last executing test programs: 2m43.305140473s ago: executing program 4 (id=879): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="0c4882984a4523aa716dcb9d6382a8c89bd856196c05b6bb04d8463f45254f67cfe5549cbd2e2db98024f2adda7c77769bee2d29610300000000000007000000000000000c246e095139d355005400"/94, @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a30000000000800010073797a30000000000900030073797a32000000001400000011001f00"/111], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x84}}, 0x40) (async, rerun: 32) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (rerun: 32) syz_usb_control_io$hid(r3, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r4 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000001c0)={0xfb, 0x5, 0x0, 0x8, "4d512c6e1327dbf82acf5a89737f8c74d5609044fbf29c00"}) read$char_usb(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) (async, rerun: 32) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x7f7fffff, @loopback, 0x67c6}}, 0x401, 0xa, 0xb, 0x8}, &(0x7f0000000040)=0x98) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x7, 0x1]}, 0x8) unshare(0x66000080) (async) r8 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r10 = gettid() sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r9, @ANYBLOB="6d3082610000300008001300", @ANYRES32=r10], 0x28}}, 0x40010) 2m42.495489149s ago: executing program 4 (id=883): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x37}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1e}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) dup3(r1, r2, 0x80000) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x700, 0x80, 0x8001, 0x0, {{0x23, 0x4, 0x2, 0x2f, 0x8c, 0x68, 0x0, 0x7, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, {[@rr={0x7, 0x17, 0x5a, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010100, @private=0xa010100]}, @rr={0x7, 0xf, 0x58, [@loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x3c, 0x27, 0x1, 0x0, [{@broadcast, 0x80}, {@multicast2, 0x7}, {@remote, 0x4d0a}, {@local, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@rand_addr=0x64010102, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}]}, @lsrr={0x83, 0xf, 0xb, [@remote, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast2]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=@mpls_newroute={0x158, 0x18, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1c, 0x10, 0x80, 0xfd, 0xfe, 0x2, 0xc8, 0x0, 0x1800}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x6}, @RTA_VIA={0x14, 0x12, {0x11, "5dd9d664c3acee838704b7edcb28"}}, @RTA_NEWDST={0x84, 0x13, [{0x9, 0x0, 0x1}, {0x5120, 0x0, 0x1}, {0x1}, {0x6}, {0x9}, {0x4c}, {0x7}, {0x8000, 0x0, 0x1}, {0x2c2}, {0xc, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xf}, {0x9, 0x0, 0x1}, {0x7}, {0x7fff}, {0xfffa4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x9}, {0x9, 0x0, 0x1}, {0x3}, {0xf, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x9}, {0x68c, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x8000}, {0x1}, {0xb}, {0xaf, 0x0, 0x1}, {0x9}, {0xdfc5}]}, @RTA_NEWDST={0x84, 0x13, [{0xff}, {0x81, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xf124}, {0x4, 0x0, 0x1}, {0x3}, {0x8, 0x0, 0x1}, {0x849, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xbc0}, {0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}, {}, {0x401, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x0, 0x0, 0x1}, {0x4}, {0x6862}, {0x7}, {0xffffc, 0x0, 0x1}, {0xfa671, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x9739}, {0x2, 0x0, 0x1}, {0x7}, {0x9}, {0x1000}, {0x20}, {0x5, 0x0, 0x1}, {0x500}, {0x1, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x5}, @RTA_OIF={0x8, 0x4, r7}, @RTA_DST={0x8, 0x1, {0xffff, 0x0, 0x1}}]}, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x4000000000002d9, 0x10022, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket(0x25, 0x3, 0x0) ioctl$LOOP_SET_FD(r10, 0x1706, 0xffffffffffffffff) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r9, &(0x7f0000000300), 0x0, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) syz_emit_ethernet(0x1e, &(0x7f00000001c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@generic={0x8864, "118b9041ce8e89864b314a0b568cc69b"}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x20008844) 2m42.076065431s ago: executing program 4 (id=886): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x20, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000040000000800040001000000", 0x24) 2m41.873965438s ago: executing program 4 (id=888): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x19) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') mkdir(0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f0000002940)='./file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file1\x00') r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001d00)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf250c0000004000f5c4cc7428ec093e674903800600080003000400000008000500ffffffff650008000200000014000200697036677265", @ANYRESDEC=r2, @ANYRES32=r6, @ANYRESOCT=r7, @ANYRES32, @ANYRESHEX=r3, @ANYRES64=r7], 0x54}, 0x1, 0x0, 0x0, 0x14024}, 0x20040014) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) recvmmsg(r7, &(0x7f0000003600)=[{{&(0x7f0000001fc0)=@hci, 0x80, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f00000005c0)=""/178, 0xb2}, {&(0x7f0000000780)=""/196, 0xc4}], 0x4}, 0xc9}, {{&(0x7f0000000680)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000400)=""/38, 0x26}, {&(0x7f0000000880)=""/153, 0x99}, {&(0x7f0000000940)=""/163, 0xa3}, {&(0x7f0000000a00)=""/41, 0x29}, {&(0x7f0000000a40)=""/123, 0x7b}, {&(0x7f0000000ac0)=""/163, 0xa3}, {&(0x7f0000000b80)=""/111, 0x6f}], 0x7, &(0x7f0000000c40)=""/4096, 0x1000}, 0x80000000}, {{&(0x7f0000001c40)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001cc0)=""/60, 0x3c}, {&(0x7f0000002040)=""/195, 0xc3}, {&(0x7f0000001dc0)=""/106, 0x6a}], 0x3, &(0x7f0000001e80)=""/158, 0x9e}, 0x1}, {{&(0x7f0000001f40)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002400)=""/8, 0x8}, 0xcb1}, {{&(0x7f0000002440)=@tipc=@id, 0x80, &(0x7f00000025c0)=[{&(0x7f00000024c0)=""/215, 0xd7}], 0x1, &(0x7f0000002600)=""/4096, 0x1000}, 0x1}], 0x5, 0x20, &(0x7f00000036c0)) r8 = socket$packet(0x11, 0x3, 0x300) socket$igmp6(0xa, 0x3, 0x2) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac5500000000030006000000000002008e34000000000000000000000000020001000000000000000a1600000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r10 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r10, 0x3, &(0x7f0000000040)='ramfs\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockname$packet(r8, &(0x7f0000003700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003740)=0x14) syz_open_dev$tty1(0xc, 0x4, 0x4) 2m40.737319494s ago: executing program 4 (id=894): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x16) syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES16], 0x0) 2m40.33466682s ago: executing program 4 (id=898): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_connect(0x5, 0x74b, &(0x7f0000000d40)={{0x12, 0x1, 0x201, 0x57, 0x85, 0xfb, 0x8, 0x1b80, 0xe396, 0xb568, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x739, 0x4, 0x5, 0x9, 0x80, 0x48, [{{0x9, 0x4, 0x87, 0xf3, 0x3, 0xc9, 0x1d, 0xba, 0xd, [@generic={0x4a, 0x1, "be28a1762f97915f3d182f745555b5b8b332256ec46a8e74fbf38214d60b5ba611699e2d81237b1f605d623dfac51c6de97b480596550181ccbee46983d14fe1a33d18cd78270a7b"}], [{{0x9, 0x5, 0xe, 0x10, 0x200, 0x5d, 0xd, 0x1, [@generic={0xa6, 0x17, "63402fd53c85046d9b6be70da44acd184ae2be54f4531af01384203d492bc13f3b8384a144de7eaa0bc64e4462a19fd54efe663043704d329ac57082eb63b9d864a22de767f5a0ebee6655e99b7b5773bbd75bea19937cc408d2f68d2cc16579004aa22ae74cbee61dfe83efa2915f0d4090c9b6849ccc39194e28eefa37953e95cb889b402ce4e24c7166ca3ac113edfb19c68858d4629e8661a80707202cc5824a6223"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x0, 0xff, 0x4}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x8, 0xd, 0x20}}]}}, {{0x9, 0x4, 0xc, 0x80, 0xa, 0xfc, 0xec, 0x15, 0xbc, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x3, 0x1}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf0, 0x4, 0x7, 0x6}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x3, 0x6, 0x6, "c92b", 'mZ'}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7, 0xf, 0x9, "f48300c4"}]}, @generic={0xbf, 0x31, "1cc6b157346784d8dfc45ee00b8a571d964d42d50e7884cf59bc4daf4810dc2a70ee28259b9edb04e1424c727bd31b5f08bcae90b373ccba0eb36be094b9434cf0c7c4ee4eb9d4f42fb53861d2dc172a4786d3dd7d8062e201d04d02bb01d75a2da58139a12f28e755c6c2cb4951ea59fa9756958540cbfbdc63f6f4416418b052e5eb002e7e11234bf87bc81f92fcc178c6f44607d1a315d9d95d808da2950b335c0f0379fab642d38d156789dc7af60586826810c5f410fc233fb5bd"}], [{{0x9, 0x5, 0x80, 0x0, 0x400, 0x9, 0x4, 0xd}}, {{0x9, 0x5, 0x14, 0x1, 0x400, 0xd0, 0x27, 0x4}}, {{0x9, 0x5, 0x2, 0xc, 0x0, 0xe, 0x5, 0x0, [@generic={0x5b, 0x4, "d314bb5ded85970f435ab35e765735644c87cda5064adf76484670b24e7ca2da21a4a92fc35450909e37095a41b2568bca825b769ddad327ba542fd291c49a7ee5d2a362ad0ffb91a111b1414e73ba7d50d64ffd570ade1c73"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x40, 0x7, 0x8}}, {{0x9, 0x5, 0x9, 0x10, 0x0, 0xff, 0x1, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x9}]}}, {{0x9, 0x5, 0x6, 0x10, 0x440, 0x5, 0x80, 0x9}}, {{0x9, 0x5, 0x3, 0x3, 0x38f, 0x65, 0x7, 0x8, [@generic={0x61, 0x5, "3f9f81dcf2f1a2299ca3d4cf3a43156e3847bd72f11e847d4378a7d17c66a24c50c1c28dab10ad65e8618ea8362e6a8ee13c822832f1bd079705e10a486ad7a21f53abbdeb26028f39d6dced4fbf5f9322c1782b253e2530a2cc77ae458cc0"}, @generic={0xdd, 0xd, "a6fe99080772aa0e6e63b4ec84a5cc24e5b73442f3bc7f4ae708411af2d1c9ea9d13f338559447a194a9996c4f7e6d93036c34b54bb9530c419c5e2556ac0892abf42fb001ed19237a15e5162b3c19feb20fa125940d49a2a4ced2adfcbd90e199e2328b104fc9ffbe98eb13d40443e3bb2cdbcf5c935ce7254cb86177fdb22372f60133283a97061a1d90902d474ea75591ec668d5cee9c262019df629c15f6abf488fc99c32467097d6b6244056401e64e47608e6bebf97f5f725d381ec833ce3745ef37c064380fc2c9f2a03ac124be7fb5a9d694db44937e01"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x0, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7f, 0xe11}]}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0x9, 0xd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x6, 0x5}, @generic={0x9f, 0xd, "fd557782fcc1dc2304e102bfcc1cbab5229a30089dea5c1eb1cde1967f266d715982ea37c9278c710251093e4cb9b7c3bb51f479dd2900bb312312b6d1e8b33369027354569956265fee467a416510dae825bc0a2183c5f4a6ea9374f5af22390e74a5e5e6ac796cf7fc242b6651b50e22d7d195dd3875ad25cf502eb8f6c4b4f6ba92212c028e51396f5254541067c8c3db2f131cdb0858b9be3282e9"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x8, 0xf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x56, 0x7f}]}}]}}, {{0x9, 0x4, 0xd1, 0x8, 0x9, 0x86, 0x12, 0x0, 0x1d, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "bc4f"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x2, 0x4, 0xff}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x7, 0x4, 0x7, 0x0, 0x1}]}], [{{0x9, 0x5, 0x3, 0x1, 0x8, 0x8, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xffe3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x8, 0x80, 0x6}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x2, 0x77, 0xa}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0xc, 0x9, 0x8, [@generic={0xf6, 0x8, "362995c6ee2f3655a765ba50eb544fe669f1d12fb8c6a9f4220cfdc1832ab83c764b1d78bcb93dbea95e83667c5ed1904a1002315fcf61009911dd949e5dc5de457f1a38406bbd3cefc5a0cea050fa5fb169bf61cf370d2704f5e457e0594427e83d6728bb2bacbc337e23ccdc7e3d5af9a9ba3fee77a77e38ff8397e95b931456c373323711c1413298f35d321750ef455d0a9853f0f5d13b6e6527817092bd1a44f1916a860288d5f34e0a5c71879bc9057ce2e9a9ff085dfca05bc587e7dbcdee8d1031b5198ca3d3f532788efe9295d556cdb76b4d88df731a9cceec0cb29b82013f5927c02a7592b62ebed3019fdaf931c9"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x1, 0x2, 0x4}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x2, 0x6, 0x1, [@generic={0x9d, 0xf, "cd9741e39e64139827933d30ad2db99cf6168411c768e56dafc3db96b1450924075979d3a804bed7f622d5358eb8aad70c0dc652c0bf5f42bb555596c366a659d94a4b0161d37bf057dd5fd7d153c4de33a005564c36af6fbe13d6b3eee7a910658f90a24f8ad421e512fa6d79c6583b3f42dcd939ad577daeb9425f433d8e1a4c872fc648489467142ab4921872599cec92f4feeaa02cf7d7084f"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xc1, 0x4, 0x3}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x4, 0x4, 0x8}}, {{0x9, 0x5, 0xf552154a6a3ba4cb, 0xd, 0x400, 0xf9, 0x9, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x8}]}}]}}, {{0x9, 0x4, 0xbe, 0x19, 0x1, 0x3, 0x0, 0x0, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0xb8}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x6, 0x8, 0x0, 0x8, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x1, 0x9, 0x7, 0x7f, 0xe0}, @selector_unit={0x8, 0x24, 0x5, 0x2, 0x9a, "b52f01"}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x401, 0x3, "578a1c"}, @extension_unit={0xb, 0x24, 0x8, 0x4, 0x4, 0x7, "f3f87ed2"}]}], [{{0x9, 0x5, 0xa, 0x0, 0x8, 0x1, 0x5, 0x3}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x1, 0x15, 0x7, 0x8, 0x80}, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="050f4a000214100480534e00f78cb7cc89a9bff857c2c8bb8431100a2417d528158476edc978ccdf8e88249e6e02e8382823adec8a04c7ed893b1b9d0c0000be412f56f126de0791b5e15dbe819e88c5804019153f7ad9be264a6a205f349ba2fd00eb64edcf77a4ba1400c9ea3fc41cb31525bfbb72db906641f53112600756bdbec51aebe2a396de231f55f21ea76b6d849aca5a53779a572f9002745168d5f903ecc7132bfb24ff2f28a71f8c0f5149d60851219879fb0153dcd97c6ee3f167e7510237e154bb17d2db9bc435450b0a280952e4440a04d06e0d00829c1bb000"/239], 0x6, [{0xe2, &(0x7f0000000140)=@string={0xe2, 0x3, "fe2089502d0442a5a8fca8b2be46b9ebd9a1a423d87f01b0272969f457a3a9e2acfc788fe96e6b3507da8e8f56345734ef218c96508fcc29cfb77ac9cd4608d641d79ef55751f79648fde2b65085fef39dabd92f39468cafa2883eb57a27451b96b84dd8147f5d90970e0e797a50d7310e95bc5388f660efdff60dcdc655c20176dcc9646499b87ce3b3230451273f5029fbd235795893d8a1926a16df50fad7675802d251302a0fdcfc517b3c4615ba0e603bd65f225440ee1c09056a4497e6ece525679ccd4a71c55327f67438bf898e7eef79cd705b7c71cf6f3966b7fe43"}}, {0xae, &(0x7f0000000240)=@string={0xae, 0x3, "0217164252153ff78d366389165122f42b2fe47eac270e4084d6c93b436b952b4848e2b713ba567d16ee3ec0baa5093b72e675f5e4d038fb4258292456b9249ed7341bda0a2f945eecffae74df47c9e760df209bf9fc33a13cb8c8b9663cb991532b20e658b1848f0e406a889be3cd026e414967eeae621d7b9f3f55052e039a27080fbfbc95965dfb00c5a3cdc45c6c7733733ff3c33d7a6308494fe6d2746bc3dd6f594335c3334d0bc67d"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x439}}, {0x93, &(0x7f0000000340)=@string={0x93, 0x3, "290b1792acaa7cd661e6bc8dfc0a856295b29f1fbd2b41cd9dc955df8069e3ad5484b37e7f8ae0e31c41cf23e945a105ce88ff1f4e9869abe098ba5f7e6205a3d3fa4bc05b1f61d7618b046b76a5a5788b3a43177a3951e5366018b2f2c015dd79fe52cc10a6369a9cbe3a56f14c8e87758c7ca2b6b3c3bfe32c3fd599839c6315756eb1067c3f140bec6eb2df7c51f44f"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2809}}, {0x32, &(0x7f0000000440)=@string={0x32, 0x3, "baf9bbccffac21c0c6a039265870847e8e9de2345cc4eaa51eab8d1ac022080d7ec9e7050828f73e8b11eb10d14514ea"}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/profiling', 0x40042, 0x101) 2m39.15815275s ago: executing program 32 (id=898): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_connect(0x5, 0x74b, &(0x7f0000000d40)={{0x12, 0x1, 0x201, 0x57, 0x85, 0xfb, 0x8, 0x1b80, 0xe396, 0xb568, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x739, 0x4, 0x5, 0x9, 0x80, 0x48, [{{0x9, 0x4, 0x87, 0xf3, 0x3, 0xc9, 0x1d, 0xba, 0xd, [@generic={0x4a, 0x1, "be28a1762f97915f3d182f745555b5b8b332256ec46a8e74fbf38214d60b5ba611699e2d81237b1f605d623dfac51c6de97b480596550181ccbee46983d14fe1a33d18cd78270a7b"}], [{{0x9, 0x5, 0xe, 0x10, 0x200, 0x5d, 0xd, 0x1, [@generic={0xa6, 0x17, "63402fd53c85046d9b6be70da44acd184ae2be54f4531af01384203d492bc13f3b8384a144de7eaa0bc64e4462a19fd54efe663043704d329ac57082eb63b9d864a22de767f5a0ebee6655e99b7b5773bbd75bea19937cc408d2f68d2cc16579004aa22ae74cbee61dfe83efa2915f0d4090c9b6849ccc39194e28eefa37953e95cb889b402ce4e24c7166ca3ac113edfb19c68858d4629e8661a80707202cc5824a6223"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x0, 0xff, 0x4}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x8, 0xd, 0x20}}]}}, {{0x9, 0x4, 0xc, 0x80, 0xa, 0xfc, 0xec, 0x15, 0xbc, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x3, 0x1}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf0, 0x4, 0x7, 0x6}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x3, 0x6, 0x6, "c92b", 'mZ'}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7, 0xf, 0x9, "f48300c4"}]}, @generic={0xbf, 0x31, "1cc6b157346784d8dfc45ee00b8a571d964d42d50e7884cf59bc4daf4810dc2a70ee28259b9edb04e1424c727bd31b5f08bcae90b373ccba0eb36be094b9434cf0c7c4ee4eb9d4f42fb53861d2dc172a4786d3dd7d8062e201d04d02bb01d75a2da58139a12f28e755c6c2cb4951ea59fa9756958540cbfbdc63f6f4416418b052e5eb002e7e11234bf87bc81f92fcc178c6f44607d1a315d9d95d808da2950b335c0f0379fab642d38d156789dc7af60586826810c5f410fc233fb5bd"}], [{{0x9, 0x5, 0x80, 0x0, 0x400, 0x9, 0x4, 0xd}}, {{0x9, 0x5, 0x14, 0x1, 0x400, 0xd0, 0x27, 0x4}}, {{0x9, 0x5, 0x2, 0xc, 0x0, 0xe, 0x5, 0x0, [@generic={0x5b, 0x4, "d314bb5ded85970f435ab35e765735644c87cda5064adf76484670b24e7ca2da21a4a92fc35450909e37095a41b2568bca825b769ddad327ba542fd291c49a7ee5d2a362ad0ffb91a111b1414e73ba7d50d64ffd570ade1c73"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x40, 0x7, 0x8}}, {{0x9, 0x5, 0x9, 0x10, 0x0, 0xff, 0x1, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x9}]}}, {{0x9, 0x5, 0x6, 0x10, 0x440, 0x5, 0x80, 0x9}}, {{0x9, 0x5, 0x3, 0x3, 0x38f, 0x65, 0x7, 0x8, [@generic={0x61, 0x5, "3f9f81dcf2f1a2299ca3d4cf3a43156e3847bd72f11e847d4378a7d17c66a24c50c1c28dab10ad65e8618ea8362e6a8ee13c822832f1bd079705e10a486ad7a21f53abbdeb26028f39d6dced4fbf5f9322c1782b253e2530a2cc77ae458cc0"}, @generic={0xdd, 0xd, "a6fe99080772aa0e6e63b4ec84a5cc24e5b73442f3bc7f4ae708411af2d1c9ea9d13f338559447a194a9996c4f7e6d93036c34b54bb9530c419c5e2556ac0892abf42fb001ed19237a15e5162b3c19feb20fa125940d49a2a4ced2adfcbd90e199e2328b104fc9ffbe98eb13d40443e3bb2cdbcf5c935ce7254cb86177fdb22372f60133283a97061a1d90902d474ea75591ec668d5cee9c262019df629c15f6abf488fc99c32467097d6b6244056401e64e47608e6bebf97f5f725d381ec833ce3745ef37c064380fc2c9f2a03ac124be7fb5a9d694db44937e01"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x0, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7f, 0xe11}]}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0x9, 0xd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x6, 0x5}, @generic={0x9f, 0xd, "fd557782fcc1dc2304e102bfcc1cbab5229a30089dea5c1eb1cde1967f266d715982ea37c9278c710251093e4cb9b7c3bb51f479dd2900bb312312b6d1e8b33369027354569956265fee467a416510dae825bc0a2183c5f4a6ea9374f5af22390e74a5e5e6ac796cf7fc242b6651b50e22d7d195dd3875ad25cf502eb8f6c4b4f6ba92212c028e51396f5254541067c8c3db2f131cdb0858b9be3282e9"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x8, 0xf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x56, 0x7f}]}}]}}, {{0x9, 0x4, 0xd1, 0x8, 0x9, 0x86, 0x12, 0x0, 0x1d, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "bc4f"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x2, 0x4, 0xff}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x7, 0x4, 0x7, 0x0, 0x1}]}], [{{0x9, 0x5, 0x3, 0x1, 0x8, 0x8, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xffe3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x8, 0x80, 0x6}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x2, 0x77, 0xa}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0xc, 0x9, 0x8, [@generic={0xf6, 0x8, "362995c6ee2f3655a765ba50eb544fe669f1d12fb8c6a9f4220cfdc1832ab83c764b1d78bcb93dbea95e83667c5ed1904a1002315fcf61009911dd949e5dc5de457f1a38406bbd3cefc5a0cea050fa5fb169bf61cf370d2704f5e457e0594427e83d6728bb2bacbc337e23ccdc7e3d5af9a9ba3fee77a77e38ff8397e95b931456c373323711c1413298f35d321750ef455d0a9853f0f5d13b6e6527817092bd1a44f1916a860288d5f34e0a5c71879bc9057ce2e9a9ff085dfca05bc587e7dbcdee8d1031b5198ca3d3f532788efe9295d556cdb76b4d88df731a9cceec0cb29b82013f5927c02a7592b62ebed3019fdaf931c9"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x1, 0x2, 0x4}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x2, 0x6, 0x1, [@generic={0x9d, 0xf, "cd9741e39e64139827933d30ad2db99cf6168411c768e56dafc3db96b1450924075979d3a804bed7f622d5358eb8aad70c0dc652c0bf5f42bb555596c366a659d94a4b0161d37bf057dd5fd7d153c4de33a005564c36af6fbe13d6b3eee7a910658f90a24f8ad421e512fa6d79c6583b3f42dcd939ad577daeb9425f433d8e1a4c872fc648489467142ab4921872599cec92f4feeaa02cf7d7084f"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xc1, 0x4, 0x3}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x4, 0x4, 0x8}}, {{0x9, 0x5, 0xf552154a6a3ba4cb, 0xd, 0x400, 0xf9, 0x9, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x8}]}}]}}, {{0x9, 0x4, 0xbe, 0x19, 0x1, 0x3, 0x0, 0x0, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0xb8}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x6, 0x8, 0x0, 0x8, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x1, 0x9, 0x7, 0x7f, 0xe0}, @selector_unit={0x8, 0x24, 0x5, 0x2, 0x9a, "b52f01"}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x401, 0x3, "578a1c"}, @extension_unit={0xb, 0x24, 0x8, 0x4, 0x4, 0x7, "f3f87ed2"}]}], [{{0x9, 0x5, 0xa, 0x0, 0x8, 0x1, 0x5, 0x3}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x1, 0x15, 0x7, 0x8, 0x80}, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="050f4a000214100480534e00f78cb7cc89a9bff857c2c8bb8431100a2417d528158476edc978ccdf8e88249e6e02e8382823adec8a04c7ed893b1b9d0c0000be412f56f126de0791b5e15dbe819e88c5804019153f7ad9be264a6a205f349ba2fd00eb64edcf77a4ba1400c9ea3fc41cb31525bfbb72db906641f53112600756bdbec51aebe2a396de231f55f21ea76b6d849aca5a53779a572f9002745168d5f903ecc7132bfb24ff2f28a71f8c0f5149d60851219879fb0153dcd97c6ee3f167e7510237e154bb17d2db9bc435450b0a280952e4440a04d06e0d00829c1bb000"/239], 0x6, [{0xe2, &(0x7f0000000140)=@string={0xe2, 0x3, "fe2089502d0442a5a8fca8b2be46b9ebd9a1a423d87f01b0272969f457a3a9e2acfc788fe96e6b3507da8e8f56345734ef218c96508fcc29cfb77ac9cd4608d641d79ef55751f79648fde2b65085fef39dabd92f39468cafa2883eb57a27451b96b84dd8147f5d90970e0e797a50d7310e95bc5388f660efdff60dcdc655c20176dcc9646499b87ce3b3230451273f5029fbd235795893d8a1926a16df50fad7675802d251302a0fdcfc517b3c4615ba0e603bd65f225440ee1c09056a4497e6ece525679ccd4a71c55327f67438bf898e7eef79cd705b7c71cf6f3966b7fe43"}}, {0xae, &(0x7f0000000240)=@string={0xae, 0x3, "0217164252153ff78d366389165122f42b2fe47eac270e4084d6c93b436b952b4848e2b713ba567d16ee3ec0baa5093b72e675f5e4d038fb4258292456b9249ed7341bda0a2f945eecffae74df47c9e760df209bf9fc33a13cb8c8b9663cb991532b20e658b1848f0e406a889be3cd026e414967eeae621d7b9f3f55052e039a27080fbfbc95965dfb00c5a3cdc45c6c7733733ff3c33d7a6308494fe6d2746bc3dd6f594335c3334d0bc67d"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x439}}, {0x93, &(0x7f0000000340)=@string={0x93, 0x3, "290b1792acaa7cd661e6bc8dfc0a856295b29f1fbd2b41cd9dc955df8069e3ad5484b37e7f8ae0e31c41cf23e945a105ce88ff1f4e9869abe098ba5f7e6205a3d3fa4bc05b1f61d7618b046b76a5a5788b3a43177a3951e5366018b2f2c015dd79fe52cc10a6369a9cbe3a56f14c8e87758c7ca2b6b3c3bfe32c3fd599839c6315756eb1067c3f140bec6eb2df7c51f44f"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2809}}, {0x32, &(0x7f0000000440)=@string={0x32, 0x3, "baf9bbccffac21c0c6a039265870847e8e9de2345cc4eaa51eab8d1ac022080d7ec9e7050828f73e8b11eb10d14514ea"}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/profiling', 0x40042, 0x101) 20.581376843s ago: executing program 5 (id=1253): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_helper', 0x0, 0x1) r3 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 18.177765354s ago: executing program 5 (id=1259): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x2b, 0x80801, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x52, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r2], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 17.11869115s ago: executing program 3 (id=1260): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000002e00)={{0x9, 0x7, 0x3, 0x2, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x200000a, 0x1000, 0x0, 0x1d1, 0x7fffffff, 0x5, 0x5, 0xbc0, 0x7, 0x15b, 0x7, 0x5944, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x400, 0x2000040, 0x10040002, 0x7, 0x0, 0x2, 0x800, 0x3, 0x3, 0x4, 0x6, 0x6, 0xfff, 0x3ff, 0x1, 0x5, 0x3, 0x5, 0x6, 0x3, 0x78a, 0xbfff8007, 0x200000e, 0xe, 0x0, 0x2, 0x5, 0xe, 0x4, 0x9, 0x80000001, 0x400, 0x1ff, 0x9, 0xfffff647, 0x408, 0x4, 0x4000001, 0x9, 0x8, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x1, 0xa, 0x7, 0x80000000, 0x81, 0x10001, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0x100009, 0x7, 0x4, 0x1, 0x8, 0xfffffffd, 0xffff, 0x6, 0x8, 0x0, 0x4, 0xef, 0xff, 0x4, 0xffffffff, 0xf8a, 0x58a0, 0x1, 0x9, 0x895, 0x6, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0xe0b2, 0x9, 0xfffff561, 0x12, 0x3, 0x3, 0xfffffffa, 0x3, 0x2, 0x1, 0x2ba, 0x4, 0xe, 0x5, 0x8, 0x2, 0xfff, 0x4, 0x1ff, 0x7, 0x2, 0x7, 0x6, 0xff]}) r2 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x2000000, 0x0, &(0x7f0000000000), 0x5000000) setreuid(0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$nvram(0xffffff9c, &(0x7f00000016c0), 0x210003, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4104aec6, &(0x7f0000001c40)={0x1, [{0x0, 0x600, 0x1, &(0x7f00000002c0)="e542757eeebef5ee5386273d99a76506e0c1393fc9fa4950e6f676c8b7f88b9903da797df33247c0dbd8f90fd27271b0bc1e086ffbeb68c3fe55ae6ebc53d1386f09aa760e01ebb82e49f8ce096201898ab4bea277b224ec057eca2e97dff0fc3d7d7893a3b5c40a206754fc50d40bd73dcd1c5848758f9bd3f9daf2f6aa68b1034c52daae8c2985dafcfc60fc125c40b456288e60d66956d766290c39e351761a467a292275c7618e068cf1ddb293ad3a5cb5bdaf31ac196e70902d2395f9c1"}, {0x2, 0x208, 0x3, &(0x7f0000000440)="b98622891efd79a63fc9ca6bb1b3ac61bea600618bbc8dce92bc68b6b7a0f58cfe638cfc08dad53aba4219e68f907b9409ad0c50a4621fc46f01055ac10bdfcdac"}, {0x2, 0x3c8, 0x401, &(0x7f0000000540)="82ccf5130f5f39ba1c5a98a5549fcd13421c7f85ad5699160d5f9c8a599bbd393f3c7dd9cf3ff08e757f12121622144934a3c1badfca9cc2efd548921271c6334de999aa96b653f2485a4aa2401e9d92a7325f670bbcdecdb00ab3b2a86395e7e7c228baad9ba7120b709b569455176d96e47e9fecc538b525"}, {0x0, 0x3f0, 0x8, &(0x7f0000000600)="2d395be480fc88188bce9c652b322c85c74a6800c029e4007a31af799dfa4a4dd4793d036c5ed876d615562d232dba7b6770e36e36bce96c2eef15e790e430a36e5661b83da4f9f4f38c1d37ef2c76b5084517482b5527c37d0903784620c54734dcb2ed701b4d4b853d68a0afd3d8a5c636a8ec9a9624c87992ac5efa4a"}, {0x1, 0x8000, 0x16e80, &(0x7f0000000680)="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"}, {0x0, 0xe0, 0x1000, &(0x7f0000001680)="b5fc652530c522efb5b57b3b0d6c8690f28e53bb1696d06e8b34a9ca"}, {0x0, 0x0, 0xb, &(0x7f00000016c0)}, {0x3, 0x8, 0x4, &(0x7f0000001700)="80"}, {0x2, 0x5e8, 0x3, &(0x7f0000001740)="1bcb457e11cba2c58e18ad7ca846eecb0f2c17f1a099be99f30a2738cd7030ed4d9510947cbf5334ddeae366898796d2b689cb8edb397042976a0fe4a316558f2bf4168e4c1bea46e511097a152cad4d9031d35f2f53bfc6e3dfc78ba2bf6a1442e8da6a4f7c6639ae1ad4ed2159330255ab7f268b9b50fb1597c9613db7a731204c52cddbf88f7bf5d0df71da00eaaf9235b52dc062a01c00c882bffeb6679fd6310a57ae7df49d40c2cc624f959384c7dc3d2541efaa39d202003ab1"}, {0x2, 0x4b0, 0x8, &(0x7f0000001800)="e40420e56f88a659edd336544840f0c00ea0f1e77a03778513872bdd8e2b96138f16e3c7ad59c0aa0dc3e7be045922aa65a1231533e82c24ac80926e7286fc8ee53b5f3549c75533e8fabf8d09b738a294c1a9273020a12f207258f11cf4c2ecc06455a4f436e4e335567dbe07fab678c32af447163308e07c6f1e726655ef72866a82a3eb44c82f6a9b42f8d9a0e14168061e5498d3"}, {0x1, 0x0, 0xc, &(0x7f00000018c0)}, {0x2, 0x628, 0x64, &(0x7f0000001900)="57261c05a730e44e0c631c4bd0cb497453545891a0fbaadc2f5727896f0a18b6dfc4ca28fdfbc34dc39458c77e7b0794a017d5f6187a67449f1d5fd65c67c5988b2bacd1951ae2b3da5a68bd077cf9b6af48a384a7d52ea5ca4f98b1eaf6437b484706bec228d36fca584b6f9f2bef105658d3e91806f74d02e5904106aabbb8e74d38e1afadf97f200102e92e01aed4f2b11a8b288362b416008225fe7dd16ff566461efb468b5dab587a96bc544af9a433615258ba0e9d22f48d0f3333ceae814fada0e2"}, {0x1, 0x0, 0x2, &(0x7f0000001a00)}, {0x2, 0x20, 0xc, &(0x7f0000001a40)="751aa1dd"}, {0xd52788e50d8c0692, 0x7c0, 0x1ff, &(0x7f0000001a80)="6d09665571e41c7d0fa4324e5466f951622b07e6ec23267ba7e62ce344f192029add53cfc692a8d71e7a78b5a07fcb39484320ab713caae823bf8aaa926d81c0eb45d13646bed44d7129dbd3599c98791509e2e8e1f9d7f772b3b1ae333045b76646d0dcdd973a829d75be6767d5fb6f0acc586ba4a549af870ebc542b4f92d27d0e4268d22581c18de86c492580eaa1e6d0dd4191963f5407c28d4bdf24a92e4576bbfc83c408b1d627a99fc59f769dd1b73af8086e096f9cf60a4e5067397e2dc2d61fcf2fd216fbbac51687cd0acae32fd73a771b2916391236f307ce1a8608ae3b9b452814f6ec4e0f97aa4b960efd75a72f7e1ab948"}, {0x2, 0x498, 0x1, &(0x7f0000001b80)="3a9ee66ca6cd3d13402c22d8cb7bf0a80dded26527c8221bea39781a2555e5f8a754a9525bd68b3606d3e51e82d86d27c5483f664c66d75e94cb65ec911f7276fb6ed57cce7a730ca5a88d8c9665898e9902bee33f878c263bbf2a72a46432b66dac5a0110d3b4ecab0871afe22b1e849b0171a8fd52be2af86bd993dfba4c0a112ca7918c9529dfcf2103b5bc0c6ce026925c"}]}) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000001d80)="ebe3a0e9796cfd1647e2990800000000000000b372219d205e81f4a7f71c1926aae1efd7e01461b95597054a863f3d5cfe6cb55b5bb9fa6935849e6098ed00f8ffff1726b360fbcf7b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db7945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8141e12f4b9376", 0x73}], 0x3, &(0x7f0000000380), 0x0, 0x40004}], 0x1bb, 0x40000) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) ioctl$SG_SET_TIMEOUT(r7, 0x2201, &(0x7f0000000000)=0x80000001) 17.117109422s ago: executing program 1 (id=1271): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000880)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x40) recvmmsg(r2, &(0x7f0000000500)=[{{&(0x7f00000009c0)=@tipc=@name, 0x80, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000180)=""/26, 0x1a}, {&(0x7f0000000600)=""/61, 0x3d}, {&(0x7f0000000640)=""/58, 0x3a}, {&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/121, 0x79}], 0x6, &(0x7f0000000300)=""/101, 0x65}, 0x899}], 0x1, 0x40012141, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0xc0000000, 0x0, 0x31364d4e, 0x34565348, 0x7, [{}, {}, {}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x1}, {}, {0x0, 0x6}], 0x0, 0xfc, 0x7, 0x0, 0x6}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x7b, 0x8001, 0x9, 0xfffffffffffffffa, 0x0, 0xffff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000020000100000000004643f574000000000a00204000000007000000001400110076657468305f746f5f627269646765001400030076657468315f766c616e00000000000014000200fe80000800000000000000002b493dcda25d682d8f5db70f02e700090cb33d7234c40a49d24f8b34175955bb6cb5a52391404832b57673b34cbcda946fb4a306ce73e2155f78abc628fec164c86189ed55b708a95674b87a77c38f3ec8e37684bd342f1c3eb3faab62ac19b2d3076387ad6739d45d784da1d2436d9b7073df05b2963da9bbbf51b390e3bc5267c596bb333f3e0cc4e1e7bdaddc68feaa12ec0234917ab2d74029dd2e4c9f17f5caae5fbdb510067cd8d440bb3fb03c56497522dca6d77abec15580d466af99fe5fc72db5d2ddcc116377bd3fed244be6a3af3018d80825c3ce1db5be2c95a4af2c62a05750e15cfc3edc4700"], 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYRES32=r1, @ANYRESOCT=r5, @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x2000c810) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x4}}, 0x1d) r7 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x80, 0xfa000, 0x8}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000580)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3ff) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r8, 0x4004f506, 0x0) 16.793263651s ago: executing program 5 (id=1261): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x0, 0x30, 0xffffffff, 0x0, 0xb49, 0x7fff, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in=@local, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe4) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_REGISTER_BEACONS(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30af0000002c26d8816ed65f8abe30ca45db86a5bf32ea32b80c9971ac00000000000000003cc94092fb7d89c5e6750b5e8a2e77afed08cc4f5dec96f8eb081c941941efea599636f6c8a2f8", @ANYRES16=0x0, @ANYRES8=r11, @ANYRES32=0x0, @ANYBLOB="0c0099000300000064000000", @ANYBLOB="9dc60795953b292221b910d38ce93deb870d7b98734772aecdb7a0a061262be553f5a13b72ca7f70fcaa17357686b51ef824097fb313cd47d55470cbf1b91ef4ecf4b7bb8b905e9796bdb0a632bcdb736accc4cf62242bffa8", @ANYRES64=r10], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x4004810) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9}, 0x1c) 16.150103868s ago: executing program 1 (id=1263): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 15.215823348s ago: executing program 1 (id=1264): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x3, {}, 0xfe}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000480)={'erspan0\x00', r1, 0x1, 0x8, 0x5, 0x10000, {{0x3d, 0x4, 0x3, 0x9, 0xf4, 0x67, 0x0, 0x4, 0x94f1e458b954ea45, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0x1c, 0xc5, 0x1, 0x9, [{@rand_addr=0x64010102, 0x100}, {@remote}, {@remote, 0x1}]}, @rr={0x7, 0x23, 0xe8, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x44}, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x17}, @multicast2, @private=0xa010101]}, @cipso={0x86, 0x42, 0x3, [{0x7, 0x12, "6ea92e0b4800de6593dcc4a7210b85aa"}, {0x5, 0x3, "03"}, {0x0, 0x7, "76cb0baccf"}, {0x0, 0xb, "885ce7425fec094434"}, {0x7, 0x10, "55f73b26c08744337ffb70727e34"}, {0x6, 0x5, "87e928"}]}, @cipso={0x86, 0x45, 0xffffffffffffffff, [{0x6, 0x8, "e1b697bb392b"}, {0x6, 0x6, '\x00\x00\x00\x00'}, {0x1, 0x10, "bad482d9c42b87b7b2200e86e154"}, {0x8, 0xa, "addfcfc7400d7392"}, {0x1, 0xe, "0f945f2b044102066e1e4a8e"}, {0x0, 0x9, "e9644e5f440d2f"}]}, @ssrr={0x89, 0x17, 0x32, [@dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x11}, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x88, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x240088d0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x4040000) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="24000000130a0100ffffdf000000000000000009080003400000000208000340000000065799ea707170d5f37d662cff01216ed93efdef0a7ad2da7333ea03148ac294fb8a43b56004b41d9abf5ef5ed4e8d68eb4ced3a20bc96dc432e1953ea19bbb53a01fb091e4ac8165a887bfbf843f12d5f50f313186aa991d148c699baa85a3cbf29a1a9921f458fd018325fdc78a202b84e61a81ed0f732daf641a1d75748c1c54823493f4a1f2b348551abcd7e8f63446ab0fd80966fef32a0aed4b08327238c6be133cfd4b1e6886b38963263f448c6f14466b4dcd6d7e6a7ffdb6164d98134df"], 0x24}, 0x1, 0x0, 0x0, 0x404c882}, 0x4000000) r5 = syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x7945, 0x10, 0x8000, 0x8000e1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sync_file_range(r8, 0x2, 0xfffffffffffffffe, 0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r10 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r10, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r10, 0x7, 0x0, 0x0, 0x0) r11 = openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000a0}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="30000000091400012d3d7000ffdbdf25087f000000000000000001000282010008000100000000000800010001000000b6d4cddfaa1fdef0db"], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bind$alg(r12, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x9, 0x6000, @fd=r11, 0x100, 0x0, 0x0, 0x1c}) io_uring_enter(r5, 0x627, 0xc1040000, 0x41, 0x0, 0x0) 14.921097334s ago: executing program 5 (id=1267): syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0xa0080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000000, 0x0, 0x0, 0xb4b, 0x7, 0x8, 0x10000, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x12, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r2, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r3, 0x0, 0xffffffffffffff20, 0x24094, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x2f) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) unshare(0x40000000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x200) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) 11.959193733s ago: executing program 1 (id=1268): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000002e00)={{0x9, 0x7, 0x3, 0x2, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x200000a, 0x1000, 0x0, 0x1d1, 0x7fffffff, 0x5, 0x5, 0xbc0, 0x7, 0x15b, 0x7, 0x5944, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x400, 0x2000040, 0x10040002, 0x7, 0x0, 0x2, 0x800, 0x3, 0x3, 0x4, 0x6, 0x6, 0xfff, 0x3ff, 0x1, 0x5, 0x3, 0x5, 0x6, 0x3, 0x78a, 0xbfff8007, 0x200000e, 0xe, 0x0, 0x2, 0x5, 0xe, 0x4, 0x9, 0x80000001, 0x400, 0x1ff, 0x9, 0xfffff647, 0x408, 0x4, 0x4000001, 0x9, 0x8, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x1, 0xa, 0x7, 0x80000000, 0x81, 0x10001, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0x100009, 0x7, 0x4, 0x1, 0x8, 0xfffffffd, 0xffff, 0x6, 0x8, 0x0, 0x4, 0xef, 0xff, 0x4, 0xffffffff, 0xf8a, 0x58a0, 0x1, 0x9, 0x895, 0x6, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0xe0b2, 0x9, 0xfffff561, 0x12, 0x3, 0x3, 0xfffffffa, 0x3, 0x2, 0x1, 0x2ba, 0x4, 0xe, 0x5, 0x8, 0x2, 0xfff, 0x4, 0x1ff, 0x7, 0x2, 0x7, 0x6, 0xff]}) r2 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x2000000, 0x0, &(0x7f0000000000), 0x5000000) setreuid(0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$nvram(0xffffff9c, &(0x7f00000016c0), 0x210003, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4104aec6, &(0x7f0000001c40)={0x1, [{0x0, 0x600, 0x1, &(0x7f00000002c0)="e542757eeebef5ee5386273d99a76506e0c1393fc9fa4950e6f676c8b7f88b9903da797df33247c0dbd8f90fd27271b0bc1e086ffbeb68c3fe55ae6ebc53d1386f09aa760e01ebb82e49f8ce096201898ab4bea277b224ec057eca2e97dff0fc3d7d7893a3b5c40a206754fc50d40bd73dcd1c5848758f9bd3f9daf2f6aa68b1034c52daae8c2985dafcfc60fc125c40b456288e60d66956d766290c39e351761a467a292275c7618e068cf1ddb293ad3a5cb5bdaf31ac196e70902d2395f9c1"}, {0x2, 0x208, 0x3, &(0x7f0000000440)="b98622891efd79a63fc9ca6bb1b3ac61bea600618bbc8dce92bc68b6b7a0f58cfe638cfc08dad53aba4219e68f907b9409ad0c50a4621fc46f01055ac10bdfcdac"}, {0x2, 0x3c8, 0x401, &(0x7f0000000540)="82ccf5130f5f39ba1c5a98a5549fcd13421c7f85ad5699160d5f9c8a599bbd393f3c7dd9cf3ff08e757f12121622144934a3c1badfca9cc2efd548921271c6334de999aa96b653f2485a4aa2401e9d92a7325f670bbcdecdb00ab3b2a86395e7e7c228baad9ba7120b709b569455176d96e47e9fecc538b525"}, {0x0, 0x3f0, 0x8, &(0x7f0000000600)="2d395be480fc88188bce9c652b322c85c74a6800c029e4007a31af799dfa4a4dd4793d036c5ed876d615562d232dba7b6770e36e36bce96c2eef15e790e430a36e5661b83da4f9f4f38c1d37ef2c76b5084517482b5527c37d0903784620c54734dcb2ed701b4d4b853d68a0afd3d8a5c636a8ec9a9624c87992ac5efa4a"}, {0x1, 0x8000, 0x16e80, &(0x7f0000000680)="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"}, {0x0, 0xe0, 0x1000, &(0x7f0000001680)="b5fc652530c522efb5b57b3b0d6c8690f28e53bb1696d06e8b34a9ca"}, {0x0, 0x0, 0xb, &(0x7f00000016c0)}, {0x3, 0x8, 0x4, &(0x7f0000001700)="80"}, {0x2, 0x5e8, 0x3, &(0x7f0000001740)="1bcb457e11cba2c58e18ad7ca846eecb0f2c17f1a099be99f30a2738cd7030ed4d9510947cbf5334ddeae366898796d2b689cb8edb397042976a0fe4a316558f2bf4168e4c1bea46e511097a152cad4d9031d35f2f53bfc6e3dfc78ba2bf6a1442e8da6a4f7c6639ae1ad4ed2159330255ab7f268b9b50fb1597c9613db7a731204c52cddbf88f7bf5d0df71da00eaaf9235b52dc062a01c00c882bffeb6679fd6310a57ae7df49d40c2cc624f959384c7dc3d2541efaa39d202003ab1"}, {0x2, 0x4b0, 0x8, &(0x7f0000001800)="e40420e56f88a659edd336544840f0c00ea0f1e77a03778513872bdd8e2b96138f16e3c7ad59c0aa0dc3e7be045922aa65a1231533e82c24ac80926e7286fc8ee53b5f3549c75533e8fabf8d09b738a294c1a9273020a12f207258f11cf4c2ecc06455a4f436e4e335567dbe07fab678c32af447163308e07c6f1e726655ef72866a82a3eb44c82f6a9b42f8d9a0e14168061e5498d3"}, {0x1, 0x0, 0xc, &(0x7f00000018c0)}, {0x2, 0x628, 0x64, &(0x7f0000001900)="57261c05a730e44e0c631c4bd0cb497453545891a0fbaadc2f5727896f0a18b6dfc4ca28fdfbc34dc39458c77e7b0794a017d5f6187a67449f1d5fd65c67c5988b2bacd1951ae2b3da5a68bd077cf9b6af48a384a7d52ea5ca4f98b1eaf6437b484706bec228d36fca584b6f9f2bef105658d3e91806f74d02e5904106aabbb8e74d38e1afadf97f200102e92e01aed4f2b11a8b288362b416008225fe7dd16ff566461efb468b5dab587a96bc544af9a433615258ba0e9d22f48d0f3333ceae814fada0e2"}, {0x1, 0xf8, 0x2, &(0x7f0000001a00)="502b1ab9893f40540961060f0eae7c66e5bd67b98ebe114d0d20a7ff5dd6e1"}, {0x2, 0x20, 0xc, &(0x7f0000001a40)="751aa1dd"}, {0xd52788e50d8c0692, 0x7c0, 0x1ff, &(0x7f0000001a80)="6d09665571e41c7d0fa4324e5466f951622b07e6ec23267ba7e62ce344f192029add53cfc692a8d71e7a78b5a07fcb39484320ab713caae823bf8aaa926d81c0eb45d13646bed44d7129dbd3599c98791509e2e8e1f9d7f772b3b1ae333045b76646d0dcdd973a829d75be6767d5fb6f0acc586ba4a549af870ebc542b4f92d27d0e4268d22581c18de86c492580eaa1e6d0dd4191963f5407c28d4bdf24a92e4576bbfc83c408b1d627a99fc59f769dd1b73af8086e096f9cf60a4e5067397e2dc2d61fcf2fd216fbbac51687cd0acae32fd73a771b2916391236f307ce1a8608ae3b9b452814f6ec4e0f97aa4b960efd75a72f7e1ab948"}, {0x2, 0x498, 0x1, &(0x7f0000001b80)="3a9ee66ca6cd3d13402c22d8cb7bf0a80dded26527c8221bea39781a2555e5f8a754a9525bd68b3606d3e51e82d86d27c5483f664c66d75e94cb65ec911f7276fb6ed57cce7a730ca5a88d8c9665898e9902bee33f878c263bbf2a72a46432b66dac5a0110d3b4ecab0871afe22b1e849b0171a8fd52be2af86bd993dfba4c0a112ca7918c9529dfcf2103b5bc0c6ce026925c"}]}) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000001d80)="ebe3a0e9796cfd1647e2990800000000000000b372219d205e81f4a7f71c1926aae1efd7e01461b95597054a863f3d5cfe6cb55b5bb9fa6935849e6098ed00f8ffff1726b360fbcf7b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db7945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8141e12f4b9376", 0x73}], 0x3, &(0x7f0000000380), 0x0, 0x40004}], 0x1bb, 0x40000) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) ioctl$SG_SET_TIMEOUT(r7, 0x2201, &(0x7f0000000000)=0x80000001) 11.958581578s ago: executing program 3 (id=1269): keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e65772064656661756c7400005e5dc3a240b5684bb18a791cb1bd24b842b39d56132d039cce5c0e904774"], 0x2a, 0xfffffffffffffffd) r0 = socket(0xa, 0x3, 0x103a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x100009}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x2b, 0x80801, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x52, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r2], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 10.023560123s ago: executing program 5 (id=1275): mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0xffffffff, 0xb4d, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x6, 0x55, &(0x7f0000000580)=""/85, 0x41000, 0x40, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0xc, 0x6591e9fb}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)=[{0x1, 0x1, 0x8}, {0x1, 0x2, 0x5, 0x8}], 0x10, 0x2}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r8 = openat$vcsa(0xffffff9c, &(0x7f0000000440), 0x200000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8001}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x7f, &(0x7f00000003c0)=""/127, 0x41000, 0x18, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000480)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x7, 0xfffff001, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000600)=[r2], &(0x7f00000006c0)=[{0x5, 0x5, 0x7, 0xa}, {0x0, 0x4, 0x8, 0x8}, {0x5, 0x4, 0x2, 0x6}, {0x1, 0x4, 0x3}], 0x10, 0x4}, 0x94) ioctl$PIO_UNISCRNMAP(r5, 0x4b46, &(0x7f00000000c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 9.620345327s ago: executing program 0 (id=1277): syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d"], 0x0) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020}, 0x2020) r1 = openat$dir(0xffffff9c, &(0x7f0000000200)='./file0\x00', 0x402, 0x5) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0x145) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000200), 0x401, 0x42880) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) recvmmsg(r4, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x100, 0x0) shutdown(r4, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185647, &(0x7f0000000000)={0xfffffff, 0x3ff, 0x101, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x9a0919, 0x4, '\x00', @p_u16=0x0}}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x4}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x1000000400000000, 0x5, 0x7, 0x0, 0x0, 0x0, 0x1, 0x4, 0x3, 0x0, 0x0, 0x7, 0x6], 0x0, 0x2e1090}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xa}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sndtimer(0xffffff9c, &(0x7f00000002c0), 0x40) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8.646793015s ago: executing program 2 (id=1278): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x14, 0x0, 0x48) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x70000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_generic(r3, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000002d00)=ANY=[@ANYBLOB="cc1000002600000328bd7000fbdbdf25010000000800c5000100000008004500", @ANYRES32=r2, @ANYBLOB="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"], 0x10cc}, 0x1, 0x0, 0x0, 0x44000}, 0x20000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x48}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000051}, 0x0) close(0x3) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@getqdisc={0x40, 0x26, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x10, 0x6}, {0xfff2, 0xc}, {0x1, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}}, 0x20000000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000240)=""/210) r5 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) gettid() r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000040)={0x1b, 0x1, 0x0, "093d4a3b5b7bc69a21cfb7f5eaac46dbe89b13471a0488a6679f9a2102249341", 0x34524742}) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x11, r5, 0xb463c000) r9 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r9, &(0x7f0000002940)=[{{&(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)="73c2a31b91eab7dc2363f73a7cd4a93cec6a6a6744813e53fb02d3adff396504398894b0572d5527e7ec27e0ffc33573c89f907f5c998363fac469c37bdd6360c3924a09e5c050b282bc6d8a3c44f193e5a42f248e293957890e608208c982de7cfb10b4919bbe4666fc0f7e8a42e919682b93a313f83d6e20244b05777caba5b5bf164b87621ebe2da89aa81211dc9d970d5367fd35312c0f8dd32dc76fad79f5e9c74d19ac085d01d5cb8e855c74c6460b51dbee", 0xb5}, {&(0x7f0000002980)="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", 0x186}, {&(0x7f0000000640)="b695c1361fd31f1ee9af7f4f655fab7946580f654a13c3fa83251c02079ad83d451c4e909e3c908e13b6bcb9c7d3e1b7c3471c71f2128c4fd404caf78b8b643e90c4d69be66f6a53785d91643ae03b080230f81190f38e9e42a769e4bfc547974881bec0eec134eddb1ee88095fc2886fbb742080b3c5302141defe2a5afde3b649e910ab233df516d3358472f3dd302497116d966cb020123ee41f8cc33924dd67951cb081593538b7d4005a35b32861f19f812925add970a6a1ee2038ca12db1378466943536eff3402d74ed07e241b66c0a502c6f9e7a31", 0xd9}, {&(0x7f0000000740)="2d94ae36f5921859cd1899d9e132795f4b8650e257b26ada46f638f09245a4735d773aeef12ccb5e6f6c7496c4eb1351429d8909364f182531e43de29ac713e012f8a9b45e06a8c1e806804e36c816b0e7abcafccb6f56a51aad9c1297dc389a35c2e395485f0662d8ef210ada16eee45fb71f0752890145bc0bbb6fcaf5093719faf78690644eb63f388d36b05383077bcc19af947eb3eacf7b9462b44bcc62757fc376a0a8bf9f09e107e1877192b628b101b92a4e2a5ab276839949d6ff054a47b5d93b", 0xc5}, {&(0x7f0000000840)="24d78212670571cb016fb71c9caccc87082b8a23f5551386c8f8c9e08d77939384b398194b8a5a875671542d5c147f7af5c3f77b7e8fa6cfec3cd63d711033d4240c3df6f3f047ef8f92c401d86a57e584e50347fe2e25e0d763d1696b110fc4a8057ccdde7ac981bb8fa5ffa26ab90e7993a79416db86a4", 0x78}, {&(0x7f00000008c0)="52efbe7df462fca4f752aa81e5ea2e5c5115dbb05c62876cde1f5927329563bdfb2853ba490a5d40a85006002840735ce20b7fe786af8db44ae7b790ebddea91d59c14bf2118db29a51f4a446e97c5733ddf9fca98ca0333115ccd558aa253095ecbe20f52265f09a71871049335573687bdbc19b2b19531dbe551681e428cf0917d00ea10c91cc9fbf7db3b3ae68550b70a34a9be6bb375c4bad1e931904807009d5a6cba483d196641ded6a882f17ec597d0809fcfd8b5ac373a6c003734adb8cbee1f32add51464afd6d7d60cbf3f20ae87ea9aa0260e60e435e8132222e09a7a2a365ffb17398ec53f33c83b09e9f1826423a21f869d8738fd5ccd0d5cbc573727d14d44b0829ad5444f74abd16d71bffa0eaa640076d505ca70af7a986551e32d347e74fb614d1098b872b8e54515ae932d0140434dd3edf47a5ea07b624e0ed6dd57f324237836fb08d28966f3c824b539f10556bec46c332a5767407ad2448761b29f4a526ad9727d3d356c50d5cd21882affc372a184510c395519ed7fe6c31ef1a1d39f0bf2d435c8d56194421b7f45a61c848c94f100125535dd0ce11b58eae9f6f9ea26183dd865fdaaf79c7f50443c36dda0ceb20e404b2845671e6d576f8980d7b93c1dc9f094b138edd707f548d1a8306e5e3bafdb211ec2997ab7dc000e71233976665600e983da3e7c4747b13e8b863b2fe3d8c5fcc005ea776816f8a855b79fe8119285b33f6289196bb6a1c7103b2b002a7c133cb1820edf81f2ce32b7a2f76ac64cba00413e993dbb3a13b96478435f7c36788fd6894fb126bd57d607bd112c4db77635ed457a05b8c7e557ea9bb83a53bc9ff7ff43b8e386a2aa9bedaa4d106fee181486c3918fadf4e4c33a0b2971c300a413a0f3677928886b9387406cc2a7857a4dadb2fbf8fece4ace7f551e87c383c013b267363156daa05e824529acde366faa1aa91beb81e5f0b5ec2a0a46f36ec77bb90709c37f8fa26b9c4084b940b6a176a35ecc25db870a211fb1b39f8e86e73321a1ca6bd8f20611ee722c663976e9c1a76e79a3ae619a6cc2e6e8f348508791318adbdcd6b301f97ca4ec7c0db98147ed3fca8247e9b5c8800a64d6227d92bce7ed1b54088be94f9c24a0dad7015220fcf0a2bd676b8c6f59c603db9fae60dc2221d91467f29a0ed09d06089fb0feb499c07ad2164a5f775ca4444a29aa858391aa9cb12c89142a076d368e7ea3314bc86cb577dd954c0f9c637f53dbdf9d93aceb1575bde27359bf9c5939097c735df9e608150c568aacd7d4135ab721e41ac80f0009cfdc253ef2a2ce5483cb554979a62f5be68fcca6b4410a96df098dd6ea947b6073e29890ff3e94e3b971acfde70addd6e507b9a22e0ee1090a4cf0f68f91deb3e8f979acf5bebda673c44fbd94b5e4e5ea1e9922967a061d664ccb1f9fb34f95fc994a9165ac0d013121b6853b29265a2c1af038d61c739e8b4e05a98d555e38dab77236a03a4682a0131244f4d5c42349505d91800b83db8ab32370e2956a5999677afd93933c69329f97e3b7619d215b183126940bcceae164acbfba8437e3e80ef2b42efc8c56dcae5dc4e61ac40868ce512566336d610a91dfe2cdd74c3769acc704b193cd459f95e0ded24628d1b0d09bd7d102fbd570820c4ae648982ed3642c916ae80061122e56d15f4314b8d1b43410d9aadc221122c3548c328ab5fd912bb95002527984f81d139a7c24295557a5d39b29b058e45e854cf04e83055f519b40e39bd1898f859a9da88a8add8133c7f8021346802934d70224cbe63ac08b7d1b68c027e553d6f6e5c8bb9ed07bed4e36bb70f3016ff89c6f8d44eca6eacf858c785bd5b3552cc4a9085a7a39c0e4d991e753dad509874634e5bf419d154f624b03ac71bc517375cadf5c3919bb34d43ce47b8785baba31c96d923d73d55d12adcb8188d9a462ac99ff85067fcc9ed673be92d2afd46f6b45b1016fcc93511ded4a060e45635db2dcd26f95b3a3f51b21cab56f6df4ff7202ffac5b90c34adf6c74d80b9a856f37a50a611aae7932db8836ae332a0b97b2e87cfcf44142e6df3c7d10385bc5426d8bc142a9674b4aa0c71cd0552d59218bcaffb0f1e10cc8b1656ff462bad458bb7e33f864905ce9fd7215f6f589aa739f62ada89459b9a771b99ad067c94c7e7d50a95426cdca8c32315c725606eee1ade17a441c11b2147d4e754f53ac721bf5837a6a1bd1aea372b49b5a65e0004523533be60d63333990ce50a5fa4e995845dbe9c9a42bbcae72f9c60acad8081c93147d2ff236b305c539e9f17db8a6703f6cf294ed6a8dc596e9c93e201327aa0c39ef5ebde0373fd476ae051472c3e6b35f1b7625b81df0e39df8cde198f886ce94723dc92f1b1df3aeb4071ea10d8ce329639dcdb7a9f471737741c2edff322ef12a424403bd6ce70985c2050fd9695c980240055d0f930b456feb7143eda5253b630d791313124e525bea16f5c339005e112781a1b2a79f82686acad33ce0a2a2c6cb2737f4887b675b165708b70145ffa6c261660eeeb74b6477f278ec0fd30a83340a235ef6458334aeecdbfe0bf5485e9e6d716958e7187725a7380bf868e6d2fd707b2249e3554f6ce3f4659ae3cbdec5c38e96fb3192e297252382715b6aa6d00464b739cadab9edef1daeff025bd01c006d23013c81a9dcf2ecb042e0ccb1df3ad73a13520e449ef1753fec5414946a987dc511d0bcca88da1dfa0a1a991e5c143a087f3ce6496989330c6d50adf1ac578463ef5ad72a3b8cd95b3e5550bba110a214bba23cf4001b674fabcc2e7731c210a193dfa59c5772d97f44af0d9a710c98ae2c81554c7d30d4a09f81f8aaf8c11c092f341907ca570bf4363c000a6cb844ec9114145a740550427486ad03e07aa069cf11b2168e40639f69e9c1fb9b03a44ded2a345b9dd3b8bb5a9b944c2c9b556effbe625389dc46fd8ad6f4f8508079391abd560ddadf7c91c6769cdf368dcc6520bcf94c45f58e6705fd9174731f7d3507b5cc62496171a2ffc205becc9dcff0e96b274d10f3ddff5be07c9fec2db282a050b2d0fd886508a6c65a36cdb0e87aacc7ed68aa7ef1bb623f8ffba1cdccb755e02162c5d6747640e50463c388d0e97a7902f11442924f9f82cedce3e20a89292943c9a7f332499bab48e5a90b9e68aaa56b7a141442115be5bb8d3412f950760a8eabb0ca36bf32a3ca84bf2a298992c979222d16295b6e33f4367427dd3afcdde820266c6497d75fa09dd82361395e058c551d6105827066b0ef47e3370d50d996751b9e19ccfb01ec0101f8123858339920cde0c05ee095fea2c540af68bd52194c6a7ea080fde8e71c79f13321d99d25c1d8ad1c5c34683c68066e8154e088180fa44dad8fad04a353d6da2d6bed531a4455c24d8176094539c8f0fcc6366c9fd539ebf1e9f4a43e1b0d5d970b69b8c8d77836935d718d9858a648d3325e0217594c9ee48c9e2e1e54be3064c8e8e7c2b887e859e5d2aa8cd468273f09b35432efe032f09151fb53eadd51050cc6aad31fbb94a4752a685c27208045b1bab9ea0a6c8a542f65707a2525b2d70b2033d51686cec540daccc22799fa33a9c67913e3ac612296ac1c25a08df88bcc94d40824acffc8a2ed281b41ae7b381ddb9afa8c7084b1b14e9fdde1b15885cbecf676eee7f51d5d7c099c5e0e9aa73eb9ae7f1751a2805fe0d840f763e149de9cd65ae4a47673d6bcfef354d4bedec435edf899c728ef91e3e16b1de2a7d85166929fa75007ed16796e003e567b271b9522aeb7170d7da71c0a5571d51d5efc8499c028b280e87cbfe99c8e9b8797b1c9bfc6a2b7f4c75ad30e6ccfe573adf3ee574f5d4fda06e9892fa391733c666c7db54a0c1af98b58a7d868587237182974daa142e3be314c71ce9a3f188fd3a55c787ad0a8219d4b3c849f29d809faf279a72294895e45b66ef46b1bf3f16a2ceb42959aedfa450526df2f85b069e3ad22c86a27253eb0c2187af908829882b4f6d89daf18df49634e350ec44d4de3e3c247150fa0b3960d960a2c12f3aba8fcd57ba227b91db55001478e5b893823390833d1ad2d7afdef93d40eb41f401b45bc85f68150090d4b355d9bcc7836f73ccac14315fbccab60f794d1b30119b4292bfd07bb456ad4e918666f013668b37f4f2f427b98d76b5e3d1bad1bb184861c4f9ee62ba75200e664a7051580cea8704eee809e50d451fcc31076733e67c88e7c0767f3abfc69b3ed2d827a6ba1a854bf98f99fce677a0262ec1231496ffd4f9514b0db2ed4a726f0b0e9a89daf9b3d5e2450f3073c7e0ed8d5dd4672ab3b59f591006e326deae4e58c492a4c58b95214adfb1d8346df17b0b2b497adef72960255b84a5a15cf02bd6b65d65a87a4485ec9f85843bc5573cbaa5c2e4593ff9d9dac518199f4e3fc7d102f52c5cbb6c92fab9128f57e5d8f1cc46e2755bce2eab21c167e0e4f10a90bb8749cacaa0db019c4a9a38019acfa74519e4a47b053d3d7c44eb49aac7df900d475820b86e4a120a1ebefb063c850f2b4c57e9bdea76d2ece46931d18364b367d1210fcfb6322f2a9828aa11a29bde458fbd9d35f93de5e468847c7406534dd2e2e581b16b92e201baeb7fa9812e321ee6bd9f592bc3e766d4f10ad4c0f970cb85ee74fa86b82e8553c635b1751670f8d3f852f346064fc25c708e8cf97521d45a5c2b91f9f2ab044ee4f4839567413891ebc67b3c437085fb915160f9f87ef180a26cfc619e771a4989b088b6241d057ab7d662e2d01c0d99aa17ae10891f86ad434373f857845bf41dae0deab51f1e92c23432ff8a10bc5457f223a84846f4c4a1e90386a05b21d443bbcbf12292404c1f6342f5e0488b674c283ca7cfa308216ec972b94161becd3ef6831b914042ce7692eb483ba1cc2c8a40d65b4c997800f4eb6bf17b0a1007c740e1a08c9204532315118411fa8e82bd393ae655f1a80247310cb9c5ea0a15c831472a05dc8aee12f72cf40e52c28d7f421ce812a4991efa242a9120c6db9e9e8e719aa4db2bad3106cd5c4bb20ce80e3b55cfdb50e14a2bf54d7a5af537dc318dc39cb5a6393b8e32a81ad1b311738994bb2ed44a196048a5e0f0784cf01ff887d90110273024a5495cc16aefb2280c770b0b153f2baff492c016b8c2610cca2ddf9efe167d5b146e073997b09452e7348cac291de3a13797bfd820d4f07e2c9c60252343623e3f80e03cf6d5a6b679e518cc1cf9489da1c7ed877bdcd810fb87ed83e48a58db15b7f96c831c36c6e6de44b2d3725337eac35e57db265aeeabe236bf5d18e06a8650b98a9cacdb77e8ac41ec4138294e1dfdc5fc95be4528cabec3fa9dab0b9cb6c24639f7322ee56f730916ca1323e31edb65671608618188757e91f74df0f0f8b81ea1741dab44c06001e64e1cac5cad00bcff8b665a35922fedf19e20e09ee761fe8b603f6dcc58a58426ea98891ecd3fae3b0ce37dfcf32325e960e330d70fa1c1b4d7df11f12acd48c281ebad1e999fc014fff043885dcdec117c1e0313f2f7d8d6668b1ed18b471754b0d260c986a667f9d49c0f89577ad9f3fd61bfdf77a2c40358a6c081cf9d86589424d4049b2bf28eb4111f206702ab4ce92274006404aabda379668228999876a37b379c2e89b050f0df104474e4b8f9d1e205157c2dc2d868978ab2e0df8a7ef641dd825389d759d5ce711f33a4ad648e817448b150e3b63521158140f766939d95cc6a56297b87aba60f6ddbf28e9a670ce19a85fa239", 0x1000}, {&(0x7f00000018c0)="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", 0x1000}], 0x7, &(0x7f00000028c0)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xd3}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x10001}}, @ip_ttl={{0x10, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}], 0x50}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2ea85000, 0x0, 0xfffffffffffffeea, 0x0, 0x0, 0xffffffffffffffff) r10 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r11 = dup(r10) open(0x0, 0x10000, 0x0) write$6lowpan_enable(r11, &(0x7f0000000080)='0', 0x1) 7.803201538s ago: executing program 0 (id=1279): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000002e00)={{0x9, 0x7, 0x3, 0x2, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x200000a, 0x1000, 0x0, 0x1d1, 0x7fffffff, 0x5, 0x5, 0xbc0, 0x7, 0x15b, 0x7, 0x5944, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x400, 0x2000040, 0x10040002, 0x7, 0x0, 0x2, 0x800, 0x3, 0x3, 0x4, 0x6, 0x6, 0xfff, 0x3ff, 0x1, 0x5, 0x3, 0x5, 0x6, 0x3, 0x78a, 0xbfff8007, 0x200000e, 0xe, 0x0, 0x2, 0x5, 0xe, 0x4, 0x9, 0x80000001, 0x400, 0x1ff, 0x9, 0xfffff647, 0x408, 0x4, 0x4000001, 0x9, 0x8, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x1, 0xa, 0x7, 0x80000000, 0x81, 0x10001, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0x100009, 0x7, 0x4, 0x1, 0x8, 0xfffffffd, 0xffff, 0x6, 0x8, 0x0, 0x4, 0xef, 0xff, 0x4, 0xffffffff, 0xf8a, 0x58a0, 0x1, 0x9, 0x895, 0x6, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0xe0b2, 0x9, 0xfffff561, 0x12, 0x3, 0x3, 0xfffffffa, 0x3, 0x2, 0x1, 0x2ba, 0x4, 0xe, 0x5, 0x8, 0x2, 0xfff, 0x4, 0x1ff, 0x7, 0x2, 0x7, 0x6, 0xff]}) r2 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x2000000, 0x0, &(0x7f0000000000), 0x5000000) setreuid(0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$nvram(0xffffff9c, &(0x7f00000016c0), 0x210003, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4104aec6, &(0x7f0000001c40)={0x1, [{0x0, 0x600, 0x1, &(0x7f00000002c0)="e542757eeebef5ee5386273d99a76506e0c1393fc9fa4950e6f676c8b7f88b9903da797df33247c0dbd8f90fd27271b0bc1e086ffbeb68c3fe55ae6ebc53d1386f09aa760e01ebb82e49f8ce096201898ab4bea277b224ec057eca2e97dff0fc3d7d7893a3b5c40a206754fc50d40bd73dcd1c5848758f9bd3f9daf2f6aa68b1034c52daae8c2985dafcfc60fc125c40b456288e60d66956d766290c39e351761a467a292275c7618e068cf1ddb293ad3a5cb5bdaf31ac196e70902d2395f9c1"}, {0x2, 0x208, 0x3, &(0x7f0000000440)="b98622891efd79a63fc9ca6bb1b3ac61bea600618bbc8dce92bc68b6b7a0f58cfe638cfc08dad53aba4219e68f907b9409ad0c50a4621fc46f01055ac10bdfcdac"}, {0x2, 0x3c8, 0x401, &(0x7f0000000540)="82ccf5130f5f39ba1c5a98a5549fcd13421c7f85ad5699160d5f9c8a599bbd393f3c7dd9cf3ff08e757f12121622144934a3c1badfca9cc2efd548921271c6334de999aa96b653f2485a4aa2401e9d92a7325f670bbcdecdb00ab3b2a86395e7e7c228baad9ba7120b709b569455176d96e47e9fecc538b525"}, {0x0, 0x3f0, 0x8, &(0x7f0000000600)="2d395be480fc88188bce9c652b322c85c74a6800c029e4007a31af799dfa4a4dd4793d036c5ed876d615562d232dba7b6770e36e36bce96c2eef15e790e430a36e5661b83da4f9f4f38c1d37ef2c76b5084517482b5527c37d0903784620c54734dcb2ed701b4d4b853d68a0afd3d8a5c636a8ec9a9624c87992ac5efa4a"}, {0x1, 0x8000, 0x16e80, &(0x7f0000000680)="c7b82b1b4768c21de9a53de147e622d2d7f2c3e94994e912548ea59fccf48903305eb85bb7de29ceb9500a6d9954ca5be3d67f4e3c9840401909d6961e41363ae189b0101471e68babb8350858977e46c31d96927bce6ff10403116a3ecf54874962d439a0de0481178962ceae3fbb33ebdcd297a4e98d9655fc34451b2f69033fdd0cb684330568ce2eff4da8d2881bf0d28579fbfaab6fb0074cd88bdebec7b94a92fb6041c3692a5012faec24e4fa97e5c28ea6fbd05a1c99561b40a391fc826e3abdf2b7b6ca09fbe12bdacd00a3e999611f1d34bbbc166b8b36a895ba637a78d9a21a57188bd2aaed18806c8efefc083af92223c4ad35a9ac16604cdc13b41f73c405e16f935734dc7d6992fc02739cf3e55e604e52ad643a468f5336c634f7b632ea4feeab1d345b52dd5b72b01d04a57e567f06275e63c98c3a8f68dabb1d919ba8d53e95dfe61d19b29dc6e3917a9fbd70b1fb3f2768f27445d5714e86b3ab0c128de18514184d460d00893452e625c30fe87016f2ddbdb0b748ea52e93ece1af1ef8cceb5f28edb787b9675bf1eabbcc038e5adcb6415e60fd18c36b697e591e9975040c4c775e3bd097eaa8cf100b7d098607ec296fdc92b6b511e557b65bf17bf869ff782c48948c56adb65832f63a2f331e77a8398db7628a279e0ed06c0f7930bd112438eb8f023fc2b47e8ae958c868508a1ba3ad24823dbe560b445dff2161650ca6d99d98d1555212bfc4bc9ebc95e7897d07afd43b1c7d9b5610c0f32aae68bba4e130e1f351a6d6f20924d57b3c880577c2ea557bd5a0044d65efdd652020372b51d1507c287fa7fee650b54848c7ce55eec2319ac368d9cbc96e62533cee4e5644a395a67a749404a9df5a0fc9f3513bab8193a9604ba920a42dca139b62a67fd4b570481a3cd29688d0bb3312fa5d78b89ac1caeb677fe702fbf2da7c39166016d6d7e8e184f534d2a606058895544d632b3b21191c70d602ba095d41a78082564ab09e79e3dfa27120aa8a456dc9b2bc7e0b8b2c9a9b97139b497a75b001679d041aefe43934c666601bba303bbd85f1b1a97afeab576d9e30ed750efb058b3b427f62d1d72ca2343ecdbc37033ea2188d97c1f12d89066ba3d80a294687378fc54ca4354b07317802944ee66fcf64684bca3da9994e548c3aca46f3e9b2b4595ae12e6bc57087fd080219aff38ad1fcc7d62e4d63c19f3b26aecc317e3b0c1dc56b616afa92990a2f44774857c481fabda8d912edb41f77c88448fa7bd696f0c9575ac4721bf3789985ca861148d308a85e66c5b5febbb0336e1f1c70f8bf5a43b4ae39147f29d2d9f7129e6eafa5976b243f0dd9f03fe593ced42de9e6d911c40b43c45e3ae32243b8806eb0c56c5d51cf3f33a877cc84203f934720bcf2a063f5c4f2789c8642efaec7d5526642b60e0123a35f92b32f84f990ce3c8834e42d824155a77a77691b4a638ceb247557ce092484b73ed2fe25aab626268b6afabd09fe6fb775cbfc95d30b1890eeb0b54727d6dbd359d79d777bd4fbf794085ff74dfa005e07d94dd4f332a77e0556517ded2edcb1c0b4e5fc29737ebcaa547f85993b706023964bc9e334b3bafb42bbf1f077def640b369fd49e2dff3fca5c2eca10a7ff9dfcd344d33b0c10ff3998146453cfac8cf81d3560ea5eacd3caab4692486e66db4d50c657ba6d6ead6d7818bde880712d04888453d2400dcb4f4593d11aea391de9a1f3f9388d77f15826ab56d6b8f6d8eef00fc6743f30530aa11dd99e97c163ef09d4f63528d94a9758d722ee12c725f9f7245ca1b00ebc28d199df6f2b8a8846559359a82361289fb501f5eab6dd67d8d2162789c0b0d6d7ac0085c73185459a00398bff023efe937d9064826890b4e9957360048bb2a087bc4c0271c0000a9c047b931ac00b98d85ca09624ca557cba61a2b59f23dbcf93098c0e0bef6095404f3a3a85086bd6ec2d207478a5909668f3a23d40c7b3af27b0808a625c2d637b8b60e4c3042af6864e19d1a4a93be5e6bf7fe9437aa83b44ce46274a0f26b50bc89e56fbea965af39728a9761eaa80ce00bbb21bd2511f6f49cfcfd4972a9abea67ccbc758bd56ebfa1f206349c67a15662a3889e04ae16064bc20031edab61077896b6ed554be8494270446faf6ac1ef33fb5e7fd38653f3c9421057f5ab9c326969585889b09159f84dccf4ccb8e87a092819b86c1cfb9bbf5b531309a8b9afc0d9f2e75cd069cacc8f47801b8010edd0333bf720e0d2899bdecb3a9f15818179060de5ab216cbe89d5f3da6ba2b3c9453149ffe888fe61b35c4ab7e42fdf34c1549ed6ed5222510e91f5756624ec522aae69ce770218598fec05b731dec563151d3efcad59eba7c22fdf71f92cbdc53031d33837e6b7c85c3f972aa89b879c40fb314ba5afda15cad1815162c32036b8b358ee6b53ca1ebf0bc617c21e3e58a9feffd5781054a2e69d74cc3fc35d15d7b1bf9c79887b319c52fc762e7c24e593966459adf837975c80fefb0aad2d346d774ca1ba91f69ca266f72add544fce44bfa2356aaa6de58fa7da276ad5f42477a69d69354ea4ea8709fc7096ab42f7b9acb0e127819f56512cc6e2808887caac282de5ec8d7a7b986678b3965a80ae3d3395b99bda66600bcacfe7bcfeb4f3c743210ec16dbe865c70c8bc72f0181cfedfb3700262844e8111f7a89e61acf0a739f0a9d44acce2696b150dd9cfd4effada9e8dbe6039f15fc8029eb270682ca92555fa16a5d5b077e94bdf8292fcf58e61edd3f1b57c71c1be7c3c827441a1b79afd6ef8aee072e6bb80875ac6c813da5103df9bda269c1606961f11389d787c7e0b7b106a9b5cab8cb337a2777c131413e1f24be1ed6cceb6ad80248cd82ce437ce0edd52352c09c131f1665b69b719dd25f61759cb692749d8e1c2da444b89766cc747519f0ad27ce14cc116b06bf1342c293e93fe56ec8d4e88e847f1a59b323ac58f4d97db28516eb48de190006163158331d4c6ccfbdcc6282e6849b4a98ba3694fefde2fa22c22b59359211e6d2f9baabf62b7a6d4297585655b6a114508982f8d0e0e33a9e435014158016dda9a114d8a4e158971a0eb309deaada52326d1bf6e90f9d5c01b02a1b44401e122a70af12b83646f867bc3a782466c4236c861c66ce0272fde0c76506c51a903065661dab11affef04dc20f6bc3718e2b2342f8ad1b423a6782bbdd7edd6aba285bb6ab8d50c125d8c7afeac64603cac54e75c29e8f3aa399c55d1562bbc191918157373bea7780ffd8b2294b49692127a72bb9149d1688a64ed51aafff122ee4a795be4e7abf47598474921102e3c981da0d095a1b9c59aa9e9037cf51d2d854bff8bd8bdc6e4e46c175c6961bb25fd87ae04c01528716933e307937c7e369e744bb11e03adc55dd78c439d9b877da8c50a98c0f9645d4eb0c09a0c30a85313be05f9cfa12c545f6070c6b599d912ad9608800dcb04c9bdffea64819b1e98dad8b8e06d99c4f0f5a08002bf906947c92453b5dc6eda09b0d05f2836979a635b21fa486438e13eb841d5b504b20952403cf6f046258e0d694a29e9fab6812703cd50c1edeb1ba5837e8aba705855f354d7eba5815eaabc8a46c85a814f5155bb1e32cb4ddf55756bf8089253ca6d6dd0a405746c12af1a5ebb8e027d5b7caa6c737e42576b707d8e910b0c62e38d69af6c45f46c4f72f8aff24b8eeb988c4140bc0fa31c779f168451577937f9cd3a01cd1a0e593af2f2eeb59e08b2b4cb624fcabd942c29e08198a30cc4ca7db0b9b014e113086f92a8a7dab8c914b45be36eece123c764e7bb39dc0f598244225dfe55f8cb890d38f77cb0cf3544a729e97400bb8bb1e281c1b59ab60292f9d4c342668c12205d67f4a311c345a608c187a4f8c00e653f1680edea45e48d91f1aba863ba19d5624724d89c76d7065cc3772cea5e347a843b177f0a355a77e564364a2aaf10307ed4e175ae712c6ec45a37260bd2ecc104c30a42f60a7fdcc7ab939c837ff9382e068543787e68feb56360643715e02587128e2f2adc74beb4746f6ca0a309240b9f26f5aa5ed2ea499f3fff5ad6fec96851d0852af0f7e34bd538963808298c1021c8a2ea22ad94f412e65217308dcd00a2f2f079e832cd4946eddcb2865eedfd827af68604a7b4bb90af043960c5faa4640840ef13e9e932e0e4011fbd76d5713a826512df7c4e9f61b799edd1d1794ff22d63940d38970fcd177122157b90da53faf59892598f012063478e279a25de22b5cc2f5560e13d867a4cbf8190f7d98c6541ae84521535f51569be6d79baf1c6a69559632c60ef7f710d356a6bff7f5de907697ec6f5867e3f1ef30b0caa057fda8205b130ccd80c236b79b1bf4bab0e83ea921e4107772b06b586dbe432295cbec7193d732af807b3ad5b276c05a3947bd85904d72b4fdb783ccd6280f43fa122957064df2b303ce407db00585d7424dc274d75723744a18056c8f35608d1958dc0bb7c86680251f39a678baca06c2af1ae7e7c558e39f3b3615af4edca6e7b110bf182679b3225401b4a2ddd057dad040a8c6e0f726574319000b2d9fe6487ced3bc8c07761bd97374a3fc3b0c6c32e0e2f1acbfed52621ce22eb631a5816bfcae025d5cc74fcad08828912009b886ca9084f86a153d20f5572dd35905ef84c63140f806a63783e36b5279e686f3f94357648eb7d39ad8f381c8b12c4e81410383bd7c01b0ca59c0a59b153b5a01fa22ec554b57499e5fb11c2b8826fe523bfc6e3076abe30922d36a7f90b156795e355b3df033dffe6f349e0b9fa1f030cb13861db37cbc8f8615a2dbdda30fc92126c116acd393757752efeab7d16d108e67d231bd5239e2e83e13c6b23b841f66e9063f146b3bdb72b62aa047b133b2fa5a2c8ae33b19f2996054046428e9598560cb5ac47ca12a7214aaf248e745675e323efb74515b47ae0a69a83a4efa103d3aa9066a20fb88f23b8ab531b93bbf6f235acb246a0934404ecf688da43f27fc5282a2aa121867fecf09e8ee9bd47dc0c7a9b46ed1ad0621220514a4a8ca3061e9d900cd46a607ef2dc14d23f32679116ce7549d15b7a0b24a15a7444206a28c469c16170b12d13d914ecd353b097cc7c64241b63c84c0189c60adcc7ff07ac78d9ae2828bd1d82e8c81c7e95ba32d1ff38ece6a61235f6f7c6a08679f214e29c28cf4d4a9033ace9518bdd877a87f93a32c724779ab9f98d2dca199f37c7ba46909f072c4c954e9adc4efaaf454d0de2e0233b24f53338f2011521c4d64d83ec2a331621e8ae57ac62dc69558589a7c2ae12029ffbcee0e79ffab5a966b6a43758fa47dbb95fcd7f4d36d0e33209fadfde6158cc2335d7c9ca31661d21556b11da1d720b2a40ce7a1a9c4464802aa38f844051a35544db81a1937b5f4098181db4417b3d1472147c132c7fea31d51ff35a6651833628f8b63c1cd78306f6959f46e84148a7829bd9478dbe8e9d362af2a48f962de5addb1b5b9effd4ee39047584b4abbdb69b5b57fca33f6c25f8540f8ce92f928b355bb99ef0bbe604fac6077581d863dfbfc42f1351b24b6107251ad8ff90695635cfb74302df93289a292800867d981080b40b50e54d88855b86802a9709c65ddec28541d5591016db316295bf277823dc2781d2ba1040c8e2febb4d056be1eae010b1da20b79952189b14d318e03cd652440fe64a78cb7b6e9d215a73d06a79e7e3afbbb85a882428778a42d0a70c8ada613973cead7a5850fb0dd9895123aa53d7d4"}, {0x0, 0xe0, 0x1000, &(0x7f0000001680)="b5fc652530c522efb5b57b3b0d6c8690f28e53bb1696d06e8b34a9ca"}, {0x0, 0x0, 0xb, &(0x7f00000016c0)}, {0x3, 0x8, 0x4, &(0x7f0000001700)="80"}, {0x2, 0x5e8, 0x3, &(0x7f0000001740)="1bcb457e11cba2c58e18ad7ca846eecb0f2c17f1a099be99f30a2738cd7030ed4d9510947cbf5334ddeae366898796d2b689cb8edb397042976a0fe4a316558f2bf4168e4c1bea46e511097a152cad4d9031d35f2f53bfc6e3dfc78ba2bf6a1442e8da6a4f7c6639ae1ad4ed2159330255ab7f268b9b50fb1597c9613db7a731204c52cddbf88f7bf5d0df71da00eaaf9235b52dc062a01c00c882bffeb6679fd6310a57ae7df49d40c2cc624f959384c7dc3d2541efaa39d202003ab1"}, {0x2, 0x4b0, 0x8, &(0x7f0000001800)="e40420e56f88a659edd336544840f0c00ea0f1e77a03778513872bdd8e2b96138f16e3c7ad59c0aa0dc3e7be045922aa65a1231533e82c24ac80926e7286fc8ee53b5f3549c75533e8fabf8d09b738a294c1a9273020a12f207258f11cf4c2ecc06455a4f436e4e335567dbe07fab678c32af447163308e07c6f1e726655ef72866a82a3eb44c82f6a9b42f8d9a0e14168061e5498d3"}, {0x1, 0x0, 0xc, &(0x7f00000018c0)}, {0x2, 0x628, 0x64, &(0x7f0000001900)="57261c05a730e44e0c631c4bd0cb497453545891a0fbaadc2f5727896f0a18b6dfc4ca28fdfbc34dc39458c77e7b0794a017d5f6187a67449f1d5fd65c67c5988b2bacd1951ae2b3da5a68bd077cf9b6af48a384a7d52ea5ca4f98b1eaf6437b484706bec228d36fca584b6f9f2bef105658d3e91806f74d02e5904106aabbb8e74d38e1afadf97f200102e92e01aed4f2b11a8b288362b416008225fe7dd16ff566461efb468b5dab587a96bc544af9a433615258ba0e9d22f48d0f3333ceae814fada0e2"}, {0x1, 0x0, 0x2, &(0x7f0000001a00)}, {0x2, 0x20, 0xc, &(0x7f0000001a40)="751aa1dd"}, {0xd52788e50d8c0692, 0x7c0, 0x1ff, &(0x7f0000001a80)="6d09665571e41c7d0fa4324e5466f951622b07e6ec23267ba7e62ce344f192029add53cfc692a8d71e7a78b5a07fcb39484320ab713caae823bf8aaa926d81c0eb45d13646bed44d7129dbd3599c98791509e2e8e1f9d7f772b3b1ae333045b76646d0dcdd973a829d75be6767d5fb6f0acc586ba4a549af870ebc542b4f92d27d0e4268d22581c18de86c492580eaa1e6d0dd4191963f5407c28d4bdf24a92e4576bbfc83c408b1d627a99fc59f769dd1b73af8086e096f9cf60a4e5067397e2dc2d61fcf2fd216fbbac51687cd0acae32fd73a771b2916391236f307ce1a8608ae3b9b452814f6ec4e0f97aa4b960efd75a72f7e1ab948"}, {0x2, 0x498, 0x1, &(0x7f0000001b80)="3a9ee66ca6cd3d13402c22d8cb7bf0a80dded26527c8221bea39781a2555e5f8a754a9525bd68b3606d3e51e82d86d27c5483f664c66d75e94cb65ec911f7276fb6ed57cce7a730ca5a88d8c9665898e9902bee33f878c263bbf2a72a46432b66dac5a0110d3b4ecab0871afe22b1e849b0171a8fd52be2af86bd993dfba4c0a112ca7918c9529dfcf2103b5bc0c6ce026925c"}]}) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000001d80)="ebe3a0e9796cfd1647e2990800000000000000b372219d205e81f4a7f71c1926aae1efd7e01461b95597054a863f3d5cfe6cb55b5bb9fa6935849e6098ed00f8ffff1726b360fbcf7b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db7945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8141e12f4b9376", 0x73}], 0x3, &(0x7f0000000380), 0x0, 0x40004}], 0x1bb, 0x40000) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) ioctl$SG_SET_TIMEOUT(r7, 0x2201, &(0x7f0000000000)=0x80000001) 7.802786761s ago: executing program 3 (id=1280): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)={0x2c, 0x6, 0x0, {0x3, 0x1, 0x3, 0x0, '$^,'}}, 0x2c) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r5 = socket(0x2, 0x1, 0x0) listen(r5, 0x8) accept4$unix(r5, 0x0, 0x0, 0x800) 7.794034463s ago: executing program 1 (id=1290): syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d"], 0x0) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020}, 0x2020) r1 = openat$dir(0xffffff9c, &(0x7f0000000200)='./file0\x00', 0x402, 0x5) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0x145) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000200), 0x401, 0x42880) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) recvmmsg(r4, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x100, 0x0) shutdown(r4, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185647, &(0x7f0000000000)={0xfffffff, 0x3ff, 0x101, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x9a0919, 0x4, '\x00', @p_u16=0x0}}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x4}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x1000000400000000, 0x5, 0x7, 0x0, 0x0, 0x0, 0x1, 0x4, 0x3, 0x0, 0x0, 0x7, 0x6], 0x0, 0x2e1090}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xa}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sndtimer(0xffffff9c, &(0x7f00000002c0), 0x40) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7.031360705s ago: executing program 2 (id=1281): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x3, {}, 0xfe}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000480)={'erspan0\x00', r1, 0x1, 0x8, 0x5, 0x10000, {{0x3d, 0x4, 0x3, 0x9, 0xf4, 0x67, 0x0, 0x4, 0x94f1e458b954ea45, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0x1c, 0xc5, 0x1, 0x9, [{@rand_addr=0x64010102, 0x100}, {@remote}, {@remote, 0x1}]}, @rr={0x7, 0x23, 0xe8, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x44}, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x17}, @multicast2, @private=0xa010101]}, @cipso={0x86, 0x42, 0x3, [{0x7, 0x12, "6ea92e0b4800de6593dcc4a7210b85aa"}, {0x5, 0x3, "03"}, {0x0, 0x7, "76cb0baccf"}, {0x0, 0xb, "885ce7425fec094434"}, {0x7, 0x10, "55f73b26c08744337ffb70727e34"}, {0x6, 0x5, "87e928"}]}, @cipso={0x86, 0x45, 0xffffffffffffffff, [{0x6, 0x8, "e1b697bb392b"}, {0x6, 0x6, '\x00\x00\x00\x00'}, {0x1, 0x10, "bad482d9c42b87b7b2200e86e154"}, {0x8, 0xa, "addfcfc7400d7392"}, {0x1, 0xe, "0f945f2b044102066e1e4a8e"}, {0x0, 0x9, "e9644e5f440d2f"}]}, @ssrr={0x89, 0x17, 0x32, [@dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x11}, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x88, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x240088d0) 6.693215417s ago: executing program 3 (id=1283): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_helper', 0x0, 0x1) r1 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 6.174283166s ago: executing program 1 (id=1284): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000100)=0x8013080c) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000003c0)='net/netfilter\x00') r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463"], 0xffdd) 5.872705147s ago: executing program 3 (id=1285): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000140)) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) munlockall() madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c00000008010104000000000000000002000008240001801400018008000100000000001800020001010000000800000b00010000000000240002800c0002800500010000000001800200e000000208000740000000001800068008000200ac1414000d000380060002004e220000bb4482a942ccdb2cab7201906a69dfad7f38de314b3702b8"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, 0x0, &(0x7f0000002300)=0x1e) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0xf1ff}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x5}]}}]}, 0x40}}, 0x50008) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010329bd7000fcdbdf25240000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="ad3f35459dfed8c3b1b3ba4e9290bd5d3fc6e9ba8cb0b31ae17b10ad0a84d2e27fb46c7991de689b0b827dea2e2dfd5ea8166e"], 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 3.769634365s ago: executing program 3 (id=1286): syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0xa0080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000000, 0x0, 0x0, 0xb4b, 0x7, 0x8, 0x10000, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x12, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r2, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r3, 0x0, 0xffffffffffffff20, 0x24094, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x2f) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) unshare(0x40000000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x200) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) 3.768740072s ago: executing program 5 (id=1287): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x338, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)='veth0_macvtap\x00', 0x8, 0xfffffffffffffffa, 0x9}) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) r4 = openat$sequencer2(0xffffff9c, 0x0, 0x200c02, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, &(0x7f0000000400)={"7a23e9d16043ecb8ce70057452ca03e7791bfba75a3fdc9636e1b0cb5ad0", 0x2, 0x2, 0x401, 0x1000, 0x7, 0x100, 0x3, 0x4, [0xc3, 0x73d, 0x0, 0x3ff, 0x0, 0x9, 0x9450, 0x6, 0x80000001, 0x3, 0xffffffff, 0x491, 0xe, 0x1, 0x9, 0x5, 0x3ff, 0x0, 0xfffff47b]}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x34c, 0x214, 0x15c, 0xffffffff, 0x0, 0xa4, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa4, 0x48}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1c, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'pimreg1\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x30}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0xff000000, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3a8) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaffffffffff0800450000380000000000019078ac1e0001ac1414aa0b009078030000004500000000000000002f0be1ac14140ae00000010400ef8786110c700a94ee1bfdfb29e45dace7d1b7040027d4082689f4f8ea47add5cd22c2b042422f054fe638c43d28c7cfca93d043903eddd7d4cd165ce19bacbd946eb0557ddc1f2061b5ce0e4294b0fd58d26a51f85928d7ba326508eb2df5a64ab336f1311a572400000000"], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32, @ANYBLOB="0a00f50050505050505000002c002c80080000007f00000008000000b60000000800000009000000080000000800000008000000000800003c002c80080000008d05000008"], 0xa0}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r8 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r9, &(0x7f0000000100), 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r10 = syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r13, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)="35344d9700ec59144c367859e19618d161d0fb0453b3e9724a9f5bc36e1e824f763fae96f6571ce10517e926c131bb85ff119094b264a3682ce9d3595b1b24442ece2ce07a17fa398c437b31b88a3b6e57c99388aa119502a340546c84acc74f7dde26ecd708bb6bf905a0dd95a7dcc97ef6fe4248f8dd9d29a3cb44630eab3213c5b1054d537ae117644c60c0c41d0363d24b61e25debf79b6b16f9f78dc01005eef1afdd7408", 0xa7}, {&(0x7f00000006c0)="acb49415afeda86132014d3f4da48a3370d7cbf04d85a585f5ef6eacb90af97507e9955645fcd8050df2622ed62793ec4e8d55ad9ca082d1e9dab9dc1b10c8162885314b001efbe9127a255c33cad9ac771871f8431b98fb04049c4fc5db8a54caa00e7c66cb4d485f1da0a11201662715f33a359534e61ebdb67b1a168989a798c3cb4fb878e21ad561b16c85e757cab7b1bef431490f585df90f9f7f8270e36f71f88f89ff2c37cd03f1719d1343059d9c0d33f93d27ee7ab9acd100d445b84509099a5082b71231b6005c9b572cce41eaab49efbe23ccf22680a94f908ff25b41d4641dae12a85161c22339da722f5ed30606", 0xf4}, {&(0x7f00000007c0)="f38155f0ead73bc90073c97ca7610dfbcb919dba113c5711a0df9437822a4a39533702104b2b9ea4fe8c2be190ed965e04587bcebae7578fc6083417283f358ab65c1a121efdb46bb74cb400d2b635603d068942be1198235d3265f829848fef2cf250aa613e798f9a5caf4b45f45dbee132f3d09c071f21e71554c08d42eb9ee44ad9f675592586f7087f6471a023246ecc8763b4e84d48947f1ed775fddf52d390", 0xa2}, {&(0x7f0000000500)="4206400e02c29a579eb0c8178e9c04911d449ef0b82d79ab37be347acfcdef4a85ea49bc5f", 0x25}], 0x4, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [r1, r12]}}, @cred={{0x18, 0x1, 0x2, {r10}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r11, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r10}}}], 0x60, 0x811}}, {{&(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000b00)="1e8d7cfb6c96336533434d48243651369d0731da90da2263bd386813f3191ff43173383b67b2761dd9071977c77b59ee55e41838ed31f93399a96738aea7cb2eb7a4c24a3e927a6858eb3777ed27c339147b7e4dc0e104785bd70b7ba1a11a8015863663f88760c928db39ee929d", 0x6e}, {&(0x7f0000000b80)="8327a29cd97a0081ee2ef081bda149fad7f2fe1fa88d94416fa0b979d3355047384257cee624df500815979203f3ab3d1a9ceee8a8e39b7fae64e970ba764846fc65722265a191af558adfe0bebd4c84248a05c70e37f7d4ca650231dd56808d4c6fab1f261c78edd781bf0ef21662c8ae804fec2f9c19dcb335fc2cccba6d0a0db5773e8cd3", 0x86}, {&(0x7f0000000d80)="0fe8c1ed8a0b9303459850cc4f5f04c0b8b1f5c9c3906a724c194bb4b63986422cb6bf0498bc98d104cede0bdc4a0a6d44b69b4ae6c99524c2367bf4541e89688303b0acd765f7b6f37cc67c3b582fd3edf72c77601b8947a31c8b86b5bc3492fa2fe04599146bd6f2432dac9c2db0898243a803358f4d08f16aa4e9777a0cf3d404537339f7fabcdd136646902a6487f52a3e14085710e463b6fa8b21390a1327295598b9fe6d3d346c90fedd53af2cc41b7f83ea9fe29ff5117cef3d", 0xbd}, {&(0x7f0000000ec0)="cd0d539463bd290fedf706ab93c7a0cb00586ef880f2cbc3fa1fc65eab100380c8864e5887e0df57e25ebb9e0e2f566e1287a6c6ee22d36cb5302744f48f397e500701ed3125db5787c4793ce7bf78a6e9befc5c841a43d0741aae89a2c3d05681f449a52a291f93ce54404ccbbd71d164a4cc0a4e8fd4fa81c1fdcf84e11b1b7ceab60a34ac846f7a469590c64f220a92ed175e010baafcc686c3a5325953c68d508153e57ea8054310b3bfece8ff81da1f66327c361b9db1831d500f5a6518", 0xc0}, {&(0x7f0000000f80)="c7f767028644581c1a075181266a9b80ac618fdb12f4cb445f7a29d4cbbfa4d10942bffbd22fa14975f47a25428a145019d2ce79eb8bf44d9576392abba765bc990400251803ed98dcb8662309af60aa9322ea4050b18ad080ab14b6cf", 0x5d}, {&(0x7f0000000c40)="0f417ac9bdc11ac753f3ed80a43a415a84a9ce1821ae", 0x16}, {&(0x7f0000001000)="7d5f376c06a58a99712c3d6f5b9dd80bdf733d9e67c1c27735772141caa9291bcd96140285c97cbaa9093ecdd63c28e681768e3658b3d1a026b7768e3fee7b5dc5b894f2917396e36d173e544a6df099e961945017a9b770773fb939e6b9d2698dd00c32f353dba169940eef9417521204361a0b77831944e350f1f41f8fc46af8722b2b389a23ffee1408206b8f8ef99b19c7aacf38c143918d8cc4bdbf4d703990ba05291b4757115846ce8ebb4780b8aafdc2c3eb1b3225cb079eefba27ff31290c1f716b59ea2d3ea46b2eb9a0e9c226c2adfe4f69f22851091683a7d710", 0xe0}], 0x7, &(0x7f0000001380)=[@rights={{0x14, 0x1, 0x1, [r11, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r11, 0xffffffffffffffff, r4, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r8, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [r6, r6]}}, @rights={{0x14, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r6, r5]}}], 0xb8, 0x4000000}}, {{&(0x7f0000001440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001800)=[{&(0x7f00000014c0)}, {&(0x7f0000001500)="67d75b061fa663bac78d5b2ae2540a3c7e1f3a4e49bc6f64d60c3cecee540cc09ccba9b72b6b5353606584358d0dcbeb4d44b5", 0x33}, {&(0x7f0000001540)="5cc27f7f502d9f9041f4b62bc59d3a393d9017a9376ff62636620c51b50435dccaa32de827d36550f8b24caf4490205bfe506894dbda8fbeecedfae95ccfd0570a68d0555923487de2c78a0fb7aa033b651355e4866daef77630b0b7c309a6966f57128a94ea291fc6dc567d599209bf8a7f2f439a2c8f7156cde38f38d68be5f59a03579673b041c3527dbbc7b5f47dedc896011d086ecd7a6572657e940031cd4cda166a1f0caacec92890d1dcb06e20a82252cfa1ef676a4d954a6d62ef48fb71ddc55273523ada1f60d58241b6f870d0ebd5f485e2ceffc3871bc8e9c796d095", 0xe2}, {&(0x7f0000001640)="10517c7cc744b1fb45380e439cb0dadce79e3105ec51f9473b10912d9bf97bf5509544a12cd675c079e822ea5982ec2aa996990b7cb4e854e7099e4322e0e90a866bdab85a10d10e564df1389fa694d13a5c326752aa1eb28d048f624b3eb48a950f380dd0add8a539b49de699089e383dffb92acbec32731c5af8524d21816daabf50ba680a24c43590b9f352d9746121d453890dc2d4c2fe5c1592981714e3431b7561ecd99f9f3445a7c3097add3d58016a7780a9aee4f6", 0xb9}, {&(0x7f0000001700)="8d0f03ff47ae53cf8eae6823e25870047f43ef1f40099312ff190a566827cf7a072ced8716206fdb5ac38d74796cc5b8c4581c002d0709ceec6fca3f7e52233fa6e91a655fdbb871a60f80b9467689b4c756c50967dd846331c4fb060b7cadce524e2554e6e51ca636a46e6c187d9d039b9ef5bdba7b7d0b6e5e165a1fab9a754e4a04578177cbcd72540fef738d6c590ab03b14ecdb7516377a4a205812bc550eabe280bf8e69f2041d53d6ddf958e3c2b0c2ea17a3db245b1463708a1b10", 0xbf}, {&(0x7f00000017c0)="59cbd7ce41ade0f7b1d0ae5697896af658f063d1f5b2c6b9", 0x18}], 0x6, &(0x7f0000001840)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r12, r5, r6, 0xffffffffffffffff, r1, r13, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r5, r0, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x88, 0x40081}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001900)="2d9c69ecfc47a607bafb8d0d18a1cf0524cb7199f373734e40d9f478922634a1e24ce637578760de5c664ded48028bb24d9aab54560057af7180828e82d3f5212807d096c151a35dba9a53d7f17feda432b9328f496563f32df5e29bbadc91c41a0729c93f25bb90375b7ac7b24fd6882e97cdac8fe15f60b8d58161ee2daf0a5a27679db28c4a9bc2b62e5b455bcc1bc6431269ea38ac140b46357d54f57faab67e55d3b88730cef83f2e226a68339f99d4c23950db1f4a4a313debe2", 0xbd}, {&(0x7f00000019c0)="2a821f675a65fdb9850241baaa5c3b534942fec70fe7f644a16bf5bf6cfcb9ffb81d9a28ff26a16f05d38f65b017ca980a076ec5a4c5500ed3db1fcf0c6ce71bbf788423672102d9583e512edea3844c4662a5925956f9d89e3f0126eec94baab5bb081950a350e4d7e72c59296532f1a79711cbac14e6d4a31faf2d26ef38", 0x7f}, {&(0x7f0000001a40)="3b19a324af6847c4646b224671f16ee6700c8b2a8837e609", 0x18}, {&(0x7f0000001a80)="07243e2a2f4f6bd2616161690d58a6ad3a4eae3bfa121c1af73cfc772aac080b0a2715e70ea11d8c461fa56bd76510dc1e75606a64308ba7c6e94f6ce1fb647a32054eb968c3b12ce6e1701e7951284e23bfccbac1fe407118b037719d5223f6c60f15bff886e0bde12f1a6b7ed48cabad24c40b49610a240e6a15c0292b57684ead0220e071e1831d0ad83b1077d0c3d81504ca3119e43453a9455e63ef92e99f581377dcf098ecce9b0db95e38e215a1e0d93121c46a", 0xb7}, {&(0x7f0000001b40)="71a8dd0199dcb84ba4183b9841c5e6a87242ef5f2ceacc192e09b3f539aaa7ec8bd7b1168efaf71c01f691c851691ea58cc7ca092efab314617db3fec223e88a8a5cf31c792ab7049e8dd7d36d533131433374167891860c48099cc942de45afa23b5e86ebcde2db30fa213169a37bd69863c418f40b96bc75b09362f71ee3f69026ee65e7e3d23f9e683bfaf2dc4b23a4e9c0b9ede468d73808ecf70d168fda0f6501140c05e0e8dad4e38a3d652da8e893ec640472cd4e3ead8ca416c11d41e7efece0c3b95bb87feb72e714966faa2dccef8570b33469744632495c1a2f31161f718ecbc54282", 0xe8}, {&(0x7f0000001c40)="04d26c6422a2848c855afb1c3ef2e8391640730b18e63ef6491a70bc210a5b50", 0x20}, {&(0x7f0000001c80)="ab3d6e74e997abf5180b95e61603a828bb2b4add37afcc28a4cbd24ca4dbf5604c17f15e6616c7a6c48f270865566d17ba2d7967e69a169ae2cfd4da01d665e425c2e3c8ae21fb1caf034b01326a2cc34d0ad083349a0442dd30c10411b519e62f29868967b7af50ffd383c70becde7e8a4f79b812f23fe3437cd28eebad051ccd4b3e548a59882e55c3ae84d947851c65830aad49b070f408a702675757ca6e78f0431cbea8c246538e23d4e600a534a22a20123ff46f0e9ae2354c4eaa305de1c2adbf55fcbce12fbc23e31bfd8e", 0xcf}, {&(0x7f0000001d80)="160ec754ffa3b98323dc09e37642fc9f508f709adcef840f3c8d816076ea1c9c943fd6af7b200b32feea6e19d321a32683651382f4c894802c54bd5bad2d3ac1fe979f40fffaa21b2c7658f787c53394675b550873a43ea8960365880f48099175554ef90066ffd70603f9fd433bb2c8e6d79fc9afb77bbb00f59f6b84e9cc976bc0c947fdb368531b879a7330136cbf4cbfe36085d15c0c3a75f94b60c1d2ba0037a0f6b2a76d01ca14905d56fd23161644c241edf2f8a5fa858caed1eea7", 0xbf}], 0x8, &(0x7f0000001e80)=[@cred={{0x18, 0x1, 0x2, {r10}}}], 0x18, 0x4404d}}], 0x4, 0x40000) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.765207864s ago: executing program 2 (id=1297): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x3, {}, 0xfe}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x88, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x240088d0) 3.712019222s ago: executing program 0 (id=1288): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000002e00)={{0x9, 0x7, 0x3, 0x2, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x200000a, 0x1000, 0x0, 0x1d1, 0x7fffffff, 0x5, 0x5, 0xbc0, 0x7, 0x15b, 0x7, 0x5944, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x400, 0x2000040, 0x10040002, 0x7, 0x0, 0x2, 0x800, 0x3, 0x3, 0x4, 0x6, 0x6, 0xfff, 0x3ff, 0x1, 0x5, 0x3, 0x5, 0x6, 0x3, 0x78a, 0xbfff8007, 0x200000e, 0xe, 0x0, 0x2, 0x5, 0xe, 0x4, 0x9, 0x80000001, 0x400, 0x1ff, 0x9, 0xfffff647, 0x408, 0x4, 0x4000001, 0x9, 0x8, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x1, 0xa, 0x7, 0x80000000, 0x81, 0x10001, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0x100009, 0x7, 0x4, 0x1, 0x8, 0xfffffffd, 0xffff, 0x6, 0x8, 0x0, 0x4, 0xef, 0xff, 0x4, 0xffffffff, 0xf8a, 0x58a0, 0x1, 0x9, 0x895, 0x6, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0xe0b2, 0x9, 0xfffff561, 0x12, 0x3, 0x3, 0xfffffffa, 0x3, 0x2, 0x1, 0x2ba, 0x4, 0xe, 0x5, 0x8, 0x2, 0xfff, 0x4, 0x1ff, 0x7, 0x2, 0x7, 0x6, 0xff]}) r2 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x2000000, 0x0, &(0x7f0000000000), 0x5000000) setreuid(0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$nvram(0xffffff9c, &(0x7f00000016c0), 0x210003, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4104aec6, &(0x7f0000001c40)={0x1, [{0x0, 0x600, 0x1, &(0x7f00000002c0)="e542757eeebef5ee5386273d99a76506e0c1393fc9fa4950e6f676c8b7f88b9903da797df33247c0dbd8f90fd27271b0bc1e086ffbeb68c3fe55ae6ebc53d1386f09aa760e01ebb82e49f8ce096201898ab4bea277b224ec057eca2e97dff0fc3d7d7893a3b5c40a206754fc50d40bd73dcd1c5848758f9bd3f9daf2f6aa68b1034c52daae8c2985dafcfc60fc125c40b456288e60d66956d766290c39e351761a467a292275c7618e068cf1ddb293ad3a5cb5bdaf31ac196e70902d2395f9c1"}, {0x2, 0x208, 0x3, &(0x7f0000000440)="b98622891efd79a63fc9ca6bb1b3ac61bea600618bbc8dce92bc68b6b7a0f58cfe638cfc08dad53aba4219e68f907b9409ad0c50a4621fc46f01055ac10bdfcdac"}, {0x2, 0x3c8, 0x401, &(0x7f0000000540)="82ccf5130f5f39ba1c5a98a5549fcd13421c7f85ad5699160d5f9c8a599bbd393f3c7dd9cf3ff08e757f12121622144934a3c1badfca9cc2efd548921271c6334de999aa96b653f2485a4aa2401e9d92a7325f670bbcdecdb00ab3b2a86395e7e7c228baad9ba7120b709b569455176d96e47e9fecc538b525"}, {0x0, 0x3f0, 0x8, &(0x7f0000000600)="2d395be480fc88188bce9c652b322c85c74a6800c029e4007a31af799dfa4a4dd4793d036c5ed876d615562d232dba7b6770e36e36bce96c2eef15e790e430a36e5661b83da4f9f4f38c1d37ef2c76b5084517482b5527c37d0903784620c54734dcb2ed701b4d4b853d68a0afd3d8a5c636a8ec9a9624c87992ac5efa4a"}, {0x1, 0x0, 0x16e80, &(0x7f0000000680)}, {0x0, 0xe0, 0x1000, &(0x7f0000001680)="b5fc652530c522efb5b57b3b0d6c8690f28e53bb1696d06e8b34a9ca"}, {0x0, 0x0, 0xb, &(0x7f00000016c0)}, {0x3, 0x8, 0x4, &(0x7f0000001700)="80"}, {0x2, 0x5e8, 0x3, &(0x7f0000001740)="1bcb457e11cba2c58e18ad7ca846eecb0f2c17f1a099be99f30a2738cd7030ed4d9510947cbf5334ddeae366898796d2b689cb8edb397042976a0fe4a316558f2bf4168e4c1bea46e511097a152cad4d9031d35f2f53bfc6e3dfc78ba2bf6a1442e8da6a4f7c6639ae1ad4ed2159330255ab7f268b9b50fb1597c9613db7a731204c52cddbf88f7bf5d0df71da00eaaf9235b52dc062a01c00c882bffeb6679fd6310a57ae7df49d40c2cc624f959384c7dc3d2541efaa39d202003ab1"}, {0x2, 0x4b0, 0x8, &(0x7f0000001800)="e40420e56f88a659edd336544840f0c00ea0f1e77a03778513872bdd8e2b96138f16e3c7ad59c0aa0dc3e7be045922aa65a1231533e82c24ac80926e7286fc8ee53b5f3549c75533e8fabf8d09b738a294c1a9273020a12f207258f11cf4c2ecc06455a4f436e4e335567dbe07fab678c32af447163308e07c6f1e726655ef72866a82a3eb44c82f6a9b42f8d9a0e14168061e5498d3"}, {0x1, 0x0, 0xc, &(0x7f00000018c0)}, {0x2, 0x628, 0x64, &(0x7f0000001900)="57261c05a730e44e0c631c4bd0cb497453545891a0fbaadc2f5727896f0a18b6dfc4ca28fdfbc34dc39458c77e7b0794a017d5f6187a67449f1d5fd65c67c5988b2bacd1951ae2b3da5a68bd077cf9b6af48a384a7d52ea5ca4f98b1eaf6437b484706bec228d36fca584b6f9f2bef105658d3e91806f74d02e5904106aabbb8e74d38e1afadf97f200102e92e01aed4f2b11a8b288362b416008225fe7dd16ff566461efb468b5dab587a96bc544af9a433615258ba0e9d22f48d0f3333ceae814fada0e2"}, {0x1, 0x1f0, 0x2, &(0x7f0000001a00)="502b1ab9893f40540961060f0eae7c66e5bd67b98ebe114d0d20a7ff5dd6e1f907f8d956237865d5ac4bf304209d6b0f3e5bbd2fdddad270d4a65b1fd509"}, {0x2, 0x20, 0xc, &(0x7f0000001a40)="751aa1dd"}, {0xd52788e50d8c0692, 0x7f8, 0x1ff, &(0x7f0000001a80)="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"}, {0x2, 0x498, 0x1, &(0x7f0000001b80)="3a9ee66ca6cd3d13402c22d8cb7bf0a80dded26527c8221bea39781a2555e5f8a754a9525bd68b3606d3e51e82d86d27c5483f664c66d75e94cb65ec911f7276fb6ed57cce7a730ca5a88d8c9665898e9902bee33f878c263bbf2a72a46432b66dac5a0110d3b4ecab0871afe22b1e849b0171a8fd52be2af86bd993dfba4c0a112ca7918c9529dfcf2103b5bc0c6ce026925c"}]}) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000001d80)="ebe3a0e9796cfd1647e2990800000000000000b372219d205e81f4a7f71c1926aae1efd7e01461b95597054a863f3d5cfe6cb55b5bb9fa6935849e6098ed00f8ffff1726b360fbcf7b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db7945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8141e12f4b9376", 0x73}], 0x3, &(0x7f0000000380), 0x0, 0x40004}], 0x1bb, 0x40000) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) ioctl$SG_SET_TIMEOUT(r7, 0x2201, &(0x7f0000000000)=0x80000001) 2.811908216s ago: executing program 2 (id=1289): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="2c895d432cf9618fdbdc350e8e201505e8364fdf094f5f58a5b63baf885cd5e3c118e689d3b5efdfddc7d2fe22c9d2862828334cc31083b1fab96690095be53231645fde0931517f2f74583851fa107a2e5bcd6ec87f6419056c", 0x5a}], 0x1) 2.750532285s ago: executing program 2 (id=1291): keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e65772064656661756c7400005e5dc3a240b5684bb18a791cb1bd24b842b39d56132d039cce5c0e904774"], 0x2a, 0xfffffffffffffffd) r0 = socket(0xa, 0x3, 0x103a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x100009}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x8, 0x80000) pwritev2(r3, &(0x7f0000000840)=[{&(0x7f0000000380)="4b9e28e8679847faba3e8cdf6f1e3830c8b240ccb8a5f9d06a64fb9fc12c93989b4e3b93672ffae55b012de7de73b54aad5594b46b25c3a4c0a802911585e9e8a254fe72a765ed82b19772d57ac170bf84fc81d0c0dd0201bab4885747deb2371b8c4014a26e5455a4446da5da8a3c92f5f332dae66eca7d9f000000000000000000", 0x82}, {&(0x7f0000000280)="c081f784e09e15e643f131d7407fd78182a6effaa9bd2d8a06ea25de068d777b976eef9e563e8b08e6a46d4619203b5c89344afc70d516b4985ccad3ef317223bfa191198a40efc036c2c96ef15c0d72bcc72212c31b5134593e61cc25a5cc57fb661d33602d8120dd08f14b6038", 0x6e}, {&(0x7f0000000440)="f6eab7eb64438900fcd4b4b8def235606d6eac00e6bf8d3abdef6bda239a9e9c692a18760f8aba5b25fe65b1e8507aa7c161438b45f854411a97f0fd8bee82d8828bea0f105e2a41915310f4e9f28a7f3e27c4c995376a79f5748f8128db8785be88b0dd9079897c6e2985da7adda8616d6b59d21127c90887d65480deb56034d1b33765823794e7aceeb21aa2fa67e901e4ebaa44b09a750983f70aa047dfbede55f36882fdd23c84fd3132559719ccf17a0958b2fbd2d8ad738253e45aa3013541d73e84c85d2bf5255cea7bd53134fdc329a9b638d39062a07203ee47bfb2be3001f78cecf5191602c6573b57", 0xee}, {&(0x7f00000008c0)="937af9564c7dbb", 0x7}, {&(0x7f0000000580)="99acbfa519dc55788c865be5580444fa97b36fb4e00d2b23adea4883fd03062bff4786de1d73837158a630792f5f93104fa272f31a14d8d1", 0x38}, {&(0x7f00000005c0)="99d1f9b885d7d755e05ad3c5de61af96b65a561c88e153cd6fa2032861d9231976ddf5a7961f4c17a9c9fab964ee0ed0c005fb4113b7698f73cf7f78c73dbd00976b14af3a1c43f6c457999e340b12dee06f015841b97b7d778dc86a4f86a1169fc4e19249b3488ad8da9e4c92413ef91cbf38ae44a00d325d644767f5a4382906aec9a42a12da3db1ff06da82bb3ba281f53ad7b46d5d5f887090b81ddb901e425a241f6ba4251e7ba196ef0e128d", 0xaf}, {&(0x7f0000000680)}, {&(0x7f0000000900)="5c152eba3c269bec9b7d0dd733c6de2aa42e50477707260ce3cf74be4ba17cc0de8fbc658dba13c51cad1a73b1a960751182771737a6ba4aad9b0b7ef4671c3752072bdcf998efd7c8775cbd697a60236cbe9d85b8dd297903671ffa06f255cca7fd56fa18b27a5fe4cb5730", 0x6c}, {&(0x7f0000000780)="32a69bf4a88c63162879a9721234c82f6c7b94b71bed59a587c1f0711362afe029a64d8c7f469683112ea38b42862f2f0cec3c707434ebd3df9b138016ba31656d3afccd750628c551eae195c61ce7969caa939de0afb4e47c2098ddb900db63ff2f20b4298c55e0b92f7e75bb37af2236d8f00344f6ac00"/134, 0x86}], 0x9, 0xfffff33c, 0x401, 0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x9403, 0x0, 0x1e0, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1bc, 0x1e0, 0x0, {}, [@common=@srh1={{0x8c}, {0x6, 0x8a, 0x1, 0xb, 0x3, @mcast2, @local, @local, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0x0, 0x7550ccb710be24b3], 0x8, 0x4000}}, @common=@srh1={{0x8c}, {0x16, 0xb9, 0x50, 0x40, 0x3, @remote, @private2={0xfc, 0x2, '\x00', 0xfe}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, [0xff, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xff000000, 0xff000000], [0x0, 0xffffffff, 0x0, 0xff000000], 0x407, 0x1060}}]}, @common=@unspec=@CLASSIFY={0x24}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x414) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) 0s ago: executing program 0 (id=1294): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x14, 0x0, 0x48) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x70000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_generic(r3, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000002d00)=ANY=[@ANYBLOB="cc1000002600000328bd7000fbdbdf25010000000800c5000100000008004500", @ANYRES32=r2, @ANYBLOB="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"], 0x10cc}, 0x1, 0x0, 0x0, 0x44000}, 0x20000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x48}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000051}, 0x0) close(0x3) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@getqdisc={0x40, 0x26, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x10, 0x6}, {0xfff2, 0xc}, {0x1, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}}, 0x20000000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000240)=""/210) r5 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) gettid() r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000040)={0x1b, 0x1, 0x0, "093d4a3b5b7bc69a21cfb7f5eaac46dbe89b13471a0488a6679f9a2102249341", 0x34524742}) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x11, r5, 0xb463c000) r9 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r9, &(0x7f0000002940)=[{{&(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)="73c2a31b91eab7dc2363f73a7cd4a93cec6a6a6744813e53fb02d3adff396504398894b0572d5527e7ec27e0ffc33573c89f907f5c998363fac469c37bdd6360c3924a09e5c050b282bc6d8a3c44f193e5a42f248e293957890e608208c982de7cfb10b4919bbe4666fc0f7e8a42e919682b93a313f83d6e20244b05777caba5b5bf164b87621ebe2da89aa81211dc9d970d5367fd35312c0f8dd32dc76fad79f5e9c74d19ac085d01d5cb8e855c74c6460b51dbee", 0xb5}, {&(0x7f0000002980)="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", 0x186}, {&(0x7f0000000640)="b695c1361fd31f1ee9af7f4f655fab7946580f654a13c3fa83251c02079ad83d451c4e909e3c908e13b6bcb9c7d3e1b7c3471c71f2128c4fd404caf78b8b643e90c4d69be66f6a53785d91643ae03b080230f81190f38e9e42a769e4bfc547974881bec0eec134eddb1ee88095fc2886fbb742080b3c5302141defe2a5afde3b649e910ab233df516d3358472f3dd302497116d966cb020123ee41f8cc33924dd67951cb081593538b7d4005a35b32861f19f812925add970a6a1ee2038ca12db1378466943536eff3402d74ed07e241b66c0a502c6f9e7a31", 0xd9}, {&(0x7f0000000740)="2d94ae36f5921859cd1899d9e132795f4b8650e257b26ada46f638f09245a4735d773aeef12ccb5e6f6c7496c4eb1351429d8909364f182531e43de29ac713e012f8a9b45e06a8c1e806804e36c816b0e7abcafccb6f56a51aad9c1297dc389a35c2e395485f0662d8ef210ada16eee45fb71f0752890145bc0bbb6fcaf5093719faf78690644eb63f388d36b05383077bcc19af947eb3eacf7b9462b44bcc62757fc376a0a8bf9f09e107e1877192b628b101b92a4e2a5ab276839949d6ff054a47b5d93b", 0xc5}, {&(0x7f0000000840)="24d78212670571cb016fb71c9caccc87082b8a23f5551386c8f8c9e08d77939384b398194b8a5a875671542d5c147f7af5c3f77b7e8fa6cfec3cd63d711033d4240c3df6f3f047ef8f92c401d86a57e584e50347fe2e25e0d763d1696b110fc4a8057ccdde7ac981bb8fa5ffa26ab90e7993a79416db86a4", 0x78}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="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", 0x1000}], 0x7, &(0x7f00000028c0)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xd3}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x10001}}, @ip_ttl={{0x10, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}], 0x50}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2ea85000, 0x0, 0xfffffffffffffeea, 0x0, 0x0, 0xffffffffffffffff) r10 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r11 = dup(r10) open(0x0, 0x10000, 0x0) write$6lowpan_enable(r11, &(0x7f0000000080)='0', 0x1) kernel console output (not intermixed with test programs): tributes in process `syz.2.739'. [ 297.083152][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.739'. [ 297.708371][ T5913] usb 4-1: USB disconnect, device number 24 [ 297.745607][ T5913] em28xx 4-1:0.0: Disconnecting em28xx [ 297.777227][ T5913] em28xx 4-1:0.0: Freeing device [ 298.116325][ T5913] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 298.446270][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 298.485859][ T5913] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 298.501452][ T5913] usb 4-1: config 0 has no interface number 0 [ 298.522930][ T5913] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 298.607764][ T8712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.640064][ T5913] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 298.700925][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.709235][ T5913] usb 4-1: Product: syz [ 298.719211][ T5913] usb 4-1: Manufacturer: syz [ 298.729330][ T5913] usb 4-1: SerialNumber: syz [ 298.760074][ T8712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.764492][ T5913] usb 4-1: config 0 descriptor?? [ 298.958913][ T5913] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 298.991369][ T8716] netlink: 'syz.1.748': attribute type 6 has an invalid length. [ 299.003985][ T5913] em28xx 4-1:0.132: Video interface 132 found: [ 299.183512][ T8700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.200011][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.425650][ T5913] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 299.615861][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 299.669900][ T8731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.754'. [ 300.133861][ T8752] netlink: 'syz.2.761': attribute type 10 has an invalid length. [ 300.147646][ T8752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.159729][ T8752] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 300.244779][ T8751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.287228][ T8751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.337357][ T8751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.370944][ T8751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.411373][ T8756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.435470][ T8756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.445098][ T8753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.761'. [ 300.479944][ T8751] bond0: (slave batadv0): Releasing backup interface [ 300.578159][ T5913] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 300.587075][ T5913] em28xx 4-1:0.132: board has no eeprom [ 300.624333][ T8763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.762'. [ 300.654658][ T5913] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 300.665754][ T5913] em28xx 4-1:0.132: analog set to bulk mode. [ 300.682665][ T6270] em28xx 4-1:0.132: Registering V4L2 extension [ 300.856413][ T6270] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 300.902354][ T6270] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 300.923251][ T6270] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 300.953714][ T6270] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 300.982819][ T8759] netlink: 'syz.2.761': attribute type 12 has an invalid length. [ 301.088629][ T6270] em28xx 4-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 301.122100][ T6270] em28xx 4-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 301.148936][ T6270] em28xx 4-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 301.186136][ T6270] em28xx 4-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 301.306692][ T6270] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 301.340632][ T6270] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 301.365427][ T6270] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 301.388528][ T6270] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 301.411977][ T6270] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 301.435641][ T6270] em28xx 4-1:0.132: Config register raw data: 0xfffffffb [ 301.453553][ T6270] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 301.475524][ T6270] em28xx 4-1:0.132: No AC97 audio processor [ 301.501962][ T6270] usb 4-1: Decoder not found [ 301.514871][ T6270] em28xx 4-1:0.132: failed to create media graph [ 301.532813][ T6270] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 301.564129][ T6270] em28xx 4-1:0.132: Remote control support is not available for this card. [ 302.200749][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.770'. [ 302.211671][ T8786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.221407][ T8786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.242851][ T8786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.260252][ T8786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.260474][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 302.284727][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 302.310440][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 302.334231][ T8791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.772'. [ 302.465007][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 302.476698][ T10] usb 2-1: config 0 has an invalid interface number: 210 but max is 0 [ 302.490748][ T10] usb 2-1: config 0 has no interface number 0 [ 302.504749][ T10] usb 2-1: New USB device found, idVendor=13d3, idProduct=3349, bcdDevice=9e.d7 [ 302.517465][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.527313][ T10] usb 2-1: Product: syz [ 302.531538][ T10] usb 2-1: Manufacturer: syz [ 302.537128][ T10] usb 2-1: SerialNumber: syz [ 302.562747][ T10] usb 2-1: config 0 descriptor?? [ 302.579703][ T10] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 302.644462][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.653977][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.670120][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.680467][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.786535][ T5913] usb 2-1: USB disconnect, device number 32 [ 303.016305][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.775'. [ 303.184712][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 303.335536][ T10] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 303.348797][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.358544][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.375071][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 303.390069][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.400795][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.417279][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 303.436249][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.476063][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.557792][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 303.577816][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.598268][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.616312][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 303.631961][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.643150][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.655573][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 303.680037][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.690582][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.725486][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 303.748970][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.767901][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.796157][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 303.827345][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.837639][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.889717][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 303.907992][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 303.918984][ T10] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 303.931068][ T10] usb 1-1: Product: syz [ 303.943273][ T10] usb 1-1: Manufacturer: syz [ 303.954684][ T10] usb 1-1: SerialNumber: syz [ 303.990664][ T10] usb 1-1: config 0 descriptor?? [ 304.017661][ T10] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 304.186033][ T30] audit: type=1326 audit(1765632043.583:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.2.784" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d539 code=0x0 [ 304.225783][ T10] usb 1-1: USB disconnect, device number 23 [ 304.273196][ T10] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 304.930510][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 305.010865][ T8832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.786'. [ 305.074785][ T8834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.100535][ T8834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.146259][ T8834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.172160][ T8834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.826208][ T8844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.841853][ T8844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.616601][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.629195][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.334944][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 307.550417][ T8875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.799'. [ 308.044322][ T8881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.048537][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.801'. [ 308.076429][ T8881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.110657][ T8881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.134482][ T8881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.276244][ T5911] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 308.524780][ T8891] loop6: detected capacity change from 0 to 2640 [ 308.607467][ T8891] buffer_io_error: 12832 callbacks suppressed [ 308.607488][ T8891] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.608608][ T5911] usb 1-1: device descriptor read/64, error -71 [ 308.613666][ T8891] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.633008][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.639550][ T8891] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.649158][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.671000][ T8891] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.689740][ T8891] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.704831][ T8891] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.724808][ T8891] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.743961][ T8891] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.765289][ T8895] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.775535][ T8895] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.804233][ T8891] ldm_validate_partition_table(): Disk read failed. [ 308.884748][ T5911] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 308.892561][ T8891] Dev loop6: unable to read RDB block 0 [ 308.907758][ T8891] loop6: unable to read partition table [ 308.935421][ T8891] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 309.014723][ T5911] usb 1-1: device descriptor read/64, error -71 [ 309.185521][ T5911] usb usb1-port1: attempt power cycle [ 309.564981][ T5911] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 309.585398][ T5911] usb 1-1: device descriptor read/8, error -71 [ 309.590411][ T8915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.607594][ T8915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.824761][ T5911] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 309.845769][ T5911] usb 1-1: device descriptor read/8, error -71 [ 309.955386][ T5911] usb usb1-port1: unable to enumerate USB device [ 310.593190][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 310.608054][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.815'. [ 310.629931][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.638910][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.655954][ T8928] loop6: detected capacity change from 0 to 63 [ 310.667094][ T8928] ldm_validate_partition_table(): Disk read failed. [ 310.676397][ T8928] Dev loop6: unable to read RDB block 0 [ 310.683260][ T8928] loop6: unable to read partition table [ 310.705014][ T8928] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 311.014711][ T6270] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 311.098144][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'. [ 311.166062][ T6270] usb 2-1: Using ep0 maxpacket: 32 [ 311.179746][ T6270] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 311.188897][ T6270] usb 2-1: config 0 has no interface number 0 [ 311.196814][ T6270] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 311.218692][ T6270] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 311.228908][ T6270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.246107][ T6270] usb 2-1: Product: syz [ 311.266662][ T6270] usb 2-1: Manufacturer: syz [ 311.278595][ T6270] usb 2-1: SerialNumber: syz [ 311.296314][ T6270] usb 2-1: config 0 descriptor?? [ 311.327592][ T6270] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 311.351407][ T6270] em28xx 2-1:0.132: Video interface 132 found: [ 311.481066][ T8938] @: renamed from vlan0 (while UP) [ 311.520144][ T8931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.533784][ T8931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.905374][ T6270] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 312.432856][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.453224][ T6270] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 312.463872][ T6270] em28xx 2-1:0.132: board has no eeprom [ 312.470192][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.594617][ T6270] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 312.605135][ T6270] em28xx 2-1:0.132: analog set to bulk mode. [ 312.624708][ T5913] em28xx 2-1:0.132: Registering V4L2 extension [ 312.641430][ T6270] usb 2-1: USB disconnect, device number 33 [ 312.681400][ T6270] em28xx 2-1:0.132: Disconnecting em28xx [ 313.074339][ T5913] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 313.101604][ T5913] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 313.137354][ T5913] em28xx 2-1:0.132: No AC97 audio processor [ 313.172861][ T5913] usb 2-1: Decoder not found [ 313.184800][ T5913] em28xx 2-1:0.132: failed to create media graph [ 313.229901][ T5913] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 313.245479][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 313.268333][ T5913] em28xx 2-1:0.132: Remote control support is not available for this card. [ 313.284444][ T8974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.829'. [ 313.320626][ T6270] em28xx 2-1:0.132: Closing input extension [ 313.558248][ T6270] em28xx 2-1:0.132: Freeing device [ 314.915732][ T8989] vim2m vim2m.0: vidioc_s_fmt queue busy [ 316.279530][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'. [ 316.328789][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 316.389638][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.415215][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.794661][ T6270] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 317.014836][ T6270] usb 2-1: Using ep0 maxpacket: 32 [ 317.025181][ T6270] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 317.070894][ T6270] usb 2-1: config 0 has no interface number 0 [ 317.084288][ T6270] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 317.107712][ T6270] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 317.119186][ T6270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.132632][ T6270] usb 2-1: Product: syz [ 317.140671][ T6270] usb 2-1: Manufacturer: syz [ 317.147974][ T6270] usb 2-1: SerialNumber: syz [ 317.162039][ T6270] usb 2-1: config 0 descriptor?? [ 317.187514][ T6270] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 317.244395][ T6270] em28xx 2-1:0.132: Video interface 132 found: [ 317.393678][ T9004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.422046][ T9004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.540616][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.547386][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.640603][ T6270] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 317.675202][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 317.730980][ T9018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.842'. [ 317.806655][ T9020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.815776][ T9020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.885914][ T9022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.907878][ T9022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.928349][ T9022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.949993][ T9022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.378452][ T9027] FAULT_INJECTION: forcing a failure. [ 318.378452][ T9027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.392006][ T9027] CPU: 0 UID: 0 PID: 9027 Comm: syz.4.845 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.392041][ T9027] Tainted: [L]=SOFTLOCKUP [ 318.392048][ T9027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.392058][ T9027] Call Trace: [ 318.392064][ T9027] [ 318.392070][ T9027] dump_stack_lvl+0x189/0x250 [ 318.392093][ T9027] ? __pfx____ratelimit+0x10/0x10 [ 318.392115][ T9027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.392139][ T9027] ? __pfx__printk+0x10/0x10 [ 318.392168][ T9027] ? __might_fault+0xb0/0x130 [ 318.392207][ T9027] should_fail_ex+0x414/0x560 [ 318.392229][ T9027] _copy_from_user+0x2d/0xb0 [ 318.392242][ T9027] video_usercopy+0x349/0x13f0 [ 318.392266][ T9027] ? __pfx___video_do_ioctl+0x10/0x10 [ 318.392292][ T9027] ? __pfx_video_usercopy+0x10/0x10 [ 318.392337][ T9027] ? __fget_files+0x2a/0x420 [ 318.392364][ T9027] v4l2_ioctl+0x18d/0x1e0 [ 318.392385][ T9027] v4l2_compat_ioctl32+0x1d7/0x290 [ 318.392401][ T9027] __ia32_compat_sys_ioctl+0x543/0x840 [ 318.392416][ T9027] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 318.392432][ T9027] ? __fget_files+0x3a0/0x420 [ 318.392463][ T9027] ? fput+0xa0/0xd0 [ 318.392488][ T9027] ? ksys_write+0x22a/0x250 [ 318.392505][ T9027] ? exc_page_fault+0x82/0x100 [ 318.392531][ T9027] ? __pfx_ksys_write+0x10/0x10 [ 318.392545][ T9027] ? __do_fast_syscall_32+0xbe/0x570 [ 318.392559][ T9027] __do_fast_syscall_32+0x1f7/0x570 [ 318.392571][ T9027] ? rcu_is_watching+0x15/0xb0 [ 318.392587][ T9027] ? do_fast_syscall_32+0x34/0x80 [ 318.392612][ T9027] do_fast_syscall_32+0x34/0x80 [ 318.392632][ T9027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.392655][ T9027] RIP: 0023:0xf70cd539 [ 318.392673][ T9027] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 318.392690][ T9027] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 318.392711][ T9027] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0145608 [ 318.392725][ T9027] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.392735][ T9027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.392742][ T9027] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 318.392750][ T9027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.392781][ T9027] [ 318.735101][ T6270] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 318.768058][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.776813][ T6270] em28xx 2-1:0.132: board has no eeprom [ 318.844743][ T6270] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 318.856954][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.870227][ T6270] em28xx 2-1:0.132: analog set to bulk mode. [ 318.927010][ T5913] em28xx 2-1:0.132: Registering V4L2 extension [ 319.029682][ T5913] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 319.098189][ T5913] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 319.099889][ T9041] netlink: 10 bytes leftover after parsing attributes in process `syz.1.848'. [ 319.129154][ T5913] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 319.137646][ T9043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.157868][ T5913] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 319.160941][ T9043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.260180][ T5913] em28xx 2-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 319.291710][ T5913] em28xx 2-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 319.317059][ T5913] em28xx 2-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 319.333115][ T5913] em28xx 2-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 319.433846][ T9047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.458808][ T9047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.466077][ T5913] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 319.488778][ T5913] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 319.517754][ T5913] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 319.537270][ T5913] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 319.552047][ T5913] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 319.570973][ T5913] em28xx 2-1:0.132: Config register raw data: 0xfffffffb [ 319.586775][ T5913] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 319.601117][ T5913] em28xx 2-1:0.132: No AC97 audio processor [ 319.642625][ T5913] usb 2-1: Decoder not found [ 319.655402][ T5913] em28xx 2-1:0.132: failed to create media graph [ 319.664741][ T5913] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 319.743398][ T5913] em28xx 2-1:0.132: Remote control support is not available for this card. [ 319.865070][ T6113] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 320.005897][ T6113] usb 1-1: device descriptor read/64, error -71 [ 320.096628][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.854'. [ 320.239015][ T9059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.854'. [ 320.264683][ T6113] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 320.322067][ T9063] FAULT_INJECTION: forcing a failure. [ 320.322067][ T9063] name failslab, interval 1, probability 0, space 0, times 0 [ 320.335409][ T9063] CPU: 1 UID: 0 PID: 9063 Comm: syz.1.855 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.335445][ T9063] Tainted: [L]=SOFTLOCKUP [ 320.335453][ T9063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.335465][ T9063] Call Trace: [ 320.335474][ T9063] [ 320.335483][ T9063] dump_stack_lvl+0x189/0x250 [ 320.335514][ T9063] ? __pfx____ratelimit+0x10/0x10 [ 320.335544][ T9063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.335569][ T9063] ? __pfx__printk+0x10/0x10 [ 320.335607][ T9063] ? look_up_lock_class+0x74/0x150 [ 320.335642][ T9063] should_fail_ex+0x414/0x560 [ 320.335675][ T9063] should_failslab+0xa8/0x100 [ 320.335703][ T9063] __kmalloc_cache_noprof+0x84/0x700 [ 320.335726][ T9063] ? __hw_addr_add_ex+0x200/0x760 [ 320.335747][ T9063] ? dev_mc_add+0x67/0x120 [ 320.335794][ T9063] __hw_addr_add_ex+0x200/0x760 [ 320.335827][ T9063] dev_mc_add+0xa1/0x120 [ 320.335855][ T9063] igmp_group_added+0x1c1/0x8f0 [ 320.335892][ T9063] ? __pfx_igmp_group_added+0x10/0x10 [ 320.335924][ T9063] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 320.335949][ T9063] ? do_raw_spin_unlock+0x122/0x240 [ 320.335984][ T9063] ____ip_mc_inc_group+0x983/0xdd0 [ 320.336021][ T9063] ip_mc_up+0x115/0x2e0 [ 320.336051][ T9063] inetdev_event+0xf93/0x15b0 [ 320.336070][ T9063] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 320.336094][ T9063] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 320.336119][ T9063] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 320.336144][ T9063] ? __pfx_inetdev_event+0x10/0x10 [ 320.336176][ T9063] notifier_call_chain+0x19d/0x3a0 [ 320.336212][ T9063] __dev_notify_flags+0x18d/0x2e0 [ 320.336238][ T9063] ? __pfx___dev_notify_flags+0x10/0x10 [ 320.336257][ T9063] ? __dev_change_flags+0x4af/0x680 [ 320.336286][ T9063] ? __pfx___dev_change_flags+0x10/0x10 [ 320.336321][ T9063] netif_change_flags+0xe8/0x1a0 [ 320.336350][ T9063] do_setlink+0xc55/0x41c0 [ 320.336390][ T9063] ? __pfx_do_setlink+0x10/0x10 [ 320.336438][ T9063] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 320.336467][ T9063] ? lockdep_hardirqs_on+0x98/0x140 [ 320.336497][ T9063] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 320.336524][ T9063] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 320.336557][ T9063] ? rcu_is_watching+0x15/0xb0 [ 320.336586][ T9063] ? __mutex_lock+0xd3b/0x1350 [ 320.336611][ T9063] ? __mutex_lock+0x5bb/0x1350 [ 320.336644][ T9063] ? apparmor_capable+0x137/0x1a0 [ 320.336674][ T9063] ? bpf_lsm_capable+0x9/0x20 [ 320.336697][ T9063] ? security_capable+0x7e/0x2e0 [ 320.336723][ T9063] ? ns_capable+0x8a/0xf0 [ 320.336746][ T9063] ? ipvlan_nl_changelink+0x207/0x2e0 [ 320.336789][ T9063] rtnl_newlink+0x161c/0x1c90 [ 320.336823][ T9063] ? __pfx_rtnl_newlink+0x10/0x10 [ 320.336841][ T9063] ? __do_fast_syscall_32+0x1f7/0x570 [ 320.336901][ T9063] ? kasan_quarantine_put+0xdd/0x220 [ 320.336922][ T9063] ? lockdep_hardirqs_on+0x98/0x140 [ 320.336959][ T9063] ? kmem_cache_free+0x197/0x620 [ 320.336979][ T9063] ? nlmon_xmit+0xb0/0x100 [ 320.337013][ T9063] ? __lock_acquire+0x6b6/0x2cf0 [ 320.337038][ T9063] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 320.337064][ T9063] ? __dev_queue_xmit+0x289/0x3140 [ 320.337089][ T9063] ? __dev_queue_xmit+0x289/0x3140 [ 320.337110][ T9063] ? __dev_queue_xmit+0x289/0x3140 [ 320.337165][ T9063] ? __pfx_rtnl_newlink+0x10/0x10 [ 320.337184][ T9063] rtnetlink_rcv_msg+0x7cf/0xb70 [ 320.337219][ T9063] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 320.337249][ T9063] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 320.337277][ T9063] ? ref_tracker_free+0x63a/0x7d0 [ 320.337307][ T9063] ? __asan_memcpy+0x40/0x70 [ 320.337325][ T9063] ? __pfx_ref_tracker_free+0x10/0x10 [ 320.337351][ T9063] ? __skb_clone+0x63/0x7a0 [ 320.337385][ T9063] netlink_rcv_skb+0x208/0x470 [ 320.337410][ T9063] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 320.337442][ T9063] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.337479][ T9063] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.337511][ T9063] netlink_unicast+0x82f/0x9e0 [ 320.337542][ T9063] ? __pfx_netlink_unicast+0x10/0x10 [ 320.337565][ T9063] ? netlink_sendmsg+0x642/0xb30 [ 320.337585][ T9063] ? skb_put+0x11b/0x210 [ 320.337609][ T9063] netlink_sendmsg+0x805/0xb30 [ 320.337643][ T9063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.337670][ T9063] ? __import_iovec+0x5d4/0x7f0 [ 320.337689][ T9063] ? aa_sock_msg_perm+0xf1/0x1b0 [ 320.337714][ T9063] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.337734][ T9063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.337757][ T9063] __sock_sendmsg+0x21c/0x270 [ 320.337797][ T9063] ____sys_sendmsg+0x505/0x820 [ 320.337825][ T9063] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.337853][ T9063] ? kstrtouint+0x6e/0xe0 [ 320.337888][ T9063] ___sys_sendmsg+0x21f/0x2a0 [ 320.337914][ T9063] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.337943][ T9063] ? rcu_read_lock_any_held+0xb3/0x120 [ 320.338001][ T9063] ? __fget_files+0x2a/0x420 [ 320.338025][ T9063] ? __fget_files+0x3a0/0x420 [ 320.338062][ T9063] __sys_sendmsg+0x164/0x220 [ 320.338086][ T9063] ? __pfx___sys_sendmsg+0x10/0x10 [ 320.338119][ T9063] ? __pfx_ksys_write+0x10/0x10 [ 320.338145][ T9063] ? __do_fast_syscall_32+0xbe/0x570 [ 320.338170][ T9063] __do_fast_syscall_32+0x1f7/0x570 [ 320.338191][ T9063] ? rcu_is_watching+0x15/0xb0 [ 320.338213][ T9063] ? do_fast_syscall_32+0x34/0x80 [ 320.338240][ T9063] do_fast_syscall_32+0x34/0x80 [ 320.338259][ T9063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.338284][ T9063] RIP: 0023:0xf70cd539 [ 320.338303][ T9063] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 320.338322][ T9063] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 320.338346][ T9063] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 320.338361][ T9063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.338373][ T9063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.338385][ T9063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 320.338397][ T9063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.338431][ T9063] [ 320.416130][ T6113] usb 1-1: device descriptor read/64, error -71 [ 321.058330][ T9068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.857'. [ 321.085341][ T6113] usb usb1-port1: attempt power cycle [ 321.127406][ T9077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.356181][ T9077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.406693][ T9081] FAULT_INJECTION: forcing a failure. [ 321.406693][ T9081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.448653][ T9077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.478912][ T9077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.498672][ T9081] CPU: 0 UID: 0 PID: 9081 Comm: syz.2.859 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.498706][ T9081] Tainted: [L]=SOFTLOCKUP [ 321.498713][ T9081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.498725][ T9081] Call Trace: [ 321.498732][ T9081] [ 321.498740][ T9081] dump_stack_lvl+0x189/0x250 [ 321.498769][ T9081] ? __pfx____ratelimit+0x10/0x10 [ 321.498796][ T9081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.498818][ T9081] ? __pfx__printk+0x10/0x10 [ 321.498846][ T9081] ? __might_fault+0xb0/0x130 [ 321.498887][ T9081] should_fail_ex+0x414/0x560 [ 321.498918][ T9081] _copy_from_user+0x2d/0xb0 [ 321.498940][ T9081] input_event_from_user+0xf9/0x280 [ 321.498962][ T9081] ? __pfx_input_event_from_user+0x10/0x10 [ 321.498987][ T9081] ? input_inject_event+0xb6/0x340 [ 321.499022][ T9081] evdev_write+0x2a6/0x480 [ 321.499057][ T9081] ? __pfx_evdev_write+0x10/0x10 [ 321.499086][ T9081] ? bpf_lsm_file_permission+0x9/0x20 [ 321.499105][ T9081] ? security_file_permission+0x75/0x290 [ 321.499134][ T9081] ? rw_verify_area+0x255/0x4d0 [ 321.499154][ T9081] ? __pfx_evdev_write+0x10/0x10 [ 321.499185][ T9081] vfs_write+0x27e/0xb30 [ 321.499215][ T9081] ? __pfx_vfs_write+0x10/0x10 [ 321.499238][ T9081] ? __fget_files+0x2a/0x420 [ 321.499266][ T9081] ? __fget_files+0x2a/0x420 [ 321.499288][ T9081] ? __fget_files+0x3a0/0x420 [ 321.499312][ T9081] ? __fget_files+0x2a/0x420 [ 321.499354][ T9081] ksys_write+0x145/0x250 [ 321.499373][ T9081] ? exc_page_fault+0x82/0x100 [ 321.499403][ T9081] ? __pfx_ksys_write+0x10/0x10 [ 321.499426][ T9081] ? __do_fast_syscall_32+0xbe/0x570 [ 321.499448][ T9081] __do_fast_syscall_32+0x1f7/0x570 [ 321.499468][ T9081] ? rcu_is_watching+0x15/0xb0 [ 321.499490][ T9081] ? do_fast_syscall_32+0x34/0x80 [ 321.499516][ T9081] do_fast_syscall_32+0x34/0x80 [ 321.499536][ T9081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.499559][ T9081] RIP: 0023:0xf706d539 [ 321.499578][ T9081] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 321.499595][ T9081] RSP: 002b:00000000f53d755c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 321.499616][ T9081] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 321.499628][ T9081] RDX: 0000000000000918 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.499640][ T9081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.499649][ T9081] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 321.499659][ T9081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.499687][ T9081] [ 321.604845][ T6113] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 322.041544][ T6113] usb 1-1: device descriptor read/8, error -71 [ 322.232413][ T9091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.243587][ T9091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.277889][ T9091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.863'. [ 322.305675][ T6113] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 322.335862][ T6113] usb 1-1: device descriptor read/8, error -71 [ 322.445736][ T6113] usb usb1-port1: unable to enumerate USB device [ 322.984697][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 323.229303][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 323.252746][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 323.262423][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.271267][ T10] usb 1-1: Product: syz [ 323.278649][ T10] usb 1-1: Manufacturer: syz [ 323.283413][ T10] usb 1-1: SerialNumber: syz [ 323.330900][ T10] usb 1-1: config 0 descriptor?? [ 323.543610][ T10] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 324.222924][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 324.245076][ T9110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.868'. [ 324.386270][ T9112] CIFS: VFS: Malformed UNC in devname [ 324.435060][ T10] usb write operation failed. (-71) [ 324.446383][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 324.468904][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 324.484772][ T10] usb 1-1: media controller created [ 324.495414][ T10] usb read operation failed. (-71) [ 324.507359][ T10] usb write operation failed. (-71) [ 324.543780][ T10] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 324.566073][ T10] usb 1-1: USB disconnect, device number 32 [ 324.680855][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.695750][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.716228][ T9118] netlink: 'syz.1.872': attribute type 11 has an invalid length. [ 324.724021][ T9118] netlink: 'syz.1.872': attribute type 11 has an invalid length. [ 324.732865][ T9118] netlink: 204 bytes leftover after parsing attributes in process `syz.1.872'. [ 325.068448][ T9125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.875'. [ 325.164714][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 325.425071][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 325.444877][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 325.461141][ T10] usb 1-1: config 0 has no interface number 0 [ 325.504843][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 325.519509][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 325.689443][ T9135] netlink: 80 bytes leftover after parsing attributes in process `syz.3.877'. [ 325.719425][ T9135] loop6: detected capacity change from 0 to 2640 [ 325.726588][ T9135] buffer_io_error: 1183 callbacks suppressed [ 325.726605][ T9135] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.771130][ T9135] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.779443][ T9135] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.798351][ T9135] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.835766][ T9135] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.853918][ T9139] input: syz0 as /devices/virtual/input/input20 [ 325.868042][ T9135] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.892234][ T9135] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.908315][ T9135] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.917100][ T9135] ldm_validate_partition_table(): Disk read failed. [ 325.923869][ T9135] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.933910][ T9135] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.933940][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.943837][ T9135] Dev loop6: unable to read RDB block 0 [ 325.977804][ T9139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.878'. [ 326.028484][ T10] usb 1-1: Product: syz [ 326.028807][ T9135] loop6: unable to read partition table [ 326.048130][ T10] usb 1-1: Manufacturer: syz [ 326.049486][ T9135] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 326.081644][ T9143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.093804][ T10] usb 1-1: SerialNumber: syz [ 326.116420][ T10] usb 1-1: config 0 descriptor?? [ 326.153113][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 326.169283][ T9143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.193998][ T10] em28xx 1-1:0.132: Video interface 132 found: [ 326.265871][ T9145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.286549][ T9145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.317149][ T9145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.360093][ T9122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.369244][ T9145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.381784][ T9122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.391841][ T9145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.420468][ T9145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.436989][ T9145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.448267][ T9145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.462849][ T9145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.482884][ T9145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.628189][ T5202] ldm_validate_partition_table(): Disk read failed. [ 326.636241][ T10] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 326.636261][ T5202] Dev loop6: unable to read RDB block 0 [ 326.636508][ T5202] loop6: unable to read partition table [ 326.975419][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 327.034034][ T9158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.884'. [ 327.088959][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 327.578557][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.616555][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.780297][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 327.792326][ T10] em28xx 1-1:0.132: board has no eeprom [ 327.798365][ T9179] kvm_intel: kvm [9176]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2000000000003 [ 327.864644][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 327.872627][ T10] em28xx 1-1:0.132: analog set to bulk mode. [ 327.896137][ T185] em28xx 1-1:0.132: Registering V4L2 extension [ 328.050112][ T185] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 328.063763][ T185] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 328.090316][ T185] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 328.115329][ T185] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 328.211122][ T185] em28xx 1-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 328.221760][ T185] em28xx 1-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 328.231393][ T185] em28xx 1-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 328.240827][ T185] em28xx 1-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 328.342752][ T185] em28xx 1-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 328.365016][ T185] em28xx 1-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 328.385025][ T185] em28xx 1-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 328.420544][ T185] em28xx 1-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 328.445273][ T185] em28xx 1-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 328.461085][ T185] em28xx 1-1:0.132: Config register raw data: 0xfffffffb [ 328.476339][ T185] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 328.499975][ T185] em28xx 1-1:0.132: No AC97 audio processor [ 328.535327][ T185] usb 1-1: Decoder not found [ 328.541917][ T185] em28xx 1-1:0.132: failed to create media graph [ 328.567418][ T185] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 328.615640][ T185] em28xx 1-1:0.132: Remote control support is not available for this card. [ 328.940651][ T40] usb 5-1: USB disconnect, device number 22 [ 328.962522][ T40] em28xx 5-1:0.132: Disconnecting em28xx [ 328.975272][ T40] em28xx 5-1:0.132: Closing input extension [ 329.217163][ T3800] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.657781][ T3800] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.905983][ T3800] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.040272][ T3800] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.487997][ T9218] __nla_validate_parse: 1 callbacks suppressed [ 330.488020][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 330.568303][ T9218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.901'. [ 330.625734][ T3800] bridge_slave_1: left allmulticast mode [ 330.661385][ T3800] bridge_slave_1: left promiscuous mode [ 330.682999][ T3800] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.701812][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.718316][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.737147][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.745313][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.753004][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.767904][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.786894][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.803079][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.811932][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.813188][ T3800] bridge_slave_0: left allmulticast mode [ 330.831390][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.897231][ T9231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.908055][ T3800] bridge_slave_0: left promiscuous mode [ 330.915482][ T9231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.954789][ T3800] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.342434][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 331.480625][ T9244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.521885][ T9244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.756150][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.780493][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.252854][ T3800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.274881][ T3800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.286015][ T3800] bond0 (unregistering): Released all slaves [ 332.436937][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.452237][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.739153][ T3800] hsr_slave_0: left promiscuous mode [ 332.747709][ T3800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.768652][ T3800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.787911][ T3800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.805057][ T3800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.869243][ T3800] veth1_macvtap: left promiscuous mode [ 332.885464][ T3800] veth0_macvtap: left promiscuous mode [ 332.898792][ T52] Bluetooth: hci1: command tx timeout [ 332.906540][ T3800] veth1_vlan: left promiscuous mode [ 332.912073][ T3800] veth0_vlan: left promiscuous mode [ 334.348910][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'. [ 334.377408][ T3800] team0 (unregistering): Port device team_slave_1 removed [ 334.412171][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.915'. [ 334.434769][ T3800] team0 (unregistering): Port device team_slave_0 removed [ 334.974961][ T52] Bluetooth: hci1: command tx timeout [ 335.126841][ T9230] chnl_net:caif_netlink_parms(): no params data found [ 335.196793][ T9302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.226842][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.237375][ T9302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.275464][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.595466][ T9316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.638155][ T9317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.662428][ T9316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.674193][ T9230] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.686740][ T9317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.695861][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.705054][ T9230] bridge_slave_0: entered allmulticast mode [ 335.736088][ T9230] bridge_slave_0: entered promiscuous mode [ 335.782666][ T9230] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.783129][ T3800] IPVS: stop unused estimator thread 0... [ 335.815329][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.843181][ T9230] bridge_slave_1: entered allmulticast mode [ 335.874072][ T9230] bridge_slave_1: entered promiscuous mode [ 336.201381][ T9317] netlink: 44 bytes leftover after parsing attributes in process `syz.1.920'. [ 336.224163][ T9329] ucma_write: process 607 (syz.2.922) changed security contexts after opening file descriptor, this is not allowed. [ 336.245730][ T9330] netlink: 44 bytes leftover after parsing attributes in process `syz.1.920'. [ 336.308929][ T9230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.363550][ T9230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.476333][ T9336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.537274][ T9336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.626881][ T9230] team0: Port device team_slave_0 added [ 336.647461][ T9230] team0: Port device team_slave_1 added [ 336.818256][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.865012][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.939396][ T9230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.962931][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.982775][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.053029][ T9230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.056180][ T52] Bluetooth: hci1: command tx timeout [ 337.303748][ T9230] hsr_slave_0: entered promiscuous mode [ 337.329649][ T9230] hsr_slave_1: entered promiscuous mode [ 338.437211][ T9230] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 338.496031][ T9230] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 338.520209][ T9355] FAULT_INJECTION: forcing a failure. [ 338.520209][ T9355] name failslab, interval 1, probability 0, space 0, times 0 [ 338.564098][ T9355] CPU: 0 UID: 0 PID: 9355 Comm: syz.0.927 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.564141][ T9355] Tainted: [L]=SOFTLOCKUP [ 338.564149][ T9355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 338.564161][ T9355] Call Trace: [ 338.564170][ T9355] [ 338.564179][ T9355] dump_stack_lvl+0x189/0x250 [ 338.564209][ T9355] ? __pfx____ratelimit+0x10/0x10 [ 338.564238][ T9355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.564262][ T9355] ? __pfx__printk+0x10/0x10 [ 338.564293][ T9355] ? __pfx___might_resched+0x10/0x10 [ 338.564319][ T9355] should_fail_ex+0x414/0x560 [ 338.564351][ T9355] should_failslab+0xa8/0x100 [ 338.564377][ T9355] kmem_cache_alloc_noprof+0x88/0x710 [ 338.564428][ T9355] ? apparmor_capable+0x137/0x1a0 [ 338.564455][ T9355] ? skb_clone+0x212/0x3a0 [ 338.564482][ T9355] skb_clone+0x212/0x3a0 [ 338.564502][ T9355] ? nfnetlink_rcv+0x4ba/0x2590 [ 338.564524][ T9355] nfnetlink_rcv+0x4ec/0x2590 [ 338.564543][ T9355] ? __local_bh_enable_ip+0x12d/0x1c0 [ 338.564579][ T9355] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 338.564607][ T9355] ? __dev_queue_xmit+0x289/0x3140 [ 338.564633][ T9355] ? __dev_queue_xmit+0x1955/0x3140 [ 338.564663][ T9355] ? ___sys_sendmsg+0x21f/0x2a0 [ 338.564692][ T9355] ? __dev_queue_xmit+0x289/0x3140 [ 338.564721][ T9355] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 338.564760][ T9355] ? ref_tracker_free+0x63a/0x7d0 [ 338.564789][ T9355] ? __asan_memcpy+0x40/0x70 [ 338.564807][ T9355] ? __pfx_ref_tracker_free+0x10/0x10 [ 338.564832][ T9355] ? __skb_clone+0x63/0x7a0 [ 338.564859][ T9355] ? __skb_clone+0x483/0x7a0 [ 338.564888][ T9355] ? skb_clone+0x246/0x3a0 [ 338.564913][ T9355] ? __netlink_deliver_tap+0x807/0x850 [ 338.564936][ T9355] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.564977][ T9355] netlink_unicast+0x82f/0x9e0 [ 338.565007][ T9355] ? __pfx_netlink_unicast+0x10/0x10 [ 338.565029][ T9355] ? netlink_sendmsg+0x642/0xb30 [ 338.565050][ T9355] ? skb_put+0x11b/0x210 [ 338.565072][ T9355] netlink_sendmsg+0x805/0xb30 [ 338.565106][ T9355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.565132][ T9355] ? __import_iovec+0x5d4/0x7f0 [ 338.565150][ T9355] ? aa_sock_msg_perm+0xf1/0x1b0 [ 338.565175][ T9355] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.565194][ T9355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.565218][ T9355] __sock_sendmsg+0x21c/0x270 [ 338.565248][ T9355] ____sys_sendmsg+0x505/0x820 [ 338.565275][ T9355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.565302][ T9355] ? kstrtouint+0x6e/0xe0 [ 338.565337][ T9355] ___sys_sendmsg+0x21f/0x2a0 [ 338.565361][ T9355] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.565389][ T9355] ? rcu_read_lock_any_held+0xb3/0x120 [ 338.565446][ T9355] ? __fget_files+0x2a/0x420 [ 338.565470][ T9355] ? __fget_files+0x3a0/0x420 [ 338.565507][ T9355] __sys_sendmsg+0x164/0x220 [ 338.565530][ T9355] ? __pfx___sys_sendmsg+0x10/0x10 [ 338.565570][ T9355] ? __pfx_ksys_write+0x10/0x10 [ 338.565595][ T9355] ? __do_fast_syscall_32+0xbe/0x570 [ 338.565620][ T9355] __do_fast_syscall_32+0x1f7/0x570 [ 338.565641][ T9355] ? rcu_is_watching+0x15/0xb0 [ 338.565663][ T9355] ? do_fast_syscall_32+0x34/0x80 [ 338.565688][ T9355] do_fast_syscall_32+0x34/0x80 [ 338.565708][ T9355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.565731][ T9355] RIP: 0023:0xf702d539 [ 338.565750][ T9355] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 338.565768][ T9355] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 338.565791][ T9355] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080007040 [ 338.565805][ T9355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.565817][ T9355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 338.565829][ T9355] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 338.565841][ T9355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.565873][ T9355] [ 338.576354][ T9230] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 338.578716][ T9359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.025032][ T9359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.060232][ T9230] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 339.135102][ T52] Bluetooth: hci1: command tx timeout [ 339.161767][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 339.239280][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.930'. [ 339.535676][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 339.572971][ T9382] FAULT_INJECTION: forcing a failure. [ 339.572971][ T9382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.604997][ T9382] CPU: 0 UID: 0 PID: 9382 Comm: syz.2.931 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.605032][ T9382] Tainted: [L]=SOFTLOCKUP [ 339.605039][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 339.605051][ T9382] Call Trace: [ 339.605059][ T9382] [ 339.605068][ T9382] dump_stack_lvl+0x189/0x250 [ 339.605099][ T9382] ? __pfx____ratelimit+0x10/0x10 [ 339.605128][ T9382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.605152][ T9382] ? __pfx__printk+0x10/0x10 [ 339.605196][ T9382] should_fail_ex+0x414/0x560 [ 339.605230][ T9382] _copy_to_user+0x31/0xb0 [ 339.605255][ T9382] simple_read_from_buffer+0xe1/0x170 [ 339.605292][ T9382] proc_fail_nth_read+0x1b3/0x220 [ 339.605318][ T9382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.605344][ T9382] ? rw_verify_area+0x2a6/0x4d0 [ 339.605363][ T9382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.605387][ T9382] vfs_read+0x200/0xa30 [ 339.605406][ T9382] ? fdget_pos+0x247/0x320 [ 339.605436][ T9382] ? __pfx___mutex_lock+0x10/0x10 [ 339.605456][ T9382] ? __pfx_vfs_read+0x10/0x10 [ 339.605477][ T9382] ? __fget_files+0x2a/0x420 [ 339.605507][ T9382] ? __fget_files+0x3a0/0x420 [ 339.605542][ T9382] ? __fget_files+0x2a/0x420 [ 339.605577][ T9382] ksys_read+0x145/0x250 [ 339.605600][ T9382] ? __pfx_ksys_read+0x10/0x10 [ 339.605624][ T9382] ? __do_fast_syscall_32+0xbe/0x570 [ 339.605649][ T9382] __do_fast_syscall_32+0x1f7/0x570 [ 339.605670][ T9382] ? rcu_is_watching+0x15/0xb0 [ 339.605693][ T9382] ? do_fast_syscall_32+0x34/0x80 [ 339.605718][ T9382] do_fast_syscall_32+0x34/0x80 [ 339.605737][ T9382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.605761][ T9382] RIP: 0023:0xf706d539 [ 339.605779][ T9382] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 339.605796][ T9382] RSP: 002b:00000000f545d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 339.605819][ T9382] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f545d620 [ 339.605832][ T9382] RDX: 000000000000000f RSI: 00000000f7406ff4 RDI: 0000000000000000 [ 339.605844][ T9382] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 339.605856][ T9382] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 339.605868][ T9382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.605901][ T9382] [ 339.883938][ T9230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.062952][ T9230] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.083593][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.090816][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.166553][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.173881][ T5976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.332197][ T9398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.345547][ T9398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.365522][ T9399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.385535][ T9399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.449717][ T9230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.476718][ T9402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.492651][ T9402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.556202][ T9230] veth0_vlan: entered promiscuous mode [ 340.581838][ T9230] veth1_vlan: entered promiscuous mode [ 340.647943][ T9230] veth0_macvtap: entered promiscuous mode [ 340.662954][ T9230] veth1_macvtap: entered promiscuous mode [ 340.692052][ T9230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.711308][ T9230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.733061][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.743058][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.766001][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.775227][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.868175][ T3800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.885897][ T3800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.946494][ T3153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.990333][ T3153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.680205][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.942'. [ 341.896447][ T9428] netlink: 6 bytes leftover after parsing attributes in process `syz.2.943'. [ 341.908863][ T9428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.452240][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 342.632471][ T9434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.945'. [ 343.007174][ T9440] fuse: Bad value for 'fd' [ 344.090638][ T9463] netlink: 36 bytes leftover after parsing attributes in process `syz.0.955'. [ 344.157132][ T9463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.185851][ T9463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.276822][ T9463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.359367][ T9463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.705346][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 344.728917][ T9471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.958'. [ 345.048671][ T9475] FAULT_INJECTION: forcing a failure. [ 345.048671][ T9475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.088558][ T9475] CPU: 1 UID: 0 PID: 9475 Comm: syz.0.960 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.088595][ T9475] Tainted: [L]=SOFTLOCKUP [ 345.088602][ T9475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.088614][ T9475] Call Trace: [ 345.088623][ T9475] [ 345.088631][ T9475] dump_stack_lvl+0x189/0x250 [ 345.088659][ T9475] ? __pfx____ratelimit+0x10/0x10 [ 345.088686][ T9475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.088711][ T9475] ? __pfx__printk+0x10/0x10 [ 345.088752][ T9475] should_fail_ex+0x414/0x560 [ 345.088783][ T9475] _copy_to_iter+0x589/0x1790 [ 345.088830][ T9475] ? __pfx__copy_to_iter+0x10/0x10 [ 345.088857][ T9475] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 345.088886][ T9475] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 345.088917][ T9475] __skb_datagram_iter+0xf8/0x990 [ 345.088941][ T9475] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 345.088973][ T9475] skb_copy_datagram_iter+0xb5/0x210 [ 345.089002][ T9475] netlink_recvmsg+0x2ab/0xa30 [ 345.089036][ T9475] ? __pfx_netlink_recvmsg+0x10/0x10 [ 345.089056][ T9475] ? __kmalloc_noprof+0x43e/0x800 [ 345.089081][ T9475] ? aa_sock_msg_perm+0xf1/0x1b0 [ 345.089106][ T9475] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 345.089125][ T9475] ? security_socket_recvmsg+0x7e/0x2e0 [ 345.089149][ T9475] ? __pfx_netlink_recvmsg+0x10/0x10 [ 345.089172][ T9475] sock_recvmsg+0x22c/0x270 [ 345.089202][ T9475] ____sys_recvmsg+0x1c9/0x460 [ 345.089234][ T9475] ? __pfx_____sys_recvmsg+0x10/0x10 [ 345.089253][ T9475] ? get_compat_msghdr+0x37e/0x4a0 [ 345.089287][ T9475] ? __lock_acquire+0x6b6/0x2cf0 [ 345.089317][ T9475] ___sys_recvmsg+0x1b5/0x510 [ 345.089339][ T9475] ? lockdep_hardirqs_on+0x98/0x140 [ 345.089368][ T9475] ? ktime_get_ts64+0xa9/0x3d0 [ 345.089398][ T9475] ? __pfx____sys_recvmsg+0x10/0x10 [ 345.089446][ T9475] ? __fget_files+0x3a0/0x420 [ 345.089483][ T9475] do_recvmmsg+0x36a/0x770 [ 345.089514][ T9475] ? __pfx_do_recvmmsg+0x10/0x10 [ 345.089617][ T9475] ? _copy_from_user+0x94/0xb0 [ 345.089659][ T9475] __sys_recvmmsg+0x127/0x280 [ 345.089685][ T9475] ? __pfx___sys_recvmmsg+0x10/0x10 [ 345.089706][ T9475] ? ksys_write+0x22a/0x250 [ 345.089747][ T9475] ? __pfx_ksys_write+0x10/0x10 [ 345.089770][ T9475] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 345.089797][ T9475] __do_fast_syscall_32+0x1f7/0x570 [ 345.089817][ T9475] ? rcu_is_watching+0x15/0xb0 [ 345.089840][ T9475] ? do_fast_syscall_32+0x34/0x80 [ 345.089864][ T9475] do_fast_syscall_32+0x34/0x80 [ 345.089883][ T9475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 345.089907][ T9475] RIP: 0023:0xf702d539 [ 345.089924][ T9475] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 345.089942][ T9475] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 345.089965][ T9475] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 345.089979][ T9475] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000080003700 [ 345.089991][ T9475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.090002][ T9475] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 345.090021][ T9475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 345.090053][ T9475] [ 345.637437][ T9483] FAULT_INJECTION: forcing a failure. [ 345.637437][ T9483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.704733][ T9483] CPU: 0 UID: 0 PID: 9483 Comm: syz.0.961 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.704766][ T9483] Tainted: [L]=SOFTLOCKUP [ 345.704772][ T9483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.704784][ T9483] Call Trace: [ 345.704792][ T9483] [ 345.704801][ T9483] dump_stack_lvl+0x189/0x250 [ 345.704832][ T9483] ? __pfx____ratelimit+0x10/0x10 [ 345.704861][ T9483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.704883][ T9483] ? __pfx__printk+0x10/0x10 [ 345.704927][ T9483] should_fail_ex+0x414/0x560 [ 345.704960][ T9483] _copy_to_iter+0x589/0x1790 [ 345.705003][ T9483] ? __pfx__copy_to_iter+0x10/0x10 [ 345.705028][ T9483] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 345.705059][ T9483] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 345.705089][ T9483] __skb_datagram_iter+0xf8/0x990 [ 345.705115][ T9483] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 345.705147][ T9483] skb_copy_datagram_iter+0xb5/0x210 [ 345.705175][ T9483] netlink_recvmsg+0x2ab/0xa30 [ 345.705206][ T9483] ? __pfx_netlink_recvmsg+0x10/0x10 [ 345.705225][ T9483] ? __kmalloc_noprof+0x43e/0x800 [ 345.705249][ T9483] ? aa_sock_msg_perm+0xf1/0x1b0 [ 345.705273][ T9483] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 345.705292][ T9483] ? security_socket_recvmsg+0x7e/0x2e0 [ 345.705318][ T9483] ? __pfx_netlink_recvmsg+0x10/0x10 [ 345.705340][ T9483] sock_recvmsg+0x22c/0x270 [ 345.705371][ T9483] ____sys_recvmsg+0x1c9/0x460 [ 345.705402][ T9483] ? __pfx_____sys_recvmsg+0x10/0x10 [ 345.705420][ T9483] ? get_compat_msghdr+0x37e/0x4a0 [ 345.705454][ T9483] ? __lock_acquire+0x6b6/0x2cf0 [ 345.705484][ T9483] ___sys_recvmsg+0x1b5/0x510 [ 345.705516][ T9483] ? lockdep_hardirqs_on+0x98/0x140 [ 345.705545][ T9483] ? ktime_get_ts64+0xa9/0x3d0 [ 345.705574][ T9483] ? __pfx____sys_recvmsg+0x10/0x10 [ 345.705620][ T9483] ? __fget_files+0x3a0/0x420 [ 345.705656][ T9483] do_recvmmsg+0x36a/0x770 [ 345.705688][ T9483] ? __pfx_do_recvmmsg+0x10/0x10 [ 345.705724][ T9483] ? _copy_from_user+0x94/0xb0 [ 345.705762][ T9483] __sys_recvmmsg+0x127/0x280 [ 345.705786][ T9483] ? __pfx___sys_recvmmsg+0x10/0x10 [ 345.705805][ T9483] ? ksys_write+0x22a/0x250 [ 345.705828][ T9483] ? __pfx_ksys_write+0x10/0x10 [ 345.705853][ T9483] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 345.705881][ T9483] __do_fast_syscall_32+0x1f7/0x570 [ 345.705900][ T9483] ? rcu_is_watching+0x15/0xb0 [ 345.705922][ T9483] ? do_fast_syscall_32+0x34/0x80 [ 345.705946][ T9483] do_fast_syscall_32+0x34/0x80 [ 345.705965][ T9483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 345.705988][ T9483] RIP: 0023:0xf702d539 [ 345.706007][ T9483] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 345.706024][ T9483] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 345.706047][ T9483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 345.706061][ T9483] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000080003700 [ 345.706073][ T9483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.706085][ T9483] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 345.706097][ T9483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 345.706128][ T9483] [ 346.113863][ T9489] FAULT_INJECTION: forcing a failure. [ 346.113863][ T9489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.141347][ T9489] CPU: 1 UID: 0 PID: 9489 Comm: syz.3.963 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.141371][ T9489] Tainted: [L]=SOFTLOCKUP [ 346.141375][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.141382][ T9489] Call Trace: [ 346.141388][ T9489] [ 346.141393][ T9489] dump_stack_lvl+0x189/0x250 [ 346.141414][ T9489] ? __pfx____ratelimit+0x10/0x10 [ 346.141431][ T9489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.141445][ T9489] ? __pfx__printk+0x10/0x10 [ 346.141473][ T9489] should_fail_ex+0x414/0x560 [ 346.141493][ T9489] _copy_to_user+0x31/0xb0 [ 346.141508][ T9489] simple_read_from_buffer+0xe1/0x170 [ 346.141527][ T9489] proc_fail_nth_read+0x1b3/0x220 [ 346.141542][ T9489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.141557][ T9489] ? rw_verify_area+0x2a6/0x4d0 [ 346.141569][ T9489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.141582][ T9489] vfs_read+0x200/0xa30 [ 346.141594][ T9489] ? fdget_pos+0x247/0x320 [ 346.141612][ T9489] ? __pfx___mutex_lock+0x10/0x10 [ 346.141624][ T9489] ? __pfx_vfs_read+0x10/0x10 [ 346.141636][ T9489] ? __fget_files+0x2a/0x420 [ 346.141654][ T9489] ? __fget_files+0x3a0/0x420 [ 346.141667][ T9489] ? __fget_files+0x2a/0x420 [ 346.141688][ T9489] ksys_read+0x145/0x250 [ 346.141701][ T9489] ? __pfx_ksys_read+0x10/0x10 [ 346.141723][ T9489] ? __do_fast_syscall_32+0xbe/0x570 [ 346.141737][ T9489] __do_fast_syscall_32+0x1f7/0x570 [ 346.141749][ T9489] ? rcu_is_watching+0x15/0xb0 [ 346.141763][ T9489] ? do_fast_syscall_32+0x34/0x80 [ 346.141778][ T9489] do_fast_syscall_32+0x34/0x80 [ 346.141789][ T9489] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 346.141808][ T9489] RIP: 0023:0xf706d539 [ 346.141820][ T9489] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 346.141831][ T9489] RSP: 002b:00000000f543c590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 346.141846][ T9489] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f543c620 [ 346.141855][ T9489] RDX: 000000000000000f RSI: 00000000f7406ff4 RDI: 0000000000000000 [ 346.141862][ T9489] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 346.141869][ T9489] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 346.141883][ T9489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.141901][ T9489] [ 346.755112][ T5911] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 346.914606][ T5911] usb 6-1: Using ep0 maxpacket: 32 [ 346.927422][ T5911] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 346.962115][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.995364][ T5911] usb 6-1: config 0 descriptor?? [ 347.207500][ T9516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.231247][ T5911] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 347.251639][ T9516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.420051][ T5911] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 347.441004][ T5911] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 347.860758][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.973'. [ 347.962221][ T9524] netlink: 28 bytes leftover after parsing attributes in process `syz.5.973'. [ 347.976423][ T9524] bridge0: port 3(dummy0) entered blocking state [ 348.041575][ T9524] bridge0: port 3(dummy0) entered disabled state [ 348.053706][ T9526] trusted_key: syz.2.974 sent an empty control message without MSG_MORE. [ 348.076048][ T9524] dummy0: entered allmulticast mode [ 348.082848][ T9524] dummy0: entered promiscuous mode [ 348.104209][ T9527] dummy0: left allmulticast mode [ 348.114086][ T9527] dummy0: left promiscuous mode [ 348.119820][ T9527] bridge0: port 3(dummy0) entered disabled state [ 348.152211][ T9527] bridge_slave_1: left allmulticast mode [ 348.162648][ T9527] bridge_slave_1: left promiscuous mode [ 348.170139][ T9527] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.221358][ T9527] bridge_slave_0: left allmulticast mode [ 348.228323][ T9527] bridge_slave_0: left promiscuous mode [ 348.241700][ T9527] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.773341][ T9536] bond3: option ad_actor_sys_prio: invalid value (0) [ 348.781911][ T9536] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 348.801203][ T9536] bond3 (unregistering): Released all slaves [ 349.156909][ T9548] FAULT_INJECTION: forcing a failure. [ 349.156909][ T9548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.171152][ T9548] CPU: 0 UID: 0 PID: 9548 Comm: syz.5.982 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.171185][ T9548] Tainted: [L]=SOFTLOCKUP [ 349.171192][ T9548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.171203][ T9548] Call Trace: [ 349.171211][ T9548] [ 349.171219][ T9548] dump_stack_lvl+0x189/0x250 [ 349.171251][ T9548] ? __pfx____ratelimit+0x10/0x10 [ 349.171278][ T9548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.171302][ T9548] ? __pfx__printk+0x10/0x10 [ 349.171345][ T9548] should_fail_ex+0x414/0x560 [ 349.171375][ T9548] _copy_to_iter+0x589/0x1790 [ 349.171430][ T9548] ? __pfx__copy_to_iter+0x10/0x10 [ 349.171456][ T9548] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 349.171484][ T9548] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 349.171502][ T9548] __skb_datagram_iter+0xf8/0x990 [ 349.171517][ T9548] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 349.171536][ T9548] skb_copy_datagram_iter+0xb5/0x210 [ 349.171553][ T9548] netlink_recvmsg+0x2ab/0xa30 [ 349.171573][ T9548] ? __pfx_netlink_recvmsg+0x10/0x10 [ 349.171585][ T9548] ? __kmalloc_noprof+0x43e/0x800 [ 349.171599][ T9548] ? aa_sock_msg_perm+0xf1/0x1b0 [ 349.171614][ T9548] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 349.171625][ T9548] ? security_socket_recvmsg+0x7e/0x2e0 [ 349.171642][ T9548] ? __pfx_netlink_recvmsg+0x10/0x10 [ 349.171657][ T9548] sock_recvmsg+0x22c/0x270 [ 349.171676][ T9548] ____sys_recvmsg+0x1c9/0x460 [ 349.171695][ T9548] ? __pfx_____sys_recvmsg+0x10/0x10 [ 349.171706][ T9548] ? get_compat_msghdr+0x37e/0x4a0 [ 349.171726][ T9548] ? __lock_acquire+0x6b6/0x2cf0 [ 349.171743][ T9548] ___sys_recvmsg+0x1b5/0x510 [ 349.171756][ T9548] ? lockdep_hardirqs_on+0x98/0x140 [ 349.171773][ T9548] ? ktime_get_ts64+0xa9/0x3d0 [ 349.171791][ T9548] ? __pfx____sys_recvmsg+0x10/0x10 [ 349.171819][ T9548] ? __fget_files+0x3a0/0x420 [ 349.171841][ T9548] do_recvmmsg+0x36a/0x770 [ 349.171859][ T9548] ? __pfx_do_recvmmsg+0x10/0x10 [ 349.171879][ T9548] ? _copy_from_user+0x94/0xb0 [ 349.171902][ T9548] __sys_recvmmsg+0x127/0x280 [ 349.171916][ T9548] ? __pfx___sys_recvmmsg+0x10/0x10 [ 349.171927][ T9548] ? ksys_write+0x22a/0x250 [ 349.171941][ T9548] ? __pfx_ksys_write+0x10/0x10 [ 349.171955][ T9548] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 349.171973][ T9548] __do_fast_syscall_32+0x1f7/0x570 [ 349.171985][ T9548] ? rcu_is_watching+0x15/0xb0 [ 349.171999][ T9548] ? do_fast_syscall_32+0x34/0x80 [ 349.172013][ T9548] do_fast_syscall_32+0x34/0x80 [ 349.172025][ T9548] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 349.172040][ T9548] RIP: 0023:0xf70cd539 [ 349.172052][ T9548] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 349.172062][ T9548] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 349.172077][ T9548] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 349.172086][ T9548] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000080003700 [ 349.172094][ T9548] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.172101][ T9548] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 349.172110][ T9548] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.172139][ T9548] [ 351.400254][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 351.441991][ T9593] netlink: 28 bytes leftover after parsing attributes in process `syz.1.992'. [ 352.161431][ T9604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.175744][ T9606] io-wq is not configured for unbound workers [ 352.186883][ T9604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.205414][ T9606] netlink: 96 bytes leftover after parsing attributes in process `syz.1.997'. [ 352.290837][ T9612] netlink: 48 bytes leftover after parsing attributes in process `syz.1.997'. [ 352.525834][ T9614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.536654][ T9614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.766524][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.805521][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.838857][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.859435][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.350100][ T9633] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1000'. [ 353.359765][ T9633] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 353.970876][ T9647] batadv_slave_0: entered promiscuous mode [ 354.797464][ T9645] batadv_slave_0: left promiscuous mode [ 355.357513][ T9688] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1007'. [ 355.378521][ T9688] FAULT_INJECTION: forcing a failure. [ 355.378521][ T9688] name failslab, interval 1, probability 0, space 0, times 0 [ 355.427023][ T9688] CPU: 0 UID: 0 PID: 9688 Comm: syz.2.1007 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.427059][ T9688] Tainted: [L]=SOFTLOCKUP [ 355.427067][ T9688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.427079][ T9688] Call Trace: [ 355.427087][ T9688] [ 355.427096][ T9688] dump_stack_lvl+0x189/0x250 [ 355.427126][ T9688] ? __pfx____ratelimit+0x10/0x10 [ 355.427156][ T9688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.427180][ T9688] ? __pfx__printk+0x10/0x10 [ 355.427225][ T9688] should_fail_ex+0x414/0x560 [ 355.427258][ T9688] should_failslab+0xa8/0x100 [ 355.427285][ T9688] kmem_cache_alloc_noprof+0x88/0x710 [ 355.427316][ T9688] ? skb_clone+0x212/0x3a0 [ 355.427354][ T9688] skb_clone+0x212/0x3a0 [ 355.427381][ T9688] __netlink_deliver_tap+0x404/0x850 [ 355.427417][ T9688] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.427441][ T9688] netlink_deliver_tap+0x19c/0x1b0 [ 355.427465][ T9688] netlink_sendskb+0x68/0x140 [ 355.427488][ T9688] netlink_unicast+0x397/0x9e0 [ 355.427505][ T9688] ? __asan_memcpy+0x40/0x70 [ 355.427533][ T9688] ? __pfx_netlink_unicast+0x10/0x10 [ 355.427563][ T9688] netlink_rcv_skb+0x28c/0x470 [ 355.427586][ T9688] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 355.427609][ T9688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.427644][ T9688] ? bpf_lsm_capable+0x9/0x20 [ 355.427667][ T9688] ? security_capable+0x7e/0x2e0 [ 355.427695][ T9688] nfnetlink_rcv+0x282/0x2590 [ 355.427716][ T9688] ? __local_bh_enable_ip+0x12d/0x1c0 [ 355.427738][ T9688] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 355.427765][ T9688] ? __dev_queue_xmit+0x289/0x3140 [ 355.427787][ T9688] ? __dev_queue_xmit+0x289/0x3140 [ 355.427810][ T9688] ? __dev_queue_xmit+0x1955/0x3140 [ 355.427829][ T9688] ? ___sys_sendmsg+0x21f/0x2a0 [ 355.427848][ T9688] ? __dev_queue_xmit+0x289/0x3140 [ 355.427865][ T9688] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 355.427880][ T9688] ? __pfx___dev_queue_xmit+0x10/0x10 [ 355.427899][ T9688] ? ref_tracker_free+0x63a/0x7d0 [ 355.427916][ T9688] ? __asan_memcpy+0x40/0x70 [ 355.427927][ T9688] ? __pfx_ref_tracker_free+0x10/0x10 [ 355.427942][ T9688] ? __skb_clone+0x63/0x7a0 [ 355.427957][ T9688] ? __skb_clone+0x483/0x7a0 [ 355.427979][ T9688] ? skb_clone+0x246/0x3a0 [ 355.427994][ T9688] ? __netlink_deliver_tap+0x807/0x850 [ 355.428007][ T9688] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.428024][ T9688] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.428042][ T9688] netlink_unicast+0x82f/0x9e0 [ 355.428059][ T9688] ? __pfx_netlink_unicast+0x10/0x10 [ 355.428078][ T9688] ? netlink_sendmsg+0x642/0xb30 [ 355.428094][ T9688] netlink_sendmsg+0x805/0xb30 [ 355.428114][ T9688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.428129][ T9688] ? __import_iovec+0x5d4/0x7f0 [ 355.428140][ T9688] ? aa_sock_msg_perm+0xf1/0x1b0 [ 355.428155][ T9688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.428167][ T9688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.428181][ T9688] __sock_sendmsg+0x21c/0x270 [ 355.428199][ T9688] ____sys_sendmsg+0x505/0x820 [ 355.428215][ T9688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.428231][ T9688] ? kstrtouint+0x6e/0xe0 [ 355.428252][ T9688] ___sys_sendmsg+0x21f/0x2a0 [ 355.428266][ T9688] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.428283][ T9688] ? rcu_read_lock_any_held+0xb3/0x120 [ 355.428315][ T9688] ? __fget_files+0x2a/0x420 [ 355.428330][ T9688] ? __fget_files+0x3a0/0x420 [ 355.428358][ T9688] __sys_sendmsg+0x164/0x220 [ 355.428372][ T9688] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.428391][ T9688] ? __pfx_ksys_write+0x10/0x10 [ 355.428405][ T9688] ? __do_fast_syscall_32+0xbe/0x570 [ 355.428420][ T9688] __do_fast_syscall_32+0x1f7/0x570 [ 355.428432][ T9688] ? rcu_is_watching+0x15/0xb0 [ 355.428445][ T9688] ? do_fast_syscall_32+0x34/0x80 [ 355.428460][ T9688] do_fast_syscall_32+0x34/0x80 [ 355.428472][ T9688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.428486][ T9688] RIP: 0023:0xf706d539 [ 355.428498][ T9688] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 355.428509][ T9688] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 355.428524][ T9688] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 355.428532][ T9688] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.428540][ T9688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.428546][ T9688] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 355.428554][ T9688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.428572][ T9688] [ 356.244864][ T30] audit: type=1326 audit(1765632095.633:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.0.1009" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702d539 code=0x0 [ 356.310677][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'. [ 356.324052][ T9701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1008'. [ 356.605084][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1012'. [ 357.008967][ T9716] FAULT_INJECTION: forcing a failure. [ 357.008967][ T9716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.147529][ T9716] CPU: 1 UID: 0 PID: 9716 Comm: syz.5.1015 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.147553][ T9716] Tainted: [L]=SOFTLOCKUP [ 357.147557][ T9716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 357.147565][ T9716] Call Trace: [ 357.147571][ T9716] [ 357.147577][ T9716] dump_stack_lvl+0x189/0x250 [ 357.147597][ T9716] ? __pfx____ratelimit+0x10/0x10 [ 357.147615][ T9716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.147629][ T9716] ? __pfx__printk+0x10/0x10 [ 357.147654][ T9716] should_fail_ex+0x414/0x560 [ 357.147674][ T9716] _copy_to_iter+0x589/0x1790 [ 357.147700][ T9716] ? __pfx__copy_to_iter+0x10/0x10 [ 357.147716][ T9716] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 357.147734][ T9716] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 357.147752][ T9716] __skb_datagram_iter+0xf8/0x990 [ 357.147766][ T9716] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 357.147785][ T9716] skb_copy_datagram_iter+0xb5/0x210 [ 357.147801][ T9716] netlink_recvmsg+0x2ab/0xa30 [ 357.147821][ T9716] ? __pfx_netlink_recvmsg+0x10/0x10 [ 357.147833][ T9716] ? __kmalloc_noprof+0x43e/0x800 [ 357.147848][ T9716] ? aa_sock_msg_perm+0xf1/0x1b0 [ 357.147863][ T9716] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 357.147875][ T9716] ? security_socket_recvmsg+0x7e/0x2e0 [ 357.147891][ T9716] ? __pfx_netlink_recvmsg+0x10/0x10 [ 357.147904][ T9716] sock_recvmsg+0x22c/0x270 [ 357.147922][ T9716] ____sys_recvmsg+0x1c9/0x460 [ 357.147941][ T9716] ? __pfx_____sys_recvmsg+0x10/0x10 [ 357.147952][ T9716] ? get_compat_msghdr+0x37e/0x4a0 [ 357.147972][ T9716] ? __lock_acquire+0x6b6/0x2cf0 [ 357.147989][ T9716] ___sys_recvmsg+0x1b5/0x510 [ 357.148002][ T9716] ? lockdep_hardirqs_on+0x98/0x140 [ 357.148019][ T9716] ? ktime_get_ts64+0xa9/0x3d0 [ 357.148038][ T9716] ? __pfx____sys_recvmsg+0x10/0x10 [ 357.148065][ T9716] ? __fget_files+0x3a0/0x420 [ 357.148093][ T9716] do_recvmmsg+0x36a/0x770 [ 357.148111][ T9716] ? __pfx_do_recvmmsg+0x10/0x10 [ 357.148132][ T9716] ? _copy_from_user+0x94/0xb0 [ 357.148153][ T9716] __sys_recvmmsg+0x127/0x280 [ 357.148168][ T9716] ? __pfx___sys_recvmmsg+0x10/0x10 [ 357.148187][ T9716] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 357.148205][ T9716] __do_fast_syscall_32+0x1f7/0x570 [ 357.148220][ T9716] ? rcu_is_watching+0x15/0xb0 [ 357.148236][ T9716] ? do_fast_syscall_32+0x34/0x80 [ 357.148251][ T9716] do_fast_syscall_32+0x34/0x80 [ 357.148264][ T9716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.148280][ T9716] RIP: 0023:0xf70cd539 [ 357.148292][ T9716] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 357.148305][ T9716] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 357.148320][ T9716] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 357.148329][ T9716] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000080003700 [ 357.148337][ T9716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.148344][ T9716] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 357.148352][ T9716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.148369][ T9716] [ 357.655175][ T9723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.664155][ T9723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.675239][ T9722] syzkaller0: entered promiscuous mode [ 357.680836][ T9722] syzkaller0: entered allmulticast mode [ 357.990685][ T9735] netlink: 'syz.3.1021': attribute type 10 has an invalid length. [ 358.015260][ T9735] syz_tun: entered promiscuous mode [ 358.058905][ T9735] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 358.349209][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 358.396278][ T9745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1024'. [ 358.520982][ T9747] FAULT_INJECTION: forcing a failure. [ 358.520982][ T9747] name failslab, interval 1, probability 0, space 0, times 0 [ 358.550145][ T9747] CPU: 0 UID: 0 PID: 9747 Comm: syz.1.1025 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.550181][ T9747] Tainted: [L]=SOFTLOCKUP [ 358.550187][ T9747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.550194][ T9747] Call Trace: [ 358.550200][ T9747] [ 358.550207][ T9747] dump_stack_lvl+0x189/0x250 [ 358.550227][ T9747] ? __pfx____ratelimit+0x10/0x10 [ 358.550245][ T9747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.550260][ T9747] ? __pfx__printk+0x10/0x10 [ 358.550279][ T9747] ? __pfx___might_resched+0x10/0x10 [ 358.550293][ T9747] ? fs_reclaim_acquire+0x7d/0x100 [ 358.550310][ T9747] should_fail_ex+0x414/0x560 [ 358.550330][ T9747] should_failslab+0xa8/0x100 [ 358.550346][ T9747] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 358.550370][ T9747] ? __alloc_skb+0x255/0x430 [ 358.550407][ T9747] ? napi_skb_cache_get+0x4a5/0x780 [ 358.550434][ T9747] ? napi_skb_cache_get+0x151/0x780 [ 358.550467][ T9747] __alloc_skb+0x255/0x430 [ 358.550499][ T9747] ? __pfx___alloc_skb+0x10/0x10 [ 358.550531][ T9747] ? netlink_autobind+0xdb/0x300 [ 358.550553][ T9747] ? netlink_autobind+0x2c2/0x300 [ 358.550580][ T9747] netlink_sendmsg+0x5c6/0xb30 [ 358.550602][ T9747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.550617][ T9747] ? __import_iovec+0x5d4/0x7f0 [ 358.550631][ T9747] ? aa_sock_msg_perm+0xf1/0x1b0 [ 358.550647][ T9747] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 358.550659][ T9747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.550674][ T9747] __sock_sendmsg+0x21c/0x270 [ 358.550691][ T9747] ____sys_sendmsg+0x505/0x820 [ 358.550708][ T9747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.550723][ T9747] ? kstrtouint+0x6e/0xe0 [ 358.550744][ T9747] ___sys_sendmsg+0x21f/0x2a0 [ 358.550758][ T9747] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.550774][ T9747] ? rcu_read_lock_any_held+0xb3/0x120 [ 358.550806][ T9747] ? __fget_files+0x2a/0x420 [ 358.550821][ T9747] ? __fget_files+0x3a0/0x420 [ 358.550842][ T9747] __sys_sendmsg+0x164/0x220 [ 358.550856][ T9747] ? __pfx___sys_sendmsg+0x10/0x10 [ 358.550874][ T9747] ? __pfx_ksys_write+0x10/0x10 [ 358.550889][ T9747] ? __do_fast_syscall_32+0xbe/0x570 [ 358.550904][ T9747] __do_fast_syscall_32+0x1f7/0x570 [ 358.550916][ T9747] ? rcu_is_watching+0x15/0xb0 [ 358.550929][ T9747] ? do_fast_syscall_32+0x34/0x80 [ 358.550944][ T9747] do_fast_syscall_32+0x34/0x80 [ 358.550955][ T9747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 358.550970][ T9747] RIP: 0023:0xf70cd539 [ 358.550983][ T9747] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 358.550993][ T9747] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 358.551008][ T9747] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 358.551017][ T9747] RDX: 0000000004040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.551025][ T9747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 358.551032][ T9747] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 358.551039][ T9747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 358.551057][ T9747] [ 359.464744][ T9760] bond2: Removing last ns target with arp_interval on [ 360.047050][ T9769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.060518][ T9769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.115578][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1038'. [ 361.149735][ T9784] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1038'. [ 361.346134][ T9784] team0: Port device team_slave_0 removed [ 362.048438][ T9799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.080660][ T9799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.281063][ T9805] binder: 9803:9805 ioctl c0306201 80000480 returned -14 [ 362.816248][ T9812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.881691][ T9812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.992475][ T9814] FAULT_INJECTION: forcing a failure. [ 362.992475][ T9814] name failslab, interval 1, probability 0, space 0, times 0 [ 363.019054][ T9814] CPU: 1 UID: 0 PID: 9814 Comm: syz.5.1047 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.019091][ T9814] Tainted: [L]=SOFTLOCKUP [ 363.019099][ T9814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.019111][ T9814] Call Trace: [ 363.019120][ T9814] [ 363.019129][ T9814] dump_stack_lvl+0x189/0x250 [ 363.019161][ T9814] ? __pfx____ratelimit+0x10/0x10 [ 363.019191][ T9814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.019216][ T9814] ? __pfx__printk+0x10/0x10 [ 363.019253][ T9814] ? __pfx___might_resched+0x10/0x10 [ 363.019281][ T9814] should_fail_ex+0x414/0x560 [ 363.019315][ T9814] should_failslab+0xa8/0x100 [ 363.019343][ T9814] kmem_cache_alloc_noprof+0x88/0x710 [ 363.019373][ T9814] ? __percpu_counter_compare+0xae/0x2e0 [ 363.019399][ T9814] ? ep_insert+0x272/0x19e0 [ 363.019431][ T9814] ep_insert+0x272/0x19e0 [ 363.019477][ T9814] ? __pfx_ep_insert+0x10/0x10 [ 363.019504][ T9814] ? __pfx___mutex_lock+0x10/0x10 [ 363.019524][ T9814] ? __fget_files+0x2a/0x420 [ 363.019554][ T9814] ? __fget_files+0x2a/0x420 [ 363.019587][ T9814] ? __fget_files+0x3a0/0x420 [ 363.019611][ T9814] ? __fget_files+0x2a/0x420 [ 363.019647][ T9814] do_epoll_ctl+0x7f4/0xe80 [ 363.019685][ T9814] __ia32_sys_epoll_ctl+0x15d/0x1a0 [ 363.019713][ T9814] ? exc_page_fault+0x82/0x100 [ 363.019743][ T9814] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 363.019776][ T9814] ? __do_fast_syscall_32+0xbe/0x570 [ 363.019801][ T9814] __do_fast_syscall_32+0x1f7/0x570 [ 363.019823][ T9814] ? rcu_is_watching+0x15/0xb0 [ 363.019846][ T9814] ? do_fast_syscall_32+0x34/0x80 [ 363.019872][ T9814] do_fast_syscall_32+0x34/0x80 [ 363.019891][ T9814] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.019913][ T9814] RIP: 0023:0xf70cd539 [ 363.019932][ T9814] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 363.019950][ T9814] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff [ 363.019973][ T9814] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 363.019988][ T9814] RDX: 0000000000000003 RSI: 0000000080000040 RDI: 0000000000000000 [ 363.020000][ T9814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.020012][ T9814] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 363.020024][ T9814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.020058][ T9814] [ 363.450222][ T9818] FAULT_INJECTION: forcing a failure. [ 363.450222][ T9818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.465491][ T9818] CPU: 0 UID: 0 PID: 9818 Comm: syz.1.1049 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.465526][ T9818] Tainted: [L]=SOFTLOCKUP [ 363.465533][ T9818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.465545][ T9818] Call Trace: [ 363.465554][ T9818] [ 363.465563][ T9818] dump_stack_lvl+0x189/0x250 [ 363.465604][ T9818] ? __pfx____ratelimit+0x10/0x10 [ 363.465633][ T9818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.465656][ T9818] ? __pfx__printk+0x10/0x10 [ 363.465701][ T9818] should_fail_ex+0x414/0x560 [ 363.465732][ T9818] _copy_to_iter+0x589/0x1790 [ 363.465777][ T9818] ? __pfx__copy_to_iter+0x10/0x10 [ 363.465805][ T9818] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 363.465836][ T9818] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 363.465866][ T9818] __skb_datagram_iter+0xf8/0x990 [ 363.465891][ T9818] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 363.465925][ T9818] skb_copy_datagram_iter+0xb5/0x210 [ 363.465952][ T9818] netlink_recvmsg+0x2ab/0xa30 [ 363.465983][ T9818] ? __pfx_netlink_recvmsg+0x10/0x10 [ 363.466004][ T9818] ? __kmalloc_noprof+0x43e/0x800 [ 363.466031][ T9818] ? aa_sock_msg_perm+0xf1/0x1b0 [ 363.466057][ T9818] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 363.466076][ T9818] ? security_socket_recvmsg+0x7e/0x2e0 [ 363.466103][ T9818] ? __pfx_netlink_recvmsg+0x10/0x10 [ 363.466126][ T9818] sock_recvmsg+0x22c/0x270 [ 363.466158][ T9818] ____sys_recvmsg+0x1c9/0x460 [ 363.466191][ T9818] ? __pfx_____sys_recvmsg+0x10/0x10 [ 363.466210][ T9818] ? get_compat_msghdr+0x37e/0x4a0 [ 363.466246][ T9818] ? __lock_acquire+0x6b6/0x2cf0 [ 363.466276][ T9818] ___sys_recvmsg+0x1b5/0x510 [ 363.466298][ T9818] ? lockdep_hardirqs_on+0x98/0x140 [ 363.466327][ T9818] ? ktime_get_ts64+0xa9/0x3d0 [ 363.466356][ T9818] ? __pfx____sys_recvmsg+0x10/0x10 [ 363.466405][ T9818] ? __fget_files+0x3a0/0x420 [ 363.466442][ T9818] do_recvmmsg+0x36a/0x770 [ 363.466472][ T9818] ? __pfx_do_recvmmsg+0x10/0x10 [ 363.466506][ T9818] ? _copy_from_user+0x94/0xb0 [ 363.466534][ T9818] __sys_recvmmsg+0x127/0x280 [ 363.466549][ T9818] ? __pfx___sys_recvmmsg+0x10/0x10 [ 363.466560][ T9818] ? ksys_write+0x22a/0x250 [ 363.466574][ T9818] ? __pfx_ksys_write+0x10/0x10 [ 363.466596][ T9818] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 363.466613][ T9818] __do_fast_syscall_32+0x1f7/0x570 [ 363.466625][ T9818] ? rcu_is_watching+0x15/0xb0 [ 363.466639][ T9818] ? do_fast_syscall_32+0x34/0x80 [ 363.466653][ T9818] do_fast_syscall_32+0x34/0x80 [ 363.466665][ T9818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.466679][ T9818] RIP: 0023:0xf70cd539 [ 363.466692][ T9818] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 363.466708][ T9818] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 363.466731][ T9818] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 363.466747][ T9818] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000080003700 [ 363.466760][ T9818] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.466771][ T9818] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 363.466784][ T9818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.466814][ T9818] [ 364.187602][ T9832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.213932][ T9832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.631362][ T9841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1055'. [ 364.657526][ T9841] tipc: Enabled bearer , priority 0 [ 366.136881][ T9850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.178154][ T9850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.527209][ T9867] ip6t_srh: unknown srh invflags 4000 [ 368.931141][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.940696][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.746779][ T9908] vlan2: entered promiscuous mode [ 371.752146][ T9908] vlan2: entered allmulticast mode [ 371.764662][ T9908] hsr_slave_1: entered allmulticast mode [ 372.427812][ T9917] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 372.618837][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 374.341581][ T9930] binder: 9928:9930 unknown command 0 [ 374.347351][ T9930] binder: 9928:9930 ioctl c0306201 80000080 returned -22 [ 374.386300][ T9930] binder: 9928:9930 ioctl c0306201 80000300 returned -11 [ 374.925086][ T9942] ip6t_srh: unknown srh invflags 4000 [ 379.078927][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.101180][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.157120][ T9983] loop2: detected capacity change from 0 to 7 [ 382.174371][ T9983] Dev loop2: unable to read RDB block 7 [ 382.180994][ T9983] loop2: AHDI p1 p2 p3 [ 382.234846][ T9983] loop2: partition table partially beyond EOD, truncated [ 382.258694][ T9983] loop2: p1 start 1601398130 is beyond EOD, truncated [ 382.284990][ T9983] loop2: p2 start 1702059890 is beyond EOD, truncated [ 382.484836][ T9991] ip6t_srh: unknown srh invflags 4000 [ 383.110651][ T9996] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 383.116985][ T9996] dvmrp1: linktype set to 808 [ 386.009274][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1084'. [ 386.023970][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1084'. [ 386.193938][T10005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.896079][T10034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.905233][T10034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.721762][T10029] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 390.740212][T10029] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 392.066786][T10056] loop2: detected capacity change from 0 to 7 [ 392.077959][T10056] Dev loop2: unable to read RDB block 7 [ 392.083581][T10056] loop2: AHDI p1 p2 p3 [ 392.104992][T10056] loop2: partition table partially beyond EOD, truncated [ 392.157246][T10056] loop2: p1 start 1601398130 is beyond EOD, truncated [ 392.183553][T10056] loop2: p2 start 1702059890 is beyond EOD, truncated [ 394.117906][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 394.187883][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1099'. [ 397.150389][T10115] FAULT_INJECTION: forcing a failure. [ 397.150389][T10115] name failslab, interval 1, probability 0, space 0, times 0 [ 397.174104][T10115] CPU: 0 UID: 0 PID: 10115 Comm: syz.0.1108 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.174134][T10115] Tainted: [L]=SOFTLOCKUP [ 397.174139][T10115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.174155][T10115] Call Trace: [ 397.174160][T10115] [ 397.174166][T10115] dump_stack_lvl+0x189/0x250 [ 397.174186][T10115] ? __pfx____ratelimit+0x10/0x10 [ 397.174204][T10115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.174218][T10115] ? __pfx__printk+0x10/0x10 [ 397.174238][T10115] ? __pfx___might_resched+0x10/0x10 [ 397.174252][T10115] ? fs_reclaim_acquire+0x7d/0x100 [ 397.174268][T10115] should_fail_ex+0x414/0x560 [ 397.174288][T10115] should_failslab+0xa8/0x100 [ 397.174304][T10115] __kmalloc_noprof+0xdf/0x800 [ 397.174316][T10115] ? lockdep_hardirqs_on+0x98/0x140 [ 397.174333][T10115] ? sk_prot_alloc+0xe7/0x220 [ 397.174348][T10115] sk_prot_alloc+0xe7/0x220 [ 397.174358][T10115] ? sk_alloc+0x27/0x390 [ 397.174371][T10115] sk_alloc+0x3a/0x390 [ 397.174384][T10115] __netlink_create+0x65/0x260 [ 397.174398][T10115] ? __pfx_genl_release+0x10/0x10 [ 397.174414][T10115] netlink_create+0x3ca/0x590 [ 397.174429][T10115] ? __pfx_genl_unbind+0x10/0x10 [ 397.174443][T10115] ? __pfx_genl_bind+0x10/0x10 [ 397.174460][T10115] __sock_create+0x4b3/0x9d0 [ 397.174489][T10115] __sys_socket+0xd7/0x1b0 [ 397.174518][T10115] __ia32_compat_sys_socketcall+0x6df/0x9d0 [ 397.174543][T10115] ? __fget_files+0x3a0/0x420 [ 397.174571][T10115] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 397.174595][T10115] ? fput+0xa0/0xd0 [ 397.174621][T10115] ? ksys_write+0x22a/0x250 [ 397.174639][T10115] ? exc_page_fault+0x82/0x100 [ 397.174667][T10115] ? __pfx_ksys_write+0x10/0x10 [ 397.174690][T10115] ? __do_fast_syscall_32+0xbe/0x570 [ 397.174713][T10115] __do_fast_syscall_32+0x1f7/0x570 [ 397.174732][T10115] ? rcu_is_watching+0x15/0xb0 [ 397.174753][T10115] ? do_fast_syscall_32+0x34/0x80 [ 397.174768][T10115] do_fast_syscall_32+0x34/0x80 [ 397.174779][T10115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.174794][T10115] RIP: 0023:0xf702d539 [ 397.174806][T10115] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 397.174817][T10115] RSP: 002b:00000000f541c4b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 397.174831][T10115] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f541c4c0 [ 397.174841][T10115] RDX: 00000000f73c6ff4 RSI: 0000000000000002 RDI: 0000000000000000 [ 397.174848][T10115] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 397.174855][T10115] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 397.174862][T10115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.174880][T10115] [ 398.685070][T10105] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1105'. [ 399.023433][T10129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.095116][T10129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.843136][T10161] ip6t_srh: unknown srh invflags 4000 [ 403.349207][T10169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.142897][T10178] loop2: detected capacity change from 0 to 7 [ 404.204743][T10178] Dev loop2: unable to read RDB block 7 [ 404.210418][T10178] loop2: AHDI p1 p2 p3 [ 404.236067][T10178] loop2: partition table partially beyond EOD, truncated [ 404.256168][T10178] loop2: p1 start 1601398130 is beyond EOD, truncated [ 404.274371][T10178] loop2: p2 start 1702059890 is beyond EOD, truncated [ 405.191209][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 405.219760][T10188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1123'. [ 407.241083][T10212] ip6t_srh: unknown srh invflags 4000 [ 409.729639][ T5911] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 409.749062][ T5911] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 409.781460][ T5911] usb 6-1: USB disconnect, device number 2 [ 410.024244][T10243] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3753739019 (7507478038 ns) > initial count (2474272870 ns). Using initial count to start timer. [ 410.731063][T10247] loop2: detected capacity change from 0 to 7 [ 410.743536][ T6067] Dev loop2: unable to read RDB block 7 [ 410.785689][ T6067] loop2: AHDI p1 p2 p3 [ 410.790735][ T6067] loop2: partition table partially beyond EOD, truncated [ 410.809863][ T6067] loop2: p1 start 1601398130 is beyond EOD, truncated [ 410.854739][ T6067] loop2: p2 start 1702059890 is beyond EOD, truncated [ 410.868138][T10247] Dev loop2: unable to read RDB block 7 [ 410.878919][T10247] loop2: AHDI p1 p2 p3 [ 410.884112][T10247] loop2: partition table partially beyond EOD, truncated [ 410.901621][T10247] loop2: p1 start 1601398130 is beyond EOD, truncated [ 410.921371][T10247] loop2: p2 start 1702059890 is beyond EOD, truncated [ 411.227295][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1136'. [ 411.286090][T10254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1136'. [ 412.454826][T10268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.467923][T10268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.601415][T10268] fuse: Invalid rootmode [ 414.413570][T10296] ip6t_srh: unknown srh invflags 4000 [ 416.615708][T10312] loop2: detected capacity change from 0 to 7 [ 416.622589][T10312] Dev loop2: unable to read RDB block 7 [ 416.632120][T10312] loop2: AHDI p1 p2 p3 [ 416.645307][T10312] loop2: partition table partially beyond EOD, truncated [ 416.663366][T10312] loop2: p1 start 1601398130 is beyond EOD, truncated [ 416.673112][T10312] loop2: p2 start 1702059890 is beyond EOD, truncated [ 416.675954][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 416.767920][T10314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1149'. [ 419.595841][T10341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.616500][T10341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.645115][T10341] fuse: Bad value for 'rootmode' [ 420.247051][T10348] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3753739019 (7507478038 ns) > initial count (2474272870 ns). Using initial count to start timer. [ 421.046342][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1158'. [ 421.126859][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1158'. [ 421.155896][T10360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.676722][T10370] ip6t_srh: unknown srh invflags 4000 [ 423.101300][T10386] loop2: detected capacity change from 0 to 7 [ 423.108180][T10386] Dev loop2: unable to read RDB block 7 [ 423.114991][T10386] loop2: AHDI p1 p2 p3 [ 423.119548][T10386] loop2: partition table partially beyond EOD, truncated [ 423.127439][T10386] loop2: p1 start 1601398130 is beyond EOD, truncated [ 423.775001][T10386] loop2: p2 start 1702059890 is beyond EOD, truncated [ 425.858958][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1164'. [ 425.886585][T10395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1164'. [ 428.803726][T10423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.958931][T10423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.021517][T10423] fuse: Bad value for 'rootmode' [ 429.427888][T10433] ip6t_srh: unknown srh invflags 4000 [ 429.751312][T10435] binder: 10434:10435 unknown command 0 [ 429.765834][T10435] binder: 10434:10435 ioctl c0306201 80000080 returned -22 [ 429.787784][T10435] binder: 10434:10435 ioctl c0306201 80000300 returned -11 [ 431.289757][T10444] loop2: detected capacity change from 0 to 7 [ 431.781598][T10444] Dev loop2: unable to read RDB block 7 [ 431.787609][T10444] loop2: AHDI p1 p2 p3 [ 431.793217][T10444] loop2: partition table partially beyond EOD, truncated [ 431.810567][T10444] loop2: p1 start 1601398130 is beyond EOD, truncated [ 431.835755][T10444] loop2: p2 start 1702059890 is beyond EOD, truncated [ 431.849032][ T5202] Dev loop2: unable to read RDB block 7 [ 431.860976][ T5202] loop2: AHDI p1 p2 p3 [ 431.865842][ T5202] loop2: partition table partially beyond EOD, truncated [ 431.873264][ T5202] loop2: p1 start 1601398130 is beyond EOD, truncated [ 431.893110][ T5202] loop2: p2 start 1702059890 is beyond EOD, truncated [ 432.724799][T10457] loop2: detected capacity change from 0 to 7 [ 432.745529][T10457] Dev loop2: unable to read RDB block 7 [ 432.770042][T10457] loop2: AHDI p1 p2 p3 [ 432.774267][T10457] loop2: partition table partially beyond EOD, truncated [ 432.814832][T10457] loop2: p1 start 1601398130 is beyond EOD, truncated [ 432.847599][T10457] loop2: p2 start 1702059890 is beyond EOD, truncated [ 432.857006][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1178'. [ 432.899574][T10462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1178'. [ 434.771267][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1180'. [ 435.982326][T10485] binder: 10484:10485 unknown command 0 [ 436.011125][T10485] binder: 10484:10485 ioctl c0306201 80000080 returned -22 [ 436.035505][T10485] binder: 10484:10485 ioctl c0306201 80000300 returned -11 [ 436.279311][T10488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.319342][T10488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.361548][T10488] fuse: Bad value for 'rootmode' [ 440.504700][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.524829][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.244093][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 441.262213][T10526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1191'. [ 441.344028][T10527] loop2: detected capacity change from 0 to 7 [ 441.361781][T10527] Dev loop2: unable to read RDB block 7 [ 441.399449][T10527] loop2: AHDI p1 p2 p3 [ 441.411441][T10527] loop2: partition table partially beyond EOD, truncated [ 441.432222][T10527] loop2: p1 start 1601398130 is beyond EOD, truncated [ 441.450739][T10527] loop2: p2 start 1702059890 is beyond EOD, truncated [ 443.397476][T10546] binder: 10542:10546 unknown command 0 [ 443.403062][T10546] binder: 10542:10546 ioctl c0306201 80000080 returned -22 [ 443.413535][T10546] binder: 10542:10546 ioctl c0306201 80000300 returned -11 [ 445.687129][T10562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.741426][T10562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.836446][T10562] fuse: Unknown parameter 'use00000000000000000000' [ 447.926537][T10584] loop6: detected capacity change from 0 to 2640 [ 447.928715][T10584] buffer_io_error: 27 callbacks suppressed [ 447.928733][T10584] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.928777][T10584] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.928810][T10584] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.928843][T10584] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.928876][T10584] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.928932][T10584] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.928983][T10584] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.929016][T10584] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.929033][T10584] ldm_validate_partition_table(): Disk read failed. [ 447.929062][T10584] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.929095][T10584] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.929147][T10584] Dev loop6: unable to read RDB block 0 [ 447.929323][T10584] loop6: unable to read partition table [ 447.929580][T10584] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 449.076215][T10594] loop2: detected capacity change from 0 to 7 [ 449.077428][ T6067] Dev loop2: unable to read RDB block 7 [ 449.077455][ T6067] loop2: AHDI p1 p2 p3 [ 449.077473][ T6067] loop2: partition table partially beyond EOD, truncated [ 449.077609][ T6067] loop2: p1 start 1601398130 is beyond EOD, truncated [ 449.077624][ T6067] loop2: p2 start 1702059890 is beyond EOD, truncated [ 449.085142][T10594] Dev loop2: unable to read RDB block 7 [ 449.085178][T10594] loop2: AHDI p1 p2 p3 [ 449.085206][T10594] loop2: partition table partially beyond EOD, truncated [ 449.085362][T10594] loop2: p1 start 1601398130 is beyond EOD, truncated [ 449.085378][T10594] loop2: p2 start 1702059890 is beyond EOD, truncated [ 449.309706][ T5202] Dev loop2: unable to read RDB block 7 [ 449.309743][ T5202] loop2: AHDI p1 p2 p3 [ 449.309772][ T5202] loop2: partition table partially beyond EOD, truncated [ 449.310009][ T5202] loop2: p1 start 1601398130 is beyond EOD, truncated [ 449.310031][ T5202] loop2: p2 start 1702059890 is beyond EOD, truncated [ 452.023035][ T5202] ldm_validate_partition_table(): Disk read failed. [ 452.030054][ T5202] Dev loop6: unable to read RDB block 0 [ 452.040613][ T5202] loop6: unable to read partition table [ 452.708354][ T30] audit: type=1326 audit(1765632192.103:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 453.265526][ T30] audit: type=1326 audit(1765632192.123:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=40000003 syscall=376 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 453.304799][ T30] audit: type=1326 audit(1765632192.123:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 453.355877][ T30] audit: type=1326 audit(1765632192.143:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 453.764621][ T30] audit: type=1326 audit(1765632192.623:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 453.795765][ T5911] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 453.845309][ T30] audit: type=1326 audit(1765632192.623:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 454.024785][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 454.041167][ T5911] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.674606][ T5911] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 454.683785][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.766819][ T5911] usb 6-1: Product: syz [ 454.791125][ T5911] usb 6-1: Manufacturer: syz [ 455.008153][ T5911] usb 6-1: SerialNumber: syz [ 455.063719][ T5911] usb 6-1: config 0 descriptor?? [ 455.253331][ T5911] imon_raw 6-1:0.0: IR endpoint missing [ 456.856585][T10654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.905010][T10654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.930670][T10655] loop2: detected capacity change from 0 to 7 [ 456.954828][T10655] Dev loop2: unable to read RDB block 7 [ 456.973421][T10655] loop2: AHDI p1 p2 p3 [ 456.992155][T10654] fuse: Unknown parameter 'use00000000000000000000' [ 457.017260][T10655] loop2: partition table partially beyond EOD, truncated [ 457.040981][ T6113] usb 6-1: USB disconnect, device number 3 [ 457.066147][T10655] loop2: p1 start 1601398130 is beyond EOD, truncated [ 457.076116][T10655] loop2: p2 start 1702059890 is beyond EOD, truncated [ 458.073400][T10672] vivid-000: ================= START STATUS ================= [ 458.144711][T10672] vivid-000: Interlaced VBI Format: false [ 458.154776][T10672] vivid-000: ================== END STATUS ================== [ 458.190084][T10672] fuse: Bad value for 'fd' [ 460.429127][ T30] audit: type=1326 audit(1765632199.823:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.2.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 460.485415][ T30] audit: type=1326 audit(1765632199.843:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.2.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=376 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 460.508996][ T30] audit: type=1326 audit(1765632199.843:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.2.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 460.531643][ T30] audit: type=1326 audit(1765632199.843:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.2.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 460.557676][ T30] audit: type=1326 audit(1765632199.853:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.2.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 460.583449][ T30] audit: type=1326 audit(1765632199.853:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.2.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 460.607295][ T30] audit: type=1326 audit(1765632199.853:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.2.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 460.775546][ T30] audit: type=1326 audit(1765632199.863:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.2.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 460.809687][ T30] audit: type=1326 audit(1765632199.863:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.2.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 460.955775][ T30] audit: type=1326 audit(1765632199.863:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.2.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 461.191314][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.313564][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1226'. [ 461.340877][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1226'. [ 461.353225][T10713] loop2: detected capacity change from 0 to 7 [ 461.360269][T10713] Dev loop2: unable to read RDB block 7 [ 461.366754][T10713] loop2: AHDI p1 p2 p3 [ 461.370980][T10713] loop2: partition table partially beyond EOD, truncated [ 461.381248][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.430647][T10713] loop2: p1 start 1601398130 is beyond EOD, truncated [ 461.444948][T10715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.604380][T10713] loop2: p2 start 1702059890 is beyond EOD, truncated [ 461.611769][T10715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.649139][T10715] fuse: Unknown parameter 'use00000000000000000000' [ 461.669471][T10716] fuse: Bad value for 'fd' [ 464.911298][ T5971] IPVS: starting estimator thread 0... [ 465.142626][T10764] IPVS: using max 29 ests per chain, 69600 per kthread [ 465.400907][T10775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.428310][T10775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.487125][T10774] loop2: detected capacity change from 0 to 7 [ 465.554724][T10774] Dev loop2: unable to read RDB block 7 [ 465.576631][T10774] loop2: AHDI p1 p2 p3 [ 465.581042][T10774] loop2: partition table partially beyond EOD, truncated [ 465.618496][T10774] loop2: p1 start 1601398130 is beyond EOD, truncated [ 465.704793][T10774] loop2: p2 start 1702059890 is beyond EOD, truncated [ 466.997687][T10786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.015050][T10786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.033163][T10786] fuse: Unknown parameter 'user_i00000000000000000000' [ 468.455640][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 468.469604][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 469.798737][T10816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.808206][T10816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.987147][ T9404] IPVS: starting estimator thread 0... [ 471.124603][T10827] IPVS: using max 46 ests per chain, 110400 per kthread [ 471.328739][T10832] syzkaller0: entered promiscuous mode [ 471.334870][T10832] syzkaller0: entered allmulticast mode [ 471.668269][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1259'. [ 472.880320][T10846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.890604][T10846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.986194][T10846] fuse: Unknown parameter 'user_i00000000000000000000' [ 474.916454][T10868] netlink: 'syz.5.1267': attribute type 2 has an invalid length. [ 477.292128][T10868] : entered promiscuous mode [ 479.541278][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1274'. [ 480.088994][T10912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.101535][T10912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.566609][T10930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.670566][T10930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.950827][T10930] fuse: Unknown parameter 'user_id00000000000000000000' [ 483.590161][T10951] syzkaller0: entered promiscuous mode [ 483.596260][T10951] syzkaller0: entered allmulticast mode [ 485.990093][T10971] netlink: 'syz.3.1286': attribute type 2 has an invalid length. [ 488.230589][T10996] ip6t_srh: unknown srh invflags 4000 [ 490.697767][ T31] INFO: task kworker/1:1:40 blocked for more than 143 seconds. [ 490.705775][ T31] Tainted: G L syzkaller #0 [ 490.712302][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 490.752892][ T31] task:kworker/1:1 state:D stack:21776 pid:40 tgid:40 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 490.773443][ T31] Workqueue: usb_hub_wq hub_event [ 490.778689][ T31] Call Trace: [ 490.782003][ T31] [ 490.785243][ T31] __schedule+0x14bc/0x5000 [ 490.789840][ T31] ? __pfx___schedule+0x10/0x10 [ 490.794929][ T31] ? schedule+0x91/0x360 [ 490.799228][ T31] schedule+0x165/0x360 [ 490.803457][ T31] schedule_timeout+0x9a/0x270 [ 490.818683][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 490.824258][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 490.829696][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 490.835151][ T31] ? wait_for_completion+0x267/0x5d0 [ 490.840608][ T31] wait_for_completion+0x2bf/0x5d0 [ 490.846420][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 490.852238][ T31] i2c_del_adapter+0x591/0x760 [ 490.857221][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 490.862522][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 490.868567][ T31] ? em28xx_release_resources+0xde/0x240 [ 490.875434][ T31] ? kfree+0x1c0/0x660 [ 490.879852][ T31] em28xx_i2c_unregister+0x4b/0x60 [ 490.885765][ T31] em28xx_release_resources+0x14c/0x240 [ 490.891790][ T31] em28xx_usb_disconnect+0x19f/0x2f0 [ 490.897988][ T31] usb_unbind_interface+0x26e/0x910 [ 490.903249][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 490.909575][ T31] device_release_driver_internal+0x4d9/0x800 [ 490.916258][ T31] bus_remove_device+0x34d/0x440 [ 490.921264][ T31] device_del+0x511/0x8e0 [ 490.927372][ T31] ? __pfx_device_del+0x10/0x10 [ 490.932480][ T31] ? kobject_put+0x531/0x570 [ 490.938216][ T31] usb_disable_device+0x3d4/0x8e0 [ 490.943467][ T31] usb_disconnect+0x32f/0x990 [ 490.948637][ T31] hub_event+0x1ca9/0x4ef0 [ 490.953308][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 490.960278][ T31] ? __pfx_hub_event+0x10/0x10 [ 490.965714][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 490.971478][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 490.978843][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 490.985858][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 490.991760][ T31] process_scheduled_works+0xad1/0x1770 [ 490.998241][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 491.004954][ T31] worker_thread+0x8a0/0xda0 [ 491.009716][ T31] kthread+0x711/0x8a0 [ 491.013934][ T31] ? __pfx_worker_thread+0x10/0x10 [ 491.019202][ T31] ? __pfx_kthread+0x10/0x10 [ 491.023822][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 491.029231][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 491.036238][ T31] ? __pfx_kthread+0x10/0x10 [ 491.041052][ T31] ret_from_fork+0x599/0xb30 [ 491.046940][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 491.052119][ T31] ? __switch_to_asm+0x39/0x70 [ 491.056958][ T31] ? __switch_to_asm+0x33/0x70 [ 491.061862][ T31] ? __pfx_kthread+0x10/0x10 [ 491.066590][ T31] ret_from_fork_asm+0x1a/0x30 [ 491.071526][ T31] [ 491.083101][ T31] [ 491.083101][ T31] Showing all locks held in the system: [ 491.096514][ T31] 3 locks held by kworker/0:1/10: [ 491.102304][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 491.117736][ T31] #1: ffffc900000f7b80 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 491.131665][ T31] #2: ffffffff8f6571a8 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 491.141544][ T31] 1 lock held by khungtaskd/31: [ 491.146790][ T31] #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 491.157342][ T31] 6 locks held by kworker/1:1/40: [ 491.162657][ T31] #0: ffff88801d2d8d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 491.174595][ T31] #1: ffffc90000b07b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 491.186995][ T31] #2: ffff8881443d9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 491.214895][ T31] #3: ffff88823befc998 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 491.226808][ T31] #4: ffff8880289b9160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 491.237595][ T31] #5: ffff8880598c5ba8 (&dev->lock#6){+.+.}-{4:4}, at: em28xx_release_resources+0x75/0x240 [ 491.247876][ T31] 2 locks held by getty/5591: [ 491.252669][ T31] #0: ffff88814e38f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 491.262904][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 491.273200][ T31] 3 locks held by kworker/0:7/5911: [ 491.278614][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 491.290058][ T31] #1: ffffc90004b2fb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 491.303829][ T31] #2: ffffffff8f5fb428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 491.318614][ T31] 3 locks held by kworker/1:5/5913: [ 491.323997][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 491.336217][ T31] #1: ffffc90004b4fb80 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 491.350576][ T31] #2: ffffffff8f6571a8 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 491.360722][ T31] 3 locks held by kworker/1:6/5917: [ 491.366208][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 491.377385][ T31] #1: ffffc90004b6fb80 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 491.391502][ T31] #2: ffffffff8f6571a8 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 491.401367][ T31] 3 locks held by kworker/u8:16/5937: [ 491.406902][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 491.419241][ T31] #1: ffffc90004c4fb80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 491.434176][ T31] #2: ffffffff8f30fb88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 491.444352][ T31] 3 locks held by kworker/0:8/5971: [ 491.450737][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 491.461914][ T31] #1: ffffc90004fbfb80 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 491.476086][ T31] #2: ffffffff8f6571a8 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 491.486135][ T31] 3 locks held by kworker/1:8/6026: [ 491.491715][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 491.503417][ T31] #1: ffffc9000502fb80 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 491.518019][ T31] #2: ffffffff8f6571a8 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 491.528059][ T31] 3 locks held by kworker/1:10/9404: [ 491.535642][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 491.547197][ T31] #1: ffffc9000b97fb80 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 491.563255][ T31] #2: ffffffff8f6571a8 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 491.573316][ T31] 2 locks held by syz.1.1284/10948: [ 491.579092][ T31] #0: ffffffff8f30fb88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 491.588350][ T31] #1: ffffffff8df47538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 491.599452][ T31] 1 lock held by syz.5.1287/10962: [ 491.605027][ T31] #0: ffffffff8f30fb88 (rtnl_mutex){+.+.}-{4:4}, at: ip_rt_ioctl+0xed/0x1070 [ 491.614225][ T31] 2 locks held by syz.5.1287/10970: [ 491.620010][ T31] #0: ffffffff8f5fb428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 491.630874][ T31] #1: ffffffff8f30fb88 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_rfkill_set_block+0x1e/0x50 [ 491.641145][ T31] 3 locks held by syz.3.1286/10971: [ 491.646755][ T31] #0: ffffffff8f377730 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.655195][ T31] #1: ffffffff8f6571a8 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_cmd_new+0x66a/0xaf0 [ 491.664820][ T31] #2: ffffffff8f30fb88 (rtnl_mutex){+.+.}-{4:4}, at: internal_dev_create+0x26f/0x470 [ 491.675370][ T31] 2 locks held by syz.3.1286/10974: [ 491.680729][ T31] #0: ffffffff8f302af0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 491.690447][ T31] #1: ffffffff8f30fb88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 491.701661][ T31] 2 locks held by syz.2.1291/10988: [ 491.707143][ T31] #0: ffffffff8f302af0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 491.716773][ T31] #1: ffffffff8f30fb88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 491.727478][ T31] [ 491.737983][ T31] ============================================= [ 491.737983][ T31] [ 491.746669][ T31] NMI backtrace for cpu 1 [ 491.746693][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 491.746720][ T31] Tainted: [L]=SOFTLOCKUP [ 491.746727][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.746736][ T31] Call Trace: [ 491.746745][ T31] [ 491.746752][ T31] dump_stack_lvl+0x189/0x250 [ 491.746784][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.746808][ T31] ? __pfx__printk+0x10/0x10 [ 491.746847][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 491.746875][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 491.746899][ T31] ? __pfx__printk+0x10/0x10 [ 491.746930][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 491.746961][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 491.746987][ T31] sys_info+0x135/0x170 [ 491.747005][ T31] watchdog+0xf95/0xfe0 [ 491.747035][ T31] ? watchdog+0x20a/0xfe0 [ 491.747069][ T31] kthread+0x711/0x8a0 [ 491.747099][ T31] ? __pfx_watchdog+0x10/0x10 [ 491.747126][ T31] ? __pfx_kthread+0x10/0x10 [ 491.747153][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 491.747180][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 491.747217][ T31] ? __pfx_kthread+0x10/0x10 [ 491.747246][ T31] ret_from_fork+0x599/0xb30 [ 491.747270][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 491.747302][ T31] ? __switch_to_asm+0x39/0x70 [ 491.747328][ T31] ? __switch_to_asm+0x33/0x70 [ 491.747353][ T31] ? __pfx_kthread+0x10/0x10 [ 491.747378][ T31] ret_from_fork_asm+0x1a/0x30 [ 491.747421][ T31] [ 491.747434][ T31] Sending NMI from CPU 1 to CPUs 0: [ 491.907638][ C0] NMI backtrace for cpu 0 [ 491.907661][ C0] CPU: 0 UID: 0 PID: 3523 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.907685][ C0] Tainted: [L]=SOFTLOCKUP [ 491.907691][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.907701][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 491.907728][ C0] RIP: 0010:check_preemption_disabled+0x17/0x120 [ 491.907747][ C0] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 48 83 ec 10 65 48 8b 05 1e 02 23 07 48 89 44 24 08 <65> 8b 05 26 02 23 07 65 8b 0d 1b 02 23 07 f7 c1 ff ff ff 7f 74 23 [ 491.907761][ C0] RSP: 0018:ffffc9000c207358 EFLAGS: 00000282 [ 491.907775][ C0] RAX: 38df5210678d4c00 RBX: ffffffff9014f101 RCX: 38df5210678d4c00 [ 491.907787][ C0] RDX: ffffc9000c207501 RSI: ffffffff8bc07b40 RDI: ffffffff8bc07b00 [ 491.907799][ C0] RBP: dffffc0000000000 R08: ffffc9000c207538 R09: 0000000000000000 [ 491.907810][ C0] R10: ffffc9000c207598 R11: fffff52001840eb5 R12: ffffc9000c207548 [ 491.907821][ C0] R13: ffffffff81743f85 R14: ffffffff8df419e0 R15: ffffffff81743f85 [ 491.907833][ C0] FS: 0000000000000000(0000) GS:ffff888125e3a000(0000) knlGS:0000000000000000 [ 491.907847][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.907858][ C0] CR2: 00000000f73cbb54 CR3: 00000000330aa000 CR4: 00000000003526f0 [ 491.907875][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 491.907885][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 491.907896][ C0] Call Trace: [ 491.907903][ C0] [ 491.907911][ C0] ? unwind_next_frame+0xa5/0x2390 [ 491.907930][ C0] rcu_is_watching+0x15/0xb0 [ 491.907950][ C0] ? unwind_next_frame+0xa5/0x2390 [ 491.907967][ C0] lock_release+0x4b/0x3b0 [ 491.907983][ C0] ? deref_stack_reg+0x19f/0x230 [ 491.908003][ C0] ? unwind_next_frame+0xa5/0x2390 [ 491.908020][ C0] unwind_next_frame+0x19a9/0x2390 [ 491.908041][ C0] ? unwind_next_frame+0xa5/0x2390 [ 491.908059][ C0] ? __unwind_start+0xf8/0x760 [ 491.908080][ C0] __unwind_start+0x5b9/0x760 [ 491.908100][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 491.908124][ C0] arch_stack_walk+0xe4/0x150 [ 491.908145][ C0] ? arch_stack_walk+0xe4/0x150 [ 491.908164][ C0] stack_trace_save+0x9c/0xe0 [ 491.908195][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 491.908218][ C0] ? consume_skb+0x9e/0xf0 [ 491.908232][ C0] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 491.908249][ C0] ? process_scheduled_works+0xad1/0x1770 [ 491.908265][ C0] ? worker_thread+0x8a0/0xda0 [ 491.908280][ C0] ? kthread+0x711/0x8a0 [ 491.908297][ C0] ? ret_from_fork+0x599/0xb30 [ 491.908311][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 491.908332][ C0] kasan_save_track+0x3e/0x80 [ 491.908372][ C0] kasan_save_free_info+0x46/0x50 [ 491.908393][ C0] __kasan_slab_free+0x5c/0x80 [ 491.908410][ C0] kmem_cache_free+0x197/0x620 [ 491.908425][ C0] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 491.908445][ C0] nsim_dev_trap_report_work+0x7cf/0xb80 [ 491.908470][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 491.908486][ C0] process_scheduled_works+0xad1/0x1770 [ 491.908514][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 491.908536][ C0] worker_thread+0x8a0/0xda0 [ 491.908559][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 491.908583][ C0] ? __kthread_parkme+0x7b/0x200 [ 491.908605][ C0] kthread+0x711/0x8a0 [ 491.908625][ C0] ? __pfx_worker_thread+0x10/0x10 [ 491.908642][ C0] ? __pfx_kthread+0x10/0x10 [ 491.908661][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 491.908681][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 491.908701][ C0] ? __pfx_kthread+0x10/0x10 [ 491.908720][ C0] ret_from_fork+0x599/0xb30 [ 491.908735][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 491.908755][ C0] ? __switch_to_asm+0x39/0x70 [ 491.908773][ C0] ? __switch_to_asm+0x33/0x70 [ 491.908791][ C0] ? __pfx_kthread+0x10/0x10 [ 491.908811][ C0] ret_from_fork_asm+0x1a/0x30 [ 491.908837][ C0] [ 492.310045][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 492.317116][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 492.328181][ T31] Tainted: [L]=SOFTLOCKUP [ 492.332706][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 492.343077][ T31] Call Trace: [ 492.346455][ T31] [ 492.349607][ T31] dump_stack_lvl+0x99/0x250 [ 492.354412][ T31] ? __asan_memcpy+0x40/0x70 [ 492.359022][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.364403][ T31] ? __pfx__printk+0x10/0x10 [ 492.369044][ T31] vpanic+0x237/0x6d0 [ 492.373086][ T31] ? __pfx_vpanic+0x10/0x10 [ 492.378366][ T31] ? preempt_schedule_common+0x83/0xd0 [ 492.384054][ T31] panic+0xb9/0xc0 [ 492.388063][ T31] ? __pfx_panic+0x10/0x10 [ 492.392939][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 492.399014][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 492.405201][ T31] watchdog+0xfdf/0xfe0 [ 492.409394][ T31] ? watchdog+0x20a/0xfe0 [ 492.413736][ T31] kthread+0x711/0x8a0 [ 492.417908][ T31] ? __pfx_watchdog+0x10/0x10 [ 492.422717][ T31] ? __pfx_kthread+0x10/0x10 [ 492.427442][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.432697][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 492.437992][ T31] ? __pfx_kthread+0x10/0x10 [ 492.442683][ T31] ret_from_fork+0x599/0xb30 [ 492.447391][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 492.452793][ T31] ? __switch_to_asm+0x39/0x70 [ 492.457684][ T31] ? __switch_to_asm+0x33/0x70 [ 492.462596][ T31] ? __pfx_kthread+0x10/0x10 [ 492.467229][ T31] ret_from_fork_asm+0x1a/0x30 [ 492.472133][ T31] [ 492.475421][ T31] Kernel Offset: disabled [ 492.479741][ T31] Rebooting in 86400 seconds..