_sys_ioctl+0x139/0x950 [ 1411.840938][T21554] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1411.840969][T21554] ? __fget_files+0x3a0/0x420 [ 1411.841006][T21554] ? fput+0xa0/0xd0 [ 1411.841038][T21554] ? ksys_write+0x242/0x270 [ 1411.841073][T21554] __do_fast_syscall_32+0x20d/0x640 [ 1411.841102][T21554] ? do_fast_syscall_32+0x33/0x70 [ 1411.841126][T21554] ? asm_int80_emulation+0x1a/0x20 [ 1411.841147][T21554] ? do_int80_emulation+0x274/0x4d0 [ 1411.841170][T21554] ? trace_irq_disable+0x3b/0x150 [ 1411.841206][T21554] do_fast_syscall_32+0x33/0x70 [ 1411.841231][T21554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1411.841257][T21554] RIP: 0023:0xf70bef6c [ 1411.841278][T21554] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1411.841296][T21554] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1411.841319][T21554] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080045503 [ 1411.841333][T21554] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 1411.841353][T21554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1411.841365][T21554] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1411.841378][T21554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1411.841409][T21554] [ 1411.894700][ T1209] usb usb3-port1: unable to enumerate USB device [ 1411.939493][T21554] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1412.110731][T21554] usb usb8: usbfs: process 21554 (syz.5.4184) did not claim interface 0 before use [ 1412.219760][T21559] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 1412.226355][T21559] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1412.245455][T21558] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1412.252037][T21558] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1412.285362][T21558] vhci_hcd vhci_hcd.0: Device attached [ 1412.292478][T21564] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(9) [ 1412.299039][T21564] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1412.306981][T21559] vhci_hcd vhci_hcd.0: Device attached [ 1412.336146][T13710] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1412.344390][T13710] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 1412.363385][T13710] pac7311 7-1:2.200: probe with driver pac7311 failed with error -71 [ 1412.391553][T13710] usb 7-1: USB disconnect, device number 50 [ 1412.420914][T21564] vhci_hcd vhci_hcd.0: Device attached [ 1412.472158][T13741] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1412.510166][T21569] __nla_validate_parse: 3 callbacks suppressed [ 1412.510188][T21569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4186'. [ 1412.528966][T21569] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4186'. [ 1412.538464][T21569] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4186'. [ 1412.550620][T13741] usb 43-1: new full-speed USB device number 5 using vhci_hcd [ 1412.672770][T21565] vhci_hcd: connection closed [ 1412.673016][T21561] vhci_hcd: connection closed [ 1412.673730][T21560] vhci_hcd: connection reset by peer [ 1412.693323][ T59] vhci_hcd vhci_hcd.5: stop threads [ 1412.698589][ T59] vhci_hcd vhci_hcd.5: release socket [ 1412.732036][ T59] vhci_hcd vhci_hcd.5: disconnect device [ 1412.751379][ T59] vhci_hcd vhci_hcd.5: stop threads [ 1412.756647][ T59] vhci_hcd vhci_hcd.5: release socket [ 1412.780177][ T59] vhci_hcd vhci_hcd.5: disconnect device [ 1412.795916][ T59] vhci_hcd vhci_hcd.5: stop threads [ 1412.801813][ T59] vhci_hcd vhci_hcd.5: release socket [ 1412.807468][ T59] vhci_hcd vhci_hcd.5: disconnect device [ 1412.957974][T21576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4187'. [ 1413.128150][T21583] random: crng reseeded on system resumption [ 1413.379626][T21580] netlink: 'syz.5.4190': attribute type 10 has an invalid length. [ 1413.398602][T21580] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4190'. [ 1413.436125][T21580] batadv0: entered promiscuous mode [ 1413.462496][T21580] batadv0: entered allmulticast mode [ 1413.482932][T21580] bridge0: port 3(batadv0) entered blocking state [ 1413.513469][T21580] bridge0: port 3(batadv0) entered disabled state [ 1413.543773][T21580] bridge0: port 3(batadv0) entered blocking state [ 1413.550493][T21580] bridge0: port 3(batadv0) entered forwarding state [ 1413.872180][T12721] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1413.881780][T12721] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1414.311229][T13710] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1414.540694][T13710] usb 3-1: Using ep0 maxpacket: 32 [ 1414.547931][T13710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1414.560071][T13710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1414.601740][T13710] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1414.620333][T13710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.629564][T21608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4198'. [ 1414.653774][T13710] usb 3-1: config 0 descriptor?? [ 1414.672244][T21604] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4198'. [ 1414.700835][T21604] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4198'. [ 1414.730663][T13714] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1414.844666][T21610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4200'. [ 1414.880788][T13714] usb 6-1: Using ep0 maxpacket: 16 [ 1414.893654][T13714] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1414.918390][T21611] netlink: 'syz.2.4196': attribute type 1 has an invalid length. [ 1414.926354][T13714] usb 6-1: config 2 has an invalid interface number: 200 but max is 0 [ 1414.955734][T13714] usb 6-1: config 2 has no interface number 0 [ 1414.980689][T13714] usb 6-1: config 2 interface 200 has no altsetting 0 [ 1415.013476][T13714] usb 6-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=43.53 [ 1415.025762][T13714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.034176][T13714] usb 6-1: Product: syz [ 1415.039442][T13714] usb 6-1: Manufacturer: syz [ 1415.044390][T13714] usb 6-1: SerialNumber: syz [ 1415.195275][T13710] savu 0003:1E7D:2D5A.0022: unknown main item tag 0x0 [ 1415.218219][T13710] savu 0003:1E7D:2D5A.0022: unknown main item tag 0x0 [ 1415.235667][T13710] savu 0003:1E7D:2D5A.0022: unknown main item tag 0x0 [ 1415.253071][T13710] savu 0003:1E7D:2D5A.0022: unknown main item tag 0x0 [ 1415.291656][T13710] savu 0003:1E7D:2D5A.0022: unknown main item tag 0x0 [ 1415.319564][T13710] savu 0003:1E7D:2D5A.0022: unbalanced collection at end of report description [ 1415.339798][T13710] savu 0003:1E7D:2D5A.0022: parse failed [ 1415.360351][T13710] savu 0003:1E7D:2D5A.0022: probe with driver savu failed with error -22 [ 1415.410754][T13710] usb 3-1: USB disconnect, device number 82 [ 1415.557459][T13714] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1415.574566][T13714] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 1415.595559][T13714] pac7311 6-1:2.200: probe with driver pac7311 failed with error -71 [ 1415.622213][T13714] usb 6-1: USB disconnect, device number 77 [ 1415.791398][T21630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4207'. [ 1415.872327][T21636] random: crng reseeded on system resumption [ 1416.272316][T21645] input: syz1 as /devices/virtual/input/input86 [ 1417.116522][T21654] bond15: (slave geneve2): Enslaving as an active interface with an up link [ 1417.125415][T21650] random: crng reseeded on system resumption [ 1417.261749][T21657] bond15 (unregistering): (slave geneve2): Releasing backup interface [ 1417.381585][T21657] bond15 (unregistering): Released all slaves [ 1417.691415][T13741] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1417.729022][T21665] __nla_validate_parse: 3 callbacks suppressed [ 1417.729045][T21665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4216'. [ 1418.327975][T21674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4220'. [ 1418.863358][T21694] random: crng reseeded on system resumption [ 1420.062869][T21701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4228'. [ 1420.377027][T21713] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4232'. [ 1420.511913][T21716] FAULT_INJECTION: forcing a failure. [ 1420.511913][T21716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1420.561281][T21716] CPU: 0 UID: 0 PID: 21716 Comm: syz.5.4233 Tainted: G L syzkaller #0 PREEMPT(full) [ 1420.561315][T21716] Tainted: [L]=SOFTLOCKUP [ 1420.561323][T21716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1420.561337][T21716] Call Trace: [ 1420.561345][T21716] [ 1420.561354][T21716] dump_stack_lvl+0xe8/0x150 [ 1420.561388][T21716] should_fail_ex+0x412/0x560 [ 1420.561424][T21716] _copy_from_user+0x2d/0xb0 [ 1420.561449][T21716] get_compat_msghdr+0xb3/0x4c0 [ 1420.561473][T21716] ? __lock_acquire+0x6b5/0x2cf0 [ 1420.561505][T21716] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1420.561529][T21716] ? kstrtoull+0x12f/0x1d0 [ 1420.561565][T21716] ___sys_sendmsg+0x201/0x360 [ 1420.561597][T21716] ? __pfx____sys_sendmsg+0x10/0x10 [ 1420.561632][T21716] ? get_pid_task+0x20/0x1f0 [ 1420.561652][T21716] ? get_pid_task+0x20/0x1f0 [ 1420.561670][T21716] ? get_pid_task+0x20/0x1f0 [ 1420.561716][T21716] ? __fget_files+0x2a/0x420 [ 1420.561747][T21716] ? __fget_files+0x3a0/0x420 [ 1420.561788][T21716] __sys_sendmsg+0x183/0x260 [ 1420.561815][T21716] ? __pfx___sys_sendmsg+0x10/0x10 [ 1420.561862][T21716] __do_fast_syscall_32+0x20d/0x640 [ 1420.561889][T21716] ? do_fast_syscall_32+0x33/0x70 [ 1420.561913][T21716] ? asm_int80_emulation+0x1a/0x20 [ 1420.561933][T21716] ? do_int80_emulation+0x274/0x4d0 [ 1420.561956][T21716] ? trace_irq_disable+0x3b/0x150 [ 1420.561991][T21716] do_fast_syscall_32+0x33/0x70 [ 1420.562016][T21716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1420.562042][T21716] RIP: 0023:0xf70bef6c [ 1420.562061][T21716] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1420.562078][T21716] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1420.562101][T21716] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1420.562116][T21716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1420.562128][T21716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1420.562139][T21716] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1420.562151][T21716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1420.562181][T21716] [ 1420.972268][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1420.972284][ T30] audit: type=1800 audit(1773480327.651:5448): pid=21723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4234" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1421.089889][T21729] loop6: detected capacity change from 0 to 524287487 [ 1421.098837][T21729] buffer_io_error: 7 callbacks suppressed [ 1421.098851][T21729] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.115435][T21729] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.131972][T21729] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.146505][T21729] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.164264][T13724] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1421.235394][T21729] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.254607][T21729] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.268875][T21729] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.279367][T21729] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.290243][T21729] ldm_validate_partition_table(): Disk read failed. [ 1421.298413][T21729] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.309890][T21729] Buffer I/O error on dev loop6, logical block 0, async page read [ 1421.320383][T21729] Dev loop6: unable to read RDB block 0 [ 1421.329104][T21729] loop6: unable to read partition table [ 1421.336347][T21729] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1421.352433][T13724] usb 5-1: Using ep0 maxpacket: 32 [ 1421.368417][T13724] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1421.390265][T13724] usb 5-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 1421.399776][T13724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.418847][T13724] usb 5-1: Product: syz [ 1421.429061][T13724] usb 5-1: Manufacturer: syz [ 1421.446723][T13724] usb 5-1: SerialNumber: syz [ 1421.684462][T13724] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1421.921369][T13724] usb 5-1: USB disconnect, device number 60 [ 1422.290185][T21744] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4240'. [ 1422.299623][T21744] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4240'. [ 1422.478137][ T6545] udevd[6545]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1422.541767][T21744] xt_bpf: check failed: parse error [ 1423.258049][T21748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4241'. [ 1423.463930][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.471364][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.694795][T21756] random: crng reseeded on system resumption [ 1423.860092][T21759] FAULT_INJECTION: forcing a failure. [ 1423.860092][T21759] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.884222][ T1209] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1423.905935][T21759] CPU: 1 UID: 0 PID: 21759 Comm: syz.6.4244 Tainted: G L syzkaller #0 PREEMPT(full) [ 1423.905967][T21759] Tainted: [L]=SOFTLOCKUP [ 1423.905975][T21759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1423.905989][T21759] Call Trace: [ 1423.906799][T21759] [ 1423.906809][T21759] dump_stack_lvl+0xe8/0x150 [ 1423.906846][T21759] should_fail_ex+0x412/0x560 [ 1423.906883][T21759] should_failslab+0xa8/0x100 [ 1423.906912][T21759] __kmalloc_noprof+0xe8/0x760 [ 1423.906938][T21759] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1423.906977][T21759] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1423.907018][T21759] ? tomoyo_path_number_perm+0x219/0x630 [ 1423.907038][T21759] tomoyo_path_number_perm+0x246/0x630 [ 1423.907060][T21759] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1423.907083][T21759] ? __lock_acquire+0x6b5/0x2cf0 [ 1423.907127][T21759] ? __fget_files+0x2a/0x420 [ 1423.907153][T21759] ? __fget_files+0x3a0/0x420 [ 1423.907174][T21759] ? __fget_files+0x2a/0x420 [ 1423.907230][T21759] security_file_ioctl_compat+0xc3/0x2a0 [ 1423.907252][T21759] __ia32_compat_sys_ioctl+0x139/0x950 [ 1423.907273][T21759] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1423.907294][T21759] ? __fget_files+0x3a0/0x420 [ 1423.907333][T21759] ? fput+0xa0/0xd0 [ 1423.907355][T21759] ? ksys_write+0x242/0x270 [ 1423.907379][T21759] __do_fast_syscall_32+0x20d/0x640 [ 1423.907399][T21759] ? do_fast_syscall_32+0x33/0x70 [ 1423.907415][T21759] ? asm_int80_emulation+0x1a/0x20 [ 1423.907429][T21759] ? do_int80_emulation+0x274/0x4d0 [ 1423.907448][T21759] ? trace_irq_disable+0x3b/0x150 [ 1423.907473][T21759] do_fast_syscall_32+0x33/0x70 [ 1423.907490][T21759] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1423.907509][T21759] RIP: 0023:0xf700ef6c [ 1423.907523][T21759] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1423.907536][T21759] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1423.907552][T21759] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0505350 [ 1423.907562][T21759] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 1423.907571][T21759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1423.907580][T21759] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1423.907589][T21759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1423.907633][T21759] [ 1423.909246][T21759] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1424.203758][T21761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4245'. [ 1424.220765][ T1209] usb 1-1: device descriptor read/64, error -71 [ 1424.460711][ T1209] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1424.613836][ T1209] usb 1-1: device descriptor read/64, error -71 [ 1424.747780][ T1209] usb usb1-port1: attempt power cycle [ 1424.931329][T15427] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1425.090665][ T1209] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1425.100685][T15427] usb 7-1: Using ep0 maxpacket: 16 [ 1425.119672][T15427] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1425.131529][ T1209] usb 1-1: device descriptor read/8, error -71 [ 1425.139056][T15427] usb 7-1: config 2 has an invalid interface number: 200 but max is 0 [ 1425.156488][T15427] usb 7-1: config 2 has no interface number 0 [ 1425.165527][T21771] geneve2: entered promiscuous mode [ 1425.178706][T15427] usb 7-1: config 2 interface 200 has no altsetting 0 [ 1425.189176][T21771] geneve2: entered allmulticast mode [ 1425.207082][T15427] usb 7-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=43.53 [ 1425.229834][T15427] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.238625][T15427] usb 7-1: Product: syz [ 1425.247754][T15427] usb 7-1: Manufacturer: syz [ 1425.255592][T15427] usb 7-1: SerialNumber: syz [ 1425.267103][T21776] loop6: detected capacity change from 0 to 524287487 [ 1425.274473][T21776] ldm_validate_partition_table(): Disk read failed. [ 1425.284880][T21776] Dev loop6: unable to read RDB block 0 [ 1425.317375][T21776] loop6: unable to read partition table [ 1425.341010][T21776] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1425.380673][ T1209] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1425.412399][ T1209] usb 1-1: device descriptor read/8, error -71 [ 1425.523074][ T1209] usb usb1-port1: unable to enumerate USB device [ 1425.570095][T21782] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4251'. [ 1425.587427][T21782] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4251'. [ 1425.713668][T21782] xt_bpf: check failed: parse error [ 1425.772768][T15427] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1425.791258][T15427] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 1425.960272][T15427] pac7311 7-1:2.200: probe with driver pac7311 failed with error -71 [ 1425.994940][T15427] usb 7-1: USB disconnect, device number 51 [ 1426.652430][T21788] binder: 21787:21788 ioctl c0306201 0 returned -14 [ 1427.316119][T21792] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1427.541235][T21801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4257'. [ 1427.928145][T21809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4259'. [ 1428.284279][T21816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4261'. [ 1428.293493][T21816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4261'. [ 1428.345108][T21819] xt_bpf: check failed: parse error [ 1428.571802][T21820] loop6: detected capacity change from 0 to 524287487 [ 1428.589878][T21820] buffer_io_error: 24 callbacks suppressed [ 1428.589897][T21820] Buffer I/O error on dev loop6, logical block 0, async page read [ 1428.610735][T21820] Buffer I/O error on dev loop6, logical block 0, async page read [ 1428.621552][T21820] Buffer I/O error on dev loop6, logical block 0, async page read [ 1428.675661][T21820] Buffer I/O error on dev loop6, logical block 0, async page read [ 1428.770720][T21820] Buffer I/O error on dev loop6, logical block 0, async page read [ 1428.814694][T21820] Buffer I/O error on dev loop6, logical block 0, async page read [ 1428.841243][T21820] Buffer I/O error on dev loop6, logical block 0, async page read [ 1428.855776][T21820] Buffer I/O error on dev loop6, logical block 0, async page read [ 1428.866242][T21820] ldm_validate_partition_table(): Disk read failed. [ 1428.890462][T21820] Buffer I/O error on dev loop6, logical block 0, async page read [ 1428.938367][T21820] Buffer I/O error on dev loop6, logical block 0, async page read [ 1428.953756][T21820] Dev loop6: unable to read RDB block 0 [ 1429.080841][T21820] loop6: unable to read partition table [ 1429.089151][T21827] input: syz1 as /devices/virtual/input/input87 [ 1429.151022][T21820] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1429.284904][ T5194] ldm_validate_partition_table(): Disk read failed. [ 1429.358823][ T5194] Dev loop6: unable to read RDB block 0 [ 1429.395167][ T5194] loop6: unable to read partition table [ 1429.817112][T21834] input: syz1 as /devices/virtual/input/input88 [ 1429.885271][T21833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4265'. [ 1429.967792][T21833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4265'. [ 1430.211781][T21842] syzkaller0: entered promiscuous mode [ 1430.217424][T21842] syzkaller0: entered allmulticast mode [ 1430.245016][T21846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4269'. [ 1430.270919][T13710] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1430.430748][T13710] usb 7-1: Using ep0 maxpacket: 8 [ 1430.441056][T13710] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1430.463326][T13710] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 1430.478881][T21853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4273'. [ 1430.480698][T13710] usb 7-1: config 0 has no interface number 0 [ 1430.510662][T13710] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1430.540664][T13710] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1430.560702][T13710] usb 7-1: config 0 interface 88 has no altsetting 0 [ 1430.579254][T13710] usb 7-1: string descriptor 0 read error: -22 [ 1430.590731][T13710] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1430.599911][T13710] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1430.621841][T21856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4271'. [ 1430.633684][T13710] usb 7-1: config 0 descriptor?? [ 1430.663109][T13710] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input89 [ 1430.838177][T14980] udevd[14980]: Error opening device "/dev/input/event4": Input/output error [ 1430.847453][T14980] udevd[14980]: Unable to EVIOCGABS device "/dev/input/event4" [ 1430.855932][T14980] udevd[14980]: Unable to EVIOCGABS device "/dev/input/event4" [ 1430.883378][T13710] usb 7-1: USB disconnect, device number 52 [ 1431.059849][T21862] random: crng reseeded on system resumption [ 1432.041865][T21868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4276'. [ 1432.240240][T21877] input: syz1 as /devices/virtual/input/input90 [ 1432.276979][T21877] binder: BINDER_SET_CONTEXT_MGR already set [ 1432.287867][T21877] binder: 21872:21877 ioctl 4018620d 80004a80 returned -16 [ 1433.174690][T21883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4281'. [ 1433.434335][T21891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4280'. [ 1433.444498][T21891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4280'. [ 1433.782827][T21891] xt_bpf: check failed: parse error [ 1433.856058][T21898] FAULT_INJECTION: forcing a failure. [ 1433.856058][T21898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1433.985339][T21898] CPU: 1 UID: 0 PID: 21898 Comm: syz.0.4285 Tainted: G L syzkaller #0 PREEMPT(full) [ 1433.985378][T21898] Tainted: [L]=SOFTLOCKUP [ 1433.985386][T21898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1433.985407][T21898] Call Trace: [ 1433.985416][T21898] [ 1433.985426][T21898] dump_stack_lvl+0xe8/0x150 [ 1433.985465][T21898] should_fail_ex+0x412/0x560 [ 1433.985503][T21898] _copy_from_user+0x2d/0xb0 [ 1433.985529][T21898] get_compat_msghdr+0xb3/0x4c0 [ 1433.985551][T21898] ? __lock_acquire+0x6b5/0x2cf0 [ 1433.985586][T21898] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1433.985621][T21898] ___sys_recvmsg+0x1dd/0x590 [ 1433.985651][T21898] ? __lock_acquire+0x6b5/0x2cf0 [ 1433.985679][T21898] ? __pfx____sys_recvmsg+0x10/0x10 [ 1433.985727][T21898] ? __fget_files+0x3a0/0x420 [ 1433.985770][T21898] do_recvmmsg+0x3a5/0x800 [ 1433.985804][T21898] ? __pfx_do_recvmmsg+0x10/0x10 [ 1433.985843][T21898] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1433.985876][T21898] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1433.985909][T21898] __sys_recvmmsg+0x1a5/0x290 [ 1433.985937][T21898] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1433.985964][T21898] ? ksys_write+0x242/0x270 [ 1433.985996][T21898] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1433.986024][T21898] __do_fast_syscall_32+0x20d/0x640 [ 1433.986051][T21898] ? do_fast_syscall_32+0x33/0x70 [ 1433.986075][T21898] ? asm_int80_emulation+0x1a/0x20 [ 1433.986095][T21898] ? do_int80_emulation+0x274/0x4d0 [ 1433.986118][T21898] ? trace_irq_disable+0x3b/0x150 [ 1433.986153][T21898] do_fast_syscall_32+0x33/0x70 [ 1433.986178][T21898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1433.986203][T21898] RIP: 0023:0xf7f22f6c [ 1433.986224][T21898] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1433.986242][T21898] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1433.986265][T21898] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f40 [ 1433.986279][T21898] RDX: 0000000000000001 RSI: 0000000000010162 RDI: 0000000000000000 [ 1433.986293][T21898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1433.986306][T21898] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1433.986318][T21898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1433.986347][T21898] [ 1434.971286][T21905] FAULT_INJECTION: forcing a failure. [ 1434.971286][T21905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1435.012100][T21905] CPU: 1 UID: 0 PID: 21905 Comm: syz.0.4288 Tainted: G L syzkaller #0 PREEMPT(full) [ 1435.012142][T21905] Tainted: [L]=SOFTLOCKUP [ 1435.012148][T21905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1435.012158][T21905] Call Trace: [ 1435.012167][T21905] [ 1435.012174][T21905] dump_stack_lvl+0xe8/0x150 [ 1435.012202][T21905] should_fail_ex+0x412/0x560 [ 1435.012230][T21905] _copy_to_user+0x31/0xb0 [ 1435.012249][T21905] simple_read_from_buffer+0xe1/0x170 [ 1435.012277][T21905] proc_fail_nth_read+0x1bb/0x230 [ 1435.012304][T21905] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1435.012329][T21905] ? rw_verify_area+0x2a6/0x4d0 [ 1435.012345][T21905] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1435.012368][T21905] vfs_read+0x20c/0xa70 [ 1435.012383][T21905] ? fdget_pos+0x246/0x320 [ 1435.012409][T21905] ? __pfx___mutex_lock+0x10/0x10 [ 1435.012429][T21905] ? __pfx_vfs_read+0x10/0x10 [ 1435.012446][T21905] ? __fget_files+0x2a/0x420 [ 1435.012471][T21905] ? __fget_files+0x3a0/0x420 [ 1435.012492][T21905] ? __fget_files+0x2a/0x420 [ 1435.012520][T21905] ksys_read+0x150/0x270 [ 1435.012538][T21905] ? __pfx_ksys_read+0x10/0x10 [ 1435.012563][T21905] ? asm_int80_emulation+0x1a/0x20 [ 1435.012582][T21905] do_int80_emulation+0x173/0x4d0 [ 1435.012601][T21905] ? trace_irq_disable+0x3b/0x150 [ 1435.012624][T21905] ? asm_int80_emulation+0x1a/0x20 [ 1435.012638][T21905] ? clear_bhb_loop+0x40/0x90 [ 1435.012654][T21905] ? clear_bhb_loop+0x40/0x90 [ 1435.012672][T21905] asm_int80_emulation+0x1a/0x20 [ 1435.012687][T21905] RIP: 0023:0xf7125cab [ 1435.012702][T21905] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1435.012714][T21905] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1435.012731][T21905] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0 [ 1435.012742][T21905] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1435.012750][T21905] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1435.012759][T21905] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1435.012768][T21905] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1435.012789][T21905] [ 1435.715658][T21911] syzkaller1: entered promiscuous mode [ 1435.722972][T21911] syzkaller1: entered allmulticast mode [ 1436.411650][T21920] input: syz1 as /devices/virtual/input/input91 [ 1436.451029][T21920] binder: BINDER_SET_CONTEXT_MGR already set [ 1436.473560][T21920] binder: 21916:21920 ioctl 4018620d 80004a80 returned -16 [ 1436.742519][T21928] sctp: [Deprecated]: syz.0.4295 (pid 21928) Use of int in maxseg socket option. [ 1436.742519][T21928] Use struct sctp_assoc_value instead [ 1437.025955][T21935] FAULT_INJECTION: forcing a failure. [ 1437.025955][T21935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1437.062562][T21935] CPU: 1 UID: 0 PID: 21935 Comm: syz.0.4297 Tainted: G L syzkaller #0 PREEMPT(full) [ 1437.062600][T21935] Tainted: [L]=SOFTLOCKUP [ 1437.062609][T21935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1437.062623][T21935] Call Trace: [ 1437.062632][T21935] [ 1437.062642][T21935] dump_stack_lvl+0xe8/0x150 [ 1437.062680][T21935] should_fail_ex+0x412/0x560 [ 1437.062718][T21935] _copy_from_user+0x2d/0xb0 [ 1437.062743][T21935] do_sys_poll+0x2a9/0x1120 [ 1437.062790][T21935] ? __pfx_do_sys_poll+0x10/0x10 [ 1437.062821][T21935] ? __lock_acquire+0x6b5/0x2cf0 [ 1437.062853][T21935] ? is_bpf_text_address+0x26/0x2b0 [ 1437.062926][T21935] ? get_pid_task+0x20/0x1f0 [ 1437.062943][T21935] ? get_pid_task+0x20/0x1f0 [ 1437.062991][T21935] ? __pfx_vfs_write+0x10/0x10 [ 1437.063015][T21935] ? set_compat_user_sigmask+0xc7/0x1c0 [ 1437.063044][T21935] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 1437.063072][T21935] ? kmem_cache_free+0x187/0x630 [ 1437.063102][T21935] __ia32_compat_sys_ppoll_time32+0x2aa/0x320 [ 1437.063139][T21935] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 1437.063166][T21935] ? ksys_write+0x1fc/0x270 [ 1437.063198][T21935] __do_fast_syscall_32+0x20d/0x640 [ 1437.063225][T21935] ? do_fast_syscall_32+0x33/0x70 [ 1437.063256][T21935] ? asm_int80_emulation+0x1a/0x20 [ 1437.063277][T21935] ? do_int80_emulation+0x274/0x4d0 [ 1437.063299][T21935] ? trace_irq_disable+0x3b/0x150 [ 1437.063333][T21935] do_fast_syscall_32+0x33/0x70 [ 1437.063357][T21935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1437.063382][T21935] RIP: 0023:0xf7f22f6c [ 1437.063402][T21935] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1437.063421][T21935] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 1437.063445][T21935] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 0000000000000001 [ 1437.063459][T21935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1437.063472][T21935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1437.063484][T21935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1437.063498][T21935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1437.063526][T21935] [ 1437.642752][T21945] xt_bpf: check failed: parse error [ 1438.868832][T21955] FAULT_INJECTION: forcing a failure. [ 1438.868832][T21955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1438.943984][T21955] CPU: 1 UID: 0 PID: 21955 Comm: syz.6.4304 Tainted: G L syzkaller #0 PREEMPT(full) [ 1438.944029][T21955] Tainted: [L]=SOFTLOCKUP [ 1438.944037][T21955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1438.944051][T21955] Call Trace: [ 1438.944060][T21955] [ 1438.944070][T21955] dump_stack_lvl+0xe8/0x150 [ 1438.944107][T21955] should_fail_ex+0x412/0x560 [ 1438.944144][T21955] _copy_from_user+0x2d/0xb0 [ 1438.944169][T21955] get_compat_msghdr+0xb3/0x4c0 [ 1438.944194][T21955] ? __lock_acquire+0x6b5/0x2cf0 [ 1438.944226][T21955] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1438.944250][T21955] ? kstrtoull+0x12f/0x1d0 [ 1438.944286][T21955] ___sys_sendmsg+0x201/0x360 [ 1438.944319][T21955] ? __pfx____sys_sendmsg+0x10/0x10 [ 1438.944345][T21955] ? get_pid_task+0x20/0x1f0 [ 1438.944366][T21955] ? get_pid_task+0x20/0x1f0 [ 1438.944383][T21955] ? get_pid_task+0x20/0x1f0 [ 1438.944429][T21955] ? __fget_files+0x2a/0x420 [ 1438.944460][T21955] ? __fget_files+0x3a0/0x420 [ 1438.944499][T21955] __sys_sendmsg+0x183/0x260 [ 1438.944526][T21955] ? __pfx___sys_sendmsg+0x10/0x10 [ 1438.944572][T21955] __do_fast_syscall_32+0x20d/0x640 [ 1438.944600][T21955] ? do_fast_syscall_32+0x33/0x70 [ 1438.944622][T21955] ? asm_int80_emulation+0x1a/0x20 [ 1438.944643][T21955] ? do_int80_emulation+0x274/0x4d0 [ 1438.944666][T21955] ? trace_irq_disable+0x3b/0x150 [ 1438.944701][T21955] do_fast_syscall_32+0x33/0x70 [ 1438.944726][T21955] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1438.944751][T21955] RIP: 0023:0xf700ef6c [ 1438.944771][T21955] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1438.944789][T21955] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1438.944812][T21955] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 1438.944827][T21955] RDX: 0000000000000850 RSI: 0000000000000000 RDI: 0000000000000000 [ 1438.944862][T21955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1438.944875][T21955] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1438.944887][T21955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1438.944918][T21955] [ 1439.715913][T21970] random: crng reseeded on system resumption [ 1440.008620][T15427] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1440.214920][T15427] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1440.234176][T15427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.268548][T21967] syzkaller1: entered promiscuous mode [ 1440.280610][T15427] usb 3-1: Product: syz [ 1440.295094][T21967] syzkaller1: entered allmulticast mode [ 1440.301268][T15427] usb 3-1: Manufacturer: syz [ 1440.310475][T15427] usb 3-1: SerialNumber: syz [ 1440.499936][T21976] input: syz1 as /devices/virtual/input/input92 [ 1440.831963][T15427] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1440.849714][T15427] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1440.894518][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 1441.416962][T21990] input: syz1 as /devices/virtual/input/input93 [ 1441.464057][T21990] binder: BINDER_SET_CONTEXT_MGR already set [ 1441.470147][T21990] binder: 21987:21990 ioctl 4018620d 80004a80 returned -16 [ 1441.750903][ T1209] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1441.900710][ T1209] usb 6-1: Using ep0 maxpacket: 32 [ 1441.909153][ T1209] usb 6-1: no configurations [ 1441.919460][ T1209] usb 6-1: can't read configurations, error -22 [ 1442.060862][ T1209] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1442.099779][T15427] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1442.223730][ T1209] usb 6-1: Using ep0 maxpacket: 32 [ 1442.240020][ T1209] usb 6-1: no configurations [ 1442.249426][ T1209] usb 6-1: can't read configurations, error -22 [ 1442.256125][T13741] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1442.276768][ T1209] usb usb6-port1: attempt power cycle [ 1442.304376][T22001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4314'. [ 1442.313800][T22001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4314'. [ 1442.402109][T13741] usb 1-1: device descriptor read/64, error -71 [ 1442.620734][ T1209] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1442.642280][T22009] xt_bpf: check failed: parse error [ 1442.771139][T13741] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1442.781296][ T1209] usb 6-1: Using ep0 maxpacket: 32 [ 1442.787987][ T1209] usb 6-1: no configurations [ 1442.792907][ T1209] usb 6-1: can't read configurations, error -22 [ 1442.820742][T15426] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1442.920728][ T1209] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1442.920745][T13741] usb 1-1: device descriptor read/64, error -71 [ 1442.951405][ T1209] usb 6-1: Using ep0 maxpacket: 32 [ 1442.961665][ T1209] usb 6-1: no configurations [ 1442.966307][ T1209] usb 6-1: can't read configurations, error -22 [ 1442.973338][ T1209] usb usb6-port1: unable to enumerate USB device [ 1442.998180][T15426] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1443.014613][T15426] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1443.030889][T13741] usb usb1-port1: attempt power cycle [ 1443.038599][T15426] usb 5-1: Product: syz [ 1443.048676][T15426] usb 5-1: Manufacturer: syz [ 1443.058181][T15426] usb 5-1: SerialNumber: syz [ 1443.071470][T15426] usb 5-1: config 0 descriptor?? [ 1443.289879][T22005] input: syz1 as /devices/virtual/input/input94 [ 1443.332893][T15426] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v12 fw v150.252.101 (1 channels) [ 1443.401826][T13741] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1443.421207][T13741] usb 1-1: device descriptor read/8, error -71 [ 1443.533578][T15426] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 1443.542470][T15426] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 1443.549400][T15426] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 1443.563177][T22012] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4318'. [ 1443.612705][T15426] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 1443.660803][T13741] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1443.692127][T13741] usb 1-1: device descriptor read/8, error -71 [ 1443.787316][T13724] usb 5-1: USB disconnect, device number 61 [ 1443.802659][T13741] usb usb1-port1: unable to enumerate USB device [ 1443.867132][T15427] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -EPROTO [ 1443.887391][T15427] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1443.902637][T15427] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1443.923126][T15427] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1443.967893][T22019] xt_bpf: check failed: parse error [ 1444.023060][T15427] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1444.040235][T15427] usb 3-1: USB disconnect, device number 83 [ 1444.124293][T22022] syzkaller1: entered promiscuous mode [ 1444.130063][T22022] syzkaller1: entered allmulticast mode [ 1446.164269][T22045] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4329'. [ 1446.350630][T22048] random: crng reseeded on system resumption [ 1446.770684][T15427] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 1446.934372][T15427] usb 7-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1446.952020][T15427] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1446.985858][T15427] usb 7-1: Product: syz [ 1447.040768][T15427] usb 7-1: Manufacturer: syz [ 1447.050759][T15427] usb 7-1: SerialNumber: syz [ 1447.071241][T15427] usb 7-1: config 0 descriptor?? [ 1447.316396][T22050] input: syz1 as /devices/virtual/input/input96 [ 1447.371752][T14980] udevd[14980]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 1447.426011][T15427] peak_usb 7-1:0.0: PEAK-System PCAN-Chip USB v12 fw v150.252.101 (1 channels) [ 1447.603352][T22060] xt_bpf: check failed: parse error [ 1447.860656][T15427] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1447.880142][T15427] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1447.908601][T15427] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1448.191256][T15427] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 1448.211478][T15427] usb 7-1: USB disconnect, device number 53 [ 1448.385263][T22068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4336'. [ 1448.760639][T13714] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 1448.843439][ T30] audit: type=1326 audit(1773480355.541:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22075 comm="syz.6.4337" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x0 [ 1448.925433][ T30] audit: type=1326 audit(1773480355.621:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22077 comm="syz.4.4339" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x0 [ 1448.955036][T13714] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1448.965873][T13714] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1448.976219][T13714] usb 6-1: Product: syz [ 1448.980741][T13714] usb 6-1: Manufacturer: syz [ 1448.986142][T13714] usb 6-1: SerialNumber: syz [ 1449.001750][T13714] usb 6-1: config 0 descriptor?? [ 1449.260944][T22069] input: syz1 as /devices/virtual/input/input98 [ 1449.348655][T13714] peak_usb 6-1:0.0: PEAK-System PCAN-Chip USB v12 fw v150.252.101 (1 channels) [ 1449.473267][T22091] random: crng reseeded on system resumption [ 1449.597253][T13714] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1449.621473][T13714] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1449.630649][T13724] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1449.658814][T13714] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1449.721728][T13714] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 1449.824511][T13724] usb 3-1: Using ep0 maxpacket: 16 [ 1449.832045][T13714] usb 6-1: USB disconnect, device number 82 [ 1449.852773][T13724] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1449.863805][T13724] usb 3-1: config 2 has an invalid interface number: 200 but max is 0 [ 1449.900818][T13724] usb 3-1: config 2 has no interface number 0 [ 1449.907395][T13724] usb 3-1: config 2 interface 200 has no altsetting 0 [ 1449.952268][T13724] usb 3-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=43.53 [ 1450.100579][T13724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.142550][T13724] usb 3-1: Product: syz [ 1450.153313][T13724] usb 3-1: Manufacturer: syz [ 1450.167275][T13724] usb 3-1: SerialNumber: syz [ 1450.472532][ T30] audit: type=1326 audit(1773480357.161:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22095 comm="syz.0.4344" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f22f6c code=0x0 [ 1450.629307][T22103] random: crng reseeded on system resumption [ 1450.912542][T13724] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1450.919839][T13724] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 1450.928171][T13724] pac7311 3-1:2.200: probe with driver pac7311 failed with error -71 [ 1450.955629][T13724] usb 3-1: USB disconnect, device number 84 [ 1451.200644][T15427] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1451.350677][T15427] usb 7-1: Using ep0 maxpacket: 32 [ 1451.350955][T13724] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1451.378447][T15427] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.400743][T15427] usb 7-1: config 0 has no interfaces? [ 1451.412642][T15427] usb 7-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1451.430088][T15427] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.457263][T15427] usb 7-1: Product: syz [ 1451.461675][T15427] usb 7-1: Manufacturer: syz [ 1451.466349][T15427] usb 7-1: SerialNumber: syz [ 1451.483979][T15427] usb 7-1: config 0 descriptor?? [ 1451.537845][T13724] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1451.558015][T22117] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4350'. [ 1451.570712][T13724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.581984][T13724] usb 5-1: config 0 descriptor?? [ 1451.596693][T13724] cp210x 5-1:0.0: cp210x converter detected [ 1451.692286][T22125] xt_bpf: check failed: parse error [ 1451.721914][T13710] usb 7-1: USB disconnect, device number 54 [ 1452.258495][T22109] bridge0: entered allmulticast mode [ 1452.276991][T13724] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1452.593241][T15427] usb 5-1: USB disconnect, device number 62 [ 1452.610184][T15427] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1452.658526][T15427] cp210x 5-1:0.0: device disconnected [ 1453.725527][T22140] ALSA: mixer_oss: invalid OSS volume 'RgºECLEV' [ 1453.732005][T22140] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 1453.863682][T22152] random: crng reseeded on system resumption [ 1454.043354][T22153] input: syz1 as /devices/virtual/input/input99 [ 1454.782763][T22157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4359'. [ 1455.226416][T22162] random: crng reseeded on system resumption [ 1455.374417][T22164] FAULT_INJECTION: forcing a failure. [ 1455.374417][T22164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.439308][T22164] CPU: 0 UID: 0 PID: 22164 Comm: syz.5.4361 Tainted: G L syzkaller #0 PREEMPT(full) [ 1455.439335][T22164] Tainted: [L]=SOFTLOCKUP [ 1455.439340][T22164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1455.439350][T22164] Call Trace: [ 1455.439357][T22164] [ 1455.439364][T22164] dump_stack_lvl+0xe8/0x150 [ 1455.439391][T22164] should_fail_ex+0x412/0x560 [ 1455.439418][T22164] _copy_from_user+0x2d/0xb0 [ 1455.439460][T22164] get_compat_msghdr+0xb3/0x4c0 [ 1455.439484][T22164] ? __lock_acquire+0x6b5/0x2cf0 [ 1455.439517][T22164] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1455.439548][T22164] ? kstrtoull+0x12f/0x1d0 [ 1455.439585][T22164] ___sys_sendmsg+0x201/0x360 [ 1455.439616][T22164] ? __pfx____sys_sendmsg+0x10/0x10 [ 1455.439643][T22164] ? get_pid_task+0x20/0x1f0 [ 1455.439663][T22164] ? get_pid_task+0x20/0x1f0 [ 1455.439681][T22164] ? get_pid_task+0x20/0x1f0 [ 1455.439727][T22164] ? __fget_files+0x2a/0x420 [ 1455.439758][T22164] ? __fget_files+0x3a0/0x420 [ 1455.439797][T22164] __sys_sendmsg+0x183/0x260 [ 1455.439824][T22164] ? __pfx___sys_sendmsg+0x10/0x10 [ 1455.439869][T22164] __do_fast_syscall_32+0x20d/0x640 [ 1455.439898][T22164] ? do_fast_syscall_32+0x33/0x70 [ 1455.439921][T22164] ? asm_int80_emulation+0x1a/0x20 [ 1455.439941][T22164] ? do_int80_emulation+0x274/0x4d0 [ 1455.439965][T22164] ? trace_irq_disable+0x3b/0x150 [ 1455.440000][T22164] do_fast_syscall_32+0x33/0x70 [ 1455.440025][T22164] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1455.440049][T22164] RIP: 0023:0xf70bef6c [ 1455.440069][T22164] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1455.440088][T22164] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1455.440110][T22164] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1455.440125][T22164] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 1455.440138][T22164] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1455.440151][T22164] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1455.440163][T22164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1455.440193][T22164] [ 1456.400166][T22181] xt_bpf: check failed: parse error [ 1456.436894][T13724] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1456.770668][T13724] usb 6-1: Using ep0 maxpacket: 32 [ 1456.785343][T13724] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.795877][T13724] usb 6-1: config 0 has no interfaces? [ 1456.818451][T13724] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1456.827815][T13724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.840398][T13724] usb 6-1: Product: syz [ 1456.843607][T22186] ptrace attach of "./syz-executor exec"[16847] was attempted by "./syz-executor exec"[22186] [ 1456.856243][T13724] usb 6-1: Manufacturer: syz [ 1456.863062][T13724] usb 6-1: SerialNumber: syz [ 1456.878614][T13724] usb 6-1: config 0 descriptor?? [ 1457.216997][T15427] usb 6-1: USB disconnect, device number 83 [ 1457.463974][T22192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4369'. [ 1457.475535][T22192] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4369'. [ 1457.485175][T22192] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4369'. [ 1457.559347][T22196] binder: 22195:22196 ioctl c0306201 800003c0 returned -14 [ 1457.636952][T22194] syzkaller0: entered promiscuous mode [ 1457.642849][T22194] syzkaller0: entered allmulticast mode [ 1458.295513][T22211] loop6: detected capacity change from 0 to 524287487 [ 1458.303612][T22211] buffer_io_error: 23 callbacks suppressed [ 1458.303639][T22211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.317919][T22211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.325893][T22211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.333894][T22211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.341847][T22211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.400717][T22211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.426308][T22211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.439350][T22211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.483854][T22211] ldm_validate_partition_table(): Disk read failed. [ 1458.493827][T22211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.507758][T22211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.561761][T22211] Dev loop6: unable to read RDB block 0 [ 1458.567802][T22211] loop6: unable to read partition table [ 1458.635587][T22211] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1459.179323][T22225] input: syz1 as /devices/virtual/input/input100 [ 1459.745133][T22234] FAULT_INJECTION: forcing a failure. [ 1459.745133][T22234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1459.900714][T22234] CPU: 0 UID: 0 PID: 22234 Comm: syz.6.4380 Tainted: G L syzkaller #0 PREEMPT(full) [ 1459.900750][T22234] Tainted: [L]=SOFTLOCKUP [ 1459.900759][T22234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1459.900772][T22234] Call Trace: [ 1459.900781][T22234] [ 1459.900791][T22234] dump_stack_lvl+0xe8/0x150 [ 1459.900826][T22234] should_fail_ex+0x412/0x560 [ 1459.900861][T22234] _copy_from_user+0x2d/0xb0 [ 1459.900885][T22234] get_compat_msghdr+0xb3/0x4c0 [ 1459.900907][T22234] ? __lock_acquire+0x6b5/0x2cf0 [ 1459.900940][T22234] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1459.900974][T22234] ___sys_sendmsg+0x201/0x360 [ 1459.901005][T22234] ? __pfx____sys_sendmsg+0x10/0x10 [ 1459.901034][T22234] ? kstrtoull+0x12f/0x1d0 [ 1459.901087][T22234] ? __fget_files+0x2a/0x420 [ 1459.901117][T22234] ? __fget_files+0x3a0/0x420 [ 1459.901157][T22234] __sys_sendmmsg+0x2e7/0x4e0 [ 1459.901194][T22234] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1459.901245][T22234] ? fput+0xa0/0xd0 [ 1459.901277][T22234] ? ksys_write+0x242/0x270 [ 1459.901306][T22234] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1459.901332][T22234] __do_fast_syscall_32+0x20d/0x640 [ 1459.901359][T22234] ? do_fast_syscall_32+0x33/0x70 [ 1459.901383][T22234] ? asm_int80_emulation+0x1a/0x20 [ 1459.901402][T22234] ? do_int80_emulation+0x274/0x4d0 [ 1459.901435][T22234] do_fast_syscall_32+0x33/0x70 [ 1459.901459][T22234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1459.901485][T22234] RIP: 0023:0xf700ef6c [ 1459.901505][T22234] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1459.901523][T22234] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1459.901547][T22234] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 0000000080000440 [ 1459.901562][T22234] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1459.901574][T22234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1459.901586][T22234] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1459.901599][T22234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1459.901629][T22234] [ 1460.533531][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4383'. [ 1460.820838][T15427] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1461.014658][T15427] usb 6-1: Using ep0 maxpacket: 32 [ 1461.171011][T15427] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.183563][T15427] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1461.209075][T15427] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1461.224473][T15427] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.240835][T15427] usb 6-1: Product: syz [ 1461.245089][T15427] usb 6-1: Manufacturer: syz [ 1461.249725][T15427] usb 6-1: SerialNumber: syz [ 1461.306524][T15427] usb 6-1: config 0 descriptor?? [ 1461.404553][T22252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4386'. [ 1461.529975][T15426] usb 6-1: USB disconnect, device number 84 [ 1462.266835][T22258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4388'. [ 1462.871069][T22263] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4389'. [ 1462.926461][T22263] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4389'. [ 1462.968394][T22264] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4389'. [ 1462.991322][T22264] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4389'. [ 1463.472395][T22276] loop6: detected capacity change from 0 to 524287487 [ 1463.482889][T22276] buffer_io_error: 7 callbacks suppressed [ 1463.482910][T22276] Buffer I/O error on dev loop6, logical block 0, async page read [ 1463.498167][T22276] Buffer I/O error on dev loop6, logical block 0, async page read [ 1463.507250][T22276] Buffer I/O error on dev loop6, logical block 0, async page read [ 1463.515700][T22276] Buffer I/O error on dev loop6, logical block 0, async page read [ 1463.524245][T22276] Buffer I/O error on dev loop6, logical block 0, async page read [ 1463.532690][T22276] Buffer I/O error on dev loop6, logical block 0, async page read [ 1463.541108][T22276] Buffer I/O error on dev loop6, logical block 0, async page read [ 1463.549015][T22276] Buffer I/O error on dev loop6, logical block 0, async page read [ 1463.557162][T22276] ldm_validate_partition_table(): Disk read failed. [ 1463.563909][T22276] Buffer I/O error on dev loop6, logical block 0, async page read [ 1463.571916][T22276] Buffer I/O error on dev loop6, logical block 0, async page read [ 1463.580865][T22276] Dev loop6: unable to read RDB block 0 [ 1463.586825][T22276] loop6: unable to read partition table [ 1463.592848][T22276] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1464.207954][T22282] random: crng reseeded on system resumption [ 1464.382327][T22286] FAULT_INJECTION: forcing a failure. [ 1464.382327][T22286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1464.414796][T22286] CPU: 1 UID: 0 PID: 22286 Comm: syz.0.4390 Tainted: G L syzkaller #0 PREEMPT(full) [ 1464.414830][T22286] Tainted: [L]=SOFTLOCKUP [ 1464.414838][T22286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1464.414850][T22286] Call Trace: [ 1464.414859][T22286] [ 1464.414868][T22286] dump_stack_lvl+0xe8/0x150 [ 1464.414903][T22286] should_fail_ex+0x412/0x560 [ 1464.414938][T22286] _copy_from_user+0x2d/0xb0 [ 1464.414963][T22286] do_tcp_setsockopt+0x4f3/0x2060 [ 1464.414999][T22286] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1464.415030][T22286] ? __pfx___mutex_lock+0x10/0x10 [ 1464.415069][T22286] ? sock_common_setsockopt+0x36/0xc0 [ 1464.415100][T22286] ? tcp_setsockopt+0x3d/0xe0 [ 1464.415125][T22286] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1464.415149][T22286] smc_setsockopt+0x249/0xac0 [ 1464.415168][T22286] ? __pfx_smc_setsockopt+0x10/0x10 [ 1464.415182][T22286] ? aa_sock_opt_perm+0xff/0x1a0 [ 1464.415207][T22286] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1464.415224][T22286] ? __pfx_smc_setsockopt+0x10/0x10 [ 1464.415239][T22286] do_sock_setsockopt+0x17c/0x1b0 [ 1464.415258][T22286] __ia32_sys_setsockopt+0x13d/0x1b0 [ 1464.415278][T22286] __do_fast_syscall_32+0x20d/0x640 [ 1464.415297][T22286] ? do_fast_syscall_32+0x33/0x70 [ 1464.415313][T22286] ? asm_int80_emulation+0x1a/0x20 [ 1464.415328][T22286] ? do_int80_emulation+0x274/0x4d0 [ 1464.415344][T22286] ? trace_irq_disable+0x3b/0x150 [ 1464.415369][T22286] do_fast_syscall_32+0x33/0x70 [ 1464.415386][T22286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1464.415404][T22286] RIP: 0023:0xf7f22f6c [ 1464.415418][T22286] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1464.415432][T22286] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1464.415447][T22286] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 1464.415457][T22286] RDX: 0000000000000002 RSI: 0000000080000040 RDI: 0000000000000004 [ 1464.415466][T22286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1464.415475][T22286] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1464.415484][T22286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1464.415505][T22286] [ 1465.206681][ T30] audit: type=1326 audit(1773480371.781:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22291 comm="syz.4.4397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1465.347604][ T30] audit: type=1326 audit(1773480371.781:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22291 comm="syz.4.4397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1465.432617][ T30] audit: type=1326 audit(1773480371.781:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22291 comm="syz.4.4397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1465.486139][ T30] audit: type=1326 audit(1773480371.781:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22291 comm="syz.4.4397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1465.525178][T22303] FAULT_INJECTION: forcing a failure. [ 1465.525178][T22303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1465.550477][T22303] CPU: 1 UID: 0 PID: 22303 Comm: syz.5.4400 Tainted: G L syzkaller #0 PREEMPT(full) [ 1465.550532][T22303] Tainted: [L]=SOFTLOCKUP [ 1465.550540][T22303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1465.550553][T22303] Call Trace: [ 1465.550563][T22303] [ 1465.550572][T22303] dump_stack_lvl+0xe8/0x150 [ 1465.550615][T22303] should_fail_ex+0x412/0x560 [ 1465.550644][T22303] _copy_from_user+0x2d/0xb0 [ 1465.550663][T22303] get_compat_msghdr+0xb3/0x4c0 [ 1465.550679][T22303] ? __lock_acquire+0x6b5/0x2cf0 [ 1465.550704][T22303] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1465.550728][T22303] ___sys_sendmsg+0x201/0x360 [ 1465.550751][T22303] ? __pfx____sys_sendmsg+0x10/0x10 [ 1465.550772][T22303] ? kstrtoull+0x12f/0x1d0 [ 1465.550810][T22303] ? __fget_files+0x2a/0x420 [ 1465.550833][T22303] ? __fget_files+0x3a0/0x420 [ 1465.550861][T22303] __sys_sendmmsg+0x2e7/0x4e0 [ 1465.550883][T22303] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1465.550924][T22303] ? fput+0xa0/0xd0 [ 1465.550947][T22303] ? ksys_write+0x242/0x270 [ 1465.550969][T22303] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1465.550987][T22303] __do_fast_syscall_32+0x20d/0x640 [ 1465.551009][T22303] ? do_fast_syscall_32+0x33/0x70 [ 1465.551025][T22303] ? asm_int80_emulation+0x1a/0x20 [ 1465.551040][T22303] ? do_int80_emulation+0x274/0x4d0 [ 1465.551057][T22303] ? trace_irq_disable+0x3b/0x150 [ 1465.551083][T22303] do_fast_syscall_32+0x33/0x70 [ 1465.551101][T22303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1465.551120][T22303] RIP: 0023:0xf70bef6c [ 1465.551134][T22303] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1465.551147][T22303] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1465.551163][T22303] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 1465.551174][T22303] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 1465.551183][T22303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1465.551192][T22303] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1465.551201][T22303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1465.551222][T22303] [ 1466.020726][ T30] audit: type=1326 audit(1773480371.801:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22291 comm="syz.4.4397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1466.070729][ T30] audit: type=1326 audit(1773480371.801:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22291 comm="syz.4.4397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1466.071252][T13710] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1466.154614][ T30] audit: type=1326 audit(1773480371.801:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22291 comm="syz.4.4397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1466.259949][ T30] audit: type=1326 audit(1773480371.801:5459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22291 comm="syz.4.4397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1466.330762][T13710] usb 7-1: Using ep0 maxpacket: 32 [ 1466.364784][ T30] audit: type=1326 audit(1773480371.801:5460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22291 comm="syz.4.4397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1466.371623][T13710] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.477078][ T30] audit: type=1326 audit(1773480371.801:5461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22291 comm="syz.4.4397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 1466.480883][T13710] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1466.620728][T13710] usb 7-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1466.630172][T13710] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.658604][T13710] usb 7-1: Product: syz [ 1466.668763][T13710] usb 7-1: Manufacturer: syz [ 1466.697127][T13710] usb 7-1: SerialNumber: syz [ 1466.723768][T13710] usb 7-1: config 0 descriptor?? [ 1466.769505][T22312] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1466.872699][T22315] binder: 22314:22315 ioctl c0306201 800003c0 returned -14 [ 1466.881581][T22315] binder: 22314:22315 ioctl c0306201 0 returned -14 [ 1467.111190][T15426] usb 7-1: USB disconnect, device number 55 [ 1467.304805][T22323] netlink: 'syz.2.4406': attribute type 4 has an invalid length. [ 1467.325980][T22323] netlink: 'syz.2.4406': attribute type 4 has an invalid length. [ 1467.590171][T22332] FAULT_INJECTION: forcing a failure. [ 1467.590171][T22332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1467.604136][T22332] CPU: 1 UID: 0 PID: 22332 Comm: syz.5.4407 Tainted: G L syzkaller #0 PREEMPT(full) [ 1467.604170][T22332] Tainted: [L]=SOFTLOCKUP [ 1467.604178][T22332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1467.604192][T22332] Call Trace: [ 1467.604201][T22332] [ 1467.604210][T22332] dump_stack_lvl+0xe8/0x150 [ 1467.604247][T22332] should_fail_ex+0x412/0x560 [ 1467.604285][T22332] _copy_to_user+0x31/0xb0 [ 1467.604311][T22332] simple_read_from_buffer+0xe1/0x170 [ 1467.604349][T22332] proc_fail_nth_read+0x1bb/0x230 [ 1467.604385][T22332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1467.604419][T22332] ? rw_verify_area+0x2a6/0x4d0 [ 1467.604443][T22332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1467.604474][T22332] vfs_read+0x20c/0xa70 [ 1467.604494][T22332] ? fdget_pos+0x246/0x320 [ 1467.604524][T22332] ? sock_def_error_report+0x22/0x390 [ 1467.604559][T22332] ? __pfx___mutex_lock+0x10/0x10 [ 1467.604584][T22332] ? __pfx_vfs_read+0x10/0x10 [ 1467.604608][T22332] ? __fget_files+0x2a/0x420 [ 1467.604651][T22332] ? __fget_files+0x3a0/0x420 [ 1467.604679][T22332] ? __fget_files+0x2a/0x420 [ 1467.604719][T22332] ksys_read+0x150/0x270 [ 1467.604744][T22332] ? __pfx_ksys_read+0x10/0x10 [ 1467.604772][T22332] ? asm_int80_emulation+0x1a/0x20 [ 1467.604799][T22332] do_int80_emulation+0x173/0x4d0 [ 1467.604824][T22332] ? trace_irq_disable+0x3b/0x150 [ 1467.604856][T22332] ? asm_int80_emulation+0x1a/0x20 [ 1467.604876][T22332] ? clear_bhb_loop+0x40/0x90 [ 1467.604897][T22332] ? clear_bhb_loop+0x40/0x90 [ 1467.604923][T22332] asm_int80_emulation+0x1a/0x20 [ 1467.604943][T22332] RIP: 0023:0xf71f5cab [ 1467.604963][T22332] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1467.604982][T22332] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1467.605004][T22332] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ad5d0 [ 1467.605019][T22332] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1467.605030][T22332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1467.605043][T22332] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1467.605054][T22332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1467.605086][T22332] [ 1467.878265][T22335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4410'. [ 1468.573434][T22329] ALSA: mixer_oss: invalid OSS volume 'RgºECLEV' [ 1468.580064][T22329] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 1468.792414][T22343] xt_bpf: check failed: parse error [ 1469.014793][T22347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4412'. [ 1469.046130][T22347] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4412'. [ 1469.065411][T22347] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4412'. [ 1469.788880][T22357] FAULT_INJECTION: forcing a failure. [ 1469.788880][T22357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1469.857185][T22357] CPU: 1 UID: 0 PID: 22357 Comm: syz.4.4416 Tainted: G L syzkaller #0 PREEMPT(full) [ 1469.857219][T22357] Tainted: [L]=SOFTLOCKUP [ 1469.857228][T22357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1469.857241][T22357] Call Trace: [ 1469.857250][T22357] [ 1469.857259][T22357] dump_stack_lvl+0xe8/0x150 [ 1469.857294][T22357] should_fail_ex+0x412/0x560 [ 1469.857329][T22357] _copy_from_user+0x2d/0xb0 [ 1469.857353][T22357] get_compat_msghdr+0xb3/0x4c0 [ 1469.857377][T22357] ? __lock_acquire+0x6b5/0x2cf0 [ 1469.857410][T22357] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1469.857434][T22357] ? kstrtoull+0x12f/0x1d0 [ 1469.857470][T22357] ___sys_sendmsg+0x201/0x360 [ 1469.857501][T22357] ? __pfx____sys_sendmsg+0x10/0x10 [ 1469.857528][T22357] ? get_pid_task+0x20/0x1f0 [ 1469.857547][T22357] ? get_pid_task+0x20/0x1f0 [ 1469.857564][T22357] ? get_pid_task+0x20/0x1f0 [ 1469.857618][T22357] ? __fget_files+0x2a/0x420 [ 1469.857648][T22357] ? __fget_files+0x3a0/0x420 [ 1469.857689][T22357] __sys_sendmsg+0x183/0x260 [ 1469.857716][T22357] ? __pfx___sys_sendmsg+0x10/0x10 [ 1469.857762][T22357] __do_fast_syscall_32+0x20d/0x640 [ 1469.857789][T22357] ? do_fast_syscall_32+0x33/0x70 [ 1469.857813][T22357] ? asm_int80_emulation+0x1a/0x20 [ 1469.857833][T22357] ? do_int80_emulation+0x274/0x4d0 [ 1469.857856][T22357] ? trace_irq_disable+0x3b/0x150 [ 1469.857890][T22357] do_fast_syscall_32+0x33/0x70 [ 1469.857915][T22357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1469.857940][T22357] RIP: 0023:0xf6ffef6c [ 1469.857959][T22357] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1469.857977][T22357] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1469.858000][T22357] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 1469.858015][T22357] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1469.858028][T22357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1469.858040][T22357] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1469.858052][T22357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1469.858083][T22357] [ 1470.171908][T22364] binder: BINDER_SET_CONTEXT_MGR already set [ 1470.177970][T22364] binder: 22363:22364 ioctl 4018620d 80000040 returned -16 [ 1470.185695][T22364] binder: 22363:22364 ioctl c0306201 800003c0 returned -14 [ 1471.182572][T22368] netlink: 'syz.0.4420': attribute type 4 has an invalid length. [ 1471.191724][T22368] netlink: 'syz.0.4420': attribute type 4 has an invalid length. [ 1471.891431][T15427] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1472.053392][T15427] usb 1-1: Using ep0 maxpacket: 32 [ 1472.433955][T15427] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1472.460627][T15427] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.468662][T15427] usb 1-1: Product: syz [ 1472.480577][T15427] usb 1-1: Manufacturer: syz [ 1472.494330][T15427] usb 1-1: SerialNumber: syz [ 1472.736210][T15427] usb 1-1: config 0 descriptor?? [ 1473.006074][T15427] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 1473.013355][T15427] airspy 1-1:0.0: Could not detect board [ 1473.038948][T15427] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 1473.104292][T15427] usb 1-1: USB disconnect, device number 83 [ 1473.220879][ T1209] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1473.270399][T22392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4426'. [ 1473.346009][T22392] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4426'. [ 1473.393831][ T1209] usb 3-1: Using ep0 maxpacket: 32 [ 1473.424729][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.454815][T22392] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4426'. [ 1473.470588][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.480406][ T1209] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1473.566347][T22396] xt_bpf: check failed: parse error [ 1473.590621][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.615523][ T1209] usb 3-1: config 0 descriptor?? [ 1474.134894][T22388] netlink: 'syz.2.4425': attribute type 1 has an invalid length. [ 1474.400444][T22406] random: crng reseeded on system resumption [ 1474.432865][T22405] fuse: Bad value for 'fd' [ 1474.477506][ T1209] savu 0003:1E7D:2D5A.0023: unknown main item tag 0x0 [ 1474.590657][ T1209] savu 0003:1E7D:2D5A.0023: unknown main item tag 0x0 [ 1474.678147][ T1209] savu 0003:1E7D:2D5A.0023: unknown main item tag 0x0 [ 1474.720247][ T1209] savu 0003:1E7D:2D5A.0023: unknown main item tag 0x0 [ 1474.732461][ T1209] savu 0003:1E7D:2D5A.0023: unknown main item tag 0x0 [ 1474.740238][ T1209] savu 0003:1E7D:2D5A.0023: unbalanced collection at end of report description [ 1474.752582][ T1209] savu 0003:1E7D:2D5A.0023: parse failed [ 1474.758334][ T1209] savu 0003:1E7D:2D5A.0023: probe with driver savu failed with error -22 [ 1474.834213][ T1209] usb 3-1: USB disconnect, device number 85 [ 1475.131016][T13710] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 1475.258316][T22416] xt_bpf: check failed: parse error [ 1475.625076][T13710] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1475.640678][T13710] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1475.698804][T13710] usb 6-1: Product: syz [ 1475.708961][T13710] usb 6-1: Manufacturer: syz [ 1475.718881][T13710] usb 6-1: SerialNumber: syz [ 1475.735554][T13710] usb 6-1: config 0 descriptor?? [ 1475.840646][T22420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4433'. [ 1475.959851][T22412] input: syz1 as /devices/virtual/input/input101 [ 1476.009178][T13710] peak_usb 6-1:0.0: PEAK-System PCAN-Chip USB v12 fw v150.252.101 (1 channels) [ 1476.030914][T15427] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1476.181255][T15427] usb 3-1: Using ep0 maxpacket: 16 [ 1476.197085][T15427] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1476.210153][T13710] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1476.228437][T13710] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1476.236226][T15427] usb 3-1: config 2 has an invalid interface number: 200 but max is 0 [ 1476.236642][T13710] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1476.244735][T15427] usb 3-1: config 2 has no interface number 0 [ 1476.294823][T15427] usb 3-1: config 2 interface 200 has no altsetting 0 [ 1476.323423][T15427] usb 3-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=43.53 [ 1476.342953][T15427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.343137][T13710] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 1476.359350][T15427] usb 3-1: Product: syz [ 1476.365637][T15427] usb 3-1: Manufacturer: syz [ 1476.370280][T15427] usb 3-1: SerialNumber: syz [ 1476.433795][T22427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4435'. [ 1476.443659][T22428] FAULT_INJECTION: forcing a failure. [ 1476.443659][T22428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1476.475107][T13741] usb 6-1: USB disconnect, device number 85 [ 1476.490978][T22428] CPU: 1 UID: 0 PID: 22428 Comm: syz.4.4436 Tainted: G L syzkaller #0 PREEMPT(full) [ 1476.491011][T22428] Tainted: [L]=SOFTLOCKUP [ 1476.491019][T22428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1476.491032][T22428] Call Trace: [ 1476.491041][T22428] [ 1476.491050][T22428] dump_stack_lvl+0xe8/0x150 [ 1476.491085][T22428] should_fail_ex+0x412/0x560 [ 1476.491122][T22428] _copy_from_user+0x2d/0xb0 [ 1476.491146][T22428] sk_setsockopt+0x2b3/0x2e80 [ 1476.491167][T22428] ? __lock_acquire+0x6b5/0x2cf0 [ 1476.491202][T22428] ? __pfx_sk_setsockopt+0x10/0x10 [ 1476.491230][T22428] ? aa_sk_perm+0x6d5/0x900 [ 1476.491267][T22428] ? __pfx_aa_sk_perm+0x10/0x10 [ 1476.491295][T22428] ? aa_sock_opt_perm+0xff/0x1a0 [ 1476.491328][T22428] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1476.491357][T22428] do_sock_setsockopt+0x11b/0x1b0 [ 1476.491384][T22428] __ia32_sys_setsockopt+0x13d/0x1b0 [ 1476.491414][T22428] __do_fast_syscall_32+0x20d/0x640 [ 1476.491441][T22428] ? do_fast_syscall_32+0x33/0x70 [ 1476.491464][T22428] ? asm_int80_emulation+0x1a/0x20 [ 1476.491485][T22428] ? do_int80_emulation+0x274/0x4d0 [ 1476.491508][T22428] ? trace_irq_disable+0x3b/0x150 [ 1476.491544][T22428] do_fast_syscall_32+0x33/0x70 [ 1476.491568][T22428] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1476.491594][T22428] RIP: 0023:0xf6ffef6c [ 1476.491613][T22428] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1476.491630][T22428] RSP: 002b:00000000f53cc50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1476.491653][T22428] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 1476.491667][T22428] RDX: 0000000000000009 RSI: 0000000080000180 RDI: 0000000000000004 [ 1476.491680][T22428] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1476.491692][T22428] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1476.491705][T22428] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1476.491735][T22428] [ 1476.951355][T22437] loop6: detected capacity change from 0 to 524287487 [ 1477.100868][T14434] buffer_io_error: 7 callbacks suppressed [ 1477.100883][T14434] Buffer I/O error on dev loop6, logical block 0, async page read [ 1477.137205][T15427] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1477.151281][T14434] Buffer I/O error on dev loop6, logical block 0, async page read [ 1477.159301][T14434] Buffer I/O error on dev loop6, logical block 0, async page read [ 1477.167893][T15427] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 1477.190031][T15427] pac7311 3-1:2.200: probe with driver pac7311 failed with error -71 [ 1477.217410][T14434] Buffer I/O error on dev loop6, logical block 0, async page read [ 1477.235263][T14434] Buffer I/O error on dev loop6, logical block 0, async page read [ 1477.244736][T15427] usb 3-1: USB disconnect, device number 86 [ 1477.257638][T14434] Buffer I/O error on dev loop6, logical block 0, async page read [ 1477.347982][T13741] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1477.445590][T14434] Buffer I/O error on dev loop6, logical block 0, async page read [ 1477.455253][T14434] Buffer I/O error on dev loop6, logical block 0, async page read [ 1477.487164][T14434] ldm_validate_partition_table(): Disk read failed. [ 1477.523199][T14434] Buffer I/O error on dev loop6, logical block 0, async page read [ 1477.550660][T13741] usb 7-1: Using ep0 maxpacket: 32 [ 1477.570296][T13741] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 1477.579028][T14434] Buffer I/O error on dev loop6, logical block 0, async page read [ 1477.598658][T13741] usb 7-1: config 0 has no interface number 0 [ 1477.610921][T22446] fuse: Bad value for 'user_id' [ 1477.624084][T22446] fuse: Bad value for 'user_id' [ 1477.809069][T14434] Dev loop6: unable to read RDB block 0 [ 1477.819206][T13741] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1477.839783][T14434] loop6: unable to read partition table [ 1477.902528][T22437] ldm_validate_partition_table(): Disk read failed. [ 1477.913599][T13741] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1477.930016][T22437] Dev loop6: unable to read RDB block 0 [ 1477.949972][T13741] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1477.993098][T22437] loop6: unable to read partition table [ 1478.015796][T13741] usb 7-1: config 0 interface 196 has no altsetting 0 [ 1478.025285][T22437] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1478.094275][T13741] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1478.115016][T13741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.149151][T13741] usb 7-1: Product: syz [ 1478.164355][T13741] usb 7-1: Manufacturer: syz [ 1478.204672][T13741] usb 7-1: SerialNumber: syz [ 1478.238170][T13741] usb 7-1: config 0 descriptor?? [ 1478.240908][ T1209] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1478.258408][T22457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4443'. [ 1478.288328][T22440] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1478.400700][T13745] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1478.420664][ T1209] usb 1-1: Using ep0 maxpacket: 16 [ 1478.434187][ T1209] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1478.469551][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.489115][ T1209] usb 1-1: Product: syz [ 1478.510402][ T1209] usb 1-1: Manufacturer: syz [ 1478.525179][ T1209] usb 1-1: SerialNumber: syz [ 1478.554775][ T1209] usb 1-1: config 0 descriptor?? [ 1478.580603][T13745] usb 6-1: Using ep0 maxpacket: 32 [ 1478.588158][T13745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1478.612585][T13745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1478.696994][T13745] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1478.772391][T13745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.817060][T13745] usb 6-1: config 0 descriptor?? [ 1478.840031][T22462] openvswitch: netlink: Flow actions attr not present in new flow. [ 1478.997204][ T1209] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1479.039191][ T1209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1479.049689][ T1209] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1479.052135][T13741] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 1479.073602][T22456] netlink: 'syz.5.4444': attribute type 1 has an invalid length. [ 1479.095516][ T1209] usb 1-1: media controller created [ 1479.102279][T13741] ipheth 7-1:0.196: probe with driver ipheth failed with error -110 [ 1479.206590][T22452] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4442'. [ 1479.212713][ T1209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1479.358905][T13745] savu 0003:1E7D:2D5A.0024: unknown main item tag 0x0 [ 1479.366162][T13745] savu 0003:1E7D:2D5A.0024: unknown main item tag 0x0 [ 1479.396735][T13745] savu 0003:1E7D:2D5A.0024: unknown main item tag 0x0 [ 1479.439226][T13745] savu 0003:1E7D:2D5A.0024: unknown main item tag 0x0 [ 1479.468688][T13745] savu 0003:1E7D:2D5A.0024: unknown main item tag 0x0 [ 1479.492618][T13745] savu 0003:1E7D:2D5A.0024: unbalanced collection at end of report description [ 1479.527575][T13745] savu 0003:1E7D:2D5A.0024: parse failed [ 1479.605552][T13745] savu 0003:1E7D:2D5A.0024: probe with driver savu failed with error -22 [ 1479.649086][T13745] usb 6-1: USB disconnect, device number 86 [ 1479.871799][ T1209] zl10353_read_register: readreg error (reg=127, ret==0) [ 1479.879649][ T1209] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1479.974747][T13745] usb 7-1: USB disconnect, device number 56 [ 1480.006594][ T1209] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1480.215286][T22475] input: syz1 as /devices/virtual/input/input102 [ 1481.173049][T13745] usb 1-1: USB disconnect, device number 84 [ 1481.367832][T13745] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1481.664687][T22526] xt_bpf: check failed: parse error [ 1481.748475][T22528] xt_bpf: check failed: parse error [ 1482.004772][T22529] random: crng reseeded on system resumption [ 1483.904853][T22535] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4451'. [ 1484.216198][T22544] input: syz0 as /devices/virtual/input/input103 [ 1484.651475][T13714] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1484.931107][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.937427][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.945962][T13714] usb 5-1: Using ep0 maxpacket: 16 [ 1484.972910][T13714] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1484.993412][T13714] usb 5-1: config 2 has an invalid interface number: 200 but max is 0 [ 1485.014230][T13714] usb 5-1: config 2 has no interface number 0 [ 1485.331729][T13714] usb 5-1: config 2 interface 200 has no altsetting 0 [ 1485.530963][T13745] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1485.608723][T13714] usb 5-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=43.53 [ 1485.620755][T13714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.647020][T13714] usb 5-1: Product: syz [ 1485.657194][T13714] usb 5-1: Manufacturer: syz [ 1485.664797][T13714] usb 5-1: SerialNumber: syz [ 1485.722181][T22558] input: syz1 as /devices/virtual/input/input104 [ 1485.772822][T13745] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.865519][T13745] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1485.890639][T13745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.905051][T13745] usb 1-1: Product: syz [ 1485.909290][T13745] usb 1-1: Manufacturer: syz [ 1485.954699][T13745] usb 1-1: SerialNumber: syz [ 1485.976328][T13745] usb 1-1: config 0 descriptor?? [ 1485.995042][T13745] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 1486.018535][T13745] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 1486.155714][T13714] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1486.229773][T13714] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 1486.258206][T22569] FAULT_INJECTION: forcing a failure. [ 1486.258206][T22569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1486.270815][T13714] pac7311 5-1:2.200: probe with driver pac7311 failed with error -71 [ 1486.289989][T22569] CPU: 0 UID: 0 PID: 22569 Comm: syz.5.4460 Tainted: G L syzkaller #0 PREEMPT(full) [ 1486.290023][T22569] Tainted: [L]=SOFTLOCKUP [ 1486.290037][T22569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1486.290048][T22569] Call Trace: [ 1486.290055][T22569] [ 1486.290063][T22569] dump_stack_lvl+0xe8/0x150 [ 1486.290092][T22569] should_fail_ex+0x412/0x560 [ 1486.290124][T22569] _copy_from_user+0x2d/0xb0 [ 1486.290146][T22569] get_compat_msghdr+0xb3/0x4c0 [ 1486.290164][T22569] ? __lock_acquire+0x6b5/0x2cf0 [ 1486.290190][T22569] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1486.290208][T22569] ? kstrtoull+0x12f/0x1d0 [ 1486.290236][T22569] ___sys_sendmsg+0x201/0x360 [ 1486.290261][T22569] ? __pfx____sys_sendmsg+0x10/0x10 [ 1486.290283][T22569] ? get_pid_task+0x20/0x1f0 [ 1486.290298][T22569] ? get_pid_task+0x20/0x1f0 [ 1486.290312][T22569] ? get_pid_task+0x20/0x1f0 [ 1486.290347][T22569] ? __fget_files+0x2a/0x420 [ 1486.290372][T22569] ? __fget_files+0x3a0/0x420 [ 1486.290404][T22569] __sys_sendmsg+0x183/0x260 [ 1486.290425][T22569] ? __pfx___sys_sendmsg+0x10/0x10 [ 1486.290461][T22569] __do_fast_syscall_32+0x20d/0x640 [ 1486.290487][T22569] ? do_fast_syscall_32+0x33/0x70 [ 1486.290510][T22569] ? asm_int80_emulation+0x1a/0x20 [ 1486.290531][T22569] ? do_int80_emulation+0x274/0x4d0 [ 1486.290553][T22569] ? trace_irq_disable+0x3b/0x150 [ 1486.290581][T22569] do_fast_syscall_32+0x33/0x70 [ 1486.290602][T22569] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1486.290622][T22569] RIP: 0023:0xf70bef6c [ 1486.290638][T22569] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1486.290653][T22569] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1486.290671][T22569] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1486.290683][T22569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1486.290693][T22569] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1486.290703][T22569] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1486.290713][T22569] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1486.290735][T22569] [ 1486.529779][T13714] usb 5-1: USB disconnect, device number 63 [ 1486.835855][T22552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.871223][T22552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.155928][T22579] xt_bpf: check failed: parse error [ 1488.127372][T22590] random: crng reseeded on system resumption [ 1488.175226][T13745] usb 1-1: USB disconnect, device number 85 [ 1488.722275][T22600] loop6: detected capacity change from 0 to 524287487 [ 1488.730383][T22600] buffer_io_error: 23 callbacks suppressed [ 1488.730408][T22600] Buffer I/O error on dev loop6, logical block 0, async page read [ 1488.744441][T22600] Buffer I/O error on dev loop6, logical block 0, async page read [ 1488.752438][T22600] Buffer I/O error on dev loop6, logical block 0, async page read [ 1488.760437][T22600] Buffer I/O error on dev loop6, logical block 0, async page read [ 1488.769188][T22600] Buffer I/O error on dev loop6, logical block 0, async page read [ 1488.781356][T22600] Buffer I/O error on dev loop6, logical block 0, async page read [ 1488.931277][T22600] Buffer I/O error on dev loop6, logical block 0, async page read [ 1488.949405][T22600] Buffer I/O error on dev loop6, logical block 0, async page read [ 1488.972922][T22600] ldm_validate_partition_table(): Disk read failed. [ 1489.031038][T22600] Buffer I/O error on dev loop6, logical block 0, async page read [ 1489.039270][T22600] Buffer I/O error on dev loop6, logical block 0, async page read [ 1489.047619][T22600] Dev loop6: unable to read RDB block 0 [ 1489.054177][T22600] loop6: unable to read partition table [ 1489.064231][T22600] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1489.090001][T13741] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1489.322432][T13741] usb 6-1: Using ep0 maxpacket: 32 [ 1489.343943][T13741] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1489.433492][T13741] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1489.442723][T13741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.470887][T13741] usb 6-1: Product: syz [ 1489.490734][T13741] usb 6-1: Manufacturer: syz [ 1489.500848][T13741] usb 6-1: SerialNumber: syz [ 1489.516396][T13741] usb 6-1: config 0 descriptor?? [ 1489.781378][T22610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4471'. [ 1489.797781][T22610] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4471'. [ 1489.847751][T22610] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4471'. [ 1489.858600][T13714] usb 6-1: USB disconnect, device number 87 [ 1490.693854][T22624] input: syz1 as /devices/virtual/input/input105 [ 1491.700810][T13714] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1491.868077][T13714] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 1491.880747][T13714] usb 1-1: config 0 has no interface number 0 [ 1491.900616][T13714] usb 1-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 1491.945000][T13714] usb 1-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1491.992301][T13714] usb 1-1: config 0 interface 48 has no altsetting 0 [ 1492.013325][T13714] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1492.054922][T22638] xt_bpf: check failed: parse error [ 1492.443287][T13714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.457166][T13714] usb 1-1: Product: syz [ 1492.472074][T13714] usb 1-1: Manufacturer: syz [ 1492.481391][T13714] usb 1-1: SerialNumber: syz [ 1492.521699][T13714] usb 1-1: config 0 descriptor?? [ 1492.736349][T22645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.753046][T22645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.950715][T13741] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1492.969308][T13714] ch341 1-1:0.48: ch341-uart converter detected [ 1492.995234][T22650] binder: 22649:22650 ioctl c0306201 800003c0 returned -14 [ 1493.023951][T13714] usb 1-1: failed to receive control message: -71 [ 1493.070474][T13714] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1493.110607][T13741] usb 6-1: device descriptor read/64, error -71 [ 1493.140271][T13714] usb 1-1: USB disconnect, device number 86 [ 1493.173300][T13714] ch341 1-1:0.48: device disconnected [ 1493.348602][T22661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4484'. [ 1493.374639][T13741] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1493.468968][T22653] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4484'. [ 1493.494876][T22666] random: crng reseeded on system resumption [ 1493.514596][T13741] usb 6-1: device descriptor read/64, error -71 [ 1493.521420][T22653] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4484'. [ 1493.643948][T13741] usb usb6-port1: attempt power cycle [ 1494.031160][T13741] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1494.073093][T13741] usb 6-1: device descriptor read/8, error -71 [ 1494.364326][T13741] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1494.732344][T13741] usb 6-1: device descriptor read/8, error -71 [ 1494.852554][T13741] usb usb6-port1: unable to enumerate USB device [ 1494.957975][T22678] input: syz1 as /devices/virtual/input/input106 [ 1495.190934][T13745] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1495.340603][T13745] usb 3-1: Using ep0 maxpacket: 32 [ 1495.603930][T13745] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1495.761428][T13745] usb 3-1: config 0 has no interface number 0 [ 1495.789242][T13745] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1495.819990][T13745] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1495.835788][T13745] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1495.845670][T13745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.870589][T13745] usb 3-1: Product: syz [ 1495.899808][T13745] usb 3-1: Manufacturer: syz [ 1495.909621][T13745] usb 3-1: SerialNumber: syz [ 1495.950067][T13745] usb 3-1: config 0 descriptor?? [ 1495.994360][T13745] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1496.272067][T22676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.363607][T22676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.387297][T22695] FAULT_INJECTION: forcing a failure. [ 1496.387297][T22695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1496.403210][T13745] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 1496.410404][T13745] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90 [ 1496.426374][T22695] CPU: 1 UID: 0 PID: 22695 Comm: syz.5.4493 Tainted: G L syzkaller #0 PREEMPT(full) [ 1496.426407][T22695] Tainted: [L]=SOFTLOCKUP [ 1496.426415][T22695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1496.426437][T22695] Call Trace: [ 1496.426446][T22695] [ 1496.426456][T22695] dump_stack_lvl+0xe8/0x150 [ 1496.426491][T22695] should_fail_ex+0x412/0x560 [ 1496.426526][T22695] _copy_from_user+0x2d/0xb0 [ 1496.426551][T22695] get_compat_msghdr+0xb3/0x4c0 [ 1496.426578][T22695] ? __lock_acquire+0x6b5/0x2cf0 [ 1496.426601][T22695] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1496.426618][T22695] ? kstrtoull+0x12f/0x1d0 [ 1496.426643][T22695] ___sys_sendmsg+0x201/0x360 [ 1496.426666][T22695] ? __pfx____sys_sendmsg+0x10/0x10 [ 1496.426685][T22695] ? get_pid_task+0x20/0x1f0 [ 1496.426698][T22695] ? get_pid_task+0x20/0x1f0 [ 1496.426711][T22695] ? get_pid_task+0x20/0x1f0 [ 1496.426743][T22695] ? __fget_files+0x2a/0x420 [ 1496.426764][T22695] ? __fget_files+0x3a0/0x420 [ 1496.426793][T22695] __sys_sendmsg+0x183/0x260 [ 1496.426812][T22695] ? __pfx___sys_sendmsg+0x10/0x10 [ 1496.426844][T22695] __do_fast_syscall_32+0x20d/0x640 [ 1496.426864][T22695] ? do_fast_syscall_32+0x33/0x70 [ 1496.426881][T22695] ? asm_int80_emulation+0x1a/0x20 [ 1496.426896][T22695] ? do_int80_emulation+0x274/0x4d0 [ 1496.426912][T22695] ? trace_irq_disable+0x3b/0x150 [ 1496.426937][T22695] do_fast_syscall_32+0x33/0x70 [ 1496.426955][T22695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1496.426974][T22695] RIP: 0023:0xf70bef6c [ 1496.426988][T22695] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1496.427001][T22695] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1496.427017][T22695] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1496.427028][T22695] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 1496.427037][T22695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1496.427046][T22695] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1496.427054][T22695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1496.427075][T22695] [ 1496.827251][T13741] usb 3-1: USB disconnect, device number 87 [ 1496.957859][T22699] binder: BINDER_SET_CONTEXT_MGR already set [ 1496.984632][T22699] binder: 22698:22699 ioctl 4018620d 80000040 returned -16 [ 1496.996810][T22699] binder: 22698:22699 ioctl c0306201 800003c0 returned -14 [ 1497.081128][T22707] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4497'. [ 1497.140607][T22707] libceph: resolve '0..' (ret=-3): failed [ 1497.252958][T13714] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1497.295940][T22716] random: crng reseeded on system resumption [ 1497.410582][T13714] usb 7-1: Using ep0 maxpacket: 16 [ 1497.421793][T13745] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1497.438740][T13714] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1497.466441][T13714] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.490605][T13714] usb 7-1: Product: syz [ 1497.501741][T13714] usb 7-1: Manufacturer: syz [ 1497.514080][T13714] usb 7-1: SerialNumber: syz [ 1497.533869][T13714] usb 7-1: config 0 descriptor?? [ 1497.630583][T13745] usb 5-1: Using ep0 maxpacket: 32 [ 1497.640393][T13745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.654986][T13745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1497.665548][T13745] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1497.677701][T13745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.698579][T13745] usb 5-1: config 0 descriptor?? [ 1497.750693][T13741] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1497.911235][T13741] usb 3-1: Using ep0 maxpacket: 32 [ 1497.922942][T22713] netlink: 'syz.4.4502': attribute type 1 has an invalid length. [ 1497.944579][T13741] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1497.956787][T13741] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1497.966503][T13741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.974760][T13741] usb 3-1: Product: syz [ 1497.979214][T13741] usb 3-1: Manufacturer: syz [ 1497.985259][T13741] usb 3-1: SerialNumber: syz [ 1497.986612][T13714] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1498.003143][T13741] usb 3-1: config 0 descriptor?? [ 1498.012425][T22721] input: syz1 as /devices/virtual/input/input107 [ 1498.030342][T13714] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1498.060919][T13714] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1498.086350][T13714] usb 7-1: media controller created [ 1498.135022][T13714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1498.147258][T13745] savu 0003:1E7D:2D5A.0025: unknown main item tag 0x0 [ 1498.172741][T13745] savu 0003:1E7D:2D5A.0025: unknown main item tag 0x0 [ 1498.201609][T13745] savu 0003:1E7D:2D5A.0025: unknown main item tag 0x0 [ 1498.216287][T22704] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4498'. [ 1498.221099][T13745] savu 0003:1E7D:2D5A.0025: unknown main item tag 0x0 [ 1498.246153][T13745] savu 0003:1E7D:2D5A.0025: unknown main item tag 0x0 [ 1498.271002][T13745] savu 0003:1E7D:2D5A.0025: unbalanced collection at end of report description [ 1498.294972][T13745] savu 0003:1E7D:2D5A.0025: parse failed [ 1498.306731][T13745] savu 0003:1E7D:2D5A.0025: probe with driver savu failed with error -22 [ 1498.368812][T13745] usb 5-1: USB disconnect, device number 64 [ 1498.478865][T22730] random: crng reseeded on system resumption [ 1498.781732][T13714] zl10353_read_register: readreg error (reg=127, ret==0) [ 1498.791400][T13714] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1498.800756][T22718] ------------[ cut here ]------------ [ 1498.806559][T22718] usb 7-1: BOGUS control dir, pipe 80003980 doesn't match bRequestType c0 [ 1498.815287][T22718] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.2.4503/22718 [ 1498.825814][T22718] Modules linked in: [ 1498.833303][T22718] CPU: 1 UID: 0 PID: 22718 Comm: syz.2.4503 Tainted: G L syzkaller #0 PREEMPT(full) [ 1498.844678][T22718] Tainted: [L]=SOFTLOCKUP [ 1498.849084][T22718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1498.859447][T22718] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 1498.865252][T22718] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 1498.885010][T22718] RSP: 0000:ffffc900034474a8 EFLAGS: 00010246 [ 1498.891685][T22718] RAX: 0000000000000000 RBX: ffff888011dea500 RCX: 0000000080003980 [ 1498.899711][T22718] RDX: ffff888032c59640 RSI: ffffffff8c7f11c0 RDI: ffffffff901ed550 [ 1498.908246][T22718] RBP: 1ffff11009f396d4 R08: 00000000000000c0 R09: 0000000000000000 [ 1498.916681][T22718] R10: ffffc900034475a0 R11: fffff52000688ec0 R12: ffff88804f237100 [ 1498.924774][T22718] R13: ffff88804f9cb6a0 R14: 0000000080003980 R15: ffff888032c59640 [ 1498.932844][T22718] FS: 0000000000000000(0000) GS:ffff888125560000(0063) knlGS:00000000f548db40 [ 1498.941839][T22718] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1498.948433][T22718] CR2: 00007f29cca94e9c CR3: 0000000099890000 CR4: 00000000003526f0 [ 1498.956566][T22718] Call Trace: [ 1498.959870][T22718] [ 1498.962916][T22718] ? __init_swait_queue_head+0xa9/0x150 [ 1498.968518][T22718] usb_start_wait_urb+0x12b/0x510 [ 1498.973994][T22718] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1498.979570][T22718] usb_control_msg+0x232/0x3e0 [ 1498.984435][T22718] dtv5100_i2c_msg+0x231/0x2f0 [ 1498.989231][T22718] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 1498.994150][T22718] __i2c_transfer+0x79a/0x2020 [ 1498.998958][T22718] __i2c_smbus_xfer+0xfca/0x1f70 [ 1499.004467][T22718] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1499.009665][T22718] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1499.015542][T22718] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 1499.021076][T22718] ? rt_mutex_lock_nested+0x170/0x1e0 [ 1499.026469][T22718] ? tomoyo_path_number_perm+0x219/0x630 [ 1499.032199][T22718] i2c_smbus_xfer+0x1f4/0x310 [ 1499.036914][T22718] i2cdev_ioctl_smbus+0x1e7/0x730 [ 1499.042079][T22718] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 1499.047654][T22718] compat_i2cdev_ioctl+0x29d/0x5c0 [ 1499.052927][T22718] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1499.058578][T22718] ? __fget_files+0x3a0/0x420 [ 1499.063408][T22718] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1499.069014][T22718] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1499.074594][T22718] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1499.080696][T22718] ? kmem_cache_free+0x187/0x630 [ 1499.085682][T22718] ? __se_sys_futex_time32+0x3ab/0x440 [ 1499.091235][T22718] ? rcu_is_watching+0x15/0xb0 [ 1499.096030][T22718] __do_fast_syscall_32+0x20d/0x640 [ 1499.101320][T22718] ? do_fast_syscall_32+0x33/0x70 [ 1499.106839][T22718] ? asm_int80_emulation+0x1a/0x20 [ 1499.112311][T22718] ? do_int80_emulation+0x274/0x4d0 [ 1499.117534][T22718] ? trace_irq_disable+0x3b/0x150 [ 1499.122664][T22718] do_fast_syscall_32+0x33/0x70 [ 1499.127550][T22718] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1499.133989][T22718] RIP: 0023:0xf709ef6c [ 1499.138075][T22718] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1499.157804][T22718] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1499.166374][T22718] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 1499.174427][T22718] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1499.182576][T22718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1499.190673][T22718] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1499.198681][T22718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1499.206765][T22718] [ 1499.210275][T22718] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1499.217585][T22718] CPU: 1 UID: 0 PID: 22718 Comm: syz.2.4503 Tainted: G L syzkaller #0 PREEMPT(full) [ 1499.228539][T22718] Tainted: [L]=SOFTLOCKUP [ 1499.232961][T22718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1499.243034][T22718] Call Trace: [ 1499.246343][T22718] [ 1499.249369][T22718] vpanic+0x56c/0xa60 [ 1499.253382][T22718] ? __pfx__printk+0x10/0x10 [ 1499.257977][T22718] ? __pfx_vpanic+0x10/0x10 [ 1499.262492][T22718] ? is_bpf_text_address+0x292/0x2b0 [ 1499.267785][T22718] ? is_bpf_text_address+0x26/0x2b0 [ 1499.273008][T22718] panic+0xc5/0xd0 [ 1499.276744][T22718] ? __pfx_panic+0x10/0x10 [ 1499.281181][T22718] __warn+0x315/0x4f0 [ 1499.285176][T22718] ? usb_submit_urb+0x1052/0x18b0 [ 1499.290293][T22718] ? usb_submit_urb+0x1052/0x18b0 [ 1499.295330][T22718] __report_bug+0x29a/0x540 [ 1499.299952][T22718] ? usb_submit_urb+0x1052/0x18b0 [ 1499.304984][T22718] ? __pfx___report_bug+0x10/0x10 [ 1499.310018][T22718] ? lockdep_hardirqs_on+0x7a/0x110 [ 1499.315236][T22718] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1499.321066][T22718] report_bug_entry+0x19a/0x290 [ 1499.325938][T22718] ? usb_submit_urb+0x1114/0x18b0 [ 1499.330977][T22718] ? usb_submit_urb+0x1119/0x18b0 [ 1499.336014][T22718] handle_bug+0xce/0x200 [ 1499.340303][T22718] exc_invalid_op+0x1a/0x50 [ 1499.344828][T22718] asm_exc_invalid_op+0x1a/0x20 [ 1499.349712][T22718] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 1499.355359][T22718] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 1499.374982][T22718] RSP: 0000:ffffc900034474a8 EFLAGS: 00010246 [ 1499.381079][T22718] RAX: 0000000000000000 RBX: ffff888011dea500 RCX: 0000000080003980 [ 1499.389175][T22718] RDX: ffff888032c59640 RSI: ffffffff8c7f11c0 RDI: ffffffff901ed550 [ 1499.397174][T22718] RBP: 1ffff11009f396d4 R08: 00000000000000c0 R09: 0000000000000000 [ 1499.405163][T22718] R10: ffffc900034475a0 R11: fffff52000688ec0 R12: ffff88804f237100 [ 1499.413173][T22718] R13: ffff88804f9cb6a0 R14: 0000000080003980 R15: ffff888032c59640 [ 1499.421207][T22718] ? usb_submit_urb+0x10a3/0x18b0 [ 1499.426281][T22718] ? __init_swait_queue_head+0xa9/0x150 [ 1499.431866][T22718] usb_start_wait_urb+0x12b/0x510 [ 1499.436908][T22718] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1499.442493][T22718] usb_control_msg+0x232/0x3e0 [ 1499.447303][T22718] dtv5100_i2c_msg+0x231/0x2f0 [ 1499.452124][T22718] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 1499.457001][T22718] __i2c_transfer+0x79a/0x2020 [ 1499.461796][T22718] __i2c_smbus_xfer+0xfca/0x1f70 [ 1499.466761][T22718] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1499.471897][T22718] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1499.477388][T22718] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 1499.482798][T22718] ? rt_mutex_lock_nested+0x170/0x1e0 [ 1499.488183][T22718] ? tomoyo_path_number_perm+0x219/0x630 [ 1499.493921][T22718] i2c_smbus_xfer+0x1f4/0x310 [ 1499.498615][T22718] i2cdev_ioctl_smbus+0x1e7/0x730 [ 1499.503654][T22718] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 1499.509224][T22718] compat_i2cdev_ioctl+0x29d/0x5c0 [ 1499.514348][T22718] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1499.519993][T22718] ? __fget_files+0x3a0/0x420 [ 1499.524703][T22718] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1499.530274][T22718] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1499.535750][T22718] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1499.541735][T22718] ? kmem_cache_free+0x187/0x630 [ 1499.546706][T22718] ? __se_sys_futex_time32+0x3ab/0x440 [ 1499.552204][T22718] ? rcu_is_watching+0x15/0xb0 [ 1499.557006][T22718] __do_fast_syscall_32+0x20d/0x640 [ 1499.562240][T22718] ? do_fast_syscall_32+0x33/0x70 [ 1499.567289][T22718] ? asm_int80_emulation+0x1a/0x20 [ 1499.572484][T22718] ? do_int80_emulation+0x274/0x4d0 [ 1499.577711][T22718] ? trace_irq_disable+0x3b/0x150 [ 1499.582768][T22718] do_fast_syscall_32+0x33/0x70 [ 1499.587662][T22718] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1499.594037][T22718] RIP: 0023:0xf709ef6c [ 1499.598142][T22718] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1499.617766][T22718] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1499.626204][T22718] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 1499.634275][T22718] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1499.642258][T22718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1499.650235][T22718] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1499.658208][T22718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1499.666197][T22718] [ 1499.669853][T22718] Kernel Offset: disabled [ 1499.674189][T22718] Rebooting in 86400 seconds..