last executing test programs: 6.469016456s ago: executing program 0 (id=983): sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0xfffeffff}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x7fa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f00000001c0)) bind(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(0xffffffffffffffff, 0x5) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800080000c1"], 0x4a) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0xfffffffffffffffe, 0x0) 5.635853794s ago: executing program 1 (id=992): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'\x00', 0x0}) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x3f7, 0x400, 0x70bd28, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x4080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000000126bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="001000002120000008000500", @ANYRES32=0x0, @ANYBLOB="1400128009000100766c616e0000000014000280"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000002) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="78000000eeff0004000000400000000000000000", @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008", @ANYRES64=r1], 0x78}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x8}) socket$kcm(0x10, 0x2, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000240)=0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004fff7ffff0000000003"], 0x0, 0x56}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 5.450977687s ago: executing program 1 (id=994): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000280)="18fc8a64dc534578695cf5ec3d55", 0xe, 0x15, &(0x7f0000000380)={0x11, 0xf5, r2, 0x1, 0x0, 0x6, @local}, 0x14) (fail_nth: 1) 5.224004483s ago: executing program 1 (id=995): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xc362e63b3f31ba5f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x48}}, 0x800) landlock_create_ruleset(&(0x7f0000000000)={0x18000, 0x2, 0x2, 0x1080, 0x1, 0x3fb83b3e9c6b1d7d}, 0x30, 0x1) 5.191417966s ago: executing program 0 (id=996): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000180)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000240)={{0x8000000, 0xf000, 0x0, 0x2, 0x8, 0x0, 0x40, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0xfb, 0x9, 0x0, 0x2, 0x1, 0x7, 0x3, 0xff}, {0x6000, 0x3000, 0xc, 0x0, 0x7, 0x9, 0x40, 0x0, 0x3, 0x9, 0x0, 0xfc}, {0xeeef0000, 0xd000, 0xf, 0xff, 0x7c, 0xfe, 0xa, 0x0, 0xfe, 0x3, 0x4}, {0xdddd0000, 0xf000, 0x4, 0x0, 0xff, 0x4, 0x6, 0xb, 0x0, 0x3c}, {0xeeee8000, 0x4000, 0x0, 0x3, 0x5, 0x2, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0xdddd1000, 0x0, 0x2, 0xff, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x0, 0xc8, 0x1, 0x83, 0xa, 0x26, 0x96}, {0x1, 0x4}, {0x80a0000, 0xff}, 0x0, 0x0, 0xeeee8000, 0x600, 0x1, 0x5800, 0x0, [0x4000000000013, 0x0, 0x1]}) r6 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000240)="fb4149dd053be3ac2cc4a22332a77b23b8898600087bb16c94a6ab80313804d92f00000000010000045a96383369d226270080ff000000000000000000a000", 0x0, 0xffa4) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0xd, 0x8, 0x4, 0x4, 0xffff, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0xcb}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r14, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r5, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0xa, 0x3, 0x0, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.894918342s ago: executing program 2 (id=997): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x6, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "715150b1971bbe75", "8c419c4cb217d59a5e2108c76ca18dad", "8869fdbb", "ddc7586e28e54682"}, 0x28) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x40, r2, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x6f}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x10]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}}, 0x20000000) (async) r5 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000140)=0x14) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x4000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r11 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r11, 0xc0045627, &(0x7f0000000100)=0x3) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r11, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x15e, 0x1, 0x2800, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000540)={0x0, 0xe645, 0x20000, 0x0, 0x2ca}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa4cf, 0x1000, 0x2, 0x215}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c46, 0x4, 0x1, 0x350, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xadbc, 0x4101, 0x2, 0x14d, 0x0, r7}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x537, 0x20000, 0x3, 0x32d}}], 0x4, 0x0, &(0x7f0000001d80)) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x3cf}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1000, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x10000, 0xfffffffe, 0x2a6, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x3, 0x1f0, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r12, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) r17 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r17, 0x8918, &(0x7f00000000c0)={@empty, 0x3b, r18}) (async) sendmsg$NL80211_CMD_SET_BEACON(r6, 0x0, 0x4004084) 4.80167128s ago: executing program 1 (id=998): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r3, 0x7fc, 0x2, r3}) ioctl$KVM_SET_IRQCHIP(r2, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r2, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x10, 0xc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$sndseq(0xffffff9c, &(0x7f00000003c0), 0x147240) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a45352, &(0x7f0000000400)={{0xe, 0x8}, 'port0\x00', 0x10, 0x100008, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7, 0x8}) openat$panthor(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000740)={0x0, 0x1, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000180), 0x0, 0x800000000000c}) 4.536166958s ago: executing program 0 (id=1002): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "bbddf0", 0x30, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [{0x2, 0x1, "cb107090eaf5"}]}}}}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) syz_usb_disconnect(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0xff0f0000) 3.923956432s ago: executing program 2 (id=1006): sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0xfffeffff}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x7fa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f00000001c0)) bind(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(0xffffffffffffffff, 0x5) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800080000c1"], 0x4a) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0xfffffffffffffffe, 0x0) 3.628107759s ago: executing program 4 (id=1007): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB="06400036048d8a6ade71e57a8dd5d5e111b1", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2000400, 0x1000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0xffffffffffffffda, 0x2000000000000000, {0x7, 0x2d, 0x0, 0x0, 0x0, 0xfffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x3) write$binfmt_elf64(r8, &(0x7f0000000140)=ANY=[], 0x78) sendfile(r7, r8, &(0x7f0000000880), 0x4) fcntl$addseals(r8, 0x409, 0x8) close_range(r6, 0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000e0c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x4, 0x40000000000000, 0x3ff, 0x4, 0x8, 0x0, {0x4, 0x4000000103, 0x717, 0x0, 0x0, 0x800000000000007, 0xfffffff9, 0xb, 0x0, 0x8000, 0x49, 0x0, 0x0, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x5) 3.182756426s ago: executing program 4 (id=1008): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xc362e63b3f31ba5f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x48}}, 0x800) 2.954158514s ago: executing program 1 (id=1009): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_ethernet(0xce, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp={0x44, 0xc, 0x8, 0x0, 0x0, [0x0, 0x0]}, @rr={0x7, 0x3, 0xd7}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x800) recvmsg(r2, &(0x7f0000003840)={&(0x7f0000000180)=@xdp, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003880)=""/4112, 0x1010}, {&(0x7f00000026c0)=""/152, 0x98}, {&(0x7f0000002780)=""/4095, 0xfff}, {&(0x7f0000003780)=""/10, 0xa}], 0x4, &(0x7f0000003800)=""/24, 0x18}, 0x10000) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x24, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.844339227s ago: executing program 4 (id=1010): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000517000/0x3000)=nil, 0x3000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet(0xa, 0x801, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4) semget$private(0x0, 0x4000000009, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010003904fffffffffddbdf2500000000cff66607c8282484f7", @ANYRES32=0x0, @ANYBLOB="0198000013130000050011000600000008001b000b000000180012800e00010077697265677561726400000004000280"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4044000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x6, 0xffff}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x40) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {r9, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000340)=0x1, r9, 0x0, 0x2, 0x4}}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xfff3}, {0x0, 0x10}, {0x7, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) 2.792531268s ago: executing program 2 (id=1011): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0xffffffff, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x695f, 0x0, 0x0, 0x3, 0x100, 0x4}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) ppoll(0x0, 0x0, 0x0, &(0x7f00000002c0)={[0x8, 0x200]}, 0x8) 2.693695892s ago: executing program 3 (id=1012): symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffff8, 0x202, 0x0, 0x0, 0x2, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x18b) 2.661264901s ago: executing program 2 (id=1013): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) migrate_pages(r2, 0x7, &(0x7f0000000140)=0xc, &(0x7f0000000180)=0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x7fffffff}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x7, 0x197, 0x4, 0x4, 0x0, 0x2}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xa09e88ab5b3a8c48}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pi6 \x00'}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r5, 0x0, 0x0}, 0x1c) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0xa) r7 = accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x7, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r11 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r11, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 2.554553767s ago: executing program 0 (id=1014): r0 = openat$autofs(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000140), 0x0, 0x0, 0x4000) 2.546162372s ago: executing program 3 (id=1015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000a0000004000000040"], 0x50) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0x7e}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x100000000, 0x1, 0x180, 0x4, 0x14, 0xf0, 0x50, 0x12, 0x6, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x80, 0x9, 0x3], 0xeeeb9000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x6, 0x9, 0x9, 0xf7, 0x97}, {0x2000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x2, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x4000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x3, 0x4, 0x800003, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) 2.45289224s ago: executing program 2 (id=1016): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000003700)={&(0x7f0000000100)={0x2, 0x4e23, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000036c0)=[@ip_ttl={{0x10, 0x0, 0x2, 0x8001}}], 0x10}, 0x80) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000007440)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000007300)=[{&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/92, 0x5c}, {&(0x7f0000003240)=""/136, 0x88}, {&(0x7f0000006200)=""/4096, 0x1000}, {&(0x7f0000007200)=""/167, 0xa7}, {&(0x7f00000072c0)=""/51, 0x33}, {0xfffffffffffffffe}], 0x7, &(0x7f0000007340)=""/200, 0xc8}, 0x10000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmgde=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES16=r2, @ANYRESDEC=r0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x58, 0x12) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000240), &(0x7f0000000280)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0xfffffffe, 0x4000010, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) syz_fuse_handle_req(r6, &(0x7f0000004280)="c9614df797d5bbaf2d529ccfe807cb2396820ca614edc8f52d067330a81f6c26f4cc0f48e5ae1d42335297538a44b9b28f2d36c39510bcdb6cf2fc17d9b35688d0447cc7167668496bdd28d8df1292b12b61894268f707c212263b3f1ae188c8a69527ac8e196f23028853fd4009294124f18fc47bd2322220e5f0d5d30223095e4e748803b6bf25ba87f40183766b5d2c3a6b3d2f7566b160f0e0742a6cabf6b0071295bc4d5ca4ee60a1fbdc8bbc1f2a59428bc836a1ef0c2dfcbe514f9857f7230f848af37be100dc4f4115ffcb0198774affeb7690dd6782a9f51987dba5d9fd0b6a3426c1ce1e04e48f4255c157450791ba022f0bad4844a22679bb17601987f461d7a35d7de8874cc3c47f360b3c31dfdbf7bb9f93ec80046118660e8bbb18930914f087c05df436073b9ccc5a740f8f634cc827245366b1179aaaddd2bd161f2fa413e1beded9f3063cabd52ece7139af17db00b63117a6b6a1ad8c33ed779d7dddf5b40c17635397b878c7117923f26767864e788da1f79dbbc769fbab45b34198b69dd0599904a0c1297812f9ad9cbf48c59d553b1004ab8213802f3a0852b5b827ab3ea7220873b379b459d7a09af061ccda8bd857d3b2bf2dbaea1b00e2cd0bcc8d6eb11c04bd21532bec66ae36d674a4dd01ab54c27d3267961ecfad0042837fea87d75cecc7a1a58f79f77d72fede0757b7c1f54a5040e741a0fc785ea0ad13bcfc0b69df4dc29dc75e331d2ba03c3cdf04e0a4490159b43c6ae2c010f276c85f3bc46ca94e73e11762739e40e6bfbc113f46ee6ab801b97d42fadc067e23a3151ae90ff64c80e64bba5313475948fbd24a6a95f7ec0b221c9f901c68d184d38b2e09cde68fbd6dd022b6fa1db26aa6ebe2128a93fcb7259ebcde896bd81685c881cb25f581e27479f929e1094852559209c255b0dd5317b148567674b235b10e093363e8e4bd15c4ab90c44abaadbfeabd65e26223543c415befff4d280ad0f0dc132b5413bbe96fdedcabc55e9f3eeead53a1f2d7c0455c8a3bda363a8c33c99888a05546f49dc4c3593aeb30b8ea314b77b8d117334d9c3f800a132e4c3bab461863f027dcfc066bf93f0426d74e02c92a0727309d5bf5bf8242a2b594b81de0e030e55f0125b5d4e12dbffc6806a6c7bd6d62c3d54e87f0607e08750d808a2f442a7eac0ec311c3498b9709ae2f505d5e8b3670079847644147741ffca679bbd1b658bc6c422e58d070f8608c246677af0e2efff5cbf88b3b4a0431a2f26648d64991cf99848012cb6eecb8a13ea91ce77d3c8f2bc047370f4811ae5c341371e3b65bed88294580ba90258c8d36683f21d91a8a914948b2222e4127b061cc0121b97a1b9b1c4ebb7ee166b5af58497d7e0ac90fda25e41a2490ec5d143d0e47475741b30138585637d7997fff2a8805a88c4bd75975ccffcbabefa3576328d86e802b8490e8a773e01afa74fa26c6849deb15b05596e7226cdc0c0ff364bcb4e62ec5498472b9c935a3ae18c698438582e170437c538d7d24a935036964c77e6ed37de77c64384b258f7bbe944f630d3ca82c441c6b2c5bc73dd9f90ecff67a816de7b15bdcaa5a5f1bb8b270a8ac1119e1626e29eb5f2ae4595ca2e10c2e6befd2ed0f5bb658922bdec9bd76767b9a4b56a15aaa2f7e7d06dba36710a4c8d69d2361aa5f1864710d0868d8f7616cffac40e0accd9b44df8cb5b5324039d82c44e9b97d3a77d914a3738cab84541f0dfc2ed93fb3a746d19cf73495cab380afcdac8acf300e34bb68917009ec1d205dc315669c6341218ebbd0a380c0d14396732e430544ea02d9aff1ffd199c475c4cd313aac4de1121055d806858ee1538436a5f3a549230a42698aeaa3b58b5b9dbf6e11292dad9e0535f5c0685105a448888101ca2228ab50af16b657bb9abb5d4c40cf03931f345663ef6e7655048f78bd23227c6a78bd8b8a457abad7267c8d3ed8decb74cfb21c98471c31f068fd8fea32f13d44783fac14b71e614fd156bddbbde1bf759d0023eb50345e970fa93efd99469583eecec690147f3c075da4efeda849b172829f34e31b281d844fb7c04ca49b30a15abbe493c191e003b76ccb8b2e560ddc3573c6182a87f8e5bdbe10333b3ff3381705984e5595831c025335d0438b053d17fe2f43424735ec3e9d0e8dc278d9e3f35d8d6881e47801d9f77ddf9954ba8f4fe95c295a67968b07bde6378b5ccf24f3d0d228b3cfb4624318828a2649af11698c56860c85617a5151f879846383f5fcf0e9ac483bc4c60beda3bd273a594fc26850d31a852839f23f9e5ffd31d63a7cee2341f22f385d41521aacfe6faf1c5b1e024cd6c6cd4b8696b8e66c6268196da27dc4090552748260bba916b932cbf8066b07dbf5f75b5ea04c385d2ac971d079ab7d4a6bec1008b7564f167aa903acda2ef1756ddbdee86ad25b172479756036d1e11b5c2ab10e657e3b3c768840fd111477bfa05b9e7a2ee765d685f7688765f2441e052a60f56286e6d15ea19d98306a0a5b5efd5b1363bf357d836cb20bb2420ecff7fd682c78763bd1ab31561e6a36a20bf57024632e168bdbc82efa42f7302dc5519c2b56ba3e960437e69f5502048e914540bd4e6138e04e3cb04c75abaee441dd29e23a23948eecb2a7883ae6f3c35b3a3a965fd062688a5975059da47b6029f38baec8d3932295a2257c83a0f966aa7c19db13ccadb86c6c81d84a09bd0782cc87369c8b3a006fee64323c964dcd731fbcaa2f1c1b19f55688365f183bc26bcb636eb0622fc5f5804d46db493737078fe6a6e82f34e48eef5974787c8c4b8abd8a0dcf516862454915b7b9d81a48b9d14a3a08a9408e41c3522480a925cb9521f02cf4380aa44796fa9569aa5043787d9c3a0a345f202d66e28f6c5fc17f8998655bff0351687e2ef6ee523f965d37ed7c4c1fedc51ad7024d8c1102fef833ecf9289050b944e2e9a5646e090f5ab5be3759ea66ee79d5f870fea4ed505a231461421084317c6c5379c74ba5eef02b77c9687f49b05606c5969ae5c84f74a7d43b148dddaffcbd45e8c4eefacdd5c8c07f926baf0b1e7f65c7184c56c9ac355fde5df39557d4011b7eeb65a18fca8de446d9879404bf64f3e460232642960938e6c797d3d942534fa64b9fb0ec5648940456ae4ec22df6ccbaca34ff8a296640ed28f903db33533e0bb4927ac96312580810a38738d5c5ae638359379d244d0c45cc9bc4525648748f4a2becb101c08d7c4ecc407067cf1008cb0f14279bae658ea5f16084769ad66a8e6a9a5137ec65764ec6d25e688cf8a357252420b1ba619e8ab19d28019060434a9d2579be998e8a735778b690cad9512cc9604d2e60e01f2cbb714dbfd87795092e0ff7acb8217074a6d0b9ae00d80685798eb4bee828dff6e1f6858202381cb4051c6a5b6918f8c042a3698ac5eb402abc1f27932764ebd54daa45105666041c1a51e55bf1761c2dbe2c75a511b168f4961385d1a7b7c780fc1c23f1710b7c1e4716e99ed044ce4697fa3b649bc85443ef1b111549d342cd2a417158d01c483e6a2d6535a5801c00f5a7bb47a0d51656bd50824b2f998ea59cde88a7c329e09f19a704104309b674e9b6dd48acd0abee6366ae1ccc24fc2cb1fc0666e71c57e314464c2f2b950b76d426441265f34ae20af7e5dbf47773459f2e34a3b1a2af5d2f406cda82049ca734f22c6ac5e284c4f4c3f10edf89ba7eac611dfd27c46fbad61aa3c5acfd1a29611b917a26ba070169f08e81441e7d6f77f73837dcf6cdaac40fecebab6475fee4a6105c844fc52eb603159d4762408911fce84b736a4fae34cb79dd525ebdd53b3b241a08c664a90a6bab087052b82db1f0a9e2f98b78b4998504b148711f47caac7229b708a562e6968b91720b585b2446f7f8aa848d433ebdf0d9d5c866ae7c3660f0be9734959533da9b9484dd10954c7bbc631fc07cf74d1a103076721639a19dec9ba88904c55c3d0e4829d14e48c3f93097521c4a9f4fbcf7b0d17baa7b742afd32a2e78be29f6fb37018bd0579af59985171a8dd5dd35af833fd8816cdd704fa5214260994cd64bae6c7d1376b864874de542dafb0a5c4b29c5bd887bf1dc8ec0e2f907fcffeb6522a3aa20c8ae5912b519049719cba277be7bb6c4341d65fc530804dec7ce5c1a64c4aef279c0da8a1bcc89a63542fc2af2cd1d69701c78db225c596190e81fadabd718b794689fafc929ed092b90218642ae0c75ffe6b9fa9baff10f2424d43ecda2867013d4f2e7562d3bcaa7f51f1f5a96bcc9bff8dd1bce4eaaf49626550183dc19eb358c146b657c2b34fe67a8ecb12b1b29b3d0bf28d6ecc13578f7d1ec1c7f7f76f325d920ff717c7d01baffa0d52166f6849832895f9ec960c65b06506caf39ea6ececccfa197ae151b948d415338c18b3ac35f6f96e67c7662de01f8a92c2a224f4567fc72333b43fb099dda8c49c3cbaee48cff545894390165fc290d798888a84c583b0096513a5c61b2ee1e836b17632cff8f71f9c73546882961cf25a010c7276791167e0dd7d2de8bf44abe9f12419c8776d84418d8e26463ea139e64f82f81fc5b577957f6d34b247a6d7d79aec95d80320b7999f398347835d82a74f3f5637a37ca08158d4022e39ef514f264ba84dacb3c5270272ae94ee3858eaf4de98e8d944273398e315dc42a277fb97d9ee7ddc4f7dbb6cbdbb9283ff1ecbde638ce6edeb18e680addd942f6632e73fc11ba5874a179c79ae67a6406d19ab7293af407cd319862fd4c9568a3bcf31a11adc4ddd8a924e10768594e4689a109daeff28f15a182ee3bfb347f0500005d8dcc691421b6fad377a9ceda726d195eb847ee879664861d4e2e0d3567362524303feafc2b552f0f1f64436ce9efaa63b2b268c674969c879d027c37aca197b71cfe47670cc268de9714a91a3a50c7c205daa613c56c1b1f13d34eaf8dbfc126e0e9fc10cd3e508154e6cea0572e179e424d2270454b1000a3bf4aac26b18efeb9115b6fcd3fcee6ed5b9c3d585394077c35850ef697c5f8a57a270431a0a2e81f6a62600130375de62e9796eed4e4e25bfd3f6addfe62addcf2b8fa8eb28d8c3fb20800a8e9ae87c114a1ae91ed347f8ff589cead9e646722180fd60bdc9d0923a1a6ec8fc6de5fadc2203344d459ef6f0145ff71a4cacdabaf1b55f262c86733dd109b747f8740a3959a13a3c41fe3408a67d7253df6e399345d9216600f82fefcba9db303442ab3f184c012b1359e8601d85d6b0312ea7b0474d0c8dbca06625643e94ffdacd9a0a2839674249370fa67a5681df0442079cf67bd073859cf3d423711639f8addb6a9acceda893f017f3ca1f23f1245473be8bc6b5c51abc5d088fc764b3d96c9bbe7908806e2b64908bd0be73aa09eeb09de1117d0159b17a166bdb1394892b815aabb68dd7aef00bb6660a31088c88d16d433079552f25801472a7302a44fcdaf13410d15ab5e690cabdfddf112046f58ded90f4d4cdc4de5bfbc5259456ace66f7dbde5c49446d377b87181f0ba03598973137ec2f9b038c0a8ddcd46a6d963086c383c9e86b98fafc0a3b8d7ace5e5f96a0414a4afd5ae75847997f982b338901d81a852081bd47ccd553c2a41aac73f2381e611c8c2581052779e0494f0e1efa0974e11659866f8687fae4236556988b24e0bfc2dceb6f71fe09ee3b4e723dbf369dd22b7889ba296d8c4062aeef1113839c793e4bf16a35b1388ec6af47c363855e03137e9e1d4795beef29d890dc5a41e14fd8f880ff1c8267f259b46229b96bd0e8f7068503b223fc01ba9d8986c601e9807bcd3c232babbbb3112c87d7c30ae496841c03b361045a31e9819b69ec7b94a12d1793ee0b9267a3f9b77e965d1089a2356c46a05f6facfe3e1fe10f5257dd1e83972a9bdf1275ed03ee0c32d8021f264ecd67f635051c9f51f69d4848876c7d68703cbdacaaac18c1ea5e43d9554ddfaeb22f72e73e53760ca15ee52fee57e153702f7f78001a282c8389adc9f1a9b33bda27d4ac6b29dca8b082db3f858df468570d2c099a2b2e5c0897e0183ab8b4dfb62d65d7492347d51ed7b69b414d0de1be678664c7209f849d62d0a5e3a64daeccd1f332831c4b91a11a5c48444e39cd19d0e45120d5ac9c03856df66c8615d359e2f89484a068468a3e319166631932b643d73ad3879b8c8854232384ec62bf7d3c68c51deacdf8685870842e57464659fc9cbfe75f97d8a34d730a74828757661040f9f2cd1832d4c15cb774e0af4d4d0dad5e0098e580f6259bcacb3557fd8442910c8222feb58104d075ef976218a6ceaf10a807b0df2fa5b08945ad17dbc17cd88d7a9bbe2d21332d2ce8a29abbfca7df2f498798e0cb0846c10e4a9125c0b7ab06902f15d8521c10def1ddc94e4f563252894f844a3ee109aec35f766001520926351795ecaa582e90598503a22a9d75bd60c8cb631897d98ea5d66d8f9f06345bb889c4aa21115518b444c2d9d45de72abc73659aafc00465cd3564834389576c5c04f911e2ac0082d72c58e2cec954e6ae72dba6c8b7ed682f488e81bc706d34c723fa3a7ba967b6b00e1abea0e7622a0d9ca17d403bcbf5e2316ab4d46734226ed6797c84161384fbb46b8fe8653cd351e526cca50e7ab8885dd7b5d240cfd15a0253830a7ceb9db44bb12529b77e3cc835442b4d58c7db6a762b7e2c5a3fb37ae9f1426a99823c2df6ca2f6fbf886af52e8565abb7904da69ad7f7029cf73ecc37b5a8c1da6a9e9e1cde38506c944130000303d494e422fe181c96a6359b377f18917ae78729911b40b7e69cbefea3c25dd9803aee3183ee3933b5c19d84a400e6c57cb20dc7c7e68739edbf1e8e3475e0a64823dedb46c27780ad01a90a4244891c262d8b0f99e3b1adbb906f82e1977a6101a9d2b44b4b9bfc1f102490ae19e657fa8e7f432eb52d2a4ce932d5346566b887ad4c4f4b5d0dbce790a429f546593e52979c8400441bfe8485c8b864f81b627cf1e20c800b0197b562d0f9b173ca3ba0fae69fe11b91909df9a98ba358e59edbd73da0707a170b3e51928c9c27863dbc83bdecf632b0cc757ab90a270312b2949fdd93f6bea54e303fb0a97b380d516a36f86f053e55e81504affaf7d7b1b8bbde5da525d3f60a628ae17918e07b32b408b51ad3ba6030c3555556334f2fe7c11098007f3e232c8953754c794f807b0ac3680b2a3688f5205d90ccce3ba9c7907508cec61287ad0aa55a151e639bb9086444bdcd149bc5c003340b8381d8c35b073729d2e95a21af1d9995c8093d570b59d8730dd04f3e26ac85e20166e5596082680de90522bcb9532d9e9dce3a10e998f25503902fd7814577ded668bbf3de129c024135a8af420ded350479f13d55290274e3ac63f4568ec7c7a8244f610458d85ecf29aa135d0e56ee52d743200a754ee4508e94d5bc15b3cc837de84fb3cf27ad7590dcaedb78fd8c8f46aaa3529fbb1a2536956c940b605eda0668b1a0f763060bba65d471450a2b34c328c9fb5971851b341a092e315e34a6801cc0808559e5de6d2d9508d11d3072426aa2d43e65f8429c48dbd03197c4f616c253a5b1b50e7ff7cd44df88f5f142997adf976cd2f0cffd673c1791ab969f9dad5867abe531227c059e7b7a9c2343aad230c83513a130ce6e0c4d6815e2bd91f99b6c514703f50fb43139f2e83c521b74603f006bc7d162047e647234b87439278b10ccd92a4fca136f74d211592235e602d3643fa190cecc8edaf2d727dd5db07f9873048b1f75e19e7c39ef839c0703ec53f70c9fe39b43b98fdacd56b49a416e3b8c66604fb912e3672b8b1a6c5ff7db16320b599513d39460098138b7336d9152df98179f2e07c5abffd4ecf8a2cc8903a40563f187da3a99071bf0c93a65708cb36cd6a69545b78be13a3df9b6c336166b591637bc1be3dfc502200ea982d3b428824cf257184ee93f2d0f3168d4179d238497b84cb73abead20f710057b52ed535adee055081cee4aa842c82c220c160477c16bd1baaa73f46442d2a00658303a9433aa858ce880ed80fa04b592da3c3452a0810f759cbfccd7143d10427c1d39b5c5ecffc590377ce68976315db340e0c00d35d34bec22cfe95882f52f40248281c94758c809d5e65cbf9aeb2dffbdbf2f9a7d10dcd6e7eccc5781851c26990d4a2a2e71598dca6973bfabc82a6135bcc1ee3f1611ced7454e271cbd85a07a583fe89ea98dc4c1b52293adaadfd195b95e6fef37525736a048bd3bb7cc769c50b26c42445f2d5aa37c5ae529b90a5638d920a330ce1ebaf9d979e1b8ee70aba747f7f1a0b9a873167fb5829e64ad08facdfed0fdb76718ef97eeb028cbea23578969190d46e27f81d5eae27987007e217d540d11a33cb36e5768d34d7607ea83221cda3cfefb1cc65f171711160eaadc737013ec1d51de97afd4afc67aa15a23f197800a0566ef4937a6bba9f3334c0aa0e1ed7e9b5c3fc52a3ee112169ed5bce66e88a06f7f3fdda21a10b818c080f2e08e16af6eaac777dff81bfc2231f4cd7360d460091929035b268785e54b3704d52b8c32ffcdf00f21e7f8d3434b3e1ee711a8427596a0e8ae606d02b06914ba09c0a75b2858c7a8dcfff15e2a78549a447dd5d0d5ce912623e4b43fa4106d98e0a5f7960deef827fa30e52697f486cc9928e9b614253a461435d9e993f4a2a700dd0bc54519a2044f36e8f02fb78ca1025d1ce8c35366eddc90818ca1cf9e28bb8ae0f337efe98b82af2547fa03c3eb0813e942d92f1dedac412fa7f38c73339959d8f620ceb02ef65dc0a9e4ca272d1965c73c2b06810ba6e13d83de07c4eecbb9e43744b414003057bc26fce09696e98146e59b79a6d817e26b132e3c935d8e5230335ae363a42084ba271058fb25268b139397ef984861d4adbec66e66477df46049fcb8e5f0179846ca020284eccac22b51c3273ae69898295686843bfe2c2ce4f43ea8668a3121558c52d4eb967341197f650e3f145877eb1f5de8377434b18eb2a7bdbb5d7db569d0564d2db7b31f174113d8487be7a5f91f97cda158aac83f0b84eb6a787d30f35f8a1e5ce28f9f86999a06cec497fcd1c8c1c570eb00f1946f300a03bf9b08584df33e2050950dcf4010928365d667d8ee42403c9d1bab54a7518428f7679e0a0e172f33bb3b8b0a829ea3d53fe478fc2556fdb4e51bfa638e9343f628ea570a096e016f5e47e4b72b29b445f9eb12d133277b1213eae6a2ea224ee80e30eb2fd12b08bfb56a588f2f2e67b9c2cb4795c025bb257e954a7720f57687482d119b1850208267eefe0e65b0dc022da6c3324a0d4e1d35dea840b6bdf2fc652579ba3fe55c41126ca4cd54636e86089451e97e5ce3d7cc2499f0882a2c761f0c74640d5152a5bad5091187cbc0c11683f53b5f2b8d4202e33f42070f13e77a63e0794c6ac5dc986a531ab49225d408d8da33a3c89ec856b336faaee251afabc4895afc41165fb558e6c26a3dc12037945f47fc6e60d710f68ca3dd2f18ca8d96cb9e60d2d91cd5b5f56168dc8bda3d3d31779e02c9c6349847504fac30a82466cd692becd3aec74238d336e20a31c2b97be3bbd90c3a2ad938d7ff1b033fc899006acb36eb561a37d4397c09403c845f6081a36d9e4c590f335ebffdee96a0208bf18a9a5ce84ee45c76a22786822e296a957920150f5e11c3354329d4dc328552fa3f2a93d506c7159ddc3054cb1447808cd87c78b9cf74ace81847d712a68d5e88f9c75808fe57383d9867b264e7e3ba233a6bc79a13bf35531e40a1c0d8becacf3d51b07a0cd50e81153e4a0a70128d36ffc096c408b55f47496d08b0153a3e669688a4354ba7dcb65fad21760813afa8a8e4789a9466d7997a27f92e9dfd0e3f9e499c188a200dddc7b57794a2239feb263e8421b79df4f0e6444704476e209101ac5fbc55d41ed0ea466b05401148963ae15dbebfb8d6981330e5b9dcdb01c9d6f9f95ccf28a878e891ae69163071eebd1b738861c58c7b8b0022379412596ea8c2914977e419c5ed53c32e7b191cb148784f42044947eb19e61daf6c853364037a9f734732c8fe5ef76fcec755469621aa4cb7cffd79ffb01b18630bff7751a7e13c3e1427f3cc068ff199ddfe132eaeb4ecd69e48ce59230eff0a81f98ed2835afe2f8911bd9b03ea42cf67abe104cc8b6ee648b515c53f082aaf2ff9cccd1c5c11b920ad82b3bab7e301547713acc37a507059d5a854d08c1330827c87bcf9fb8a337f9d786f653ae90fa293285d5b2b8baf0bc97214dceb9ce1f882acdc45fc1b1c9c1ab8b9931c284fdd21a1c459a064b66f9ccecdc34bf616d9c96c44d741410307968b30d5d4512d5e3c130e2837c10a534bdc7598015c2c0fd1ced2b19628494e5726e55816da6f64c599f7617298c5e1cf4459622dfbf795488238ae1c2716843d2c8ecd1427e068d868ff4d1fa4ba4c701ac81962372867d7c021dd1d0056ef9426e5f8f0579cb26c812abf463d954d5776a3b9f52691ba69ef9dc8fba802a85a5c315c4700b4d8c68544ca96203f606065bd5e42e1f593d34ef6a086a5399505d12dcd85aafb81da899eb2f01d742b735ec7820330cc92e10b243cafb228c195ade2a4f096b0170bb1be7d5265af0b9598740a5a874326e60cf475c99cacecb013d1eb5202169bcc3d8a1b98484d0dd5b06e4c432e6af4b1fe2a897215295febd579ef3ff568cf02ff1a5c6ba147c4505b3a6119a43b0f960e5fafbcf50135b7efe743580d399f1b21dd8566ab93c12efe9a00902e9fdd333c08ddeebd1a0bcad6cf5ad53fbfa2ce04bb6aa24fe9367c63e2f4f90359b7db4d68d9b68d3d40a5722c6c1fb1e62b27ebbf1bdb39ed409fb579572d64078d1391bad71b2816183da174f2d5c956ae58fd926750a272921b919f0a4aa5f824a79ddaab60c7da7c282053274df30d1df6df3e7e023e9675c329f921999c3afd1ba877b1e19ed260f2119795db264fbb9d72f4a31f230d26e12ebfa04ff480f2e6636daf722ef11df1ee5d99cf999f7dd61606c132d5f8ce95e0b154af0cb9f9ad20a49dc86bb2ad7e2f86069123aa8e25347ab2367c10b3835b72f25e953041dea58242a9b6dcd3635c24bc75f69fc7f18e90fc7c02e11c5243fa9ffceb2951eef8538f49b05c08779e8b68ce637a95e41d057522b60e5b1ed27d5a9bbb1400d01c40ce78ca77ba40cfbfbf7a9104b5d3db2f27bc78136599f3c9434167c8c09a8cb159034cac86167174cda08f81f384a8ea3d0fb9344d2eb1ee9171a2ed8e8eb1d60b669db2274c6811a9d254083f5d0f65aacd3dd4dad307c48a1d46f354bab93bcf98b174c40b00717fd55381519ed602675faa9a7f9cad1c46f66bdfd0c8c16f93ab11cb5773227af6a104dd57783b3e03cfa19f5183af3c908bc53d62bcdcb68d767c6afe9fc3be46ff9a9e94833bd3900", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x2200, 0xe526, 0x7, 0x9, {0x5, 0x27, 0x7, 0x280000000, 0x4, 0xffff, 0x7d79, 0x1, 0x0, 0x1000, 0x7f, r8, r9, 0xcb, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbb78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d155a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3315fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783f13cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b000000001034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db234687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a5aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x90, 0x0, 0x4, {0x4, 0x3, 0x0, 0x7e34, 0xf, 0x8, {0x10000, 0xfffffffffffffff7, 0x4b6, 0x1, 0x9, 0x1, 0x1, 0x200, 0x0, 0x2000, 0xf9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x41}}, {}, {@multicast1}, {@local}, {@local}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c000000100001002bbd7000fbdbdf2500000000", @ANYRES32=r13, @ANYBLOB="ea430000000000005000198035000200cf0af6026da25c49e6c9317018035be52d215cb3c272a191d3fdb9a318531e6c4475453a2df3f0c89904e8bff35bd964ce00000014000400273f26034224b56682a651282c8b0e561400030077"], 0x8c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) pwritev2(r12, &(0x7f0000001540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x1000, 0x7, 0x4) sendmsg$nl_xfrm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="580100001000010028bd700000000000ff020000000000000000000000000001ac14140d0000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}}, 0x44050) 2.350394679s ago: executing program 0 (id=1017): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x52339000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.174795665s ago: executing program 0 (id=1018): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f50000000341", @ANYRES16, @ANYRES32=r0], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0xc, &(0x7f0000000000)={0x20, 0x29, 0x99, {0x99, 0x22, "bee2799a64b2f17001961aca4b692c112bce1d86e11c8c77bb99b5a4d0c2866f51609cd0a55d4ee49daaa5c3eb3976eaf4989199a33a6029ae9809d75ac1aab3c8106ee11f7666c1dc73d9d22c109148d3f9d9b4a8aa0b4428502be888818048cf732a1095e45d41959ef57fd2632777a16eb5f5d0d53889adce6837a7986076d37784b6702654b4f755d10b0c1a536f991eaaceb8c38f"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x24, &(0x7f00000001c0)={0x0, 0xf, 0x94, "7bb55d5ca34692434b1f8d2f445d0850bd4202e9a3b378edc47de1604901911dfe187c500f756e42bce87cd14d0a2654a3b5abb7db8792bc5ba543fe75c18898ff8cc31c0f0d089f90f235962f3a133d1ba6cade753d8eeeb053ddab4912363bc5a04991443b5f89e90be285edcde2ee43df4972393ff21e510d5db8ec211105e9adc5d4d8ffed384961386e1b8371919ffe9439"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xe5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x4, 0x3, 0x7, 0x3ff, 0x5, 0x15, 0x7, 0x7, 0x3, 0x4daf, 0x6, 0x1}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0xf8}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfff1}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x9}}, {0x4}}]}]}, 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24010840}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x8, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, @loopback={0x300}, 0x700, 0x20, 0xb05, 0x8}}) 2.069410002s ago: executing program 3 (id=1019): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1819f8104241d367db00"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000005400000083000000bf0920000000000055090100000000009500000000000000bf9117000000000ab7020000010000008500000000000010b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0xfffffffa, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = accept4$alg(r3, 0x0, 0x0, 0x80800) r5 = msgget$private(0x0, 0x3ac) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x3, 0x0, 0x7, 0x0}) msgrcv(r5, 0x0, 0x0, 0x1, 0x2000) msgctl$IPC_RMID(r5, 0x0) sendmmsg$sock(r4, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="8224", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40008c4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060af60400000000000000000a0000000900010073797a310000000038000480340001800a0001006c696d695e670000240002800c001e40000000000000000908000340000000000c00014000000000000b703a284aa1f2f35e00c8200900000000000000080000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1c8, 0x12) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000001dc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xc, 0x20, 0x81, {0x8, 0xb, 0x0, 0x1, 0x1, 0x5, 0x20, 0xb5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x7, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x4, 0xb, {0x8, 0x25, 0x1, 0x0, 0x31, 0xa6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x4, 0x8, {0x8, 0x25, 0x1, 0x80, 0xf, 0x5a, 0x7fff}}}}}}}}]}}, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="fdffffffffffffff", 0x8}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a4000500000000000000035c3b61c1d6ddb2c124c2110e00367f6f94007174cf6efb8000a007a290eb49e2f11d457fbace2ee5a7cef4094200001b14d6d930dfe1d9d322fe7c4a50b5b9bd6ee6f61e59eb4edbb57a00e97a6f6e7b7e2720637a1e7892811eb64252f19e00360db798262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5ad42ce81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b", 0xd8}], 0x1}, 0x4000) 1.735079897s ago: executing program 3 (id=1020): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x2007, &(0x7f00000000c0)={&(0x7f00000005c0)=[{0x6, 0x4200, 0x1, &(0x7f0000000300)="b7"}], 0x1}) 757.8241ms ago: executing program 4 (id=1021): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0xfd, 0x2, 0x3, 0xfd}, 0x8) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000280)="18fc8a64dc534578695cf5ec3d55", 0xe, 0x15, &(0x7f0000000380)={0x11, 0xf5, r2, 0x1, 0x0, 0x6, @local}, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sendfile(r4, r5, 0x0, 0xfff2) sendmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="2418727190dc883b3564754096dc589f50e6c08079c5a8bae0eca083e2b00430ba280a6ae56be8abc04e609538b94e721ba6c9a4bc8bb936ca7675523b2645b81ce051a5df21bb4437c3e4da4c99ec85f65733dd0bee998e13ccbbdb814b5222b624bbdbb9c3bef7702429f4f569873d21054bbc0ab446b59cd7b882077b1ac61c", 0x81}, {&(0x7f0000000200)="2268508398c569d6eda9a0af", 0xc}, {&(0x7f00000003c0)="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", 0xff}, {&(0x7f00000004c0)="c80308a0ce58098975d4286cc791a7011e58b01b1a262f196d80e7115a0b7f734606fefef1eab1de4085cb338499bd451e8e14adc0770746eb284a0634165c4e8e7b8408", 0x44}], 0x4, 0x0, 0x0, 0xc0}}], 0x1, 0x44090) 471.156592ms ago: executing program 4 (id=1022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x3ffe, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x8}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfe, {0x0, 0x0, 0x0, r5, {0xffe0}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dd}, 0x4000080) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x2, 0x7fff5ffe}]}) close_range(r6, 0xffffffffffffffff, 0x41000000) 302.266967ms ago: executing program 3 (id=1023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x8401, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x8401, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0xa1, 0x1, 0x4, r1, 0x0}]) socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdc80, {0x0, 0x0, 0x0, r5, {0xfff2, 0xf}, {}, {0x7, 0xffff}}}, 0x24}}, 0x4c800) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'wlan0\x00', @broadcast}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x8}) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x8}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@map, 0x1d, 0x1, 0x212, &(0x7f0000000480), 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0), &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x20, 0x0, @val=@tcx={@void, @value, @void, @void, r10}}, 0x1c) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x20, 0x0, @val=@tcx={@void, @value, @void, @void, r10}}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=r11, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=r10], 0x20) sendmsg$kcm(r8, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x8004) (async) sendmsg$kcm(r8, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x8004) socket(0x400000000010, 0x3, 0x0) (async) r12 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@gettfilter={0x4c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r14, {0xc, 0x10}, {0x0, 0xfff1}, {0xffff, 0xe}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xb}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000801}, 0x24044848) (async) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@gettfilter={0x4c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r14, {0xc, 0x10}, {0x0, 0xfff1}, {0xffff, 0xe}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xb}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000801}, 0x24044848) 244.388266ms ago: executing program 1 (id=1024): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r2, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x8, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240400c0}, 0x4040010) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x5}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x9}, @TCA_CAKE_ATM={0x8}]}}]}, 0x6c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x7800, 0x8000, 0x7fffffff, 0x5, {{0x10, 0x4, 0x3, 0x0, 0x40, 0x65, 0x0, 0x8, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @rr={0x7, 0x1b, 0x6, [@local, @rand_addr=0x64010102, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010100]}, @generic={0x44, 0xd, "a4ad5d44ca0eec5d5a702c"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'tunl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x8, 0x1, 0x100, 0x0, {{0x6, 0x4, 0x3, 0x9, 0x18, 0x66, 0x0, 0xe, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x3d}, {[@ra={0x94, 0x4}]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) (async, rerun: 32) getpeername$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x81, 0xd5, 0x5, 0x7a, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f00, 0x8000, 0x5, 0x5}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x65, &(0x7f0000000900)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xac, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) (async) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x8, 0x1, 0x9, {0x0, 0x0, 0x0, r17, {0xf, 0xb}, {0xffff, 0x6}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x0, 0x6361, 0x5, 0xffffffff, 0x5}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x800) (async) sendmsg$nl_route_sched(r16, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r17, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async) r18 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r18, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r19, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001140)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000b40)={0x5bc, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0xa8, 0x7, 0x80000000}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0xd0, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x10, 0x4, 0x4, 0x7ff}, {0x800, 0x8, 0x35, 0x3}, {0x401, 0xe, 0x7, 0x2}, {0xbd, 0xe, 0x5, 0x401}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa0d}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r17}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x85f2}}}]}}, {{0x8, 0x1, r19}, {0xd0, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfff9, 0x5, 0x5, 0xd}, {0x6, 0x9, 0x67, 0x8}, {0xddf1, 0x2, 0x81, 0x572}, {0x7, 0x1, 0x1, 0x7}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x64}, 0x1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x44000) (async, rerun: 32) syz_usb_connect(0x5, 0x3f0, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3ceb4a3a28d93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29bc61cf090aa1e112da07250101000300090507080800040406b505bce3"], 0x0) (rerun: 32) 128.94948ms ago: executing program 4 (id=1025): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0xfffe, r0, &(0x7f0000000040)="98", 0x17060bb3c, 0x1000000, 0x0, 0x10}]) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 104.379742ms ago: executing program 2 (id=1026): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000f40)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000f40)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x41, 0x4001, 0x0, 0x0}, {0x41, 0x800, 0x0, 0x0}], 0x2}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x49, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x348}, 0x10) socket$kcm(0x10, 0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x7, 0x81, 0x58, 0x4911, 0xffffffffffffffff, 0xdade, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000000)={0x40, 0x1, 0x3}, 0x18, 0x1) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0x8, 0x0, 0x2000000097, 0x10, 0x0, 0x5, 0x4, 0x0, 0x8], 0xeeee8000, 0x402}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 0s ago: executing program 3 (id=1027): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000100)="3c0000003b00050001000000000000000a01000025000100534d432d425046544553542d554549442020202020202020202020202020202000000000", 0x3c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10) listen(r1, 0xa) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10) sendto(r2, 0x0, 0x0, 0x8081, 0x0, 0x0) kernel console output (not intermixed with test programs): attribute type 5 has an invalid length. [ 204.669717][ T968] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 204.771565][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 204.771583][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 204.849206][ T5681] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 204.857097][ T5681] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 204.862522][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.862939][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.904475][ T5681] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 204.918871][ T5681] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 204.919067][ T5681] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 205.038698][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 205.130681][ T5740] usb 5-1: USB disconnect, device number 29 [ 205.208857][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 205.209608][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 205.212347][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 205.218339][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.218365][ T10] usb 4-1: Product: syz [ 205.218379][ T10] usb 4-1: Manufacturer: syz [ 205.218393][ T10] usb 4-1: SerialNumber: syz [ 205.245449][ T5681] usb 3-1: USB disconnect, device number 31 [ 205.322434][ T10] usb 4-1: config 0 descriptor?? [ 205.372926][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 205.372949][ T10] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 205.946885][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 206.181156][ T7938] netlink: 'syz.1.703': attribute type 1 has an invalid length. [ 206.188557][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.701'. [ 206.288912][ T5740] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 206.352169][ T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 206.352201][ T10] em28xx 4-1:0.0: board has no eeprom [ 206.439708][ T5740] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 206.443106][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.443122][ T5740] usb 5-1: Product: syz [ 206.443131][ T5740] usb 5-1: Manufacturer: syz [ 206.443138][ T5740] usb 5-1: SerialNumber: syz [ 206.452679][ T5740] ums_eneub6250 5-1:1.0: USB Mass Storage device detected [ 206.486750][ T5740] scsi host1: usb-storage 5-1:1.0 [ 206.628831][ T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 206.628862][ T10] em28xx 4-1:0.0: dvb set to bulk mode. [ 206.633151][ T943] em28xx 4-1:0.0: Binding DVB extension [ 206.687292][ T5621] Bluetooth: hci3: unknown advertising packet type: 0x09 [ 206.687324][ T5621] Bluetooth: hci3: Malformed LE Event: 0x02 [ 206.726095][ T7928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.726657][ T7928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.806275][ T5740] ums_eneub6250 5-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 206.974719][ T5740] usb 4-1: USB disconnect, device number 23 [ 206.975793][ T5740] em28xx 4-1:0.0: Disconnecting em28xx [ 207.032386][ T10] usb 5-1: USB disconnect, device number 30 [ 207.114068][ T943] em28xx 4-1:0.0: Registering input extension [ 207.115856][ T5740] em28xx 4-1:0.0: Closing input extension [ 207.166809][ T5740] em28xx: Freeing device [ 207.729664][ T363] net_ratelimit: 5 callbacks suppressed [ 207.729687][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 207.924075][ T7977] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 208.051302][ T7976] syz.2.715 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 208.051332][ T7976] CPU: 1 UID: 0 PID: 7976 Comm: syz.2.715 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.051348][ T7976] Tainted: [L]=SOFTLOCKUP [ 208.051352][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.051359][ T7976] Call Trace: [ 208.051364][ T7976] [ 208.051370][ T7976] dump_stack_lvl+0xe8/0x150 [ 208.051394][ T7976] dump_header+0xd3/0x4b0 [ 208.051411][ T7976] oom_kill_process+0x3ab/0x9e0 [ 208.051429][ T7976] out_of_memory+0x1064/0x1480 [ 208.051442][ T7976] ? try_charge_memcg+0xc32/0x15e0 [ 208.051463][ T7976] ? __pfx_out_of_memory+0x10/0x10 [ 208.051476][ T7976] ? do_raw_spin_unlock+0xf5/0x200 [ 208.051497][ T7976] try_charge_memcg+0xcdf/0x15e0 [ 208.051521][ T7976] ? __pfx_try_charge_memcg+0x10/0x10 [ 208.051534][ T7976] ? __lock_acquire+0x747/0x2de0 [ 208.051549][ T7976] ? percpu_ref_tryget+0x15/0x180 [ 208.051570][ T7976] ? __obj_cgroup_charge+0x36/0x2c0 [ 208.051584][ T7976] __obj_cgroup_charge+0x1fd/0x2c0 [ 208.051596][ T7976] ? __obj_cgroup_charge+0x36/0x2c0 [ 208.051610][ T7976] __memcg_slab_post_alloc_hook+0x766/0xd90 [ 208.051632][ T7976] __kvmalloc_node_noprof+0x5f1/0x820 [ 208.051646][ T7976] ? __kvmalloc_node_noprof+0x345/0x820 [ 208.051658][ T7976] ? alloc_fdtable+0x101/0x2c0 [ 208.051671][ T7976] ? alloc_fdtable+0x101/0x2c0 [ 208.051689][ T7976] alloc_fdtable+0x101/0x2c0 [ 208.051702][ T7976] ? dup_fd+0x7f5/0xaf0 [ 208.051717][ T7976] dup_fd+0x7fe/0xaf0 [ 208.051737][ T7976] unshare_files+0x8a/0x140 [ 208.051755][ T7976] vfs_coredump+0x34c6/0x4520 [ 208.051781][ T7976] ? __pfx_vfs_coredump+0x10/0x10 [ 208.051800][ T7976] ? __lock_acquire+0x747/0x2de0 [ 208.051815][ T7976] ? __lock_acquire+0x747/0x2de0 [ 208.051834][ T7976] ? lock_acquire+0x115/0x350 [ 208.051849][ T7976] ? lock_acquire+0x115/0x350 [ 208.051865][ T7976] ? is_bpf_text_address+0x26/0x2b0 [ 208.051889][ T7976] ? is_bpf_text_address+0x292/0x2b0 [ 208.051902][ T7976] ? is_bpf_text_address+0x26/0x2b0 [ 208.051918][ T7976] ? kernel_text_address+0xa5/0xe0 [ 208.051931][ T7976] ? __kernel_text_address+0xd/0x30 [ 208.051943][ T7976] ? unwind_get_return_address+0x4d/0x90 [ 208.051957][ T7976] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 208.051970][ T7976] ? arch_stack_walk+0xfb/0x150 [ 208.051989][ T7976] ? stack_trace_save+0xa9/0x100 [ 208.051999][ T7976] ? __pfx_stack_trace_save+0x10/0x10 [ 208.052011][ T7976] ? stack_depot_save_flags+0x33/0x7f0 [ 208.052024][ T7976] ? __lock_acquire+0x650/0x2de0 [ 208.052038][ T7976] ? kasan_save_track+0x4f/0x80 [ 208.052049][ T7976] ? kasan_save_track+0x3e/0x80 [ 208.052060][ T7976] ? kasan_save_free_info+0x40/0x50 [ 208.052075][ T7976] ? __kasan_slab_free+0x5c/0x80 [ 208.052087][ T7976] ? kmem_cache_free+0x182/0x650 [ 208.052098][ T7976] ? get_signal+0x9e7/0x12c0 [ 208.052111][ T7976] ? arch_do_signal_or_restart+0xbb/0x860 [ 208.052126][ T7976] ? exit_to_user_mode_loop+0x10e/0x770 [ 208.052138][ T7976] ? __do_fast_syscall_32+0x437/0x6a0 [ 208.052153][ T7976] ? do_fast_syscall_32+0x33/0x70 [ 208.052168][ T7976] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.052201][ T7976] ? proc_coredump_connector+0x187/0x4e0 [ 208.052220][ T7976] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.052235][ T7976] get_signal+0x1094/0x12c0 [ 208.052260][ T7976] arch_do_signal_or_restart+0xbb/0x860 [ 208.052277][ T7976] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 208.052298][ T7976] ? force_sig_info_to_task+0x38a/0x4b0 [ 208.052315][ T7976] exit_to_user_mode_loop+0x10e/0x770 [ 208.052326][ T7976] ? rcu_is_watching+0x16/0xb0 [ 208.052340][ T7976] ? do_fast_syscall_32+0x33/0x70 [ 208.052356][ T7976] __do_fast_syscall_32+0x437/0x6a0 [ 208.052373][ T7976] ? do_fast_syscall_32+0x33/0x70 [ 208.052390][ T7976] ? irqentry_exit+0x10f/0x910 [ 208.052404][ T7976] ? trace_irq_disable+0x3b/0x140 [ 208.052418][ T7976] do_fast_syscall_32+0x33/0x70 [ 208.052433][ T7976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.052446][ T7976] RIP: 0023:0xf7f980ec [ 208.052458][ T7976] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 208.052467][ T7976] RSP: 002b:00000000f54565cc EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 208.052480][ T7976] RAX: 00000000000000f0 RBX: 00000000f7454f8c RCX: 0000000000000081 [ 208.052487][ T7976] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 208.052494][ T7976] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 208.052500][ T7976] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 208.052507][ T7976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.052522][ T7976] [ 208.052527][ T7976] memory: usage 8kB, limit 8kB, failcnt 23 [ 208.052534][ T7976] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 208.052541][ T7976] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 208.052548][ T7976] Memory cgroup stats for /syz2/test: [ 208.056937][ T7976] cache 0 [ 208.056944][ T7976] rss 0 [ 208.056948][ T7976] rss_huge 0 [ 208.056952][ T7976] shmem 0 [ 208.056955][ T7976] mapped_file 0 [ 208.056959][ T7976] dirty 0 [ 208.056963][ T7976] writeback 0 [ 208.056966][ T7976] workingset_refault_anon 0 [ 208.056970][ T7976] workingset_refault_file 0 [ 208.056974][ T7976] swap 0 [ 208.056977][ T7976] swapcached 0 [ 208.056981][ T7976] pgpgin 0 [ 208.056984][ T7976] pgpgout 0 [ 208.056988][ T7976] pgfault 1 [ 208.056991][ T7976] pgmajfault 0 [ 208.056995][ T7976] inactive_anon 0 [ 208.056999][ T7976] active_anon 0 [ 208.057002][ T7976] inactive_file 0 [ 208.057006][ T7976] active_file 0 [ 208.057009][ T7976] unevictable 0 [ 208.057013][ T7976] hierarchical_memory_limit 8192 [ 208.057017][ T7976] hierarchical_memsw_limit 9223372036854771712 [ 208.057022][ T7976] total_cache 0 [ 208.057025][ T7976] total_rss 0 [ 208.057029][ T7976] total_rss_huge 0 [ 208.057032][ T7976] total_shmem 0 [ 208.057036][ T7976] total_mapped_file 0 [ 208.057040][ T7976] total_dirty 0 [ 208.057044][ T7976] total_writeback 0 [ 208.057048][ T7976] total_workingset_refault_anon 0 [ 208.057052][ T7976] total_workingset_refault_file 0 [ 208.057057][ T7976] total_swap 0 [ 208.057061][ T7976] total_swapcached 0 [ 208.057065][ T7976] total_pgpgin 0 [ 208.057069][ T7976] total_pgpgout 0 [ 208.057073][ T7976] total_pgfault 1 [ 208.057076][ T7976] total_pgmajfault 0 [ 208.057080][ T7976] total_inactive_anon 0 [ 208.057084][ T7976] total_active_anon 0 [ 208.057088][ T7976] total_inactive_file 0 [ 208.057092][ T7976] total_active_file 0 [ 208.057096][ T7976] total_unevictable 0 [ 208.057100][ T7976] anon_cost 0 [ 208.057103][ T7976] file_cost 0 [ 208.057108][ T7976] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.715,pid=7973,uid=0 [ 208.057366][ T7976] Memory cgroup out of memory: Killed process 7973 (syz.2.715) total-vm:104076kB, anon-rss:1304kB, file-rss:23108kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 208.154333][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 208.154350][ T31] audit: type=1326 audit(1790934141.175:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.1.714" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702f0ec code=0x0 [ 208.250835][ T7984] __nla_validate_parse: 5 callbacks suppressed [ 208.250852][ T7984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.717'. [ 208.250879][ T7984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.717'. [ 208.258713][ T5740] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 208.262080][ T7635] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 208.409802][ T5740] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.416033][ T5740] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.416068][ T5740] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 208.416092][ T5740] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 208.416117][ T5740] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 208.416139][ T5740] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 208.423636][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 208.423662][ T5740] usb 4-1: SerialNumber: syz [ 208.782258][ T7635] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 208.813632][ T5719] usb 4-1: USB disconnect, device number 24 [ 209.132911][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 209.132930][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 209.292219][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 209.348702][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 209.479377][ T10] usb 1-1: device descriptor read/64, error -71 [ 209.586070][ T5681] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 209.738831][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 209.769254][ T5681] usb 3-1: Using ep0 maxpacket: 16 [ 209.771378][ T5681] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 209.773378][ T5681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 209.775690][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.775715][ T5681] usb 3-1: Product: syz [ 209.775730][ T5681] usb 3-1: Manufacturer: syz [ 209.775745][ T5681] usb 3-1: SerialNumber: syz [ 209.799107][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 209.825932][ T5681] usb 3-1: config 0 descriptor?? [ 209.858092][ T5681] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 209.858127][ T5681] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 209.869186][ T10] usb 1-1: device descriptor read/64, error -71 [ 209.898752][ T5740] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 209.979020][ T10] usb usb1-port1: attempt power cycle [ 210.049462][ T5740] usb 4-1: Using ep0 maxpacket: 8 [ 210.058070][ T5740] usb 4-1: unable to get BOS descriptor or descriptor too short [ 210.058120][ T5740] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 210.072249][ T5740] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.072340][ T5740] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 210.072394][ T5740] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 210.072420][ T5740] usb 4-1: config 1 interface 1 has no altsetting 0 [ 210.079206][ T5740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.079231][ T5740] usb 4-1: Product: syz [ 210.079244][ T5740] usb 4-1: Manufacturer: ᣱ [ 210.079259][ T5740] usb 4-1: SerialNumber: syz [ 210.315927][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 210.333410][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 210.349484][ T10] usb 1-1: device descriptor read/8, error -71 [ 210.391210][ T5740] usb 4-1: 0:2 : does not exist [ 210.396854][ T5740] usb 4-1: cannot find UAC_HEADER [ 210.505267][ T5681] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 210.554716][ T5740] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 210.566300][ T5740] usb 4-1: USB disconnect, device number 25 [ 210.588793][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 210.610062][ T10] usb 1-1: device descriptor read/8, error -71 [ 210.719401][ T10] usb usb1-port1: unable to enumerate USB device [ 210.740245][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.781379][ T8016] netlink: 'syz.4.727': attribute type 5 has an invalid length. [ 210.826494][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 210.925410][ T5681] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 210.925442][ T5681] em28xx 3-1:0.0: board has no eeprom [ 211.115556][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.728'. [ 211.115580][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.728'. [ 211.216955][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.729'. [ 211.216993][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.729'. [ 211.220555][ T8023] tipc: Enabled bearer , priority 0 [ 211.228269][ T8023] syzkaller0: entered promiscuous mode [ 211.228289][ T8023] syzkaller0: entered allmulticast mode [ 211.236769][ T5681] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 211.236786][ T5681] em28xx 3-1:0.0: dvb set to bulk mode. [ 211.237385][ T10] em28xx 3-1:0.0: Binding DVB extension [ 211.293973][ T8023] tipc: Resetting bearer [ 211.340562][ T7635] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 211.420139][ T8023] tipc: Resetting bearer [ 211.477906][ T8023] tipc: Disabling bearer [ 211.523371][ T8027] batman_adv: batadv0: Adding interface: dummy0 [ 211.523392][ T8027] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.523427][ T8027] batman_adv: batadv0: Interface activated: dummy0 [ 211.612274][ T8027] batadv0: mtu less than device minimum [ 211.613487][ T8027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.630613][ T8028] netlink: 'syz.1.730': attribute type 10 has an invalid length. [ 211.630635][ T8028] netlink: 40 bytes leftover after parsing attributes in process `syz.1.730'. [ 211.664018][ T8028] batadv0: entered promiscuous mode [ 211.664040][ T8028] batadv0: entered allmulticast mode [ 211.664940][ T8028] bridge0: port 3(batadv0) entered blocking state [ 211.665189][ T8028] bridge0: port 3(batadv0) entered disabled state [ 211.668520][ T8028] bridge0: port 3(batadv0) entered blocking state [ 211.668689][ T8028] bridge0: port 3(batadv0) entered forwarding state [ 211.722600][ T30] usb 3-1: USB disconnect, device number 32 [ 211.725841][ T30] em28xx 3-1:0.0: Disconnecting em28xx [ 211.797600][ T10] em28xx 3-1:0.0: Registering input extension [ 211.797766][ T30] em28xx 3-1:0.0: Closing input extension [ 211.849485][ T69] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 211.849498][ T69] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 211.965101][ T30] em28xx: Freeing device [ 212.358703][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 212.520080][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 212.521223][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 212.546035][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 212.546089][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.546112][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.546136][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.546159][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.546200][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.871694][ T7635] net_ratelimit: 21 callbacks suppressed [ 212.871709][ T7635] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 212.982706][ T7635] IPVS: starting estimator thread 0... [ 213.000335][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 213.000383][ T10] usbtmc 2-1:16.0: can't read capabilities [ 213.068734][ T8055] IPVS: using max 31 ests per chain, 74400 per kthread [ 213.261488][ T8044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.734'. [ 213.261548][ T8044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.734'. [ 213.316533][ T5711] usb 2-1: USB disconnect, device number 34 [ 213.382896][ T7635] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 213.428948][ T5681] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 213.569146][ T5681] usb 3-1: device descriptor read/64, error -71 [ 213.819573][ T5681] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 213.889477][ T7635] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 213.949150][ T5681] usb 3-1: device descriptor read/64, error -71 [ 214.002620][ T7957] syz.2.707 (7957) used greatest stack depth: 18472 bytes left [ 214.059109][ T5681] usb usb3-port1: attempt power cycle [ 214.146824][ T8063] FAULT_INJECTION: forcing a failure. [ 214.146824][ T8063] name failslab, interval 1, probability 0, space 0, times 0 [ 214.146862][ T8063] CPU: 1 UID: 0 PID: 8063 Comm: syz.4.740 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.146889][ T8063] Tainted: [L]=SOFTLOCKUP [ 214.146896][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.146908][ T8063] Call Trace: [ 214.146915][ T8063] [ 214.146923][ T8063] dump_stack_lvl+0xe8/0x150 [ 214.146957][ T8063] should_fail_ex+0x410/0x560 [ 214.146988][ T8063] should_failslab+0xa8/0x100 [ 214.147011][ T8063] ? skb_clone+0x212/0x3a0 [ 214.147040][ T8063] kmem_cache_alloc_noprof+0xa1/0x600 [ 214.147061][ T8063] ? skb_clone+0x212/0x3a0 [ 214.147093][ T8063] skb_clone+0x212/0x3a0 [ 214.147125][ T8063] __netlink_deliver_tap+0x413/0x860 [ 214.147156][ T8063] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.147178][ T8063] netlink_deliver_tap+0x19c/0x1b0 [ 214.147199][ T8063] netlink_dump+0x95b/0xee0 [ 214.147230][ T8063] ? __pfx_netlink_dump+0x10/0x10 [ 214.147261][ T8063] ? netlink_recvmsg+0x5bf/0xa50 [ 214.147280][ T8063] ? kmem_cache_free+0x182/0x650 [ 214.147307][ T8063] netlink_recvmsg+0x683/0xa50 [ 214.147337][ T8063] ? __pfx_netlink_recvmsg+0x10/0x10 [ 214.147361][ T8063] ? aa_sock_msg_perm+0x144/0x210 [ 214.147395][ T8063] ? __pfx_netlink_recvmsg+0x10/0x10 [ 214.147416][ T8063] sock_recvmsg_nosec+0x130/0x170 [ 214.147442][ T8063] ____sys_recvmsg+0x3e3/0x4a0 [ 214.147476][ T8063] ? __pfx_____sys_recvmsg+0x10/0x10 [ 214.147522][ T8063] ? kfree+0x4d/0x650 [ 214.147554][ T8063] ___sys_recvmsg+0x213/0x5a0 [ 214.147584][ T8063] ? __pfx____sys_recvmsg+0x10/0x10 [ 214.147613][ T8063] ? lock_acquire+0x115/0x350 [ 214.147661][ T8063] do_recvmmsg+0x38b/0x7f0 [ 214.147699][ T8063] ? __pfx_do_recvmmsg+0x10/0x10 [ 214.147738][ T8063] ? __mutex_unlock_slowpath+0x731/0x900 [ 214.147778][ T8063] __sys_recvmmsg+0x1a5/0x290 [ 214.147809][ T8063] ? __pfx___sys_recvmmsg+0x10/0x10 [ 214.147840][ T8063] ? ksys_write+0x242/0x270 [ 214.147866][ T8063] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 214.147893][ T8063] __do_fast_syscall_32+0x27a/0x6a0 [ 214.147923][ T8063] ? do_fast_syscall_32+0x33/0x70 [ 214.147950][ T8063] ? asm_int80_emulation+0x1a/0x20 [ 214.147969][ T8063] ? do_int80_emulation+0x299/0x500 [ 214.147996][ T8063] ? trace_irq_disable+0x3b/0x140 [ 214.148020][ T8063] do_fast_syscall_32+0x33/0x70 [ 214.148050][ T8063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.148073][ T8063] RIP: 0023:0xf7f830ec [ 214.148092][ T8063] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 214.148109][ T8063] RSP: 002b:00000000f542550c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 214.148131][ T8063] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002380 [ 214.148145][ T8063] RDX: 0000000000000008 RSI: 0000000000034000 RDI: 0000000000000000 [ 214.148157][ T8063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.148167][ T8063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 214.148178][ T8063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.148202][ T8063] [ 214.400027][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 214.430546][ T5681] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 214.505214][ T5681] usb 3-1: device descriptor read/8, error -71 [ 214.663915][ T8074] netlink: 3 bytes leftover after parsing attributes in process `syz.1.752'. [ 214.664198][ T8074] unsupported nlmsg_type 40 [ 214.692690][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 214.738702][ T5681] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 214.759628][ T5681] usb 3-1: device descriptor read/8, error -71 [ 214.869009][ T5681] usb usb3-port1: unable to enumerate USB device [ 214.908916][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 214.999489][ T8086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.748'. [ 214.999526][ T8086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.748'. [ 215.218788][ T5681] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 215.368673][ T5681] usb 4-1: Using ep0 maxpacket: 16 [ 215.369726][ T5681] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 215.371436][ T5681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 215.374582][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.374607][ T5681] usb 4-1: Product: syz [ 215.374828][ T5681] usb 4-1: Manufacturer: syz [ 215.374845][ T5681] usb 4-1: SerialNumber: syz [ 215.423229][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 215.446390][ T5681] usb 4-1: config 0 descriptor?? [ 215.460156][ T5681] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 215.460191][ T5681] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 215.851508][ T31] audit: type=1326 audit(1790934148.875:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.1.754" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 215.851588][ T31] audit: type=1326 audit(1790934148.875:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.1.754" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 215.854340][ T31] audit: type=1326 audit(1790934148.875:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.1.754" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 215.854418][ T31] audit: type=1326 audit(1790934148.875:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.1.754" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 215.854500][ T31] audit: type=1326 audit(1790934148.875:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.1.754" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 215.942353][ T7643] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 215.949213][ T31] audit: type=1326 audit(1790934148.875:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.1.754" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 215.949264][ T31] audit: type=1326 audit(1790934148.875:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.1.754" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 215.949356][ T31] audit: type=1326 audit(1790934148.885:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.1.754" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 215.949393][ T31] audit: type=1326 audit(1790934148.885:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.1.754" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 215.949430][ T31] audit: type=1326 audit(1790934148.875:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.1.754" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 215.982861][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 216.077161][ T5681] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 216.152938][ T8103] FAULT_INJECTION: forcing a failure. [ 216.152938][ T8103] name failslab, interval 1, probability 0, space 0, times 0 [ 216.152972][ T8103] CPU: 0 UID: 0 PID: 8103 Comm: syz.0.756 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.153001][ T8103] Tainted: [L]=SOFTLOCKUP [ 216.153008][ T8103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.153020][ T8103] Call Trace: [ 216.153029][ T8103] [ 216.153037][ T8103] dump_stack_lvl+0xe8/0x150 [ 216.153070][ T8103] should_fail_ex+0x410/0x560 [ 216.153101][ T8103] should_failslab+0xa8/0x100 [ 216.153128][ T8103] ? security_inode_alloc+0x39/0x310 [ 216.153156][ T8103] kmem_cache_alloc_noprof+0xa1/0x600 [ 216.153179][ T8103] ? security_inode_alloc+0x39/0x310 [ 216.153213][ T8103] security_inode_alloc+0x39/0x310 [ 216.153244][ T8103] inode_init_always_gfp+0x97e/0xd30 [ 216.153275][ T8103] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 216.153296][ T8103] alloc_inode+0x82/0x1b0 [ 216.153324][ T8103] new_inode+0x1f/0x170 [ 216.153356][ T8103] __debugfs_create_file+0xb8/0x400 [ 216.153380][ T8103] debugfs_create_file_full+0x3f/0x60 [ 216.153405][ T8103] ref_tracker_dir_debugfs+0x197/0x360 [ 216.153431][ T8103] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 216.153485][ T8103] ? __kvmalloc_node_noprof+0x52f/0x820 [ 216.153510][ T8103] ? __kvmalloc_node_noprof+0x345/0x820 [ 216.153537][ T8103] ? __raw_spin_lock_init+0x45/0x100 [ 216.153569][ T8103] alloc_netdev_mqs+0x275/0x12a0 [ 216.153590][ T8103] ? __pfx_snprintf+0x10/0x10 [ 216.153611][ T8103] ? __pfx_bond_setup+0x10/0x10 [ 216.153637][ T8103] rtnl_create_link+0x321/0xd70 [ 216.153667][ T8103] rtnl_newlink_create+0x258/0x7b0 [ 216.153703][ T8103] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 216.153736][ T8103] ? __pfx___mutex_lock+0x10/0x10 [ 216.153782][ T8103] ? ns_capable+0x89/0xe0 [ 216.153813][ T8103] rtnl_newlink+0x166d/0x1c30 [ 216.153855][ T8103] ? __pfx_rtnl_newlink+0x10/0x10 [ 216.153879][ T8103] ? __do_fast_syscall_32+0x27a/0x6a0 [ 216.153907][ T8103] ? do_fast_syscall_32+0x33/0x70 [ 216.153934][ T8103] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.153997][ T8103] ? kasan_quarantine_put+0xbb/0x1f0 [ 216.154018][ T8103] ? lockdep_hardirqs_on+0x7b/0x110 [ 216.154049][ T8103] ? nlmon_xmit+0xb0/0x100 [ 216.154072][ T8103] ? kmem_cache_free+0x182/0x650 [ 216.154106][ T8103] ? __lock_acquire+0x747/0x2de0 [ 216.154137][ T8103] ? __local_bh_enable_ip+0xd6/0x140 [ 216.154164][ T8103] ? lockdep_hardirqs_on+0x7b/0x110 [ 216.154210][ T8103] ? __dev_queue_xmit+0x29b/0x3920 [ 216.154229][ T8103] ? __local_bh_enable_ip+0xd6/0x140 [ 216.154262][ T8103] ? lock_acquire+0x115/0x350 [ 216.154300][ T8103] ? __pfx_rtnl_newlink+0x10/0x10 [ 216.154325][ T8103] rtnetlink_rcv_msg+0x802/0xc00 [ 216.154356][ T8103] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 216.154382][ T8103] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 216.154407][ T8103] ? ref_tracker_free+0x689/0x830 [ 216.154436][ T8103] ? __pfx_ref_tracker_free+0x10/0x10 [ 216.154462][ T8103] ? __asan_memcpy+0x40/0x70 [ 216.154481][ T8103] ? __skb_clone+0x5c/0x6c0 [ 216.154517][ T8103] netlink_rcv_skb+0x226/0x4a0 [ 216.154539][ T8103] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 216.154568][ T8103] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 216.154602][ T8103] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.154622][ T8103] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.154649][ T8103] netlink_unicast+0x7bd/0x940 [ 216.154691][ T8103] netlink_sendmsg+0x813/0xb40 [ 216.154722][ T8103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.154753][ T8103] ? apparmor_socket_sendmsg+0x98/0x360 [ 216.154785][ T8103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.154804][ T8103] sock_sendmsg_nosec+0x13a/0x180 [ 216.154830][ T8103] ____sys_sendmsg+0x54e/0x850 [ 216.154865][ T8103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.154910][ T8103] ___sys_sendmsg+0x2a5/0x360 [ 216.154937][ T8103] ? __lock_acquire+0x747/0x2de0 [ 216.154964][ T8103] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.154991][ T8103] ? get_pid_task+0x20/0x1f0 [ 216.155011][ T8103] ? get_pid_task+0x20/0x1f0 [ 216.155028][ T8103] ? get_pid_task+0x20/0x1f0 [ 216.155080][ T8103] ? __fget_files+0x2a/0x420 [ 216.155107][ T8103] ? __fget_files+0x3a2/0x420 [ 216.155147][ T8103] __sys_sendmsg+0x177/0x240 [ 216.155178][ T8103] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.155228][ T8103] __do_fast_syscall_32+0x27a/0x6a0 [ 216.155258][ T8103] ? do_fast_syscall_32+0x33/0x70 [ 216.155293][ T8103] ? asm_int80_emulation+0x1a/0x20 [ 216.155312][ T8103] ? do_int80_emulation+0x299/0x500 [ 216.155339][ T8103] ? trace_irq_disable+0x3b/0x140 [ 216.155366][ T8103] do_fast_syscall_32+0x33/0x70 [ 216.155395][ T8103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.155418][ T8103] RIP: 0023:0xf7fa40ec [ 216.155436][ T8103] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 216.155453][ T8103] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 216.155475][ T8103] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 216.155488][ T8103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.155501][ T8103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 216.155513][ T8103] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 216.155525][ T8103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.155557][ T8103] [ 216.156821][ T8103] debugfs: out of free dentries, can not create file 'netdev@ffff888047260700' [ 216.189856][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 216.264804][ T8103] bond2: entered allmulticast mode [ 216.338755][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 216.339477][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 216.340619][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 216.340643][ T10] usb 3-1: config 0 has no interface number 0 [ 216.343484][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.343507][ T10] usb 3-1: Product: syz [ 216.343522][ T10] usb 3-1: Manufacturer: syz [ 216.343535][ T10] usb 3-1: SerialNumber: syz [ 216.352312][ T10] usb 3-1: config 0 descriptor?? [ 216.459437][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 216.487470][ T5681] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 216.487526][ T5681] em28xx 4-1:0.0: board has no eeprom [ 216.643017][ T8100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.755'. [ 216.643043][ T8100] netlink: 13 bytes leftover after parsing attributes in process `syz.2.755'. [ 216.797854][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 216.798172][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 216.836773][ T10] usb 3-1: USB disconnect, device number 37 [ 216.886470][ T5681] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 216.886501][ T5681] em28xx 4-1:0.0: dvb set to bulk mode. [ 216.898961][ T5681] em28xx 4-1:0.0: Binding DVB extension [ 216.961580][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 217.192573][ T8119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.760'. [ 217.192636][ T8119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.760'. [ 217.512255][ T8130] ip6gre1: entered promiscuous mode [ 217.512277][ T8130] ip6gre1: entered allmulticast mode [ 217.688699][ T5740] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 217.838664][ T5740] usb 1-1: Using ep0 maxpacket: 32 [ 217.839374][ T5740] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 217.840481][ T5740] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 217.846592][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.846618][ T5740] usb 1-1: Product: syz [ 217.846632][ T5740] usb 1-1: Manufacturer: syz [ 217.846646][ T5740] usb 1-1: SerialNumber: syz [ 217.910554][ T5740] usb 1-1: config 0 descriptor?? [ 217.926204][ T5740] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 217.926262][ T5740] dvb-usb: bulk message failed: -22 (2/0) [ 217.946614][ T5740] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.947373][ T5740] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 217.947423][ T5740] usb 1-1: media controller created [ 217.981138][ T1158] net_ratelimit: 1 callbacks suppressed [ 217.981157][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 217.987498][ T5740] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.033987][ T5740] usb 1-1: selecting invalid altsetting 7 [ 218.034009][ T5740] cxusb: set interface failed [ 218.034020][ T5740] dvb-usb: bulk message failed: -22 (1/0) [ 218.061519][ T8083] em28xx 4-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 218.063549][ T30] usb 4-1: USB disconnect, device number 26 [ 218.066639][ T30] em28xx 4-1:0.0: Disconnecting em28xx [ 218.125068][ T5740] DVB: Unable to find symbol lgdt330x_attach() [ 218.125085][ T5740] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 218.294693][ T8147] __nla_validate_parse: 1 callbacks suppressed [ 218.294717][ T8147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.771'. [ 218.294745][ T8147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.771'. [ 218.330924][ T5681] em28xx 4-1:0.0: Registering input extension [ 218.332417][ T30] em28xx 4-1:0.0: Closing input extension [ 218.428785][ T5740] rc_core: IR keymap rc-dvico-portable not found [ 218.428804][ T5740] Registered IR keymap rc-empty [ 218.430159][ T5740] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 218.433796][ T5740] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input20 [ 218.474147][ T5740] dvb-usb: schedule remote query interval to 100 msecs. [ 218.474164][ T5740] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 218.505359][ T7643] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 218.582174][ T5740] dvb-usb: bulk message failed: -22 (1/0) [ 218.623920][ T30] em28xx: Freeing device [ 218.637526][ T5681] usb 1-1: USB disconnect, device number 42 [ 218.824629][ T5681] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 219.010576][ T7635] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 219.520076][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 219.638729][ T5740] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 219.788877][ T5740] usb 5-1: Using ep0 maxpacket: 8 [ 219.790013][ T5740] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.792573][ T5740] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 219.792603][ T5740] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.792616][ T5740] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.792628][ T5740] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.792641][ T5740] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.792664][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.969663][ T5673] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 219.998435][ T8180] FAULT_INJECTION: forcing a failure. [ 219.998435][ T8180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.998470][ T8180] CPU: 1 UID: 0 PID: 8180 Comm: syz.3.781 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.998499][ T8180] Tainted: [L]=SOFTLOCKUP [ 219.998507][ T8180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.998517][ T8180] Call Trace: [ 219.998525][ T8180] [ 219.998533][ T8180] dump_stack_lvl+0xe8/0x150 [ 219.998565][ T8180] should_fail_ex+0x410/0x560 [ 219.998591][ T8180] _copy_to_user+0x31/0xb0 [ 219.998618][ T8180] simple_read_from_buffer+0xe1/0x170 [ 219.998647][ T8180] proc_fail_nth_read+0x1bb/0x230 [ 219.998665][ T8180] ? common_file_perm+0x20e/0x2b0 [ 219.998692][ T8180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.998714][ T8180] ? rw_verify_area+0x24a/0x4c0 [ 219.998744][ T8180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.998763][ T8180] vfs_read+0x213/0xa80 [ 219.998797][ T8180] ? __pfx___mutex_lock+0x10/0x10 [ 219.998825][ T8180] ? __pfx_vfs_read+0x10/0x10 [ 219.998853][ T8180] ? __fget_files+0x2a/0x420 [ 219.998882][ T8180] ? __fget_files+0x3a2/0x420 [ 219.998907][ T8180] ? __fget_files+0x2a/0x420 [ 219.998940][ T8180] ksys_read+0x150/0x270 [ 219.998961][ T8180] ? __pfx_ksys_read+0x10/0x10 [ 219.998983][ T8180] ? asm_int80_emulation+0x1a/0x20 [ 219.999007][ T8180] do_int80_emulation+0x198/0x500 [ 219.999041][ T8180] ? trace_irq_disable+0x3b/0x140 [ 219.999059][ T8180] ? asm_int80_emulation+0x1a/0x20 [ 219.999075][ T8180] ? clear_bhb_loop+0x70/0xc0 [ 219.999091][ T8180] ? clear_bhb_loop+0x70/0xc0 [ 219.999115][ T8180] asm_int80_emulation+0x1a/0x20 [ 219.999133][ T8180] RIP: 0023:0xf71d75ab [ 219.999150][ T8180] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 219.999166][ T8180] RSP: 002b:00000000f54964bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 219.999187][ T8180] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54965d0 [ 219.999199][ T8180] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 219.999208][ T8180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.999218][ T8180] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 219.999228][ T8180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.999250][ T8180] [ 220.038870][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 220.118779][ T5673] usb 2-1: Using ep0 maxpacket: 32 [ 220.120913][ T5673] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 220.122794][ T5673] usb 2-1: config 8 has an invalid interface number: 111 but max is 0 [ 220.122819][ T5673] usb 2-1: config 8 has no interface number 0 [ 220.122857][ T5673] usb 2-1: config 8 interface 111 altsetting 0 endpoint 0xB has invalid maxpacket 2007, setting to 1024 [ 220.122882][ T5673] usb 2-1: config 8 interface 111 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 220.129071][ T5673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.129097][ T5673] usb 2-1: Product: syz [ 220.129111][ T5673] usb 2-1: Manufacturer: syz [ 220.129129][ T5673] usb 2-1: SerialNumber: syz [ 220.244597][ T8173] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 220.356841][ T8181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.782'. [ 220.356883][ T8181] netlink: 36 bytes leftover after parsing attributes in process `syz.2.782'. [ 220.549476][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 220.580983][ T8173] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 220.641748][ T5673] aircable 2-1:8.111: aircable converter detected [ 220.679663][ T5673] usb 2-1: aircable converter now attached to ttyUSB0 [ 220.714901][ T5673] usb 2-1: USB disconnect, device number 35 [ 220.765472][ T5673] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 220.768396][ T5673] aircable 2-1:8.111: device disconnected [ 220.828728][ T8193] capability: warning: `syz.0.786' uses 32-bit capabilities (legacy support in use) [ 220.889239][ T5681] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 221.039838][ T5681] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 221.039867][ T5681] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 221.041663][ T5681] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.041699][ T5681] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.041714][ T5681] usb 3-1: config 0 interface 0 has no altsetting 0 [ 221.047859][ T5681] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.047911][ T5681] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.047936][ T5681] usb 3-1: config 0 interface 0 has no altsetting 0 [ 221.051492][ T5681] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.051540][ T5681] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.051565][ T5681] usb 3-1: config 0 interface 0 has no altsetting 0 [ 221.052489][ T5681] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.052533][ T5681] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.052558][ T5681] usb 3-1: config 0 interface 0 has no altsetting 0 [ 221.053446][ T5681] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.053489][ T5681] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.053515][ T5681] usb 3-1: config 0 interface 0 has no altsetting 0 [ 221.058932][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 221.061463][ T5681] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.061511][ T5681] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.061537][ T5681] usb 3-1: config 0 interface 0 has no altsetting 0 [ 221.088388][ T5681] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.088445][ T5681] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.088471][ T5681] usb 3-1: config 0 interface 0 has no altsetting 0 [ 221.100104][ T5681] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.100154][ T5681] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.100179][ T5681] usb 3-1: config 0 interface 0 has no altsetting 0 [ 221.116283][ T5681] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 221.116310][ T5681] usb 3-1: Product: syz [ 221.116325][ T5681] usb 3-1: Manufacturer: syz [ 221.116339][ T5681] usb 3-1: SerialNumber: syz [ 221.193097][ T5681] usb 3-1: config 0 descriptor?? [ 221.232020][ T5711] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 221.368315][ T5681] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 221.399112][ T5711] usb 1-1: device descriptor read/64, error -71 [ 221.573799][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 221.649406][ T5711] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 221.778716][ T5711] usb 1-1: device descriptor read/64, error -71 [ 221.889055][ T5711] usb usb1-port1: attempt power cycle [ 221.954070][ T8205] netlink: 56 bytes leftover after parsing attributes in process `syz.3.790'. [ 222.079169][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 222.250078][ T5711] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 222.280035][ T5711] usb 1-1: device descriptor read/8, error -71 [ 222.433380][ T5740] usb 5-1: usb_control_msg returned -71 [ 222.433428][ T5740] usbtmc 5-1:16.0: can't read capabilities [ 222.463448][ T5740] usb 5-1: USB disconnect, device number 31 [ 222.519209][ T5711] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 222.539377][ T5711] usb 1-1: device descriptor read/8, error -71 [ 222.649218][ T5711] usb usb1-port1: unable to enumerate USB device [ 222.772707][ T8221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.794'. [ 222.772745][ T8221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.794'. [ 222.855447][ T8217] netlink: 14 bytes leftover after parsing attributes in process `syz.1.792'. [ 222.855575][ T8217] batman_adv: batadv0: Interface deactivated: dummy0 [ 222.900237][ T8217] batman_adv: batadv0: Removing interface: dummy0 [ 223.101330][ T69] net_ratelimit: 1 callbacks suppressed [ 223.101352][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 223.222671][ T5673] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 223.374936][ T5673] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 223.376346][ T5673] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.376392][ T5673] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 223.376417][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 223.376429][ T5673] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 223.378474][ T5673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 223.378498][ T5673] usb 4-1: Product: syz [ 223.378508][ T5673] usb 4-1: Manufacturer: syz [ 223.378516][ T5673] usb 4-1: SerialNumber: syz [ 223.463883][ T5673] usb 4-1: config 0 descriptor?? [ 223.484586][ T5673] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 223.484664][ T5673] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 223.485098][ T5673] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 223.575368][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 223.598688][ T5711] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 223.609247][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 223.707796][ T5673] usb 4-1: USB disconnect, device number 27 [ 223.719788][ T8239] netlink: 144 bytes leftover after parsing attributes in process `syz.4.801'. [ 223.759646][ T5711] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 223.779983][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.796486][ T5681] usb 3-1: USB disconnect, device number 38 [ 223.818785][ T5711] usb 2-1: config 0 descriptor?? [ 223.841087][ T5681] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 224.028708][ T5711] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 224.120235][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 224.257028][ T5711] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 224.257055][ T5711] [drm] Initialized udl on minor 1 [ 224.298809][ T5681] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 224.352394][ T8249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.805'. [ 224.352454][ T8249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.805'. [ 224.469462][ T8251] netlink: 'syz.3.806': attribute type 1 has an invalid length. [ 224.493911][ T8236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.496193][ T8236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.532809][ T8251] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.628943][ T7643] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 224.650606][ T8254] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 225.134223][ T8277] FAULT_INJECTION: forcing a failure. [ 225.134223][ T8277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.134258][ T8277] CPU: 1 UID: 0 PID: 8277 Comm: syz.4.813 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.134287][ T8277] Tainted: [L]=SOFTLOCKUP [ 225.134294][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.134307][ T8277] Call Trace: [ 225.134314][ T8277] [ 225.134322][ T8277] dump_stack_lvl+0xe8/0x150 [ 225.134355][ T8277] should_fail_ex+0x410/0x560 [ 225.134385][ T8277] _copy_from_user+0x2d/0xb0 [ 225.134413][ T8277] kvm_vm_ioctl+0x8b6/0xd30 [ 225.134446][ T8277] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 225.134472][ T8277] ? kasan_save_free_info+0x40/0x50 [ 225.134501][ T8277] ? __kasan_slab_free+0x5c/0x80 [ 225.134522][ T8277] ? kfree+0x1c5/0x650 [ 225.134550][ T8277] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 225.134572][ T8277] ? security_file_ioctl_compat+0xc3/0x2a0 [ 225.134594][ T8277] ? __ia32_compat_sys_ioctl+0x139/0x950 [ 225.134615][ T8277] ? __do_fast_syscall_32+0x27a/0x6a0 [ 225.134644][ T8277] ? do_fast_syscall_32+0x33/0x70 [ 225.134669][ T8277] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.134701][ T8277] ? kvm_arch_vm_compat_ioctl+0x2b7/0x2f0 [ 225.134730][ T8277] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 225.134779][ T8277] ? kasan_quarantine_put+0xbb/0x1f0 [ 225.134810][ T8277] ? tomoyo_path_number_perm+0x219/0x5f0 [ 225.134835][ T8277] ? tomoyo_path_number_perm+0x219/0x5f0 [ 225.134861][ T8277] ? do_vfs_ioctl+0x116f/0x1530 [ 225.134886][ T8277] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 225.134920][ T8277] ? hook_file_ioctl_compat+0x1f2/0x600 [ 225.134957][ T8277] kvm_vm_compat_ioctl+0x2b1/0x3a0 [ 225.134991][ T8277] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 225.135022][ T8277] ? __fget_files+0x3a2/0x420 [ 225.135045][ T8277] ? __fget_files+0x2a/0x420 [ 225.135074][ T8277] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 225.135107][ T8277] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 225.135133][ T8277] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 225.135164][ T8277] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 225.135194][ T8277] ? __fget_files+0x3a2/0x420 [ 225.135227][ T8277] ? fput+0xa0/0xd0 [ 225.135252][ T8277] ? ksys_write+0x242/0x270 [ 225.135282][ T8277] __do_fast_syscall_32+0x27a/0x6a0 [ 225.135312][ T8277] ? do_fast_syscall_32+0x33/0x70 [ 225.135340][ T8277] ? asm_int80_emulation+0x1a/0x20 [ 225.135358][ T8277] ? do_int80_emulation+0x299/0x500 [ 225.135391][ T8277] do_fast_syscall_32+0x33/0x70 [ 225.135419][ T8277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.135443][ T8277] RIP: 0023:0xf7f830ec [ 225.135460][ T8277] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 225.135477][ T8277] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 225.135499][ T8277] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020aea5 [ 225.135513][ T8277] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.135525][ T8277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.135538][ T8277] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 225.135550][ T8277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.135578][ T8277] [ 225.141977][ T7643] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 225.202468][ T8279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.814'. [ 225.204232][ T8279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.633727][ T363] nvmet: connect request for invalid subsystem testsubsys! [ 225.636407][ T8279] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 225.654697][ T968] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 225.698174][ T8285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.816'. [ 225.698242][ T8285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.816'. [ 226.159147][ T7643] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 226.378733][ T5740] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 226.468863][ T5673] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 226.528694][ T5740] usb 3-1: device descriptor read/64, error -71 [ 226.618696][ T5673] usb 1-1: Using ep0 maxpacket: 16 [ 226.619394][ T5673] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 226.622327][ T5673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 226.626810][ T5673] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.626825][ T5673] usb 1-1: Product: syz [ 226.626832][ T5673] usb 1-1: Manufacturer: syz [ 226.626840][ T5673] usb 1-1: SerialNumber: syz [ 226.630512][ T5673] usb 1-1: config 0 descriptor?? [ 226.637115][ T5673] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 226.637147][ T5673] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 226.669171][ T968] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 226.838852][ T5740] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 226.968693][ T5740] usb 3-1: device descriptor read/64, error -71 [ 227.079035][ T5740] usb usb3-port1: attempt power cycle [ 227.178795][ T10] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 227.178849][ T7637] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 227.243064][ T5673] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 227.330302][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 227.330326][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 227.334706][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.334734][ T10] usb 4-1: Product: syz [ 227.334774][ T10] usb 4-1: Manufacturer: syz [ 227.334794][ T10] usb 4-1: SerialNumber: syz [ 227.348299][ T10] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 227.390433][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 227.407706][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 227.419836][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 227.438320][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 227.448812][ T5740] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 227.469408][ T5740] usb 3-1: device descriptor read/8, error -71 [ 227.656638][ C0] usb 4-1: malformed indat packet [ 227.656892][ C0] usb 4-1: malformed indat packet [ 227.657200][ C0] usb 4-1: malformed indat packet [ 227.657463][ C0] usb 4-1: malformed indat packet [ 227.657739][ C0] usb 4-1: malformed indat packet [ 227.658020][ C0] usb 4-1: malformed indat packet [ 227.658323][ C0] usb 4-1: malformed indat packet [ 227.671054][ T5673] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 227.671087][ T5673] em28xx 1-1:0.0: board has no eeprom [ 227.711270][ T5740] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 227.739282][ T5740] usb 3-1: device descriptor read/8, error -71 [ 227.849692][ T5740] usb usb3-port1: unable to enumerate USB device [ 227.882212][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.885010][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.012528][ T5740] usb 4-1: USB disconnect, device number 28 [ 228.038688][ T5673] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 228.038718][ T5673] em28xx 1-1:0.0: dvb set to bulk mode. [ 228.039071][ T943] em28xx 1-1:0.0: Binding DVB extension [ 228.044443][ T5740] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 228.095137][ T5740] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 228.123042][ T5740] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 228.160205][ T5740] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 228.162515][ T5740] keyspan 4-1:1.0: device disconnected [ 228.198886][ T7637] net_ratelimit: 1 callbacks suppressed [ 228.198906][ T7637] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 228.642676][ T8321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.828'. [ 228.642713][ T8321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.828'. [ 228.720543][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 229.148799][ T5673] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 229.228927][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 229.262429][ T8303] em28xx 1-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 229.264607][ T10] usb 1-1: USB disconnect, device number 47 [ 229.266012][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 229.314145][ T5673] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.00 [ 229.318356][ T5673] usb 4-1: config index 0 descriptor too short (expected 74, got 72) [ 229.318380][ T5673] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.318408][ T5673] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 8 [ 229.348395][ T5711] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 229.378172][ T5711] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 229.395934][ T5673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.395952][ T5673] usb 4-1: Product: syz [ 229.395960][ T5673] usb 4-1: Manufacturer: syz [ 229.395967][ T5673] usb 4-1: SerialNumber: syz [ 229.429783][ T5740] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 229.430761][ T5740] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 229.430973][ T5740] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 229.519952][ T943] em28xx 1-1:0.0: Registering input extension [ 229.520308][ T10] em28xx 1-1:0.0: Closing input extension [ 229.563038][ T5673] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 229.579767][ T8333] fuse: Bad value for 'group_id' [ 229.579788][ T8333] fuse: Bad value for 'group_id' [ 229.644918][ T10] em28xx: Freeing device [ 229.739972][ T7643] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 229.744636][ T5711] usb 2-1: USB disconnect, device number 36 [ 229.854020][ T8335] netlink: 'syz.4.832': attribute type 1 has an invalid length. [ 230.105222][ T8335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.249536][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 230.310250][ T8338] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 230.623635][ T968] usb 4-1: Failed to submit usb control message: -110 [ 230.623673][ T968] usb 4-1: unable to send the bmi data to the device: -110 [ 230.623691][ T968] usb 4-1: unable to get target info from device [ 230.623722][ T968] usb 4-1: could not get target info (-110) [ 230.624011][ T968] usb 4-1: could not probe fw (-110) [ 230.758973][ T968] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 230.837478][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 230.837495][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 231.268927][ T968] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 231.393363][ T30] usb 4-1: USB disconnect, device number 29 [ 231.764552][ T8366] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 231.779057][ T7643] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 231.826094][ T8366] netlink: 'syz.1.839': attribute type 3 has an invalid length. [ 231.988211][ T8371] netlink: 'syz.0.840': attribute type 1 has an invalid length. [ 232.132203][ T8371] bond3: entered promiscuous mode [ 232.135775][ T8371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.301473][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 232.819659][ T12] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 233.181361][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.838'. [ 233.245362][ T8377] netlink: 'syz.3.841': attribute type 1 has an invalid length. [ 233.280684][ T8378] fuse: Bad value for 'group_id' [ 233.280706][ T8378] fuse: Bad value for 'group_id' [ 233.329838][ T8382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.843'. [ 233.329875][ T8382] netlink: 'syz.1.843': attribute type 5 has an invalid length. [ 233.329887][ T8382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.843'. [ 233.330064][ T8377] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.332501][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 233.417621][ T8380] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 233.611016][ T30] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 233.768696][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 233.771181][ T30] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 233.795424][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 233.816508][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.816535][ T30] usb 1-1: Product: syz [ 233.816549][ T30] usb 1-1: Manufacturer: syz [ 233.816564][ T30] usb 1-1: SerialNumber: syz [ 233.840689][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 233.865252][ T30] usb 1-1: config 0 descriptor?? [ 233.885270][ T30] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 233.885306][ T30] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 234.353750][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 234.469892][ T8407] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 234.470738][ T8407] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 234.474907][ T8407] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 234.475584][ T8407] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 234.507494][ T30] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 234.560096][ T8405] netlink: 'syz.2.852': attribute type 2 has an invalid length. [ 234.665795][ T8405] : entered promiscuous mode [ 234.814325][ T8420] fuse: Bad value for 'group_id' [ 234.814345][ T8420] fuse: Bad value for 'group_id' [ 234.862399][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 234.926217][ T30] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 234.926249][ T30] em28xx 1-1:0.0: board has no eeprom [ 235.169307][ T5740] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 235.239304][ T30] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 235.239333][ T30] em28xx 1-1:0.0: dvb set to bulk mode. [ 235.244936][ T5719] em28xx 1-1:0.0: Binding DVB extension [ 235.319489][ T5740] usb 5-1: Using ep0 maxpacket: 16 [ 235.321413][ T5740] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 235.324753][ T5740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 235.327493][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.327507][ T5740] usb 5-1: Product: syz [ 235.327515][ T5740] usb 5-1: Manufacturer: syz [ 235.327522][ T5740] usb 5-1: SerialNumber: syz [ 235.351667][ T5740] usb 5-1: config 0 descriptor?? [ 235.365560][ T5740] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 235.365608][ T5740] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 235.380555][ T12] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 235.388965][ T30] usb 1-1: USB disconnect, device number 48 [ 235.393669][ T30] em28xx 1-1:0.0: Disconnecting em28xx [ 235.426456][ T8438] netlink: 'syz.1.862': attribute type 1 has an invalid length. [ 235.495180][ T8438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.498416][ T5719] em28xx 1-1:0.0: Registering input extension [ 235.500441][ T30] em28xx 1-1:0.0: Closing input extension [ 235.547740][ T30] em28xx: Freeing device [ 235.620699][ T8442] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 235.883452][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 235.992508][ T5740] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 236.028073][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 236.105528][ T8452] netlink: 80 bytes leftover after parsing attributes in process `syz.0.863'. [ 236.115534][ T8452] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 236.406126][ T5740] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 236.406160][ T5740] em28xx 5-1:0.0: board has no eeprom [ 236.596436][ T8469] netlink: 'syz.0.869': attribute type 1 has an invalid length. [ 236.640488][ T8469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.691399][ T8469] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 236.758692][ T5740] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 236.758722][ T5740] em28xx 5-1:0.0: dvb set to bulk mode. [ 236.759903][ T30] em28xx 5-1:0.0: Binding DVB extension [ 237.057622][ T8480] netlink: 40 bytes leftover after parsing attributes in process `syz.1.870'. [ 237.124999][ T8482] fuse: Unknown parameter 'fd-0x0000000000000003' [ 237.144400][ T8482] sg_write: data in/out 568832/136 bytes for SCSI command 0x0-- guessing data in; [ 237.144400][ T8482] program syz.3.871 not setting count and/or reply_len properly [ 237.572102][ T8497] netlink: 'syz.3.876': attribute type 1 has an invalid length. [ 237.656343][ T8497] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.710974][ T8484] netlink: 'syz.1.870': attribute type 1 has an invalid length. [ 237.770666][ T8500] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 237.794144][ T8504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.875'. [ 237.902236][ T8484] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.971253][ T8426] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 237.973133][ T943] usb 5-1: USB disconnect, device number 32 [ 237.974077][ T943] em28xx 5-1:0.0: Disconnecting em28xx [ 238.073699][ T30] em28xx 5-1:0.0: Registering input extension [ 238.082177][ T943] em28xx 5-1:0.0: Closing input extension [ 238.175130][ T8488] bond3: (slave geneve2): making interface the new active one [ 238.193983][ T943] em28xx: Freeing device [ 238.225712][ T8488] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 238.274918][ T7643] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 238.279562][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 238.284413][ T7643] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 238.284454][ T7643] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 238.460653][ T12] net_ratelimit: 5 callbacks suppressed [ 238.460673][ T12] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 238.971915][ T12] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 238.988910][ T10] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 239.149625][ T10] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 239.152153][ T10] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.152185][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 239.152217][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.155451][ T10] usb 2-1: config 0 descriptor?? [ 239.201048][ T8525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.881'. [ 239.266177][ T31] kauditd_printk_skb: 94 callbacks suppressed [ 239.266195][ T31] audit: type=1804 audit(1790934172.285:719): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.880" name="file0" dev="ramfs" ino=23193 res=1 errno=0 [ 239.418119][ T8530] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.479925][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 239.541488][ T8539] netlink: 'syz.2.886': attribute type 1 has an invalid length. [ 239.571963][ T8539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.606261][ T10] waltop 0003:172F:0037.0003: unknown main item tag 0x2 [ 239.606298][ T10] waltop 0003:172F:0037.0003: unexpected long global item [ 239.607035][ T10] waltop 0003:172F:0037.0003: probe with driver waltop failed with error -22 [ 239.671233][ T8539] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 239.988837][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 240.500114][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 240.958520][ T8572] capability: warning: `syz.3.892' uses deprecated v2 capabilities in a way that may be insecure [ 241.009294][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 241.318695][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 241.343100][ T8584] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 241.356315][ T8584] netlink: 'syz.0.897': attribute type 3 has an invalid length. [ 241.455578][ T8591] tipc: Started in network mode [ 241.455600][ T8591] tipc: Node identity ac14142f, cluster identity 4711 [ 241.460107][ T8591] tipc: New replicast peer: 127.0.0.1 [ 241.463213][ T8591] tipc: Enabled bearer , priority 10 [ 241.465600][ T8591] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0003 [ 241.484218][ T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 241.487347][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 241.487376][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 241.500725][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.500751][ T10] usb 5-1: Product: syz [ 241.500765][ T10] usb 5-1: Manufacturer: syz [ 241.500779][ T10] usb 5-1: SerialNumber: syz [ 241.523805][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 241.683857][ T943] usb 2-1: USB disconnect, device number 37 [ 241.818824][ T5681] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 241.971382][ T5681] usb 3-1: Using ep0 maxpacket: 32 [ 241.973468][ T5681] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 241.975108][ T5681] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.975255][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 241.975274][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 241.975752][ T5681] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.975874][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.997494][ T5681] usb 3-1: config 0 descriptor?? [ 242.010679][ T5681] hub 3-1:0.0: bad descriptor, ignoring hub [ 242.010707][ T5681] hub 3-1:0.0: probe with driver hub failed with error -5 [ 242.016902][ T5681] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 242.030758][ T12] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 242.329215][ T943] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 242.348049][ T30] usb 3-1: USB disconnect, device number 44 [ 242.479278][ T943] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 242.481966][ T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.481982][ T943] usb 1-1: Product: syz [ 242.481990][ T943] usb 1-1: Manufacturer: syz [ 242.482003][ T943] usb 1-1: SerialNumber: syz [ 242.484316][ T943] usb 1-1: config 0 descriptor?? [ 242.487421][ T943] hub 1-1:0.0: bad descriptor, ignoring hub [ 242.487446][ T943] hub 1-1:0.0: probe with driver hub failed with error -5 [ 242.541843][ T12] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 242.578797][ T5681] tipc: Node number set to 2886997039 [ 242.682004][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 242.682021][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 242.686298][ T943] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 242.694052][ T943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.718345][ T943] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 242.740487][ T943] usb 1-1: media controller created [ 242.782935][ T943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.799112][ T10] usb 5-1: failed to execute ARPC: -110 [ 242.799126][ T10] usb 5-1: failed to set connected state for cport 0: -110 [ 242.799136][ T10] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 242.999858][ T10] usb 5-1: failed to send ARPC request 3: -71 [ 243.000271][ T10] usb 5-1: failed to execute ARPC: -71 [ 243.000453][ T10] usb 5-1: failed to clear cport 0: -71 [ 243.000473][ T10] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 243.015888][ T943] DVB: Unable to find symbol dib7000p_attach() [ 243.015906][ T943] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 243.058726][ T12] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 243.083478][ T10] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 243.110759][ T10] usb 5-1: USB disconnect, device number 33 [ 243.211495][ T943] rc_core: IR keymap rc-dib0700-rc5 not found [ 243.211509][ T943] Registered IR keymap rc-empty [ 243.211702][ T943] dvb-usb: could not initialize remote control. [ 243.211708][ T943] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 243.254750][ T8600] dib0700: could not acquire lock [ 243.254794][ T8600] FAULT_INJECTION: forcing a failure. [ 243.254794][ T8600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.254825][ T8600] CPU: 1 UID: 0 PID: 8600 Comm: syz.0.903 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.254852][ T8600] Tainted: [L]=SOFTLOCKUP [ 243.254859][ T8600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.254870][ T8600] Call Trace: [ 243.254878][ T8600] [ 243.254886][ T8600] dump_stack_lvl+0xe8/0x150 [ 243.254919][ T8600] should_fail_ex+0x410/0x560 [ 243.254948][ T8600] copy_fpstate_to_sigframe+0xa83/0xd20 [ 243.254979][ T8600] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 243.255012][ T8600] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 243.255072][ T8600] ? fpu__alloc_mathframe+0xac/0x130 [ 243.255103][ T8600] get_sigframe+0x603/0x830 [ 243.255139][ T8600] ? __pfx_get_sigframe+0x10/0x10 [ 243.255178][ T8600] ia32_setup_rt_frame+0x110/0xae0 [ 243.255205][ T8600] ? _raw_spin_unlock_irq+0x2e/0x50 [ 243.255229][ T8600] ? get_signal+0x10dd/0x12c0 [ 243.255261][ T8600] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 243.255292][ T8600] arch_do_signal_or_restart+0x48e/0x860 [ 243.255323][ T8600] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 243.255370][ T8600] exit_to_user_mode_loop+0x10e/0x770 [ 243.255393][ T8600] ? rcu_is_watching+0x16/0xb0 [ 243.255417][ T8600] ? do_fast_syscall_32+0x33/0x70 [ 243.255447][ T8600] __do_fast_syscall_32+0x437/0x6a0 [ 243.255477][ T8600] ? do_fast_syscall_32+0x33/0x70 [ 243.255503][ T8600] ? asm_int80_emulation+0x1a/0x20 [ 243.255519][ T8600] ? do_int80_emulation+0x299/0x500 [ 243.255545][ T8600] ? trace_irq_disable+0x3b/0x140 [ 243.255568][ T8600] do_fast_syscall_32+0x33/0x70 [ 243.255596][ T8600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.255618][ T8600] RIP: 0023:0xf7fa40ec [ 243.255635][ T8600] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 243.255652][ T8600] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 243.255674][ T8600] RAX: fffffffffffffffc RBX: 0000000000000004 RCX: 0000000000000720 [ 243.255688][ T8600] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.255709][ T8600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.255721][ T8600] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 243.255733][ T8600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.255760][ T8600] [ 243.271674][ T943] usb 1-1: USB disconnect, device number 49 [ 243.357458][ T943] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 243.570582][ T12] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 243.877146][ T8630] netlink: 'syz.3.913': attribute type 1 has an invalid length. [ 243.973099][ T8630] 8021q: adding VLAN 0 to HW filter on device bond6 [ 244.082654][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 244.116386][ T8638] bond6: (slave veth11): Enslaving as a backup interface with a down link [ 244.404426][ T8661] FAULT_INJECTION: forcing a failure. [ 244.404426][ T8661] name failslab, interval 1, probability 0, space 0, times 0 [ 244.404472][ T8661] CPU: 1 UID: 0 PID: 8661 Comm: syz.1.920 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.404497][ T8661] Tainted: [L]=SOFTLOCKUP [ 244.404504][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.404516][ T8661] Call Trace: [ 244.404523][ T8661] [ 244.404531][ T8661] dump_stack_lvl+0xe8/0x150 [ 244.404563][ T8661] should_fail_ex+0x410/0x560 [ 244.404592][ T8661] should_failslab+0xa8/0x100 [ 244.404617][ T8661] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 244.404648][ T8661] kmem_cache_alloc_noprof+0xa1/0x600 [ 244.404668][ T8661] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 244.404695][ T8661] ? kmem_cache_alloc_noprof+0x156/0x600 [ 244.404714][ T8661] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 244.404750][ T8661] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 244.404794][ T8661] mmu_topup_memory_caches+0x21/0x170 [ 244.404817][ T8661] kvm_mmu_load+0x9d/0x21e0 [ 244.404839][ T8661] ? kvm_msr_allowed+0x9a/0x490 [ 244.404859][ T8661] ? kvm_msr_allowed+0x3f4/0x490 [ 244.404877][ T8661] ? kvm_msr_allowed+0x9a/0x490 [ 244.404895][ T8661] ? kvm_msr_allowed+0x9a/0x490 [ 244.404919][ T8661] ? kvm_apic_has_interrupt+0x4b1/0x770 [ 244.404956][ T8661] vcpu_run+0x4f7e/0x7aa0 [ 244.405006][ T8661] ? update_se+0x90/0x1080 [ 244.405070][ T8661] ? __pfx_vcpu_run+0x10/0x10 [ 244.405089][ T8661] ? lock_acquire+0x115/0x350 [ 244.405127][ T8661] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 244.405162][ T8661] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 244.405194][ T8661] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 244.405220][ T8661] kvm_vcpu_ioctl+0xa61/0xfd0 [ 244.405247][ T8661] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 244.405266][ T8661] ? do_vfs_ioctl+0x116f/0x1530 [ 244.405289][ T8661] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 244.405325][ T8661] ? hook_file_ioctl_compat+0x1f2/0x600 [ 244.405368][ T8661] kvm_vcpu_compat_ioctl+0x204/0x390 [ 244.405392][ T8661] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 244.405414][ T8661] ? __fget_files+0x3a2/0x420 [ 244.405448][ T8661] ? __fget_files+0x2a/0x420 [ 244.405479][ T8661] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 244.405511][ T8661] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 244.405534][ T8661] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 244.405556][ T8661] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 244.405583][ T8661] ? __fget_files+0x3a2/0x420 [ 244.405616][ T8661] ? fput+0xa0/0xd0 [ 244.405640][ T8661] ? ksys_write+0x242/0x270 [ 244.405670][ T8661] __do_fast_syscall_32+0x27a/0x6a0 [ 244.405700][ T8661] ? do_fast_syscall_32+0x33/0x70 [ 244.405725][ T8661] ? asm_int80_emulation+0x1a/0x20 [ 244.405744][ T8661] ? do_int80_emulation+0x299/0x500 [ 244.405770][ T8661] ? trace_irq_disable+0x3b/0x140 [ 244.405794][ T8661] do_fast_syscall_32+0x33/0x70 [ 244.405820][ T8661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.405842][ T8661] RIP: 0023:0xf702f0ec [ 244.405860][ T8661] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 244.405877][ T8661] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 244.405898][ T8661] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 244.405912][ T8661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.405924][ T8661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.405935][ T8661] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 244.405947][ T8661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.405974][ T8661] [ 244.589804][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 244.861441][ T8673] syzkaller1: entered promiscuous mode [ 244.861463][ T8673] syzkaller1: entered allmulticast mode [ 245.100248][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 245.387968][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.929'. [ 245.388014][ T8689] netlink: 64 bytes leftover after parsing attributes in process `syz.2.929'. [ 245.608987][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 245.838754][ T5673] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 245.989594][ T5673] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 245.990448][ T5673] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.991718][ T5673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 245.991732][ T5673] usb 3-1: Product: syz [ 245.991745][ T5673] usb 3-1: Manufacturer: syz [ 246.073427][ T8711] syzkaller1: entered promiscuous mode [ 246.073449][ T8711] syzkaller1: entered allmulticast mode [ 246.118858][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 246.629920][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 246.826562][ T5673] usb 3-1: selecting invalid altsetting 1 [ 246.868047][ T5673] dvb_ttusb_budget: ttusb_init_controller: error [ 246.868062][ T5673] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 246.895887][ T8730] fuse: Unknown parameter 'oëæÁ’šÖfÔ‘up_id' [ 246.982480][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 246.982495][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 246.982587][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 246.982596][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 246.982678][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 246.982687][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 246.982765][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 246.982772][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 246.982862][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 246.982870][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 246.982951][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 246.982959][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.038818][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.038834][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.038955][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.038964][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.039046][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.039054][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.039241][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.039249][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.091832][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.091846][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.091943][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.091951][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.092031][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.092039][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.098104][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.098118][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.098204][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.098212][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.098296][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.098304][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.098385][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.098394][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.098474][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.098481][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.099889][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.099899][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.099989][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.099996][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.100079][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.100086][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.100167][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.100174][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.100254][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.100261][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.126400][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.126415][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.126506][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.126513][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.126599][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.126607][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.126701][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.126708][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.126797][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.126805][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.126914][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.126922][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.127005][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.127013][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.127092][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.127100][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.127179][ T8731] binder: BINDER_SET_CONTEXT_MGR already set [ 247.127188][ T8731] binder: 8729:8731 ioctl 4018620d 800002c0 returned -16 [ 247.143828][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 247.426450][ T5673] DVB: Unable to find symbol cx22700_attach() [ 247.567103][ T5673] DVB: Unable to find symbol tda10046_attach() [ 247.567120][ T5673] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 247.586306][ T5673] usb 3-1: USB disconnect, device number 45 [ 247.650168][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 247.968979][ T5673] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 248.080147][ T8752] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 248.100189][ T5673] usb 3-1: device descriptor read/64, error -71 [ 248.104449][ T8755] syzkaller1: entered promiscuous mode [ 248.104471][ T8755] syzkaller1: entered allmulticast mode [ 248.160346][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 248.349495][ T5673] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 248.479370][ T5673] usb 3-1: device descriptor read/64, error -71 [ 248.538103][ T8764] netlink: 'syz.4.951': attribute type 5 has an invalid length. [ 248.590196][ T5673] usb usb3-port1: attempt power cycle [ 248.634605][ T8771] FAULT_INJECTION: forcing a failure. [ 248.634605][ T8771] name failslab, interval 1, probability 0, space 0, times 0 [ 248.634642][ T8771] CPU: 1 UID: 0 PID: 8771 Comm: syz.4.953 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.634669][ T8771] Tainted: [L]=SOFTLOCKUP [ 248.634676][ T8771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.634688][ T8771] Call Trace: [ 248.634696][ T8771] [ 248.634707][ T8771] dump_stack_lvl+0xe8/0x150 [ 248.634740][ T8771] should_fail_ex+0x410/0x560 [ 248.634770][ T8771] should_failslab+0xa8/0x100 [ 248.634798][ T8771] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 248.634820][ T8771] ? __d_lookup+0x66/0x790 [ 248.634839][ T8771] ? __d_alloc+0x37/0x6f0 [ 248.634855][ T8771] ? __d_alloc+0x37/0x6f0 [ 248.634879][ T8771] __d_alloc+0x37/0x6f0 [ 248.634902][ T8771] d_alloc+0x4b/0x190 [ 248.634918][ T8771] ? lookup_one_qstr_excl+0xc4/0x360 [ 248.634946][ T8771] lookup_one_qstr_excl+0xd8/0x360 [ 248.634970][ T8771] filename_create+0x20e/0x370 [ 248.634996][ T8771] ? __pfx_filename_create+0x10/0x10 [ 248.635025][ T8771] filename_linkat+0x16f/0x5e0 [ 248.635059][ T8771] ? __pfx_filename_linkat+0x10/0x10 [ 248.635084][ T8771] ? getname_long+0xbc/0x130 [ 248.635112][ T8771] ? do_getname+0x151/0x250 [ 248.635140][ T8771] __se_sys_linkat+0x60/0x2d0 [ 248.635169][ T8771] __do_fast_syscall_32+0x27a/0x6a0 [ 248.635199][ T8771] ? do_fast_syscall_32+0x33/0x70 [ 248.635227][ T8771] ? asm_int80_emulation+0x1a/0x20 [ 248.635246][ T8771] ? do_int80_emulation+0x299/0x500 [ 248.635274][ T8771] ? trace_irq_disable+0x3b/0x140 [ 248.635300][ T8771] do_fast_syscall_32+0x33/0x70 [ 248.635329][ T8771] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.635352][ T8771] RIP: 0023:0xf7f830ec [ 248.635370][ T8771] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 248.635387][ T8771] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 000000000000012f [ 248.635409][ T8771] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 248.635423][ T8771] RDX: 0000000000000003 RSI: 0000000080000200 RDI: 0000000000001000 [ 248.635436][ T8771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.635448][ T8771] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 248.635460][ T8771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.635497][ T8771] [ 248.670410][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 248.818761][ T5681] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 248.928780][ T5673] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 248.952462][ T5673] usb 3-1: device descriptor read/8, error -71 [ 248.958714][ T5740] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 248.971516][ T5681] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 248.972935][ T5681] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.972967][ T5681] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.972989][ T5681] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.973019][ T5681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.984187][ T5681] usb 1-1: config 0 descriptor?? [ 249.128759][ T5740] usb 5-1: Using ep0 maxpacket: 32 [ 249.129487][ T5740] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 249.131618][ T5740] usb 5-1: config 0 has an invalid interface number: 86 but max is 0 [ 249.131643][ T5740] usb 5-1: config 0 has no interface number 0 [ 249.131684][ T5740] usb 5-1: config 0 interface 86 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 249.131710][ T5740] usb 5-1: config 0 interface 86 altsetting 16 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 249.131736][ T5740] usb 5-1: config 0 interface 86 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1024 [ 249.131761][ T5740] usb 5-1: config 0 interface 86 has no altsetting 0 [ 249.133968][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.133992][ T5740] usb 5-1: Product: syz [ 249.134006][ T5740] usb 5-1: Manufacturer: syz [ 249.134021][ T5740] usb 5-1: SerialNumber: syz [ 249.153140][ T5740] usb 5-1: config 0 descriptor?? [ 249.153990][ T8771] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 249.154119][ T8771] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 249.179020][ T12] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 249.188975][ T5673] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 249.211959][ T5673] usb 3-1: device descriptor read/8, error -71 [ 249.318961][ T5673] usb usb3-port1: unable to enumerate USB device [ 249.405342][ T5740] ljca 5-1:0.86: probe with driver ljca failed with error -71 [ 249.417989][ T5740] usb 5-1: USB disconnect, device number 34 [ 249.435073][ T5681] mcp2221 0003:04D8:00DD.0004: unbalanced delimiter at end of report description [ 249.443304][ T5681] mcp2221 0003:04D8:00DD.0004: can't parse reports [ 249.443411][ T5681] mcp2221 0003:04D8:00DD.0004: probe with driver mcp2221 failed with error -22 [ 249.579412][ T8781] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 249.587045][ T8781] netlink: 'syz.1.956': attribute type 3 has an invalid length. [ 249.636896][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 249.654321][ T5673] usb 1-1: USB disconnect, device number 50 [ 249.689770][ T12] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 250.007119][ T8788] netlink: 104 bytes leftover after parsing attributes in process `syz.4.958'. [ 250.198897][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 250.330701][ T8794] syzkaller1: entered promiscuous mode [ 250.330724][ T8794] syzkaller1: entered allmulticast mode [ 250.709487][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 251.221880][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 251.725550][ T8818] netlink: 104 bytes leftover after parsing attributes in process `syz.1.970'. [ 251.743760][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 252.081792][ T8828] netlink: 'syz.1.974': attribute type 1 has an invalid length. [ 252.102056][ T5681] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 252.119128][ T8828] 8021q: adding VLAN 0 to HW filter on device bond4 [ 252.144933][ T8831] FAULT_INJECTION: forcing a failure. [ 252.144933][ T8831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.144968][ T8831] CPU: 0 UID: 0 PID: 8831 Comm: syz.4.976 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.144995][ T8831] Tainted: [L]=SOFTLOCKUP [ 252.145002][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.145014][ T8831] Call Trace: [ 252.145022][ T8831] [ 252.145030][ T8831] dump_stack_lvl+0xe8/0x150 [ 252.145062][ T8831] should_fail_ex+0x410/0x560 [ 252.145091][ T8831] strncpy_from_user+0x36/0x2c0 [ 252.145115][ T8831] do_getname+0x77/0x250 [ 252.145140][ T8831] __se_sys_move_mount+0x1d5/0x510 [ 252.145172][ T8831] ? __pfx___se_sys_move_mount+0x10/0x10 [ 252.145198][ T8831] ? ksys_write+0x242/0x270 [ 252.145223][ T8831] ? __ia32_sys_move_mount+0x20/0xc0 [ 252.145253][ T8831] __do_fast_syscall_32+0x27a/0x6a0 [ 252.145284][ T8831] ? do_fast_syscall_32+0x33/0x70 [ 252.145311][ T8831] ? asm_int80_emulation+0x1a/0x20 [ 252.145330][ T8831] ? do_int80_emulation+0x299/0x500 [ 252.145357][ T8831] ? trace_irq_disable+0x3b/0x140 [ 252.145381][ T8831] do_fast_syscall_32+0x33/0x70 [ 252.145409][ T8831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.145432][ T8831] RIP: 0023:0xf7f830ec [ 252.145449][ T8831] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 252.145465][ T8831] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 00000000000001ad [ 252.145485][ T8831] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 252.145499][ T8831] RDX: 00000000ffffff9c RSI: 0000000080000300 RDI: 0000000000000000 [ 252.145512][ T8831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.145523][ T8831] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 252.145536][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.145565][ T8831] [ 252.260582][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 252.274267][ T8828] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 252.336179][ T5681] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 8.00 [ 252.357279][ T5681] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 252.357331][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.377410][ T8835] syzkaller1: entered promiscuous mode [ 252.377436][ T8835] syzkaller1: entered allmulticast mode [ 252.451114][ T5681] pl2303 3-1:1.0: pl2303 converter detected [ 252.452408][ T5681] pl2303 3-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org [ 252.658515][ T5740] usb 3-1: USB disconnect, device number 50 [ 252.700577][ T5719] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 252.770666][ T12] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 252.859256][ T5719] usb 5-1: Using ep0 maxpacket: 32 [ 252.860762][ T5719] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 252.865950][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.865977][ T5719] usb 5-1: Product: syz [ 252.865990][ T5719] usb 5-1: Manufacturer: syz [ 252.866004][ T5719] usb 5-1: SerialNumber: syz [ 252.868112][ T5719] usb 5-1: config 0 descriptor?? [ 252.913518][ T5719] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 252.913576][ T5719] dvb-usb: bulk message failed: -22 (4/0) [ 252.913584][ T5719] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 252.918748][ T5719] dvb-usb: bulk message failed: -22 (5/0) [ 252.918770][ T5719] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 252.929945][ T5719] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 252.932746][ T5681] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 252.933025][ T5719] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 252.933088][ T5719] usb 5-1: media controller created [ 252.993715][ T5719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 253.034385][ T5719] usb 5-1: selecting invalid altsetting 3 [ 253.034406][ T5719] ttusb2: set interface to alts=3 failed [ 253.087014][ T5719] DVB: Unable to find symbol tda10086_attach() [ 253.087027][ T5719] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 253.087655][ T5719] dvb-usb: bulk message failed: -22 (4/0) [ 253.087666][ T5719] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 253.087731][ T5719] dvb-usb: bulk message failed: -22 (5/0) [ 253.087737][ T5719] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 253.087772][ T5719] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 253.151311][ T5681] usb 4-1: Using ep0 maxpacket: 16 [ 253.152028][ T5681] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 253.156334][ T5681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 253.173855][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.173883][ T5681] usb 4-1: Product: syz [ 253.173898][ T5681] usb 4-1: Manufacturer: syz [ 253.173912][ T5681] usb 4-1: SerialNumber: syz [ 253.188394][ T8854] ttusb2: i2c wr len=58 too high [ 253.221826][ T5681] usb 4-1: config 0 descriptor?? [ 253.250173][ T5681] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 253.250210][ T5681] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 253.278899][ T1158] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 253.724991][ T8863] fuse: Unknown parameter 'group_i00000000000000000000' [ 253.788939][ T968] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 253.851762][ T5681] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 254.211109][ T8876] syzkaller1: entered promiscuous mode [ 254.211132][ T8876] syzkaller1: entered allmulticast mode [ 254.301626][ T968] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 254.301768][ T5681] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 254.301794][ T5681] em28xx 4-1:0.0: board has no eeprom [ 254.365609][ T8850] em28xx 4-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 254.465761][ T8883] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 254.465791][ T8883] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.470399][ T8883] vhci_hcd vhci_hcd.0: Device attached [ 254.475656][ T8885] vhci_hcd: unknown pdu 1 [ 254.482406][ T69] vhci_hcd vhci_hcd.2: stop threads [ 254.482425][ T69] vhci_hcd vhci_hcd.2: release socket [ 254.482456][ T69] vhci_hcd vhci_hcd.2: disconnect device [ 254.585181][ T8888] FAULT_INJECTION: forcing a failure. [ 254.585181][ T8888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.585219][ T8888] CPU: 1 UID: 0 PID: 8888 Comm: syz.1.994 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.585245][ T8888] Tainted: [L]=SOFTLOCKUP [ 254.585252][ T8888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.585264][ T8888] Call Trace: [ 254.585271][ T8888] [ 254.585280][ T8888] dump_stack_lvl+0xe8/0x150 [ 254.585313][ T8888] should_fail_ex+0x410/0x560 [ 254.585341][ T8888] _copy_from_user+0x2d/0xb0 [ 254.585369][ T8888] __sys_sendto+0x2a9/0x5a0 [ 254.585402][ T8888] ? __pfx___sys_sendto+0x10/0x10 [ 254.585438][ T8888] ? __fget_files+0x3a2/0x420 [ 254.585495][ T8888] ? ksys_write+0x242/0x270 [ 254.585520][ T8888] __ia32_sys_sendto+0xdd/0x100 [ 254.585553][ T8888] __do_fast_syscall_32+0x27a/0x6a0 [ 254.585583][ T8888] ? do_fast_syscall_32+0x33/0x70 [ 254.585610][ T8888] ? asm_int80_emulation+0x1a/0x20 [ 254.585628][ T8888] ? do_int80_emulation+0x299/0x500 [ 254.585655][ T8888] ? trace_irq_disable+0x3b/0x140 [ 254.585681][ T8888] do_fast_syscall_32+0x33/0x70 [ 254.585711][ T8888] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.585735][ T8888] RIP: 0023:0xf702f0ec [ 254.585752][ T8888] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 254.585769][ T8888] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 254.585791][ T8888] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 254.585805][ T8888] RDX: 000000000000000e RSI: 0000000000000015 RDI: 0000000080000380 [ 254.585817][ T8888] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 254.585829][ T8888] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 254.585841][ T8888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.585869][ T8888] [ 254.668639][ T5681] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 254.668667][ T5681] em28xx 4-1:0.0: dvb set to bulk mode. [ 254.669746][ T943] em28xx 4-1:0.0: Binding DVB extension [ 254.687092][ T5681] usb 4-1: USB disconnect, device number 30 [ 254.696304][ T5681] em28xx 4-1:0.0: Disconnecting em28xx [ 254.812478][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 254.847055][ T943] em28xx 4-1:0.0: Registering input extension [ 254.847687][ T5681] em28xx 4-1:0.0: Closing input extension [ 254.882156][ T5681] em28xx: Freeing device [ 255.146437][ T8893] syzkaller0: entered promiscuous mode [ 255.146460][ T8893] syzkaller0: entered allmulticast mode [ 255.318817][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 255.427803][ T5719] usb 5-1: USB disconnect, device number 35 [ 255.488870][ T30] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 255.519259][ T5719] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 255.639414][ T30] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 255.640765][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.642433][ T30] usb 2-1: config 0 descriptor?? [ 255.674537][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.675413][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.699049][ T5681] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 255.788738][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 255.828946][ T968] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 255.858336][ T30] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 255.860125][ T5681] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 255.864923][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.882643][ T5681] usb 4-1: config 0 descriptor?? [ 255.951299][ T10] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 255.952780][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.959787][ T10] usb 1-1: config 0 descriptor?? [ 256.076630][ T30] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 256.076655][ T30] [drm] Initialized udl on minor 1 [ 256.129196][ T5681] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 256.198895][ T10] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 256.295670][ T8903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.308315][ T8903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.340596][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 256.373305][ T5681] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 256.373354][ T5681] [drm] Initialized udl on minor 2 [ 256.427697][ T8924] fuse: Bad value for 'fd' [ 256.448839][ T8924] binder: 8923:8924 ioctl f501 0 returned -22 [ 256.461327][ T10] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3 [ 256.461373][ T10] [drm] Initialized udl on minor 3 [ 256.480217][ T30] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 256.480678][ T30] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 256.486941][ T5719] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 256.520394][ T5719] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 256.520609][ T5719] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 256.544578][ T30] usb 2-1: USB disconnect, device number 38 [ 256.600275][ T8905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.603000][ T8905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.605162][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 256.605643][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 256.624932][ T5673] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 256.626251][ T10] usb 1-1: USB disconnect, device number 51 [ 256.626569][ T5673] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 256.626796][ T5673] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 256.746793][ T5681] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 256.747211][ T5681] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 256.764317][ T5681] usb 4-1: USB disconnect, device number 31 [ 256.765583][ T943] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 256.854282][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 257.340882][ T8942] fuse: Unknown parameter 'group_id00000000000000000000' [ 257.368808][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 257.393104][ T5740] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 257.445454][ T8944] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 257.484541][ T8944] netlink: 'syz.2.1013': attribute type 3 has an invalid length. [ 257.548651][ T5740] usb 2-1: Using ep0 maxpacket: 16 [ 257.550456][ T5740] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 257.556448][ T5740] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 257.583861][ T5740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.583918][ T5740] usb 2-1: Product: syz [ 257.583932][ T5740] usb 2-1: Manufacturer: syz [ 257.583947][ T5740] usb 2-1: SerialNumber: syz [ 257.616179][ T5740] usb 2-1: config 0 descriptor?? [ 257.631480][ T5740] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 257.631501][ T5740] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 257.732692][ T8955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1017'. [ 257.778052][ T8958] fuse: Unknown parameter 'rootmgde' [ 257.880622][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 258.001947][ T8959] fuse: root generation should be zero [ 258.014443][ T8959] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1016'. [ 258.148766][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 258.155413][ T8963] netlink: 'syz.3.1019': attribute type 5 has an invalid length. [ 258.232900][ T8940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1010'. [ 258.266802][ T5740] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 258.311381][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 258.315042][ T10] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 258.340199][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.340227][ T10] usb 1-1: Product: syz [ 258.340242][ T10] usb 1-1: Manufacturer: syz [ 258.340256][ T10] usb 1-1: SerialNumber: syz [ 258.347691][ T10] usb 1-1: config 0 descriptor?? [ 258.366319][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 258.389143][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 258.660036][ T943] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 258.688224][ T5740] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 258.688245][ T5740] em28xx 2-1:0.0: board has no eeprom [ 258.776876][ T10] gspca_se401: ExtraFeatures: 255 [ 258.776896][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 258.776910][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 258.776923][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 258.809632][ T943] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 258.815253][ T943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.815279][ T943] usb 4-1: Product: syz [ 258.815294][ T943] usb 4-1: Manufacturer: syz [ 258.815330][ T943] usb 4-1: SerialNumber: syz [ 258.819990][ T943] usb 4-1: config 0 descriptor?? [ 258.834817][ T943] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 258.845226][ T943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.846286][ T943] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 258.846336][ T943] usb 4-1: media controller created [ 258.899707][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 258.903827][ T943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.990668][ T10] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 259.008536][ T5740] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 259.008759][ T5740] em28xx 2-1:0.0: dvb set to bulk mode. [ 259.019714][ T30] em28xx 2-1:0.0: Binding DVB extension [ 259.066292][ T943] DVB: Unable to find symbol mt352_attach() [ 259.166963][ T5673] usb 2-1: USB disconnect, device number 39 [ 259.181861][ T5673] em28xx 2-1:0.0: Disconnecting em28xx [ 259.293832][ T943] DVB: Unable to find symbol nxt6000_attach() [ 259.293848][ T943] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 259.318206][ T943] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 259.332658][ T943] dvb-usb: schedule remote query interval to 1000 msecs. [ 259.332681][ T943] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 259.332696][ T943] dvb-usb: bulk message failed: -22 (7/0) [ 259.332709][ T943] dvb-usb: bulk message failed: -22 (7/0) [ 259.351865][ T943] usb 4-1: USB disconnect, device number 32 [ 259.389303][ T30] em28xx 2-1:0.0: Registering input extension [ 259.393835][ T5673] em28xx 2-1:0.0: Closing input extension [ 259.419208][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 259.449787][ T5673] em28xx: Freeing device [ 259.513764][ T5694] usb 1-1: USB disconnect, device number 52 [ 259.647800][ T943] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 259.792345][ T8979] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 259.792429][ T8979] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 259.851683][ T8958] syz.2.1016 (8958): drop_caches: 1 [ 259.932414][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 259.998515][ T8991] [ 260.000879][ T8991] ====================================================== [ 260.007914][ T8991] WARNING: possible circular locking dependency detected [ 260.014969][ T8991] syzkaller #0 Tainted: G L [ 260.020960][ T8991] ------------------------------------------------------ [ 260.027971][ T8991] syz.3.1027/8991 is trying to acquire lock: [ 260.033935][ T8991] ffff888025bebc68 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xca0 [ 260.045416][ T8991] [ 260.045416][ T8991] but task is already holding lock: [ 260.050462][ T5673] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 260.060300][ T8991] ffff888025becd60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 260.069348][ T8991] [ 260.069348][ T8991] which lock already depends on the new lock. [ 260.069348][ T8991] [ 260.079736][ T8991] [ 260.079736][ T8991] the existing dependency chain (in reverse order) is: [ 260.088739][ T8991] [ 260.088739][ T8991] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 260.096477][ T8991] lock_sock_nested+0x41/0x100 [ 260.101754][ T8991] smc_listen_out+0xd4/0x3d0 [ 260.106869][ T8991] smc_listen_work+0x81d/0x1410 [ 260.112244][ T8991] process_scheduled_works+0xc3d/0x1630 [ 260.118316][ T8991] worker_thread+0xa47/0xfb0 [ 260.123430][ T8991] kthread+0x38b/0x480 [ 260.128020][ T8991] ret_from_fork+0x514/0xb70 [ 260.133125][ T8991] ret_from_fork_asm+0x1a/0x30 [ 260.138428][ T8991] [ 260.138428][ T8991] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 260.148674][ T8991] __lock_acquire+0x164c/0x2de0 [ 260.154402][ T8991] lock_acquire+0x115/0x350 [ 260.159425][ T8991] __flush_work+0x74c/0xca0 [ 260.164538][ T8991] __cancel_work_sync+0xbf/0x110 [ 260.169994][ T8991] smc_clcsock_release+0x60/0xf0 [ 260.175449][ T8991] __smc_release+0x64e/0x7c0 [ 260.180562][ T8991] smc_close_non_accepted+0xd5/0x1f0 [ 260.186370][ T8991] smc_close_active+0xb30/0xf20 [ 260.191744][ T8991] __smc_release+0x9c/0x7c0 [ 260.196770][ T8991] smc_release+0x2c5/0x550 [ 260.201798][ T8991] __sock_release+0xa0/0x1f0 [ 260.207967][ T8991] sock_close+0x1c/0x30 [ 260.212667][ T8991] __fput+0x418/0xa50 [ 260.217191][ T8991] task_work_run+0x1d9/0x270 [ 260.222310][ T8991] exit_to_user_mode_loop+0x204/0x770 [ 260.228208][ T8991] __do_fast_syscall_32+0x437/0x6a0 [ 260.233938][ T8991] do_fast_syscall_32+0x33/0x70 [ 260.239333][ T8991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.246186][ T8991] [ 260.246186][ T8991] other info that might help us debug this: [ 260.246186][ T8991] [ 260.252208][ T943] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 260.263931][ T8991] Possible unsafe locking scenario: [ 260.263931][ T8991] [ 260.271382][ T8991] CPU0 CPU1 [ 260.276738][ T8991] ---- ---- [ 260.282091][ T8991] lock(sk_lock-AF_SMC/1); [ 260.286595][ T8991] lock((work_completion)(&new_smc->smc_listen_work)); [ 260.296043][ T8991] lock(sk_lock-AF_SMC/1); [ 260.299480][ T5673] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 260.300286][ T5673] usb 2-1: config 0 has an invalid interface number: 175 but max is 0 [ 260.300311][ T5673] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.300330][ T5673] usb 2-1: config 0 has no interface number 0 [ 260.300365][ T5673] usb 2-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 260.300388][ T5673] usb 2-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 260.301970][ T5673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.301991][ T5673] usb 2-1: Product: syz [ 260.302004][ T5673] usb 2-1: Manufacturer: syz [ 260.302018][ T5673] usb 2-1: SerialNumber: syz [ 260.382176][ T8991] lock((work_completion)(&new_smc->smc_listen_work)); [ 260.389109][ T8991] [ 260.389109][ T8991] *** DEADLOCK *** [ 260.389109][ T8991] [ 260.397245][ T8991] locks held by syz.3.1027/8991: 3, last CPU#1: [ 260.399887][ T5673] usb 2-1: config 0 descriptor?? [ 260.403892][ T5673] symbolserial 2-1:0.175: symbol converter detected [ 260.405688][ T5673] usb 2-1: symbol converter now attached to ttyUSB0 [ 260.421650][ T8991] #0: ffff8880595f7b00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 260.432195][ T8991] #1: ffff888025becd60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 260.441641][ T8991] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xca0 [ 260.450472][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 260.465192][ T8991] [ 260.465192][ T8991] stack backtrace: [ 260.471097][ T8991] CPU: 1 UID: 0 PID: 8991 Comm: syz.3.1027 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.482008][ T8991] Tainted: [L]=SOFTLOCKUP [ 260.486508][ T8991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.496741][ T8991] Call Trace: [ 260.500041][ T8991] [ 260.500265][ T943] usb 3-1: Using ep0 maxpacket: 16 [ 260.500891][ T943] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 260.503912][ T943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.503939][ T943] usb 3-1: Product: syz [ 260.503954][ T943] usb 3-1: Manufacturer: syz [ 260.503969][ T943] usb 3-1: SerialNumber: syz [ 260.506180][ T943] usb 3-1: config 0 descriptor?? [ 260.513090][ T943] usb 3-1: selecting invalid altsetting 1 [ 260.513113][ T943] technisat-usb2: could not set alternate setting to 0 [ 260.556425][ T8991] dump_stack_lvl+0xe8/0x150 [ 260.561024][ T8991] print_circular_bug+0x2e2/0x300 [ 260.566052][ T8991] check_noncircular+0x12f/0x150 [ 260.570996][ T8991] __lock_acquire+0x164c/0x2de0 [ 260.576023][ T8991] ? do_raw_spin_unlock+0xf5/0x200 [ 260.581140][ T8991] lock_acquire+0x115/0x350 [ 260.585641][ T8991] ? __flush_work+0x101/0xca0 [ 260.590323][ T8991] ? __flush_work+0x101/0xca0 [ 260.595091][ T8991] __flush_work+0x74c/0xca0 [ 260.599598][ T8991] ? __flush_work+0x101/0xca0 [ 260.604298][ T8991] ? __flush_work+0x101/0xca0 [ 260.607599][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.611463][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.612225][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.613924][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.616830][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.618310][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.621643][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.621906][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.627081][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.627311][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.642371][ T10] usb 2-1: USB disconnect, device number 40 [ 260.645280][ T10] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 260.645643][ T10] symbolserial 2-1:0.175: device disconnected [ 260.708079][ T943] technisat-usb2: firmware version: 0.0 [ 260.708113][ T943] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 260.722929][ T8991] ? __pfx___flush_work+0x10/0x10 [ 260.727974][ T8991] ? __pfx_wq_barrier_func+0x10/0x10 [ 260.733272][ T8991] ? __cancel_work_sync+0x5c/0x110 [ 260.738407][ T8991] __cancel_work_sync+0xbf/0x110 [ 260.743361][ T8991] smc_clcsock_release+0x60/0xf0 [ 260.748320][ T8991] __smc_release+0x64e/0x7c0 [ 260.752918][ T8991] smc_close_non_accepted+0xd5/0x1f0 [ 260.758223][ T8991] smc_close_active+0xb30/0xf20 [ 260.763095][ T8991] ? __pfx_sock_def_readable+0x10/0x10 [ 260.768572][ T8991] __smc_release+0x9c/0x7c0 [ 260.773079][ T8991] ? __local_bh_enable_ip+0xd6/0x140 [ 260.778378][ T8991] smc_release+0x2c5/0x550 [ 260.783336][ T8991] __sock_release+0xa0/0x1f0 [ 260.787934][ T8991] ? __pfx_sock_close+0x10/0x10 [ 260.792790][ T8991] sock_close+0x1c/0x30 [ 260.797001][ T8991] __fput+0x418/0xa50 [ 260.801006][ T8991] task_work_run+0x1d9/0x270 [ 260.805611][ T8991] ? __pfx_task_work_run+0x10/0x10 [ 260.810760][ T8991] exit_to_user_mode_loop+0x204/0x770 [ 260.816256][ T8991] ? rcu_is_watching+0x16/0xb0 [ 260.821033][ T8991] ? do_fast_syscall_32+0x33/0x70 [ 260.826063][ T8991] __do_fast_syscall_32+0x437/0x6a0 [ 260.831295][ T8991] ? do_fast_syscall_32+0x33/0x70 [ 260.836324][ T8991] ? irqentry_exit+0x10f/0x910 [ 260.841090][ T8991] ? trace_irq_disable+0x3b/0x140 [ 260.846130][ T8991] do_fast_syscall_32+0x33/0x70 [ 260.850998][ T8991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.857370][ T8991] RIP: 0023:0xf7fd50ec [ 260.861438][ T8991] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 260.881042][ T8991] RSP: 002b:00000000f75bfb1c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 260.889463][ T8991] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 260.897436][ T8991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.905415][ T8991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.913394][ T8991] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 260.921374][ T8991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.929353][ T8991] [ 260.959727][ T69] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 261.003942][ T943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 261.004439][ T943] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 261.004464][ T943] usb 3-1: media controller created [ 261.004485][ T943] technisat-usb2: i2c-error: out failed 53 = -22 [ 261.004502][ T943] dvb-usb: MAC address reading failed. [ 261.044371][ T943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.223695][ T943] DVB: Unable to find symbol stv090x_attach() [ 261.224158][ T943] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 261.288856][ T943] rc_core: IR keymap rc-technisat-usb2 not found [ 261.288877][ T943] Registered IR keymap rc-empty [ 261.290585][ T943] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 261.291691][ T943] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input30 [ 261.292872][ T943] dvb-usb: schedule remote query interval to 100 msecs. [ 261.293785][ T943] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 261.478813][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 261.908811][ T943] dvb-usb: error -110 while querying for an remote control event. [ 261.908854][ T8990] technisat-usb2: i2c-error: out failed 41 = -22 [ 261.989857][ T968] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 261.991333][ T30] usb 3-1: USB disconnect, device number 51 [ 262.025147][ T30] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 262.508774][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 263.018791][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 263.528764][ T12] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 264.038881][ T12] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 264.548745][ T12] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 265.059962][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 265.578778][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 266.099009][ T968] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 266.609159][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 267.118939][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 267.629138][ T12] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 268.138745][ T1288] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 268.659203][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 269.168747][ T968] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 269.689244][ T363] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00