last executing test programs: 10m26.489045509s ago: executing program 2 (id=1545): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000440)='@\n', 0x2}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="94", 0x1}], 0x1}, 0xe000}], 0x2, 0x8000) 10m26.474851867s ago: executing program 2 (id=1546): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030003100080ffffff0000000000000200090008000000e40000000000000005000600000000000a00002c09bbfc00fc01000000000000000000000000000000000000000000000200010000000000000000070000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 10m26.433976425s ago: executing program 2 (id=1547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000040)={@private=0xa010100, 0x1, 0x0, 0x10, 0x0, [{@private}]}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f00000039000100faff07000400000001"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_clone(0x0, 0x0, 0x2c, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$cont(0x19, r7, 0x14, 0xb) kcmp(r7, 0x0, 0x4, r0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}]]}, 0x30}}, 0x0) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x7fffffff}) ptrace$setregset(0x4205, r7, 0x201, &(0x7f0000000440)={&(0x7f00000003c0)="86f2ec5abb44378ef16f03d029c5e01460ec852cb7cbd8df67b575466a16a0c6bcf5b0a922f8569cb46c5a100552d4357f1a38791370ababf5915fb056d33ccc33184fd8d0451d0d99c2dc7aad689e4b98cbbd7a9dc97f9d531c76e5c5d50aff5703f5e50b61d4abf4bf12b919ee3a092d112ea8c50c98948c97d1366e", 0x7d}) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f024e22000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000010000000000", 0x58}], 0x1) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYRESHEX=r6, @ANYBLOB="1959fb53a8e2ce7a3e9fdb7a9cc389b33bc440a460777a824b0e1d159bb0088d9a342a6f6e39a3373e64aecf43a3b1f79c079837cb094464c8bd9badaf477ab72e1e42d1e32d23c4e636219f9ddba9517fa235c70ca7faf7a9ae254aceb422224dc80858c377095b57c416df76fce5cf2225fd2a8effe36546f0dcfba558770f49b44e1035f3fdfbb6feda972c872f0cd1490edfe55eba995cc0c42f97785fb23f70bf7035dfb51bdf12"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 10m26.183176081s ago: executing program 2 (id=1549): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = getpid() r3 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x880) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r2, 0x0, 0x0, 'syz1\x00', 0x0}) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) r6 = syz_io_uring_setup(0x5f86, &(0x7f0000000180)={0x0, 0x2a97, 0x10000, 0x2, 0x3b7}, &(0x7f0000001040), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f00000002c0)={0x5f, 0x0, 0x0, 0x0, 0x0}, 0x20) syz_emit_ethernet(0x86, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c200000e1704b45adbde0800450000780000000000019078ac1e0001ac1414aa05009078e00000e0470000000000000000110000e0000001ac14141a830300070300863f00000000000000000000062615628636d417051202a0d1f245d21435f19870ab2659b98d010a70501b0bd1a78a14020fa00358e7c1ec183ae8b98ac073000000c67168bf2ce8258da7d106f0cd271f2054e4"], 0x0) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f0000000540)={0x1, 0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x0, 0xe, 0x0, &(0x7f00000002c0)="5c71f91b05c413550230b4c817a6", 0x0, 0x8, 0x0, 0x1, 0x0, &(0x7f0000000240)='b', 0x0}, 0x50) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x400c0c5) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="030100"/20, @ANYRES32=r11, @ANYRES32=r5, @ANYBLOB="04000000040000000200"/28], 0x50) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00cc482b3c3aea569ae3100100eca93c1043b25527135a144785d759060c0b3950275bd1fa5504631bdd46470a7280414916e95d9349b0d2584ea1abc27e5af34bc959"]) 10m25.134330255s ago: executing program 2 (id=1559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0xfff5, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}}, 0x40880) 10m24.190476505s ago: executing program 2 (id=1565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/hibernate_compression_threads', 0x81, 0x114) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 10m23.713976398s ago: executing program 32 (id=1565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/hibernate_compression_threads', 0x81, 0x114) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 5m14.932806336s ago: executing program 4 (id=3433): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x2010, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) creat(&(0x7f0000000000)='./file0\x00', 0x14e) set_mempolicy(0x8006, &(0x7f0000000040)=0xffd, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0xedc0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r1) 5m13.098984017s ago: executing program 4 (id=3439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000006505000200650000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) 5m10.296510634s ago: executing program 4 (id=3452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000300000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800024000000002080001400000000008000540000000000900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 5m10.25767668s ago: executing program 4 (id=3454): bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xa) prctl$PR_GET_SECUREBITS(0x1b) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='scalable', 0x5a) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="0300080001000000000014000000450000301400000000fe8f780a010100ac1414aa0400907800000000450000000000005059313ee1fda5e9e5436c5852"], 0x3e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 5m9.507106003s ago: executing program 4 (id=3461): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="02", 0x1}], 0x1}}], 0x1, 0x0) (fail_nth: 83) 5m9.152096931s ago: executing program 4 (id=3465): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000003c6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae58e99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c"], 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000080ffffff000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000001000000000000000000000000000000fdffffffffffffff0500000000000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff000000000000000000000000000000000000000000000000000000000100000000320000000000000000000000000000000000fffffffffffffeffffff00"], 0x23c}}, 0x8000000) 5m8.69331405s ago: executing program 33 (id=3465): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000003c6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae58e99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c"], 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000080ffffff000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000001000000000000000000000000000000fdffffffffffffff0500000000000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff000000000000000000000000000000000000000000000000000000000100000000320000000000000000000000000000000000fffffffffffffeffffff00"], 0x23c}}, 0x8000000) 4m45.69279803s ago: executing program 0 (id=3589): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000020"], 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004041) r1 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r2 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x6, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0xff7ffff3, 0x0, 0x0, 0x2000, '\x00', 0x4, 0x5, 0x1ff, 0x0, {}, {0x5, 0x2}, {0xfffffffffffffffb, 0x4}, {0x5}, 0x60, 0x800000, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x40, 0x2, 0xc, {0xc, 0x3, "ec096226d73cf3b2923f"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x0, 0x14, 0x49, "3736ac485e59fcb4ae3020bea8b4fb40e35f2f4799c795c267f4c10d601af065f5fe7a7da6793df8ba30b82e3eb0a0ec6108e5f9ad3cd0b042b6c8bb70e63f2ed35abd2aeb2cd20db5"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0xe1, 0x8, 0xffff, 0x5, 0x0, 0x1f8, 0x9, 0x4, 0x9, 0xb, 0xa5, 0x9}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x200}, &(0x7f0000000540)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x40, 0x31, 0x4, "d1918a73"}, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0) 4m32.516234196s ago: executing program 0 (id=3653): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0xf04a70bee95f8f64}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58, 0xff97}, 0x0) 4m32.292698023s ago: executing program 0 (id=3654): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x4058534c, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) clock_gettime(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) fsopen(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}}, 0x8000004) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8, 0x1b, 0x156f}]}, 0x30}}, 0x4000880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="14003500"], 0x3c}}, 0x0) r8 = getpgrp(0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000180)=0x10000000005) 4m32.256285967s ago: executing program 0 (id=3655): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="71ea884cd0cd23ad65d0457165488d9fb0068a1492f7b4ec4fa6ce19461097436a042646cb9f958e9797c34d039cc08a4ec14c5f099e0750106efe9194afb7977c6138f9042f7c3607ba50dce2b98296b54212698cadf9c309b32b365eb0f40d9d4b5edd28d040ecd5f71cc8805706bb218e6b083d7775ba079089617e09e0711705744d9e5ec595a7cdde47678f6e526db4504938c2fe6f3d63f72ef64b4a95f66351bcbf2941b7647cbfb83a7c06cddad175726600b3fa942b3a13e103a69734724a8d3356164e8ddf", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES32=r2], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40480, 0x0) pwritev2(r3, 0x0, 0x0, 0x9, 0x5b849b55, 0x1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 4m32.177746148s ago: executing program 0 (id=3656): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x42) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (fail_nth: 82) 4m31.904173442s ago: executing program 0 (id=3657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000002180)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x7fff, r1, &(0x7f0000000380)='j', 0x1, 0x7fffffffffffffff, 0x0, 0x2}]) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000280)=0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0100000001000000010902240001000000000904000001030000000921ffff000122050009058103"], 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e048402"], 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000127bd7000fedbdf253100000008000300", @ANYRES32=r12, @ANYBLOB="0c00520024622cb1658b90463960f84aed0a2930095fc14437eec63e3e2b34c850444e", @ANYRES32=r13, @ANYBLOB="0c009900020000001300000008000300", @ANYRES32=r14, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r16, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x66e, 0x80000000, 0x10001, 0x790, 0x9, 0x1, 0xfffffff9, 0x1a7a, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x8, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x7, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x7, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x27f, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce63, 0x4, 0x6, 0xe074, 0x6b10, 0x4, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0xffffffff, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x2004, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x9, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa4, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x40003, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffb, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x40000000, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x80, 0xffffffff, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffff7f, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x1, 0x1, 0x800, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x1000007, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0xcb9, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x2, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x0, 0xd, 0x9, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 4m31.312707815s ago: executing program 34 (id=3657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000002180)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x7fff, r1, &(0x7f0000000380)='j', 0x1, 0x7fffffffffffffff, 0x0, 0x2}]) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000280)=0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0100000001000000010902240001000000000904000001030000000921ffff000122050009058103"], 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e048402"], 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000127bd7000fedbdf253100000008000300", @ANYRES32=r12, @ANYBLOB="0c00520024622cb1658b90463960f84aed0a2930095fc14437eec63e3e2b34c850444e", @ANYRES32=r13, @ANYBLOB="0c009900020000001300000008000300", @ANYRES32=r14, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r16, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x66e, 0x80000000, 0x10001, 0x790, 0x9, 0x1, 0xfffffff9, 0x1a7a, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x8, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x7, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x7, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x27f, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce63, 0x4, 0x6, 0xe074, 0x6b10, 0x4, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0xffffffff, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x2004, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x9, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa4, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x40003, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffb, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x40000000, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x80, 0xffffffff, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffff7f, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x1, 0x1, 0x800, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x1000007, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0xcb9, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x2, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x0, 0xd, 0x9, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 3m52.30381867s ago: executing program 7 (id=3865): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000003c0), 0x61) unshare(0x22020600) r1 = socket(0x1d, 0x2, 0x7) socket(0x26, 0x800, 0x56) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, 0x0, 0xffffffffffffffff, {0x2, 0x0, 0x4}, 0xfe}, 0x18) 3m52.132712498s ago: executing program 7 (id=3866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0xd4feffff, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m51.965142864s ago: executing program 7 (id=3868): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000480)={0x0, 0x3, 0xa199, 0x7}, 0x10) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c", 0x1}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x8020) 3m51.75639273s ago: executing program 7 (id=3869): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000002c0)={0x0, 0x2, 0x100000}, 0x20) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r4, 0x111, 0x6, 0x0, &(0x7f0000000080)) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) close(0x3) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000022000/0x4000)=nil, 0x4000, &(0x7f0000000300)='.&[,%A\x00') write$FUSE_NOTIFY_RESEND(r3, &(0x7f00000000c0)={0x14}, 0x14) socket$nl_route(0x10, 0x3, 0x0) 3m49.948422911s ago: executing program 7 (id=3877): unshare(0x2c020400) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x9, r2, &(0x7f0000000180)="0000707706ba", 0x6, 0x36, 0x0, 0x0, r2}]) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 3m49.585791317s ago: executing program 7 (id=3878): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/141, 0x8d}, 0x1}], 0x1, 0x141, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94", 0x79}], 0x2}], 0x1, 0x40800) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 3m48.968493238s ago: executing program 35 (id=3878): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/141, 0x8d}, 0x1}], 0x1, 0x141, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94", 0x79}], 0x2}], 0x1, 0x40800) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 7.091576634s ago: executing program 3 (id=4766): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x600) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="e4010000100001000000000000000000fc420000000000000000000001000000000000000000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1e4}}, 0x44840) socket(0x21, 0x5, 0x2b) 7.078436935s ago: executing program 3 (id=4767): socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newsa={0x194, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "00000000000000000100070000400000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}}, 0x44050) 7.023408199s ago: executing program 3 (id=4768): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaabb000002000400d8928afb7028000008000300030000000a000400aaaaaaaaaabb00", @ANYRES32=r1], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x2044890) 6.746034753s ago: executing program 3 (id=4771): syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000000, 0x820b01) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) io_uring_setup(0x1c6e, &(0x7f0000000480)={0x0, 0xe75a, 0x8000, 0x1, 0x1dc}) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000d59000/0x4000)=nil) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000600)={0x4, 0x3, 0x7000, 0x1000, &(0x7f0000a66000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x180, &(0x7f0000000180)=[0x3, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000d, 0x0, 0x4, 0x10000, 0x466c, 0x9004, 0x9, 0x8, 0x9, 0x200000005, 0x8, 0x3, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x2, 0xffffffffffffffff, 0x6, 0x7f, 0x8, 0xffffffff, 0x9, 0x0, 0x5, 0x7, 0x4, 0x3, 0x5, 0x10000008892, 0x1, 0x8000000006, 0x43, 0x0, 0x3, 0xa3de, 0x2cc0000000000000, 0x8, 0x5, 0x400, 0x6, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0x1, 0x6, 0x4, 0xe6, 0x1, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbdd, 0xfffffffffffffff6, 0xfffffffffffffc00, 0x4, 0x7, 0x5e7, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x2007, 0x1, 0xaba, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0x102, 0x5, 0x28000000, 0x80000008, 0x2, 0xfb7f000000000000, 0x7, 0x4000000000f6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x4, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0x200000000dfd4, 0xfff9, 0x10, 0x40000000000005, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb68e, 0x0, 0x8, 0x1000003]}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000010000)='asymmetric\x00', &(0x7f0000000400)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080003400000400005000200890000000800014000000012080006400000000208000440000000170900010073797a30000000000900020073793a32000000001400"], 0x94}, 0x1, 0x0, 0x0, 0x890}, 0x4010010) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00006bd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000330000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003b8000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00003eb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0x200c89d, 0x20, 0x8001, 0x20002f7}) 5.85401975s ago: executing program 6 (id=4773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x300}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x0) 5.583979456s ago: executing program 6 (id=4774): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1c7efe, 0x13c) io_setup(0x2, &(0x7f0000000a00)=0x0) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000000)={0x0, 0x0, 0x22, 0x8, 0x4, r0, 0x0, 0x0, 0x9, 0x4000, 0x0, r0}]) 5.373281868s ago: executing program 6 (id=4776): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000001300000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 5.2404348s ago: executing program 6 (id=4778): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000000, 0x820b01) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x1, r0, 0x0}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) io_uring_setup(0x1c6e, &(0x7f0000000480)={0x0, 0xe75a, 0x8000, 0x1, 0x1dc}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000010000)='asymmetric\x00', &(0x7f0000000400)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080003400000400005000200890000000800014000000012080006400000000208000440000000170900010073797a30000000000900020073793a32000000001400"], 0x94}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00006bd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000330000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003b8000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00003eb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0x200c89d, 0x20, 0x8001, 0x20002f7}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r8], 0x68}}, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x63, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) 4.7485486s ago: executing program 5 (id=4781): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000006103000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 4.488132087s ago: executing program 5 (id=4784): mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x37b}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0', [{0x20, '\x00'/12}, {0x20, '\x00\x00\x00\x00\x00[[`]zN\xd8ul\xc5X\xb9 #X\xc1W_\xd3*\x03P\x87\x98\x00\xa8\xe8\n\x96\xe3\xe5\x8b\xd7+\xaeq\x8bx7\x95u\xc5\xc3$j\xb2q\x1b\x9a\x8c\xcb\xb8\xbe\x02\x00\x00\x00\x9a?\x95s5\v:\xa20\v\x1f*}%\x9aB\xeb\xcd\xb9S6\xaaM\x83\x9d\x9c[\xa2A\f\x00\x00\x00\x00\x00\x00\x9cD\x16\x90\xf6[\xb9\xf3\x91\x91\x15\xd1\x9aD\x8bW\xde\x9c~\xc8\xb0r=\xd8\xd17k.\xbe\xe96W|\\S)af,\x88 \xd8\x1bY#\x84}F*\x14\x92/\x9dh!\x1ab\xca\xaa\x8a\xf4q\xb9\xde\x00\x00\x00\x00\x00\x00\xc0\xa9\x96:\xe5\x8chq\x8cB>\xc1\xaez\x1a\'\xa5\xc0\xca\x06Yc\xf8\xa2\x9cu.\xff\xcb\xca\xfd'}], 0xa, "521299a432289bea0a363e238732fea53f5db534deca9d0418026c1f265e3df3ced185b5cd8ab88f35d292428abfb13f16b96ea93fd0551e1d4f7b79160e9e98cd9a001d5f42d3fb166c612fe4ca8a"}, 0x12f) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) pselect6(0x40, &(0x7f0000000a80)={0x5, 0x25b7edb3, 0x0, 0x4, 0x6, 0x1, 0xfffffffffffffffa, 0x1}, &(0x7f0000000ac0)={0xc, 0x9, 0x2dd6, 0x800, 0xc, 0x10001, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x2, 0x9120, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x26}, 0x80, 0x40, 0x5, 0x1ff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="c4c16d1539f2360f01b803000000c4e279244718660f3a6314a92cc4c288f5b96d4f3641b93c0a00000f3266b83b008ec0f30f00dc66ba610066ed0f013a", 0x3e}], 0x1, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010300040000000000000a108400030300010000000014000200ff0200000000000000000000000000011400010000000000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x8400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) dup(r8) 4.441263226s ago: executing program 1 (id=4785): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000097ffffff000000000007"], 0x18}}], 0x2, 0x4000080) 4.255532642s ago: executing program 1 (id=4787): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64) eventfd2(0x0, 0x800) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 32) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$isdn(0x22, 0x3, 0x2) sendmsg(r2, &(0x7f00000001c0)={0x0, 0xfffffffd, &(0x7f0000000200)=[{&(0x7f0000000100)="39a835350000000000bc2e7e02705c66e6079d8acccdce7f00"/34, 0x22}], 0x1, 0x0, 0x0, 0x2c}, 0x0) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0xef97924dfeb2ce30, 0x18}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0}) 4.084567299s ago: executing program 5 (id=4788): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x4, 0x400008}) 3.992424629s ago: executing program 5 (id=4790): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x7f7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) ioprio_set$pid(0x1, r0, 0x4007) 3.616234424s ago: executing program 8 (id=4792): r0 = syz_open_dev$video(0x0, 0x3, 0x2000) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x1e6, &(0x7f0000000840)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, "eee9e1", 0x1b0, 0x32, 0x1, @private1, @mcast2, {[@dstopts={0x62, 0xa, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x19}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8}, @pad1, @generic={0x2, 0x24, "916698dc3ab6ac39b5fb9347c210651092b20d5775d1424d4f2c18815eb3ff140c617972"}, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0x16, 0x0, 0x1, 0x0, 0x0, 0xd, 0x65}, @fragment={0x88, 0x0, 0x7, 0x0, 0x0, 0x1a, 0x66}, @srh={0x87, 0x8, 0x4, 0x4, 0x70, 0x58, 0xb, [@empty, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private1]}], "d83d2d5b3d488b22a71357895f1fc249b9c7f5cc2ce9c72c1b2b2c294e099a1b2a69c66d61d9b53536ceb4cac47e806a43664962b1d5925eb991df1051af15e6907c981326a1b68c36e68ee6952ca7f140b3756fd610174414a2a67cc8da800e1a645ff226938e63d2069c1244c1881918c502cf9b898772cca9fdae7b516cea644468a462d909e2dd9cf2294196d17bbd3bc38fae5686f6793b0b8a92972524c9f554c6f5761c86b5f80bf9c98ff83ffe5a32d3367ef0c3081278c1804ab55d05d2881f2975a5ab0d2f89f4956f577873f0faa6a1d7c723c7cf1e873a9ff83cacc659aecf4f27e65688273c83e693b00dff412573c7d009"}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x500, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) 3.538238429s ago: executing program 3 (id=4793): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000014) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000700)=ANY=[@ANYBLOB='1-'], 0x31) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x2c}}, 0x0) r8 = socket$kcm(0x21, 0x2, 0xa) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r9, 0x8994, 0x0) sendmsg$kcm(r8, 0x0, 0xfc40) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 3.448868863s ago: executing program 8 (id=4794): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x58}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 3.196754988s ago: executing program 1 (id=4795): r0 = syz_open_dev$dri(&(0x7f0000000300), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000400)=[r3], 0x1, r3, r4, 0x2, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000ddff00000caa000000090000000000000004b427180010"}}) 2.807778987s ago: executing program 1 (id=4796): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="08800400145d020005002700020000001400350064766d7270310c960000000000000000e32854bf05f6b27697ef37ff98efeaa7cb0d5df4b3866ce2a586c580d21b850004d7d9d46bcc288f91cb9bc6cd7a9f9839f55057e813f8b54987a61115d28ea523895a9ebe8976f08437a9811f031991a471fbad448d16cbf2766a427811299983378426df0dd9ebf70dd3d63af27050781e6d1457500fe3c3a44be0cce377c2a6416e15006d6a661ee3d792f44d1e50620a67b176296119ae1c37ec3c32c31132f868d2f88861c24acc5def8021d5c7a5c0f77570efb4b01a121b0244a9783b94d33e15bce1127936277dfb2dc2dfb6"], 0x3c}, 0x1, 0x0, 0x0, 0x14044080}, 0x4000008) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x12f281) ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x98, &(0x7f0000000500)={0x9, 0xfffffffffffffffb, 0x8000000e}}) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) (async, rerun: 32) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, 0x0, 0x54}) (async, rerun: 32) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000290000002400001173988d5399ede141bc3400000000000000000000000000000b258e10d318589d221387229e20b7ebc577dadee20e46ed696b2ce809c3b5229d55be"], 0x30}}], 0x1, 0x810) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x468fe4e8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9}]}}]}, 0x40}}, 0x4048000) (async) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="650f340f3566b842000f00d8b805000000b9a0a800000f01c13e0f07d01f0f0120670f01c2f2360f217a0f07", 0x2c}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) truncate(&(0x7f0000000040)='./file0\x00', 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) inotify_init() 2.740824335s ago: executing program 5 (id=4797): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f00000010c0)=[{{&(0x7f0000000640)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e24, 0x7f, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000c00)=[@rthdr={{0x18, 0x29, 0x39, {0x3b, 0x0, 0x2, 0x3}}}], 0x18}, 0xb000000}], 0x2, 0x0) 2.641061223s ago: executing program 5 (id=4798): ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0x0, &(0x7f0000000100)={0x7, 0x8001, 0x1, 0x4}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000001c0)={'lo\x00', @random="01320136b1ff"}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') splice(0xffffffffffffffff, &(0x7f0000000200)=0x3, r4, &(0x7f0000000340)=0x8000, 0x1, 0x7) sendmsg$unix(r3, &(0x7f0000000400)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000002640)="1d49e9b44fee540ddb498cc2d0015cad1a0a3ffbbf8c4ddd4006dbf372b53e4772e842e65a70bb3c75f5293c52de9fc724faa6239c7af436802e95808bee100063ff21445ba2e1a191f8c8edfb2f3e0f13618d9cc3e0fa6bc665701f29bb41cac1f4b47846b066de4335ddb20f46b7914565", 0x72}, {0x0}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="140000", @ANYRES32=r4, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1800000001", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r1, @ANYRES32=0x0], 0x70, 0xc000}, 0x840) read$FUSE(r4, &(0x7f0000000600)={0x2020}, 0x2020) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) r6 = syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) write$UHID_INPUT2(r0, &(0x7f00000000c0)={0xc, {0x5, "2ba438f817"}}, 0xb) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000040)={0x5, {"4e068be8035430cf8aa115d0d8d0f21c", "af86e7d62fdce0b68c2a7502b5b00c9f", "fad16f5a00"}, 0xe, 0x5}) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 2.630070467s ago: executing program 8 (id=4799): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000020c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYRES16], 0x18}, 0x97ff}], 0x2, 0x0) 2.205211456s ago: executing program 1 (id=4800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"/292], 0x98}}, 0x0) mmap$binder(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x3) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x4c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2b}, @NFTA_SET_USERDATA={0x25, 0xd, 0x1, 0x0, "844c4e3146b61aa0778cf166f96c1db2638f746dc37402298b6131ab2a26e0de83"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x20004810}, 0x460c4) 2.068801253s ago: executing program 8 (id=4801): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote, 0x0, 0xb000000}, 0x80, 0x0}, 0x0) 1.980292374s ago: executing program 6 (id=4802): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d34, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x10, 0x38, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0x68, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0x6bf}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x4, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0x3, 0xff}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x6, 0x44, 0xbb, 0x0, 0x4}, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00'], 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44e}}]}) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000049a86fa55b1d1ead7375fad38d27193d5e30eb2aaa75d89aafb472eb0a778407", @ANYRES16=r4, @ANYBLOB="000227bd7000fedbdf250100000000000000014100000018001700000014000000017564703a73797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000800)="f30f09b893000f00d8360f00916400baf80c66b82eb8b28a66efbafc0cb8609fef660fe8d566b80500000066b9000000000f01c10fc7b90a0264640fc4c65e660f3804da0f01df", 0x47}], 0x1, 0x7c, 0x0, 0x0) bpf$PROG_LOAD(0x21, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x90) (async) r5 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xf0, 0xd0, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x40, 0xfe, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xe8, 0x2, 0x10}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x5c, 0x0, 0x1, 0x40, 0x2}, 0x13, &(0x7f0000000380)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x8, 0x400}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xf, 0x1ff}]}, 0x5, [{0x20, &(0x7f00000003c0)=@string={0x20, 0x3, "3205c9b8453c8ffb5c002adb45c2193ae69f7ecb57d0c1f3ac1e88fb2904"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x422}}, {0xe4, &(0x7f0000000540)=@string={0xe4, 0x3, "c3201f337cdee545ff756dcb14b033a51d5e86d4b8f5662f58bf81f9942ee53c30e6ab4804fdcd7a23c0b2f887e11bf759dc0d5a9d541c35c00bea3cbf8a7b62bc6fb2418df8b859fc81f86bd93148a70fa786786a23335cf70ceafa97c536d8c6fb10c21e00397921af5dea4ce9fb4e5f5b9d89f35119d9877745166abcf2ff477d0d5da11aaa109b3c8e1f6d4cb6e097b078e83e0d407c700e46b3cb7118616e90d4f83a8b6cbc8edfd19dd024377927974ce7e2dfa66e4754bfa74b74e3aaad9f43e834a12a069c7ef25f5fe85f93e87ed36576fb546e668ef70f52d6afb8f535"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x40e}}]}) syz_usb_control_io$printer(r5, &(0x7f0000000d00)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="31cead1bbf44829b700e684617454df672e887a346b63082d655a0ff4711ed40da"], 0x0}, 0x0) (async, rerun: 32) socket(0x4, 0x80000, 0x5) (rerun: 32) 1.94694208s ago: executing program 8 (id=4803): unshare(0x6a040000) syz_usb_connect(0x5, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b010203010902"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b000000018000100000000000000000002"], 0xb0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100fffffffd000000000000000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 1.662895298s ago: executing program 3 (id=4804): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[], 0x104}}, 0x4) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c80002"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtfilter={0x790, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xffff}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x754, 0x2, [@TCA_FW_ACT={0x670, 0x4, [@m_police={0x638, 0x8, 0x0, 0x0, {{0xb}, {0x4}, {0x60b, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x34, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0xb, 0x6, "093d4b88e14ab5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x8d37}, @TCA_FW_ACT={0xc0, 0x4, [@m_connmark={0x64, 0x1d, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xffff0000, 0xc24ba5996f978a81, 0x10000, 0x3}, 0x5}}]}, {0x17, 0x6, "ea70ab0e1f1b0e013c5fe5229718e0677fa6fb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x58, 0x8, 0x0, 0x0, {{0xd}, {0xfffffffffffffd8d, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x0, 0x1, {{0x9, 0x2ca0, 0x2, 0xfffffffc, 0x2}, 0x9}}]}, {0x26, 0x6, "82fdc54105578b90de160f075541cbf91b45474a4bf836c9297311734d725b2d77c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xffe0}}, @TCA_FW_MASK={0x8, 0x5, 0x100}, @TCA_FW_MASK={0x8, 0x5, 0x6}]}}]}, 0x790}, 0x1, 0x4000000}, 0x0) 989.34315ms ago: executing program 1 (id=4805): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x7fd, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) unshare(0x2000000) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x5, &(0x7f00000005c0)=""/219}) r4 = io_uring_setup(0x1bfb, &(0x7f0000000040)={0x0, 0x970, 0x200, 0x0, 0x396, 0x0, r2}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x3f}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 919.940522ms ago: executing program 6 (id=4806): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) openat$binderfs(0xffffff9c, 0x0, 0x802, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000317000/0x2000)=nil, &(0x7f00004fe000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ad3000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4008804) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc9}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 8 (id=4807): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f00000003c0)=""/63, 0x3f}], 0x4}, 0xfffffffd}], 0x2, 0x10100, 0x0) kernel console output (not intermixed with test programs): tor 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1026.568179][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1026.578599][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1026.588204][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1026.608535][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1026.618140][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1026.626172][T19689] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1026.640440][T14091] Dev loop4: unable to read RDB block 0 [ 1026.646511][T14091] loop4: unable to read partition table [ 1026.652898][T19689] usb 7-1: device descriptor read/8, error -71 [ 1026.675202][T14091] loop4: partition table beyond EOD, truncated [ 1026.686788][T20073] ldm_validate_partition_table(): Disk read failed. [ 1026.693692][T19685] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1026.711402][T20073] Dev loop4: unable to read RDB block 0 [ 1026.736877][T20073] loop4: unable to read partition table [ 1026.758794][T20073] loop4: partition table beyond EOD, truncated [ 1026.770879][T19689] usb usb7-port1: unable to enumerate USB device [ 1026.787573][T20073] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1026.864863][T19685] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1026.886638][T19685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.906092][T19685] usb 2-1: Product: syz [ 1026.915165][T19685] usb 2-1: Manufacturer: syz [ 1026.924016][T19685] usb 2-1: SerialNumber: syz [ 1027.064642][T20081] netlink: 7 bytes leftover after parsing attributes in process `syz.8.4298'. [ 1027.074528][T20081] netlink: 7 bytes leftover after parsing attributes in process `syz.8.4298'. [ 1027.128243][T19689] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1027.278582][T19689] usb 4-1: device descriptor read/64, error -71 [ 1027.524720][T19685] rtl8150 2-1:1.0: couldn't reset the device [ 1027.548010][T19685] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1027.573624][T19685] usb 2-1: USB disconnect, device number 121 [ 1027.579930][T19689] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1027.637471][T20087] netlink: 'syz.5.4299': attribute type 2 has an invalid length. [ 1027.650759][T20087] netlink: 'syz.5.4299': attribute type 2 has an invalid length. [ 1027.728692][T19689] usb 4-1: device descriptor read/64, error -71 [ 1027.832207][T20091] syz.1.4301 (20091) used obsolete PPPIOCDETACH ioctl [ 1027.839888][T19689] usb usb4-port1: attempt power cycle [ 1028.098634][T19685] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1028.578661][T19685] usb 2-1: Using ep0 maxpacket: 32 [ 1028.585788][T19685] usb 2-1: config 0 has an invalid interface number: 167 but max is 0 [ 1028.596926][T19685] usb 2-1: config 0 has no interface number 0 [ 1028.603171][T19689] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1028.611818][T19685] usb 2-1: config 0 interface 167 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 1028.622085][T19685] usb 2-1: config 0 interface 167 has no altsetting 0 [ 1028.629905][T19689] usb 4-1: device descriptor read/8, error -71 [ 1028.638197][T19685] usb 2-1: New USB device found, idVendor=07ca, idProduct=b808, bcdDevice=db.cd [ 1028.647665][T19685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.655816][T19685] usb 2-1: Product: syz [ 1028.660239][T19685] usb 2-1: Manufacturer: syz [ 1028.664919][T19685] usb 2-1: SerialNumber: syz [ 1028.679180][T19685] usb 2-1: config 0 descriptor?? [ 1028.687237][T20091] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1028.798609][T19698] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1028.879083][T19689] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1028.907935][T19689] usb 4-1: device descriptor read/8, error -71 [ 1028.915946][T19685] dvb-usb: found a 'AVerMedia AVerTV DVB-T Volar' in cold state, will try to load a firmware [ 1028.933486][T19685] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1028.945277][T19685] dib0700: firmware download failed at 7 with -71 [ 1028.948650][T19698] usb 9-1: Using ep0 maxpacket: 32 [ 1028.999770][T19685] usb 2-1: USB disconnect, device number 122 [ 1029.011094][T19698] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1029.019905][T19698] usb 9-1: config 0 has no interface number 0 [ 1029.032120][T19698] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.049039][T19689] usb usb4-port1: unable to enumerate USB device [ 1029.053280][T19698] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.074644][T19698] usb 9-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1029.088355][T19698] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.112681][T19698] usb 9-1: config 0 descriptor?? [ 1029.676098][T20114] loop4: detected capacity change from 0 to 7 [ 1029.685179][T20114] ldm_validate_partition_table(): Disk read failed. [ 1029.692799][T20114] Dev loop4: unable to read RDB block 0 [ 1029.709995][T20114] loop4: unable to read partition table [ 1029.715890][T20114] loop4: partition table beyond EOD, truncated [ 1029.722165][T20114] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1029.915028][T20143] syzkaller0: entered promiscuous mode [ 1029.920615][T20143] syzkaller0: entered allmulticast mode [ 1030.022694][T20145] veth1_vlan: left allmulticast mode [ 1030.138667][T19689] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1030.166703][T20154] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4317'. [ 1030.318635][T19689] usb 2-1: Using ep0 maxpacket: 16 [ 1030.334176][T19689] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1030.352016][T19689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1030.375455][T19689] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1030.392743][T19689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.403302][T19689] usb 2-1: Product: syz [ 1030.407502][T19689] usb 2-1: Manufacturer: syz [ 1030.418570][T19689] usb 2-1: SerialNumber: syz [ 1030.435676][T19689] usb 2-1: config 0 descriptor?? [ 1030.451813][T19689] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1030.458714][T11695] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1030.461236][T19689] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1030.638614][T11695] usb 4-1: Using ep0 maxpacket: 8 [ 1030.647465][T11695] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 1030.675365][T11695] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.694030][T11695] usb 4-1: config 0 has no interface number 0 [ 1030.701202][T11695] usb 4-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1030.715866][T11695] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1030.729067][T20167] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4323'. [ 1030.732293][T11695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.756995][T11695] usb 4-1: config 0 descriptor?? [ 1030.807580][T20167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4323'. [ 1031.008959][T19689] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1031.021944][T19689] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1031.055774][T19685] usb 4-1: USB disconnect, device number 31 [ 1031.072498][T19689] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1031.081667][T19689] em28xx 2-1:0.0: No AC97 audio processor [ 1031.127196][T19689] usb 2-1: USB disconnect, device number 123 [ 1031.160216][T19689] em28xx 2-1:0.0: Disconnecting em28xx [ 1031.174581][T19689] em28xx 2-1:0.0: Freeing device [ 1031.323370][T20186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4330'. [ 1031.363035][T11695] usb 9-1: USB disconnect, device number 18 [ 1031.621447][T20197] netlink: 'syz.5.4329': attribute type 2 has an invalid length. [ 1031.658744][T20197] netlink: 'syz.5.4329': attribute type 2 has an invalid length. [ 1031.779184][T19689] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1031.935254][T20213] syzkaller0: entered promiscuous mode [ 1031.941840][T20213] syzkaller0: entered allmulticast mode [ 1031.958637][T19689] usb 2-1: Using ep0 maxpacket: 16 [ 1031.967773][T19689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.980250][T19689] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1032.002536][T19689] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 1032.012574][T19689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.023587][T19689] usb 2-1: config 0 descriptor?? [ 1032.048656][T19685] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1032.218828][T19685] usb 4-1: Using ep0 maxpacket: 16 [ 1032.226947][T19685] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.237569][T19685] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1032.253223][T19685] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1032.262523][T19685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.270644][T19685] usb 4-1: Product: syz [ 1032.275049][T19685] usb 4-1: Manufacturer: syz [ 1032.279735][T19685] usb 4-1: SerialNumber: syz [ 1032.494059][T19685] usb 4-1: 0:2 : does not exist [ 1032.496599][T20193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.511230][T20193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.526101][T19689] hid_parser_main: 4005 callbacks suppressed [ 1032.526125][T19689] pantherlord 0003:0810:0002.001F: unknown main item tag 0x0 [ 1032.555274][T19685] usb 4-1: USB disconnect, device number 32 [ 1032.561779][T19689] pantherlord 0003:0810:0002.001F: unknown main item tag 0x0 [ 1032.572901][T19689] pantherlord 0003:0810:0002.001F: unknown main item tag 0x0 [ 1032.584541][T19689] pantherlord 0003:0810:0002.001F: unknown main item tag 0x0 [ 1032.598702][T19689] pantherlord 0003:0810:0002.001F: unknown main item tag 0x0 [ 1032.606207][T19689] pantherlord 0003:0810:0002.001F: unknown main item tag 0x0 [ 1032.616138][T19689] pantherlord 0003:0810:0002.001F: unknown main item tag 0x0 [ 1032.624102][T19689] pantherlord 0003:0810:0002.001F: unknown main item tag 0x1 [ 1032.632058][T19689] pantherlord 0003:0810:0002.001F: unknown main item tag 0x1 [ 1032.639940][T19689] pantherlord 0003:0810:0002.001F: unknown main item tag 0x7 [ 1032.647376][T19689] pantherlord 0003:0810:0002.001F: unexpected long global item [ 1032.655707][T19689] pantherlord 0003:0810:0002.001F: parse failed [ 1032.662073][T19689] pantherlord 0003:0810:0002.001F: probe with driver pantherlord failed with error -22 [ 1032.882324][T11695] usb 2-1: USB disconnect, device number 124 [ 1032.993210][T20222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4341'. [ 1033.120238][T20226] FAULT_INJECTION: forcing a failure. [ 1033.120238][T20226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.133618][T20226] CPU: 1 UID: 0 PID: 20226 Comm: syz.3.4344 Tainted: G L syzkaller #0 PREEMPT(full) [ 1033.133648][T20226] Tainted: [L]=SOFTLOCKUP [ 1033.133655][T20226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1033.133664][T20226] Call Trace: [ 1033.133671][T20226] [ 1033.133679][T20226] dump_stack_lvl+0xe8/0x150 [ 1033.133710][T20226] should_fail_ex+0x412/0x560 [ 1033.133741][T20226] _copy_from_user+0x2d/0xb0 [ 1033.133763][T20226] ___sys_sendmsg+0x1c6/0x360 [ 1033.133790][T20226] ? __pfx____sys_sendmsg+0x10/0x10 [ 1033.133846][T20226] __sys_sendmmsg+0x27c/0x4e0 [ 1033.133867][T20226] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1033.133884][T20226] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1033.133920][T20226] ? ksys_write+0x242/0x270 [ 1033.133938][T20226] ? __pfx_ksys_write+0x10/0x10 [ 1033.133958][T20226] __x64_sys_sendmmsg+0xa0/0xc0 [ 1033.133977][T20226] do_syscall_64+0x14d/0xf80 [ 1033.133994][T20226] ? trace_irq_disable+0x3b/0x150 [ 1033.134007][T20226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.134022][T20226] ? clear_bhb_loop+0x40/0x90 [ 1033.134039][T20226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.134053][T20226] RIP: 0033:0x7f82e799c819 [ 1033.134068][T20226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.134081][T20226] RSP: 002b:00007f82e87c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1033.134097][T20226] RAX: ffffffffffffffda RBX: 00007f82e7c15fa0 RCX: 00007f82e799c819 [ 1033.134107][T20226] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 1033.134116][T20226] RBP: 00007f82e87c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.134124][T20226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1033.134132][T20226] R13: 00007f82e7c16038 R14: 00007f82e7c15fa0 R15: 00007f82e7d3fa48 [ 1033.134154][T20226] [ 1033.717091][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4349'. [ 1034.838650][T19689] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1035.025582][T19689] usb 6-1: config 253 has an invalid interface number: 82 but max is 0 [ 1035.035827][T19689] usb 6-1: config 253 has no interface number 0 [ 1035.058360][T19689] usb 6-1: config 253 interface 82 has no altsetting 0 [ 1035.080670][T19689] usb 6-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=ec.7d [ 1035.094262][T19689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.119212][T19689] usb 6-1: Product: syz [ 1035.124776][T19689] usb 6-1: Manufacturer: syz [ 1035.141760][T19689] usb 6-1: SerialNumber: syz [ 1035.368732][T19685] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1035.368876][T20254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.390673][T20254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.407017][T19689] rtl8150 6-1:253.82: couldn't find required endpoints [ 1035.415136][T19689] rtl8150 6-1:253.82: probe with driver rtl8150 failed with error -5 [ 1035.435478][T19689] usb 6-1: USB disconnect, device number 94 [ 1035.458985][ T5902] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1035.508816][T19685] usb 4-1: device descriptor read/64, error -71 [ 1035.620498][ T5902] usb 9-1: Using ep0 maxpacket: 32 [ 1035.630434][ T5902] usb 9-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 1035.640183][ T5902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.657143][ T5902] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:16.0/input/input83 [ 1035.748793][T19685] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1035.872210][T20270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.883187][T20279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.884982][T20270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.900448][T19685] usb 4-1: device descriptor read/64, error -71 [ 1035.918851][T20279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.939170][ T5178] bcm5974 9-1:16.0: could not read from device [ 1035.948426][ T5178] bcm5974 9-1:16.0: could not read from device [ 1035.959029][ T5178] bcm5974 9-1:16.0: could not read from device [ 1035.968837][ T5902] usb 9-1: USB disconnect, device number 19 [ 1036.009153][T19685] usb usb4-port1: attempt power cycle [ 1036.308470][T20298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.334477][T20298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.359622][T19685] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1036.375959][T20298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.389762][T19685] usb 4-1: device descriptor read/8, error -71 [ 1036.391617][T20298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.538788][T19689] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1036.640479][T19685] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1036.669308][T19685] usb 4-1: device descriptor read/8, error -71 [ 1036.819184][T19685] usb usb4-port1: unable to enumerate USB device [ 1036.838628][T19689] usb 6-1: Using ep0 maxpacket: 32 [ 1036.845303][T19689] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1036.914064][T19689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.014587][T19689] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1037.088613][T19685] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 1037.112043][T20316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1037.146465][T20316] FAULT_INJECTION: forcing a failure. [ 1037.146465][T20316] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.164588][T20316] CPU: 0 UID: 0 PID: 20316 Comm: syz.1.4374 Tainted: G L syzkaller #0 PREEMPT(full) [ 1037.164621][T20316] Tainted: [L]=SOFTLOCKUP [ 1037.164625][T20316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1037.164631][T20316] Call Trace: [ 1037.164636][T20316] [ 1037.164642][T20316] dump_stack_lvl+0xe8/0x150 [ 1037.164663][T20316] should_fail_ex+0x412/0x560 [ 1037.164695][T20316] should_failslab+0xa8/0x100 [ 1037.164727][T20316] __kmalloc_noprof+0xe8/0x760 [ 1037.164750][T20316] ? tomoyo_encode+0x28b/0x550 [ 1037.164766][T20316] tomoyo_encode+0x28b/0x550 [ 1037.164779][T20316] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1037.164795][T20316] ? tomoyo_path_number_perm+0x219/0x630 [ 1037.164809][T20316] tomoyo_path_number_perm+0x246/0x630 [ 1037.164832][T20316] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1037.164860][T20316] ? __lock_acquire+0x6b5/0x2cf0 [ 1037.164894][T20316] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1037.164921][T20316] ? __fget_files+0x2a/0x420 [ 1037.164931][T20316] ? __fget_files+0x2a/0x420 [ 1037.164940][T20316] ? __fget_files+0x3a0/0x420 [ 1037.164949][T20316] ? __fget_files+0x2a/0x420 [ 1037.164959][T20316] security_file_ioctl+0xc3/0x2a0 [ 1037.164983][T20316] __se_sys_ioctl+0x47/0x170 [ 1037.165007][T20316] do_syscall_64+0x14d/0xf80 [ 1037.165030][T20316] ? trace_irq_disable+0x3b/0x150 [ 1037.165046][T20316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.165059][T20316] ? clear_bhb_loop+0x40/0x90 [ 1037.165071][T20316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.165082][T20316] RIP: 0033:0x7f3e7919c819 [ 1037.165093][T20316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.165102][T20316] RSP: 002b:00007f3e773d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1037.165115][T20316] RAX: ffffffffffffffda RBX: 00007f3e79416090 RCX: 00007f3e7919c819 [ 1037.165127][T20316] RDX: 00002000000000c0 RSI: 00000000c040aed5 RDI: 0000000000000009 [ 1037.165139][T20316] RBP: 00007f3e773d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.165150][T20316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.165161][T20316] R13: 00007f3e79416128 R14: 00007f3e79416090 R15: 00007f3e7953fa48 [ 1037.165190][T20316] [ 1037.165208][T20316] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1037.245031][T19689] gspca_nw80x: reg_w err -71 [ 1037.423165][T19685] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1037.434215][T19685] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1037.444355][T19689] nw80x 6-1:3.0: probe with driver nw80x failed with error -71 [ 1037.459359][T19685] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1037.471155][T19685] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1037.494128][T19685] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1037.505165][T19685] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1037.522402][T19689] usb 6-1: USB disconnect, device number 95 [ 1037.544200][T19685] usb 9-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1037.554474][T19685] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.592879][T19685] usb 9-1: Product: syz [ 1037.607440][T19685] usb 9-1: Manufacturer: syz [ 1037.613847][T19685] usb 9-1: SerialNumber: syz [ 1037.635260][T19685] usb 9-1: config 0 descriptor?? [ 1037.697109][T19685] ti_usb_3410_5052 9-1:0.0: TI USB 5052 2 port adapter converter detected [ 1037.706283][T19685] ti_usb_3410_5052 9-1:0.0: missing endpoints [ 1038.421055][T19689] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1038.478588][T20336] netlink: 'syz.3.4383': attribute type 61 has an invalid length. [ 1038.537606][T20336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4383'. [ 1038.580464][T19689] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1038.589890][T19689] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.610501][T19689] usb 2-1: config 0 has no interface number 0 [ 1038.625806][T19689] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1038.699617][T19689] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1038.725059][T19689] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1038.745844][T19689] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1038.764475][T19689] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1038.778147][T19689] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1038.804433][T19689] usb 2-1: Manufacturer: syz [ 1038.829100][T19689] usb 2-1: config 0 descriptor?? [ 1038.926496][T20344] random: crng reseeded on system resumption [ 1039.051325][T20328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.080309][T20328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.094756][T19689] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1039.107052][T19689] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 1039.308021][T19685] usb 2-1: USB disconnect, device number 125 [ 1039.609983][T20363] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4392'. [ 1039.676381][T11695] usb 9-1: USB disconnect, device number 20 [ 1039.740392][T20363] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4392'. [ 1039.786209][T20366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.885397][T20366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.058624][T19698] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1040.218756][T19698] usb 4-1: device descriptor read/64, error -71 [ 1040.292307][T20372] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1040.443203][T20377] netlink: 'syz.6.4391': attribute type 1 has an invalid length. [ 1040.529964][T19698] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1041.053651][T19698] usb 4-1: device descriptor read/64, error -71 [ 1041.375623][T20404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4401'. [ 1041.491979][T19698] usb usb4-port1: attempt power cycle [ 1041.548942][T20398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4398'. [ 1041.583858][T20408] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1041.901675][T20410] futex_wake_op: syz.1.4402 tries to shift op by -1; fix this program [ 1041.920699][T19698] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1041.949323][T19698] usb 4-1: device descriptor read/8, error -71 [ 1042.198648][T19698] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1042.220779][T19698] usb 4-1: device descriptor read/8, error -71 [ 1042.285912][T20419] could not allocate digest TFM handle sha512-avx2 [ 1042.325138][T20420] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1042.345810][T19698] usb usb4-port1: unable to enumerate USB device [ 1042.756435][T20438] FAULT_INJECTION: forcing a failure. [ 1042.756435][T20438] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.792527][T20438] CPU: 1 UID: 0 PID: 20438 Comm: syz.5.4414 Tainted: G L syzkaller #0 PREEMPT(full) [ 1042.792555][T20438] Tainted: [L]=SOFTLOCKUP [ 1042.792562][T20438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1042.792572][T20438] Call Trace: [ 1042.792579][T20438] [ 1042.792587][T20438] dump_stack_lvl+0xe8/0x150 [ 1042.792617][T20438] should_fail_ex+0x412/0x560 [ 1042.792647][T20438] should_failslab+0xa8/0x100 [ 1042.792670][T20438] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1042.792690][T20438] ? preempt_schedule_thunk+0x16/0x30 [ 1042.792708][T20438] ? __alloc_skb+0x1d0/0x7d0 [ 1042.792730][T20438] __alloc_skb+0x1d0/0x7d0 [ 1042.792753][T20438] netlink_sendmsg+0x5d4/0xb40 [ 1042.792779][T20438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1042.792800][T20438] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1042.792833][T20438] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1042.792857][T20438] ____sys_sendmsg+0x972/0x9f0 [ 1042.792887][T20438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1042.792918][T20438] ? import_iovec+0x73/0xa0 [ 1042.792941][T20438] ___sys_sendmsg+0x2a5/0x360 [ 1042.792967][T20438] ? __pfx____sys_sendmsg+0x10/0x10 [ 1042.793018][T20438] ? __fget_files+0x2a/0x420 [ 1042.793032][T20438] ? __fget_files+0x3a0/0x420 [ 1042.793055][T20438] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1042.793077][T20438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1042.793106][T20438] ? __pfx_ksys_write+0x10/0x10 [ 1042.793134][T20438] do_syscall_64+0x14d/0xf80 [ 1042.793156][T20438] ? trace_irq_disable+0x3b/0x150 [ 1042.793171][T20438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.793188][T20438] ? clear_bhb_loop+0x40/0x90 [ 1042.793209][T20438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.793233][T20438] RIP: 0033:0x7f5822b9c819 [ 1042.793250][T20438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.793263][T20438] RSP: 002b:00007f5823b38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1042.793281][T20438] RAX: ffffffffffffffda RBX: 00007f5822e15fa0 RCX: 00007f5822b9c819 [ 1042.793294][T20438] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1042.793305][T20438] RBP: 00007f5823b38090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.793316][T20438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.793326][T20438] R13: 00007f5822e16038 R14: 00007f5822e15fa0 R15: 00007f5822f3fa48 [ 1042.793351][T20438] [ 1043.034026][T19698] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1043.285930][T19698] usb 7-1: Using ep0 maxpacket: 8 [ 1043.308270][T20446] CUSE: info not properly terminated [ 1043.379689][T20448] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4416'. [ 1043.403300][T19698] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1043.423053][T19698] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.443321][T19698] usb 7-1: Product: syz [ 1043.447540][T19698] usb 7-1: Manufacturer: syz [ 1043.463589][T19698] usb 7-1: SerialNumber: syz [ 1043.475903][T19698] usb 7-1: config 0 descriptor?? [ 1043.730518][T19698] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1044.038623][T11695] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1044.194939][T11695] usb 9-1: Using ep0 maxpacket: 8 [ 1044.211488][T11695] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 1044.230829][T11695] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 1044.250982][T11695] usb 9-1: config 0 has no interface number 0 [ 1044.271268][T11695] usb 9-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x59, changing to 0x9 [ 1044.297816][T11695] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1044.322024][T11695] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1044.342087][T11695] usb 9-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1044.350600][T11695] usb 9-1: Product: syz [ 1044.354780][T11695] usb 9-1: Manufacturer: syz [ 1044.362825][T11695] usb 9-1: config 0 descriptor?? [ 1044.576828][T20463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.589324][T20463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.641542][T20474] syzkaller0: entered promiscuous mode [ 1044.643501][T20463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.650090][T20474] syzkaller0: entered allmulticast mode [ 1044.661351][T20463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.673321][T19685] usb 9-1: USB disconnect, device number 21 [ 1044.942655][T20479] random: crng reseeded on system resumption [ 1044.955299][T19698] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1044.981258][T19698] usb 7-1: USB disconnect, device number 27 [ 1044.999551][T20479] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4426'. [ 1045.768802][T20500] netlink: 'syz.8.4434': attribute type 4 has an invalid length. [ 1045.820501][T20507] netlink: 'syz.8.4434': attribute type 4 has an invalid length. [ 1045.901786][T20510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1045.924410][T20510] FAULT_INJECTION: forcing a failure. [ 1045.924410][T20510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1045.937987][T20510] CPU: 1 UID: 0 PID: 20510 Comm: syz.1.4437 Tainted: G L syzkaller #0 PREEMPT(full) [ 1045.938016][T20510] Tainted: [L]=SOFTLOCKUP [ 1045.938020][T20510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1045.938026][T20510] Call Trace: [ 1045.938032][T20510] [ 1045.938038][T20510] dump_stack_lvl+0xe8/0x150 [ 1045.938058][T20510] should_fail_ex+0x412/0x560 [ 1045.938077][T20510] _copy_from_user+0x2d/0xb0 [ 1045.938090][T20510] kvm_vcpu_ioctl+0x63f/0xfd0 [ 1045.938105][T20510] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1045.938114][T20510] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1045.938138][T20510] ? __fget_files+0x2a/0x420 [ 1045.938154][T20510] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1045.938169][T20510] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1045.938179][T20510] __se_sys_ioctl+0xfc/0x170 [ 1045.938193][T20510] do_syscall_64+0x14d/0xf80 [ 1045.938207][T20510] ? trace_irq_disable+0x3b/0x150 [ 1045.938217][T20510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.938227][T20510] ? clear_bhb_loop+0x40/0x90 [ 1045.938240][T20510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.938250][T20510] RIP: 0033:0x7f3e7919c819 [ 1045.938261][T20510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.938270][T20510] RSP: 002b:00007f3e773d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1045.938281][T20510] RAX: ffffffffffffffda RBX: 00007f3e79416090 RCX: 00007f3e7919c819 [ 1045.938289][T20510] RDX: 00002000000000c0 RSI: 00000000c040aed5 RDI: 0000000000000009 [ 1045.938296][T20510] RBP: 00007f3e773d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.938302][T20510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1045.938308][T20510] R13: 00007f3e79416128 R14: 00007f3e79416090 R15: 00007f3e7953fa48 [ 1045.938323][T20510] [ 1046.150810][T20513] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4438'. [ 1047.101426][T20540] netlink: 'syz.1.4449': attribute type 10 has an invalid length. [ 1047.145129][T20540] team0: Device xfrm0 is of different type [ 1047.218930][T19685] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1047.388670][T19685] usb 9-1: Using ep0 maxpacket: 8 [ 1047.403189][T19685] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 1047.419855][T19685] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 1047.439575][T19685] usb 9-1: config 0 has no interface number 0 [ 1047.455553][T19685] usb 9-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 1047.489526][T19685] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8A has invalid maxpacket 22953, setting to 64 [ 1047.506409][T19685] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1047.518387][T20555] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4454'. [ 1047.521221][T19685] usb 9-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1047.536633][T19685] usb 9-1: Product: syz [ 1047.541670][T19685] usb 9-1: Manufacturer: syz [ 1047.572179][T19685] usb 9-1: config 0 descriptor?? [ 1047.814906][T20533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.842581][T20533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.844616][T20568] FAULT_INJECTION: forcing a failure. [ 1047.844616][T20568] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.878009][T20533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.886273][T20568] CPU: 0 UID: 0 PID: 20568 Comm: syz.3.4461 Tainted: G L syzkaller #0 PREEMPT(full) [ 1047.886302][T20568] Tainted: [L]=SOFTLOCKUP [ 1047.886308][T20568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1047.886319][T20568] Call Trace: [ 1047.886328][T20568] [ 1047.886335][T20568] dump_stack_lvl+0xe8/0x150 [ 1047.886363][T20568] should_fail_ex+0x412/0x560 [ 1047.886391][T20568] should_failslab+0xa8/0x100 [ 1047.886411][T20568] ? __kernfs_new_node+0xe9/0x8e0 [ 1047.886435][T20568] kmem_cache_alloc_noprof+0x87/0x650 [ 1047.886461][T20568] __kernfs_new_node+0xe9/0x8e0 [ 1047.886490][T20568] ? __pfx___kernfs_new_node+0x10/0x10 [ 1047.886514][T20568] ? kernfs_root+0x1c/0x230 [ 1047.886544][T20568] ? kernfs_root+0x1c/0x230 [ 1047.886569][T20568] ? kernfs_root+0x1c/0x230 [ 1047.886592][T20568] ? kernfs_root+0x1c/0x230 [ 1047.886621][T20568] kernfs_new_node+0x102/0x210 [ 1047.886651][T20568] __kernfs_create_file+0x4b/0x2e0 [ 1047.886676][T20568] sysfs_add_file_mode_ns+0x238/0x300 [ 1047.886715][T20568] internal_create_group+0x673/0x1180 [ 1047.886756][T20568] ? __pfx_internal_create_group+0x10/0x10 [ 1047.886778][T20568] ? kernfs_add_one+0x477/0x5c0 [ 1047.886796][T20568] ? up_write+0x1ab/0x410 [ 1047.886817][T20568] sysfs_create_groups+0x59/0x120 [ 1047.886844][T20568] device_add_attrs+0x13b/0x5b0 [ 1047.886871][T20568] ? __pfx_device_add_attrs+0x10/0x10 [ 1047.886891][T20568] ? kobject_put+0x516/0x560 [ 1047.886920][T20568] ? device_add_class_symlinks+0x21f/0x240 [ 1047.886945][T20568] device_add+0x496/0xb70 [ 1047.886971][T20568] input_register_device+0x9d3/0x1160 [ 1047.887005][T20568] uinput_create_device+0x422/0x670 [ 1047.887035][T20568] uinput_ioctl_handler+0x417/0x14a0 [ 1047.887062][T20568] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 1047.887092][T20568] ? ksys_write+0x1fc/0x270 [ 1047.887118][T20568] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1047.887140][T20568] ? __pfx_uinput_ioctl+0x10/0x10 [ 1047.887161][T20568] __se_sys_ioctl+0xfc/0x170 [ 1047.887183][T20568] do_syscall_64+0x14d/0xf80 [ 1047.887204][T20568] ? trace_irq_disable+0x3b/0x150 [ 1047.887219][T20568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.887237][T20568] ? clear_bhb_loop+0x40/0x90 [ 1047.887258][T20568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.887275][T20568] RIP: 0033:0x7f82e799c819 [ 1047.887293][T20568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.887307][T20568] RSP: 002b:00007f82e87c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1047.887326][T20568] RAX: ffffffffffffffda RBX: 00007f82e7c15fa0 RCX: 00007f82e799c819 [ 1047.887339][T20568] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1047.887349][T20568] RBP: 00007f82e87c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.887360][T20568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1047.887370][T20568] R13: 00007f82e7c16038 R14: 00007f82e7c15fa0 R15: 00007f82e7d3fa48 [ 1047.887397][T20568] [ 1048.009350][ T9] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1048.032564][T20533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.223209][T19698] usb 9-1: USB disconnect, device number 22 [ 1048.275183][T20575] xt_NFQUEUE: number of total queues is 0 [ 1048.450052][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1048.462201][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1048.479627][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1048.504440][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1048.526257][ T9] usb 6-1: Product: syz [ 1048.541537][ T9] usb 6-1: Manufacturer: syz [ 1048.550629][ T9] usb 6-1: SerialNumber: syz [ 1048.569442][ T9] usb 6-1: config 0 descriptor?? [ 1048.591297][ T9] usb 6-1: selecting invalid altsetting 0 [ 1048.817035][T19685] usb 6-1: USB disconnect, device number 96 [ 1048.872075][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4468'. [ 1049.149988][T20594] syzkaller0: entered promiscuous mode [ 1049.155676][T20594] syzkaller0: entered allmulticast mode [ 1049.480428][ T29] audit: type=1800 audit(1775362063.340:985): pid=20586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4467" name="/" dev="fuse" ino=9 res=0 errno=0 [ 1049.540541][T19685] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1049.685743][T20597] can: request_module (can-proto-5) failed. [ 1049.705463][T20603] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4473'. [ 1049.719444][ T29] audit: type=1326 audit(1775362063.690:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20600 comm="syz.3.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e799c819 code=0x7ffc0000 [ 1049.755330][T20603] FAULT_INJECTION: forcing a failure. [ 1049.755330][T20603] name failslab, interval 1, probability 0, space 0, times 0 [ 1049.791727][ T29] audit: type=1326 audit(1775362063.720:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20600 comm="syz.3.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e799c819 code=0x7ffc0000 [ 1049.808582][T19685] usb 6-1: Using ep0 maxpacket: 32 [ 1049.814772][T20603] CPU: 0 UID: 0 PID: 20603 Comm: syz.8.4473 Tainted: G L syzkaller #0 PREEMPT(full) [ 1049.814799][T20603] Tainted: [L]=SOFTLOCKUP [ 1049.814805][T20603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1049.814816][T20603] Call Trace: [ 1049.814824][T20603] [ 1049.814832][T20603] dump_stack_lvl+0xe8/0x150 [ 1049.814862][T20603] should_fail_ex+0x412/0x560 [ 1049.814892][T20603] should_failslab+0xa8/0x100 [ 1049.814917][T20603] __kmalloc_cache_noprof+0x88/0x660 [ 1049.814937][T20603] ? nft_pernet+0x23/0x240 [ 1049.814960][T20603] ? nf_tables_commit+0x936/0xa400 [ 1049.814986][T20603] nf_tables_commit+0x936/0xa400 [ 1049.815018][T20603] ? nft_pernet+0x23/0x240 [ 1049.815046][T20603] ? nft_pernet+0x23/0x240 [ 1049.815068][T20603] ? nft_pernet+0x23/0x240 [ 1049.815094][T20603] ? nft_pernet+0x23/0x240 [ 1049.815117][T20603] ? __pfx_nf_tables_commit+0x10/0x10 [ 1049.815139][T20603] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 1049.815167][T20603] ? nft_flush_table+0x1749/0x18e0 [ 1049.815194][T20603] ? nft_pernet+0x23/0x240 [ 1049.815221][T20603] ? nf_tables_deltable+0x678/0xe80 [ 1049.815261][T20603] ? __pfx_nf_tables_deltable+0x10/0x10 [ 1049.815300][T20603] nfnetlink_rcv+0x1c1b/0x27b0 [ 1049.815353][T20603] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1049.815392][T20603] ? ref_tracker_free+0x693/0x840 [ 1049.815433][T20603] ? __netlink_deliver_tap+0x807/0x850 [ 1049.815452][T20603] ? netlink_deliver_tap+0x2e/0x1b0 [ 1049.815483][T20603] netlink_unicast+0x80f/0x9b0 [ 1049.815515][T20603] ? __pfx_netlink_unicast+0x10/0x10 [ 1049.815542][T20603] ? netlink_sendmsg+0x650/0xb40 [ 1049.815558][T20603] ? skb_put+0x11b/0x210 [ 1049.815581][T20603] netlink_sendmsg+0x813/0xb40 [ 1049.815607][T20603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1049.815629][T20603] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1049.815656][T20603] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1049.815679][T20603] ____sys_sendmsg+0x972/0x9f0 [ 1049.815708][T20603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1049.815737][T20603] ? import_iovec+0x73/0xa0 [ 1049.815760][T20603] ___sys_sendmsg+0x2a5/0x360 [ 1049.815786][T20603] ? __pfx____sys_sendmsg+0x10/0x10 [ 1049.815837][T20603] ? __fget_files+0x2a/0x420 [ 1049.815853][T20603] ? __fget_files+0x3a0/0x420 [ 1049.815878][T20603] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1049.815902][T20603] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1049.815932][T20603] ? __pfx_ksys_write+0x10/0x10 [ 1049.815961][T20603] do_syscall_64+0x14d/0xf80 [ 1049.815982][T20603] ? trace_irq_disable+0x3b/0x150 [ 1049.815997][T20603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.816016][T20603] ? clear_bhb_loop+0x40/0x90 [ 1049.816037][T20603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.816054][T20603] RIP: 0033:0x7f59f879c819 [ 1049.816072][T20603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.816085][T20603] RSP: 002b:00007f59f9641028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1049.816104][T20603] RAX: ffffffffffffffda RBX: 00007f59f8a15fa0 RCX: 00007f59f879c819 [ 1049.816115][T20603] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1049.816126][T20603] RBP: 00007f59f9641090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.816136][T20603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1049.816146][T20603] R13: 00007f59f8a16038 R14: 00007f59f8a15fa0 R15: 00007f59f8b3fa48 [ 1049.816173][T20603] [ 1049.899281][ T29] audit: type=1326 audit(1775362063.870:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20608 comm="syz.3.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e799c819 code=0x7ffc0000 [ 1049.931701][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4475'. [ 1050.184797][ T29] audit: type=1326 audit(1775362064.160:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20608 comm="syz.3.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f82e799c819 code=0x7ffc0000 [ 1050.194041][T19685] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1050.304227][T19685] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 1050.306544][ T29] audit: type=1326 audit(1775362064.160:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20608 comm="syz.3.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e799c819 code=0x7ffc0000 [ 1050.328571][T19685] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.390574][T19685] usb 6-1: Product: syz [ 1050.405743][ T29] audit: type=1326 audit(1775362064.160:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20608 comm="syz.3.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e799c819 code=0x7ffc0000 [ 1050.405707][T19685] usb 6-1: Manufacturer: 齳쌸맓썑瞻纬Ⴁ嘴븜죕쏰ㆶ᳋ང빑⿝鳌品蒀ꮥ肒躩ﱛ㶖椘⏄ọ陡댆辍裾쌈匭㚒ڼ峢볬㉫妹쀾㯊拶⧰ꝃᗏ⃳吢竀霳炰ፘ潞Բ䔃䤥㛸턑視Ꜯ斲⊤跪跑փ॥廼㖢最썀⋘鐺ꄉꩤꈥꄇ覉᮵ಀ承ꉂ簾妞ꦥݍᠿ뼨툩装␞鵫뵢賠豐砜阡᯶능✱љ血ા鍷⟪攉᱿湍⸓뢁 [ 1050.534893][T19685] usb 6-1: SerialNumber: syz [ 1050.745343][ T29] audit: type=1326 audit(1775362064.690:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20626 comm="syz.6.4484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f131af9c819 code=0x0 [ 1050.868750][T19698] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1051.038692][T19698] usb 9-1: Using ep0 maxpacket: 8 [ 1051.046234][T19698] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1051.060669][T19698] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1051.078039][T19698] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.096454][T19698] usb 9-1: Product: syz [ 1051.101613][T19698] usb 9-1: Manufacturer: syz [ 1051.106225][T19698] usb 9-1: SerialNumber: syz [ 1051.144192][T19698] usb 9-1: config 0 descriptor?? [ 1051.165442][T19698] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1051.200144][ T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1051.265416][T20641] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4488'. [ 1051.317351][T19685] usbhid 6-1:1.0: can't add hid device: -71 [ 1051.324502][T19685] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1051.369444][T19685] usb 6-1: USB disconnect, device number 97 [ 1051.371192][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.384531][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1051.401199][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.422252][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.478565][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1051.500614][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.515755][ T9] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1051.532041][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.564606][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.578765][ T9] usb 7-1: Product: syz [ 1051.588755][ T10] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1051.601198][ T9] usb 7-1: Manufacturer: syz [ 1051.667552][T20648] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4489'. [ 1051.710315][ T9] usb 7-1: SerialNumber: syz [ 1051.737344][ T9] usb 7-1: config 0 descriptor?? [ 1051.774787][T20648] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4489'. [ 1051.788791][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1051.796520][ T10] usb 2-1: config 1 interface 0 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1051.813029][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1051.833462][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1051.846994][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.865530][ T10] usb 2-1: Product: ୩妘ꘓк먘䕃㾗ṓ̃藉齤䛚첬⫋倭ᢟ㜠牕솴렎둻蔩ຂ칰麠焐ఈۊಎꕣ髂⮱ꀗᖕ᭛徠㟘婹⑑ॠ㽬瀁ཀྵꆿ斑瑷怓鍄虃꣩㣅莵ㅙﳯ둽䘛᫒梎历⩎ꃑ蚮㚋膝뜰芽髗₷饣耿昕퐍䘽䅼샒☂퐺ځ䥺欍諝白麳꩷脳͖龚쨩物呤皻涫Ṿ⦅䅌䆫捾밌㘹ᤆ孩궀峧⻴엳 [ 1051.958658][ T10] usb 2-1: Manufacturer: ю [ 1051.989703][ T10] usb 2-1: SerialNumber: င [ 1052.015193][T20642] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1052.041441][ T9] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1052.059217][T20634] tc_dump_action: action bad kind [ 1052.198610][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1052.205574][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1052.222642][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1052.252219][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1052.265994][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.284232][ T9] usb 6-1: Product: syz [ 1052.292660][ T9] usb 6-1: Manufacturer: syz [ 1052.301162][ T9] usb 6-1: SerialNumber: syz [ 1052.313304][ T9] usb 6-1: config 0 descriptor?? [ 1052.337375][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1052.356553][ T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1052.473361][T20641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4488'. [ 1052.547008][ T10] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 126 if 0 alt 10 proto 3 vid 0x0525 pid 0xA4A8 [ 1052.566913][ T10] usb 2-1: USB disconnect, device number 126 [ 1052.596585][ T10] usblp0: removed [ 1052.892904][T20657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1052.939555][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1052.949530][ T9] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1052.978188][T20658] loop7: detected capacity change from 0 to 16384 [ 1053.408590][T19689] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1053.439832][T19698] gspca_zc3xx: reg_w_i err -110 [ 1053.458637][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1053.538617][T19689] usb 2-1: device descriptor read/64, error -71 [ 1053.562673][ T9] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1053.570641][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1053.577481][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1053.584698][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1053.592343][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1053.600218][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1053.608686][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1053.616203][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1053.625538][ T10] usb 4-1: config 2 has an invalid interface number: 187 but max is 0 [ 1053.634305][ T10] usb 4-1: config 2 has no interface number 0 [ 1053.640904][ T10] usb 4-1: config 2 interface 187 altsetting 0 endpoint 0xA has invalid maxpacket 1028, setting to 1024 [ 1053.652318][ T10] usb 4-1: config 2 interface 187 altsetting 0 endpoint 0x5 has an invalid bInterval 239, changing to 11 [ 1053.666036][ T10] usb 4-1: New USB device found, idVendor=04b4, idProduct=5500, bcdDevice=2a.7c [ 1053.675406][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.683467][ T10] usb 4-1: Product: syz [ 1053.687736][ T10] usb 4-1: Manufacturer: syz [ 1053.692421][ T10] usb 4-1: SerialNumber: syz [ 1053.700527][T20664] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1053.788601][T19689] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1053.806398][T11695] usb 7-1: USB disconnect, device number 28 [ 1053.814597][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1053.824066][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1053.830705][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1053.841753][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1053.849587][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1053.874232][ T9] usb 6-1: USB disconnect, device number 98 [ 1053.921884][ T10] cypress_m8 4-1:2.187: HID->COM RS232 Adapter converter detected [ 1053.923465][T19689] usb 2-1: device descriptor read/64, error -71 [ 1053.934332][ T10] cyphidcom ttyUSB0: required endpoint is missing [ 1053.953104][ T10] usb 4-1: USB disconnect, device number 41 [ 1053.964313][ T10] cypress_m8 4-1:2.187: device disconnected [ 1054.048968][T19689] usb usb2-port1: attempt power cycle [ 1054.049263][T19698] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1054.061565][T19698] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1054.158056][T19685] usb 9-1: USB disconnect, device number 23 [ 1054.222540][T20671] syzkaller0: entered promiscuous mode [ 1054.228176][T20671] syzkaller0: entered allmulticast mode [ 1054.309372][T11695] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1054.388598][T19689] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1054.428909][T19689] usb 2-1: device descriptor read/8, error -71 [ 1054.479714][T11695] usb 7-1: Using ep0 maxpacket: 32 [ 1054.509598][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.511042][T11695] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1054.516207][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.621782][T20685] vlan3: entered promiscuous mode [ 1054.644998][T11695] usb 7-1: config 0 has no interface number 0 [ 1054.664474][T11695] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1054.678586][T19689] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1054.706442][T11695] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1054.709157][T19689] usb 2-1: device descriptor read/8, error -71 [ 1054.769903][T11695] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.793312][T11695] usb 7-1: Product: syz [ 1054.804362][T11695] usb 7-1: Manufacturer: syz [ 1054.821567][T11695] usb 7-1: SerialNumber: syz [ 1054.849899][T11695] usb 7-1: config 0 descriptor?? [ 1054.889715][T11695] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1054.899005][T19689] usb usb2-port1: unable to enumerate USB device [ 1054.927992][T11695] em28xx 7-1:0.132: Video interface 132 found: [ 1055.368818][T11695] em28xx 7-1:0.132: unknown em28xx chip ID (39) [ 1056.246529][T11695] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1056.257622][T11695] em28xx 7-1:0.132: board has no eeprom [ 1056.271703][T20706] SET target dimension over the limit! [ 1056.314307][T20708] blktrace: Concurrent blktraces are not allowed on loop4 [ 1056.383047][T20704] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4508'. [ 1056.398682][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1056.489205][T11695] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1056.518651][T11695] em28xx 7-1:0.132: analog set to bulk mode. [ 1056.543274][ T10] em28xx 7-1:0.132: Registering V4L2 extension [ 1056.593512][T20704] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4508'. [ 1056.613419][T11695] usb 7-1: USB disconnect, device number 29 [ 1056.648304][T11695] em28xx 7-1:0.132: Disconnecting em28xx [ 1057.005445][ T10] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1057.027444][ T10] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1057.115735][ T10] em28xx 7-1:0.132: No AC97 audio processor [ 1057.169904][ T10] usb 7-1: Decoder not found [ 1057.183380][ T10] em28xx 7-1:0.132: failed to create media graph [ 1057.266770][T20730] random: crng reseeded on system resumption [ 1057.279749][T20729] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4516'. [ 1057.316184][ T10] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1057.477727][ T10] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1057.504671][T11695] em28xx 7-1:0.132: Closing input extension [ 1057.544704][T11695] em28xx 7-1:0.132: Freeing device [ 1057.927133][T20753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4525'. [ 1057.948665][T19689] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 1058.041790][T20754] netlink: 'syz.1.4515': attribute type 1 has an invalid length. [ 1058.104636][T20758] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1058.117118][T20753] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4525'. [ 1058.198618][T19689] usb 4-1: device descriptor read/64, error -71 [ 1058.468721][T19689] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 1058.619735][T19689] usb 4-1: device descriptor read/64, error -71 [ 1058.729173][T19689] usb usb4-port1: attempt power cycle [ 1059.002064][T11695] usb 6-1: new full-speed USB device number 99 using dummy_hcd [ 1059.012748][T20775] netlink: 'syz.6.4530': attribute type 1 has an invalid length. [ 1059.089674][T19689] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 1059.117157][T19689] usb 4-1: device descriptor read/8, error -71 [ 1059.141362][T20779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4534'. [ 1059.190341][T11695] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1059.200625][T11695] usb 6-1: not running at top speed; connect to a high speed hub [ 1059.231396][T11695] usb 6-1: config 17 has an invalid interface number: 8 but max is 1 [ 1059.248857][T11695] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1059.258172][T11695] usb 6-1: config 17 has no interface number 0 [ 1059.276743][T11695] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 86, changing to 4 [ 1059.292575][T11695] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 62603, setting to 1023 [ 1059.315646][T11695] usb 6-1: config 17 interface 8 has no altsetting 0 [ 1059.368830][T19689] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 1059.379566][T11695] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1059.389175][T11695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.399914][T19689] usb 4-1: device descriptor read/8, error -71 [ 1059.408452][T11695] usb 6-1: Product: syz [ 1059.419053][T11695] usb 6-1: Manufacturer: syz [ 1059.434560][T11695] usb 6-1: SerialNumber: syz [ 1059.511990][T19689] usb usb4-port1: unable to enumerate USB device [ 1059.569396][T20789] loop4: detected capacity change from 0 to 7 [ 1059.576257][ C0] blk_print_req_error: 45 callbacks suppressed [ 1059.576276][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1059.592041][ C0] buffer_io_error: 45 callbacks suppressed [ 1059.592051][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.679594][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1059.689211][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.698528][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1059.708106][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.727999][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1059.737653][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.745953][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1059.755585][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.763871][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1059.773557][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.785678][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1059.795309][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.803214][T20789] ldm_validate_partition_table(): Disk read failed. [ 1059.852223][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1059.861881][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.871670][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1059.881289][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.892021][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1059.901697][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.920025][T20789] Dev loop4: unable to read RDB block 0 [ 1059.938924][T20789] loop4: unable to read partition table [ 1059.966382][T20789] loop4: partition table beyond EOD, truncated [ 1059.985170][T20789] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1060.280288][T11695] usb 6-1: selecting invalid altsetting 0 [ 1060.286205][T11695] usb 6-1: 8:6 : no UAC_FORMAT_TYPE desc [ 1060.292949][T11695] usb 6-1: selecting invalid altsetting 0 [ 1060.394511][T11695] usb 6-1: USB disconnect, device number 99 [ 1060.757703][T20811] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4545'. [ 1060.991485][T11695] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1061.188790][T11695] usb 2-1: Using ep0 maxpacket: 8 [ 1061.196194][T11695] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1061.204853][T11695] usb 2-1: config 179 has no interface number 0 [ 1061.215015][T11695] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1061.261639][T11695] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1061.276406][T11695] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1061.298061][T11695] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1061.328605][T11695] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1061.346559][T11695] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1061.360019][T11695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.372518][T20812] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1061.593692][T20812] tipc: Started in network mode [ 1061.598678][T20812] tipc: Node identity 4, cluster identity 4711 [ 1061.604899][T20812] tipc: Node number set to 4 [ 1061.718114][T20812] syzkaller0: entered promiscuous mode [ 1061.776686][T20835] loop4: detected capacity change from 0 to 7 [ 1061.828158][T20835] ldm_validate_partition_table(): Disk read failed. [ 1061.864299][T20835] Dev loop4: unable to read RDB block 0 [ 1061.906933][T20835] loop4: unable to read partition table [ 1061.936476][T20835] loop4: partition table beyond EOD, truncated [ 1061.964736][T20835] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1062.476330][T20843] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1062.727598][T19689] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1062.918615][T19701] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1062.934229][T19689] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1062.945799][T19689] usb 7-1: not running at top speed; connect to a high speed hub [ 1062.958107][T19689] usb 7-1: config 0 has no interfaces? [ 1062.963928][T19685] usb 6-1: new low-speed USB device number 100 using dummy_hcd [ 1062.974884][T19689] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=fa.40 [ 1062.998563][T19689] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.008006][T19689] usb 7-1: Product: syz [ 1063.016288][T19689] usb 7-1: Manufacturer: syz [ 1063.034757][T19689] usb 7-1: SerialNumber: syz [ 1063.078434][T19689] usb 7-1: config 0 descriptor?? [ 1063.089068][T19701] usb 9-1: Using ep0 maxpacket: 8 [ 1063.112600][T19685] usb 6-1: device descriptor read/64, error -71 [ 1063.222451][T19701] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.249749][T19701] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1063.294500][T19701] usb 9-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1063.304534][T19701] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.313958][T19701] usb 9-1: Product: syz [ 1063.318148][T19701] usb 9-1: Manufacturer: syz [ 1063.331733][T19692] usb 7-1: USB disconnect, device number 30 [ 1063.345124][T19701] usb 9-1: SerialNumber: syz [ 1063.378713][T19685] usb 6-1: new low-speed USB device number 101 using dummy_hcd [ 1063.388949][T19701] usb 9-1: config 0 descriptor?? [ 1063.524300][T19685] usb 6-1: device descriptor read/64, error -71 [ 1063.640645][T19685] usb usb6-port1: attempt power cycle [ 1063.993347][T19685] usb 6-1: new low-speed USB device number 102 using dummy_hcd [ 1064.021094][T19685] usb 6-1: device descriptor read/8, error -71 [ 1064.221280][T20851] fuse: Bad value for 'fd' [ 1064.233454][T20850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1064.281307][T19685] usb 6-1: new low-speed USB device number 103 using dummy_hcd [ 1064.300576][T20851] netlink: 'syz.6.4559': attribute type 61 has an invalid length. [ 1064.332924][T19685] usb 6-1: device descriptor read/8, error -71 [ 1064.465991][T19685] usb usb6-port1: unable to enumerate USB device [ 1065.430107][T20839] tc_dump_action: action bad kind [ 1065.464359][T19685] usb 2-1: USB disconnect, device number 5 [ 1065.464432][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1065.478683][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 1065.596349][T19698] usb 9-1: USB disconnect, device number 24 [ 1065.777043][T11695] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1065.938630][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1065.967367][T11695] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1065.990471][T11695] usb 4-1: config 3 has an invalid interface number: 8 but max is 3 [ 1066.033816][T11695] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.047522][T11695] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 1066.056912][T11695] usb 4-1: config 3 has no interface number 0 [ 1066.064922][T11695] usb 4-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 1066.086882][T11695] usb 4-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1066.123532][T11695] usb 4-1: config 3 interface 8 has no altsetting 0 [ 1066.144259][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1066.167943][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 1066.179215][T11695] usb 4-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 1066.199945][T20880] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4570'. [ 1066.211035][ T29] audit: type=1326 audit(1775362080.180:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20874 comm="syz.6.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131af9c819 code=0x7ffc0000 [ 1066.233768][T11695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.249955][T11695] usb 4-1: Product: syz [ 1066.260127][ T10] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1066.276779][T11695] usb 4-1: Manufacturer: syz [ 1066.285642][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1066.292943][T11695] usb 4-1: SerialNumber: syz [ 1066.304318][ T29] audit: type=1326 audit(1775362080.220:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20874 comm="syz.6.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f131af9c819 code=0x7ffc0000 [ 1066.346453][T20881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4569'. [ 1066.424728][ T10] usb 2-1: New USB device found, idVendor=18d1, idProduct=503d, bcdDevice= 0.40 [ 1066.438448][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.467454][ T29] audit: type=1326 audit(1775362080.260:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20874 comm="syz.6.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131af9c819 code=0x7ffc0000 [ 1066.526422][ T10] usb 2-1: Product: 㰊 [ 1066.533583][ T10] usb 2-1: Manufacturer: ⺿닺↥ௐ鴻覊⻺◿ [ 1066.570063][ T10] usb 2-1: SerialNumber: 뤂됄一 [ 1066.602482][ T29] audit: type=1326 audit(1775362080.260:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20874 comm="syz.6.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131af9c819 code=0x7ffc0000 [ 1066.615201][T20862] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1066.650990][T11695] appledisplay 4-1:3.8: Error while getting initial brightness: -71 [ 1066.699326][T11695] appledisplay 4-1:3.8: probe with driver appledisplay failed with error -71 [ 1066.714618][T20885] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1066.720314][ T29] audit: type=1326 audit(1775362080.310:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20874 comm="syz.6.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f131af9e087 code=0x7ffc0000 [ 1066.766150][T11695] usb 4-1: USB disconnect, device number 46 [ 1066.803346][ T29] audit: type=1326 audit(1775362080.310:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20874 comm="syz.6.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f131af5d04e code=0x7ffc0000 [ 1066.840803][ T29] audit: type=1326 audit(1775362080.310:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20874 comm="syz.6.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f131af5d04e code=0x7ffc0000 [ 1066.943427][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 1066.950066][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1066.964361][ T10] usb 2-1: USB disconnect, device number 6 [ 1066.975926][T20892] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1067.026923][ T29] audit: type=1326 audit(1775362080.310:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20874 comm="syz.6.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f131af5d04e code=0x7ffc0000 [ 1067.076934][ T29] audit: type=1326 audit(1775362080.310:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20874 comm="syz.6.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f131af5d04e code=0x7ffc0000 [ 1067.159657][ T29] audit: type=1326 audit(1775362080.310:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20874 comm="syz.6.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131af9c819 code=0x7ffc0000 [ 1067.298681][ T5902] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1067.559814][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 1067.577007][ T5902] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.645434][ T5902] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1067.799171][ T5902] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1067.869196][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.921447][ T5902] usb 6-1: Product: syz [ 1067.925636][ T5902] usb 6-1: Manufacturer: syz [ 1067.980751][ T5902] usb 6-1: SerialNumber: syz [ 1068.008614][T19685] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1068.014524][ T5902] usb 6-1: config 0 descriptor?? [ 1068.187594][T19685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.200139][T19685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.210830][T19685] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1068.223996][T19685] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1068.242892][T19685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.255296][T19685] usb 4-1: config 0 descriptor?? [ 1068.410929][T20889] tc_dump_action: action bad kind [ 1068.504725][T19685] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1069.061450][T19685] usb 4-1: USB disconnect, device number 47 [ 1069.785984][ T5902] usb 6-1: USB disconnect, device number 104 [ 1071.908665][T12752] Bluetooth: hci1: command 0x0406 tx timeout [ 1090.467874][T20138] bond0 (unregistering): Released all slaves [ 1090.477287][T20138] bond1 (unregistering): Released all slaves [ 1090.550471][T20138] !: left promiscuous mode [ 1090.619594][T20138] tipc: Left network mode [ 1115.912453][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.918905][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.028781][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1136.108364][T20913] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4579'. [ 1136.110230][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4581'. [ 1136.428753][T20940] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4586'. [ 1136.504595][T20940] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4586'. [ 1137.029946][T20954] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1137.058770][T19685] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1137.273786][T19685] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1137.286289][T19685] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1137.309357][ T5902] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1137.385328][T19685] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1137.413040][T20958] xt_NFQUEUE: number of total queues is 0 [ 1137.427673][T19685] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1137.447161][T19685] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.467039][T19685] usb 9-1: Product: syz [ 1137.500558][T19685] usb 9-1: Manufacturer: syz [ 1137.510449][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 1137.518737][T19685] usb 9-1: SerialNumber: syz [ 1137.554725][T20942] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1137.600677][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.641305][ T5902] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1137.693342][ T5902] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1137.718924][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.753051][ T5902] usb 2-1: Product: syz [ 1137.767550][ T5902] usb 2-1: Manufacturer: syz [ 1137.772672][T20942] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1137.780722][ T5902] usb 2-1: SerialNumber: syz [ 1137.839941][ T5902] usb 2-1: config 0 descriptor?? [ 1138.089465][T20953] tc_dump_action: action bad kind [ 1138.370501][T20976] QAT: failed to copy from user. [ 1138.446260][T20942] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1138.665996][T19685] cdc_ncm 9-1:1.0: bind() failure [ 1138.671691][T20942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.688559][T19685] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1138.697148][T20942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.712079][T19685] cdc_ncm 9-1:1.1: bind() failure [ 1138.935432][T19685] usb 9-1: USB disconnect, device number 25 [ 1139.721125][T19685] usb 2-1: USB disconnect, device number 7 [ 1139.768598][ T5902] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1139.942234][ T5902] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1139.963928][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.974722][ T5902] usb 6-1: Product: syz [ 1139.978992][ T5902] usb 6-1: Manufacturer: syz [ 1139.983638][ T5902] usb 6-1: SerialNumber: syz [ 1140.029973][ T5902] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1140.063436][T19698] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1140.265646][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 1140.265658][ T29] audit: type=1326 audit(1775362154.240:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21029 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f879c819 code=0x7ffc0000 [ 1140.350887][T11695] usb 6-1: USB disconnect, device number 105 [ 1140.413558][ T29] audit: type=1326 audit(1775362154.270:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21029 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f879c819 code=0x7ffc0000 [ 1140.451825][ T29] audit: type=1326 audit(1775362154.280:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21029 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f59f879c819 code=0x7ffc0000 [ 1140.479001][ T29] audit: type=1326 audit(1775362154.280:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21029 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f879c819 code=0x7ffc0000 [ 1140.588075][T21041] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1140.617246][ T29] audit: type=1326 audit(1775362154.280:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21029 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f879c819 code=0x7ffc0000 [ 1140.933303][T21047] syzkaller0: entered promiscuous mode [ 1140.938929][T21047] syzkaller0: entered allmulticast mode [ 1141.162611][T19698] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1141.176606][T19698] ath9k_htc: Failed to initialize the device [ 1141.192618][T11695] usb 6-1: ath9k_htc: USB layer deinitialized [ 1141.597463][T11695] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1141.822343][T11695] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1141.837426][T11695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.898649][T11695] usb 6-1: Product: syz [ 1141.902829][T11695] usb 6-1: Manufacturer: syz [ 1141.957034][T11695] usb 6-1: SerialNumber: syz [ 1141.987880][T11695] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1142.148189][T21052] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1142.210751][ T10] usb 6-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1142.227689][ T10] usb 6-1: ath9k_htc: USB layer deinitialized [ 1142.299823][T11695] usb 6-1: USB disconnect, device number 106 [ 1142.429077][T19685] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1142.579124][T19685] usb 2-1: Using ep0 maxpacket: 8 [ 1142.621401][T19685] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.642887][T19685] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1142.823370][T19685] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1142.922302][T19685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.032056][T19685] usb 2-1: Product: syz [ 1143.041883][T19685] usb 2-1: Manufacturer: syz [ 1143.046631][T19685] usb 2-1: SerialNumber: syz [ 1143.083517][T19685] usb 2-1: config 0 descriptor?? [ 1143.126656][T21081] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4621'. [ 1143.335672][T21081] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1143.423258][T21052] tc_dump_action: action bad kind [ 1144.166500][T21088] lo: entered allmulticast mode [ 1144.177539][T21088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4623'. [ 1144.253761][T21087] lo: left allmulticast mode [ 1144.590280][T21096] netlink: 'syz.3.4626': attribute type 1 has an invalid length. [ 1144.800280][T21096] bond5: entered promiscuous mode [ 1144.807929][T21096] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1144.939279][T21097] bond5: (slave bridge1): making interface the new active one [ 1144.947988][T21097] bridge1: entered promiscuous mode [ 1144.955333][T21097] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 1145.024381][T19701] usb 2-1: USB disconnect, device number 8 [ 1145.114166][T21103] netlink: 'syz.6.4627': attribute type 1 has an invalid length. [ 1145.373650][T21103] bond1: entered promiscuous mode [ 1145.383485][T21103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1145.538687][T11695] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1145.584887][T21103] bond1: (slave bridge1): making interface the new active one [ 1145.596665][T21103] bridge1: entered promiscuous mode [ 1145.634491][T21103] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1145.752538][T11695] usb 4-1: Using ep0 maxpacket: 16 [ 1145.804009][T11695] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1145.813413][T11695] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.828844][T11695] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1145.845058][T11695] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1145.854882][T11695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.865711][T11695] usb 4-1: Product: syz [ 1145.870148][T11695] usb 4-1: Manufacturer: syz [ 1145.875954][T11695] usb 4-1: SerialNumber: syz [ 1145.942030][T21114] fuse: Bad value for 'fd' [ 1146.008998][T21113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1146.322906][T11695] usb 4-1: 0:2 : does not exist [ 1146.868748][ T5902] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1147.018695][ T5902] usb 9-1: Using ep0 maxpacket: 8 [ 1147.030008][ T5902] usb 9-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 1147.039697][ T5902] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.047957][ T5902] usb 9-1: Product: syz [ 1147.053200][ T5902] usb 9-1: Manufacturer: syz [ 1147.058074][ T5902] usb 9-1: SerialNumber: syz [ 1147.208896][ T5902] usb 9-1: config 0 descriptor?? [ 1147.226157][T21138] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1147.239306][T21138] tc_dump_action: action bad kind [ 1147.270579][ T5902] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1147.322897][T21110] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4629'. [ 1147.332638][T21110] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4629'. [ 1147.348752][T21110] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4629'. [ 1147.379821][T21110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.392349][T21110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.412566][T21110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.432664][T21110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.477863][T11695] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 1147.501876][ T5902] gspca_m5602: Failed to find a sensor [ 1147.507481][ T5902] ALi m5602 9-1:0.0: ALi m5602 webcam failed [ 1147.552342][ T5902] usb 9-1: USB disconnect, device number 26 [ 1147.613894][T11695] usb 4-1: USB disconnect, device number 48 [ 1148.206935][T21153] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1149.525086][T21181] netlink: 45 bytes leftover after parsing attributes in process `syz.6.4651'. [ 1150.048649][T19701] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1150.128998][T21198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4656'. [ 1150.214418][T19701] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.225817][T19701] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1150.242355][T19701] usb 9-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 1150.251671][T19701] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.259956][T19701] usb 9-1: Product: syz [ 1150.264406][T19701] usb 9-1: Manufacturer: syz [ 1150.269344][T19701] usb 9-1: SerialNumber: syz [ 1150.289329][T19701] usb 9-1: config 0 descriptor?? [ 1150.707154][T21203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4658'. [ 1151.182019][T21209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1151.318887][T19701] usb 9-1: USB disconnect, device number 27 [ 1152.220843][ T29] audit: type=1326 audit(1775362166.200:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21227 comm="syz.3.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e799c819 code=0x7ffc0000 [ 1152.353728][ T29] audit: type=1326 audit(1775362166.200:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21227 comm="syz.3.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e799c819 code=0x7ffc0000 [ 1152.780335][T21244] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1152.891896][T21244] tc_dump_action: action bad kind [ 1152.930574][T21247] tap0: tun_chr_ioctl cmd 1074025677 [ 1152.942826][T21247] tap0: linktype set to 0 [ 1153.408622][T19692] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 1153.594922][T19692] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.608338][T21260] FAULT_INJECTION: forcing a failure. [ 1153.608338][T21260] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.622785][T21260] CPU: 1 UID: 0 PID: 21260 Comm: syz.5.4673 Tainted: G L syzkaller #0 PREEMPT(full) [ 1153.622804][T21260] Tainted: [L]=SOFTLOCKUP [ 1153.622807][T21260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1153.622814][T21260] Call Trace: [ 1153.622819][T21260] [ 1153.622824][T21260] dump_stack_lvl+0xe8/0x150 [ 1153.622845][T21260] should_fail_ex+0x412/0x560 [ 1153.622863][T21260] should_failslab+0xa8/0x100 [ 1153.622878][T21260] __kvmalloc_node_noprof+0x178/0x8a0 [ 1153.622891][T21260] ? io_alloc_cache_init+0x42/0x140 [ 1153.622905][T21260] io_alloc_cache_init+0x42/0x140 [ 1153.622916][T21260] io_rsrc_cache_init+0x26/0x50 [ 1153.622931][T21260] io_ring_ctx_alloc+0x4d9/0xc50 [ 1153.622949][T21260] io_uring_create+0x50/0x980 [ 1153.622965][T21260] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1153.622978][T21260] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1153.622996][T21260] ? __pfx_ksys_write+0x10/0x10 [ 1153.623013][T21260] do_syscall_64+0x14d/0xf80 [ 1153.623026][T21260] ? trace_irq_disable+0x3b/0x150 [ 1153.623035][T21260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.623045][T21260] ? clear_bhb_loop+0x40/0x90 [ 1153.623058][T21260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.623068][T21260] RIP: 0033:0x7f5822b9c819 [ 1153.623079][T21260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.623088][T21260] RSP: 002b:00007f5823b38028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1153.623100][T21260] RAX: ffffffffffffffda RBX: 00007f5822e15fa0 RCX: 00007f5822b9c819 [ 1153.623107][T21260] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001b7b [ 1153.623113][T21260] RBP: 00007f5823b38090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.623119][T21260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1153.623125][T21260] R13: 00007f5822e16038 R14: 00007f5822e15fa0 R15: 00007f5822f3fa48 [ 1153.623140][T21260] [ 1153.831181][T19692] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1154.007730][T19692] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 1154.069546][T19692] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1154.082098][T19692] usb 9-1: SerialNumber: syz [ 1154.200424][T19692] usb 9-1: 0:2 : does not exist [ 1154.463462][ T29] audit: type=1326 audit(1775362168.390:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21265 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7919c819 code=0x7ffc0000 [ 1154.538138][ T29] audit: type=1326 audit(1775362168.390:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21265 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3e7919c819 code=0x7ffc0000 [ 1154.640465][ T29] audit: type=1326 audit(1775362168.390:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21265 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7919c819 code=0x7ffc0000 [ 1154.753629][T19692] usb 9-1: USB disconnect, device number 28 [ 1154.769789][ T29] audit: type=1326 audit(1775362168.390:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21265 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3e7919c819 code=0x7ffc0000 [ 1154.844660][T21276] netlink: 'syz.8.4679': attribute type 10 has an invalid length. [ 1154.856087][ T29] audit: type=1326 audit(1775362168.390:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21265 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7919c819 code=0x7ffc0000 [ 1154.943192][T12752] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1154.962189][T12752] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1154.964465][ T29] audit: type=1326 audit(1775362168.390:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21265 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f3e7919c819 code=0x7ffc0000 [ 1155.006611][T12752] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1155.047312][T12752] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1155.109956][T12752] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1155.195141][ T29] audit: type=1326 audit(1775362168.390:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21265 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7919c819 code=0x7ffc0000 [ 1155.204363][T21276] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1155.226547][ T29] audit: type=1326 audit(1775362168.390:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21265 comm="syz.1.4676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f3e7919c819 code=0x7ffc0000 [ 1155.926677][T21293] random: crng reseeded on system resumption [ 1155.933534][T21282] chnl_net:caif_netlink_parms(): no params data found [ 1155.943048][T21293] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4681'. [ 1155.953270][T21292] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4682'. [ 1156.126014][T21298] bridge0: port 2(netdevsim0) entered blocking state [ 1156.136724][T21298] bridge0: port 2(netdevsim0) entered disabled state [ 1156.146478][T21298] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1156.159419][T21298] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1156.176492][T21298] bridge0: port 2(netdevsim0) entered blocking state [ 1156.183321][T21298] bridge0: port 2(netdevsim0) entered forwarding state [ 1156.336298][T21282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.381103][T21308] loop9: detected capacity change from 0 to 7 [ 1156.381869][T21282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.400800][T21308] buffer_io_error: 30 callbacks suppressed [ 1156.400819][T21308] Buffer I/O error on dev loop9, logical block 0, async page read [ 1156.401459][T21282] bridge_slave_0: entered allmulticast mode [ 1156.423857][T21308] Buffer I/O error on dev loop9, logical block 0, async page read [ 1156.424352][T21282] bridge_slave_0: entered promiscuous mode [ 1156.438163][T21308] Buffer I/O error on dev loop9, logical block 0, async page read [ 1156.506100][T21282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.536882][T21282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.545666][T21308] Buffer I/O error on dev loop9, logical block 0, async page read [ 1156.549104][T21282] bridge_slave_1: entered allmulticast mode [ 1156.575576][T21282] bridge_slave_1: entered promiscuous mode [ 1156.583959][T21308] Buffer I/O error on dev loop9, logical block 0, async page read [ 1156.600392][T21308] Buffer I/O error on dev loop9, logical block 0, async page read [ 1156.624512][T21308] Buffer I/O error on dev loop9, logical block 0, async page read [ 1156.637478][T21308] ldm_validate_partition_table(): Disk read failed. [ 1156.649709][T21308] Buffer I/O error on dev loop9, logical block 0, async page read [ 1156.664538][T21308] Buffer I/O error on dev loop9, logical block 0, async page read [ 1156.681994][T21308] Buffer I/O error on dev loop9, logical block 0, async page read [ 1156.696204][T21308] Dev loop9: unable to read RDB block 0 [ 1156.706789][T21308] loop9: unable to read partition table [ 1156.719007][T21308] loop9: partition table beyond EOD, truncated [ 1156.749473][T21282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.769955][T21315] kvm: kvm [21314]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1156.779227][T21315] kvm: kvm [21314]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1156.802624][T21282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.811106][T21308] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1156.811106][T21308] ) failed (rc=-5) [ 1156.864478][T21282] team0: Port device team_slave_0 added [ 1156.881288][T21282] team0: Port device team_slave_1 added [ 1157.036476][T21282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.044130][T21282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.075438][T21282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.097334][T21282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.130202][T21282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.165749][T21282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.188695][T12752] Bluetooth: hci5: command tx timeout [ 1157.201493][T21323] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1157.258001][T21282] hsr_slave_0: entered promiscuous mode [ 1157.264467][T21282] hsr_slave_1: entered promiscuous mode [ 1157.278191][T21282] debugfs: 'hsr0' already exists in 'hsr' [ 1157.284415][T21282] Cannot create hsr debugfs directory [ 1157.477384][T21326] netlink: 'syz.3.4692': attribute type 1 has an invalid length. [ 1157.543660][T21330] fuse: Unknown parameter 'rootm000000000000000020000' [ 1157.551743][T21330] fuse: Bad value for 'fd' [ 1157.553695][T21326] bond6: entered promiscuous mode [ 1157.565432][T21330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1157.567118][T21326] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1157.593935][T21328] bond6: (slave bridge2): making interface the new active one [ 1157.602928][T21328] bridge2: entered promiscuous mode [ 1157.610311][T21328] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 1157.756364][T21334] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4695'. [ 1157.766037][T21334] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4695'. [ 1157.818897][T19685] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1157.930905][T21340] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4698'. [ 1157.971322][T19685] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1157.997223][T19685] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1158.013963][T21282] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1158.021023][T19685] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1158.032477][T19685] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1158.044370][T19685] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1158.058126][T21282] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1158.065841][T19685] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.080438][T19685] usb 7-1: Product: syz [ 1158.084653][T19685] usb 7-1: Manufacturer: syz [ 1158.093421][T21282] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1158.100563][T19685] usb 7-1: SerialNumber: syz [ 1158.109389][T19685] usb 7-1: config 0 descriptor?? [ 1158.118725][T19685] iguanair 7-1:0.0: failed to get version [ 1158.131183][T21282] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1158.146908][ T5902] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1158.147123][T19685] iguanair 7-1:0.0: probe with driver iguanair failed with error -90 [ 1158.318093][T21282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.329083][T21353] FAULT_INJECTION: forcing a failure. [ 1158.329083][T21353] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.331049][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 1158.348878][T21353] CPU: 1 UID: 0 PID: 21353 Comm: syz.1.4700 Tainted: G L syzkaller #0 PREEMPT(full) [ 1158.348904][T21353] Tainted: [L]=SOFTLOCKUP [ 1158.348911][T21353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1158.348920][T21353] Call Trace: [ 1158.348927][T21353] [ 1158.348934][T21353] dump_stack_lvl+0xe8/0x150 [ 1158.348963][T21353] should_fail_ex+0x412/0x560 [ 1158.348996][T21353] should_failslab+0xa8/0x100 [ 1158.349021][T21353] __kmalloc_noprof+0xe8/0x760 [ 1158.349042][T21353] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1158.349067][T21353] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1158.349099][T21353] tomoyo_path_perm+0x283/0x560 [ 1158.349123][T21353] ? tomoyo_path_perm+0x251/0x560 [ 1158.349147][T21353] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1158.349205][T21353] ? __d_lookup+0x66/0x780 [ 1158.349230][T21353] ? __pfx_current_check_access_path+0x10/0x10 [ 1158.349254][T21353] ? __d_lookup+0x66/0x780 [ 1158.349277][T21353] ? __d_lookup+0x66/0x780 [ 1158.349293][T21353] ? __d_lookup+0x6df/0x780 [ 1158.349314][T21353] tomoyo_path_rmdir+0xaa/0xf0 [ 1158.349332][T21353] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 1158.349356][T21353] ? d_lookup+0x80/0xa0 [ 1158.349375][T21353] security_path_rmdir+0x15f/0x330 [ 1158.349396][T21353] filename_rmdir+0x20d/0x520 [ 1158.349422][T21353] ? __pfx_filename_rmdir+0x10/0x10 [ 1158.349448][T21353] ? do_getname+0x151/0x250 [ 1158.349472][T21353] __se_sys_unlinkat+0x71/0x1a0 [ 1158.349496][T21353] do_syscall_64+0x14d/0xf80 [ 1158.349518][T21353] ? trace_irq_disable+0x3b/0x150 [ 1158.349534][T21353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.349553][T21353] ? clear_bhb_loop+0x40/0x90 [ 1158.349573][T21353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.349589][T21353] RIP: 0033:0x7f3e7919c819 [ 1158.349605][T21353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.349618][T21353] RSP: 002b:00007f3e773d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 1158.349634][T21353] RAX: ffffffffffffffda RBX: 00007f3e79416090 RCX: 00007f3e7919c819 [ 1158.349645][T21353] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1158.349655][T21353] RBP: 00007f3e773d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.349666][T21353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.349677][T21353] R13: 00007f3e79416128 R14: 00007f3e79416090 R15: 00007f3e7953fa48 [ 1158.349706][T21353] [ 1158.349713][T21353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1158.383380][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.394289][T21282] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.421649][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1158.486836][T21356] netlink: 628 bytes leftover after parsing attributes in process `syz.8.4702'. [ 1158.492960][ T5902] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1158.501834][T19692] usb 7-1: USB disconnect, device number 31 [ 1158.507585][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1158.524133][T20139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.564926][ T5902] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1158.567585][T20139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.575882][ T5902] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1158.685413][T21282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1158.709699][T21282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1158.721608][ T5902] usb 4-1: Manufacturer: syz [ 1158.730178][T20139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.736877][ T5902] usb 4-1: config 0 descriptor?? [ 1158.737567][T20139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.839728][T21282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.925097][T21282] veth0_vlan: entered promiscuous mode [ 1158.944089][T21282] veth1_vlan: entered promiscuous mode [ 1158.945354][ T9] usb 4-1: USB disconnect, device number 49 [ 1159.113162][T21282] veth0_macvtap: entered promiscuous mode [ 1159.135217][T21282] veth1_macvtap: entered promiscuous mode [ 1159.168380][T21282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.188309][T21282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.214601][T20139] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.226799][T20139] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.243882][T20139] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.252761][T20139] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.269093][T12752] Bluetooth: hci5: command tx timeout [ 1159.451648][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.471339][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.517440][T20139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.573871][T20139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.643235][T21373] netlink: 304 bytes leftover after parsing attributes in process `syz.1.4705'. [ 1159.656814][T21373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4705'. [ 1160.238596][ T5902] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1160.238872][T19692] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1160.349124][T21386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4712'. [ 1160.418781][T19692] usb 4-1: Using ep0 maxpacket: 8 [ 1160.422643][ T5902] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1160.425988][T19692] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1160.453627][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.467367][ T5902] usb 7-1: Product: syz [ 1160.473973][ T5902] usb 7-1: Manufacturer: syz [ 1160.483240][ T5902] usb 7-1: SerialNumber: syz [ 1160.486328][T19692] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1160.497256][T19692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.515695][T19692] usb 4-1: Product: syz [ 1160.520340][T19692] usb 4-1: Manufacturer: syz [ 1160.520971][ T5902] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1160.525341][T19692] usb 4-1: SerialNumber: syz [ 1160.538672][T19701] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1160.543903][T11695] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1160.728401][T21394] FAULT_INJECTION: forcing a failure. [ 1160.728401][T21394] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.731407][T19701] usb 6-1: Using ep0 maxpacket: 8 [ 1160.743589][T21394] CPU: 0 UID: 0 PID: 21394 Comm: syz.8.4716 Tainted: G L syzkaller #0 PREEMPT(full) [ 1160.743617][T21394] Tainted: [L]=SOFTLOCKUP [ 1160.743623][T21394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1160.743633][T21394] Call Trace: [ 1160.743641][T21394] [ 1160.743648][T21394] dump_stack_lvl+0xe8/0x150 [ 1160.743677][T21394] should_fail_ex+0x412/0x560 [ 1160.743711][T21394] should_failslab+0xa8/0x100 [ 1160.743735][T21394] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1160.743754][T21394] ? __alloc_skb+0x186/0x7d0 [ 1160.743773][T21394] ? __alloc_skb+0x1d0/0x7d0 [ 1160.743790][T21394] ? __local_bh_enable_ip+0xd0/0x130 [ 1160.743816][T21394] __alloc_skb+0x1d0/0x7d0 [ 1160.743834][T21394] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1160.743854][T21394] ? do_syscall_64+0x14d/0xf80 [ 1160.743879][T21394] alloc_skb_with_frags+0xca/0x890 [ 1160.743917][T21394] sock_alloc_send_pskb+0x878/0x990 [ 1160.743954][T21394] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1160.743975][T21394] ? kasan_quarantine_put+0xbb/0x1f0 [ 1160.743994][T21394] ? lockdep_hardirqs_on+0x7a/0x110 [ 1160.744020][T21394] ? kmem_cache_free+0x187/0x630 [ 1160.744040][T21394] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1160.744065][T21394] unix_dgram_sendmsg+0x460/0x18e0 [ 1160.744083][T21394] ? __lock_acquire+0x6b5/0x2cf0 [ 1160.744108][T21394] ? __lock_acquire+0x6b5/0x2cf0 [ 1160.744132][T21394] ? irqentry_exit+0x59e/0x620 [ 1160.744153][T21394] ? lockdep_hardirqs_on+0x7a/0x110 [ 1160.744173][T21394] ? irqentry_exit+0x59e/0x620 [ 1160.744199][T21394] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1160.744216][T21394] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1160.744242][T21394] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1160.744263][T21394] ____sys_sendmsg+0x972/0x9f0 [ 1160.744291][T21394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1160.744320][T21394] ? import_iovec+0x73/0xa0 [ 1160.744342][T21394] ___sys_sendmsg+0x2a5/0x360 [ 1160.744368][T21394] ? __pfx____sys_sendmsg+0x10/0x10 [ 1160.744429][T21394] __sys_sendmmsg+0x27c/0x4e0 [ 1160.744455][T21394] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1160.744474][T21394] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1160.744518][T21394] ? ksys_write+0x242/0x270 [ 1160.744538][T21394] ? __pfx_ksys_write+0x10/0x10 [ 1160.744563][T21394] __x64_sys_sendmmsg+0xa0/0xc0 [ 1160.744585][T21394] do_syscall_64+0x14d/0xf80 [ 1160.744606][T21394] ? trace_irq_disable+0x3b/0x150 [ 1160.744621][T21394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.744638][T21394] ? clear_bhb_loop+0x40/0x90 [ 1160.744660][T21394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.744676][T21394] RIP: 0033:0x7f59f879c819 [ 1160.744692][T21394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.744706][T21394] RSP: 002b:00007f59f9641028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1160.744726][T21394] RAX: ffffffffffffffda RBX: 00007f59f8a15fa0 RCX: 00007f59f879c819 [ 1160.744738][T21394] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 1160.744749][T21394] RBP: 00007f59f9641090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.744759][T21394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.744769][T21394] R13: 00007f59f8a16038 R14: 00007f59f8a15fa0 R15: 00007f59f8b3fa48 [ 1160.744795][T21394] [ 1161.100272][T19692] usb 4-1: selecting invalid altsetting 1 [ 1161.106056][T19692] catc 4-1:8.0: Can't set altsetting 1. [ 1161.122074][T19692] catc 4-1:8.0: probe with driver catc failed with error -5 [ 1161.137077][T21395] fuse: Unknown parameter ' ' [ 1161.164162][T19692] usb 4-1: USB disconnect, device number 50 [ 1161.176974][T19701] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1161.196027][T19701] usb 6-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 1161.213780][T19701] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1161.225995][ T5902] usb 7-1: USB disconnect, device number 32 [ 1161.232351][T19701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1161.232382][T19701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1161.232405][T19701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1161.232426][T19701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1161.232448][T19701] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1161.232471][T19701] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1161.234964][T19701] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1161.234992][T19701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.235012][T19701] usb 6-1: Product: syz [ 1161.235027][T19701] usb 6-1: Manufacturer: syz [ 1161.235042][T19701] usb 6-1: SerialNumber: syz [ 1161.237825][T19701] usb 6-1: config 0 descriptor?? [ 1161.244178][T19701] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1161.354552][T12752] Bluetooth: hci5: command tx timeout [ 1161.409369][T19701] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1161.472038][T20929] udevd[20929]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1161.490705][T19689] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1161.673090][T11695] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1161.736206][T11695] ath9k_htc: Failed to initialize the device [ 1161.743419][T19689] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 1161.763699][T19689] usb 2-1: config 0 has no interface number 0 [ 1161.782861][T19689] usb 2-1: config 0 interface 4 has no altsetting 0 [ 1161.798653][T19689] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1161.817992][T19689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.848177][ T5902] usb 7-1: ath9k_htc: USB layer deinitialized [ 1161.860088][T19689] usb 2-1: config 0 descriptor?? [ 1161.908399][T21415] netlink: 45 bytes leftover after parsing attributes in process `syz.6.4721'. [ 1161.916844][T19701] usb 6-1: USB disconnect, device number 107 [ 1162.096123][T21421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4724'. [ 1162.344663][T21433] binder: 21431:21433 ioctl c00c620f 200000000100 returned -22 [ 1162.450641][T21434] netlink: 7 bytes leftover after parsing attributes in process `syz.8.4727'. [ 1162.550924][T21434] netlink: 7 bytes leftover after parsing attributes in process `syz.8.4727'. [ 1162.651389][T21438] netlink: 'syz.5.4732': attribute type 1 has an invalid length. [ 1163.102925][T21452] netlink: 'syz.6.4736': attribute type 1 has an invalid length. [ 1163.188589][T19701] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1163.352554][T19701] usb 4-1: Using ep0 maxpacket: 8 [ 1163.370763][T19701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1163.408084][T19701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1163.431834][T12752] Bluetooth: hci5: command tx timeout [ 1163.450097][T19701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1163.460375][T19701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1163.472390][T19701] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1163.482437][T19701] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1163.493655][T19701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.506338][T19701] usb 4-1: config 0 descriptor?? [ 1163.702770][T19689] usb 2-1: Cannot set autoneg [ 1163.714934][T19689] MOSCHIP usb-ethernet driver 2-1:0.4: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1163.778305][T19689] usb 2-1: USB disconnect, device number 9 [ 1164.068817][ T5902] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1164.218601][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 1164.225528][ T5902] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1164.278598][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1164.298947][T19689] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1164.300746][ T5902] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1164.328689][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.336713][ T5902] usb 6-1: Product: syz [ 1164.348760][ T5902] usb 6-1: Manufacturer: syz [ 1164.353429][ T5902] usb 6-1: SerialNumber: syz [ 1164.370526][ T5902] usb 6-1: config 0 descriptor?? [ 1164.392613][ T5902] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1164.401924][ T5902] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1164.418763][T19701] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1164.448817][T19689] usb 2-1: Using ep0 maxpacket: 32 [ 1164.456831][T19689] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1164.465276][T19689] usb 2-1: config 0 has no interface number 0 [ 1164.475425][T19689] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1164.485180][T19689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.496596][T19689] usb 2-1: Product: syz [ 1164.501707][T19689] usb 2-1: Manufacturer: syz [ 1164.506511][T19689] usb 2-1: SerialNumber: syz [ 1164.514457][T19689] usb 2-1: config 0 descriptor?? [ 1164.582062][T19701] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.605434][T19701] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.616223][T19701] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1164.625720][T19701] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.638212][T19701] usb 9-1: config 0 descriptor?? [ 1164.909378][ T5902] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1164.915844][ T5902] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1164.923255][ T5902] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1164.931639][ T5902] em28xx 6-1:0.0: No AC97 audio processor [ 1164.938034][T19689] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1164.950035][T19689] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1164.954207][ T5902] usb 6-1: USB disconnect, device number 108 [ 1164.965188][T19698] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1164.983221][ T5902] em28xx 6-1:0.0: Disconnecting em28xx [ 1164.995777][ T5902] em28xx 6-1:0.0: Freeing device [ 1165.052431][T19701] hid_parser_main: 2 callbacks suppressed [ 1165.052472][T19701] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 1165.067037][T19701] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 1165.074088][T19701] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 1165.081453][T19701] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 1165.088421][T19701] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 1165.095572][T19701] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 1165.102866][T19701] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 1165.112423][T19701] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1165.128574][T19698] usb 7-1: Using ep0 maxpacket: 8 [ 1165.142764][T19698] usb 7-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1165.170341][T19698] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.178379][T19698] usb 7-1: Product: syz [ 1165.190521][T19698] usb 7-1: Manufacturer: syz [ 1165.195748][T19698] usb 7-1: SerialNumber: syz [ 1165.217029][T19698] usb 7-1: config 0 descriptor?? [ 1165.230638][T19698] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1165.250502][T19701] cp2112 0003:10C4:EA90.0021: error requesting version [ 1165.262196][T19701] cp2112 0003:10C4:EA90.0021: probe with driver cp2112 failed with error -5 [ 1165.482238][T21489] syzkaller0: entered promiscuous mode [ 1165.488409][T21489] syzkaller0: entered allmulticast mode [ 1165.510474][T21489] tipc: Started in network mode [ 1165.515412][T21489] tipc: Node identity 76667738e1a1, cluster identity 4711 [ 1165.523791][T21489] tipc: Enabled bearer , priority 0 [ 1165.650216][T21505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4756'. [ 1165.824057][T11695] usb 4-1: USB disconnect, device number 51 [ 1165.951451][T21516] fuse: Bad value for 'user_id' [ 1165.956605][T21516] fuse: Bad value for 'user_id' [ 1166.037510][T19698] gspca_sonixj: reg_r err -71 [ 1166.052042][T19698] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 1166.076995][T19698] usb 7-1: USB disconnect, device number 33 [ 1166.234249][T21531] FAULT_INJECTION: forcing a failure. [ 1166.234249][T21531] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.247240][T21531] CPU: 0 UID: 0 PID: 21531 Comm: syz.3.4763 Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.247268][T21531] Tainted: [L]=SOFTLOCKUP [ 1166.247274][T21531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1166.247285][T21531] Call Trace: [ 1166.247292][T21531] [ 1166.247299][T21531] dump_stack_lvl+0xe8/0x150 [ 1166.247337][T21531] should_fail_ex+0x412/0x560 [ 1166.247365][T21531] should_failslab+0xa8/0x100 [ 1166.247385][T21531] __kvmalloc_node_noprof+0x178/0x8a0 [ 1166.247406][T21531] ? io_alloc_cache_init+0x42/0x140 [ 1166.247425][T21531] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1166.247450][T21531] io_alloc_cache_init+0x42/0x140 [ 1166.247470][T21531] io_rsrc_cache_init+0x43/0x50 [ 1166.247495][T21531] io_ring_ctx_alloc+0x4d9/0xc50 [ 1166.247526][T21531] io_uring_create+0x50/0x980 [ 1166.247555][T21531] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1166.247579][T21531] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1166.247613][T21531] ? __pfx_ksys_write+0x10/0x10 [ 1166.247644][T21531] do_syscall_64+0x14d/0xf80 [ 1166.247667][T21531] ? trace_irq_disable+0x3b/0x150 [ 1166.247682][T21531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.247701][T21531] ? clear_bhb_loop+0x40/0x90 [ 1166.247722][T21531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.247740][T21531] RIP: 0033:0x7f82e799c819 [ 1166.247757][T21531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.247773][T21531] RSP: 002b:00007f82e87c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1166.247792][T21531] RAX: ffffffffffffffda RBX: 00007f82e7c15fa0 RCX: 00007f82e799c819 [ 1166.247805][T21531] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001b7b [ 1166.247817][T21531] RBP: 00007f82e87c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.247828][T21531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1166.247840][T21531] R13: 00007f82e7c16038 R14: 00007f82e7c15fa0 R15: 00007f82e7d3fa48 [ 1166.247868][T21531] [ 1166.581816][T11695] tipc: Node number set to 2546431800 [ 1166.716936][T21539] netlink: 304 bytes leftover after parsing attributes in process `syz.5.4764'. [ 1166.730335][T21539] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4764'. [ 1166.770418][T21541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4768'. [ 1167.359849][T21489] tipc: Resetting bearer [ 1167.433639][T21489] tipc: Disabling bearer [ 1167.537300][T19698] usb 9-1: USB disconnect, device number 29 [ 1168.294952][T21563] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4775'. [ 1168.475344][T19689] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000024: -71 [ 1168.486586][T19689] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1168.506160][T19689] usb 2-1: USB disconnect, device number 10 [ 1168.601815][T11695] IPVS: starting estimator thread 0... [ 1168.614829][T21570] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4779'. [ 1168.624161][T21570] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4779'. [ 1168.639515][T21570] team0: entered promiscuous mode [ 1168.659972][T21570] team_slave_0: entered promiscuous mode [ 1168.680225][T21570] team_slave_1: entered promiscuous mode [ 1168.728617][T21574] IPVS: using max 35 ests per chain, 84000 per kthread [ 1168.737122][T21570] bond0: entered promiscuous mode [ 1168.760976][T21570] bond_slave_0: entered promiscuous mode [ 1168.787716][T21570] bond_slave_1: entered promiscuous mode [ 1168.800057][T21570] debugfs: 'hsr1' already exists in 'hsr' [ 1168.805868][T21570] Cannot create hsr debugfs directory [ 1168.812209][T21570] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1169.155874][T21584] fuse: Unknown parameter '0x0000000000000007' [ 1169.661988][T21598] netlink: 'syz.8.4789': attribute type 10 has an invalid length. [ 1169.678687][T21598] team0: Device ipvlan1 failed to register rx_handler [ 1169.718839][T19701] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1169.888695][T19701] usb 2-1: Using ep0 maxpacket: 16 [ 1169.897955][T19701] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1169.906340][T19701] usb 2-1: config 0 has no interface number 0 [ 1169.918336][T19701] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1169.929112][T19701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.940657][T19701] usb 2-1: Product: syz [ 1169.963594][T19701] usb 2-1: Manufacturer: syz [ 1169.969872][T19701] usb 2-1: SerialNumber: syz [ 1169.977612][T19701] usb 2-1: config 0 descriptor?? [ 1170.009757][T19701] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1170.566393][T19701] gspca_spca1528: reg_w err -71 [ 1170.575960][T21612] netlink: 'syz.8.4794': attribute type 1 has an invalid length. [ 1170.593246][T19701] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 1170.632428][T21612] bond1: entered promiscuous mode [ 1170.635216][T19701] usb 2-1: USB disconnect, device number 11 [ 1170.638200][T21612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1170.928340][T21619] bond1: (slave bridge1): making interface the new active one [ 1170.966201][T21619] bridge1: entered promiscuous mode [ 1171.003911][T21619] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1171.978649][T11695] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1172.088615][T19698] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1172.160265][T11695] usb 7-1: Using ep0 maxpacket: 16 [ 1172.167757][T11695] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.179380][T11695] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.192549][T11695] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1172.202263][T11695] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.219146][T11695] usb 7-1: config 0 descriptor?? [ 1172.259118][T19698] usb 9-1: Using ep0 maxpacket: 16 [ 1172.266810][T19698] usb 9-1: config 0 has no interfaces? [ 1172.275748][T19698] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1172.286245][T19698] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.294693][T19698] usb 9-1: Product: syz [ 1172.299420][T19698] usb 9-1: Manufacturer: syz [ 1172.304070][T19698] usb 9-1: SerialNumber: syz [ 1172.350756][T21649] netlink: 'syz.3.4804': attribute type 1 has an invalid length. [ 1172.358579][T21649] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4804'. [ 1172.369754][T21649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4804'. [ 1172.449387][T19698] usb 9-1: config 0 descriptor?? [ 1172.458007][T21650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.552092][T21650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.752177][T11695] usbhid 7-1:0.0: can't add hid device: -71 [ 1172.775933][T21641] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4803'. [ 1172.799816][T11695] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1172.818335][T21641] netlink: 45 bytes leftover after parsing attributes in process `syz.8.4803'. [ 1172.841539][T19692] usb 9-1: USB disconnect, device number 30 [ 1172.867513][T11695] usb 7-1: USB disconnect, device number 34 [ 1173.749061][T21665] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 1173.760988][T21665] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 1173.769408][T21665] CPU: 0 UID: 0 PID: 21665 Comm: syz.8.4807 Tainted: G L syzkaller #0 PREEMPT(full) [ 1173.780327][T21665] Tainted: [L]=SOFTLOCKUP [ 1173.784634][T21665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1173.794677][T21665] RIP: 0010:memcpy_sglist+0x420/0x730 [ 1173.800063][T21665] Code: e8 b5 b9 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 c7 b4 52 fd 4c 89 f3 eb 07 e8 bd b4 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 1173.819655][T21665] RSP: 0018:ffffc9000d12f698 EFLAGS: 00010202 [ 1173.825710][T21665] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 1173.833676][T21665] RDX: ffffc9000ddb2000 RSI: 00000000000001dd RDI: 00000000000001de [ 1173.841641][T21665] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1173.849620][T21665] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000b [ 1173.857576][T21665] R13: ffff888052a47dc0 R14: ffff888078915880 R15: 0000000000000008 [ 1173.865554][T21665] FS: 00007f59f96416c0(0000) GS:ffff888125454000(0000) knlGS:0000000000000000 [ 1173.874469][T21665] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1173.881038][T21665] CR2: 0000200000001b40 CR3: 000000007e084000 CR4: 00000000003526f0 [ 1173.888997][T21665] Call Trace: [ 1173.892263][T21665] [ 1173.895179][T21665] aead_recvmsg+0x719/0x1030 [ 1173.899759][T21665] ? __pfx_aead_recvmsg+0x10/0x10 [ 1173.904768][T21665] ? __pfx_aead_recvmsg+0x10/0x10 [ 1173.909779][T21665] sock_recvmsg_nosec+0x10c/0x140 [ 1173.914782][T21665] ____sys_recvmsg+0x3e3/0x4a0 [ 1173.919531][T21665] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1173.924810][T21665] ? import_iovec+0x73/0xa0 [ 1173.929298][T21665] ___sys_recvmsg+0x215/0x590 [ 1173.933958][T21665] ? __lock_acquire+0x6b5/0x2cf0 [ 1173.938883][T21665] ? __pfx____sys_recvmsg+0x10/0x10 [ 1173.944064][T21665] ? get_futex_key+0x8cd/0x1690 [ 1173.948903][T21665] do_recvmmsg+0x334/0x800 [ 1173.953307][T21665] ? __pfx_do_recvmmsg+0x10/0x10 [ 1173.958227][T21665] ? __pfx_do_futex+0x10/0x10 [ 1173.962938][T21665] __x64_sys_recvmmsg+0x198/0x250 [ 1173.967948][T21665] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1173.973477][T21665] do_syscall_64+0x14d/0xf80 [ 1173.978051][T21665] ? trace_irq_disable+0x3b/0x150 [ 1173.983053][T21665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.989099][T21665] ? clear_bhb_loop+0x40/0x90 [ 1173.993758][T21665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.999628][T21665] RIP: 0033:0x7f59f879c819 [ 1174.004023][T21665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.023610][T21665] RSP: 002b:00007f59f9641028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1174.032010][T21665] RAX: ffffffffffffffda RBX: 00007f59f8a15fa0 RCX: 00007f59f879c819 [ 1174.039984][T21665] RDX: 0000000000000002 RSI: 0000200000001b40 RDI: 0000000000000004 [ 1174.047941][T21665] RBP: 00007f59f8832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1174.055893][T21665] R10: 0000000000010100 R11: 0000000000000246 R12: 0000000000000000 [ 1174.063849][T21665] R13: 00007f59f8a16038 R14: 00007f59f8a15fa0 R15: 00007f59f8b3fa48 [ 1174.071811][T21665] [ 1174.074820][T21665] Modules linked in: [ 1174.079157][T21665] ---[ end trace 0000000000000000 ]--- [ 1174.110077][T21665] RIP: 0010:memcpy_sglist+0x420/0x730 [ 1174.157038][T21665] Code: e8 b5 b9 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 c7 b4 52 fd 4c 89 f3 eb 07 e8 bd b4 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 1174.178586][T21665] RSP: 0018:ffffc9000d12f698 EFLAGS: 00010202 [ 1174.186106][T21665] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 1174.208624][T21665] RDX: ffffc9000ddb2000 RSI: 00000000000001dd RDI: 00000000000001de [ 1174.226899][T21665] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1174.248601][T21665] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000b [ 1174.266542][T21665] R13: ffff888052a47dc0 R14: ffff888078915880 R15: 0000000000000008 [ 1174.363910][T21665] FS: 00007f59f96416c0(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 1174.374114][T21665] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1174.382786][T21665] CR2: 0000001b2da00ff8 CR3: 000000007e084000 CR4: 00000000003526f0 [ 1174.403449][T21665] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1174.411709][T21665] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1174.420135][T21665] Kernel panic - not syncing: Fatal exception [ 1174.426330][T21665] Kernel Offset: disabled [ 1174.430648][T21665] Rebooting in 86400 seconds..