last executing test programs: 29.125555982s ago: executing program 1 (id=316): syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xb, 0x4, 0x0, 0x3c, 0x58, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @ssrr={0x89, 0x7, 0x1e, [@broadcast]}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200650000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r7 = memfd_create(&(0x7f0000000240)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r8 = dup(r7) write$binfmt_elf32(r8, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x4, 0x3, 0x7ff, 0x2, 0x3, 0x8, 0x33d, 0x38, 0xd6, 0x7097, 0x3fe, 0x20, 0x3, 0x7, 0x8, 0x7}, [{0x70000000, 0x2, 0x4, 0x7, 0xfffffffe, 0x5, 0xee00, 0x9}, {0x5, 0xfffffffa, 0x5, 0x4, 0x9, 0x97e7, 0x3, 0x5}, {0x3, 0x1, 0x0, 0xff, 0x5, 0x2, 0x744d, 0xee}]}, 0x98) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x4, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x45) r9 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000400)) sendmsg$key(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r10, 0x0, 0xcb, &(0x7f00000003c0)={0x1, 0x1, 0x4, 0xffffffff, @vifc_lcl_addr=@multicast2, @private=0xa010100}, 0x10) 25.806643149s ago: executing program 1 (id=329): r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x6, 0x4000) preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000300)=""/118, 0x76}, {&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/202, 0xca}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000240)}, {&(0x7f00000016c0)=""/152, 0x98}], 0x7, 0x8, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') write$P9_RFLUSH(r1, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000180)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2400c854) syz_usb_connect(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019ae8c94079092702506f0102030109026900010607500e0904"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0x800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xa, 0x8, 0x0, 0xb}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4c080}, 0x1) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x1) 23.845868146s ago: executing program 1 (id=337): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000002180)=""/168, 0xa8}], 0x1, 0x24, 0x8080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0x61, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x2008c0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="31005ac5e8a9727303f46bf7221ff6a2082d20c3020dfa0180ce28660894c52c45fc5fc6d7721e58ee6aac930f19c41c112807815955366611d5fbaee84e509442293d50f31d448651661024c2a3d55b9426e1a8988283a5a6e158191b74f522e89bfbe79b2f30a4ceee480acfb9708bf8dc491abdb559d206a652b597a55ceceb43d3f38985257920d2a9d43ab959ef2e16"], 0x7c}}, 0x8001) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20400d5}, 0x40840) io_setup(0xffffffff, 0x0) (async) io_submit(0x0, 0x0, &(0x7f0000000140)) (async, rerun: 64) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$FBIOGETCMAP(r5, 0x4604, &(0x7f0000000600)={0x9, 0x1, &(0x7f00000028c0)=[0x0], &(0x7f0000002880), &(0x7f0000001200), 0x0}) (async) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) (async) r7 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) listen(r7, 0xffffffff) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) 23.644101078s ago: executing program 1 (id=340): syz_emit_ethernet(0x52, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@broadcast}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x44, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604110, &(0x7f0000000bc0)={0x0, [[0x9, 0x0, 0x0, 0xc, 0x200, 0x0, 0x1, 0xfffffffd], [0x1000, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x6, 0x8], [0x0, 0xffffffff, 0x0, 0xffff, 0x1, 0x0, 0x8]], '\x00', [{}, {0xc5}, {0x6}, {0xffffffff}, {0x2000005}, {0x2, 0x22c685d7}, {}, {0x0, 0xfffffff8}, {0x0, 0x9}, {0x73344867}, {0x20000}, {0x0, 0x2}], '\x00', 0x0, 0x0, 0x0, 0x2}) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 20.925720432s ago: executing program 1 (id=348): socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) getrlimit(0x1d, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x59, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x0, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) (async) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) socket$kcm(0xa, 0x922000000003, 0x11) (async) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r5, 0x0, 0xcd, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffe, "a1e96e2678b0afa605953ab4536f70c05f8f3c96fc304c0472ec0a7f01a413b4", 0x1, 0x848, 0xff, 0x10001}, 0x3c) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000002c0)={0xfffff679, 0x6, 0x5, 0x1, 0x6, "b0cfc518474653f921e31ed71453439c21edd0", 0xfffffffa, 0xc}) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b40011", 0x29}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x6, 0xd00}]}]}}, &(0x7f0000000280)=""/265, 0x32, 0x109, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000004080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x88, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xd, 0xc, "bd19e459749a73ca5b"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_USERDATA={0x39, 0xc, "deccae22ef5ae0730bdeeba8f783ee1a82b46ff97de652013a64806d4d3582871a970a835c2fe2e36285a4077d8ac64752caadedae"}]}, @NFT_MSG_NEWTABLE={0x68, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x158, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x58, 0x6, "f772fd7b397b4d7e1e14790a236282a9776a21e9fe64bbd92c1e244d3f40843f99dbed425072cc6582bfb215d9ed0d0d67a8d39e9ac3535f0875e8161201146e5c1450fec952fe3cdc8b33b8e289720b1950c593"}, @NFTA_TABLE_USERDATA={0x2e, 0x6, "1e42ccf58f311837fb3fbab3052baeb907b65958ddd2d5e33e89200b66a898e0f1797fa3945fe54cc114"}, @NFTA_TABLE_USERDATA={0xa6, 0x6, "50ed890d5502148443e176e8eee9925a59d1558f60e403615d41a6ce30b72abd6558fe5188aa39f5b8871dc553d26b357e195546760336f1a7448936c0c944d5cc67cf64bc8e26c289e360016771af19b91565182cf830b75078b2d3dbb2da56fea474db3356d518727bb94dd7d853f68e6d2bccbbec657f4cb175f007ca2d291cd3882179dd127bffcbe214c7bc01099e58fc1684f334075b1537d41a855cd4fc15"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x2fa8, 0xe, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x120c, 0x3, 0x0, 0x1, [{0x1020, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x101c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x134, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe8, 0x1, "dae08a2520f1778605be66ea99e1e269bb5c34417e4d731f549fecc5aa67e217115935a6a2a9643d3115a4e0bce7711fd3f0214bf627a440a6543956eea2d2c9394fdef9209aaeafa950488405c814310554de9d7c71fc0017ca49ad72a4d1f8fcdedb6235c178dba050a17c01147946b3af38ed29ba56dd65f1a66fe77e2d8aa0886de7aa2a3025ce08b2092e0d3d0f7fbc4905c7e05bc814eae637bfdc5f2120347ab6a9ab7db46e9b5b04daecc6c5ba2499c57ec031ab141ee3d07b1543811800def21069d6e185383d5ab43c15727b3004d299ba0e22bccbc65061147e4d344f346a"}, @NFTA_DATA_VALUE={0x47, 0x1, "a944ff2087faca00de4399d0b1e880c093a568b639ced20081fa25ebc458efe5aef71656b21dd08c6dad4cd9ea0dfbf73fd11949b8e0491b192b1b512fe419801c5aa8"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_DATA={0x60, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x18, 0x1, "652d1420d5ec11be9cc8b723b3e83294ba747a0c"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1d4c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x134, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "f9aa895dc5a1e9fed72a9feb148159b94590e15af4a632dcb4e74462d83c29d62e55a0c519ce5d8d4911faed67dddde33ec6e3a6a62b281f32f971996f936e480c665e898e628a950043eeef1a1db6d1c3aca73db0ad5b12c61e16cb0f9fc7ec6eb57e308bae4c481c3b4a99285897921eda430e7023239cb29156bb6cd8"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x21, 0x1, "a26eeb594695f5a37c400ccd488abaac39a10a0e0331b89d3fa963aa47"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x118, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xcbe00e834e98537c}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_KEY={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}, {0x13c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x138, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x71, 0x1, "b00d1a7fb57e90996e4f48250377cb80871a517311e3be7240195c936a362451c8c719a304bd61f642a1e89dc5904861c8ea50f2fde113f4796dcf09e095516b3b95b711e5f53e4ee4eb795e9b44cb9d54d8da97363864cf905a96b3fc341bfc717910833c229fe28bd7c33db0"}]}]}, {0x108, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x93, 0x6, 0x1, 0x0, "9abfc461acf17696e71d15e92204ab32d8634e216e94aa59649093b477d92aa37539f8283fea2ccb5ad2ec34ddc5c7610da03e0d403df889a723f62cb63cecedb8bf923bfc160f82e202e708c16574ecd635f59f3730d793ba4e76a82d6e1a222b9186bb33d22eb358063ea13bca4222e2fa16a170e0523649603b64e0a6c391004d82d42a0e366911bd9a41a4e965"}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}]}, {0x274, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xbe, 0x6, 0x1, 0x0, "42d4de6e7af43c9b94c608ec93bca0cbfe0f707372d8781a40071e2a6c4c2e84404661471a02b28e5b025a5f5981c2fd1295553af3edc90b38fe20e2d886b39a0ed3efe5a2942dfb43706af7fc03aafdb6a9c10b98a8c7a118dd1848a06f99304479aac2a75b81a8301f0ed242482ae3380c1b12219e53b878fb00497079dfdc0cc4b32aebb94eb0a019252e8b05a54c027deee75fb6f32311e84b1939f0c7aaa997c1a2acab47d65a3c00e495b2c797979d3475f8eb7fd8b506"}, @NFTA_SET_ELEM_EXPRESSIONS={0x180, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x50, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x48, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xf0}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x91}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_BYTEORDER_DREG={0x8}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7232}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x2ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "938014d6768f5aeebf3220a02e6cb92f1f12d341421657a235b2697fed44aabb6a606b99c6d4bceab60eadb062c4ce17d18c79995bda42b805304b00c4484114817ac57cb1ea94c9255b99187507b00cdfd8e3b5536fd97033a14aae4ca56770ccc015c20221df950ea3fbc1f50ba8b78425d4e4e82a68203920267753f14f77127451fc0a1c55004b988e7e50f11c3d2f45286be2d5235059916bf0343c36c6a104e59f91a05bd0aaa682fb22fb67a5b7411b6874449e5659f6cc32130056f46244eb1696e7ad60945cbe65"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "7e36c0f832b5d3a5d808954f964a5e3c4e87f0c1d32d930524ad1d614bca218aa5c4605feb121afd5c4d02de0c7f96e5bb2ed808ad0cad4165610cf67e66755852b174fc5abaa4bc4b10dd2c8fce4a74c8e0991e7647bebb4f162d00286c6956c36d527ff95214b5e3b3c127c7bea03edcdae01e9fb118f45c3e95264b8923f6eb990b32695d06f97ba5dd71603e2f910e93a7d749c539d22cce7efded1ec637ca6a061862b8bc1a73350eded2a8b655cae84773896061a8b84b26"}, @NFTA_DATA_VALUE={0x6e, 0x1, "eec821705761b424c157d814c361f9493125ebbf3725fdb10eadbec511404b9186d60497ec4207dad775ed54d763986a3252fa49dfafba7b282aa602c95ab00d6914e658ef9c60fa611f165e024632ac432ef16969caccf8a0130057936ea9522562e3ba236f91dd7331"}, @NFTA_DATA_VALUE={0x70, 0x1, "748592dfd6dc9ac2699eeb728d936c5b4b88c6c7df2c4e6fd11b3c169039b69a680816320c2424a98fbb9996f03ae33b9d9c84d485f56f1d14e444d2b5e602b29db00a85299e14792cf4d6a941831defc66faa43fb4b306a64eea105236cd84a5b727b660ba7b545200c4d3d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x12a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x12a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "6763d55adfb7c24011197a01c252e960f81d7919a9008ae98cf69666b92020ad765275062da8c0d6252d5e8eb9741ada2d6a4f98c2792f52dfb28fa69d15663c868489727e7f47cbf17dd184f540e7dcfc3fc41a7b9590a553994e67f21fb954cc4231914700693459a13b760a3d11648ebd0a121b6f2fbdb28b1ff8930c91a80b2c86dc9a9975cdb10d0848e037887af4d8d40e4cb7ed5a613bcb05b1fd2c3fdf51e3f52c896b2c5f70"}, @NFTA_DATA_VALUE={0x37, 0x1, "762f0ff43f8bc712fd9b1da027fb627c0a01553f273f4bc8cf1db7f13db092765b6c087b7bbe89bf57cc360bc7f3c6234d9c1c"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xdc, 0x1, "164c1e8dd0b2edf850ca51cd737b7780fb3df7c7d2585ca9aab79432c1d6bcd038e6ef9eaa64713c3ef713c6ee87e61aa82caa29b9001205ed8d6276c66913f14e56608ce29b3bd552e96e10ec61d433391a013eb410032513c4c6b69113d07364a42e6712915471ddd9864039f18e7d7de5148751e2946daa85a281b8fc6bcfb30e34bc4f0ef6e18ca8028ab40afca5a9db99a89053da1b40f8fb1b4ccaa496d1aa9e403f36e5519e7fafcd0f199321fa688d4ec60f065f55ac004da4dd72f93aea6400687d8ee9ac828ad38f96fce33fac82adb371fd41"}, @NFTA_DATA_VALUE={0x1004, 0x1, "d85a2f708381bce38c566cd1ba6fb1236f7b13c525f5390b5488ee1c53c87dfaf6187bb2eedb05358dc8af759dfdea49da450981b00c2fd5d659d19b26c349d9861e36405e04140f78b19c3de70870a7c27dcc001f66d42c7864e75eece6ed410ac54e16922eafaa470bb84d74a1bf858b02d14600c8f0b8f51a8d142a7f2966639685237af95c2e2aac269dae53ac28798a948451a4b9889881199eafac6d977f47f298c041f1a17b56e7dad7813448a208e4194bba41d8807561d473f307868ef2e590b895e8556d56b0d19e4eb49a3197b58bff6a8271c82d5208b3086f4b8f9e5f0ccc1c0bd02121cf846ab2d8c4d50606cc926f2dee5a288222503ce098dfdd1bc7267786877f4af91f7188cda18f8a575bb062d3a0d9b9e0d7fd19df648cf99531009c2448009314b62e51649a9a1e13dd2ff9dd5b75b407fa3d6c1aa13a17f69bf80b79375152185b5a7d907fe44d12fc64aba031980ecf6f6a35f2f64b6a8fddf558057718e21affd160b366a7438835461e7af33ccde2468d7a7fb95da24ef0d4d07bdeb146e5dee19dfaa0e75ed47dea4c52b9d8d463bbd06f2969f9b2718323fc092bc4d7782d649e3453b228749cc1794203a668e44a519eeb4739f05e45a62e557cadd25fcfe45f55dcb9c80ce7cf6ca6eb7b801a77872f61850e963ce4f212fcd6e2a606d948edfafdc90d8373931efea03ecca7720522ae439388153a89e17d24d0e7d084ad0546dd3d88b9b56fb7ca60a2c042f43abd5272376135f59cf099b9f277388fa40c3373868762237fc7ab2ba855401404d32ed694d50877de97776b44223792cecd03178579c37949ab7c777983693fed2f0769da13be967d218f2d8804df8ade1c5961725f30b4d32f64590007ff6ec84f5aaa7e23f576114b5407bceb427f4378c35afe6623fefd04a6513783e10ba22a7780bf1d9f3381ff5cca6b74124bc44117ece7c5b290e9f729818fab36641452df3f19003f06ca71248a0f5fb658eb102377490b375f0d97e74b973be7894e0ec6b9733feb87e12c9bd198a21ec9ca3358da0fa21b8e88ac9a9557fc44b685b6847a45bba543b585bf7af726a67ef3396b514c78a261f5cbb9fe9931bb4378b48bd5d02318714b570c37b65392e142ef58840aeded34601e6162e6447fec981458c311e5932f3f8b97cd4c78d9aac7dc9703dc9ba29ae70c86d193c74487cfaf65e2f5a141eaf0cf33fcc172a2dac8bbd197f4316f6ef851c168e768dbdca3be81e55b07903151f87764ed14be2ebf2ceaf5c892012470eea6cabcc3e680ec5e1afe71f4021c09763cf7a44fde3b8932aa5ccdd21904df2230f4d93ae37d80b637625676a3a8e8ef6f4264a9ab08c5c7b98782a136852545656057f2a644d36bc9811997fc0b2f887598917c19c92749afae1748bcd6d333e573a5fc5dee39f49d518c81263e8a92d75e6cd029a954b90a37a3ba5767bcf88966e2db70f71cdf80a441abbd48904b4767d1f800a0a3cd91449edc0be8def14388b7d1ca1910a474671a46d1df465df44308ed1dc8da921121d19559274d3e2cd699f3eadfcd76202b8cf2d52b7c653056b8644cf18d168ca36aae56b0a2bb30d5bd0466dd981a2d08f929270b5e920ab4e020f780e9d732076cbd2b10f8fc231fb92e29c201ed037fcad00adfbce859ebecf356b44ef0759f78356d4bc786eeb57b0d8fcc6b919c846f8c6897256e4fb9f8b8c5c299d918a9c2872b76d74c496f4963177357207138aa781847d0794d214b9971eabc97c5c8e83d96f910d6d9ac1b7288bcf49fc96eccb77b3ed530fe51e8b847213050e084163f111036b413660aa3343dfb34f82337e2c022d8e08298c699345c084056cab0790acadf7796dfa2b9824fae6a8704848963ec1479c2dc2ad59b954d697f840a35d45a8ce0f24c3f4da4a37f5f0d57dc76d80ead0db823fc4072dd1938c76da32e53cbf63564ca8774a8c4a618ec5dc6831fa108aff2e7294fe5a9ccf19e37f6e65d882abff4f1f8600c8f95419b44ed00ec6b9b90ca709793d8f19f99f1e01a6c6bf1eb43b9edb2307b2563b3d26a41b9205e1bfa83af281de757873d2990b6dffa61e9e7d73621d49568801bbf73b153b87c6f4eb137840892d6a041153acaac9c8936774309e4311a5e48d69537bcea59a06f4cce7efcfaae11ee9efb9741e6bb5b600524d78ccb35c8d867b337fab9e8f9ffa5f67810b5abfa05b5bb7bc46d67e6673d41d98a6cdd07c8d1c26f61ac853a525410275cbc82aa985d199e4c415f371ffaed68d887c4d489eaba0b0531735fec633e5f1c69f7f95c8996b01133de950636749bff6d388fbd9add09186077e3163e9d35c288144c92375d8a39d16bfd934c37aab9f469f64d4158b97ec8c6a4e61e03fddf1628e722a7626cd946283aa9c76763638172a667c0c47dd2f098e8571c9a7251fe22083cf0573d18976ac2194cd040b38ffb8072b54522b9ddeb58f3f39bb75719557e40b3222c31dc63b179926e6b65aeca94c4a3c1e00bd48b597190622ffd3be6684ebd760e6d2a3620265d02498b8cc61aa38b226b23a97ee1c9b0bf1d90518ecfa2f01175be2630bf46491540dc2729021a77ed66f3dcb5385fb55f8d73fc57999f8d9aaaadf8a595112c012b99e478764a61cce556c87f34671e4bd5211fa9f4256a6fd14b1741aa1300ca490251a7f32d55acce93d255b77689ce3a3533ca40cf13648e82232b565aad1e3fee45d7c2b6193ce1139dbe8077562861805489b65fcdc663ef52225284d86a434a83b9a7462ffe3fe3b155d54762eb64a4d65f8bde2f2d68ac25bb8f1ebbe622e6fac2c820284d1ec0383973710c33fa909939c77110ed3c0917661518e8e5941764a9eac0dbf7102c1d47ff42430306fe3e9f6a2db583db4c76c6779c2a7d156078614a1c2127b7c78d88521baa0d2a6773e34e57cc1bd84a1e0b67c9a1e7e0f125ba0eea6164c3c977a29f0ef88099486efec94430b1b7128f66ecb0a3be44bf8e5b9f7034c55695069815e2dfaafe2648f6671445f90dcc1123e03a8bf5d8a156e8825cd8a1698a3311414f0a79dafead4bada8e9d0713cfbb8bdf5b76259a7123b92129183c63a085d7eab6bd47afb71f06f20cfb8882273d4de7a64bf00e9452913a019d8cc9462b20fb6c33886ac417c1531dce00f72c1465c0bbbfeead1dd651c25bb3846c92409d2cdbbf1a9aafa4655007db287f02c36ccbfa8b6eceef98f8709caca6b04d0bb4c331be5c4aa404bcb912347d0575458f1c6a9a7678771e4072af23356cbe55e1d93369ccf1382809d3b735e404f314fa19eeceac1b962f455039defd5b63676fe5b65583efa47a4fac20d8d959f2c291b327c63e5471302c26d0510bc8b9ee9d77c13d3bb7fa5f6a95ce6423280cb27bf73e429368aec6299f236b11db74af2ec90f9a885292f268a736e4e6090bbf3588a644a550228b06624954fc34ef13417725444d656feacda20ac3c30bee09d6eaaac966e5f73e73bd1edb50e50a2a83bfcc639e020933a4e7e0feb24e3d60dc510800c3bd75434a96bddaa74e1c878bce5daf6331e9c1d35308a4abb69f47b647febfae0ef81bdfc6e3c5fc624aeadad23e70a374178afef54cf2db9be272340259e5e2f4763e891fb8f622a82ac2a9f54b20d4b3de7fdc236585adf7c87747cd87a5983c9d64ba1c589921f7888a4c1add2e67b5af32a6566f0d9f8ec1c4b8fe640f970a2a33164d5b91ebab3e72b6b5e35836223e77d3077f1e05d3351158601f9283334e0ef13ca849d0ac0081e4269810e90aa6d3bba660d0ffc3bc2b1bc8e77da9aabe43e10ebd73117d8325b01500bfe93c400f2f496d64c6253b4dee4bb31980464b19d1c0fe503d13656f67f4e55abbdb656dafb80cafb811f7383e3c7f29edb36081596271f797658f4175dcf895b0be92301dc923c4ee66f9a856e7448349d46592e30c7b35084c3c77226cf5466f651dff1decc27c58239f88c2712e2e8f37c6a8c50092d9bc11c7036d9045e250b71c379196ddc9fd5ecc809365b529cdf28a304237e6f9e230485594137ca23037d102c4b1f7810824caf55646964bfd474ea7a342f305bdec9a8697faacc04a4b1ed6ec2881d89750f0cd9f214059c0ad308eea822aa48ac42926fa9bd9ec93cb6b47e2b8728c4ed3c0faabd2f5342c8f39ec33e5755e2c632b1c10c21e7b6d4e14fde001e796dd144014e8d7eb3f046a6c7c35ffaa793d8003d8b5af88eed17a95b5afa035218839d5e166a63778c35aa19efcc3232e8b2cb126013dd7077c80a5d928905768009314b4ca2c21adf5d3399892671e2009dd8a3b2f8c2b91e8a9bf2344fdd03e40f6561361dd366c2c569381ac2cb81351625e23489ee4cc20986b7b80a60f4517f972936475a1099fc5fa66de5f71850819d6485ee115186ba7b46d834adc92b08187fead92d32aa12853b0d9a887e3e3530f95d784c739c004d24d9ce035dea1a05ece88e1d08fc4c089a7e6a52ea480b2239ab2da42151d9f2d1cb25007d8ac433b60f472316219313015643b419483d75e1d0579015cf9dbb1e04292f314dcfe27e41a84c1a57587713b4b4b93c3321b9706cadc20116142d24f73a51db04c72a16c38d5421c221f8996f257ea15cd88cbba07feb720836a2e5d355da422e23757dceef8bb70b23ad486d7e61368e583c8c4c9caec0ada35d258e20fdbe445451b6886d295abd833b390f4335e0d51b665ce084727e23791b44349b8dc6025589a8c5fb7b8d27f9119c4ee02ad96aa973af8606d0b51c83206182002146fec01b23d3fa3745eecc14a977a0e8fe4eeecf8aa5b92d9428fbf27619d9c24d00782ebd206f5a3467196bd974e2fb9f1f068a3cc5ecec42146d1081b4ec47f2bf34d42b7006804101797df6f44a949ea18e4a8df8471146199fa33f4d75bcc49b94ecca453abc4fea44873552345a8a0f16774cfdeb7451bf0946e6d53cd243b1422d926281b25f0cea1d1bcc1ae59987475999bf802c1d5d78d676c4f64e428e99e83679cfd32d3bfbd565232baabc0861d53789f0d6428cec728b488cf8cf08d2598b19ca509e06546a218588c891964591dd1081fc167267de963312964d6472797cc644fbffb3cd930b1166ce7579ce68eabba36cf3563156a4255356aae39bf4bf524820b0124f1daa88f4e321e3d663cd1b95b355d08abe48f854a4cd0db35006a7791fef5992340d39e45bf763255a62460fbb1d3eeed024e4d5d74c1eb62fc0831ffd863f73137d67ab0497735d995a1a815706fb7cc0562ba113c0a6b90d34662579bc599edab0dad6f3fafacc8d4a4392ae585037686103559144a4150260db1bf4719dc7a3c45128271a4fd37cd9bf07a30439febbe840cd97705dbbfd68e0e3964eb1707a2cba78109680037ab98e09e5a2caf719d98f525cf88bebdf16e0d60b2d9a04ff274002c82bf0c142c638dccb66b33379625cd664cd58c15b546a64a2be386b004dbbb1b3f326f12e19fbb1b7043656b36661eba9fc98ef4b37d9475b7716037ac423868ae4022028405c0009ce547074abcb85b32875358dec3b44f071d80bc3cd8c2d3579e87310308a1af7436975d768a9c6ab5e4dedce205ec29ce316508b1e040eaf41f69266b6c754d5190960d5967e88f202578f806c5451c746d2102537f614a061ae7644b3ed94b9a2b84c15f3899c24f4722889aeb99dc71671bb11dd44fff5b04a2f51c84dc85e08deae4958b1981ae74e23ffece03f49a47eb6f5af32d56b38ffa7"}, @NFTA_DATA_VALUE={0xb4, 0x1, "ed54afc8a1763dab2b6dcec0f44a59cfe6522c6b0ee9dd6c0f0337dc015528ca37e0ebd56312457a6e1e53a547ea3cd851d14f467c416feb14b15a1bd5978200370fe1c54409f4428c0e28a7e9cedff2ff0bbcd7920ca7b15e6d27d527af89e764898fc3501b5592b65bab420bad9f0f23bf91f93493164a6d07129d6e375b62d8b7a2f7e0227b9aec61efd6758619ab10fc81e8cf773b252cb5d889c3cbb5f2156df4b0715ab892ddea52b8fee705e7"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x32a8}, 0x1, 0x0, 0x0, 0x8880}, 0x800) 19.433738953s ago: executing program 1 (id=358): socket(0x22, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1d, 0x2, 0x6) (async) r2 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x123}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async) prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) symlink(0x0, 0x0) close(0xffffffffffffffff) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) listen(r6, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) accept(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) 12.35272604s ago: executing program 0 (id=380): socket$kcm(0x21, 0x2, 0xa) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) io_setup(0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x72e5, &(0x7f0000000380)={0x0, 0x12c0c, 0x400, 0x7, 0x2000284}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f00000001c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x40010, r10, 0x85000) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004d000048fffc000000069078ac141400ac1e0001440b08ac1414bb64010101890fd7ffffffffac1414bbac1414bb8903000000004e2300006c46fc9aaeaa992fda86e09168334253560cec9488762e2fa04c8143f2670aaaa10eef2f25354b2f575057dbb135368aa992c6da4047e5a6b8d2f049acac9d2fab90dbcf535137565efae350f3a972b230b9cbe8f1258b99", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341) 10.347561409s ago: executing program 4 (id=390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x38e4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003340)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xf2ff, 0x2, 0x9, 0xfffff800, {0x8f, 0x0, 0x10, 0x13b0, 0x200}, {0x10, 0x2, 0x201, 0x1, 0x7, 0x7}, 0x9, 0x7fff, 0x8a}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x78}}, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000200)={0x2, 0x0, [0xf7, 0x2, 0x200, 0x2, 0x8, 0x6, 0x7, 0x5]}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_usb_connect(0x5, 0x4c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023a00010d019002090432a70201039e08090588061000060408082387ac33afe3410725010305f804090507020002040266072501"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000480)='squashfs\x00', 0x0) fsmount(r5, 0x1, 0x5) syz_usb_control_io$cdc_ncm(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x5, 0x62, {0x62, 0xb, "d0ee44b867edc4e7d1752ba363b7defe459dc7cc528e3417500a6b3f593432b678e2b9297ccdf280fd3968dcda2b8b4dd7e1f1bae9dabd54e953e46a3bce6d3cd09800277deac753ef4ab32d940d000ac74010d8d5e249a659fc011e6ea587b0"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x0, 0x1, 0x4a, "3431b0be14eb5aaf1ce6dade576a1ccd88bf6680e96638a9da2af3a3d3890a70f915e0f654e08cc142286588deecbce5252a8dd3df10657e5770080f47d28a9bef5037f1c5f9c56fa4d8"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xb1}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x8e3, 0x3, 0x9, 0x10, 0x4, 0xf, 0x6, 0x1, 0xd887, 0xaa5, 0x3, 0x5ac}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0xd}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0xfffa}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_disconnect(r4) 9.745871427s ago: executing program 0 (id=391): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000000)='{*!-{-,]\x00', 0x40000, &(0x7f0000000040)={@_ha_fsid={[0x3, 0x5]}, {0x81, 0x80, 0x4}}, 0x400, &(0x7f0000000080), &(0x7f00000000c0)=0x24}) r4 = syz_usb_connect(0x6, 0x24, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r2, @ANYRES64=r1], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000218000000d9953d538abe3f1b0c8f6c7071e91367bc644b39807d4932b40dbeb6a6a3c3d1c08e784e1eb3ec397701b34a9df7f7d4fa1db2c422798bd4761ba6b0ff4e08a8f4ef47fc377546245ed376fe746fb20acf1671a5892eac4076f6e5350d0acffd387aaa51a7d7a4280f0ead8bc43191c8ee661ad4d5dee81b66c6c3e03197b466a110a06a44469a26197b5a13d8bbf85325c154980b1874dc8b4ad16f74a1406835f3e18cff86208144f60686849cad7c137dac11141e8b846b2351e71390f78e1c5c21770490f755257b056900f8998cf06cb80548aea4c618983a0db95d90da41df7859b2827dda740decfe9b13ec52"], 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x35) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) inotify_init() inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x2000008) r5 = open(&(0x7f0000000100)='./file0\x00', 0x9a080, 0x48) preadv2(r5, 0x0, 0x0, 0x2, 0x8, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) flistxattr(r7, &(0x7f0000000180)=""/18, 0x12) socket$inet6_tcp(0xa, 0x1, 0x0) 7.994214429s ago: executing program 4 (id=394): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x7, 0x10000000, 0x5, 0xf, 0x1000, 0xb, 0x1002, 0x7, 0xca, 0x201, 0x4, 0x236f, 0x8bda, 0x4, 0x7, 0x200000000000020], 0xeeff4000, 0x216156}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x7, 0x10000000, 0x5, 0xf, 0x1000, 0xb, 0x1002, 0x7, 0xca, 0x201, 0x4, 0x236f, 0x8bda, 0x4, 0x7, 0x200000000000020], 0xeeff4000, 0x216156}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) (async) bind$alg(r4, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) recvmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/147, 0x93}], 0x1}, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x2, 0xffff, 0x2a, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x10, 0x8, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x2, 0xffff, 0x2a, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x10, 0x8, 0x7}}) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa0010}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x200408c1}, 0x5) (async) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa0010}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x200408c1}, 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r9 = socket(0xa, 0x5, 0x0) listen(r9, 0x100) r10 = dup(r9) sendmsg$inet_sctp(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000008400000007000900"], 0x18}, 0x8050) (async) sendmsg$inet_sctp(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000008400000007000900"], 0x18}, 0x8050) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) pselect6(0x40, &(0x7f00000002c0)={0x10000, 0x2, 0x1, 0xe6, 0x934, 0x9, 0x8, 0x4}, &(0x7f0000000340)={0x81, 0xfffffffffffffffb, 0x7, 0x2, 0x10000000, 0x10, 0x4, 0x5931397b}, &(0x7f0000000380)={0x80000000, 0x4, 0x7, 0x3ce0, 0x2, 0x5, 0xa2, 0x5}, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000740)={&(0x7f0000000400)={[0xe]}, 0x8}) 7.671538945s ago: executing program 4 (id=396): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r11) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 7.3181226s ago: executing program 2 (id=397): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) (async, rerun: 64) getpeername$inet6(r0, &(0x7f00000001c0), 0x0) (async, rerun: 64) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xfffffffd, 0x490420, 0x2, 0x2}}, 0x50) (async) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) (async) ioctl$XFS_IOC_SCRUBV_METADATA(r6, 0xc0285840, &(0x7f0000000200)={0x401, 0x9, 0x8, 0x0, 0x40, 0x6, 0x0, &(0x7f0000000140)=[{0xe, 0x1ff, 0x8}, {0x5, 0xfe, 0x9}, {0x0, 0x1ff, 0x7}, {0x5, 0x1ff, 0x2}, {0x5, 0x101, 0x8}, {0x8, 0xfe, 0x9}]}) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000100)=0x10) r8 = socket$netlink(0x10, 0x3, 0x6) r9 = socket(0x21, 0x2, 0x80) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRESHEX=r10, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES8=r2, @ANYRES32=r7], 0x3c}}, 0x0) (async) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000240)={0x4, 0x2, 0x2, 0x80}) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r11, 0x6, 0x2, 0x0, &(0x7f0000000340)) 6.566693962s ago: executing program 0 (id=399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000380050003"], 0x38}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)="f2335f01000880000000e1", 0xb, 0x1, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 5.66562669s ago: executing program 0 (id=400): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0xa8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket(0x2b, 0x80801, 0x1) listen(r1, 0x9) sendmmsg$inet6(r1, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000090) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x6, 0x4, "74a93919"}, 0x0, 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000030012800b000100697036746e6c00002000028014000300fc020000080300000000000000000000050004000500cd06"], 0x50}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0xa961, 0x9, 0x8}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44000080}, 0x24040040) 5.453693138s ago: executing program 2 (id=401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f00000005c0), 0x3a1000, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000600)={0x2, 0x79}, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000680), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) pselect6(0x40, &(0x7f0000000180)={0x10001, 0x7f, 0x3, 0x38000000000, 0x3, 0x80000000, 0x4, 0x7f}, &(0x7f0000000700)={0x800000003, 0x8, 0x7873, 0x1, 0x10000000000010, 0x6, 0x6, 0x3}, &(0x7f0000000740)={0x6, 0x9, 0x8000000000000001, 0x8, 0x6, 0x101, 0x101, 0x43}, &(0x7f0000000780), &(0x7f0000000800)={&(0x7f00000007c0)={[0x3037]}, 0x8}) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1fffff}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)=@delqdisc={0xf4, 0x25, 0x4, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0x9}, {0xffe0, 0x6}, {0x5, 0xb}}, [@q_dsmark={{0xb}, {0x94, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x33f}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x17}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf63}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x36}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x401}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x33}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa8}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2ca}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}]}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20008804}, 0x840) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000071, 0x0, 0xff00000000040000}]}) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x400, 0x25dfdbfe, {{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x4d5, 0x32}, 0x0, @in6=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@private2, 0x0, 0x0, 0x0, 0xfd, 0x204}]}]}, 0x13c}}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6a000000006411fffe8000000000000000000000000000aaff0200002000000000000000000000014e1d4e200064907802000000030000000200000054e90dade0f83f43817a33a14e885678a5f38ab436a174d6f2369fc532f6c82bfc7dfb6e5293418dd950af36edd6dc1c9cf20b4958f15cd0a3eddaf23b2e0eaf6272f64f06756f4bee7a8933b1524843"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) 5.336825774s ago: executing program 4 (id=402): unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x3, 0x58, 0x940d, 0x800, 0x5, 0x0, 0xfffffdffffffffff, 0xfa12, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x400f, 0xffffffff, 0x7b1, 0x2000e1d8, 0x4, 0x8}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x32, @multicast2, 0x15, 0x3, 'sh\x00', 0x28, 0x6, 0x70}, 0x2c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc23000000000000000000000000000100000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f000000fc030000000000008000000005350000027001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000b007f00"/248], 0x140}}, 0x844) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x9}}, 0x44) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x1000, 0x0, 0x2cf}, &(0x7f0000000040), &(0x7f0000000600)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r8, 0x40045731, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001}) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) 4.203833675s ago: executing program 32 (id=358): socket(0x22, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1d, 0x2, 0x6) (async) r2 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x123}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async) prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) symlink(0x0, 0x0) close(0xffffffffffffffff) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) listen(r6, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) accept(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) 3.707527823s ago: executing program 3 (id=406): write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001080)={0x38, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x1}, @increfs, @register_looper, @increfs_done={0x40106308, 0x3}, @enter_looper, @exit_looper, @increfs], 0x1000, 0x0, &(0x7f0000000080)="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"}) r0 = io_uring_setup(0x7c37, &(0x7f00000010c0)={0x0, 0x259e, 0x20000, 0x3, 0x3f}) syz_io_uring_setup(0x5238, &(0x7f0000001140)={0x0, 0x84c8, 0x1000, 0x3, 0x1bd, 0x0, r0}, &(0x7f00000011c0), &(0x7f0000001200)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) statx(0xffffffffffffffff, &(0x7f0000001240)='./file0\x00', 0x1000, 0x40, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001380)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e21, 0xfbff, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x29, 0x0, r2}, {0x9, 0x5, 0x7ff, 0x5, 0x1, 0x4c, 0x100000000, 0x2}, {0x380000000, 0x8001, 0x7, 0x2}, 0x2, 0x6e6bb1, 0x2, 0x1, 0x3, 0x2}, {{@in6=@local, 0x4d5, 0x3c}, 0x2, @in=@multicast2, 0x3501, 0x0, 0x0, 0x4e, 0x0, 0x7, 0x3}}, 0xe8) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000014c0)={&(0x7f0000001480)=""/50, 0x32, 0x4748, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000001500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000001580)={0x4, &(0x7f0000001540)=[0x6, 0x5, 0xfffffffd, 0x0]}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000015c0)={0x2}, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000001600), &(0x7f0000001640)=0x4) r5 = getpgrp(0x0) fcntl$lock(r3, 0x6, &(0x7f0000001680)={0x2, 0x2, 0x57, 0x6, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd28, 0x25dfdbfd, {0x2, 0x80, 0x0, 0x4, 0x32, 0x0, 0x0, 0x3, 0x10002}, [@FRA_SRC={0x8, 0x2, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f0000001800)={0x5, 0x18, '\x00', 0x1, &(0x7f00000017c0)=[0x0, 0x0, 0x0]}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000001840)={0x0, 0xbe88, 0x2, [0x8, 0x0]}, &(0x7f0000001880)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000018c0)={r7, 0x7, 0x20}, 0xc) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000001900)={0xfffffffffffffffa, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000001940)={0x0, r8}) fsetxattr(r4, &(0x7f0000001980)=@random={'security.', '+&/){\x00'}, &(0x7f00000019c0)='+[\xa6+\x00', 0x5, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001a00)={0xff, 0xd, 0x6, 0xa, r7}, &(0x7f0000001a40)=0x10) setsockopt$sock_void(r4, 0x1, 0x24, 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$MRT6_ASSERT(r9, 0x29, 0xcf, &(0x7f0000001ac0)=0x1, 0x4) r10 = socket(0x59b691d655813cf9, 0x1, 0x0) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x48, 0x4, 0x6, 0x7, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x44001) socket$inet6_tcp(0xa, 0x1, 0x0) 3.441898986s ago: executing program 3 (id=407): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x3) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c5) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x1, 0x5) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000812020050003c8000000000008000200"], 0x60}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304000000010000000000000000", @ANYRES32=r4, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c00028008000400888c0000"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) 3.375123654s ago: executing program 0 (id=408): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffff7fffffffffd, 0x80000001, 0xffffffff, 0xfffffffffffffffd, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0x8000c595, 0x0, 0x1, 0xffffffffffffffff, 0x7, 0x80000004000000, 0x8d], 0xeeee8000, 0x2150d3}) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 3.127914872s ago: executing program 4 (id=409): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x500) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, &(0x7f00000000c0)={0x1}) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f00000001c0)="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") writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2.962156311s ago: executing program 2 (id=410): syz_open_dev$video4linux(&(0x7f0000000480), 0xd, 0x123002) socket$inet6(0xa, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x400100, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004041) r0 = io_uring_setup(0x1978, &(0x7f0000000280)={0x0, 0xca72, 0x4, 0x0, 0x20002fb}) r1 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x11, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffffffe, 0x0, 0x1ff, 0x0, {}, {0x5, 0x2}, {0xfffffffffffffffb, 0x4}, {0x5}, 0x60, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x69b2, 0x7721, 0x4, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42008, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) bind$xdp(r4, &(0x7f0000000100), 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x0, r4}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0xe244, 0x13580, 0x4}, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r7, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'ipvlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 2.960718632s ago: executing program 0 (id=411): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 2.754927509s ago: executing program 4 (id=412): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x2b, '\x00', @buffer={"010d1de90c16308a633fda925d1085c6b9f70f72ad6cc5f4853700", 0x20}, 0xfffffff9}, {0xa, '\x00', @data, 0x5}, {0x17, '\x00', @st={0x4, [{0x3, @uvalue=0x8}, {0x3, @uvalue=0x9}, {0x1, @uvalue=0xc17}, {0x2, @svalue=0x40}]}, 0x7fe}]}) (async) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x2b, '\x00', @buffer={"010d1de90c16308a633fda925d1085c6b9f70f72ad6cc5f4853700", 0x20}, 0xfffffff9}, {0xa, '\x00', @data, 0x5}, {0x17, '\x00', @st={0x4, [{0x3, @uvalue=0x8}, {0x3, @uvalue=0x9}, {0x1, @uvalue=0xc17}, {0x2, @svalue=0x40}]}, 0x7fe}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x6c, &(0x7f0000000040)={[{0x65, 0x4e00, "5b08b0912442f849242d739e36a61e25f3ba477938b6ed9f247ed3d3ee88301809c39bd852c0ac6f7adaf09d2bebb69cadb19c4a709fefa26ad4caba71648d3545270ecff22757fe871f027a2e2c7847d4d1900271280465c7cc4fd9c0cb5b0c2b10413589"}]}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x6c, &(0x7f0000000040)={[{0x65, 0x4e00, "5b08b0912442f849242d739e36a61e25f3ba477938b6ed9f247ed3d3ee88301809c39bd852c0ac6f7adaf09d2bebb69cadb19c4a709fefa26ad4caba71648d3545270ecff22757fe871f027a2e2c7847d4d1900271280465c7cc4fd9c0cb5b0c2b10413589"}]}) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x20, 0x14, 0x6, "f99d5133974f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 2.60189715s ago: executing program 3 (id=413): syz_open_dev$vim2m(&(0x7f00000001c0), 0x100000001, 0x2) syz_open_dev$ndb(0x0, 0x0, 0x101801) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4003, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xb, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r4, 0x0, 0x0, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @remote}, 0x14) 2.305528344s ago: executing program 2 (id=414): openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) pipe2(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000006f00f000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01020000000000000000020000090900010073797a300000000074000000160a030000000000000000000200000a4000038008000140000000002c00038014000100776c616e3000000000000000000000001400010070696d367265673100000000e1ff000008000240000000020900020073797a31000000000900010073797a30000000000800074000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000170000008500000083000000bf0900000000000055090100000000009500000000000000850000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000c62d008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000100095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1) close(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r8, @ANYBLOB="0200ee050a000200aa"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r9, 0x70, &(0x7f0000000340)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0xffff, @local}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}]}, &(0x7f00000001c0)=0x10) 2.131448214s ago: executing program 3 (id=415): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x7ffe}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000b00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.479387099s ago: executing program 3 (id=416): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) r0 = socket(0xa, 0x801, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000140), 0x3, 0xc041) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x5}) r2 = io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x7b61, 0x80, 0x1, 0x60}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfa, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) unshare(0x64000600) (async) socket(0xa, 0x801, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000140), 0x3, 0xc041) (async) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x5}) (async) io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x7b61, 0x80, 0x1, 0x60}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfa, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) (async) getsockopt(r0, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54) (async) 533.980885ms ago: executing program 2 (id=417): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000d40)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000004a80)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002340)=""/199, 0xc7}], 0x9}}], 0x1, 0x20, 0x0) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0) (fail_nth: 35) 73.780817ms ago: executing program 2 (id=418): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r3, 0x7fc, 0x2, r3}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x3}, 0x20) ioctl$KVM_SET_IRQCHIP(r2, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r2, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x3, 0x0, 0x2, 0x2, 0x0, 0x10, 0xc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}], 0x5}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=419): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x24}, @l2cap_cid_le_signaling={{0x20}, @l2cap_ecred_conn_req={{0x17, 0x7, 0x1c}, {0x5, 0x3f0, 0x7, 0x8, [0x2, 0x3ff, 0x9, 0x5, 0x7, 0x3, 0x3, 0x1, 0x8, 0x0]}}}}, 0x29) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "7c2b7a5320812f5e", "42c02a810f915c21d59fc4d107edd4fe8a63ea1a65302a3067ede39aa407034a", "768b5467", "1e823888593313ac"}, 0x38) fsopen(&(0x7f0000000200)='hfsplus\x00', 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x3, 0x4}, {0x3ff, 0x4d}}}}, 0x11) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r0, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x48, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r3}}) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x0, 0x100000e, 0x50, r0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000002c0)="4455b50e718644967d38d462b56020c3faf95ab167c6a10e0ac29ca7287807e7a4eb2ee6e698255804f16ec05e9c9532957b75e4a7e645569f9c52afd407661c08a35fcb4d81e07b", 0x0, 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000340)={0x2, 0x2, 0x1, 0x7, 'syz1\x00', 0xfffffffa}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={0x0, @l2={0x1f, 0x7, @none, 0x0, 0x2}, @generic={0x2b, "b56392e761e8decbe82d700fb226"}, @llc={0x1a, 0xf, 0x3, 0x4, 0x0, 0x3, @random="49689c4fff3e"}, 0x4ced, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x2, 0x5}) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f0000000400)="f5ad83df8a7834d7bbb38e0aa7598d9ae6f74d3769039b61", 0x0, 0x18) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4}, "6fffb50d"}, 0x8) r5 = memfd_create(&(0x7f0000000480)='syz1\x00', 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r5, 0xc0186e87, &(0x7f0000000600)={&(0x7f00000004c0)=[{0x935, 0x1, 0x1, 0x80000001, 0xe7}, {0x2, 0x9, 0x9, 0xa, 0x80}, {0x1b, 0x0, 0x2, 0x3, 0x97a6}, {0x8, 0x6, 0x47, 0x7, 0xa1}, {0x1, 0x8000, 0xa, 0xffffffffffffff80, 0x4}, {0x80, 0x2, 0x0, 0xffffffffffffffff, 0x6}, {0xfffffffffffffffc, 0xfffffffffffffaed, 0x4, 0x8, 0x5}], 0x7, 0x28, 0x5008, 0x6}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89bf}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @cb_func={0x18, 0x1}]}, &(0x7f0000000780)='GPL\x00', 0x36a, 0xaa, &(0x7f00000007c0)=""/170, 0x40f00, 0x4c, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000900)=[{0x4, 0x5, 0xb, 0x1}], 0x10, 0xffffffff}, 0x94) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000a00)=[{0x0, 0x1, {0x0, 0xff, 0x2}, {0x0, 0xff, 0x1}, 0x2}, {0x0, 0x2, {0x0, 0xf0, 0x3}, {0x2, 0x1, 0x4}, 0x1, 0x3}, {0x2, 0x1, {0x0, 0x0, 0x4}, {0x0, 0xf0, 0x4295169b2b517b89}, 0xfe, 0xfd}, {0x2, 0x0, {0x1, 0x0, 0x1}, {0x2, 0x0, 0x3}, 0x0, 0xfe}, {0x3, 0x2, {0x2, 0x0, 0x2}, {0x0, 0xf0}, 0xfd, 0x2}, {0x3, 0x1, {0x0, 0x1, 0x4}, {0x0, 0xf0, 0x4}, 0x2, 0xfc}, {0x0, 0x2, {0x0, 0x1}, {0x1, 0x0, 0x1}, 0x0, 0xfe}, {0x2, 0x3, {0x2, 0xff, 0x1}, {0x1, 0xf0, 0x4}, 0xfe}], 0x100) r7 = syz_open_dev$audion(&(0x7f0000000b00), 0x7f, 0x802c0) ioctl$UI_DEV_CREATE(r7, 0x5501) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r7) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r8, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480d0}, 0x40) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000011c0)={0x0, &(0x7f0000000c80)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xa8, 0x3, 0xffffffffffffffff, 0x490}}, @nested_load_syzos={0x136, 0x58, {0x3, 0x9, [@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x44c, 0x8, 0x9, 0x4}}]}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_stgi={0x17e, 0x10}, @enable_nested={0x12c, 0x18}, @nested_load_syzos={0x136, 0x40, {0x3, 0x800, [@nested_amd_invlpga={0x17d, 0x20, {0xdddd0000, 0xac81}}]}}, @nested_load_syzos={0x136, 0x120, {0x2, 0x8, [@nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x2804, 0x8, 0x3, 0xb89}}, @uexit={0x0, 0x18, 0xb00}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x590, 0x101, 0x1, 0x2}}, @wrmsr={0x65, 0x20, {0x9c4, 0x800}}, @out_dx={0x6a, 0x28, {0x8a69, 0x4, 0x3ff}}, @cpuid={0x64, 0x18, {0xc8, 0x2}}]}}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}, @nested_load_syzos={0x136, 0x58, {0x3, 0x2d4, [@nested_load_syzos={0x136, 0x20, {0x1, 0x5}}, @nested_amd_vmload={0x182, 0x18}]}}, @wrmsr={0x65, 0x20, {0xb0b, 0x8}}, @in_dx={0x69, 0x20, {0xfed6, 0x2}}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x60000, 0x46bb}}, @nested_amd_invlpga={0x17d, 0x20, {0x25000, 0x3f89}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x1a, 0x6, 0x4, 0x70}}, @nested_amd_clgi={0x17f, 0x10}, @rdmsr={0x66, 0x18, {0x3fd}}, @rdmsr={0x66, 0x18, {0x975}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control_nat=0x6002, 0xee8, 0x6, 0x7ff}}, @uexit={0x0, 0x18, 0x8}, @in_dx={0x69, 0x20, {0x20c}}, @out_dx={0x6a, 0x28, {0xb55b, 0x2, 0xca}}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0x8c0}}, @in_dx={0x69, 0x20, {0x6a00, 0x5}}, @wr_drn={0x68, 0x20, {0x5, 0x5c}}, @wr_drn={0x68, 0x20, {0x4, 0x4}}], 0x510}) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r9, 0x4068aea3, &(0x7f0000001200)) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000001280)='./file0\x00', 0x2, 0x8) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000012c0), 0x1, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f0000001680)=@attr_pmu_init) kernel console output (not intermixed with test programs): umber: syz [ 165.370484][ T797] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 165.404941][ T797] usb 2-1: device descriptor read/8, error -71 [ 165.513788][ T5914] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.522109][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 165.603786][ T797] usb usb2-port1: unable to enumerate USB device [ 165.673115][ T9] usb 5-1: config 0 descriptor?? [ 165.728359][ T9] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 165.735771][ T5914] usb 3-1: device descriptor read/64, error -32 [ 166.138927][ T5914] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 166.176548][ T9] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 166.304234][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 166.334432][ T797] usb 5-1: USB disconnect, device number 5 [ 166.355482][ T797] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 166.382539][ T797] visor 5-1:0.0: device disconnected [ 166.395051][ T5914] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 166.441706][ T5914] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 166.476044][ T5914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 166.523125][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.572754][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.799561][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.858961][ T5914] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 166.884338][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.105121][ T5934] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 167.254245][ T5934] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.302347][ T5914] usb 3-1: config 0 descriptor?? [ 167.705355][ T5914] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 167.815992][ T5914] usb 3-1: USB disconnect, device number 5 [ 168.047713][ T5914] usblp0: removed [ 168.524069][ T5914] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 168.703680][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 168.795654][ T5914] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 168.810472][ T5914] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 168.891408][ T5914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 168.957763][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.996975][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 169.030208][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 169.097744][ T5914] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 169.149095][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.397551][ T5914] usb 3-1: config 0 descriptor?? [ 169.566511][ T6239] FAULT_INJECTION: forcing a failure. [ 169.566511][ T6239] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 169.629697][ T6239] CPU: 0 UID: 0 PID: 6239 Comm: syz.0.92 Not tainted syzkaller #0 PREEMPT(full) [ 169.629750][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.629763][ T6239] Call Trace: [ 169.629779][ T6239] [ 169.629786][ T6239] dump_stack_lvl+0xe8/0x150 [ 169.629812][ T6239] should_fail_ex+0x412/0x560 [ 169.629860][ T6239] _copy_from_user+0x2d/0xb0 [ 169.629890][ T6239] ___sys_sendmsg+0x1c6/0x360 [ 169.629919][ T6239] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.629981][ T6239] __sys_sendmmsg+0x27c/0x4e0 [ 169.630026][ T6239] ? __pfx___sys_sendmmsg+0x10/0x10 [ 169.630048][ T6239] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 169.630103][ T6239] ? ksys_write+0x242/0x270 [ 169.630125][ T6239] ? __pfx_ksys_write+0x10/0x10 [ 169.630146][ T6239] __x64_sys_sendmmsg+0xa0/0xc0 [ 169.630188][ T6239] do_syscall_64+0x14d/0xf80 [ 169.630293][ T6239] ? trace_irq_disable+0x3b/0x150 [ 169.630338][ T6239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.630360][ T6239] ? clear_bhb_loop+0x40/0x90 [ 169.630384][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.630405][ T6239] RIP: 0033:0x7f2ef6d9c799 [ 169.630430][ T6239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.630442][ T6239] RSP: 002b:00007f2ef7ba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 169.630458][ T6239] RAX: ffffffffffffffda RBX: 00007f2ef7015fa0 RCX: 00007f2ef6d9c799 [ 169.630469][ T6239] RDX: 04924924924925c6 RSI: 0000200000000680 RDI: 0000000000000004 [ 169.630496][ T6239] RBP: 00007f2ef7ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 169.630509][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.630536][ T6239] R13: 00007f2ef7016038 R14: 00007f2ef7015fa0 R15: 00007f2ef713fa48 [ 169.631371][ T6239] [ 170.165647][ T5914] usb 3-1: can't set config #0, error -71 [ 170.243883][ T5914] usb 3-1: USB disconnect, device number 6 [ 170.314620][ T6211] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 170.749463][ T6256] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 170.776210][ T31] kauditd_printk_skb: 31 callbacks suppressed [ 170.776230][ T31] audit: type=1326 audit(1773498307.488:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15af79c799 code=0x7ffc0000 [ 170.823865][ T5934] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 170.840281][ T31] audit: type=1326 audit(1773498307.488:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15af79c799 code=0x7ffc0000 [ 170.878567][ T31] audit: type=1326 audit(1773498307.488:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f15af79c799 code=0x7ffc0000 [ 170.918114][ T31] audit: type=1326 audit(1773498307.488:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15af79c799 code=0x7ffc0000 [ 170.957681][ T31] audit: type=1326 audit(1773498307.488:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f15af79c799 code=0x7ffc0000 [ 170.992351][ T5914] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 171.005378][ T31] audit: type=1326 audit(1773498307.668:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15af79c799 code=0x7ffc0000 [ 171.024051][ T5934] usb 3-1: Using ep0 maxpacket: 32 [ 171.040233][ T31] audit: type=1326 audit(1773498307.668:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15af79c799 code=0x7ffc0000 [ 171.087490][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.087528][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.087579][ T5934] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 171.087602][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.111238][ T5934] usb 3-1: config 0 descriptor?? [ 171.190151][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 171.196045][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.196080][ T5914] usb 2-1: config 0 has no interfaces? [ 171.234267][ T5914] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 171.234320][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.234342][ T5914] usb 2-1: Product: syz [ 171.234358][ T5914] usb 2-1: Manufacturer: syz [ 171.234375][ T5914] usb 2-1: SerialNumber: syz [ 171.238972][ T5914] usb 2-1: config 0 descriptor?? [ 171.251803][ T31] audit: type=1326 audit(1773498307.868:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15af79c799 code=0x7ffc0000 [ 171.357562][ T31] audit: type=1326 audit(1773498308.068:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15af79c799 code=0x7ffc0000 [ 171.357624][ T31] audit: type=1326 audit(1773498308.068:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15af79c799 code=0x7ffc0000 [ 171.721683][ T5934] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 171.748985][ T5934] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 171.789679][ T5934] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 171.809154][ T5934] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 171.822619][ T5934] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 171.838146][ T5934] savu 0003:1E7D:2D5A.0003: unbalanced collection at end of report description [ 171.854686][ T5934] savu 0003:1E7D:2D5A.0003: parse failed [ 171.861346][ T5934] savu 0003:1E7D:2D5A.0003: probe with driver savu failed with error -22 [ 171.988806][ T5914] usb 2-1: USB disconnect, device number 10 [ 172.008191][ T6253] IPVS: length: 255 != 24 [ 172.189040][ T5934] usb 3-1: USB disconnect, device number 7 [ 172.223656][ T5892] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 172.379399][ T5190] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 172.397905][ T5892] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 172.435450][ T5190] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 172.450026][ T5892] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 172.481527][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.537502][ T5892] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 172.555318][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 172.620701][ T6275] binder: 6274:6275 ioctl ae41 0 returned -22 [ 172.720993][ T9] usb 5-1: device descriptor read/64, error -71 [ 173.003629][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 173.095010][ T6282] syz.2.104 uses obsolete (PF_INET,SOCK_PACKET) [ 173.163642][ T9] usb 5-1: device descriptor read/64, error -71 [ 173.173384][ T6277] syzkaller0: entered promiscuous mode [ 173.234503][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.103'. [ 173.284266][ T9] usb usb5-port1: attempt power cycle [ 173.569199][ T6286] FAULT_INJECTION: forcing a failure. [ 173.569199][ T6286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.614173][ T5892] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 173.632266][ T5892] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 173.640638][ T6291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.658243][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 173.665000][ T6286] CPU: 1 UID: 0 PID: 6286 Comm: syz.0.105 Not tainted syzkaller #0 PREEMPT(full) [ 173.665078][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.665117][ T6286] Call Trace: [ 173.665138][ T6286] [ 173.665164][ T6286] dump_stack_lvl+0xe8/0x150 [ 173.665250][ T6286] should_fail_ex+0x412/0x560 [ 173.665342][ T6286] _copy_from_user+0x2d/0xb0 [ 173.665404][ T6286] ___sys_sendmsg+0x1c6/0x360 [ 173.665487][ T6286] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.665667][ T6286] __sys_sendmmsg+0x27c/0x4e0 [ 173.665742][ T6286] ? __pfx___sys_sendmmsg+0x10/0x10 [ 173.665795][ T6286] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 173.665938][ T6286] ? ksys_write+0x242/0x270 [ 173.666024][ T6286] ? __pfx_ksys_write+0x10/0x10 [ 173.666110][ T6286] __x64_sys_sendmmsg+0xa0/0xc0 [ 173.666175][ T6286] do_syscall_64+0x14d/0xf80 [ 173.666237][ T6286] ? trace_irq_disable+0x3b/0x150 [ 173.666304][ T6286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.666355][ T6286] ? clear_bhb_loop+0x40/0x90 [ 173.666419][ T6286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.666472][ T6286] RIP: 0033:0x7f2ef6d9c799 [ 173.666524][ T6286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.666588][ T6286] RSP: 002b:00007f2ef7ba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 173.666642][ T6286] RAX: ffffffffffffffda RBX: 00007f2ef7015fa0 RCX: 00007f2ef6d9c799 [ 173.666683][ T6286] RDX: 04924924924925c6 RSI: 0000200000000680 RDI: 0000000000000004 [ 173.666716][ T6286] RBP: 00007f2ef7ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 173.666747][ T6286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.666778][ T6286] R13: 00007f2ef7016038 R14: 00007f2ef7015fa0 R15: 00007f2ef713fa48 [ 173.666860][ T6286] [ 173.726024][ T5892] stv0680 4-1:4.0: last error: 106, command = 0x78 [ 173.761887][ T6291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.845451][ T9] usb 5-1: device descriptor read/8, error -71 [ 174.022000][ T6294] loop5: detected capacity change from 0 to 7 [ 174.024083][ T5190] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 174.039596][ T6294] loop5: [ 174.043038][ T6294] loop5: partition table partially beyond EOD, truncated [ 174.074089][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 174.146913][ T6296] FAULT_INJECTION: forcing a failure. [ 174.146913][ T6296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.162556][ T6296] CPU: 1 UID: 0 PID: 6296 Comm: syz.0.109 Not tainted syzkaller #0 PREEMPT(full) [ 174.162585][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 174.162597][ T6296] Call Trace: [ 174.162605][ T6296] [ 174.162614][ T6296] dump_stack_lvl+0xe8/0x150 [ 174.162649][ T6296] should_fail_ex+0x412/0x560 [ 174.162684][ T6296] _copy_from_iter+0x1d3/0x1670 [ 174.162720][ T6296] ? rcu_is_watching+0x15/0xb0 [ 174.162755][ T6296] ? __pfx__copy_from_iter+0x10/0x10 [ 174.162807][ T6296] ? netlink_sendmsg+0x650/0xb40 [ 174.162836][ T6296] ? skb_put+0x11b/0x210 [ 174.162862][ T6296] netlink_sendmsg+0x6c0/0xb40 [ 174.162937][ T6296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.162972][ T6296] ? aa_sock_msg_perm+0xf1/0x1b0 [ 174.163004][ T6296] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.163032][ T6296] ____sys_sendmsg+0x972/0x9f0 [ 174.163066][ T6296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.163099][ T6296] ? import_iovec+0x73/0xa0 [ 174.163128][ T6296] ___sys_sendmsg+0x2a5/0x360 [ 174.163158][ T6296] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.163217][ T6296] ? __fget_files+0x2a/0x420 [ 174.163248][ T6296] ? __fget_files+0x3a0/0x420 [ 174.163289][ T6296] __x64_sys_sendmsg+0x1bd/0x2a0 [ 174.163316][ T6296] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.163351][ T6296] ? __pfx_ksys_write+0x10/0x10 [ 174.163386][ T6296] do_syscall_64+0x14d/0xf80 [ 174.163409][ T6296] ? trace_irq_disable+0x3b/0x150 [ 174.163440][ T6296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.163461][ T6296] ? clear_bhb_loop+0x40/0x90 [ 174.163487][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.163507][ T6296] RIP: 0033:0x7f2ef6d9c799 [ 174.163525][ T6296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.163541][ T6296] RSP: 002b:00007f2ef7ba1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.163562][ T6296] RAX: ffffffffffffffda RBX: 00007f2ef7015fa0 RCX: 00007f2ef6d9c799 [ 174.163576][ T6296] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 174.163589][ T6296] RBP: 00007f2ef7ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 174.163602][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.163614][ T6296] R13: 00007f2ef7016038 R14: 00007f2ef7015fa0 R15: 00007f2ef713fa48 [ 174.163646][ T6296] [ 174.235589][ T5190] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 174.347188][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 174.347234][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 174.347270][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.350189][ T25] usb 3-1: config 0 descriptor?? [ 174.503884][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 174.583131][ T9] usb 5-1: device descriptor read/8, error -71 [ 174.602734][ T5190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.625741][ T5190] usb 2-1: Product: syz [ 174.630656][ T5190] usb 2-1: Manufacturer: syz [ 174.688192][ T5190] usb 2-1: SerialNumber: syz [ 174.701478][ T5190] usb 2-1: config 0 descriptor?? [ 174.708699][ T9] usb usb5-port1: unable to enumerate USB device [ 174.818726][ T25] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 174.921810][ T6288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.943000][ T5934] usb 4-1: USB disconnect, device number 9 [ 174.951377][ T5190] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 174.955462][ T6288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.990088][ T5190] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 175.001416][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 175.030250][ T5190] usb 2-1: USB disconnect, device number 11 [ 175.165698][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 175.182718][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 175.200046][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 175.215080][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.228515][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.242703][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.252604][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.302840][ T6311] binder: 6310:6311 ioctl ae41 0 returned -22 [ 175.383948][ T5934] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 175.508297][ T9] usb 1-1: usb_control_msg returned -32 [ 175.521759][ T9] usbtmc 1-1:16.0: can't read capabilities [ 175.533811][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 175.547475][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.569563][ T5934] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 175.617688][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.654355][ T5934] usb 4-1: config 0 descriptor?? [ 175.679716][ T5934] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 175.893124][ T6323] binder: 6302:6323 unknown command 0 [ 175.904511][ T5934] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 175.916106][ T6323] binder: 6302:6323 ioctl c0306201 2000000001c0 returned -22 [ 175.957064][ T5892] usb 4-1: USB disconnect, device number 10 [ 176.182653][ T5934] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 176.198086][ T5934] usb 2-1: can't read configurations, error -71 [ 176.345875][ T6331] FAULT_INJECTION: forcing a failure. [ 176.345875][ T6331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.363008][ T6331] CPU: 1 UID: 0 PID: 6331 Comm: syz.4.118 Not tainted syzkaller #0 PREEMPT(full) [ 176.363036][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.363048][ T6331] Call Trace: [ 176.363057][ T6331] [ 176.363066][ T6331] dump_stack_lvl+0xe8/0x150 [ 176.363101][ T6331] should_fail_ex+0x412/0x560 [ 176.363142][ T6331] _copy_from_user+0x2d/0xb0 [ 176.363166][ T6331] ___sys_sendmsg+0x1c6/0x360 [ 176.363197][ T6331] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.363269][ T6331] __sys_sendmmsg+0x27c/0x4e0 [ 176.363299][ T6331] ? __pfx___sys_sendmmsg+0x10/0x10 [ 176.363321][ T6331] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 176.363372][ T6331] ? ksys_write+0x242/0x270 [ 176.363397][ T6331] ? __pfx_ksys_write+0x10/0x10 [ 176.363427][ T6331] __x64_sys_sendmmsg+0xa0/0xc0 [ 176.363453][ T6331] do_syscall_64+0x14d/0xf80 [ 176.363475][ T6331] ? trace_irq_disable+0x3b/0x150 [ 176.363506][ T6331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.363530][ T6331] ? clear_bhb_loop+0x40/0x90 [ 176.363554][ T6331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.363622][ T6331] RIP: 0033:0x7f3ffb79c799 [ 176.363642][ T6331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.363658][ T6331] RSP: 002b:00007f3ffc71c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 176.363680][ T6331] RAX: ffffffffffffffda RBX: 00007f3ffba15fa0 RCX: 00007f3ffb79c799 [ 176.363695][ T6331] RDX: 04924924924925c6 RSI: 0000200000000680 RDI: 0000000000000004 [ 176.363708][ T6331] RBP: 00007f3ffc71c090 R08: 0000000000000000 R09: 0000000000000000 [ 176.363721][ T6331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.363732][ T6331] R13: 00007f3ffba16038 R14: 00007f3ffba15fa0 R15: 00007f3ffbb3fa48 [ 176.363771][ T6331] [ 176.712871][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 176.743397][ T5190] usb 3-1: USB disconnect, device number 8 [ 176.946283][ T6335] FAULT_INJECTION: forcing a failure. [ 176.946283][ T6335] name failslab, interval 1, probability 0, space 0, times 1 [ 177.008409][ T6335] CPU: 1 UID: 0 PID: 6335 Comm: syz.2.120 Not tainted syzkaller #0 PREEMPT(full) [ 177.008439][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.008452][ T6335] Call Trace: [ 177.008461][ T6335] [ 177.008470][ T6335] dump_stack_lvl+0xe8/0x150 [ 177.008505][ T6335] should_fail_ex+0x412/0x560 [ 177.008537][ T6335] should_failslab+0xa8/0x100 [ 177.008564][ T6335] ? skb_clone+0x212/0x3a0 [ 177.008590][ T6335] kmem_cache_alloc_noprof+0x87/0x650 [ 177.008612][ T6335] ? __netlink_lookup+0xc6/0x8b0 [ 177.008642][ T6335] skb_clone+0x212/0x3a0 [ 177.008671][ T6335] __netlink_deliver_tap+0x404/0x850 [ 177.008719][ T6335] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.008753][ T6335] netlink_deliver_tap+0x19c/0x1b0 [ 177.008787][ T6335] netlink_unicast+0x7e3/0x9b0 [ 177.008827][ T6335] ? __pfx_netlink_unicast+0x10/0x10 [ 177.008859][ T6335] ? netlink_sendmsg+0x650/0xb40 [ 177.008889][ T6335] ? skb_put+0x11b/0x210 [ 177.008915][ T6335] netlink_sendmsg+0x813/0xb40 [ 177.008958][ T6335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.008996][ T6335] ? aa_sock_msg_perm+0xf1/0x1b0 [ 177.009095][ T6335] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.009122][ T6335] ____sys_sendmsg+0x972/0x9f0 [ 177.009157][ T6335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.009192][ T6335] ? import_iovec+0x73/0xa0 [ 177.009219][ T6335] ___sys_sendmsg+0x2a5/0x360 [ 177.009250][ T6335] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.009314][ T6335] ? __fget_files+0x2a/0x420 [ 177.009345][ T6335] ? __fget_files+0x3a0/0x420 [ 177.009384][ T6335] __x64_sys_sendmsg+0x1bd/0x2a0 [ 177.009411][ T6335] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.009444][ T6335] ? __pfx_ksys_write+0x10/0x10 [ 177.009480][ T6335] do_syscall_64+0x14d/0xf80 [ 177.009505][ T6335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.009528][ T6335] ? clear_bhb_loop+0x40/0x90 [ 177.009553][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.009574][ T6335] RIP: 0033:0x7fe5e759c799 [ 177.009594][ T6335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.009611][ T6335] RSP: 002b:00007fe5e57f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.009634][ T6335] RAX: ffffffffffffffda RBX: 00007fe5e7815fa0 RCX: 00007fe5e759c799 [ 177.009647][ T6335] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 177.009659][ T6335] RBP: 00007fe5e57f6090 R08: 0000000000000000 R09: 0000000000000000 [ 177.009670][ T6335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.009682][ T6335] R13: 00007fe5e7816038 R14: 00007fe5e7815fa0 R15: 00007fe5e793fa48 [ 177.009713][ T6335] [ 177.494557][ T6337] loop5: detected capacity change from 0 to 7 [ 177.544848][ T6337] loop5: [ 177.548742][ T6337] loop5: partition table partially beyond EOD, truncated [ 177.793741][ T5934] usb 1-1: USB disconnect, device number 11 [ 177.906335][ T5892] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 178.013657][ T5937] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 178.113784][ T5892] usb 5-1: device descriptor read/64, error -71 [ 178.326809][ T5937] usb 3-1: LPM exit latency is zeroed, disabling LPM. [ 178.374739][ T6357] vxcan3: entered promiscuous mode [ 178.448058][ T5937] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.479417][ T5937] usb 3-1: string descriptor 0 read error: -22 [ 178.486581][ T5937] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.494743][ T5892] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 178.559525][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.609064][ T5937] usb 3-1: bad CDC descriptors [ 178.634276][ T5892] usb 5-1: device descriptor read/64, error -71 [ 178.770986][ T5892] usb usb5-port1: attempt power cycle [ 178.843045][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.909906][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.959837][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.969189][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.143686][ T5892] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 179.174903][ T5892] usb 5-1: device descriptor read/8, error -71 [ 179.433802][ T5892] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 179.464389][ T5892] usb 5-1: device descriptor read/8, error -71 [ 179.574128][ T5892] usb usb5-port1: unable to enumerate USB device [ 179.909838][ T31] audit: type=1804 audit(1773498316.618:53): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.130" name="/newroot/21/file0" dev="fuse" ino=1 res=1 errno=0 [ 180.052721][ T6384] FAULT_INJECTION: forcing a failure. [ 180.052721][ T6384] name failslab, interval 1, probability 0, space 0, times 0 [ 180.071425][ T6384] CPU: 0 UID: 0 PID: 6384 Comm: syz.3.134 Not tainted syzkaller #0 PREEMPT(full) [ 180.071453][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.071465][ T6384] Call Trace: [ 180.071473][ T6384] [ 180.071481][ T6384] dump_stack_lvl+0xe8/0x150 [ 180.071514][ T6384] should_fail_ex+0x412/0x560 [ 180.071548][ T6384] should_failslab+0xa8/0x100 [ 180.071576][ T6384] __kmalloc_noprof+0xe8/0x760 [ 180.071598][ T6384] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 180.071630][ T6384] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 180.071662][ T6384] genl_family_rcv_msg_doit+0xd9/0x330 [ 180.071688][ T6384] ? __asan_memcpy+0x40/0x70 [ 180.071711][ T6384] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 180.071751][ T6384] ? apparmor_capable+0x126/0x170 [ 180.071776][ T6384] ? bpf_lsm_capable+0x9/0x20 [ 180.071803][ T6384] ? security_capable+0x7e/0x2c0 [ 180.071837][ T6384] genl_rcv_msg+0x61c/0x7a0 [ 180.071868][ T6384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.071891][ T6384] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 180.071914][ T6384] ? __lock_acquire+0x6b5/0x2cf0 [ 180.071951][ T6384] netlink_rcv_skb+0x232/0x4b0 [ 180.071982][ T6384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.072008][ T6384] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.072054][ T6384] ? down_read+0x272/0x2e0 [ 180.072077][ T6384] ? genl_rcv+0xd/0x40 [ 180.072102][ T6384] genl_rcv+0x28/0x40 [ 180.072123][ T6384] netlink_unicast+0x80f/0x9b0 [ 180.072160][ T6384] ? __pfx_netlink_unicast+0x10/0x10 [ 180.072188][ T6384] ? netlink_sendmsg+0x650/0xb40 [ 180.072217][ T6384] ? skb_put+0x11b/0x210 [ 180.072241][ T6384] netlink_sendmsg+0x813/0xb40 [ 180.072281][ T6384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.072316][ T6384] ? aa_sock_msg_perm+0xf1/0x1b0 [ 180.072346][ T6384] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.072371][ T6384] ____sys_sendmsg+0x972/0x9f0 [ 180.072410][ T6384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.072444][ T6384] ? import_iovec+0x73/0xa0 [ 180.072470][ T6384] ___sys_sendmsg+0x2a5/0x360 [ 180.072500][ T6384] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.072558][ T6384] ? __fget_files+0x2a/0x420 [ 180.072589][ T6384] ? __fget_files+0x3a0/0x420 [ 180.072630][ T6384] __x64_sys_sendmsg+0x1bd/0x2a0 [ 180.072657][ T6384] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.072691][ T6384] ? __pfx_ksys_write+0x10/0x10 [ 180.072732][ T6384] do_syscall_64+0x14d/0xf80 [ 180.072755][ T6384] ? trace_irq_disable+0x3b/0x150 [ 180.072785][ T6384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.072805][ T6384] ? clear_bhb_loop+0x40/0x90 [ 180.072832][ T6384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.072852][ T6384] RIP: 0033:0x7f15af79c799 [ 180.072873][ T6384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.072889][ T6384] RSP: 002b:00007f15b05db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.072912][ T6384] RAX: ffffffffffffffda RBX: 00007f15afa15fa0 RCX: 00007f15af79c799 [ 180.072927][ T6384] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 180.072940][ T6384] RBP: 00007f15b05db090 R08: 0000000000000000 R09: 0000000000000000 [ 180.072952][ T6384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.072963][ T6384] R13: 00007f15afa16038 R14: 00007f15afa15fa0 R15: 00007f15afb3fa48 [ 180.072994][ T6384] [ 180.134210][ T5914] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 180.604036][ T5937] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 180.604050][ T5914] usb 1-1: device descriptor read/64, error -71 [ 180.717223][ T6393] loop5: detected capacity change from 0 to 7 [ 180.741194][ T5934] usb 3-1: USB disconnect, device number 9 [ 180.761971][ T6393] loop5: [ 180.767074][ T6393] loop5: partition table partially beyond EOD, truncated [ 180.819233][ T5937] usb 2-1: not running at top speed; connect to a high speed hub [ 180.843693][ T5914] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 180.863682][ T5937] usb 2-1: config 127 has an invalid interface number: 136 but max is 0 [ 180.881282][ T5937] usb 2-1: config 127 has no interface number 0 [ 180.902505][ T5937] usb 2-1: config 127 interface 136 altsetting 0 endpoint 0x5 has an invalid bInterval 127, changing to 4 [ 180.918117][ T5937] usb 2-1: config 127 interface 136 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 180.941206][ T5937] usb 2-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice=a3.4c [ 180.965348][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.974005][ T5937] usb 2-1: Product: syz [ 180.979609][ T5937] usb 2-1: Manufacturer: syz [ 180.986339][ T5937] usb 2-1: SerialNumber: syz [ 180.994585][ T5914] usb 1-1: device descriptor read/64, error -71 [ 181.023710][ T5892] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 181.105704][ T5914] usb usb1-port1: attempt power cycle [ 181.163639][ T5892] usb 4-1: device descriptor read/64, error -71 [ 181.213717][ T5934] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 181.239681][ T6400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.250846][ T6400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.295441][ T25] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 181.320208][ T5937] kaweth 2-1:127.136: couldn't find required endpoints [ 181.346401][ T5937] usb 2-1: USB disconnect, device number 14 [ 181.375512][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.388593][ T5934] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 181.398884][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.407871][ T5934] usb 3-1: Product: syz [ 181.414179][ T5934] usb 3-1: Manufacturer: syz [ 181.414906][ T5892] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 181.419978][ T5934] usb 3-1: SerialNumber: syz [ 181.439581][ T5934] usb 3-1: config 0 descriptor?? [ 181.448670][ T5934] usb 3-1: ucan: probing device on interface #0 [ 181.456724][ T5934] usb 3-1: ucan: invalid EP count (0) [ 181.462755][ T5934] usb 3-1: ucan: probe failed; try to update the device firmware [ 181.464114][ T5914] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 181.487188][ T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.497090][ T25] usb 5-1: config 0 has no interface number 0 [ 181.503349][ T25] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 181.519041][ T5914] usb 1-1: device descriptor read/8, error -71 [ 181.528666][ T25] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.539982][ T25] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.554511][ T25] usb 5-1: config 0 interface 1 has no altsetting 0 [ 181.561586][ T25] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 181.573174][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.583696][ T5892] usb 4-1: device descriptor read/64, error -71 [ 181.592386][ T25] usb 5-1: config 0 descriptor?? [ 181.651692][ T5909] usb 3-1: USB disconnect, device number 10 [ 181.694542][ T5892] usb usb4-port1: attempt power cycle [ 181.763751][ T5914] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 181.794544][ T5914] usb 1-1: device descriptor read/8, error -71 [ 181.904836][ T5914] usb usb1-port1: unable to enumerate USB device [ 182.043767][ T5892] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 182.074424][ T5892] usb 4-1: device descriptor read/8, error -71 [ 182.583690][ T5892] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 182.690326][ T25] input: HID 145f:0212 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:145F:0212.0005/input/input9 [ 182.757378][ T5892] usb 4-1: device descriptor read/8, error -71 [ 182.957178][ T5892] usb usb4-port1: unable to enumerate USB device [ 183.034738][ T25] input: HID 145f:0212 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:145F:0212.0005/input/input10 [ 183.137436][ T25] uclogic 0003:145F:0212.0005: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.4-1/input1 [ 184.158727][ T5937] usb 5-1: reset full-speed USB device number 14 using dummy_hcd [ 184.240559][ T6436] loop5: detected capacity change from 0 to 7 [ 184.260269][ T6436] Dev loop5: unable to read RDB block 7 [ 184.301454][ T6436] loop5: unable to read partition table [ 184.349062][ T6436] loop5: partition table beyond EOD, truncated [ 184.483383][ T6436] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.972807][ T6447] loop5: detected capacity change from 0 to 3 [ 185.005353][ T6447] loop5: p1 < > p4 [ 185.018975][ T6447] loop5: partition table partially beyond EOD, truncated [ 185.040118][ T6447] loop5: p1 start 4 is beyond EOD, truncated [ 185.067399][ T6449] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 185.103851][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 185.120487][ T6447] netlink: 'syz.0.154': attribute type 6 has an invalid length. [ 185.142615][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'. [ 185.294049][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 185.305030][ T25] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 185.337019][ T25] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 185.386780][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 185.411879][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 185.425653][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 185.436769][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 185.461013][ T25] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 185.471113][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.521885][ T25] usb 4-1: config 0 descriptor?? [ 185.720412][ T5934] usb 5-1: USB disconnect, device number 14 [ 185.763128][ T25] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 186.113895][ T31] audit: type=1800 audit(1773498322.818:54): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.155" name="/" dev="fuse" ino=9 res=0 errno=0 [ 186.415834][ T6469] loop5: detected capacity change from 0 to 7 [ 186.457481][ T6469] loop5: [ 186.461268][ T6469] loop5: partition table partially beyond EOD, truncated [ 186.718931][ T6474] loop5: detected capacity change from 0 to 7 [ 186.765526][ T5976] Dev loop5: unable to read RDB block 7 [ 186.822740][ T5976] loop5: unable to read partition table [ 187.052169][ T5976] loop5: partition table beyond EOD, truncated [ 187.063627][ T5892] usb 4-1: USB disconnect, device number 15 [ 187.132972][ T6474] Dev loop5: unable to read RDB block 7 [ 187.141182][ T6474] loop5: unable to read partition table [ 187.153711][ T5909] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 187.174663][ T5892] usblp0: removed [ 187.199313][ T6474] loop5: partition table beyond EOD, truncated [ 187.243763][ T6474] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 187.348940][ T5909] usb 2-1: device descriptor read/64, error -71 [ 187.683827][ T5909] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 187.738590][ T6491] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.164'. [ 187.894675][ T5909] usb 2-1: device descriptor read/64, error -71 [ 187.965554][ T5934] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 187.989017][ T6502] loop5: detected capacity change from 0 to 7 [ 188.018015][ T6502] Dev loop5: unable to read RDB block 7 [ 188.025884][ T6502] loop5: unable to read partition table [ 188.038332][ T6502] loop5: partition table beyond EOD, truncated [ 188.044755][ T5909] usb usb2-port1: attempt power cycle [ 188.083268][ T6502] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 188.130363][ T6505] QAT: Invalid ioctl 1082168384 [ 188.147888][ T5934] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 188.162065][ T6505] QAT: Invalid ioctl -2080336862 [ 188.182538][ T5934] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 188.226774][ T5934] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 188.241953][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.275538][ T5934] usb 5-1: Product: syz [ 188.291042][ T5934] usb 5-1: Manufacturer: syz [ 188.303632][ T5934] usb 5-1: SerialNumber: syz [ 188.316915][ T5934] usb 5-1: config 0 descriptor?? [ 188.330983][ T6489] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 188.349919][ T6489] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 188.443644][ T5909] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 188.485485][ T5909] usb 2-1: device descriptor read/8, error -71 [ 188.570709][ T6489] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 188.579658][ T6489] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 188.724483][ T5892] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 188.735464][ T5909] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 188.765562][ T5909] usb 2-1: device descriptor read/8, error -71 [ 188.811597][ T31] audit: type=1326 audit(1773498325.518:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffb79c799 code=0x7ffc0000 [ 188.908328][ T5909] usb usb2-port1: unable to enumerate USB device [ 188.916788][ T31] audit: type=1326 audit(1773498325.518:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffb79c799 code=0x7ffc0000 [ 188.940294][ T31] audit: type=1326 audit(1773498325.528:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ffb75cfce code=0x7ffc0000 [ 188.979662][ T5892] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 188.994870][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 189.021790][ T31] audit: type=1326 audit(1773498325.528:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffb79c799 code=0x7ffc0000 [ 189.043898][ T5892] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 189.057039][ T31] audit: type=1326 audit(1773498325.528:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffb79c799 code=0x7ffc0000 [ 189.100894][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.400795][ T5892] usb 1-1: Product: syz [ 189.407985][ T31] audit: type=1326 audit(1773498325.518:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffb79c799 code=0x7ffc0000 [ 189.681683][ T5892] usb 1-1: Manufacturer: syz [ 189.685131][ T31] audit: type=1326 audit(1773498325.528:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffb79c799 code=0x7ffc0000 [ 189.751188][ T5892] usb 1-1: SerialNumber: syz [ 189.840376][ T5892] usb 1-1: config 0 descriptor?? [ 189.866170][ T6533] loop5: detected capacity change from 0 to 7 [ 189.874971][ T5892] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 189.882893][ T31] audit: type=1326 audit(1773498325.528:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffb79c799 code=0x7ffc0000 [ 189.915833][ T6533] Dev loop5: unable to read RDB block 7 [ 189.925251][ T6533] loop5: unable to read partition table [ 189.958872][ T6533] loop5: partition table beyond EOD, truncated [ 189.984058][ T31] audit: type=1326 audit(1773498325.528:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3ffb79c799 code=0x7ffc0000 [ 190.018209][ T6533] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 190.443746][ T5909] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 190.652491][ T5909] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.682839][ T5909] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 190.746150][ T5909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.793686][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 190.817356][ T6539] batadv0: entered promiscuous mode [ 190.873871][ T6539] batadv0: left promiscuous mode [ 190.892673][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 190.941509][ T5934] Error reading MAC address [ 190.949825][ T5909] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.962895][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.985114][ T5934] usb 5-1: USB disconnect, device number 15 [ 191.011884][ T5909] usb 2-1: Product: syz [ 191.023648][ T5909] usb 2-1: Manufacturer: syz [ 191.052974][ T5909] cdc_wdm 2-1:1.0: skipping garbage [ 191.080312][ T5909] cdc_wdm 2-1:1.0: skipping garbage [ 191.107045][ T5909] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 191.125530][ T5909] cdc_wdm 2-1:1.0: Unknown control protocol [ 191.253640][ T5190] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 191.346383][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 191.354070][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 191.360978][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 191.369952][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 191.383863][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 191.392915][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 191.403714][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 191.410660][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 191.420372][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 191.428700][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 191.435745][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 191.444197][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 191.455697][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 191.466436][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 191.475617][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 191.483134][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 191.491108][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 191.499959][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 191.508120][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 191.519620][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 191.528633][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 191.540177][ T1211] usb 2-1: USB disconnect, device number 19 [ 191.636258][ T5190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.684654][ T5190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.685849][ T6549] loop5: detected capacity change from 0 to 7 [ 191.731335][ T5190] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 191.771840][ T6549] Dev loop5: unable to read RDB block 7 [ 191.772986][ T5190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.801151][ T6549] loop5: unable to read partition table [ 191.818854][ T5190] usb 3-1: config 0 descriptor?? [ 191.826688][ T6549] loop5: partition table beyond EOD, truncated [ 191.835817][ T6552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.183'. [ 191.846667][ T6549] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 191.859709][ T5914] usb 1-1: USB disconnect, device number 16 [ 192.069936][ T6541] cifs: Unknown parameter 'f,' [ 192.333966][ T5190] usbhid 3-1:0.0: can't add hid device: -71 [ 192.340891][ T5190] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 192.358928][ T5190] usb 3-1: USB disconnect, device number 11 [ 192.526610][ T6569] netlink: 165 bytes leftover after parsing attributes in process `syz.3.189'. [ 192.541439][ T6569] netlink: 36 bytes leftover after parsing attributes in process `syz.3.189'. [ 192.574226][ T5914] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 192.735767][ T5914] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 192.755806][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.765157][ T5914] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 192.774926][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 192.793881][ T5914] usb 5-1: Product: syz [ 192.801925][ T5914] usb 5-1: Manufacturer: syz [ 192.812140][ T5914] usb 5-1: SerialNumber: syz [ 192.830638][ T5914] usb 5-1: config 0 descriptor?? [ 192.860817][ T5914] usb 5-1: selecting invalid altsetting 0 [ 193.108531][ T5914] usb 5-1: USB disconnect, device number 16 [ 193.126702][ T6581] nvme_fabrics: unknown parameter or missing value 'C' in ctrl creation request [ 193.290991][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.538084][ T6590] loop5: detected capacity change from 0 to 7 [ 193.554678][ T6590] Dev loop5: unable to read RDB block 7 [ 193.585643][ T6590] loop5: unable to read partition table [ 193.595516][ T6590] loop5: partition table beyond EOD, truncated [ 193.604146][ T5190] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 193.613365][ T6590] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 193.644086][ T5194] Dev loop5: unable to read RDB block 7 [ 193.650675][ T5194] loop5: unable to read partition table [ 193.656790][ T5194] loop5: partition table beyond EOD, truncated [ 193.793805][ T5190] usb 2-1: Using ep0 maxpacket: 16 [ 193.862842][ T5190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.896753][ T5190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.973665][ T5190] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 194.023698][ T5190] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 194.063769][ T5190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.141729][ T5190] usb 2-1: config 0 descriptor?? [ 194.631062][ T5190] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0006/input/input11 [ 194.800785][ T5190] appleir 0003:05AC:8241.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 194.973493][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.070794][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.208'. [ 195.094709][ T6633] bridge_slave_0: default FDB implementation only supports local addresses [ 195.172527][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.472699][ T6640] loop5: detected capacity change from 0 to 7 [ 195.504637][ T6640] Dev loop5: unable to read RDB block 7 [ 195.528808][ T6640] loop5: unable to read partition table [ 195.668064][ T6640] loop5: partition table beyond EOD, truncated [ 195.683898][ T6640] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 195.705498][ T5909] usb 2-1: USB disconnect, device number 20 [ 196.150780][ T6647] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 197.053775][ T5914] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 197.194042][ T5914] usb 5-1: device descriptor read/64, error -71 [ 197.394919][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 197.453802][ T5914] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 197.603709][ T5914] usb 5-1: device descriptor read/64, error -71 [ 197.734314][ T5914] usb usb5-port1: attempt power cycle [ 197.738501][ T6677] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 197.749055][ T6677] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 198.117038][ T5914] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 198.165999][ T5914] usb 5-1: device descriptor read/8, error -71 [ 198.273885][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 198.284350][ T6690] bridge_slave_0: default FDB implementation only supports local addresses [ 198.612788][ T5914] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 198.674712][ T5914] usb 5-1: device descriptor read/8, error -71 [ 198.813976][ T5914] usb usb5-port1: unable to enumerate USB device [ 199.538386][ T6694] netlink: 36 bytes leftover after parsing attributes in process `syz.0.231'. [ 200.485723][ T6723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.236'. [ 200.787078][ T6727] loop5: detected capacity change from 0 to 7 [ 200.818247][ T5976] loop5: [ 201.014164][ T5976] loop5: partition table partially beyond EOD, truncated [ 201.070318][ T6727] loop5: [ 201.092797][ T6727] loop5: partition table partially beyond EOD, truncated [ 201.313640][ T5190] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 201.383354][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 201.503624][ T5190] usb 1-1: Using ep0 maxpacket: 16 [ 201.528962][ T5190] usb 1-1: unable to get BOS descriptor or descriptor too short [ 201.550337][ T5190] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 201.637686][ T5190] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 201.694026][ T5190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.717429][ T5190] usb 1-1: Product: syz [ 201.756415][ T5190] usb 1-1: Manufacturer: syz [ 201.776050][ T5190] usb 1-1: SerialNumber: syz [ 202.117240][ T5190] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 202.152237][ T5190] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 202.218925][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.243'. [ 202.228281][ T6752] bridge_slave_0: default FDB implementation only supports local addresses [ 202.928133][ T5190] usb 1-1: USB disconnect, device number 17 [ 203.531664][ T6771] loop5: detected capacity change from 0 to 7 [ 203.545356][ T6771] loop5: [ 203.551390][ T6771] loop5: partition table partially beyond EOD, truncated [ 203.868774][ T6779] netlink: 132 bytes leftover after parsing attributes in process `syz.0.252'. [ 204.379640][ T6783] tipc: Started in network mode [ 204.385423][ T6783] tipc: Node identity 3e54f61954cc, cluster identity 4711 [ 204.393447][ T6783] tipc: Enabled bearer , priority 0 [ 204.406967][ T6783] syzkaller0: entered promiscuous mode [ 204.412889][ T6783] syzkaller0: entered allmulticast mode [ 204.508651][ T6783] tipc: Resetting bearer [ 204.524841][ T6783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.633703][ T5190] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 204.654786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.747763][ T6788] loop5: detected capacity change from 0 to 7 [ 204.761575][ T5976] Dev loop5: unable to read RDB block 7 [ 204.767841][ T5976] loop5: unable to read partition table [ 204.784105][ T5976] loop5: partition table beyond EOD, truncated [ 204.791588][ T6788] Dev loop5: unable to read RDB block 7 [ 204.797450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.804109][ T5934] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 204.818904][ T6788] loop5: unable to read partition table [ 204.824929][ T5190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.826816][ T6788] loop5: partition table beyond EOD, truncated [ 204.846041][ T6788] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 204.849726][ T5190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.889046][ T5190] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.933659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.944478][ T5190] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.986179][ T5934] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 204.994710][ T5190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.006805][ T5934] usb 4-1: config 0 has no interface number 0 [ 205.027557][ T5934] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=77.f4 [ 205.059275][ T5190] usb 5-1: config 0 descriptor?? [ 205.073644][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.073686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.099700][ T5934] usb 4-1: Product: syz [ 205.142988][ T5934] usb 4-1: Manufacturer: syz [ 205.180205][ T5934] usb 4-1: SerialNumber: syz [ 205.213626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.231520][ T6792] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 205.242562][ T5934] usb 4-1: config 0 descriptor?? [ 205.263210][ T6783] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 205.353630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.495643][ T5892] tipc: Node number set to 1788409369 [ 205.503924][ T5934] asix 4-1:0.251: probe with driver asix failed with error -71 [ 205.540833][ T6782] tipc: Resetting bearer [ 205.554327][ T5934] usb 4-1: USB disconnect, device number 17 [ 205.599794][ T6782] tipc: Disabling bearer [ 205.713783][ T5892] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 205.873661][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 205.897802][ T5892] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 205.914171][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.932752][ T5892] usb 2-1: Product: syz [ 205.951712][ T5892] usb 2-1: Manufacturer: syz [ 205.970177][ T5892] usb 2-1: SerialNumber: syz [ 205.988921][ T5892] usb 2-1: config 0 descriptor?? [ 206.224618][ T6795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.238308][ T5892] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 206.269692][ T6795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.286919][ T6801] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 206.311392][ T5190] usbhid 5-1:0.0: can't add hid device: -71 [ 206.336841][ T5190] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 206.357182][ T6801] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 206.384210][ T5190] usb 5-1: USB disconnect, device number 21 [ 206.530868][ T6813] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 206.576966][ T6813] netlink: 'syz.3.261': attribute type 2 has an invalid length. [ 206.600137][ T6813] netlink: 132 bytes leftover after parsing attributes in process `syz.3.261'. [ 206.793131][ T5892] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 206.838617][ T5892] usb 2-1: USB disconnect, device number 21 [ 206.974115][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.980650][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.102040][ T6831] loop5: detected capacity change from 0 to 7 [ 207.122021][ T6831] Dev loop5: unable to read RDB block 7 [ 207.128038][ T6831] loop5: unable to read partition table [ 207.134382][ T6831] loop5: partition table beyond EOD, truncated [ 207.143266][ T6831] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 207.239532][ T6827] syzkaller0: entered promiscuous mode [ 207.261231][ T6827] syzkaller0: entered allmulticast mode [ 207.283788][ T5914] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 207.497302][ T5914] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 207.508015][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.517481][ T5914] usb 5-1: Product: syz [ 207.602352][ T5914] usb 5-1: Manufacturer: syz [ 207.621452][ T6842] FAULT_INJECTION: forcing a failure. [ 207.621452][ T6842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.645196][ T6842] CPU: 1 UID: 0 PID: 6842 Comm: syz.2.271 Not tainted syzkaller #0 PREEMPT(full) [ 207.645235][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.645247][ T6842] Call Trace: [ 207.645254][ T6842] [ 207.645263][ T6842] dump_stack_lvl+0xe8/0x150 [ 207.645296][ T6842] should_fail_ex+0x412/0x560 [ 207.645328][ T6842] _copy_from_user+0x2d/0xb0 [ 207.645352][ T6842] ___sys_sendmsg+0x1c6/0x360 [ 207.645382][ T6842] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.645453][ T6842] __sys_sendmmsg+0x27c/0x4e0 [ 207.645483][ T6842] ? __pfx___sys_sendmmsg+0x10/0x10 [ 207.645504][ T6842] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 207.645553][ T6842] ? ksys_write+0x242/0x270 [ 207.645577][ T6842] ? __pfx_ksys_write+0x10/0x10 [ 207.645606][ T6842] __x64_sys_sendmmsg+0xa0/0xc0 [ 207.645631][ T6842] do_syscall_64+0x14d/0xf80 [ 207.645652][ T6842] ? trace_irq_disable+0x3b/0x150 [ 207.645681][ T6842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.645702][ T6842] ? clear_bhb_loop+0x40/0x90 [ 207.645726][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.645746][ T6842] RIP: 0033:0x7fe5e759c799 [ 207.645765][ T6842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.645781][ T6842] RSP: 002b:00007fe5e57f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 207.645802][ T6842] RAX: ffffffffffffffda RBX: 00007fe5e7815fa0 RCX: 00007fe5e759c799 [ 207.645816][ T6842] RDX: 04924924924925c6 RSI: 0000200000000680 RDI: 0000000000000004 [ 207.645829][ T6842] RBP: 00007fe5e57f6090 R08: 0000000000000000 R09: 0000000000000000 [ 207.645840][ T6842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.645851][ T6842] R13: 00007fe5e7816038 R14: 00007fe5e7815fa0 R15: 00007fe5e793fa48 [ 207.645882][ T6842] [ 208.083688][ T5914] usb 5-1: SerialNumber: syz [ 208.119686][ T5914] usb 5-1: config 0 descriptor?? [ 208.274381][ T6839] kvm_intel: kvm [6833]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 208.285946][ T6839] kvm_intel: kvm [6833]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 208.304729][ T6839] kvm_intel: kvm [6833]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 208.314500][ T6839] kvm_intel: kvm [6833]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 208.324478][ T6839] kvm_intel: kvm [6833]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 208.335780][ T6839] kvm_intel: kvm [6833]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 208.347184][ T6839] kvm_intel: kvm [6833]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 208.358312][ T6839] kvm_intel: kvm [6833]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 208.367756][ T6839] kvm_intel: kvm [6833]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 208.379786][ T6839] kvm_intel: kvm [6833]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 209.109149][ T5914] usb 5-1: USB disconnect, device number 22 [ 209.179847][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.727440][ T6857] netlink: 44 bytes leftover after parsing attributes in process `syz.1.274'. [ 210.266195][ T5937] IPVS: starting estimator thread 0... [ 210.353719][ T6862] IPVS: using max 40 ests per chain, 96000 per kthread [ 210.431472][ T6864] loop5: detected capacity change from 0 to 7 [ 210.456106][ T6864] loop5: [ 210.467356][ T6864] loop5: partition table partially beyond EOD, truncated [ 210.774919][ T6867] netlink: 'syz.1.278': attribute type 9 has an invalid length. [ 210.803362][ T6868] program syz.0.279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.876941][ T6867] netlink: 'syz.1.278': attribute type 11 has an invalid length. [ 210.894246][ T6868] netlink: 'syz.0.279': attribute type 10 has an invalid length. [ 210.923742][ T6867] netlink: 'syz.1.278': attribute type 12 has an invalid length. [ 210.932110][ T6868] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 210.995461][ T6867] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.278'. [ 211.010743][ T6870] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.279'. [ 211.144542][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 211.450941][ T6881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.494297][ T25] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 211.617169][ T6885] loop5: detected capacity change from 0 to 7 [ 211.639851][ T6885] Dev loop5: unable to read RDB block 7 [ 211.663635][ T6885] loop5: unable to read partition table [ 211.686442][ T6889] syz.2.282 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 211.699659][ T31] kauditd_printk_skb: 65 callbacks suppressed [ 211.699680][ T31] audit: type=1326 audit(1773498348.398:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e759c799 code=0x7ffc0000 [ 211.745438][ T6885] loop5: partition table beyond EOD, truncated [ 211.773818][ T6885] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 211.815513][ T31] audit: type=1326 audit(1773498348.398:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e759c799 code=0x7ffc0000 [ 211.822522][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 211.870144][ T25] usb 2-1: not running at top speed; connect to a high speed hub [ 211.958454][ T31] audit: type=1326 audit(1773498348.398:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e759c799 code=0x7ffc0000 [ 212.041185][ T31] audit: type=1326 audit(1773498348.398:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fe5e759c799 code=0x7ffc0000 [ 212.044339][ T25] usb 2-1: config 0 has an invalid interface number: 226 but max is 0 [ 212.101749][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.120833][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.145017][ T31] audit: type=1326 audit(1773498348.498:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe5e759c502 code=0x7ffc0000 [ 212.183835][ T25] usb 2-1: config 0 has no interface number 0 [ 212.237114][ T31] audit: type=1326 audit(1773498348.498:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe5e759c502 code=0x7ffc0000 [ 212.276177][ T6906] loop5: detected capacity change from 0 to 7 [ 212.294560][ T6906] loop5: [ 212.295007][ T25] usb 2-1: string descriptor 0 read error: -71 [ 212.297630][ T6906] loop5: partition table partially beyond EOD, truncated [ 212.351752][ T31] audit: type=1326 audit(1773498348.498:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e759c799 code=0x7ffc0000 [ 212.401035][ T31] audit: type=1326 audit(1773498348.498:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e759c799 code=0x7ffc0000 [ 212.401271][ T25] usb 2-1: New USB device found, idVendor=1e2d, idProduct=0082, bcdDevice=cb.c4 [ 212.484397][ T31] audit: type=1326 audit(1773498348.558:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e759c799 code=0x7ffc0000 [ 212.578354][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.604608][ T25] usb 2-1: config 0 descriptor?? [ 212.630785][ T31] audit: type=1326 audit(1773498348.558:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e759c799 code=0x7ffc0000 [ 212.631230][ T25] usb 2-1: can't set config #0, error -71 [ 212.668387][ T6912] FAULT_INJECTION: forcing a failure. [ 212.668387][ T6912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.687152][ T6912] CPU: 0 UID: 0 PID: 6912 Comm: syz.3.290 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.687184][ T6912] Tainted: [L]=SOFTLOCKUP [ 212.687192][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.687203][ T6912] Call Trace: [ 212.687219][ T6912] [ 212.687225][ T6912] dump_stack_lvl+0xe8/0x150 [ 212.687250][ T6912] should_fail_ex+0x412/0x560 [ 212.687277][ T6912] _copy_from_user+0x2d/0xb0 [ 212.687293][ T6912] ___sys_sendmsg+0x1c6/0x360 [ 212.687315][ T6912] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.687365][ T6912] __sys_sendmmsg+0x27c/0x4e0 [ 212.687385][ T6912] ? __pfx___sys_sendmmsg+0x10/0x10 [ 212.687400][ T6912] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 212.687434][ T6912] ? ksys_write+0x242/0x270 [ 212.687452][ T6912] ? __pfx_ksys_write+0x10/0x10 [ 212.687472][ T6912] __x64_sys_sendmmsg+0xa0/0xc0 [ 212.687490][ T6912] do_syscall_64+0x14d/0xf80 [ 212.687505][ T6912] ? trace_irq_disable+0x3b/0x150 [ 212.687526][ T6912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.687541][ T6912] ? clear_bhb_loop+0x40/0x90 [ 212.687558][ T6912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.687572][ T6912] RIP: 0033:0x7f15af79c799 [ 212.687586][ T6912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.687597][ T6912] RSP: 002b:00007f15b05db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 212.687612][ T6912] RAX: ffffffffffffffda RBX: 00007f15afa15fa0 RCX: 00007f15af79c799 [ 212.687622][ T6912] RDX: 04924924924925c6 RSI: 0000200000000680 RDI: 0000000000000004 [ 212.687631][ T6912] RBP: 00007f15b05db090 R08: 0000000000000000 R09: 0000000000000000 [ 212.687640][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.687648][ T6912] R13: 00007f15afa16038 R14: 00007f15afa15fa0 R15: 00007f15afb3fa48 [ 212.687669][ T6912] [ 212.917327][ T25] usb 2-1: USB disconnect, device number 22 [ 212.973694][ T5914] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 213.313735][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 213.343076][ T5914] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 213.363065][ T5914] usb 5-1: config 8 has an invalid descriptor of length 24, skipping remainder of the config [ 213.405767][ T5914] usb 5-1: config 8 has no interface number 0 [ 213.424069][ T5914] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 213.454417][ T5914] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 213.479822][ T5914] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid maxpacket 4096, setting to 1024 [ 213.504243][ T6920] netlink: 76 bytes leftover after parsing attributes in process `syz.1.292'. [ 213.836713][ T6926] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 213.903906][ T5914] usb 5-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 1024 [ 213.949477][ T5914] usb 5-1: config 8 interface 206 has no altsetting 0 [ 214.011907][ T5914] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 214.054254][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.134002][ T5914] usb 5-1: Product: syz [ 214.141930][ T5914] usb 5-1: Manufacturer: syz [ 214.164857][ T5914] usb 5-1: SerialNumber: syz [ 214.718681][ T6900] loop4: detected capacity change from 0 to 1 [ 214.737552][ T6900] Dev loop4: unable to read RDB block 1 [ 214.748249][ T6900] loop4: unable to read partition table [ 214.761147][ T6900] loop4: partition table beyond EOD, truncated [ 214.773408][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.816892][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.894281][ T6900] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 215.016453][ T5914] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 215.074019][ T5914] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 215.234839][ T5914] usb 5-1: USB disconnect, device number 23 [ 215.294608][ T5914] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 215.380775][ T5914] garmin_gps 5-1:8.206: device disconnected [ 215.496428][ T6946] loop5: detected capacity change from 0 to 7 [ 215.515690][ T6946] Dev loop5: unable to read RDB block 7 [ 215.532566][ T6946] loop5: unable to read partition table [ 215.549319][ T6946] loop5: partition table beyond EOD, truncated [ 215.572497][ T6946] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 215.654266][ T5909] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 215.843632][ T5909] usb 1-1: Using ep0 maxpacket: 8 [ 215.868610][ T5909] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 215.905241][ T5909] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.979577][ T5909] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 216.009840][ T6952] loop5: detected capacity change from 0 to 7 [ 216.020001][ T5909] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.036763][ T6952] loop5: [ 216.040144][ T6952] loop5: partition table partially beyond EOD, truncated [ 216.066313][ T5909] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 216.138859][ T5909] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 216.217830][ T5909] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 216.242489][ T5909] usb 1-1: config 168 interface 0 has no altsetting 0 [ 216.254930][ T6956] FAULT_INJECTION: forcing a failure. [ 216.254930][ T6956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.270097][ T6956] CPU: 1 UID: 0 PID: 6956 Comm: syz.4.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.270130][ T6956] Tainted: [L]=SOFTLOCKUP [ 216.270138][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.270155][ T6956] Call Trace: [ 216.270163][ T6956] [ 216.270170][ T6956] dump_stack_lvl+0xe8/0x150 [ 216.270203][ T6956] should_fail_ex+0x412/0x560 [ 216.270235][ T6956] _copy_from_user+0x2d/0xb0 [ 216.270259][ T6956] ___sys_sendmsg+0x1c6/0x360 [ 216.270288][ T6956] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.270359][ T6956] __sys_sendmmsg+0x27c/0x4e0 [ 216.270388][ T6956] ? __pfx___sys_sendmmsg+0x10/0x10 [ 216.270409][ T6956] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 216.270466][ T6956] ? ksys_write+0x242/0x270 [ 216.270491][ T6956] ? __pfx_ksys_write+0x10/0x10 [ 216.270520][ T6956] __x64_sys_sendmmsg+0xa0/0xc0 [ 216.270547][ T6956] do_syscall_64+0x14d/0xf80 [ 216.270569][ T6956] ? trace_irq_disable+0x3b/0x150 [ 216.270598][ T6956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.270618][ T6956] ? clear_bhb_loop+0x40/0x90 [ 216.270643][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.270663][ T6956] RIP: 0033:0x7f3ffb79c799 [ 216.270682][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.270699][ T6956] RSP: 002b:00007f3ffc71c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 216.270722][ T6956] RAX: ffffffffffffffda RBX: 00007f3ffba15fa0 RCX: 00007f3ffb79c799 [ 216.270736][ T6956] RDX: 04924924924925c6 RSI: 0000200000000680 RDI: 0000000000000004 [ 216.270750][ T6956] RBP: 00007f3ffc71c090 R08: 0000000000000000 R09: 0000000000000000 [ 216.270763][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.270775][ T6956] R13: 00007f3ffba16038 R14: 00007f3ffba15fa0 R15: 00007f3ffbb3fa48 [ 216.270807][ T6956] [ 216.271869][ T5909] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 216.547125][ T5909] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 216.634954][ T5909] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 216.650541][ T5909] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.717485][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'. [ 216.726784][ T6960] bridge_slave_0: default FDB implementation only supports local addresses [ 216.818757][ T6964] syz_tun: entered allmulticast mode [ 216.866353][ T5909] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 216.892018][ T5909] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 216.933778][ T5909] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 216.995811][ T5909] usb 1-1: config 168 interface 0 has no altsetting 0 [ 217.038521][ T5909] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 217.063973][ T5909] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 217.084581][ T1211] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 217.152829][ T5909] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 217.196019][ T5909] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.232508][ T5909] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.268533][ T5909] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.311378][ T5909] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 217.352235][ T5909] usb 1-1: config 168 interface 0 has no altsetting 0 [ 217.363984][ T1211] usb 5-1: Using ep0 maxpacket: 8 [ 217.421336][ T1211] usb 5-1: unable to get BOS descriptor or descriptor too short [ 217.421849][ T5909] usb 1-1: string descriptor 0 read error: -22 [ 217.435297][ T1211] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 217.442707][ T5909] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 217.493447][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.537987][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 217.556352][ T5909] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 217.597644][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 217.630346][ T1211] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 217.684632][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 217.713828][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 217.729218][ T1211] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 217.756824][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'. [ 217.775256][ T6970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.307'. [ 217.797226][ T1211] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 217.816867][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.860773][ T1211] usb 5-1: Product: syz [ 217.877522][ T6971] netlink: 10688 bytes leftover after parsing attributes in process `syz.0.296'. [ 217.903681][ T1211] usb 5-1: Manufacturer: syz [ 217.908360][ T1211] usb 5-1: SerialNumber: syz [ 217.958715][ T6974] netlink: 224 bytes leftover after parsing attributes in process `syz.1.308'. [ 217.971925][ T1211] usb 5-1: config 0 descriptor?? [ 218.004484][ T6964] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 218.021856][ T1211] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.217535][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 218.250046][ T6964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.304'. [ 218.375637][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 218.395709][ T6981] usb usb8: usbfs: process 6981 (syz.4.304) did not claim interface 0 before use [ 218.427054][ T1211] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 218.451450][ T108] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.485514][ T108] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.533472][ T108] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.585777][ T108] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.616382][ T6982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.638210][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.670020][ T6983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.708440][ T6982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.759520][ T5909] usb 5-1: USB disconnect, device number 24 [ 218.772092][ T6962] syz_tun: left allmulticast mode [ 218.934520][ T6985] loop5: detected capacity change from 0 to 7 [ 218.961836][ T5976] Dev loop5: unable to read RDB block 7 [ 218.968486][ T5976] loop5: unable to read partition table [ 218.975666][ T5976] loop5: partition table beyond EOD, truncated [ 218.987878][ T6985] Dev loop5: unable to read RDB block 7 [ 218.998888][ T6985] loop5: unable to read partition table [ 219.013454][ T6985] loop5: partition table beyond EOD, truncated [ 219.020934][ T6985] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 219.041657][ T1211] usb 1-1: USB disconnect, device number 19 [ 219.165380][ T6987] loop5: detected capacity change from 0 to 7 [ 219.196392][ T6987] loop5: [ 219.201784][ T6987] loop5: partition table partially beyond EOD, truncated [ 219.471731][ T6995] FAULT_INJECTION: forcing a failure. [ 219.471731][ T6995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.518776][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.0.314 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.518811][ T6995] Tainted: [L]=SOFTLOCKUP [ 219.518819][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.518833][ T6995] Call Trace: [ 219.518841][ T6995] [ 219.518851][ T6995] dump_stack_lvl+0xe8/0x150 [ 219.518886][ T6995] should_fail_ex+0x412/0x560 [ 219.518921][ T6995] _copy_from_user+0x2d/0xb0 [ 219.518946][ T6995] ___sys_sendmsg+0x1c6/0x360 [ 219.518977][ T6995] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.519052][ T6995] __sys_sendmmsg+0x27c/0x4e0 [ 219.519082][ T6995] ? __pfx___sys_sendmmsg+0x10/0x10 [ 219.519106][ T6995] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 219.519169][ T6995] ? ksys_write+0x242/0x270 [ 219.519195][ T6995] ? __pfx_ksys_write+0x10/0x10 [ 219.519223][ T6995] __x64_sys_sendmmsg+0xa0/0xc0 [ 219.519249][ T6995] do_syscall_64+0x14d/0xf80 [ 219.519271][ T6995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.519292][ T6995] ? clear_bhb_loop+0x40/0x90 [ 219.519317][ T6995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.519337][ T6995] RIP: 0033:0x7f2ef6d9c799 [ 219.519357][ T6995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.519374][ T6995] RSP: 002b:00007f2ef7ba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 219.519396][ T6995] RAX: ffffffffffffffda RBX: 00007f2ef7015fa0 RCX: 00007f2ef6d9c799 [ 219.519410][ T6995] RDX: 04924924924925c6 RSI: 0000200000000680 RDI: 0000000000000004 [ 219.519424][ T6995] RBP: 00007f2ef7ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 219.519437][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.519449][ T6995] R13: 00007f2ef7016038 R14: 00007f2ef7015fa0 R15: 00007f2ef713fa48 [ 219.519481][ T6995] [ 220.647899][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'. [ 220.763752][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.318'. [ 220.908783][ T7022] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 221.113753][ T5909] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 221.179459][ T7026] loop5: detected capacity change from 0 to 7 [ 221.202641][ T7026] Dev loop5: unable to read RDB block 7 [ 221.222896][ T7026] loop5: unable to read partition table [ 221.240187][ T7026] loop5: partition table beyond EOD, truncated [ 221.269313][ T7026] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 221.288384][ T5909] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.322468][ T5909] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.379767][ T5909] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.415649][ T5909] usb 4-1: config 1 interface 1 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 221.470621][ T5909] usb 4-1: config 1 interface 1 has no altsetting 0 [ 221.496748][ T5909] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.506287][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.527602][ T5909] usb 4-1: Product: syz [ 221.563713][ T5909] usb 4-1: Manufacturer: syz [ 221.571582][ T5909] usb 4-1: SerialNumber: syz [ 221.612645][ T5909] usb 4-1: selecting invalid altsetting 0 [ 221.631924][ T5909] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 221.662001][ T5909] usb 4-1: selecting invalid altsetting 0 [ 221.675118][ T5909] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 221.848208][ T25] usb 4-1: USB disconnect, device number 18 [ 221.993871][ T5909] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 222.188581][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 222.213662][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 222.243653][ T5909] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 222.263071][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.273681][ T5934] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 222.285135][ T5909] usb 1-1: config 0 descriptor?? [ 222.303956][ T7031] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 222.325878][ T7028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.338750][ T5909] uvcvideo 1-1:0.0: Found UVC 0.00 device (10c4:ea90) [ 222.363803][ T5909] uvcvideo 1-1:0.0: No valid video chain found. [ 222.448770][ T5934] usb 5-1: Using ep0 maxpacket: 16 [ 222.457557][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.470630][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.486539][ T5934] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 222.496196][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.513073][ T5934] usb 5-1: config 0 descriptor?? [ 222.608368][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.640687][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.678704][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.714129][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.754682][ T7041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.325'. [ 222.932305][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.959884][ T5934] corsair 0003:1B1C:1B02.0007: unbalanced delimiter at end of report description [ 222.992387][ T5934] corsair 0003:1B1C:1B02.0007: parse failed [ 223.004935][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.016854][ T5934] corsair 0003:1B1C:1B02.0007: probe with driver corsair failed with error -22 [ 223.175844][ T5934] usb 5-1: USB disconnect, device number 25 [ 223.388865][ T31] kauditd_printk_skb: 169 callbacks suppressed [ 223.388912][ T31] audit: type=1326 audit(1773498360.098:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.2.330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5e759c799 code=0x0 [ 223.419653][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.446814][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.603999][ T5934] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 223.808866][ T5934] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 223.868190][ T5934] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 223.909633][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.938289][ T5934] usb 2-1: Product: syz [ 223.950159][ T5934] usb 2-1: Manufacturer: syz [ 223.957488][ T5934] usb 2-1: SerialNumber: syz [ 224.044111][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'. [ 224.082404][ T7059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.332'. [ 224.297544][ T7050] tipc: Enabling of bearer rejected, failed to enable media [ 224.354790][ T5934] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 224.370553][ T5934] command write [95] error -22 [ 224.424853][ T5934] usb 2-1: USB disconnect, device number 23 [ 224.841344][ T7067] loop5: detected capacity change from 0 to 7 [ 224.869679][ T7067] Dev loop5: unable to read RDB block 7 [ 224.918333][ T7067] loop5: unable to read partition table [ 224.952436][ T7067] loop5: partition table beyond EOD, truncated [ 224.992981][ T7067] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.121257][ T7069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.128929][ T7069] IPv6: NLM_F_CREATE should be set when creating new route [ 225.182499][ T7069] lo: entered allmulticast mode [ 225.256880][ T7069] tunl0: entered allmulticast mode [ 225.286526][ T7069] gre0: entered allmulticast mode [ 225.329077][ T7069] gretap0: entered allmulticast mode [ 225.382873][ T7069] erspan0: entered allmulticast mode [ 225.411813][ T7069] ip_vti0: entered allmulticast mode [ 225.440740][ T7069] ip6_vti0: entered allmulticast mode [ 225.468225][ T7069] sit0: entered allmulticast mode [ 225.498242][ T7069] ip6tnl0: entered allmulticast mode [ 225.523393][ T7069] ip6gre0: entered allmulticast mode [ 225.551854][ T7069] syz_tun: entered allmulticast mode [ 225.579460][ T7069] ip6gretap0: entered allmulticast mode [ 225.607251][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.616146][ T7069] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.642756][ T5914] usb 1-1: USB disconnect, device number 20 [ 225.663027][ T7069] bridge0: entered allmulticast mode [ 225.683437][ T7069] vcan0: entered allmulticast mode [ 225.720268][ T7069] bond0: entered allmulticast mode [ 225.725942][ T1211] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 225.734059][ T7069] bond_slave_0: entered allmulticast mode [ 225.755968][ T7069] bond_slave_1: entered allmulticast mode [ 225.812171][ T7069] team0: entered allmulticast mode [ 225.826369][ T7069] team_slave_0: entered allmulticast mode [ 225.844531][ T7069] team_slave_1: entered allmulticast mode [ 225.869314][ T7069] dummy0: entered allmulticast mode [ 225.883682][ T1211] usb 4-1: Using ep0 maxpacket: 8 [ 225.898611][ T1211] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.910520][ T1211] usb 4-1: config 6 interface 0 has no altsetting 0 [ 225.944934][ T1211] usb 4-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=7e.1c [ 225.959882][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.978799][ T1211] usb 4-1: Product: syz [ 225.982203][ T7069] nlmon0: entered allmulticast mode [ 225.986207][ T1211] usb 4-1: Manufacturer: syz [ 225.996905][ T1211] usb 4-1: SerialNumber: syz [ 226.017807][ T7069] caif0: entered allmulticast mode [ 226.054280][ T7069] batadv0: entered allmulticast mode [ 226.074810][ T7069] vxcan0: entered allmulticast mode [ 226.095882][ T7069] vxcan1: entered allmulticast mode [ 226.104451][ T7069] veth0: entered allmulticast mode [ 226.115825][ T7069] veth1: entered allmulticast mode [ 226.166898][ T7069] wg0: entered allmulticast mode [ 226.185991][ T7069] wg1: entered allmulticast mode [ 226.199681][ T7069] wg2: entered allmulticast mode [ 226.214589][ T7069] veth0_to_bridge: entered allmulticast mode [ 226.228289][ T7069] veth1_to_bridge: entered allmulticast mode [ 226.254701][ T7069] veth0_to_bond: entered allmulticast mode [ 226.280406][ T7069] veth1_to_bond: entered allmulticast mode [ 226.291006][ T7069] veth0_to_team: entered allmulticast mode [ 226.304368][ T7069] veth1_to_team: entered allmulticast mode [ 226.320724][ T7069] veth0_to_batadv: entered allmulticast mode [ 226.333395][ T7069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.345018][ T7069] batadv_slave_0: entered allmulticast mode [ 226.356142][ T7069] veth1_to_batadv: entered allmulticast mode [ 226.371197][ T7069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.382908][ T7069] batadv_slave_1: entered allmulticast mode [ 226.404782][ T7069] xfrm0: entered allmulticast mode [ 226.421559][ T7069] veth0_to_hsr: entered allmulticast mode [ 226.435919][ T7069] hsr_slave_0: entered allmulticast mode [ 226.445908][ T7069] veth1_to_hsr: entered allmulticast mode [ 226.458743][ T7069] hsr_slave_1: entered allmulticast mode [ 226.482719][ T7069] hsr0: entered allmulticast mode [ 226.502963][ T7115] loop5: detected capacity change from 0 to 7 [ 226.506487][ T7069] veth1_virt_wifi: entered allmulticast mode [ 226.521559][ T7069] veth0_virt_wifi: entered allmulticast mode [ 226.533355][ T7115] loop5: [ 226.549527][ T7115] loop5: partition table partially beyond EOD, truncated [ 226.554847][ T7069] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 226.586617][ T7069] veth1_vlan: entered allmulticast mode [ 226.596877][ T7069] veth0_vlan: entered allmulticast mode [ 226.617175][ T7069] vlan0: entered allmulticast mode [ 226.628926][ T7069] vlan1: entered allmulticast mode [ 226.658546][ T7069] macvlan0: entered allmulticast mode [ 226.691896][ T7069] macvlan1: entered allmulticast mode [ 226.745246][ T7069] ipvlan0: entered allmulticast mode [ 226.769503][ T7069] ipvlan1: entered allmulticast mode [ 226.796563][ T7069] veth1_macvtap: entered allmulticast mode [ 226.811849][ T7069] veth0_macvtap: entered allmulticast mode [ 226.826398][ T7069] macvtap0: entered allmulticast mode [ 226.839466][ T7069] macsec0: entered allmulticast mode [ 226.850470][ T7069] geneve0: entered allmulticast mode [ 226.893760][ T7069] geneve1: entered allmulticast mode [ 226.914419][ T7069] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 226.939555][ T7069] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 226.957779][ T7069] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 226.980593][ T7069] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 227.119753][ T7069] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 227.265362][ T7069] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 227.296018][ T7069] gre1: entered allmulticast mode [ 227.315486][ T7069] vxlan0: entered allmulticast mode [ 227.418839][ T7078] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 227.652961][ T7078] batman_adv: batadv0: Adding interface: ip6gretap1 [ 227.660453][ T7078] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.690362][ T7078] batman_adv: batadv0: Interface activated: ip6gretap1 [ 227.762809][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.343'. [ 227.796991][ T7102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.343'. [ 227.887301][ T1165] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.936044][ T1165] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.952390][ T7132] binder: 7130:7132 ioctl c0306201 200000000080 returned -14 [ 227.972422][ T1165] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.025096][ T1165] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.045678][ T1165] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.058780][ T1165] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.079117][ T7141] loop5: detected capacity change from 0 to 7 [ 228.091068][ T7141] Dev loop5: unable to read RDB block 7 [ 228.098492][ T1165] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.128874][ T1165] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.128933][ T7141] loop5: unable to read partition table [ 228.226698][ T7141] loop5: partition table beyond EOD, truncated [ 228.233746][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 228.262248][ T7141] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 228.399434][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 228.416378][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 228.431685][ T9] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 228.451239][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.475137][ T9] usb 2-1: Product: syz [ 228.504666][ T9] usb 2-1: Manufacturer: syz [ 228.527282][ T9] usb 2-1: SerialNumber: syz [ 228.793987][ T1211] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 228.824874][ T1211] pwc: Failed to set LED on/off time (-71) [ 228.831406][ T1211] pwc: send_video_command error -71 [ 228.840874][ T9] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 228.850400][ T7147] netlink: 'syz.0.352': attribute type 1 has an invalid length. [ 228.881899][ T1211] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 228.910365][ T1211] Philips webcam 4-1:6.0: probe with driver Philips webcam failed with error -71 [ 228.937535][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 228.956635][ T1211] usb 4-1: USB disconnect, device number 19 [ 228.987124][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 229.006624][ T9] usb 2-1: media controller created [ 229.041221][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.054185][ T7154] fuse: blksize only supported for fuseblk [ 229.300726][ T9] zl10353_read_register: readreg error (reg=127, ret==-32) [ 229.693872][ T9] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 229.709261][ T9] usb 2-1: USB disconnect, device number 24 [ 229.800874][ T7168] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 230.481694][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 230.581036][ T7182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.359'. [ 232.583681][ T5892] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 232.610035][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.370'. [ 232.622063][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.370'. [ 232.756204][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.785209][ T5892] usb 3-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 232.944147][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 233.003895][ T7120] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 233.103588][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 233.116280][ T9] usb 1-1: config 1 has an invalid interface number: 228 but max is 0 [ 233.143659][ T9] usb 1-1: config 1 has no interface number 0 [ 233.153644][ T9] usb 1-1: config 1 interface 228 altsetting 239 bulk endpoint 0xD has invalid maxpacket 1024 [ 233.164158][ T7120] usb 4-1: Using ep0 maxpacket: 16 [ 233.180994][ T7120] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 233.200489][ T9] usb 1-1: config 1 interface 228 altsetting 239 endpoint 0x4 has invalid maxpacket 11214, setting to 1024 [ 233.217215][ T7120] usb 4-1: config 0 has no interface number 0 [ 233.233630][ T7120] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.260272][ T9] usb 1-1: config 1 interface 228 altsetting 239 bulk endpoint 0x4 has invalid maxpacket 1024 [ 233.281521][ T7120] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 233.299349][ T9] usb 1-1: config 1 interface 228 altsetting 239 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.323971][ T7120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.344501][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.356119][ T9] usb 1-1: config 1 interface 228 has no altsetting 0 [ 233.362001][ T5892] usb 3-1: config 0 descriptor?? [ 233.373042][ T7120] usb 4-1: config 0 descriptor?? [ 233.380288][ T5892] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 233.410925][ T9] usb 1-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 233.450023][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.460242][ T9] usb 1-1: Product: syz [ 233.469914][ T9] usb 1-1: Manufacturer: syz [ 233.475266][ T9] usb 1-1: SerialNumber: syz [ 233.494456][ T7211] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 233.502753][ T7211] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 233.582665][ T7207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.606103][ T7207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.633993][ T7207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.654698][ T7207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.680534][ T5892] usb 3-1: USB disconnect, device number 12 [ 234.374355][ T7226] tipc: Started in network mode [ 234.383673][ T7226] tipc: Node identity ce0ca258550a, cluster identity 4711 [ 234.407972][ T7226] tipc: Enabled bearer , priority 0 [ 234.433931][ T7226] syzkaller0: entered promiscuous mode [ 234.443613][ T7226] syzkaller0: entered allmulticast mode [ 234.623632][ T5892] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 234.746486][ T1211] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 234.803803][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 234.822113][ T5892] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.831491][ T5892] usb 3-1: config 0 has no interface number 0 [ 234.843736][ T5892] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 234.867104][ T5892] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.886993][ T5892] usb 3-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 234.926633][ T1211] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.957376][ T1211] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.037342][ T1211] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 235.080498][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.115976][ T1211] usb 5-1: Product: syz [ 235.120552][ T1211] usb 5-1: Manufacturer: syz [ 235.197305][ T1211] usb 5-1: SerialNumber: syz [ 235.516778][ T7226] tipc: Resetting bearer [ 235.533860][ T5892] usb 3-1: config 0 interface 1 has no altsetting 0 [ 235.557673][ T7225] tipc: Resetting bearer [ 235.575651][ T1211] usb 5-1: 0:1 : does not exist [ 235.577493][ T5892] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 235.590941][ T1211] usb 5-1: BAAD SPEAKER p_chmask mismatch [ 235.621443][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.661498][ T5892] usb 3-1: config 0 descriptor?? [ 235.676766][ T7225] tipc: Disabling bearer [ 235.711696][ T5892] usb 3-1: can't set config #0, error -71 [ 235.744359][ T5892] usb 3-1: USB disconnect, device number 13 [ 235.854963][ T5901] tipc: Node number set to 2600903256 [ 235.894676][ T1211] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 235.908485][ T9] usb 1-1: USB disconnect, device number 21 [ 235.956546][ T1211] usb 5-1: USB disconnect, device number 26 [ 236.086962][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.154626][ T7238] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 236.424678][ T7249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.378'. [ 236.671020][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 236.681174][ T7256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.381'. [ 236.893653][ T5892] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 237.022414][ T7263] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20001 [ 237.031309][ T7263] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 237.046286][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 237.055575][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.076155][ T5892] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 237.097223][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.129095][ T5892] usb 5-1: config 0 descriptor?? [ 237.331974][ T7267] binder: transaction release 24 bad handle 1, ret = -22 [ 237.380714][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806bd3fc00: rx timeout, send abort [ 237.389674][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806bd3fc00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 237.493366][ T7257] tipc: Enabling of bearer rejected, failed to enable media [ 237.648420][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.685084][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.849810][ T5892] usbhid 5-1:0.0: can't add hid device: -71 [ 237.868692][ T5892] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 237.900162][ T5892] usb 5-1: USB disconnect, device number 27 [ 238.965585][ T7120] usbhid 4-1:0.2: can't add hid device: -32 [ 238.991176][ T7120] usbhid 4-1:0.2: probe with driver usbhid failed with error -32 [ 239.113609][ T5892] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 239.206371][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'. [ 239.215668][ T7279] bridge_slave_0: default FDB implementation only supports local addresses [ 239.304856][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 239.312583][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 239.322740][ T5892] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 239.332179][ T5892] usb 5-1: config 13 has no interface number 0 [ 239.339075][ T5892] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 239.374777][ T5892] usb 5-1: config 13 interface 50 has no altsetting 0 [ 239.385026][ T5892] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 239.395032][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.403095][ T5892] usb 5-1: Product: syz [ 239.458026][ T5892] usb 5-1: Manufacturer: syz [ 239.468379][ T5892] usb 5-1: SerialNumber: syz [ 239.504440][ T7284] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 239.535752][ T1211] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 239.715950][ T1211] usb 1-1: device descriptor read/64, error -71 [ 239.922664][ T5892] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 239.930142][ T5892] usb 5-1: MIDIStreaming interface descriptor not found [ 239.963639][ T1211] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 240.075662][ T5892] usb 5-1: USB disconnect, device number 28 [ 240.133629][ T1211] usb 1-1: device descriptor read/64, error -71 [ 240.220704][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.251441][ T1211] usb usb1-port1: attempt power cycle [ 240.603606][ T1211] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 240.622821][ T7290] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 240.634451][ T1211] usb 1-1: device descriptor read/8, error -71 [ 240.655353][ T7290] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 240.672872][ T7290] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 240.730514][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.392'. [ 240.740341][ T7291] netlink: 104 bytes leftover after parsing attributes in process `syz.2.392'. [ 240.767483][ T7290] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 240.813011][ T7290] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 240.852796][ T7290] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 240.884001][ T1211] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 240.912673][ T7290] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 240.923264][ T1211] usb 1-1: device descriptor read/8, error -71 [ 240.935001][ T7290] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 240.954042][ T7290] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 240.963846][ T7290] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 241.036750][ T1211] usb usb1-port1: unable to enumerate USB device [ 241.063668][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.093130][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.111997][ T7304] loop3: detected capacity change from 0 to 7 [ 241.121634][ T5976] Dev loop3: unable to read RDB block 7 [ 241.133965][ T5976] loop3: unable to read partition table [ 241.140052][ T5976] loop3: partition table beyond EOD, truncated [ 241.168285][ T7304] Dev loop3: unable to read RDB block 7 [ 241.175829][ T7304] loop3: unable to read partition table [ 241.185366][ T7304] loop3: partition table beyond EOD, truncated [ 241.205601][ T7304] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 241.477380][ T7309] tipc: Enabled bearer , priority 10 [ 242.527759][ T7323] batman_adv: batadv0: Adding interface: dummy0 [ 242.534264][ T7323] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.642199][ T7323] batman_adv: batadv0: Interface activated: dummy0 [ 242.722658][ T7324] batadv0: mtu less than device minimum [ 242.729859][ T7324] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.741640][ T7324] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.754623][ T7324] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.766020][ T7324] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.777361][ T7324] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.789339][ T7324] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.800652][ T7324] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.812340][ T7324] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.823861][ T7324] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.543637][ T7100] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 243.722314][ T7100] usb 1-1: Using ep0 maxpacket: 32 [ 243.756842][ T7100] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 243.774648][ T7100] usb 1-1: config 0 has no interface number 0 [ 243.793730][ T7100] usb 1-1: config 0 interface 184 has no altsetting 0 [ 243.828106][ T7100] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 243.848006][ T7100] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.869048][ T7100] usb 1-1: Product: syz [ 243.873323][ T7100] usb 1-1: Manufacturer: syz [ 243.879483][ T5892] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 243.899787][ T7333] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:21 [ 243.903823][ T7100] usb 1-1: SerialNumber: syz [ 243.944525][ T7100] usb 1-1: config 0 descriptor?? [ 244.054335][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 244.084250][ T5892] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 244.095632][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.123616][ T5892] usb 3-1: Product: syz [ 244.143211][ T7333] netlink: 80 bytes leftover after parsing attributes in process `syz.4.402'. [ 244.180814][ T5892] usb 3-1: Manufacturer: syz [ 244.195180][ T5892] usb 3-1: SerialNumber: syz [ 244.229375][ T5892] usb 3-1: config 0 descriptor?? [ 244.277058][ T5892] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 244.493841][ T7339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.524237][ T7339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.585512][ T7100] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 244.633601][ T7100] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 244.875267][ T7326] netlink: 48 bytes leftover after parsing attributes in process `syz.0.400'. [ 244.903803][ T7100] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 244.933639][ T7100] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 244.963932][ T7100] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 244.993715][ T7100] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 245.040290][ T7100] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 245.108308][ T7100] usb 1-1: USB disconnect, device number 26 [ 245.118320][ T5892] gspca_ov534_9: reg_w failed -71 [ 245.230850][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.242768][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.251739][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.261859][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.270117][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.463625][ T5892] gspca_ov534_9: Unknown sensor 0000 [ 245.463730][ T5892] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 245.492577][ T7347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.538550][ T5892] usb 3-1: USB disconnect, device number 14 [ 245.556123][ T7347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.639133][ T7349] loop5: detected capacity change from 0 to 7 [ 245.667598][ T5976] Dev loop5: unable to read RDB block 7 [ 245.675238][ T5976] loop5: unable to read partition table [ 245.683355][ T5976] loop5: partition table beyond EOD, truncated [ 245.720964][ T7349] Dev loop5: unable to read RDB block 7 [ 245.737422][ T7349] loop5: unable to read partition table [ 245.754000][ T7349] loop5: partition table beyond EOD, truncated [ 245.771082][ T7349] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 246.263600][ T7120] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 246.397081][ T7364] syzkaller0: entered promiscuous mode [ 246.402636][ T7364] syzkaller0: entered allmulticast mode [ 246.429558][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 246.475222][ T7120] usb 1-1: no configurations [ 246.479895][ T7120] usb 1-1: can't read configurations, error -22 [ 246.540539][ T7345] chnl_net:caif_netlink_parms(): no params data found [ 246.643669][ T7120] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 246.651585][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 246.665652][ T9] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 246.674959][ T9] usb 5-1: config 0 has no interface number 0 [ 246.681737][ T9] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 246.708533][ T9] usb 5-1: config 0 interface 196 has no altsetting 0 [ 246.904315][ T7120] usb 1-1: no configurations [ 246.906097][ T7372] loop5: detected capacity change from 0 to 7 [ 246.911755][ T7120] usb 1-1: can't read configurations, error -22 [ 246.922994][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 246.936808][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.945238][ T7372] loop5: [ 246.950764][ T7120] usb usb1-port1: attempt power cycle [ 246.994314][ T7372] loop5: partition table partially beyond EOD, truncated [ 247.003278][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'. [ 247.012794][ T7370] bridge_slave_0: default FDB implementation only supports local addresses [ 247.029382][ T9] usb 5-1: Product: syz [ 247.034092][ T9] usb 5-1: Manufacturer: syz [ 247.038772][ T9] usb 5-1: SerialNumber: syz [ 247.055662][ T9] usb 5-1: config 0 descriptor?? [ 247.078027][ T7360] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 247.258549][ T7345] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.280752][ T7345] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.303063][ T7345] bridge_slave_0: entered allmulticast mode [ 247.337842][ T7345] bridge_slave_0: entered promiscuous mode [ 247.363670][ T51] Bluetooth: hci5: command tx timeout [ 247.370100][ T7120] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 247.387039][ T7345] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.410243][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.425119][ T7120] usb 1-1: no configurations [ 247.430256][ T7120] usb 1-1: can't read configurations, error -22 [ 247.555163][ T7345] bridge_slave_1: entered allmulticast mode [ 247.583567][ T7345] bridge_slave_1: entered promiscuous mode [ 247.707960][ T7120] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 247.732326][ T7345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.749230][ T7345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.761834][ T7120] usb 1-1: no configurations [ 247.781020][ T7120] usb 1-1: can't read configurations, error -22 [ 247.792233][ T7120] usb usb1-port1: unable to enumerate USB device [ 247.974406][ T7345] team0: Port device team_slave_0 added [ 248.004050][ T7345] team0: Port device team_slave_1 added [ 248.229425][ T7345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.241606][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.268758][ T7345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.319945][ T7345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.339257][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.393719][ T7345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.453223][ T7386] FAULT_INJECTION: forcing a failure. [ 248.453223][ T7386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.472061][ T7386] CPU: 0 UID: 0 PID: 7386 Comm: syz.2.417 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.472092][ T7386] Tainted: [L]=SOFTLOCKUP [ 248.472100][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.472129][ T7386] Call Trace: [ 248.472137][ T7386] [ 248.472146][ T7386] dump_stack_lvl+0xe8/0x150 [ 248.472181][ T7386] should_fail_ex+0x412/0x560 [ 248.472214][ T7386] _copy_from_user+0x2d/0xb0 [ 248.472238][ T7386] ___sys_sendmsg+0x1c6/0x360 [ 248.472268][ T7386] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.472338][ T7386] __sys_sendmmsg+0x27c/0x4e0 [ 248.472366][ T7386] ? __pfx___sys_sendmmsg+0x10/0x10 [ 248.472386][ T7386] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 248.472455][ T7386] ? ksys_write+0x242/0x270 [ 248.472480][ T7386] ? __pfx_ksys_write+0x10/0x10 [ 248.472509][ T7386] __x64_sys_sendmmsg+0xa0/0xc0 [ 248.472534][ T7386] do_syscall_64+0x14d/0xf80 [ 248.472555][ T7386] ? trace_irq_disable+0x3b/0x150 [ 248.472596][ T7386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.472616][ T7386] ? clear_bhb_loop+0x40/0x90 [ 248.472640][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.472659][ T7386] RIP: 0033:0x7fe5e759c799 [ 248.472679][ T7386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.472696][ T7386] RSP: 002b:00007fe5e57f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 248.472717][ T7386] RAX: ffffffffffffffda RBX: 00007fe5e7815fa0 RCX: 00007fe5e759c799 [ 248.472731][ T7386] RDX: 04924924924925c6 RSI: 0000200000000680 RDI: 0000000000000004 [ 248.472743][ T7386] RBP: 00007fe5e57f6090 R08: 0000000000000000 R09: 0000000000000000 [ 248.472755][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.472766][ T7386] R13: 00007fe5e7816038 R14: 00007fe5e7815fa0 R15: 00007fe5e793fa48 [ 248.472796][ T7386] [ 248.667855][ T7345] hsr_slave_0: entered promiscuous mode [ 248.684854][ T7345] hsr_slave_1: entered promiscuous mode [ 248.691921][ T7345] debugfs: 'hsr0' already exists in 'hsr' [ 248.713572][ T7345] Cannot create hsr debugfs directory [ 248.996204][ T51] ================================================================== [ 249.004363][ T51] BUG: KASAN: stack-out-of-bounds in l2cap_send_cmd+0x2a3/0xb90 [ 249.012072][ T51] Read of size 28 at addr ffffc90000bb74e0 by task kworker/u9:0/51 [ 249.020097][ T51] [ 249.022537][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.022561][ T51] Tainted: [L]=SOFTLOCKUP [ 249.022568][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.022580][ T51] Workqueue: hci2 hci_rx_work [ 249.022604][ T51] Call Trace: [ 249.022611][ T51] [ 249.022619][ T51] dump_stack_lvl+0xe8/0x150 [ 249.022643][ T51] print_report+0xba/0x230 [ 249.022663][ T51] ? l2cap_send_cmd+0x2a3/0xb90 [ 249.022690][ T51] kasan_report+0x117/0x150 [ 249.022711][ T51] ? trace_kmem_cache_alloc+0x29/0xf0 [ 249.022728][ T51] ? l2cap_send_cmd+0x2a3/0xb90 [ 249.022749][ T51] kasan_check_range+0x264/0x2c0 [ 249.022769][ T51] ? l2cap_send_cmd+0x2a3/0xb90 [ 249.022787][ T51] __asan_memcpy+0x29/0x70 [ 249.022804][ T51] l2cap_send_cmd+0x2a3/0xb90 [ 249.022826][ T51] l2cap_recv_frame+0xc032/0x10240 [ 249.022849][ T51] ? lock_release+0x4b/0x3d0 [ 249.022868][ T51] ? ret_from_fork_asm+0x1a/0x30 [ 249.022892][ T51] ? unwind_next_frame+0xa5/0x23c0 [ 249.022916][ T51] ? rcu_is_watching+0x15/0xb0 [ 249.022939][ T51] ? lock_release+0x4b/0x3d0 [ 249.022958][ T51] ? unwind_next_frame+0x1aaf/0x23c0 [ 249.022988][ T51] ? unwind_next_frame+0xa5/0x23c0 [ 249.023011][ T51] ? unwind_next_frame+0x1aaf/0x23c0 [ 249.023037][ T51] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 249.023057][ T51] ? ret_from_fork_asm+0x1a/0x30 [ 249.023080][ T51] ? ret_from_fork_asm+0x1a/0x30 [ 249.023104][ T51] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 249.023124][ T51] ? ret_from_fork_asm+0x1a/0x30 [ 249.023149][ T51] ? stack_trace_save+0xa9/0x100 [ 249.023165][ T51] ? __pfx_stack_trace_save+0x10/0x10 [ 249.023182][ T51] ? check_path+0x21/0x40 [ 249.023204][ T51] ? check_noncircular+0xda/0x150 [ 249.023228][ T51] ? add_lock_to_list+0xc7/0x100 [ 249.023252][ T51] ? lockdep_unlock+0x5d/0xd0 [ 249.023269][ T51] ? __lock_acquire+0x146e/0x2cf0 [ 249.023297][ T51] ? __mutex_trylock_common+0x158/0x260 [ 249.023323][ T51] ? __pfx___mutex_trylock_common+0x10/0x10 [ 249.023348][ T51] ? rcu_is_watching+0x15/0xb0 [ 249.023370][ T51] ? trace_contention_end+0x3d/0x150 [ 249.023395][ T51] ? __mutex_lock+0x319/0x1300 [ 249.023422][ T51] ? l2cap_recv_acldata+0x2e3/0x13e0 [ 249.023444][ T51] ? l2cap_recv_acldata+0x30b/0x13e0 [ 249.023465][ T51] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 249.023486][ T51] ? __pfx___mutex_lock+0x10/0x10 [ 249.023507][ T51] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.023529][ T51] ? l2cap_conn_hold_unless_zero+0x179/0x2b0 [ 249.023556][ T51] ? __pfx_l2cap_conn_hold_unless_zero+0x10/0x10 [ 249.023584][ T51] ? l2cap_recv_acldata+0x41/0x13e0 [ 249.023609][ T51] l2cap_recv_acldata+0x7e9/0x13e0 [ 249.023636][ T51] hci_rx_work+0x4f9/0x1030 [ 249.023656][ T51] ? process_scheduled_works+0xa8d/0x18c0 [ 249.023678][ T51] process_scheduled_works+0xb6e/0x18c0 [ 249.023711][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.023734][ T51] ? assign_work+0x3d5/0x5e0 [ 249.023755][ T51] worker_thread+0xa53/0xfc0 [ 249.023786][ T51] kthread+0x388/0x470 [ 249.023801][ T51] ? __pfx_worker_thread+0x10/0x10 [ 249.023821][ T51] ? __pfx_kthread+0x10/0x10 [ 249.023836][ T51] ret_from_fork+0x51e/0xb90 [ 249.023859][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 249.023879][ T51] ? __switch_to+0xc7d/0x1450 [ 249.023897][ T51] ? __pfx_kthread+0x10/0x10 [ 249.023912][ T51] ret_from_fork_asm+0x1a/0x30 [ 249.023944][ T51] [ 249.023950][ T51] [ 249.371893][ T51] The buggy address belongs to stack of task kworker/u9:0/51 [ 249.379281][ T51] and is located at offset 128 in frame: [ 249.385894][ T51] l2cap_recv_frame+0x0/0x10240 [ 249.391044][ T51] [ 249.393416][ T51] This frame has 26 objects: [ 249.398215][ T51] [32, 34) 'rsp.i241.i.i' [ 249.398229][ T51] [48, 88) 'chan.i.i.i' [ 249.402671][ T51] [128, 146) 'pdu_u.i.i.i' [ 249.407015][ T51] [192, 202) 'rsp.i94.i.i' [ 249.411616][ T51] [224, 226) 'rsp.i.i.i111' [ 249.416135][ T51] [240, 242) 'rej.i' [ 249.420833][ T51] [256, 258) 'rej.i145.i' [ 249.424825][ T51] [272, 274) 'rej.i143.i' [ 249.429444][ T51] [288, 290) 'req.i229.i.i' [ 249.434743][ T51] [304, 312) 'buf.i222.i.i' [ 249.439372][ T51] [336, 348) 'buf29.i.i.i' [ 249.444064][ T51] [368, 372) 'rsp49.i.i.i' [ 249.448692][ T51] [384, 393) 'rfc.i.i118.i.i' [ 249.453404][ T51] [416, 480) 'buf.i119.i.i' [ 249.458209][ T51] [512, 576) 'req.i120.i.i' [ 249.462810][ T51] [608, 617) 'rfc.i.i.i.i' [ 249.467504][ T51] [640, 656) 'efs.i.i.i.i' [ 249.472035][ T51] [672, 678) 'rej.i371.i.i.i' [ 249.476551][ T51] [704, 710) 'rej.i.i.i.i' [ 249.481334][ T51] [736, 800) 'rsp.i.i.i' [ 249.485939][ T51] [832, 896) 'buf.i.i.i' [ 249.490289][ T51] [928, 1056) 'req.i.i.i' [ 249.494631][ T51] [1088, 1096) 'rsp.i.i.i.i' [ 249.499064][ T51] [1120, 1122) 'info.i.i.i.i' [ 249.503928][ T51] [1136, 1264) 'buf.i.i.i.i' [ 249.508748][ T51] [1296, 1298) 'rej.i.i' [ 249.513538][ T51] [ 249.520220][ T51] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90000bb0000 allocated at copy_process+0x508/0x3cf0 [ 249.533372][ T51] The buggy address belongs to the physical page: [ 249.539914][ T51] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1b7a7 [ 249.549072][ T51] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 249.556393][ T51] raw: 00fff00000000000 ffffea00006de9c8 ffffea00006de9c8 0000000000000000 [ 249.565007][ T51] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 249.574877][ T51] page dumped because: kasan: bad access detected [ 249.582262][ T51] page_owner tracks the page as allocated [ 249.588044][ T51] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 9435924212, free_ts 0 [ 249.607519][ T51] post_alloc_hook+0x231/0x280 [ 249.612442][ T51] get_page_from_freelist+0x24dc/0x2580 [ 249.619614][ T51] __alloc_frozen_pages_noprof+0x18d/0x380 [ 249.625728][ T51] __alloc_pages_noprof+0xa/0x30 [ 249.630793][ T51] __vmalloc_node_range_noprof+0x7be/0x1730 [ 249.637176][ T51] __vmalloc_node_noprof+0xc2/0x100 [ 249.643371][ T51] dup_task_struct+0x228/0x9a0 [ 249.649485][ T51] copy_process+0x508/0x3cf0 [ 249.654928][ T51] kernel_clone+0x248/0x8e0 [ 249.659737][ T51] kernel_thread+0x13f/0x1b0 [ 249.665045][ T51] kthreadd+0x4ec/0x6e0 [ 249.669773][ T51] ret_from_fork+0x51e/0xb90 [ 249.674579][ T51] ret_from_fork_asm+0x1a/0x30 [ 249.679656][ T51] page_owner free stack trace missing [ 249.685131][ T51] [ 249.687510][ T51] Memory state around the buggy address: [ 249.693251][ T51] ffffc90000bb7380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 249.701771][ T51] ffffc90000bb7400: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 249.710114][ T51] >ffffc90000bb7480: f8 f2 f8 f8 f8 f8 f8 f2 f2 f2 f2 f2 00 00 02 f2 [ 249.718291][ T51] ^ [ 249.726122][ T51] ffffc90000bb7500: f2 f2 f2 f2 f8 f8 f2 f2 f8 f2 f8 f2 f8 f2 f8 f2 [ 249.734305][ T51] ffffc90000bb7580: f8 f2 f8 f2 f2 f2 f8 f8 f2 f2 f8 f2 f8 f8 f2 f2 [ 249.742506][ T51] ================================================================== [ 249.755603][ T51] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 249.762996][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.773898][ T51] Tainted: [L]=SOFTLOCKUP [ 249.778266][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.788363][ T51] Workqueue: hci2 hci_rx_work [ 249.793152][ T51] Call Trace: [ 249.796472][ T51] [ 249.799443][ T51] vpanic+0x56c/0xa60 [ 249.803574][ T51] ? __pfx_vpanic+0x10/0x10 [ 249.808131][ T51] panic+0xc5/0xd0 [ 249.811902][ T51] ? __pfx_panic+0x10/0x10 [ 249.816367][ T51] ? preempt_schedule_thunk+0x16/0x30 [ 249.822050][ T51] ? preempt_schedule_thunk+0x16/0x30 [ 249.827540][ T51] ? l2cap_send_cmd+0x2a3/0xb90 [ 249.832553][ T51] check_panic_on_warn+0x89/0xb0 [ 249.837535][ T51] ? l2cap_send_cmd+0x2a3/0xb90 [ 249.842421][ T51] end_report+0x73/0x180 [ 249.846711][ T51] ? l2cap_send_cmd+0x2a3/0xb90 [ 249.851788][ T51] kasan_report+0x128/0x150 [ 249.856335][ T51] ? trace_kmem_cache_alloc+0x29/0xf0 [ 249.861753][ T51] ? l2cap_send_cmd+0x2a3/0xb90 [ 249.866637][ T51] kasan_check_range+0x264/0x2c0 [ 249.871608][ T51] ? l2cap_send_cmd+0x2a3/0xb90 [ 249.876510][ T51] __asan_memcpy+0x29/0x70 [ 249.880967][ T51] l2cap_send_cmd+0x2a3/0xb90 [ 249.885675][ T51] l2cap_recv_frame+0xc032/0x10240 [ 249.890897][ T51] ? lock_release+0x4b/0x3d0 [ 249.895547][ T51] ? ret_from_fork_asm+0x1a/0x30 [ 249.900525][ T51] ? unwind_next_frame+0xa5/0x23c0 [ 249.905669][ T51] ? rcu_is_watching+0x15/0xb0 [ 249.910550][ T51] ? lock_release+0x4b/0x3d0 [ 249.915166][ T51] ? unwind_next_frame+0x1aaf/0x23c0 [ 249.920510][ T51] ? unwind_next_frame+0xa5/0x23c0 [ 249.925659][ T51] ? unwind_next_frame+0x1aaf/0x23c0 [ 249.930991][ T51] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 249.936501][ T51] ? ret_from_fork_asm+0x1a/0x30 [ 249.941486][ T51] ? ret_from_fork_asm+0x1a/0x30 [ 249.946635][ T51] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 249.952888][ T51] ? ret_from_fork_asm+0x1a/0x30 [ 249.957899][ T51] ? stack_trace_save+0xa9/0x100 [ 249.962877][ T51] ? __pfx_stack_trace_save+0x10/0x10 [ 249.968288][ T51] ? check_path+0x21/0x40 [ 249.972752][ T51] ? check_noncircular+0xda/0x150 [ 249.978078][ T51] ? add_lock_to_list+0xc7/0x100 [ 249.983139][ T51] ? lockdep_unlock+0x5d/0xd0 [ 249.988271][ T51] ? __lock_acquire+0x146e/0x2cf0 [ 249.993718][ T51] ? __mutex_trylock_common+0x158/0x260 [ 249.999326][ T51] ? __pfx___mutex_trylock_common+0x10/0x10 [ 250.005348][ T51] ? rcu_is_watching+0x15/0xb0 [ 250.010678][ T51] ? trace_contention_end+0x3d/0x150 [ 250.016023][ T51] ? __mutex_lock+0x319/0x1300 [ 250.020841][ T51] ? l2cap_recv_acldata+0x2e3/0x13e0 [ 250.026694][ T51] ? l2cap_recv_acldata+0x30b/0x13e0 [ 250.032048][ T51] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 250.037717][ T51] ? __pfx___mutex_lock+0x10/0x10 [ 250.042770][ T51] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 250.048775][ T51] ? l2cap_conn_hold_unless_zero+0x179/0x2b0 [ 250.054794][ T51] ? __pfx_l2cap_conn_hold_unless_zero+0x10/0x10 [ 250.061349][ T51] ? l2cap_recv_acldata+0x41/0x13e0 [ 250.066874][ T51] l2cap_recv_acldata+0x7e9/0x13e0 [ 250.072061][ T51] hci_rx_work+0x4f9/0x1030 [ 250.077272][ T51] ? process_scheduled_works+0xa8d/0x18c0 [ 250.083049][ T51] process_scheduled_works+0xb6e/0x18c0 [ 250.088763][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 250.094795][ T51] ? assign_work+0x3d5/0x5e0 [ 250.099508][ T51] worker_thread+0xa53/0xfc0 [ 250.104330][ T51] kthread+0x388/0x470 [ 250.108471][ T51] ? __pfx_worker_thread+0x10/0x10 [ 250.113657][ T51] ? __pfx_kthread+0x10/0x10 [ 250.118295][ T51] ret_from_fork+0x51e/0xb90 [ 250.122953][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 250.128110][ T51] ? __switch_to+0xc7d/0x1450 [ 250.132820][ T51] ? __pfx_kthread+0x10/0x10 [ 250.137435][ T51] ret_from_fork_asm+0x1a/0x30 [ 250.142252][ T51] [ 250.145893][ T51] Kernel Offset: disabled [ 250.150232][ T51] Rebooting in 86400 seconds..