last executing test programs: 43m36.050359813s ago: executing program 2 (id=164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0x3, 0x400}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x8001, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 43m36.048746463s ago: executing program 2 (id=167): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfea7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendfile(r2, r0, &(0x7f0000000440)=0x8, 0x1002) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r3, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0xfffc}, {0x4, 0x80, 0x2, 0x9}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x32, 0x0, 0xffbc, 0x6, 0x5, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2001, 0x8e) close(r3) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x401, r9}, 0x38) 43m36.046727934s ago: executing program 2 (id=169): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf464", 0xd}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x388}}], 0x1, 0x810) (async) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000500)=@x25={0x9, @remote}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)=""/252, 0xfc}, {&(0x7f0000000580)=""/24, 0x18}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x3, &(0x7f0000001140)=""/247, 0xf7}, 0x6}, {{&(0x7f0000000780)=@l2, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/231, 0xe7}, {&(0x7f0000000800)=""/19, 0x13}, {&(0x7f0000000f00)=""/130, 0x82}], 0x3, &(0x7f0000000fc0)=""/255, 0xff}, 0x7}, {{&(0x7f00000010c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000017c0), 0x0, &(0x7f0000000ac0)=""/54, 0x36}, 0x6}, {{&(0x7f0000001700)=@sco={0x1f, @none}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000003940)=""/81, 0x51}, {&(0x7f00000039c0)=""/144, 0x90}, {&(0x7f0000005ec0)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/14, 0xe}], 0x4}}], 0x4, 0x40, &(0x7f0000003bc0)={0x77359400}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000005e40)={0x48}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000003d40)={0xfffffffffffffff7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "b897524f2aab88"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000004d40)={{0x0, 0xc65, 0x7, 0x8000000000000000, 0xfff, 0x10, 0xfffffffffffffffa, 0xfffffff3, 0x0, 0x5d9, 0xd7, 0x100, 0x3a, 0xf, 0x9}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000004e00)={r5, r6, "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", "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"}) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r8 = accept4(r7, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000003c00)={0x0, @in6={{0xa, 0x4e21, 0x3, @private1, 0x6}}, 0x6, 0xfa, 0x101, 0x80000001, 0x7}, &(0x7f0000003cc0)=0x98) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003d00)={r9, 0x7}, 0x8) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000880)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000fffffffffffffffc00ffdbdf25010000000800ec00", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000840)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x2b, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 43m35.699110738s ago: executing program 2 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000500)='./file0\x00') syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f00000007c0)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d9da697cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba178fb03a467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e795484a58083c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e481a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dabfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ef2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdf12c2287bfb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802144f1dfbc114cee5ba322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462d9f9182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5572d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x28, 0x3b, 0x1333c135, 0x2, 0x5d6, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xb2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 43m35.121153384s ago: executing program 2 (id=172): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="985e44", 0x3}], 0x1}}], 0x1, 0x2090) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 43m34.690821803s ago: executing program 2 (id=177): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x63, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x9, 0xe0, 0x4, [{{0x9, 0x4, 0x0, 0xa0, 0x2, 0x2, 0x6, 0x0, 0xa, {{0xa, 0x24, 0x6, 0x0, 0x0, "98d4a551ff"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2300, 0x4, 0x1}, [@obex={0x5, 0x24, 0x15, 0x8}, @mbim={0xc, 0x24, 0x1b, 0xb2, 0xd, 0x8, 0x4, 0x7, 0x40}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x38}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x1, 0x3}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x8, 0x6, 0x0, 0x40, 0x4}, 0x24, &(0x7f0000000180)={0x5, 0xf, 0x24, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x6, 0xf000, 0x7, [0x30, 0xc000, 0x38c854211dc2a4a0]}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44b}}, {0x65, &(0x7f0000000340)=@string={0x65, 0x3, "83a20b135ac29af412a70d92998207259df41b0874e914930880ac8cfc70208e511447cfb312d3fb8602218495d9d84f24fa798e34da40fbf07cff34785589f51d8e41136d9aa13e03a87f3e8009ba91d3d91653bccf56106338891d2879f4bde3dd31"}}, {0xb3, &(0x7f00000003c0)=@string={0xb3, 0x3, "1a2027644b9f03af65f40ac5e73406a1ce01ce0b66b04b4ae782d485b623ee9110aaa7481551eaec790612a971887dd076db23534e275b89d6a38c060e88bf948b1e1677ed3e1ac43f3f2cc04c0db9a3ca5c2f4e1cefe8a7773650ba93d0793243b6f230e58b85ff1c178f38e6ecdc81fd3a3164965508eaec5a432ca10c1f28c774c20d7dcf7075967cae42cfef609f9dbcc169afda7ec2aa48adb820558b0892919a722ec305cdfee4a0b238345cc276"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000851f82"], 0x0}, 0x0) 43m34.069131159s ago: executing program 32 (id=177): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x63, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x9, 0xe0, 0x4, [{{0x9, 0x4, 0x0, 0xa0, 0x2, 0x2, 0x6, 0x0, 0xa, {{0xa, 0x24, 0x6, 0x0, 0x0, "98d4a551ff"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2300, 0x4, 0x1}, [@obex={0x5, 0x24, 0x15, 0x8}, @mbim={0xc, 0x24, 0x1b, 0xb2, 0xd, 0x8, 0x4, 0x7, 0x40}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x38}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x1, 0x3}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x8, 0x6, 0x0, 0x40, 0x4}, 0x24, &(0x7f0000000180)={0x5, 0xf, 0x24, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x6, 0xf000, 0x7, [0x30, 0xc000, 0x38c854211dc2a4a0]}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44b}}, {0x65, &(0x7f0000000340)=@string={0x65, 0x3, "83a20b135ac29af412a70d92998207259df41b0874e914930880ac8cfc70208e511447cfb312d3fb8602218495d9d84f24fa798e34da40fbf07cff34785589f51d8e41136d9aa13e03a87f3e8009ba91d3d91653bccf56106338891d2879f4bde3dd31"}}, {0xb3, &(0x7f00000003c0)=@string={0xb3, 0x3, "1a2027644b9f03af65f40ac5e73406a1ce01ce0b66b04b4ae782d485b623ee9110aaa7481551eaec790612a971887dd076db23534e275b89d6a38c060e88bf948b1e1677ed3e1ac43f3f2cc04c0db9a3ca5c2f4e1cefe8a7773650ba93d0793243b6f230e58b85ff1c178f38e6ecdc81fd3a3164965508eaec5a432ca10c1f28c774c20d7dcf7075967cae42cfef609f9dbcc169afda7ec2aa48adb820558b0892919a722ec305cdfee4a0b238345cc276"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000040)) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000851f82"], 0x0}, 0x0) 51.303003995s ago: executing program 1 (id=11196): r0 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000100)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r3 = epoll_create1(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000740)={0x80000005}) 51.220297774s ago: executing program 1 (id=11197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e1e, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x18, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0x6, 0x9, 0x5}]}}]}, 0x48}}, 0x8082) 50.748837945s ago: executing program 1 (id=11201): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) write$6lowpan_enable(r5, &(0x7f0000000080)='0', 0x1) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000a80)={0x0, {{0x2, 0x4e20, @multicast2}}, 0x1}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbaa402}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) recvmmsg(r0, &(0x7f0000006bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000102, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000ddbabbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff0000000000000000000adba21fb34ca7c75700ffff00000000ff4200000000000000000000000000014f194e2000109078c205000100000000"], 0x4a) 49.519711112s ago: executing program 1 (id=11208): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2, 0x3, 0xf8) sendto$unix(r3, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r8 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000cc0)={0x5, 0x0, [{0x40000093, 0x0, 0x3f}, {0xf5, 0x0, 0x858}, {0x3b8, 0x0, 0x7}, {0xa9e, 0x0, 0x4}, {0x9fb, 0x0, 0x2}]}) writev(r8, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {0x0}], 0x4) 48.388053373s ago: executing program 1 (id=11213): openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x10b000, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0x4) r1 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYRES8=r1], 0xb0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c004b0084437b85b8b2f633d4912171cb78638d5db653672add74809f729310f43c", @ANYRES16=r6, @ANYBLOB="050000000001ff0000004400000008000300", @ANYRES32=r7, @ANYBLOB="0a001800030303030303000024005a802000038014000300050009000900ffff04004e0a00e50800080002002d39b50c"], 0x4c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x840) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r8 = io_uring_setup(0x2f82, &(0x7f0000000200)={0x0, 0x446c5, 0x0, 0xfffffffc}) r9 = landlock_create_ruleset(&(0x7f00000001c0)={0x808, 0x2}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)) close(r8) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xa, 0x0, 0x7fffffff}]}) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r12 = socket$unix(0x1, 0x5, 0x0) dup2(r12, r10) r13 = socket$alg(0x26, 0x5, 0x0) r14 = socket$inet6(0xa, 0x80000, 0x7) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bind$alg(r13, &(0x7f0000000680)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r16 = accept4(r13, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newchain={0xfffffffffffffef8, 0x64, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r15, {0xf, 0xb}, {0x5, 0xfffd}, {0x6, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008014) 47.562793412s ago: executing program 1 (id=11219): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) r1 = syz_io_uring_setup(0x46ca, &(0x7f0000000640)={0x0, 0x2a6c, 0x400, 0xfffffffd, 0x3c3, 0x0, r0}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r4 = socket$inet(0x2b, 0x801, 0x0) listen(r4, 0x3) setsockopt$inet_int(r4, 0x0, 0x22, &(0x7f0000000000), 0x4) io_uring_enter(r1, 0x8473a, 0x0, 0xa, 0x0, 0x0) 32.232893142s ago: executing program 33 (id=11219): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) r1 = syz_io_uring_setup(0x46ca, &(0x7f0000000640)={0x0, 0x2a6c, 0x400, 0xfffffffd, 0x3c3, 0x0, r0}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r4 = socket$inet(0x2b, 0x801, 0x0) listen(r4, 0x3) setsockopt$inet_int(r4, 0x0, 0x22, &(0x7f0000000000), 0x4) io_uring_enter(r1, 0x8473a, 0x0, 0xa, 0x0, 0x0) 10.292245382s ago: executing program 4 (id=11335): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x4660, 0x400, 0x3, 0x17}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_io_uring_setup(0x378c, &(0x7f0000000380)={0x0, 0x4093, 0x10100, 0x10000003, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4126}}) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_enter(r5, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/166, 0xa6}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f0000000500)=""/213, 0xd5}, {&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000600)=""/176, 0xb0}, {&(0x7f00000000c0)=""/64, 0x40}], 0x6, 0x7, 0x56) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3495, 0x8cb5, 0x0, 0x0, 0x0) 9.366757003s ago: executing program 4 (id=11342): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) pidfd_send_signal(0xffffffffffffffff, 0xc, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfb, 0x808b9027}, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 8.562385179s ago: executing program 3 (id=11350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r0}, 0x38) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000500fc0000000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000090000000000000000000000000000000000000000000000fcffffffffffffff000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000004401050000000000000000000000000000000000000000003200000000000000e0000001000000000000000000000000ff3400000000ff00000000000000000001000000fc020000000000000000000000000000000000043200000000000000fc02000000000000000000000000000000000000000000000000000000000000fcffffff0a010101000000000000000000000000000000003c000000020000000000000000000000000000000000000000000000010300"], 0x1fc}}, 0x0) 8.138870551s ago: executing program 3 (id=11351): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000080f000/0x4000)=nil, 0x4000, 0x1000007, 0x110, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}, {&(0x7f0000000440)="c299378ee3a35d82ca772b64135a1eb1e8b97c4af595c76a86b80959a154c6f00c1df38c4824ea7d84ba60c8b2a5ef088916ac4bbd5a9629808a6784130d8f60d9df10309ba061ee4aea33903a56dd6ce6fd1dafe39af52082141f5604632eb0dd58679dd93abdca44b006d146f673c92b634f5866bd190110c30c877526e0d9ff2827d37f274b5ccfdd0e0051250e68a230ec21d9a722b421a3180001004b5574ba2da24f6944fc", 0xa8}, {&(0x7f0000000100)="c9e7721a7a9fc77a09f6e3ea745c80a969a57090d45d0a541f66cc1d8fcf7719590f3fc7ee7b5e299a61b0ee6169510334788a668ad9642300ab0e024b2fcfcf7c6d26797b582f8f", 0x48}], 0x3}}], 0x1, 0x400c404) exit(0xfe) sched_setattr(0x0, &(0x7f0000000600)={0x38, 0x6, 0x28, 0x1, 0xffffffff, 0x9, 0x569e, 0xffffffffadde1882, 0x1000, 0x9}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r3, &(0x7f0000000500)=""/43, 0x2b) getdents64(r3, 0x0, 0x0) memfd_create(&(0x7f0000000540)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syncfs(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x2c, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e22, 0x3, 'lblcr\x00', 0x3d, 0x9d3d, 0x14d}, 0x2c) socket$inet(0x2, 0x2, 0x1) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000380)=@in6={0x2, 0x4e22, 0x0, @private2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x9}]}) 7.609409293s ago: executing program 4 (id=11352): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x4660, 0x400, 0x3, 0x17}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_io_uring_setup(0x378c, &(0x7f0000000380)={0x0, 0x4093, 0x10100, 0x10000003, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4126}}) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_enter(r5, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/166, 0xa6}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f0000000500)=""/213, 0xd5}, {&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000600)=""/176, 0xb0}, {&(0x7f00000000c0)=""/64, 0x40}], 0x6, 0x7, 0x56) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3495, 0x8cb5, 0x0, 0x0, 0x0) 7.593968295s ago: executing program 0 (id=11353): ioctl$BLKCRYPTOPREPAREKEY(0xffffffffffffffff, 0xc040128b, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=""/122, 0x7a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r2, 0x10, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0x0, 0x2}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b1b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r5}}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x5}, 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e62, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, r5}}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8040) 7.135770624s ago: executing program 5 (id=11354): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xa2900, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x2, 0x3, 0x2, 0x100000001}) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x1) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f00000000c0)={0x6, 0x1}) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) (async) syz_usb_connect(0x6, 0x36f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x1b, 0xeb, 0xf5, 0x40, 0x19d2, 0x86, 0xef3e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35d, 0x1, 0x8, 0x9e, 0x0, 0xc, [{{0x9, 0x4, 0x4f, 0xf8, 0xe, 0xff, 0xff, 0xff, 0x4, [@hid_hid={0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0x93d}}, @generic={0x9e, 0xb, "09f17be21284d61c448de23f457d09c97b33825ce74ab9b37077f0c7c50b1ff241bf8903e9f6dc06142df10dfd9b83a8a510be5ecbdadde4b1ec2cf3ff899731432ce9c21d4cdffe15d05a347211550ec4e92ea66172a3e0234ecd536169e3494e4ff62c029a0b2cb354faf3385f56e9d2889ba49d14fb4c659ff90dcd471085dc9ba779b47624b2320407020332517f08bc2ea2848e677d73bcd9f0"}], [{{0x9, 0x5, 0xe, 0xc, 0x400, 0x3, 0x9, 0xc3}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x4f, 0x2, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xff, 0xe6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9a, 0xb}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x5, 0x8, 0xae, [@generic={0x6, 0x8, "2df78bcc"}, @generic={0x46, 0x22, "777f3c0afa202514ab715c2c2d5cec49ac18bb0555adfec57b03e2d7a049b20e1147e6ccd2f6bb73163f6f2bc8457e96fef2d1000c4c850b17c4312476cd0a9f84aa0036"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x5, 0xa, 0x3}}, {{0x9, 0x5, 0xe, 0x0, 0x220, 0x7, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7fff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x0, 0x8, 0x7, 0xb}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0xd9, 0x5, 0x8, [@generic={0xd3, 0x10, "1cc451d0ca3455e08852b17b3a559ccc96760a87d94eff988eb19e284e7a1936f70800ad79cc455fcf44da3bb328b35b104fcafa21d2620e9860be1a9ec5f7d190104a511f27648388f88c1a1162005452a3becff2e0a3b80d44a11de413c0954f6f02f3ca455167db073b0752a5473c5c924ea5180d203f1f456a5b44e2ded88d9086e87868467333cd6cdc7cf3bf1d9bb48eeaa2232198500ea9d4d574f9cfec8d5df1c8ff896f844b73ab1195643105d59b69f194bef93435995a2ef73bdf42c7a43bb411db3b3a974660cf2bf2dd7a"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x1, 0xa, 0x3}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x7, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x0, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xf}]}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x58, 0x4e, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xfb}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x1, 0x2, 0x8, [@generic={0x2d, 0x10, "82441453a94eea7b91b2f3fd166b69a02e4f007ad5e1c07fda03518e163ecd930f09f573e28f932ca5cd09"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x0, 0xff, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x5}]}}, {{0x9, 0x5, 0xe, 0x11, 0x20, 0x6, 0x4, 0x50, [@generic={0x1d, 0x5, "9214915af3cb636eb0dc018afb76a5da2361ff42b05d820bdb802b"}, @generic={0x85, 0x22, "59513f8cf78bb5f5f1fd49a0af59fb2ddcc00b93dd22b79b8568c8b984edc39eacc0b7d5563149015562c749d34313a9a2378e3aa0c5a8d7bb1a02257d3454026d47e6fbeb586b20ede85ab390249c3af10f5f25b5a9a23c1e4f81e5ddba2376e4d06de58d967710efdcf61cd468a6a99b4a10481829cbf0bef4732204bd44e0494554"}]}}]}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0x0, 0x10, 0x1, 0x10, 0x9}, 0x2d, &(0x7f0000000500)={0x5, 0xf, 0x2d, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0xba4, 0x0, 0xf, [0xc000, 0xc0, 0xff3fc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xec, 0x4, 0x3}]}, 0x2, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x458}}, {0x7e, &(0x7f0000000580)=@string={0x7e, 0x3, "73a1fe55fd4906bc773259d5d1b7b831170e0f2c171564429631d40b10b51f79c9705eb3092283d82a412662fe7d8dfa686289e4b3d67c954d084281f7c904aeac3cfec78e81f2ea544fd3b1552371a551b7632c4ceab9e261d3c486179ac3635ece35aeabca4a96e610bab9007efe856f10edb545056aac85f897e2"}}]}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000680)=0x1) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000006c0), 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000700)={0x1, 0x3}) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000740)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000780)='net/packet\x00') connect$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x4e21, 0x100, @remote, 0x9}, 0x1c) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000800)={'geneve0\x00', @ifru_flags=0x1000}) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000840)) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000008c0)={0x2, 0x2b, 0x101}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000900)=0xeec7) r7 = userfaultfd(0x801) fcntl$setflags(r7, 0x2, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000940)={{0x0, 0x3938700}}, 0x0) (async) unlink(&(0x7f0000000980)='./file0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f00000009c0)='.{!^/@\x00') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a00)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000b00)={0x4, 0x0, &(0x7f0000000a40)=[@register_looper], 0x56, 0x0, &(0x7f0000000a80)="0e94ccb77cb2869816714de3d3e83d0bf2748f8ebdf0d1637ea9e7427cda76f8e02f4281023af2385af6f2cca631ba6956d701b394563a0891614ee214a399723834e8d5ea3826264e52d7098907657d84b339566566"}) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000002cc0)={0x8, 0x1, {r3}, {0xffffffffffffffff}, 0x58, 0x3}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000002e80)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f0000002f80)=0xe8) syz_fuse_handle_req(r2, &(0x7f0000000b40)="9f3046bde3a6c037b81844c03c1b63194cf7245fbd4ffc65e2cbdc89acf8ba1d32246977ef8382a4a999538b0075283c3d8c62ce1cfae7a9e4bfe46536bde4d4efbd219ff0749721c680a4b34b86259b4710fa57a64f05a1b69098d05c1364fc96eae1c077aef99970978eadd4716bd2850f44001f996bc5d3cc63ae1a93408762de9b0a48453739623cea9f46b5ff71d95b25dfad369992dac4dc4ca080a6095bf0f6f4761b95ac667adf1155cec51d182d69cf4dc5ab740d8d425fe25133efedad285f6f8fc3096d42e62fc3e620f9efee69544f48ecf3f976339ba3765b2efa897f59c21e01c740a8f22afa3940166021df5036d0f521a742eb2adf133e87af09529dbc7b20156f98e8ebdf87c3b01f118173c9f49a601ad01b18ddaab43268584e719d57e5476a4d90329a40ff40851539f84e6be1605de73576e8255e21196a63de72063896c76281da6c1ddf37d03024ff65121da32e6f0f2b210e11fe7f84f66221510904dbfcb9c09cd569e90cf57e4b5e2591d96683409b23d2841fd12c94f8af9349e5c710ae30aa91ae7f2e04bda0072d89432ca2e67270e4b308b0b8d01b0f7d3470fa9312e08485012ba78536d0e2ffd60dc04adef3c91e305089ef0bddd8151beadd54454cbcb6dd95f5aaed2b16b128fb45604c9d66a73d89337a4bcc3c8dff3f29f45f50145fe893428d2cd66856ebb843f32f8b416c8723ea495feb42aa5f84df98144ea888fb81038a804b7eecbea218aa8b2045d57a8f5751cceacaa0f54ef4710b24aa3ff896460cf2c1aad240bb31a373b781ec1708ca8c7bb67d02a438c6c341d857c467d70a6c6eac6c6132fa1ac1f2bf6dc01c7e6717ed07a5254ad6bb722f4b4785285df5a3e4b4b21db6eccfb78666b856f39c0d756c6dcfe0ca3b72ba0f40104b0ec2ab34fab1f3963c2da4ac75e4ed8e669e3d50a4ae149f4f50c4d05531f99580fa19ab0f766b151feb0193646ff4e98197158846ae7edb9846a54ff8b36535f1b65fceef2a7744dbeeb740035fe0fc3e407491b435704dea8b3830ff9352651916e55859f902d51fd903064100d0bb6943843981a2f2fd0251332304845a0689a0515418adb1ee1f6d1122f8f79fdc78e82e2ce9efda41f62ce4ffd94e0666ce697ec0a51b33b793eec5280cae9b066df31fc665b5dfac99816324cd6ef0c203782aa9dcb18672244c7bb1ed20ec964b16e15d092b278d77a29202add14631703c90e88bb6fb408565a7d78a0df6fcb890b64414820c9864213960ea20a6b79778b1466ebbd8b1412723a830f8656e6d282d0f126cb72c2c04902687e202ccc637ce614f0ac132437dc0d3fc77400a94ff7f100e30c87419fae8bb5300445dd28e8c94d4a5d310b4ffcae5ea1b86ea54c2e2f4c69ebdc029a3fe6670adf18e7c6d443131bc62fa91162d1ea26f77066ec9cfb574697637461a6d15e6c686d1e611c9bb0963a1c80bc39c1217cea28b56128f5c31f0c2ccd9fcc1576fb4ad7d726d921c5700a0033d3b8c309c40f544f002e3ca8ce2a933f6bde32478210e839ab0804c9cce0cca65dd7492b00eda78e6edc189941f5ce6f703e4900096a9e7184fa061a88718e62f904c1d23f3a6c1c1c78e5cd35557f08e7ad6b2fb354cee92ff9ca905be544d5396c5ac176b0cbec061052dfdebbe7de907eb648188bccd4677949bbb7fceea2747c582e5f4a21f4b2e4ebc68f52f0b08feefef1f44fd686889a263c5c04e7f60e9b26e210b5737f9e004f901a3869d4b27b9d926fb6795ac00f7dca5ba35f9eece4f744a5d3c572cbabde9df455cb14b55e7834f9b05f8018874de2cdf7e962247add285daaf0769fc991069883f3a0eb11395c67c039341b6e07f86a8359dba903dc4b74fb1ecbde6fe4751c84e8b8f756b8cc4efa50e5bd55b3dc38fb7c90cf9c3252549dc78c71ee902ee8fcb0e1c980179160a1563183741da36460d7b530825dc87a07321d0467b8a5183c90e12138f266c2a59752a3f873378070cebdf53a2e361963cb9e2b2c5025ee56aeeceb6ba931b082d1036eb0be1df835de3c965b9d9846e1f07e327d49ec7e30c468cb94a73532c25125bdb17da736336b570afd679fd1540b5f81ecdb7e5d159b3a09a499c8fc7c3efb0ab2772b4da54c7c56ed0ead18c6ad4bdd90f09495de662fe7ef4d7564d2a028efb1c0df3a1789f2e0b28e3fa8fa599f78098830ff45498910a0200d3c9388196f6906eb53d98f339d997feb04c66585623aaa71e44695e40b9f7ad72a8dd2d5902182f04b4c2dfa1bd930efc3cf514d82a8bd0a63ac6fde37a0faaebab1bc38990daf3669057d7d2b9ab1948b8956b76a89472cbf912e67714609491351ee58e6262d28bf286064a9e442c66626e4a780e091415213a03a9c2781a04701ad66a62fe62d06ab0cfcb43496aa2f58013fdf874a0013b6955e6aef5ba6f2d56375784897c26dfc93bd6d9d76d66faede6d9e938ea2fca54c42f4762d1af4904d3b495c8d3753a1ead49664661079b868450b5d9245d73573ecfb0d251728e59b14b5275ca8917480ea9c300dacbf86c7530ddb7840323ac809e1efb4827f7f80d239ae45d445e73b4814379240c2b0132629aef92113bdbe41bf2b3bdf917e113584d005062533d572c902e410bae000ae817ebf87560660d348840e3aa0134f69c4d09b7af25d0e945904c94859ab384bf22a0447ba5ca6689e64e71954b4bd62156271a1b0097cd77b4d917e44221dbcc8daab49bd97d167bb52b081c0c71ca1fd44bcda3cdea47fd6de89e63e1e8e1f55365edf19c79cc68cdbd5f74b759994a3ed3abe60fb7bd5e0c8a7d5be24e267dd20edbffefeddb4f66004498bf701826611db1f23cb63318d12ac368eb03e785799827b8e028ed6403f9616935abbd6f5b97b8a8bb5620a3898957bf91953cd820f13cad955dd4c7f3375406f10bc85147b72ae839d81d307498f85e68acf02cf151ca2f9d11144ecbdf08ecd01ab1dd890ca46c6503a153ebdc844964eb9fec675749ad49b53bd52167848f36b08f050425df99ed0095195d6c3a73509b2b7735d019ab03bd61f447911f5ebd1c497a509055811499033f20e4ffbdfca3a2faccfe455f845fd8876e624bbfc2707bdde4bdae695eb81fd30fc42744122149f5aaa4f2076acacec10d17d3497ea47172cf47cb7d48744c8614e605180a22cf42dfb19ea4f8f62fd2bea11cb279c8dd89e0a599cd86f6377a939366a6070ae826307533d32c405ff691ec2e3482c26e4984dc699268b0f430ad6e9b57ea48a9b6e3fc98f311103dce9943f98416c8edc1629d171b77d134ae9f619d4ef4d8e4b28a32e7f53cfe086492464742633b6186f5c4c7044e4a5a7a952ce7a472546b66b6ad6917c3a3d251263d4f12a21537f16232e061f5575effd6fb337dfcace16cbd892802456e9fb314a594316b5dbec55c9214771fb83fa56d6b9d4a5fef7ee369e2a2915df9b4f5f2dedd169f0ffceffa1c60999ddc8c68b5b06efac0cc5893c9dc320fcf6ceda813f36e297809be97fe625318d8530f5e0da29c6efd0263941213c37148aefd32d4857c5064e0442569f9cd9e3cc66ee4abd5855ed454956b339540734b9c72eda59caf7318d129bd72fd1901be733dccde2f4f0f1c63b7c1af72cd060c3519c1ed0ce352b08493e8898fe2a7abcf6e4959169edcd33c46bfcf3e9c070952209baee4f95dbf0cff46d03b2424ab7016d98e56ae33464ac1db1f1c7ca82c3bae5e73f7961c502fc3c7fd6e55256de4475bdb7dfde1a8dfee57e29ee076beca1f52372a022588c5fd2924e77162db629e134b0d03fdde5c8ab01727c2b28834070b8576576d6510cd08ef0d4e0794fe4ca0d2772742023efc634743c9a94ed9b1add03940a4ab4fd25cb8a875200f64854a144d66bec4a480f367170d57d63a4757ef2d00598b467db3256895d70a4bee1e17d34378f406da1024af5852fe144ddc47f79547ce50317928e2fe9e2b6a6f81b1cde0c19461c6d461650584cb8c354be4b279ceb48ed587087bf0167a58bb2da8f225ed757fc6729a2734da9edaa12deb75c917a4b1c52765690b23fd40cdb42e158b0067a8332fbc040e51640b66a8c5bd8a31f5b49445b788afe558206b5ccd0f4f8065f9e5a7c395626736aab2e09fd40213aa95a050f4faba5747f378beb4d479f6fd6d77875c0bdcae60e3c6305a934f663840e38074de2b10fce3ae9d376c1bcac1d07784b6592511ab675072dd228aca573a2f5e9628a5bf00add888a904b73c508cbb8fe5e1abbb8eae1899efa97fd21c836add857c8f2d0f15dfb5c38d7860490a2ae795c7faf2d0bf41e1fcf4eae287f0f6d52c8448f52e8a7d028db5f2551426e3fb565af1cd0a1912837420f759ca52f9c536b57dddd7dbea42ed802176d11722e89acbec38c5788b90b3244389cdb9a5306c67c670a00cbe4d0271d49d6b391cf9bca5dc57c06f2e7350dd88a3d29165a52dd505ccc5a2d845d715cca695ac7643b7848ebb1a71e25969b062ff05f9e26e36a53d0d37a4f40cf73db0d54ff155708e9102c3aa688e27a3ae313803fcb348c38030881f77bd558609c696b1f91b029df187584bab422294ce896bf9859774f30c7f92f5f3c22befdb0333aa459212fd769e648a1f0010b2ab293f014eb5df775743861e2cc263a6f3a65e2ea7338104482e17611620642b1bfbdd7116121af5e4cf8ef11d6014582437ed2184543d19f62e96cee0384d3ccd5a9da4e6839ca3cc7a0032906327d1dbdfbcfd4b4660dd440c53181f33da70eedaacbd4ecb47512fa3f784b396a264f79d378fa8c9c9dfc5bac484ede9054597b8a2ed9db344dbbb4408c130f1e041309f1d059865c70b3359d058faedbcf750e381346b337fbea79a0913d69f8b4b8e9dd77fcb6b7c966a80dbe8d8d1df82c05555871518bada9ab5ff03771cbc3c2eae99e0362c6f4cd2d29594861f8212103abb4a453fd28a4cd6df79b7080f32e44fef65df2c5a0a5573b53da8d36200f1eeadc94b96870db7cee55703deb4e42ca126ad79d611eb5406a469e45d1cf6f65adf9e1227a8602f582bfb10b358d147e5bdaee89ac8741af57af5428f3e36e3ef8e2751e3ea65beb62e44a768e151f30aab296076697e4e8709af4b2953d150adfb3f6828cbdd6c711b69f7d4f668e94e23b7e736610f4b2274b7c59493974fda2527867df64e28bbe94f01f076bb37edcdc9d199099fcc894f22d4b36500388a6970fe5e9c7c881131ac433ddb3d19c7b5985753ce4babe05f829f6652b08e176b9124fcd8e45cda20e8a625d451565ec08fa40ed560b7f1756f32eb6c9ac5d2812a46dc5a45519e97376ccbf698dfb7cf68c188f6571907f1515c1071c094e354e8484e62004863aa5a32b5cb9fb0c73e9e1ebb25180f7b784de62a81621665a52360c199921bdc251b263ae325bd8c0bd8ba14c499e788a4d73e3348265bb2df42455c8dd4f3adeb6db86d7e19391699d3ba64e0610422404e44b81b8c7a330cf9df3feec1c2d4a53571afd04777afdca373e92c140b84d3328a5c001263c7bf3ac9012b45ded9149117d9edb7ce3cfba97cc397ed7cbf8ac9884f2c4415d491b44d6d3cd61accbcdf85fb8441e0f487b5b65f3be089dc2950df1eadc918c58403649ea4feefa364131842cb4a4dc6a7145beedc9e9e215e0ed1ac6a6c0af84c5e42e8e990a5c0b3a660122c9d39e2d71a900de78d9f22f7912529c3477c60ec3a9c40479ef2221bc7f1e75cff5e6b622054c4e4cc80244b832c12378cf4054f53b7d996bfce0f7ff06aa267b011b046db50cf0e6c65b170ab3ba94cf46079d751178c9f1070c7015bdf4d652c754a18bf6ea066e348a8eb94411a6d7007e7e0e5694171982fe97a432cf89c472ea1e086d0f12b42c7663e8a938ea6c6a2564eefca1b4a5c6c3780e3e5e22d47f82075a7d49275453b59cf56215610d1a65d644c8c672955a3ab03323169a0204fc0fef12ab6eb8b5d237c0709d9ccd5efdb34f0dd823ca752a4452025d68697173b7d6c3ac5adf021635b29a8abd91a2473ee2d92513c0459877160ff4767a259d7c21df74c88b619f4e28759c6136427a353d6782c89709ed0ce3bce0067dc0f31f9438e6b8bf37e51a5ba2e4397eb17cafd871c2da841a7a10cf2a800638eebb594f3628c394db1447eb1dbd63d2c8292da8cb8aa155f0afce8dd7731422bac2fe198d90ee3b81862195d6c510ef910ca32600dd1a0af46f3031d4a0dba1e384686fea08f5a8113a837606eae5bb3add3c541486a84471eed8264c477b46353ae2f08038fb532e5100ebe172e0988fad863bb04626669f327c688c4a06f49e740301eb06dc92d78e3f947ea4df61b535cbade311877ad600359eeb6d9204484cc7fa8da0a96482c26d7cf7c25e9ea5ed776466d650a8cca36f572039563a8571f1c6af1293eb9c3e351f9af2b8c7d76ea8b0f8b3422a283d5d46783de07f359af580936b30d124cc721ae5a7cca7fa293355de233697a96e365bdfcf98de5b1bfde5875f8cb476206b0dd9e136c6d863714d7dc4b1cde0d65eadec30774760f5aac6a999f37b482028d0e073b79be8c996a7ed921add5db332a0a45c8516c6573eb8725f29d21d392762f2f8199ae2487993dd8374f28909298a203d55f6c63f3af151156d6e9f88f99bd0d116b14dc2aff4794a2a026fae66cee0b7c5a7fd21297d25c6b45af12debc08a232107730c7259a602205f817f2272640879524bd34e28acf5c5b3f149e8dec7c5ca0c29bd3bb4ac42467037fac0abdb2aa6de10bd47e4ad8e3ab46e5998c17c813660905bb6ca9d21b7fe164c7168363504bdb3d74dcb6c676bf80c5ffdcdd4150b3f6cf8d9f368c725b5fb792e84685e013e1bb1fff6f2290238bdef10c0d69d613b258a0ed71a9b2fd24cfd466af2406b5c64449540b23640236d3f0ed44a4d66c9b1962312497230fd684513e5c0f6e1788f085ddf8e964142c2780ee584edcb4683662fa07b4ce3345c2df841f2f920f8464b97afbca1184016c0e4373784001e2ff3e8067c026b6e0e6e16d11ef4f3d1844bec3d855785bb8891344d93f1a766a490573a5a3fd1a8ca215fb06155d5148bdb7c6c629baa318a14f5395d59b3a42f883752af454a47a2d9603526330bff370cadbbed979574c148e6a21ebbb3267b96e8f82ac3f4d9e6dac2151b7385d4e4936da1d169b48f7c55e0f00d0596c9f37f8530dcf3d2420831eed93b7619538c24e35794022bb87858f61656b6ecb71b831666dd52d1cedc1d46410a3cc7f6ad1740bdf9ae86bc10821cd16dab1832cb0d058df404606850ba7587122acc9c54b716c67d8a4365c9ea5ff98d8d9edba1c26e3bf2b53dfab0f8c3eea52dcc1662815ba70007f15964b72bc23339cff96bc78905647e6f0926656ed077becb7113daba91906f8da38e373ef744c680ec9b1ae3c9cfa034e37ebb31e89a19086dbde348d9898411eed1e19442a87af0c75cf56f49ffd78e234aa39f1566a35089e36a7998781ca3e9c0ac7531163cf459b1d6f11706179a05133807c769d463a057a5140ecedf2ef5f7d29b5c484c7af8e166fd03b3f1b9460eaec844f88657e29d31a82236a2a7d38bf110b69ef5724300b7d98f99ea8253a338f4c140fd94fd645377c3f51807401874eeb2d240ad684263e1eddfa1ac9cf881ea43067268dc1a18d861e56ffc6cb84e88599c1d6a29853eba7f8da3304edee86eb8579ebbba9da1c9606504fdebd9d1c9aa8c1658e1a0615866422fea4e56bb121e129e96244e01084b4ba491dc483549a92dde788d0746ed0403d16cf5f8921d0ffe364f1ff4f8ea626000e2f76b8d90c6c6656f9bc3ed83c4166cc86e0cca33974bd9734702e4a52beb182794f43eead6a976c1707dcb60e59ad37ab247d77d84261a1e88959e14867e8bc322a647759bb9013b1840bedf7e3e9077e9275782fcb22d6106c45dd35faf5e33435af3d825aebc2a876ac494576770ea5abcec2636f9aaf4a94fae73c7173f5f43ac89db037cf42400945d5b9287f9e1fe1aea9a0a266825820ba015b347943118f2d971f758ad3c5c5b9f49b565c7a2049ea717b3cfb570f65e78865e81b95ba897d50ec57f3445d74da408a6b336c3c9f91012c3d7440d0608e12f4214c8dbfac0638c8fc92ad15131438f0c4fac1cf296cdbc5bd3ea7acd442e0d6a8e573726d0488baa8d8d01e0e25324ed27adfb93e03f6c45e4928bc21d2f8493dc17c62d15289c76d11bc2ef0e8bfa09aa5a115e0a530f528574e7d55b386cf1452886f8f986dec25ab6f6a9a37967d426a37f41ddd8301fb4b16ef8fb998868f2507f59dacb9a3b77a2e4bdfc33a7c3273d817df6fa193ed8ff361de1d45d0c641b5abaf7222d3c73ee04b68040c579deb144728ba44134e7d0a48bb5a85c1a71b6efe9c0b636e246a15106f8f8b3c9a500da3fc7cb2e7a7da08fd99df3b170581dab3df5af6db6b941f871be37f82039041cfed19c964fc31431ba3ab567fdbeca86ec4ee7d2f51474bc5f79eadf0ef3b165d47cbab692f22206eb6a09b5747c4c18c5311f1748793e140ffbfead9b0dce96160f4f00e3394947af82abb389e21599d565a9d9e86c4d742c337585d6b3b6562ce83746af15673000e016c735be4c366983440c2d310e01ff1c383c60c2b21e7f8b0686dcf899c6fba29debd7e519aadacf7eaef675245d32d68f6daec5babe7c141e52e604fae9e7a2916f82db5ed275bcd1c0b2b59a7fa3e942b9f7efdecda29264b6434682669a54a4d73405a1d3eaca01400a3612e8f53a95169aaaf9a0073153a2e90fb7a82564dc486317e85425339fe0cd26a827eaae324b28f14268581a1be65761bdeb482021ff1f6f9857b988bca00343e714d6078657fff7a0c891d6d8e2095d3a06b7ff8fae269324da58bdfeb20f302e8e528ab3bf1b4c2e40a77c58d2e70dea246288824d3f5459673deb1e0480178f2085439b5276c0b5ef92f5887db13c69438d1d52c79a9f9fb1269064b70fd9e6b871547f2306e1cb3ecd274f9fd007bbcb461d29a2cac809d8eec816b1146a0a7ab94ec77b0375e0bd8b0a3bc48388f0e66a526b1349b69be7d3a4a08523f1d7e9f8739cab09ecfcacdcc8bc3456379d7fcadc46340f1066c7b729613700fa4d3c1a03cc78fde774f3b1c2fa1104cba51be49eb2fe18eb1a438ad2db9f2a8be465a4590c9f7f9099664b2f5cdeb9cc5cb619bf0b3ebf444bfd5f8a47586a4566647b88e5abddc0a40ad36dd9f197e3f862da8e6390c9a6d78a89480dbb28aabe410fa0b34943276d649213dc692fbfb0082c564c241738e75c3656ea1f8c28f65bd29a70b28633614848da715dc79459495b3abb99013147a22e7ac88d9225f8b8bd77ec51bb5bf5643de14707b931d0d2228b09f39f52fa906fdc3e98190e1bcbc744cac4a0895e1fe82dc8f9fa6da1aa0d5502516d290fb61334d41430c10d1d29efe831d6f01cb8c00aeb5f9a8b31e8ca0f4ad2594613563020d4e96554399c8c0318b706b12ed652cda03e2f9ac138eea7ff945e07824fb33061f0962918d7e263fc51c3c3a996679925b1942575dc1845c89f7ade731f132ce01f84544c009f5c78f31e8e11fe8fc4308aaefcbbf0c9105029a18fa49ec4d4bdd427badcedad6f94fe4bc356eecbecfae6bad052d3a5dbf926613b7b92a83204a99fd7e7aaa65ea1651559913f76524d31714a043e8bf49980121e9b2ad1057a8491beb92f40d182ab80b1f9e978f75cd1eadc3ca0b84d1602f4e0264e222c935637e7b0335ce63a253fbd93a21cc8af2595f3328e445991fa18f9f09c0af6325911798e26fd98b77912231892bbabb285509a148a2a8ca772d176b1334934c1eb398143a33d492251b41474d08d7fb0a4f1112f7fb9b5a5d37f109a1d9e698ec4982a158a87a613030a4ec51d49ef04f579871f833a5d7736185fbb8d3b182e59b37c0f7e4fb4e0c28c778b4fe7df51364721c406ece59078138555d917f0fb3184fc38c60485995e0116735661bef5b2afdcc6b17c606dbde96606d1b1977c2572af45f73ca27b68c70a91c6b1f500ce75fc9df169b19d50a96156f0c9bdaaa776e7ae8fb761906750c6297e88aaf712788a2183ada4725c52584c833186b2857c991d4c517b86692a6254c861fe95c305f7efec89990a515e1719d9f8f6d83b4e8c5f0528b50c183d8a4239667c5409ed6ab2d961a921b8ba69c5370d843954bb4952d20216ee62dec6eaef24803c7b1d0a53762e473cb1a4bea4e4bccc07c9b31cece6b4747a465cdd20724b6763792249d412ef89f7802c1a04d8522e0335c686a43963128f5e3625187b881667c8e4f554d97d9a974a189fddbb60bcb8c68a70be5019f59ca729425bb896c83f2acc5635176e0419f76593662696c3af8bebc8b4b91578c2318192fc6e7ae759104af87b6e4cf541f6473a19b4e3a2149522b1fd2d4dd2b4bbeecb5fd6b4fa48599422e87790178b41e6f554ee53368f2ecd4577cef342a2be1fa94708703c7d7d65df7cc3284a91f794a5f4fd0a76a835aaed92963b2b0e2fbaff56802c3628598552badb09b2352e36c8a5134ee100f5b8969a03bae454a27ab4434e3e6a561420f7fa1b1f1819d352f5150d0bc7e66462dd4db05c686c7c7f3850b1ad6be19dccf59b2140466e93405d693b787db074f2a060c1bb970319a334acb08404b363dfeb10deb61a9550c4e76851b05a01915a389892129fec4b5e8d705b3b2161a9e7a9e06805bfc90bb7c36fea22258cd744e1d0bccd710724362aa0b0159bc92912fb4bef069cbeda913d10278699310c8c4a66cb132dc7ce6dc28a018444d85bc6e6b8da02ee4ac831449477d7b02bcd45dce8fcfd39759c685a5bb69d48f93efb8406f43f50f08c14267af89fec51e02cbbd6b96593b35902367cb6f20b451e2238ef0c47c88bb79101f0204dd6edaf4123d2723caa2985e450373dce35f3798fda2a47a82d40a70ab74784c4f0efd2bd4e344b86a5714435a7cd86fba19aec6c42b9c75966c9ca93891259b885a7202a1bfac3d65c6e9c1d8296cfa7cc879defb589d26aed4fbd73687bba34cd696ebd22bd12e5948d6427afc69ce1ecd51eabbdbec6e95f51810a03623d2732fb24c6c490a4dc800625d8e835ab51859ebf1128f4b046b4f1333e3b02f2de18c18fbfb734bf0195fae50fa9b8a84dfe6225f1e113e455aa67d06e3b7dfabe3d0b62cc7546c2dfaf85741a9cfd3b3006daf8237ae446f11720db2fce80e28a4cc4d4f7a03d1c6cf182821f1094e5dfe90cace8981a13bea799fa832beb505906a067c02f662cdefc846a72f0e8b51a863081c229ab7299c7ec108b393e8a745d54b0bef7a91d8a4aeb504041bfb7b1326e45a23a016c9628ad05fa3a94c7fd93d735da0ed8f4f2679674c9fa194e9fd0df2c72d4f704761b7a9564c295d5b0a8b2303489b934c6cf9fca61c6b6ba148ad18a66a74dcc2aff67d0693cacd254c85137fbe96e0b3f55cbd0c95ac51f9908d0c81a61e5e0fb4b1346834213be290", 0x2000, &(0x7f0000003840)={&(0x7f0000002b40)={0x50, 0x0, 0x6, {0x7, 0x2d, 0xe75, 0xffffffff80002810, 0x3, 0x3ff, 0x9, 0xffffff81, 0x0, 0x0, 0x8, 0x5}}, &(0x7f0000002bc0)={0x18, 0x0, 0x2}, &(0x7f0000002c00)={0x18, 0xfffffffffffffff5, 0x6, {0x3}}, &(0x7f0000002c40)={0x18, 0xffffffffffffffb4, 0x7, {0x1000}}, &(0x7f0000002c80)={0x18, 0xfffffffffffffff5, 0x29f, {0x6}}, &(0x7f0000002d00)={0x28, 0xfffffffffffffff5, 0x3, {{0x8, 0x0, 0x0, r9}}}, &(0x7f0000002d40)={0x60, 0x0, 0x31b, {{0x3, 0x1, 0x1fe2, 0x401, 0x9, 0x3, 0x7, 0x4}}}, &(0x7f0000002dc0)={0x18, 0x0, 0x3}, &(0x7f0000002e00)={0x11, 0x0, 0x81, {'\x00'}}, &(0x7f0000002e40)={0x20, 0x0, 0x1, {0x0, 0x11}}, &(0x7f0000003080)={0x78, 0x3537608dc8ae4d2f, 0x3, {0x4, 0x10, 0x0, {0x3, 0x81, 0xba, 0x80000000, 0x8, 0x0, 0x1, 0x9dcb, 0xfffffffe, 0xa000, 0x5e393d73, r10, 0x0, 0x3, 0x5}}}, &(0x7f0000003240)={0x90, 0x0, 0x3, {0x0, 0x1, 0x2, 0x1ff, 0x2, 0x6, {0x0, 0x1, 0x0, 0x8, 0x8484, 0x2, 0x0, 0x9, 0x8, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x6}}}, &(0x7f0000003300)={0x68, 0x0, 0x8000000000000001, [{0x1, 0x9, 0x1f, 0xe8, '/sys/kernel/debug/binder/state\x00'}, {0x4, 0xe, 0x1, 0x0, '^'}]}, &(0x7f0000003440)={0xb0, 0x0, 0x2, [{{0x0, 0x3, 0x81, 0xa, 0x8, 0x5, {0x4, 0xfffffffffffffffa, 0xcc5, 0x2c622520, 0x2, 0x5, 0x4, 0xfffffffe, 0x738, 0x8000, 0x3, 0x0, 0xffffffffffffffff, 0xe, 0x7ff}}, {0x1, 0x8, 0x7, 0x2, '.{!^/@\x00'}}]}, &(0x7f0000003540)={0xa0, 0xffffffffffffffda, 0x1, {{0x5, 0x0, 0x2, 0x6, 0x4, 0x800, {0x1, 0x8, 0xfffffffffffffffa, 0x2, 0x7fffffff, 0x6, 0xb, 0x31, 0x9, 0xc000, 0x20000, 0xee01, 0x0, 0x0, 0xe1}}, {0x0, 0xc}}}, &(0x7f0000003600)={0x20, 0xffffffffffffffda, 0xfffffffffffffffe, {0x81, 0x4, 0x5, 0x2}}, &(0x7f0000003700)={0x130, 0x0, 0x2, {0x2, 0x7, 0x0, '\x00', {0x7ff, 0xffffffff, 0x10001, 0xbbb, 0x0, 0x0, 0x1000, '\x00', 0x9cf4, 0x6, 0x0, 0x618, {0xfffffffffffffeff, 0x6}, {0x3a4, 0x80000}, {0xfff, 0x5d}, {0x6, 0x6b6}, 0x7, 0x5, 0x3, 0x1}}}}) 7.099363936s ago: executing program 4 (id=11355): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x20000000) close(0x3) syz_usb_connect$cdc_ncm(0x3, 0x93, &(0x7f00000007c0)=ANY=[], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x70, 0x0}]}) 6.527877131s ago: executing program 6 (id=11358): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x2, 0x3, 0xf8) sendto$unix(r4, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r9 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000cc0)={0x5, 0x0, [{0x40000093, 0x0, 0x3f}, {0xf5, 0x0, 0x858}, {0x3b8, 0x0, 0x7}, {0xa9e, 0x0, 0x4}, {0x9fb, 0x0, 0x2}]}) writev(r9, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {0x0}], 0x4) 6.496658948s ago: executing program 3 (id=11359): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x20, 0x70bd25, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x20080c1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0xd0}, @ldst={0x0, 0x3, 0x0, 0x4, 0x9, 0x6, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, &(0x7f0000000180), 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x6, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000280)=[{0x1, 0x3, 0x2, 0x2}, {0x1, 0x3, 0xb, 0x2}, {0x0, 0x3, 0x3, 0xc}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=0xffffffffffffffff, 0x2e, 0x0, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0}, 0x40) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@cgroup=r4, 0xffffffffffffffff, 0xd, 0x12, r1, @void, @value=r5, @void, @void, r3}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000600)={0x4, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback=r0, r1, 0x0, 0x2038, 0x0, @void, @void, @value=r6, @void, r3}, 0x20) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000001b80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b40)={&(0x7f0000000680)={0x1494, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x24}}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x50, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x1a, 0xb, "32e545f7e7df0029ef214561568ef6e4698fd56dbac9"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xe}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xd}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x94, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_SERVICE_INFO={0x6c, 0xb, "3db73f6a8587f21ee09d5cf996732e10d69c107844c4c7a223b3d3426de372cda5a4ff3c8b6a31cd923bf6871a61112b41ed16151b2f2dc74fc24cbc346d4752f9106b83273abe54e0ba1820d1bc0c0929f814542c817fb5886e1cfa2c76f580afd096cf3744bf9c"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "eca78903ec0c"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x1384, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xfa}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x136c, 0xe, 0x0, 0x1, [{0xd2, 0x0, "67beda49b39de0e7a9c19c0087ff69782fb865ace7b39d6e1c6bbed22211a1d2a4e099f01d8bd5215b4a84b2793e8830f046b21c5e43d35f5bebaa8ffa4d404dd41343e571a4429192709fa9fa53cd1ded71ef53888b0e88fbd27de7e1b53a8d4f96bab525c3d41ca057ec73147be0187678e5f38ee40c7a3efe085546d2ee76138b54e5a15c75999563a90d59b916710e8ea2765673e29e30f2c9efb60be30c46ba3554f54c2fd645e484ab5127ba8e7db0f9be34368b4c2039a81a2b560dd0ff3b2d383bda5a69c6ab55269c98"}, {0x25, 0x0, "a06d1cbbfad3844d0ef4592fc7c188fabe2410161f44d1fd91d6298820fdfec236"}, {0x7e, 0x0, "e08ca8eb6361d3a83794327b7c388ede2eeec931bd8573e6a94ce35493c1a1d56e40e6e49326ae154dbfedd65e1dc9809f237469d9e883382eea9e39ac0bdb694ebe6f77f8fb77e42dc763a9171c7c4a69025bbd3c2b7929564ce563f9e9d7f4e9e9b5dbdf98c405cd721943a9d070df8ac86250708ba84719f1"}, {0x1004, 0x0, "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"}, {0x95, 0x0, "0a93d1962a097d3c29ce5fe17c98fe9051b8245601231baa37a0e3056a4b1a463aaa0f44e530f3b1848803307770cf201ef09c75d29b98856a392739821e0d3f68faceff45ef8d2f98843b0037a507eee2e35f99fa53cacbc79eb187e6293771da3bc7cc044f4cce5f1553c009ef4beba60489db33943d25f58a584c57efa31c4ec7bdcfd220d6205198ee65adbc1f38e5"}, {0x8d, 0x0, "7cf1cb7dcaf5c540e41800abf9bed5bd35c4f2a4bddeb1e15f0437147409782bbf8e763a16028c17d17494eff9b3c8f1b543f09941ddade1d60531a975bcc24ce87756dfd76478165c6439bdc04a6ccf79b537d72f8bd327185e8c5a86e42aceb32261c726f2b2891d869133a353e123fbcfd87979920e0d4b1cf998dc576868fc76c80d9ba5f25e4e"}, {0x9e, 0x0, "d6cc64b1f71ed76ca005e11ff8bc1aa48e1921a781652dca23d2cadee35e2afa553bb3984f5dc59327db44819a62a1c28b04416373303ae82c760e300d68812300f44acb5d1721acce4b11fd01aeed174f62cad21011962821ebf1e20769583bcdef53580f87cff933845ada8f1053234cc3140966ca612abfba2a74ccc80f4e2cc3bbe6b983eb8bdcc250f0e164aed5a0092ceb0eaca4e3eeb4"}, {0x1d, 0x0, "956c58d985b18cc9202d2701ee47a35a2527fac493ebf3fa39"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xc2}]}]}, 0x1494}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c00)={0xb8, 0x17, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'wg0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008001) syz_open_dev$loop(&(0x7f0000001d40), 0xf, 0x2) fdatasync(r8) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000001d80)={{0x2, 0x4e24, @local}, {0x0, @random="10d04450b504"}, 0x8, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'wg0\x00'}) socket$netlink(0x10, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001e80)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001e00)="1042f0f1d83f89dc5262ff75b8d103a0422c689616ea0dc2bf03c973a7f9fae459336a0c55d2e7f61774b5d432e55f66e7f1c36234c77f0977cc780415cea0963dcecb964faacd95a043adbd91d8088a09c2b681ec69ea95b388df65df63cff06dfd9e35668afec41b57cae72d5dc25e2675209b9d533d66", 0x78, r1}, 0x68) r10 = fanotify_init(0x20, 0x8000) sendfile(r10, r2, &(0x7f0000001f00)=0xfffffffffffffffe, 0x8) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f40), 0x10000, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000001f80)={'ip6gretap0\x00', @random="70c8a151a031"}) r12 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)={0x60c81, 0x1, 0x2}, 0x18) mkdirat(r12, &(0x7f0000002040)='./file0\x00', 0x180) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000002080), 0x2ed0ef2c4319d10, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000020c0)={'veth0_to_hsr\x00'}) r14 = fsmount(r13, 0x0, 0x80) syz_genetlink_get_family_id$SEG6(&(0x7f0000002100), r14) 6.42692552s ago: executing program 0 (id=11360): syz_open_procfs(0x0, &(0x7f00000007c0)='net/vlan/config\x00') syz_open_procfs(0x0, &(0x7f00000006c0)='net/vlan/config\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f00000006c0)=""/224, 0xe0}], 0x4, &(0x7f0000000800)=""/21, 0x15}, 0x2}, {{&(0x7f0000000840)=@tipc, 0x80, &(0x7f0000000ac0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000b00)=""/77, 0x4d}, 0x6}, {{&(0x7f0000000b80)=@x25={0x9, @remote}, 0x80, &(0x7f0000000f40)=[{0x0}, {0x0}, {&(0x7f0000000d40)=""/121, 0x79}, {0x0}, {&(0x7f0000000e00)=""/163, 0xa3}, {&(0x7f0000001040)=""/71, 0x47}, {0x0}], 0x7, &(0x7f0000002780)=""/239, 0xef}, 0x1}, {{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {0x0}, {&(0x7f0000001300)=""/188, 0xbc}, {&(0x7f00000013c0)=""/166, 0xa6}, {0x0}, {&(0x7f00000014c0)=""/93, 0x5d}], 0x6}, 0x5b}], 0x4, 0x40000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc, 0x10012, r6, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x50, r5, 0x1, 0x20000002, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x22}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x6008040) syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) 6.423438529s ago: executing program 5 (id=11361): socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 6.22813559s ago: executing program 3 (id=11362): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) pidfd_send_signal(0xffffffffffffffff, 0xc, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfb, 0x808b9027}, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 5.200321008s ago: executing program 6 (id=11363): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x28040041) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'veth1_to_bond\x00', {0x125}, 0x2}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@llc={0x1a, 0x10f, 0xd2, 0x6, 0x40, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="27031600160014000000002f1eafacf706e105000000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07", 0x1}, {&(0x7f0000000b80)="67874da39f30961ff96276150deaa4c4009231ab23f2bac1f06ac187d72921e7779c166a001c435d7eb1c241cc220f201985d99a5920218d94d7cbf84237a87d54746f972b680ab90bc109e676f7a2cd10a8f2acb8a44c61f6b339a70b6126d846bbc18b2b642f3dc5b4b13f7af9768e1a3df5bad707a3bc7e606aea3a92225b92d738ddf2d615c225229d018662c376a95d8627ef8e75bfb86e449bd72bbcce8b8391701cf1281a6587035662a35acb6a8700fd85cfd5b88a6f55d3917ba283580285573efdbf85561aec2b7dc1fd82b9346a2a2050ed0954678a9d241b336f7f0e85dc09d1773799e69af05fab1eb87b5b9743c2d96327bd7a78e2139346f551f7f520de94a186d0df0230a9b739925cc8c5cabf160e804f07d26a76b1e4c1ebf36ff7bcd945e735713edf27b214e998dbaeb11387fab07d88e8f6d5d684238fb17df8a32817f2185dcdddc313a7a38da387546b74c1b0937d0d9c102f760f876e3bf6e787e56b369c2852cd007f29e82c2a4809a04491b26584207ee0edf5a536b842c65cd20b22054bd652b1b692fc8c7fc70b08c9eaa6241c08ea9f17dfdcc43c959bd2b3640d0644131bde892859f4d1d5affb6c075b7bcd4eae01e09005ce15637f3e27c8ae299de40d0295ba47a56e3bb19302ae3d6316ebe70105b034f8e24260401c1e2662238951c58c4eb4ae88a502ccf3829602075c62a54c91f3b3cc7a7fc6ae8670a6180f42eee4ed10a93e5f89996166ff38460e4b6cd1d419bc2aa6a2a330d4b275ff5731e804cdbbc58b07d88fe7a836f4dea12e34faec5cc8debde01a35e926fa6ffc6506639db54169ba1013e132be6aa7603302d90e2ada4627850193bb120a921a87b4f377a1b91a5fe9a248d6d6f824ff7cefe8f7c6fe972b644cfec34375a751438d00077b7fd01162e8e966e2edfd8e0efa2e0b066c24ab2f16c1d5acb00b93ff8c6d2887ce71f53ae733a91747ae507441b6d0e41b80fc39de3832bc0dba4748258ffacefa89ed6a23fba5291913d877305e279280826112c75627d1da659c4eab78af0ebb1fd2d1d500d48c6bfefab40d9418d2461ea4962be65809995969ffbd70b619f3b1514a557f39f6c579aa8be5723df095017d5d481fb780eb64c4d048ee8b0884e74af790ad843b3c122472645883db40a295d94fc6808ed1e43e4c4cec7547f30ca0964441f2639edd828facfbb495ab61484fb199b212c19a50176d9435d7efa4053d9381e3c2e47409cc6b76de6a11b0d6382f897d4714d74bb290d881d275afaab25ffd7b4b2b6b7c27c7b08fb8f97774397ada02c3b0cac1a1b59ebbaf8ec18f20f1c65553b94d1bc2759cf496c3c5597c1f526a46409a7c51f46b9efd0e63899d7e70ea97402d3828351b3531863c4f493c2e1daa75ef65892ec25bb412478e69dbb2fd4bede24f3c668a54744b50baa484390edbd17e19d83e36ed0ca31bcea0033342d3d6e8086bdf4e75852f573190711e2e6293a987ac219fb9e25fd0b2105ff75c1b97d74cc6d6f92283ebc6478b13afd3e75ec564eafeb30c3264e5a562ccd25d83962d47e499dee028146e8b6645cab1997cae2071749a0b5ed40beae1b11799eb59d0e6bde941aef2019647a96e683359c23ba5f2d03831a4f618886620d8bf7126b50680ad7c3549b03290c4e8482476bb28d1828a6565d122b487871bac996d6a10fec37bc4c996f6b54690b3acd85fe6d3d4d0b6ec3eadb122affbc5f528626b3f166c39eb319d9439c8d69b41b35f3e9271c5293d96b402979f3733a2110ba803fe60b739c9c8d8bd76a42bb15ead5681e2dcaa8e1223e5408aa1d82e51558a21f35b8f0e1a088da054add835ef4f8e1e302dfbda1c700e1cc1558c174747756b21b70b49323a64c0e27a6686c837813426f73e8507dea3be971d8be83c3ee5597a727e16865251097bd04924dbf6dd002c045450f7d3da66b9e1e67fc17712263a05e4b28aa15f516833016998854f1da02fab754a32d94b8dd857f2a3706be7ae0a4a541472468cf1d82da06690566402526c22c4295550c9d506daacc3533eb87e7e3ffa11326a033821cdbe5a08bb286c58b09bb83bfcf3da12976fbdd4efa0404794574f5e875bde85423d3d3ab6f2a745bbbda64d3eec27d4178ddfcbbbba3976b9f68f2c76d119123666c1d669a4b3fe73e9588968de686a800517fb724358789e25d5e83ebdaaf4427591f00672e7c62e0b296c163dd31dc2cd307dc7476648300ba3ac5e66fe83aac2bc37dbf44f7a66fd4481f32abe2c63d1b61ad0708c8192f9522e5d621c5699c40dbdff31b8a86c232a6e1fa97e038bf8b2dfe56c0c52cad5262a0bf72bff14e154209ad35ba49e94e9711261c72b5e85305d9be47628cef835f921d7a1872ad90236d0d1acbe56877957ebeebeaa8a24fdbe9e489c304c4bd997e1b70fa0b873287273b02d188a9dcf1c1d4cb550bab8172aee7812ae07a29c4f83a5614246f031f97ae1707978394d68e7ed7bb644b463f340369f247a056dd8de03d470f88d48079d3e459edc8a1844b3fdedc6aba3d0d2d52d1f78c70adf0dd0f8911443e0ebebcf43f945b64cd6f8983a829f1ca5e0d10673acd3f7cb9f6335edd914d0220cc2ee8d70a3dfe50e3b4c9699a195b66bbf353bac89432ed602f89755708a112837fdac1a1b93b6df93b9ff3b4ba8ef4e2eb05ac1c7c375b0cac2cc82b4f3da87d1101267e66f3be442ec608442465b57c04251dea4d6d8f9aa548cc84ef3950664839222fc30ac9cf3913e6289c369bf5bb0424fc344a9d882d3bc37e3868101feeba39dec2820254050c29d8e612f864fac7894dfa22bfc2084514d1ee9400835cb1d2487f83a7ce8dd5bfc54e6b65c18a7842cc58eeb80d95abf1b1c1dd50bc8f593a3c2e9a35abea2b30aaf1dbbe186c01bbc8499edbd8347ec1eba8506ab8cfa4186d0138045db01ab0b288400b4da8b108a8e9c06aa5e5376bfc5dc59e097c4aeb867919e19de4f5dc1f0a1afeec77c27032a9a6f11840d66a8d007568cd464e83920729bb83ee06101d675a20d9a7a5525b940699f1e5163f37ec03adf55a19821efd2ece1c70896ea458123574e18765a97f213e842a8eae42e05029232b591cb45a21b5aecd412b82c20aab0d7d51014b5f583dbf956ad95fc4dd127be8d68eabbe76e17f82c52bfc2dc3860e66af7f568c14e4b30387bc2b170b6502022081d32748c9c0e824c7caca31a9da4194246f2802e349dbf7ee2272ee9ec2cea5443824c07426cc8186aa5401b94a91191c3f00dc33b3c75b153c222462d5437ed3347226809dacffc3dd9739d3199050df08e73b0cfc88163ed5119b5f92fbcfc8903c7ea6e924ccf2d047a404c21ce64d2326cfe77f7e224ceb97eeab78b06c1c5dfb4b2b3c482fa2c5473d82861028461012b51a98837727644b7608eddde749adc0517623758d4021024a00be6c84e6b19bb724f17b4e1aaba678de546db891a3a7d014e34d8428b79e470c2c76e611a0f73781d53842a82433e48e1ad84ef2ba86bd41694f992f83deb9c00d7194f30ae309739dac4ae06b29d630970f9d1de65a3a6913891bcbe080dc776927201adf40a6e37f19b4a9a7042aa7e20363c3e769e1c22c5dc2208a691ed449c6e3918882c248a1628fffbf02642197f4daf7deb1132038bff1240b4f2a995dacdcbcdd6721f888e2b1d1b26197cd3fcb72994e8c9f099ac247db8d40775cea1b4e8c117ee48c3c85167eb4ada850842b47126bcd5c7bd19abedd3eb755f7177a6c3465ecc7136fab1a0b5b25b1e6423a389557481702cab34429bfa456c3b19ed680337e2b075b6ad1799df690438cf9480b6fcb7d5519f7475d14c6a5555626ddeb3b4a98e855b9a811293d0714526b0a7828dab2bb7fdb48601f8e64be35c03a9a96c120bf268f7ec10b977cbf1a16f3a3e029a125e4170aff388d6f5b122e75469d1788be93a2275ebc30b9ffa2b243e464f0f655b0c035477bb1af28154314bf234f979167872711e5577b8abd20559f5fff6431cb669e8c2d7288628847643173f3a5d633c07c1c4b06b42cab8e2ebfe41620f2e0bdba7cabe41b620ec3efd1b1416fd8d582b07a5e6bdf4a1b8f5f76b0e1f31b48be1bb0c2c666e2f1ad47762337f100332cbffb0f632a2b4a864d90a69c7d64c05f7ee7a294f8cb86a309317c8245139ad0e2293b4af3e9bf816776bcb215143c185db1b1420b625063467b323fb2ecd34c3422f4f3621e05b2433be68675c530756c7d5866bf8d247ab11a8adde54b4ee6f2acbb9597428c1d19d86af8374424b3cfafc355983b2baefdb54fa75ea2913221b695b16bc3b8dab018ee6d2c7bfc17daeefd034cd67688d3f4dbac82cb8df368698b503fca005435df35e08100d0f0b6baf0af2778fc52136072696301ee1656f9b5f3b32f7225555a8bae6cb95f4f9c6c9d278e1d53cb98fdf09b09900c95675180c68bfd757297c73ba3138c26a7b33ae36d3029110f20d7f9832a947dc8bdcac336e80ed7cc952637366839c03450bb4a29fc77d817432af7c8850647723121594a523887093c57ce0b8bdfd5e2bc6f69b297edf4fe1d78e5a13e51a94297126f59a29f9da775a2388eab8487821972ea4afa799861e6b928ad99d5705a80b7931a4d01c76d100862a1e0b00e8310b241025948d162ad4d56860f92aef62d5d966399153473aa6d70ccfc7899e89f467d4b06b1fa86c5fb6377557225a438f41bf4179f418100fccf8e57f2a6d65387f7e01e758a3aeedc90569fb7805fc1c2427d5e319ff006038a238f5718e9058f87154ed55de76bf262146cf06b86ae48ad572730cf97a00dfee6e0ba5041ecd3132ffe91408a21bb06c3347b135db998925ef7fd4976ae80c76db4f60b0c54db4d5ba970464c0e1929dd0c9bfa4c40abb1fe569805f6d7273128bb65b3f1fedd1564ac60fc66daed992dd46162965d1adb390cb37d5474ce5ae8bc771fb50359e8c63c943cd51da8ea399eeeb1377d28d60476350fe6029d4596125a34ff32334c9bd5d3a4d09e8c8aa7b58b90e0ac5bfd44fc18da38d959ff7baa3bbb0ca7deaf91d5f9887aeedc9d33a9dfb4de1b8449ef691c743dc2ac71d94c95f79211816adb714c19f2ab9bcaa4d9a6e9a9730f1d8f22aa92a41349c4d7aab46b4fff8517eaa889e09da545bae8c620994a9fab30e2d8f7a01df04a6f9e80691836659b4bea3d9db9939c8baa71b26eadc8ab683342f9fef5765967ab97d4156bca08ba47b9d7f45f6cd720ea3a6fa31c52060adf007b1b95aba689c786966bdb86b8edc3400bba63aef4c7b23ac8c80b1b537fa3a16221d3943e1680acba0b0915c130881b621dc2ae3c6e41858d2a4fdd8fc680c0c51460c1fb54df42636f1311f2b742d28c4e5c4300fa55ca9c59dc76209b7daec45cdcd1286c9816878b6e4d50160e9532f106e7b1cf0b2ddd438e422f07384221639", 0xf29}], 0x2}, 0x4) 5.054935518s ago: executing program 6 (id=11364): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) preadv(r2, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000480)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(r2, 0x107, 0xb, 0x0, 0xfffffffffffffc54) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x200000000000001}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) 4.297047807s ago: executing program 0 (id=11365): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) preadv(r2, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000480)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(r2, 0x107, 0xb, 0x0, 0xfffffffffffffc54) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x200000000000001}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) 4.132915401s ago: executing program 5 (id=11366): pselect6(0x40, &(0x7f0000000040)={0x80000000, 0x0, 0x3, 0x2, 0x4, 0x7, 0xffffffffffffff81, 0x9e}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0) sendto$inet6(r4, &(0x7f0000000000)="826bb66f", 0x18, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000001e65b20d039d6cda2a69ea", @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000600000004000000ffffff0f01000000"], 0x50) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x177) syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) 3.67544509s ago: executing program 6 (id=11367): close(0x3) 3.674988551s ago: executing program 3 (id=11368): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x100010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES16=r0, @ANYBLOB="4314421d7954ee3d2d76560727ca7a0e8a441000000000000000b934df4625ccf78847eca11e6c3e0a9160fdb0fbb7d9874823bf99431fe838bfc7ed8072bfc7d0c4d2", @ANYRES32=0x0, @ANYBLOB="30cc1759adaf722b8c525e6feef4474a2c20440c2119396ced0ffda8a24d8575ea0a1042a0e60446c2774286257fb4ed16cb885e03c3a36244f57b739e8d8f89be920d94356fb917389069e6829e8465b685338daa590d2214ffb4421953aff3d2818ca45e101ec4204da59f1c374bf43988ef191bb8e3a0a25d4ab78601d30adf0b13e6758e4400eb7e8c833372a8617c8d96b87903db1d35369ad1245a273bc6ffc5287fa70cdb7e6d155652eb4c96f13bc816fead8a6f2b85dfd0988b8e1e370b89b3b62bffcdaf", @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100c60000009500000000000000b7020000001200007b2af0ff00000000d609080008200000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001502010076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000c0f000/0x4000)=nil, 0x4000, 0xd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES64=r6, @ANYRES8=r5], 0x70}, 0x1, 0x0, 0x0, 0x854}, 0x4040880) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000f, 0x8010, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000046c000/0x3000)=nil, 0x3000, 0x0, 0x600, 0x2000) open$dir(&(0x7f00000000c0)='./file0\x00', 0x224000, 0x100) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r9 = syz_usb_connect$hid(0x6, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce822", @ANYRES32=r2], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001c3400300000000006506020001cd00007118540000000000c3640010010000006b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) syz_usb_control_io$hid(r9, 0x0, 0x0) socket$inet(0x2, 0x2, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) 3.630093225s ago: executing program 4 (id=11369): socket$inet6(0xa, 0x800000000000002, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$inet6(0xa, 0x805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000121000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c800) 3.489901488s ago: executing program 4 (id=11370): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000003980)=[{{&(0x7f0000000940)={0xa, 0x4e22, 0x2, @remote, 0x8}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000000980)="15", 0x1}], 0x1}}, {{&(0x7f0000002340)={0xa, 0x4e24, 0x5d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000003880)=[{&(0x7f0000002380)="e0", 0x1}], 0x1}}], 0x2, 0x20004000) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x82, &(0x7f0000000000)={0x0, 0x10001}, &(0x7f0000000040)=0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x40000093, 0x0, 0xc9c3}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f00000000c0)=@fd={0x10e, 0x3, 0x4, 0x0, 0xe4cb6a4, {0x77359400}, {0x1, 0x2, 0x8, 0x1, 0x79, 0x5, "cf5da9f1"}, 0x0, 0x4, {}, 0x8}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x9, 0x0, 0x5, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x700, 0x2, 0x4}}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x9, @vifc_lcl_ifindex=r7, @broadcast}, 0x10) socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_io_uring_setup(0xacc, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x2, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000001c0)=0x3, 0x0, 0x4) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x45}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x80008}) syz_open_dev$hidraw(&(0x7f0000000080), 0x4000000, 0x8496714a32a14324) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.378792603s ago: executing program 6 (id=11371): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="1b0000000000000000400000c3bb000000c7072a31f2c60bfdd38faaf925b2a9a54670d813911d8900955e24989c0a94fc5451fb972a1e76004f53e760f3e6f73980f0c10c4f5e5d37728f97a7559d4ecf2d1885ca97", @ANYBLOB="a14217b4ef8d55f2e9899212d8b5dfdd6d6392a88e7f15c3eaeff4d9d78a29fc3aca1909b5fc1eb769c198c5d88ffad98273f427f4553b595ae47e57c172d45205e477b39ca6a26c743815e514fac9ff6c4ce2a9626e8d31e6af7809845d67fa148b8d2c948f171102b7ef6361599c05a6d2b5355f7c20fdcd1945ddda00134db9ad4e098ef3f593cc7da7448f8c6b140290737ff2d267e8ff2d89ab12435dddb0f3ff4b42ee4eebcb8191af215e6ffb715dc3d77741ec524da25097915b1fb711c8017d1766a7886000"/212], 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000340)=@arm64={0x7, 0xc, 0x6, '\x00', 0x3}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6}, {0xeeee8000, 0xffff1000, 0xb, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x8c, r3, 0xc00, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0xfffffffffffffe48, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x4008080) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b8, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x310, 0x20a, 0x278, 0x310, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xff, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff000000], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x1, 0x1}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000800)="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", 0x184}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db394", 0x23}], 0x3}], 0x1, 0x40800) recvmsg$qrtr(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/217, 0xd9}], 0x1, 0x0, 0x0, 0x40004002}, 0x38, 0x12001) r8 = socket(0x200000000000011, 0x2, 0x0) pwritev2(r8, &(0x7f00000006c0)=[{&(0x7f0000000640)="813aa7", 0x3}, {&(0x7f0000000680)="e23579db8b4e2acaad0f472400d3", 0xe}, {&(0x7f0000000780)="f16899fcb96a1796d443355a7b939641adb4a22c8641e614602be78ce8d5fa7123f20ac3e6c30c96836969c69049a7a46355c5e5ccdb5059b1e0a52676ffd6901cb09e45089d83f364214972c25346c38c2b235a375bb5c07723acfc5f83b820cef5c66c51252a8db70976ad777812c41024abaa7bfec4876d656772001fd280c1cc8bab5aa1dd2802b30344373d7a8ef4b4dfd223000045d67579eeadfc131a814bc91da0d8895d950a9c51682a67094042aa8fb8a9be47252f26e640d7f5f0d36415046a43d6fc9723c6cd26f48584acc44fa1125312b7a6fb9e3c30ffeba3566fb09350f9cd09a7d5b018b14359d719b321809302a8b885fdcfa148f05f0fd8370c0681427c8a1618ea6bbf6bfed0a86921422eae7477027ba0012b173a98797262b750b77be5ffebe91846ca1610b99cd0e4bb31c32d7c475532be9435bfc16b16bd669d4caeeabe45c82180e8181e0efeab06d705360857d8ee081e977a271314acb86337fb73e018e66bbc9be7d03b7ad135c99885f418738e4fbed5c14c46130d61cb3c3cd0c7ecae0016d4aeab41b4f4cd1b45701fe1f97658144aa6862f43f5c8f56c9e354de402738193ad8f8efeb7ec258cdec41f43d3d0cdadb8eab24e13bea5c0eeab8b6206bdc05f4d54b06c59216ae0cb6f97fc18a10ab47a4c74bcc9e762d308505c06741c5c085c7e835545166ec205b58ae3588825ae8f06d436750b5223540c9c14631b39aed1e0e62a41502d38717e50dab3a4dda598f8a548be46e0fd25cbb0f66430aae88e6ac7f75bda67d13f7cce55af6fd46667701e52247b37ddc6afb6ef2fc8cd766a399df765e7304a5cf60ebf194028f4d981b70ab7151d6dd9793eb154819e60442eca3f9aee9f7898265b6c00bb652ebfdadafe609442601bef5edf03d8f7623916122be0e9b225ed1d76ed63aed6a7f05e4986bd92500fa9926954bbca9ed8d6d2aa8a7b507db5e4c1e14944852ba262a255fb4fdc17b344e83bcdbb4be292bedc965dc911822c2e5412fe63258f402119e05cc6fbff93e27f72db33561b98a82f2b47e0cae7a8a97eca4bb47030768aa848a1f61ea0cb581051db4b83ef2feed1b163ef1ec99a49833282543b112a8135f5eb9584272acf94441e00a72a62515d48475b125897a3216aed26631c4d3efe1b5b4755a87178142de606f3c8ab7f1a919fe52624f063c47f58382027dd4fa245a478a764ba6175e07a7e843ff89c42a2fa39658a947054193fdd6bbc37dab790819052698578840f73b3cad276e75baabfb992586fdc6345919e980db723a42ccf927e35610fac623e0ee396efc5ff5df58c94978718016a575cda611900eae75742df887829c4d9c8b4012112729d1c273019759da75d5cca1c7921a3de04f0a3be944dbffdf541c1fe79fa3eeb62ced429e24070b2c479e93448a0c21fd872210fd53686ddf763ccbe3504dd0618a6008d1baa7f90785425ab1830a81aa11fc52194dfb845d5e63840159a5e7f32a24f0d0065f29967905dbf0a5ca4aec619112fbde560e8ff27de0a826c78ccc2536071b617ae2602f7856e2ca158b2545007aa384a79fcffd9e27371cef8bd35cd87f4a6dfd539b24f941e5c29d7f1428b61401962b060214a7e7087544aa2a2aeec5cf824a80146d9bfe2873139e706aece3bf16f1f1f925374596b0f77f0c19b91b7c3c992571d6b7c7f37d86f717d09140aaa02700156b3bfd9fb3aa647ca298245e257209f8431da841a2fe1ed4d9b7dbb7379918c053c60a214db5ab9f130d18c71b93bdc74e2a46fd521eb9d35e98b677af1e9021b1835b4d2207695c962ed718d8b1a47bf40a751e9d766805c13f6dda5ceef67cb450f708dabef85b0fee9d6a4c10d0c58d34a5ecf55bc775f8e694a0c9347720c42c4b4dba304d3da0dfadc16668edfb24adb4f3af9f72115634a7e118170be78de43085e5b8f2a64b73f2674d294fd2f812e1d849c4f2eb321630c1bd0af6a7ed0503b49be7b34398ae67398b106d1ca0f71e28cd59348bdfdf64105699dbd2e2de0b2ab33b15479a594f55fe1d3e39eea8b9481485e1a356514391b7e2a073898e900be3075b21477437a953e72c51b95902b9633155dd84cbad4af67cfa5aff8e4a55791173c970c550f13e255f5d296daf8b0cbfffee6c1c24fc2d2c9e73fb2f18806c5e6eafa2a7620fe020aea6d73750f15eb20607c20a5ccfa06b4df2188f5a873fc4a039c83440f5342764cc496628991318af37554bd7e2463bf024d19d2c3580e401f4534b84b8a7d460cebf6760c549ec2dd46fb1dcf129c4385427e091153180010c815f165299011e8139d895c390676304a29d9d4052c1769e467c143b8e31b82d0022e63710e6a16fbdb905a98ed6c414e4bb9a459f99905f9a819f44f05a2559c1e6fac59b3909fb4b49c0c5304e605a48050cc40d9ded2bd815efd637a0693e7bd5abb18f1b7dd56ccb6462a9622b83d75b85ddd469f940f9905187fe0d6b70cc4a9b3f95768167e6eda6bd691781deb6548477f3302e84846f0460727bbc19a78788518542ae653bc322961763664f40e3420226f03609e2c4c714abc33eb8afe6688241ba63810fb0c0fd854e9979f1a3fb788e4cf7c8924387664eceb7b2346e12e38604033e5f289a7e443ab7508d19b333d747f612520aa492ccb338b40336dab5a2de403c6ead0f3e9b9995c24bff3963418f8dd2d220e1707288b262f33007d9612386f3c2ec69198755a7a11394c3bf7b9817758bf8f6cfd9dc1474f4827d00ae7d94b50d5f754ed4626b7b8e69d812dc972097ef7bcfa68e32e4abde4a6c49ed4d60d54eb9fe399b2a8b9b54ac9758cc75b35aea608ff04a5cb5c4224e9510fe31769a3817c91ed132994b50206ae1d961497435e21869f87e5f1c37f5aa8295216a0d3d3db718f6542f126aeb19304425b627f3cbcf059d6284adc3788ca5f95341ef62e57e2a55f1a0c3745d315eff4c05530f4a064a0ef9180a3f529539aded9a113641ce84264ead13ce696a301014780e6d77a8f6dcb2ea5a07ef29a35475fecd59b30c0344d2caface60068b20f0d068cbb9343f033bd36e068ce46d8ab65bc7390aba048911b017aecb125e1551485890ff21e9fd994a0afca85d6b83dc56d6dcfcbe40ac07a08436c183a6d4e6d1cca5ae64b6dee56efccaa4cc6123fb285a70853f500de14787496b8abf0b63dba75162e58c6b43579bce3ad3a84f6dd56113e01a0ed71e619a7fcc8424ba8e91012bd75cb978f68c6b224ae5f61ad36c94bdf6b748b858d8a72134c9b810825d32132d03eec95f929ae8069c985bb20b22e3582e7877b8e66c094956610fe2a44b8fb47d7c37b1726d0e1f8cc6d580a3fc40b6077f5190d7ce6eb3da9869cc621e803aa2310fe25844ab56caef82be79b3c1800dc05a33022b4d59e140939a8fd19210c7b7c6838b7ae126e248358471d0299cb6b98d9ca5c501f20572aa727eee0ac06108c340c3f485b1bea852188fa7812b7d6624b4f9c724afdc34b379fea8e1719f8af3d4cbb3bb0187368525134069a4dcf04064b7baec04081df0b1de0a7b51f5a1e8c0443ac75144ebe28267ae93ba7c7cd212f46b2081ea4f3066d3616a1aaff3dafb83562cfccd22a24f439e50a126312bd4721ad50a6dc28d3b6b4c108d9d358bad04a6e19d7eb6f581579bfc0156af1944fae7377f6f591e0f1ce593735878d52d8d18aaae5a4492867cdc5348d34eaed0fcc28d790166381ef4d9de592ffffda0bd0fc419466fc9c3d9af5c375398952ef4c33fc4970f1548d66d7f90959b22eee0c5a3d9ffeaa3e589e2b7003b2db977470fd81275d1843ad7812a3fd6b5a295a6e517a72bb3604493a53fd95487577064925deff1cebcda26ed1f3a224a290f0ef1b64e5330baa247485bed84e45dcedf8a13c18ca827558ddef99de3d03c23c2be37c06192c45c89170535568ec3a8d7f305e9af5a4d3aeb089db5a47a061c2de1038dfd6e2b873db06e285b4bfb8b7fca27b0a3a209840bf93cc557f5168ad14cbf916b91cda585ebc15fedab26c3244e027c5c7a2ad138a8fed18dc1e260e0b9121b27bec6e37020c5ad823f8746c80cd52ed304d32387a8b3a0025c453b3c2f1d736f1c3994b3b2d095a1d848c647de348dc156e21705eccc60261cf827c9ecd9cc6ce2c1107bc9c5ae090d54194afa1efa3b0fcd482109a7347c72df2bd4551f64e94b623827184721af28568a6415a8f23f857fc25313efd20a6479bfb50fe928cf847d368de87d1cfa8c7d2b3a5c4ba79ee6db3a73d95923955b67e939b0a10609c22ca935b77ba057617ce1e8c4b04d430c05433a93e7664e29cf979d5db4b4820172ccd26c340b2bc92f0fe34290efb2a0e81a201f31fda35f20c74f3acbaef728c72cc4759e19c5a859ce45bd40c7bf6c43aba0013dc701c66b7b0dfb9f47683f0c827fcc637b5e6fe4e6dc014b0c6a5815aa44da4b75916d3b1aace4f9a241755426c1e849d9d12e30b74601298b45fc57a4e0c4306ddb2d755d6d396ba334b6d849b301fe130f4f61e30f016c49257ae1ddf60f3d2e16ee2ad121e598694ecd864a2484528a831b43dbfe61ce10cb116a5702057167219cd9038a282eef51f9595971bf5b337a9f937e82f4c48027d4cd43a40d7902b81d6b6df0de264b8232dc551d3ae994414ec2aee901d326d79e0d043a5fe742660a0713c7006bebf0a350a8e86a6d3bfda59a2429fb4da6733edb99b9e196564554d83e019990f4207d533f528c0cb6d2011e004152fc58472e8e550bce0371ea01cc1c8c7d8da25a83b8ccb2b5469455c56f436e13d54ea1a569f79b1d7207e5547c02d7df9f387a85ef435aa2f296c19cf8bad4c4a5ad445b0950200ebd91cef7b901f405a2951d13a1ed80b2141e18f1f0a99b7fa5b82d5f8810f2a1d38be4f1b0429c211c93f7ec5e520ecbaccf6dae24e2ddf7047b7e21f11de2e83454d6c856800b1bd52d3d04b62e19d2ab134f7a6320d1beb5e04644106f363e2f814072c75d5b5cc12162e8f5491d79bb82001c26a6580fd8514b4f8b0d5ec46f5607207a97040866bc7249c6242c7171867abc846b297ff2ab617075b3bcd84c77a077555f3413140d2af0656972270e80e2c270028a4d312fdafba7c708abafa20239ea57b0f259062a73d7b40c777e6ae356e3a4e13ccad0be6fc6f350aa2b94be155cfca112c8574014623c53cf18add114646f5578cf51e952901f628ca095f5f25437f5a0739cd61b77ddd5be18733a28b5febf44dd61f150bf51fece7925e4746d0e953ac70de729e207dd561d31ebc9d88c53e72d86ec1d86a33c4a414e2ca8c8c1d7d7a955e0c248b3062cb21573078fac9124972b2994b996e25a407640c4c7c05a4d61faa72e9dc36134512ec0a255d65ec795e69c54c6eb485a97d2603afd489bf079172ec199af81b14ee2715afc6908c22931cddca0d8399de8932343b00e93585f54a4cac9e763180bc71733e5d84408934be1f8440976fb29c6ae4e3070e0a098c362a740c4f1e24fe0f0c4e8c369842930a427780203f3b9e464ea7aaab55d18bb740f08bf6dcde6193a584986f7eec94b962bbe1c2dfa256df2a94265f8e66cefcf3c81f29b7f4372a713f2a58ae208cabb5470839bd9300274f645427c4ce727e5ba2d62074552ceeb43c7db127a7968b341117d155f5e028657ccb06be31fa80cdb50e1562ee102db15539d967d74fda0fa2268b1b3be810d2c0983a243c9a43ecb823a4906785968316e53400", 0x1000}, {&(0x7f0000001780)="a2f3f807544b0362070e4f1f77b5b9dd2fab6c5b6e51a0570951ddb4fa06be7391fef7c97b60615bac7daf774edff563683fababad4a1280d867491cd593895a8b53a002582995c39de914135053a0634d7315183228d39e2d4f49870b901d412eda4af89614857016b6beccbd0409b7a6a5b9473857a2490e945a41ab7f88a3bf9b2c587ba3586909fa78d9a1bfbf43c0b9530433c8b083072bbccb33a1647db77039aae3b1145bc817bb3a7e3f8233e83188cfb1a44136958ab368f371da587acad8e0c22da10e4384068fddad1c98d258d754c3e0d2f16fac722292b4508faaceac36df6c4d6f53f4d493e1a1a5b0928c7f826c", 0xf5}], 0x4, 0x7, 0x80, 0x8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x2, 0x4, 0x9, 0xcdc}, 0x48) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000000), &(0x7f00000000c0), 0x275f3b0249a66392}, 0x20) 2.85093859s ago: executing program 6 (id=11372): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x20, 0x2}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f0000000100)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0xa001, 0x6011, 0x51, &(0x7f0000000040)="8e2c41b43212cb75465013caac933f99b497b9c4983f3d16bc9a9265eff69baadcc5a79bc6a20fee9f399170e04ecb32d9fcf86d8f625926cbf3ab57f8847b757a9dedb7982a2cef1af499355a4f519010"}], 0x2}) 2.703616558s ago: executing program 5 (id=11373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.599163134s ago: executing program 0 (id=11374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.229920165s ago: executing program 0 (id=11375): syz_open_procfs(0x0, &(0x7f00000007c0)='net/vlan/config\x00') syz_open_procfs(0x0, &(0x7f00000006c0)='net/vlan/config\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f00000006c0)=""/224, 0xe0}], 0x4, &(0x7f0000000800)=""/21, 0x15}, 0x2}, {{&(0x7f0000000840)=@tipc, 0x80, &(0x7f0000000ac0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000b00)=""/77, 0x4d}, 0x6}, {{&(0x7f0000000b80)=@x25={0x9, @remote}, 0x80, &(0x7f0000000f40)=[{0x0}, {0x0}, {&(0x7f0000000d40)=""/121, 0x79}, {0x0}, {&(0x7f0000000e00)=""/163, 0xa3}, {&(0x7f0000001040)=""/71, 0x47}, {0x0}], 0x7, &(0x7f0000002780)=""/239, 0xef}, 0x1}, {{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {0x0}, {&(0x7f0000001300)=""/188, 0xbc}, {&(0x7f00000013c0)=""/166, 0xa6}, {0x0}, {&(0x7f00000014c0)=""/93, 0x5d}], 0x6}, 0x5b}], 0x4, 0x40000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc, 0x10012, r6, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x50, r5, 0x1, 0x20000002, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x22}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x6008040) syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) 1.137676706s ago: executing program 5 (id=11376): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x14, 0x32, 0x403, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80d1}, 0x30000898) epoll_create1(0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={0x0, 0x1100}) 931.319517ms ago: executing program 5 (id=11377): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x2, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/32, 0x30}], 0x1}, 0x4}], 0x1, 0x400101a0, 0x0) close(r1) r2 = socket(0x1, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) ioctl$sock_netdev_private(r2, 0x89f7, &(0x7f0000000140)="64e63313b5274f234988a43eb7319738f0ae538f79d32bb542e2613d07dd97131ff8b86ad9fe20bf1d2bd7241e17329cf033d5dc9a9d2f34ab08dfbcac6a0e91eb756f7d665f4471c3450d846edec3a353ef2df431824434676a60fc1363fc8f42e084342e23c13f58d3eb26c98120446e5f1a9f6081ef721d3fb8ea4102aeb4c7cdd7a12515d36b7d758ffc5eb01ae8af328429e8b48952f0284d027ebec64d6f1b1e64fc980ce64e35062bd5ff69c4fcf6059da62d6acf0e680ae99f4289f528db5aeb49900efc8d2edf54a4e42b51432afe249c059d543783d366b42d5f3156b356f2ce5d2ab81b3545b66820363067485c1eaaa877") 564.799956ms ago: executing program 3 (id=11378): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) pidfd_send_signal(0xffffffffffffffff, 0xc, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfb, 0x808b9027}, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 0s ago: executing program 0 (id=11379): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x80ffffff, {{@in6=@loopback, @in=@remote, 0xfffd, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x24}, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008, 0x7}, {0x100000001, 0xa, 0xcc}, {0xf6}, 0x70bd2a, 0x4, 0x2, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20040400}, 0x804) kernel console output (not intermixed with test programs): 0003:10C4:EA90.0095: Part Number: 0x82 Device Version: 0xFE [ 2586.382668][T11615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2586.392052][T11615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2587.172579][T26783] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 2587.223785][ T3866] usb 6-1: New USB device found, idVendor=0711, idProduct=0918, bcdDevice=71.a2 [ 2587.262787][ T3866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2587.300617][ T3866] usb 6-1: can't set config #6, error -71 [ 2587.317773][ T3866] usb 6-1: USB disconnect, device number 12 [ 2587.401670][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10768'. [ 2587.411154][T20482] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2587.584702][T20482] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 2587.593433][T20482] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2587.604395][T20482] usb 2-1: config 0 has no interface number 0 [ 2587.621204][T20482] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2587.710277][T20482] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2587.719564][T20482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2587.743215][T20482] usb 2-1: Product: syz [ 2587.747398][T20482] usb 2-1: Manufacturer: syz [ 2587.753455][T20482] usb 2-1: SerialNumber: syz [ 2587.774467][T20482] usb 2-1: config 0 descriptor?? [ 2588.039794][T11642] netlink: 27 bytes leftover after parsing attributes in process `syz.1.10767'. [ 2588.074833][T10597] usb 5-1: USB disconnect, device number 9 [ 2590.209846][T11635] macvtap2: entered promiscuous mode [ 2590.215933][T11635] macvtap2: entered allmulticast mode [ 2590.221868][T11635] batadv0: entered allmulticast mode [ 2590.228747][T11635] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 2590.245321][T11637] batadv0: left allmulticast mode [ 2590.285641][T10597] usb 2-1: USB disconnect, device number 102 [ 2590.554233][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.564955][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.886970][T21368] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2591.090214][T21368] usb 4-1: Using ep0 maxpacket: 32 [ 2591.111112][T21368] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2591.169347][T21368] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2591.188035][T21368] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2591.358683][T21368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2591.433327][T21368] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2591.541644][T21368] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2591.650860][T10597] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 2591.758870][T21368] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2591.782706][T21368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2591.819791][T21368] usb 4-1: config 0 descriptor?? [ 2591.998323][T10597] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 2592.007765][T10597] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2592.025878][T10597] usb 6-1: config 0 descriptor?? [ 2592.056840][T21368] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2592.062830][T10597] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input307 [ 2592.134408][T21368] usb 4-1: USB disconnect, device number 8 [ 2592.169384][T21368] usblp0: removed [ 2592.640884][T21368] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2592.871073][T21368] usb 4-1: Using ep0 maxpacket: 32 [ 2592.881509][T21368] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2592.895570][T21368] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2592.907842][T21368] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2592.928583][T11692] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 2593.061558][T21368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2593.081915][T21368] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2593.095941][T21368] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2593.125265][T21368] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2593.173751][T21368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2593.223670][T11697] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10783'. [ 2593.248242][T26783] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 2593.293526][T21368] usb 4-1: config 0 descriptor?? [ 2593.424592][T21368] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2593.518902][T21368] usb 4-1: USB disconnect, device number 9 [ 2593.553814][T21368] usblp0: removed [ 2593.631501][T26783] usb 5-1: config 0 has an invalid interface number: 224 but max is 0 [ 2593.658498][T26783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2593.832841][T26783] usb 5-1: config 0 has no interface number 0 [ 2594.036562][T26783] usb 5-1: config 0 interface 224 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 2594.090189][T26783] usb 5-1: config 0 interface 224 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2594.149462][T26783] usb 5-1: config 0 interface 224 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 2594.290685][T26783] usb 5-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 2594.323060][T26783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2594.367572][T26783] usb 5-1: Product: syz [ 2594.394023][T26783] usb 5-1: Manufacturer: syz [ 2594.420900][T26783] usb 5-1: SerialNumber: syz [ 2594.435995][ T5178] bcm5974 6-1:0.0: could not read from device [ 2594.450271][ T5178] bcm5974 6-1:0.0: could not read from device [ 2594.475990][T26783] usb 5-1: config 0 descriptor?? [ 2594.512112][ T5178] bcm5974 6-1:0.0: could not read from device [ 2594.566203][T10597] usb 6-1: USB disconnect, device number 13 [ 2594.582343][T26783] ldusb 5-1:0.224: Interrupt in endpoint not found [ 2594.595014][ T8279] bcm5974 6-1:0.0: could not read from device [ 2594.672021][ T8279] udevd[8279]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 2594.702414][ T8279] udevd[8279]: Error opening device "/dev/input/event4": No such file or directory [ 2594.753990][ T8279] udevd[8279]: Unable to EVIOCGABS device "/dev/input/event4" [ 2594.777851][ T8279] udevd[8279]: Unable to EVIOCGABS device "/dev/input/event4" [ 2594.837078][ T8279] udevd[8279]: Unable to EVIOCGABS device "/dev/input/event4" [ 2594.980964][T11719] netlink: 'syz.0.10788': attribute type 9 has an invalid length. [ 2595.208440][ T8279] udevd[8279]: Unable to EVIOCGABS device "/dev/input/event4" [ 2595.644168][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2596.832089][T26994] usb 5-1: USB disconnect, device number 10 [ 2596.875876][T11736] loop5: detected capacity change from 0 to 7 [ 2596.947796][T11739] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2597.668749][T26994] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2597.863744][T11767] netlink: 'syz.1.10799': attribute type 9 has an invalid length. [ 2597.875700][T11769] fuse: Unknown parameter 'ædŸç&}·‘JgéÏ—éų˜¿5ùSQçcf£20xffffffffffffffff' [ 2597.912047][T26994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2598.059774][T26994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2598.134496][T26994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2598.302487][T26994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2598.319147][T11771] picdev_read: 26 callbacks suppressed [ 2598.319161][T11771] kvm: pic: non byte read [ 2598.331138][T11771] kvm: pic: single mode not supported [ 2598.331201][T11771] kvm: pic: non byte read [ 2598.391655][T26994] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2598.403532][T26994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2598.539824][T26994] usb 6-1: Product: syz [ 2598.640632][T26994] usb 6-1: Manufacturer: syz [ 2598.645282][T26994] usb 6-1: SerialNumber: syz [ 2598.707040][T26994] usb 6-1: config 0 descriptor?? [ 2599.093251][T11778] netlink: 'syz.0.10803': attribute type 32 has an invalid length. [ 2599.219700][T26994] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2599.231159][T11779] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10803'. [ 2599.254130][T11783] loop5: detected capacity change from 0 to 7 [ 2599.418029][T11754] usb 6-1: Couldn't submit interrupt_out_urb -90 [ 2599.535051][T11793] syzkaller0: entered promiscuous mode [ 2599.540759][T11793] syzkaller0: entered allmulticast mode [ 2599.607287][T11784] tipc: Enabled bearer , priority 0 [ 2599.650768][T11781] tipc: Resetting bearer [ 2599.864275][T11801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10807'. [ 2599.896617][T11781] tipc: Disabling bearer [ 2600.521428][T11807] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10808'. [ 2600.608551][T11807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2600.619137][T11807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2600.662594][T11807] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 2600.692049][T11807] bond0 (unregistering): Released all slaves [ 2602.222305][T26783] usb 6-1: USB disconnect, device number 14 [ 2602.331543][T11837] loop5: detected capacity change from 0 to 7 [ 2602.591799][T11838] netlink: 'syz.4.10817': attribute type 9 has an invalid length. [ 2602.720539][T10597] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2602.873357][T10597] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2602.886379][T10597] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2602.896928][T10597] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2602.932641][T10597] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2602.943640][T10597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2602.951804][T10597] usb 6-1: Product: syz [ 2602.956958][T10597] usb 6-1: Manufacturer: syz [ 2602.961684][T10597] usb 6-1: SerialNumber: syz [ 2602.972263][T10597] hub 6-1:1.0: bad descriptor, ignoring hub [ 2602.984642][T10597] hub 6-1:1.0: probe with driver hub failed with error -5 [ 2603.181692][T10597] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2603.780616][T11842] usb 6-1: reset high-speed USB device number 15 using dummy_hcd [ 2604.063414][T11842] usb 6-1: device firmware changed [ 2604.074063][T21367] usb 6-1: USB disconnect, device number 15 [ 2604.084619][T21367] usblp0: removed [ 2604.220648][T21367] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2604.387488][T21367] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2604.401777][T21367] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2604.413593][T21367] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2604.439190][T21367] usb 6-1: string descriptor 0 read error: -22 [ 2604.532541][T21367] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2604.547807][T21367] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2604.570135][T21367] hub 6-1:1.0: bad descriptor, ignoring hub [ 2604.587900][T21367] hub 6-1:1.0: probe with driver hub failed with error -5 [ 2604.776091][T21367] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2604.831600][T21367] usb 6-1: USB disconnect, device number 16 [ 2604.848913][T21367] usblp0: removed [ 2605.386130][T11882] loop5: detected capacity change from 0 to 7 [ 2605.871526][T11891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2605.904540][T11891] overlayfs: missing 'lowerdir' [ 2606.539158][T11915] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2606.564260][T11914] syzkaller0: entered promiscuous mode [ 2607.625877][T11936] netlink: 'syz.3.10848': attribute type 10 has an invalid length. [ 2607.641485][T11936] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10848'. [ 2607.672563][T11939] veth3: entered allmulticast mode [ 2607.700456][T10597] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2607.728167][T11936] team0: Port device geneve0 added [ 2607.736970][ T8611] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2607.763375][ T8611] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2607.792654][ T8611] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2607.824292][ T8611] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2607.862676][T10597] usb 6-1: Using ep0 maxpacket: 32 [ 2607.899538][T10597] usb 6-1: config 0 has an invalid interface number: 26 but max is 0 [ 2607.919953][T10597] usb 6-1: config 0 has no interface number 0 [ 2607.937706][T10597] usb 6-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=3b.e2 [ 2607.947977][T10597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2607.954030][T11955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2607.956544][T10597] usb 6-1: Product: syz [ 2607.969527][T10597] usb 6-1: Manufacturer: syz [ 2607.975268][T10597] usb 6-1: SerialNumber: syz [ 2607.997784][T10597] usb 6-1: config 0 descriptor?? [ 2608.099355][T11965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10857'. [ 2608.141732][T11965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2608.153583][T11965] FAULT_INJECTION: forcing a failure. [ 2608.153583][T11965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2608.166860][T11965] CPU: 1 UID: 0 PID: 11965 Comm: syz.1.10857 Tainted: G L syzkaller #0 PREEMPT(full) [ 2608.166896][T11965] Tainted: [L]=SOFTLOCKUP [ 2608.166902][T11965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2608.166914][T11965] Call Trace: [ 2608.166922][T11965] [ 2608.166931][T11965] dump_stack_lvl+0xe8/0x150 [ 2608.166963][T11965] should_fail_ex+0x412/0x560 [ 2608.166993][T11965] _copy_from_user+0x2d/0xb0 [ 2608.167014][T11965] ___sys_sendmsg+0x1c6/0x360 [ 2608.167037][T11965] ? __pfx____sys_sendmsg+0x10/0x10 [ 2608.167059][T11965] ? kstrtouint+0x6e/0xe0 [ 2608.167104][T11965] ? __fget_files+0x2a/0x420 [ 2608.167127][T11965] ? __fget_files+0x3a0/0x420 [ 2608.167165][T11965] __sys_sendmmsg+0x27c/0x4e0 [ 2608.167190][T11965] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2608.167208][T11965] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2608.167249][T11965] ? ksys_write+0x242/0x270 [ 2608.167277][T11965] ? __pfx_ksys_write+0x10/0x10 [ 2608.167308][T11965] __x64_sys_sendmmsg+0xa0/0xc0 [ 2608.167330][T11965] do_syscall_64+0x14d/0xf80 [ 2608.167348][T11965] ? trace_irq_disable+0x3b/0x150 [ 2608.167371][T11965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2608.167390][T11965] ? clear_bhb_loop+0x40/0x90 [ 2608.167412][T11965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2608.167431][T11965] RIP: 0033:0x7efc8db9bf79 [ 2608.167449][T11965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2608.167465][T11965] RSP: 002b:00007efc8e995028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2608.167487][T11965] RAX: ffffffffffffffda RBX: 00007efc8de15fa0 RCX: 00007efc8db9bf79 [ 2608.167501][T11965] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 2608.167513][T11965] RBP: 00007efc8e995090 R08: 0000000000000000 R09: 0000000000000000 [ 2608.167525][T11965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2608.167536][T11965] R13: 00007efc8de16038 R14: 00007efc8de15fa0 R15: 00007efc8df3fa48 [ 2608.167562][T11965] [ 2608.392903][T11968] netlink: 'syz.3.10858': attribute type 49 has an invalid length. [ 2608.452833][T11933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2608.477177][T11933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2608.604931][T10597] int51x1 6-1:0.26: probe with driver int51x1 failed with error -71 [ 2608.625574][T10597] usb 6-1: USB disconnect, device number 17 [ 2608.678498][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10860'. [ 2609.040470][T21367] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2609.070627][T10597] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2609.171487][T21367] usb 2-1: device descriptor read/64, error -71 [ 2609.250521][T10597] usb 5-1: Using ep0 maxpacket: 16 [ 2609.298042][T10597] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 2609.319616][T10597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2609.341637][T10597] usb 5-1: Product: syz [ 2609.348447][T10597] usb 5-1: Manufacturer: syz [ 2609.353627][T10597] usb 5-1: SerialNumber: syz [ 2609.411034][T21367] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2609.550683][T21367] usb 2-1: device descriptor read/64, error -71 [ 2609.566957][T10597] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 2609.593167][T10597] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2609.604182][T10597] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 2609.613203][T10597] usb 5-1: media controller created [ 2609.661018][T21367] usb usb2-port1: attempt power cycle [ 2609.661630][T10597] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2609.714466][T10597] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2609.863798][T10597] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 2609.905912][T10597] usb 5-1: USB disconnect, device number 11 [ 2610.010746][T21367] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2610.074204][T12013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2610.108445][T21367] usb 2-1: device descriptor read/8, error -71 [ 2610.431988][T21367] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2610.532014][T21367] usb 2-1: device descriptor read/8, error -71 [ 2610.582769][T12020] netlink: 'syz.3.10875': attribute type 2 has an invalid length. [ 2610.614472][T12024] netlink: 'syz.5.10876': attribute type 10 has an invalid length. [ 2610.627086][T12024] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2610.640876][T21367] usb usb2-port1: unable to enumerate USB device [ 2610.835866][T12025] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10876'. [ 2611.765939][T12044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2612.050736][T26994] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 2612.080783][T21367] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2612.221629][T26994] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 2612.234403][T21367] usb 6-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 2612.248206][T26994] usb 4-1: config 0 has no interface number 0 [ 2612.258350][T21367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2612.273047][T26994] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 2612.290044][T21367] usb 6-1: config 0 descriptor?? [ 2612.304064][T26994] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2612.325630][T26994] usb 4-1: config 0 interface 113 has no altsetting 0 [ 2612.335923][T26994] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2612.346448][T26994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2612.355031][T26994] usb 4-1: Product: syz [ 2612.359505][T26994] usb 4-1: Manufacturer: syz [ 2612.364396][T26994] usb 4-1: SerialNumber: syz [ 2612.377722][T26994] usb 4-1: config 0 descriptor?? [ 2612.397595][ C0] usb 4-1: NFC: Urb failure (status -71) [ 2612.403593][T26994] usb 4-1: NFC: Unable to get FW version [ 2612.410037][T26994] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 2612.522674][T21367] usbhid 6-1:0.0: can't add hid device: -71 [ 2612.532931][T21367] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2612.552332][T21367] usb 6-1: USB disconnect, device number 18 [ 2613.470583][T20482] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2613.621824][T20482] usb 5-1: Using ep0 maxpacket: 16 [ 2613.645739][T20482] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 2613.662337][T20482] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 2613.672816][T20482] usb 5-1: config 166 has no interface number 0 [ 2613.679194][T20482] usb 5-1: config 166 has no interface number 1 [ 2613.689078][T20482] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2613.703584][T20482] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2613.716283][ T29] audit: type=1326 audit(1771137815.729:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.0.10889" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f137c79bf79 code=0x0 [ 2613.716316][T20482] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 2613.751422][T20482] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2613.769782][T20482] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 2613.845337][T20482] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2613.856178][T20482] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2613.880915][T20482] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2613.893469][T20482] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 2613.957070][T20482] usb 5-1: config 166 interface 177 has no altsetting 0 [ 2613.976853][T20482] usb 5-1: config 166 interface 34 has no altsetting 0 [ 2613.999526][T20482] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 2614.009054][T20482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2614.031741][T20482] usb 5-1: Product: syz [ 2614.044459][T20482] usb 5-1: Manufacturer: syz [ 2614.054447][T20482] usb 5-1: SerialNumber: syz [ 2614.110828][T21367] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 2614.264585][T21367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2614.276695][T21367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2614.283838][T20482] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 2614.305816][T21367] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 2614.317620][T21367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2614.348286][T21367] usb 6-1: config 0 descriptor?? [ 2614.355951][T12078] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2614.408341][T20482] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 2614.498206][T20482] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 2614.515347][T20482] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 2614.531513][T20482] uvcvideo 5-1:166.34: No valid video chain found. [ 2614.571323][T26994] usb 4-1: USB disconnect, device number 10 [ 2614.617247][T20482] usb 5-1: USB disconnect, device number 12 [ 2614.627707][T12094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10897'. [ 2614.654023][T12094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10897'. [ 2614.799225][T21367] creative-sb0540 0003:041E:3100.0096: item fetching failed at offset 1/5 [ 2614.814245][T21367] creative-sb0540 0003:041E:3100.0096: parse failed [ 2614.834518][T21367] creative-sb0540 0003:041E:3100.0096: probe with driver creative-sb0540 failed with error -22 [ 2614.999381][T12108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2615.042588][T12108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2615.163102][T21367] usb 6-1: USB disconnect, device number 19 [ 2615.541040][T12123] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 2615.691634][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10905'. [ 2616.784163][T12144] macvlan3: entered promiscuous mode [ 2616.956559][T12149] FAULT_INJECTION: forcing a failure. [ 2616.956559][T12149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2617.005198][T12149] CPU: 1 UID: 0 PID: 12149 Comm: syz.4.10912 Tainted: G L syzkaller #0 PREEMPT(full) [ 2617.005230][T12149] Tainted: [L]=SOFTLOCKUP [ 2617.005238][T12149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2617.005249][T12149] Call Trace: [ 2617.005258][T12149] [ 2617.005266][T12149] dump_stack_lvl+0xe8/0x150 [ 2617.005298][T12149] should_fail_ex+0x412/0x560 [ 2617.005336][T12149] _copy_to_iter+0x404/0x17d0 [ 2617.005367][T12149] ? do_raw_spin_lock+0x12b/0x2f0 [ 2617.005394][T12149] ? __pfx__copy_to_iter+0x10/0x10 [ 2617.005421][T12149] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2617.005449][T12149] ? lockdep_hardirqs_on+0x7a/0x110 [ 2617.005468][T12149] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2617.005495][T12149] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 2617.005520][T12149] __skb_datagram_iter+0xf8/0x980 [ 2617.005541][T12149] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 2617.005567][T12149] skb_copy_datagram_iter+0xb5/0x270 [ 2617.005590][T12149] netlink_recvmsg+0x2c3/0xa50 [ 2617.005614][T12149] ? __lock_acquire+0x6b5/0x2cf0 [ 2617.005641][T12149] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2617.005673][T12149] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2617.005698][T12149] sock_recvmsg_nosec+0x186/0x1c0 [ 2617.005727][T12149] ____sys_recvmsg+0x3e3/0x4a0 [ 2617.005754][T12149] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2617.005787][T12149] ? import_iovec+0x73/0xa0 [ 2617.005810][T12149] ___sys_recvmsg+0x215/0x590 [ 2617.005828][T12149] ? __lock_acquire+0x6b5/0x2cf0 [ 2617.005854][T12149] ? __pfx____sys_recvmsg+0x10/0x10 [ 2617.005906][T12149] do_recvmmsg+0x334/0x800 [ 2617.005937][T12149] ? __pfx_do_recvmmsg+0x10/0x10 [ 2617.005967][T12149] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2617.006004][T12149] __x64_sys_recvmmsg+0x198/0x250 [ 2617.006027][T12149] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2617.006056][T12149] do_syscall_64+0x14d/0xf80 [ 2617.006074][T12149] ? trace_irq_disable+0x3b/0x150 [ 2617.006097][T12149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2617.006116][T12149] ? clear_bhb_loop+0x40/0x90 [ 2617.006139][T12149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2617.006158][T12149] RIP: 0033:0x7f3d4b59bf79 [ 2617.006176][T12149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2617.006192][T12149] RSP: 002b:00007f3d4c3cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2617.006213][T12149] RAX: ffffffffffffffda RBX: 00007f3d4b815fa0 RCX: 00007f3d4b59bf79 [ 2617.006228][T12149] RDX: 0000000000000003 RSI: 00002000000001c0 RDI: 0000000000000003 [ 2617.006240][T12149] RBP: 00007f3d4c3cc090 R08: 0000000000000000 R09: 0000000000000000 [ 2617.006252][T12149] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 2617.006264][T12149] R13: 00007f3d4b816038 R14: 00007f3d4b815fa0 R15: 00007f3d4b93fa48 [ 2617.006293][T12149] [ 2617.362402][T12154] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10914'. [ 2618.510534][T26783] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 2618.662422][T26783] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2618.676916][T26783] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2618.720037][T26783] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2618.730111][T26783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2618.739595][T26783] usb 4-1: Product: syz [ 2618.744296][T26783] usb 4-1: Manufacturer: syz [ 2618.750010][T26783] usb 4-1: SerialNumber: syz [ 2618.871837][T12187] loop5: detected capacity change from 0 to 7 [ 2618.988258][T12175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10920'. [ 2618.997782][T12175] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10920'. [ 2619.010655][T12175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2619.024390][T12175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2619.370919][T26994] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 2619.443300][T26783] usb 4-1: cannot find UAC_HEADER [ 2619.563481][T26994] usb 6-1: config 0 has an invalid interface number: 39 but max is 0 [ 2619.572256][T26994] usb 6-1: config 0 has no interface number 0 [ 2619.578712][T26994] usb 6-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2619.590548][T26783] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2619.607094][T26783] usb 4-1: USB disconnect, device number 11 [ 2619.608911][T26994] usb 6-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 2619.623411][T26994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2619.632401][T26994] usb 6-1: Product: syz [ 2619.636550][ T8344] udevd[8344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2619.636782][T26994] usb 6-1: Manufacturer: syz [ 2619.658212][T26994] usb 6-1: SerialNumber: syz [ 2619.692720][T26994] usb 6-1: config 0 descriptor?? [ 2620.036100][T26994] usb 6-1: USB disconnect, device number 20 [ 2620.109831][ T8344] udevd[8344]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2620.470636][T26994] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2620.597377][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10936'. [ 2620.621647][T26994] usb 2-1: Using ep0 maxpacket: 32 [ 2620.631777][T26994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2620.643643][T26994] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2620.654251][T26994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2620.666821][T12221] syzkaller0: entered promiscuous mode [ 2620.679090][T26994] usb 2-1: config 0 descriptor?? [ 2620.689117][T26994] hub 2-1:0.0: USB hub found [ 2620.895041][T26994] hub 2-1:0.0: 1 port detected [ 2621.068887][ T29] audit: type=1326 audit(1771137823.079:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.3.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2621.191399][ T29] audit: type=1326 audit(1771137823.079:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.3.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2621.221799][ T29] audit: type=1326 audit(1771137823.079:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.3.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2621.490482][ T29] audit: type=1326 audit(1771137823.089:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.3.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2621.513905][ T29] audit: type=1326 audit(1771137823.089:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.3.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2621.537618][T10597] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2621.549231][ T29] audit: type=1326 audit(1771137823.109:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.3.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2621.720027][T26994] hub 2-1:0.0: activate --> -90 [ 2621.730868][T10597] usb 4-1: Using ep0 maxpacket: 16 [ 2621.739110][T10597] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2621.750082][T10597] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2621.768238][ T29] audit: type=1326 audit(1771137823.109:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.3.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2621.814576][T10597] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2621.830595][T10597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2621.840192][T10597] usb 4-1: Product: syz [ 2621.850980][T10597] usb 4-1: Manufacturer: syz [ 2621.860711][T10597] usb 4-1: SerialNumber: syz [ 2621.866803][ T29] audit: type=1326 audit(1771137823.109:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.3.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2621.901183][ T29] audit: type=1326 audit(1771137823.169:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.3.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2621.922049][T26994] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2621.925000][T10597] usb 4-1: config 0 descriptor?? [ 2621.934016][T26994] usb 2-1: USB disconnect, device number 107 [ 2621.937377][ T29] audit: type=1326 audit(1771137823.169:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.3.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2622.066776][T12241] Cannot find add_set index 0 as target [ 2623.737379][T12274] kvm: kvm [12272]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x7ff [ 2624.290931][T10597] usb 4-1: USB disconnect, device number 12 [ 2624.580282][T12281] syzkaller0: entered promiscuous mode [ 2624.586383][T12281] syzkaller0: entered allmulticast mode [ 2624.802161][T10597] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2624.984540][T10597] usb 4-1: Using ep0 maxpacket: 16 [ 2624.990490][ T5513] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2624.999336][T10597] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 2625.024121][T10597] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2625.034541][T10597] usb 4-1: config 0 has no interface number 0 [ 2625.056406][T10597] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2625.103056][T10597] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2625.128437][T10597] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2625.137027][T10597] usb 4-1: Product: syz [ 2625.141593][T10597] usb 4-1: SerialNumber: syz [ 2625.142662][ T5513] usb 6-1: Using ep0 maxpacket: 32 [ 2625.189209][ T5513] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2625.189646][T10597] usb 4-1: config 0 descriptor?? [ 2625.208397][ T5513] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2625.217938][ T5513] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2625.251216][ T5513] usb 6-1: config 0 descriptor?? [ 2625.267705][T10597] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 2625.277925][ T5513] hub 6-1:0.0: USB hub found [ 2625.449255][T12284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2625.462270][T12284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2625.474728][T21368] usb 4-1: USB disconnect, device number 13 [ 2625.484722][ T5513] hub 6-1:0.0: 1 port detected [ 2626.117477][ T5513] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2626.138876][T26994] usb 6-1: USB disconnect, device number 21 [ 2629.395595][T12320] FAULT_INJECTION: forcing a failure. [ 2629.395595][T12320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2629.410679][T12320] CPU: 1 UID: 0 PID: 12320 Comm: syz.0.10962 Tainted: G L syzkaller #0 PREEMPT(full) [ 2629.410698][T12320] Tainted: [L]=SOFTLOCKUP [ 2629.410702][T12320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2629.410710][T12320] Call Trace: [ 2629.410717][T12320] [ 2629.410723][T12320] dump_stack_lvl+0xe8/0x150 [ 2629.410755][T12320] should_fail_ex+0x412/0x560 [ 2629.410773][T12320] _copy_to_user+0x31/0xb0 [ 2629.410793][T12320] simple_read_from_buffer+0xe1/0x170 [ 2629.410809][T12320] proc_fail_nth_read+0x1bb/0x230 [ 2629.410829][T12320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2629.410844][T12320] ? rw_verify_area+0x2a6/0x4d0 [ 2629.410860][T12320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2629.410872][T12320] vfs_read+0x20c/0xa70 [ 2629.410886][T12320] ? fdget_pos+0x246/0x320 [ 2629.410903][T12320] ? __pfx___mutex_lock+0x10/0x10 [ 2629.410916][T12320] ? __pfx_vfs_read+0x10/0x10 [ 2629.410931][T12320] ? __fget_files+0x2a/0x420 [ 2629.410946][T12320] ? __fget_files+0x3a0/0x420 [ 2629.410959][T12320] ? __fget_files+0x2a/0x420 [ 2629.410975][T12320] ksys_read+0x150/0x270 [ 2629.410991][T12320] ? __pfx_ksys_read+0x10/0x10 [ 2629.411012][T12320] do_syscall_64+0x14d/0xf80 [ 2629.411023][T12320] ? trace_irq_disable+0x3b/0x150 [ 2629.411037][T12320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2629.411047][T12320] ? clear_bhb_loop+0x40/0x90 [ 2629.411060][T12320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2629.411071][T12320] RIP: 0033:0x7f137c75c84e [ 2629.411084][T12320] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2629.411093][T12320] RSP: 002b:00007f137d58ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2629.411106][T12320] RAX: ffffffffffffffda RBX: 00007f137d5906c0 RCX: 00007f137c75c84e [ 2629.411114][T12320] RDX: 000000000000000f RSI: 00007f137d5900a0 RDI: 0000000000000006 [ 2629.411121][T12320] RBP: 00007f137d590090 R08: 0000000000000000 R09: 0000000000000000 [ 2629.411128][T12320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2629.411134][T12320] R13: 00007f137ca16038 R14: 00007f137ca15fa0 R15: 00007f137cb3fa48 [ 2629.411151][T12320] [ 2630.802763][T12326] netlink: 'syz.0.10964': attribute type 5 has an invalid length. [ 2631.447361][T12329] loop4: detected capacity change from 0 to 2560 [ 2631.459109][ T8344] buffer_io_error: 8 callbacks suppressed [ 2631.459125][ T8344] Buffer I/O error on dev loop4, logical block 0, async page read [ 2631.493429][T12328] Buffer I/O error on dev loop4, logical block 0, async page read [ 2631.536011][T12328] Buffer I/O error on dev loop4, logical block 0, async page read [ 2631.544474][ T8344] Buffer I/O error on dev loop4, logical block 0, async page read [ 2631.553514][ T8344] Buffer I/O error on dev loop4, logical block 0, async page read [ 2631.565447][ T8344] Buffer I/O error on dev loop4, logical block 0, async page read [ 2631.575235][T12328] Buffer I/O error on dev loop4, logical block 0, async page read [ 2631.584051][ T8344] Buffer I/O error on dev loop4, logical block 0, async page read [ 2631.601278][T12328] Buffer I/O error on dev loop4, logical block 0, async page read [ 2631.609258][T12328] Buffer I/O error on dev loop4, logical block 0, async page read [ 2631.849276][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10966'. [ 2632.127509][T12344] dummy0: entered promiscuous mode [ 2632.135925][T12344] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 2632.145435][T12344] debugfs: 'hsr1' already exists in 'hsr' [ 2632.151352][T12344] Cannot create hsr debugfs directory [ 2632.157220][T12344] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 2632.167897][T12344] hsr1: entered allmulticast mode [ 2632.173075][T12344] dummy0: entered allmulticast mode [ 2632.177658][T12345] input: syz0 as /devices/virtual/input/input309 [ 2632.250472][ T5513] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2632.430502][ T5513] usb 4-1: Using ep0 maxpacket: 32 [ 2632.442293][ T5513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2632.455295][ T5513] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2632.469083][ T5513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2632.506433][ T5513] usb 4-1: config 0 descriptor?? [ 2632.551096][ T5513] hub 4-1:0.0: USB hub found [ 2632.718307][ T5513] hub 4-1:0.0: 1 port detected [ 2633.326247][ T5513] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 2633.326422][T10597] usb 4-1: USB disconnect, device number 14 [ 2633.446121][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 2633.446139][ T29] audit: type=1326 audit(1771137835.459:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12356 comm="syz.4.10973" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d4b59bf79 code=0x0 [ 2633.546411][T12362] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10973'. [ 2633.583208][T12362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10973'. [ 2633.603143][T12362] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10973'. [ 2634.556365][ T3866] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2634.737098][ T3866] usb 6-1: Using ep0 maxpacket: 32 [ 2634.763363][ T3866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2634.773654][ T3866] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 2634.783100][ T3866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2634.811846][ T3866] usb 6-1: config 0 descriptor?? [ 2635.211194][ T3866] usbhid 6-1:0.0: can't add hid device: -71 [ 2635.219478][ T3866] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2635.230902][ T3866] usb 6-1: USB disconnect, device number 22 [ 2635.852368][T12380] netlink: 'syz.5.10980': attribute type 1 has an invalid length. [ 2636.312756][T12383] ptrace attach of "./syz-executor exec"[12384] was attempted by "./syz-executor exec"[12383] [ 2636.486901][T12386] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10981'. [ 2639.241189][T12380] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 2639.250769][T12386] `: renamed from team0 (while UP) [ 2639.660888][ T29] audit: type=1326 audit(1771137841.679:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2639.710609][ T29] audit: type=1326 audit(1771137841.709:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2639.750892][ T3866] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2639.772625][ T29] audit: type=1326 audit(1771137841.709:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2639.829686][ T29] audit: type=1326 audit(1771137841.709:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2639.910498][ T3866] usb 6-1: device descriptor read/64, error -71 [ 2639.940429][ T29] audit: type=1326 audit(1771137841.709:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2639.995595][ T29] audit: type=1326 audit(1771137841.709:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2640.028680][ T29] audit: type=1326 audit(1771137841.709:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2640.086032][ T29] audit: type=1326 audit(1771137841.709:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2640.122451][T20482] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2640.157063][ T29] audit: type=1326 audit(1771137841.709:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2640.185709][ T3866] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2640.222756][ T29] audit: type=1326 audit(1771137841.709:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.3.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9c3939bf79 code=0x7ffc0000 [ 2640.285455][T20482] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2640.380943][ T3866] usb 6-1: device descriptor read/64, error -71 [ 2640.535436][T10597] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2640.553803][ T3866] usb usb6-port1: attempt power cycle [ 2640.599106][T20482] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2640.639517][T20482] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2640.711252][T20482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2640.751324][T10597] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2640.775644][T12428] syzkaller0: entered promiscuous mode [ 2640.783312][T12428] syzkaller0: entered allmulticast mode [ 2640.789095][T10597] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2640.812507][T12416] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2640.826675][T10597] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2640.888601][T20482] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2640.898305][T10597] usb 2-1: config 220 has no interface number 2 [ 2640.911669][T10597] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2640.931408][ T3866] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2640.976075][T10597] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2640.984944][ T3866] usb 6-1: device descriptor read/8, error -71 [ 2640.995470][T10597] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2641.012685][T10597] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2641.043613][T10597] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2641.200426][T10597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2641.328370][T10597] usb 2-1: Product: syz [ 2641.342066][ T3866] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2641.349713][T10597] usb 2-1: Manufacturer: syz [ 2641.359897][T10597] usb 2-1: SerialNumber: syz [ 2641.386382][ T3866] usb 6-1: device descriptor read/8, error -71 [ 2641.500874][ T3866] usb usb6-port1: unable to enumerate USB device [ 2643.022471][ T5513] usb 4-1: USB disconnect, device number 15 [ 2643.169738][T10597] usb 2-1: selecting invalid altsetting 0 [ 2643.216639][T10597] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2643.260506][T10597] uvcvideo 2-1:220.0: No valid video chain found. [ 2643.365833][T10597] usb 2-1: selecting invalid altsetting 0 [ 2643.390771][T10597] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2643.428171][T10597] usb 2-1: USB disconnect, device number 108 [ 2645.005944][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 2645.005962][ T29] audit: type=1326 audit(1771137847.019:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.4.11007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4b59bf79 code=0x7ffc0000 [ 2645.036451][ T29] audit: type=1326 audit(1771137847.049:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.4.11007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4b59bf79 code=0x7ffc0000 [ 2645.104130][T12480] geneve0: entered allmulticast mode [ 2646.200825][ T5513] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2646.254559][T12521] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11017'. [ 2646.461931][ T5513] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 2646.483839][ T5513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2646.543633][ T5513] usb 2-1: config 0 descriptor?? [ 2646.581931][ T5513] gspca_main: spca508-2.14.0 probing 8086:0110 [ 2647.146394][ T5513] gspca_spca508: reg_read err -71 [ 2647.158733][ T5513] gspca_spca508: reg_read err -71 [ 2647.164582][ T5513] gspca_spca508: reg_read err -71 [ 2647.170006][ T5513] gspca_spca508: reg_read err -71 [ 2647.176182][ T5513] gspca_spca508: reg write: error -71 [ 2647.191946][ T5513] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 2647.340697][ T5513] usb 2-1: USB disconnect, device number 109 [ 2647.493937][T12530] netlink: 'syz.3.11021': attribute type 6 has an invalid length. [ 2647.502021][T12530] netlink: 'syz.3.11021': attribute type 7 has an invalid length. [ 2647.510117][T12530] netlink: 'syz.3.11021': attribute type 8 has an invalid length. [ 2647.528132][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11022'. [ 2647.730737][T12536] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 2647.737313][T12536] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2647.782026][T12536] vhci_hcd vhci_hcd.0: Device attached [ 2647.918335][T12549] loop5: detected capacity change from 0 to 7 [ 2648.020562][ T5513] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 2648.105939][T12549] Dev loop5: unable to read RDB block 7 [ 2648.161881][T12549] loop5: unable to read partition table [ 2648.230994][T12549] loop5: partition table beyond EOD, truncated [ 2648.247771][T12549] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2650.256089][T12589] syzkaller1: entered promiscuous mode [ 2650.300502][T12589] syzkaller1: entered allmulticast mode [ 2650.395151][T12597] FAULT_INJECTION: forcing a failure. [ 2650.395151][T12597] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2650.431854][T12597] CPU: 1 UID: 0 PID: 12597 Comm: syz.5.11038 Tainted: G L syzkaller #0 PREEMPT(full) [ 2650.431886][T12597] Tainted: [L]=SOFTLOCKUP [ 2650.431892][T12597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2650.431902][T12597] Call Trace: [ 2650.431911][T12597] [ 2650.431920][T12597] dump_stack_lvl+0xe8/0x150 [ 2650.431964][T12597] should_fail_ex+0x412/0x560 [ 2650.432001][T12597] prepare_alloc_pages+0x22a/0x650 [ 2650.432030][T12597] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2650.432055][T12597] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2650.432080][T12597] ? __pfx_policy_nodemask+0x10/0x10 [ 2650.432111][T12597] alloc_pages_mpol+0x232/0x4a0 [ 2650.432137][T12597] vma_alloc_folio_noprof+0xea/0x210 [ 2650.432161][T12597] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2650.432192][T12597] do_wp_page+0x1204/0x5a00 [ 2650.432237][T12597] ? __pfx_do_wp_page+0x10/0x10 [ 2650.432262][T12597] ? do_raw_spin_lock+0x12b/0x2f0 [ 2650.432283][T12597] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2650.432311][T12597] handle_mm_fault+0x1520/0x3310 [ 2650.432349][T12597] ? handle_mm_fault+0xee/0x3310 [ 2650.432375][T12597] ? __pfx_handle_mm_fault+0x10/0x10 [ 2650.432396][T12597] ? follow_page_pte+0xd7f/0x1450 [ 2650.432424][T12597] ? __pfx_follow_page_pte+0x10/0x10 [ 2650.432455][T12597] __get_user_pages+0x165b/0x29d0 [ 2650.432500][T12597] __gup_longterm_locked+0xdcf/0x1630 [ 2650.432530][T12597] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 2650.432557][T12597] gup_fast_fallback+0x1d82/0x22e0 [ 2650.432602][T12597] ? __pfx_gup_fast_fallback+0x10/0x10 [ 2650.432628][T12597] ? pin_user_pages_fast+0x4d/0xb0 [ 2650.432651][T12597] iov_iter_extract_pages+0x37b/0x5f0 [ 2650.432677][T12597] extract_iter_to_sg+0xe62/0x2520 [ 2650.432714][T12597] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 2650.432754][T12597] ? __asan_memset+0x22/0x50 [ 2650.432779][T12597] af_alg_get_rsgl+0x436/0x810 [ 2650.432821][T12597] skcipher_recvmsg+0x3a3/0x1140 [ 2650.432859][T12597] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2650.432882][T12597] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 2650.432899][T12597] ? security_socket_recvmsg+0x7e/0x2c0 [ 2650.432918][T12597] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2650.432936][T12597] sock_recvmsg+0x22c/0x270 [ 2650.432960][T12597] ____sys_recvmsg+0x1e6/0x4a0 [ 2650.432985][T12597] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2650.433023][T12597] ? import_iovec+0x73/0xa0 [ 2650.433044][T12597] ___sys_recvmsg+0x215/0x590 [ 2650.433060][T12597] ? get_pid_task+0x20/0x1f0 [ 2650.433088][T12597] ? __pfx____sys_recvmsg+0x10/0x10 [ 2650.433128][T12597] ? __fget_files+0x3a0/0x420 [ 2650.433162][T12597] __x64_sys_recvmsg+0x1ba/0x2a0 [ 2650.433182][T12597] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 2650.433208][T12597] ? __pfx_ksys_write+0x10/0x10 [ 2650.433244][T12597] do_syscall_64+0x14d/0xf80 [ 2650.433261][T12597] ? trace_irq_disable+0x3b/0x150 [ 2650.433282][T12597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2650.433299][T12597] ? clear_bhb_loop+0x40/0x90 [ 2650.433319][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2650.433335][T12597] RIP: 0033:0x7f981779bf79 [ 2650.433358][T12597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2650.433372][T12597] RSP: 002b:00007f98185c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2650.433392][T12597] RAX: ffffffffffffffda RBX: 00007f9817a15fa0 RCX: 00007f981779bf79 [ 2650.433404][T12597] RDX: 0000000000002120 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2650.433415][T12597] RBP: 00007f98185c8090 R08: 0000000000000000 R09: 0000000000000000 [ 2650.433426][T12597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2650.433435][T12597] R13: 00007f9817a16038 R14: 00007f9817a15fa0 R15: 00007f9817b3fa48 [ 2650.433466][T12597] [ 2651.331064][T21368] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 2651.559340][T21368] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 2651.621744][T21368] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2651.635012][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11041'. [ 2651.735496][T21368] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 2651.768815][T21368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2651.794654][T21368] usb 5-1: Product: syz [ 2651.798873][T21368] usb 5-1: Manufacturer: syz [ 2651.803675][T21368] usb 5-1: SerialNumber: syz [ 2651.814562][T21368] usb 5-1: config 0 descriptor?? [ 2651.881050][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11043'. [ 2651.896787][T21368] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 2652.007971][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.014535][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.167562][T12620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11043'. [ 2652.213565][T12620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11043'. [ 2653.000529][ T3866] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2653.288529][ T3866] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2653.315172][ T3866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2653.347491][ T3866] usb 4-1: Product: syz [ 2653.362112][ T3866] usb 4-1: Manufacturer: syz [ 2653.378860][ T3866] usb 4-1: SerialNumber: syz [ 2653.761339][T21368] usb 5-1: USB disconnect, device number 13 [ 2653.806388][ T3866] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2653.839008][ T3866] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2653.928245][T12665] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11057'. [ 2654.474937][ T3866] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 2654.500069][ T3866] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2654.574905][ T3866] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2654.626788][ T3866] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 2654.910503][ T3866] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2655.060452][ T3866] usb 6-1: Using ep0 maxpacket: 32 [ 2655.072394][ T3866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2655.091012][ T3866] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2655.104029][ T3866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2655.180852][ T3866] usb 6-1: config 0 descriptor?? [ 2655.189312][ T3866] hub 6-1:0.0: USB hub found [ 2655.215885][T12688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2655.225223][T12688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2655.388864][ T3866] hub 6-1:0.0: 1 port detected [ 2655.610581][T20482] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2655.618520][ T3866] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 2655.631426][ T3866] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 2655.659335][ T3866] usbhid 6-1:0.0: can't add hid device: -71 [ 2655.679110][ T3866] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2655.711462][ T3866] usb 6-1: USB disconnect, device number 27 [ 2655.790549][T20482] usb 2-1: Using ep0 maxpacket: 8 [ 2655.797899][T20482] usb 2-1: config 0 has an invalid interface number: 250 but max is 0 [ 2655.815831][T20482] usb 2-1: config 0 has no interface number 0 [ 2655.832984][T20482] usb 2-1: New USB device found, idVendor=a168, idProduct=0614, bcdDevice=1b.10 [ 2655.842609][T20482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2655.850828][T20482] usb 2-1: Product: syz [ 2655.855269][T20482] usb 2-1: Manufacturer: syz [ 2655.860052][T20482] usb 2-1: SerialNumber: syz [ 2655.918058][T20482] usb 2-1: config 0 descriptor?? [ 2655.933258][T20482] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0614 [ 2656.136523][T20482] gspca_sn9c20x: Write register 1000 failed -71 [ 2656.143059][T20482] gspca_sn9c20x: Device initialization failed [ 2656.149398][T20482] gspca_sn9c20x 2-1:0.250: probe with driver gspca_sn9c20x failed with error -71 [ 2656.176834][T20482] usb 2-1: USB disconnect, device number 110 [ 2656.277972][T21368] usb 4-1: USB disconnect, device number 16 [ 2656.444199][T12717] xt_cluster: node mask cannot exceed total number of nodes [ 2658.050235][T12743] netlink: 'syz.4.11079': attribute type 9 has an invalid length. [ 2658.291167][ T3866] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2658.450477][ T3866] usb 6-1: Using ep0 maxpacket: 32 [ 2658.457613][ T3866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2658.468394][ T3866] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2658.477969][ T3866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2658.492812][ T3866] usb 6-1: config 0 descriptor?? [ 2658.502429][ T3866] hub 6-1:0.0: USB hub found [ 2658.702157][ T3866] hub 6-1:0.0: 1 port detected [ 2658.903306][ T3866] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 2658.911015][ T3866] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 2658.923975][ T3866] usbhid 6-1:0.0: can't add hid device: -71 [ 2658.930207][ T3866] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2658.971787][ T3866] usb 6-1: USB disconnect, device number 28 [ 2660.538560][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11092'. [ 2661.979582][T12815] FAULT_INJECTION: forcing a failure. [ 2661.979582][T12815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2662.003915][T12815] CPU: 0 UID: 0 PID: 12815 Comm: syz.3.11099 Tainted: G L syzkaller #0 PREEMPT(full) [ 2662.003948][T12815] Tainted: [L]=SOFTLOCKUP [ 2662.003956][T12815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2662.003967][T12815] Call Trace: [ 2662.003976][T12815] [ 2662.003986][T12815] dump_stack_lvl+0xe8/0x150 [ 2662.004018][T12815] should_fail_ex+0x412/0x560 [ 2662.004049][T12815] _copy_from_user+0x2d/0xb0 [ 2662.004072][T12815] ___sys_sendmsg+0x1c6/0x360 [ 2662.004097][T12815] ? __pfx____sys_sendmsg+0x10/0x10 [ 2662.004146][T12815] ? __fget_files+0x2a/0x420 [ 2662.004169][T12815] ? __fget_files+0x3a0/0x420 [ 2662.004198][T12815] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2662.004221][T12815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2662.004249][T12815] ? __pfx_ksys_write+0x10/0x10 [ 2662.004286][T12815] do_syscall_64+0x14d/0xf80 [ 2662.004306][T12815] ? trace_irq_disable+0x3b/0x150 [ 2662.004330][T12815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2662.004349][T12815] ? clear_bhb_loop+0x40/0x90 [ 2662.004373][T12815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2662.004396][T12815] RIP: 0033:0x7f9c3939bf79 [ 2662.004414][T12815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2662.004430][T12815] RSP: 002b:00007f9c3a20f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2662.004451][T12815] RAX: ffffffffffffffda RBX: 00007f9c39615fa0 RCX: 00007f9c3939bf79 [ 2662.004464][T12815] RDX: 0000000000040090 RSI: 0000200000000380 RDI: 0000000000000003 [ 2662.004477][T12815] RBP: 00007f9c3a20f090 R08: 0000000000000000 R09: 0000000000000000 [ 2662.004488][T12815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2662.004499][T12815] R13: 00007f9c39616038 R14: 00007f9c39615fa0 R15: 00007f9c3973fa48 [ 2662.004528][T12815] [ 2662.005995][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11096'. [ 2662.270858][T21368] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2662.280967][ T29] audit: type=1800 audit(1771137864.299:5084): pid=12803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11096" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 2662.450503][T21368] usb 2-1: Using ep0 maxpacket: 32 [ 2662.458243][T21368] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2662.511845][T21368] usb 2-1: config 0 has no interface number 0 [ 2662.530692][T21368] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2662.549659][T21368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2662.572336][T21368] usb 2-1: Product: syz [ 2662.580770][T21368] usb 2-1: Manufacturer: syz [ 2662.592150][T21368] usb 2-1: SerialNumber: syz [ 2662.602375][ T3866] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2662.641349][T21368] usb 2-1: config 0 descriptor?? [ 2662.662518][T21368] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2662.790950][ T3866] usb 4-1: Using ep0 maxpacket: 32 [ 2662.845416][T21368] usb 2-1: selecting invalid altsetting 1 [ 2662.855651][T21368] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2662.860880][ T3866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2662.922610][T12812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2662.937264][ T3866] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2662.948749][T12812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2662.960478][ T3866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2662.999956][T21368] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2663.001412][ T3866] usb 4-1: config 0 descriptor?? [ 2663.033812][ T3866] hub 4-1:0.0: USB hub found [ 2663.098591][T21368] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2663.127553][T21368] usb 2-1: media controller created [ 2663.204274][T21368] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2663.239130][ T3866] hub 4-1:0.0: 1 port detected [ 2663.311550][T21368] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2663.338943][T21368] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2663.347534][T21368] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2663.457180][ T3866] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 2663.489660][ T3866] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 2663.530576][ T3866] usbhid 4-1:0.0: can't add hid device: -71 [ 2663.536582][ T3866] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2663.575145][T21368] usb 2-1: USB disconnect, device number 111 [ 2663.651952][ T3866] usb 4-1: USB disconnect, device number 17 [ 2665.323917][T12856] futex_wake_op: syz.5.11112 tries to shift op by 32; fix this program [ 2665.347898][T12855] futex_wake_op: syz.5.11112 tries to shift op by 32; fix this program [ 2665.790773][T26994] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 2665.982654][T26994] usb 2-1: not running at top speed; connect to a high speed hub [ 2665.993934][T26994] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2666.026924][T26994] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2666.050741][T26994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2666.071268][T26994] usb 2-1: Product: ࣖíŠî´€î¿ƒç›¶è¿â±„º䟦䑎ì«êŽ…♢孈͌곇ਣᗯ윫ìœîŠ°î¢—昔ꛥ녤蕉㡗듈㾯㦀丷ç¬ë¿ƒéƒŸí†–䅧ۥ깤ꑒﵒåŸéµ…á–¸ [ 2666.122942][T26994] usb 2-1: Manufacturer: 篇ᙔￒFᆷ⚲㖕ꑹ㜼ྯጭ䔙ꋱ묟ຟ鬧襙趠者ⴒ敋í–嚹NJ澴⫞ä§ì¦Ÿï—¾é®•â˜¡ë¶“ຂﰯﵭ∹钂⢮ۭ謗泳㿒굋潖◠졳࣊齼í¨è°ë’¬íœºã˜°å†¾æ–´ [ 2666.203472][T21368] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2666.212933][T26994] usb 2-1: SerialNumber: Ь [ 2666.239108][T12864] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2666.442487][T21368] usb 6-1: Using ep0 maxpacket: 32 [ 2666.459555][T21368] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2666.477941][T21368] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2666.489204][T26994] cdc_ncm 2-1:1.0: bind() failure [ 2666.517010][T26994] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2666.530505][T21368] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2666.582721][T26994] cdc_ncm 2-1:1.1: bind() failure [ 2666.640953][T21368] usb 6-1: config 0 descriptor?? [ 2666.660897][T26994] usb 2-1: USB disconnect, device number 112 [ 2666.708348][T21368] hub 6-1:0.0: USB hub found [ 2666.915770][T21368] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 2666.946908][T21368] usbhid 6-1:0.0: can't add hid device: -71 [ 2666.962625][T21368] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2667.081557][T21368] usb 6-1: USB disconnect, device number 29 [ 2668.157735][T12911] bridge0: entered allmulticast mode [ 2668.961872][T21368] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2669.119612][T12922] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 2669.190068][T21368] usb 6-1: Using ep0 maxpacket: 32 [ 2669.197259][T21368] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 2669.206938][T21368] usb 6-1: config 0 has no interface number 0 [ 2669.414640][T21368] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2669.470229][T21368] usb 6-1: config 0 interface 85 has no altsetting 0 [ 2669.496356][T21368] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2669.512972][T21368] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2669.545239][T21368] usb 6-1: Product: syz [ 2669.569848][T21368] usb 6-1: Manufacturer: syz [ 2669.596413][T21368] usb 6-1: SerialNumber: syz [ 2669.627174][T21368] usb 6-1: config 0 descriptor?? [ 2669.680487][ T3866] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2669.842307][ T3866] usb 5-1: Using ep0 maxpacket: 32 [ 2669.864348][ T3866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2669.874657][T12940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11137'. [ 2669.889917][ T3866] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2669.938911][ T3866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2669.950535][T12940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11137'. [ 2669.975330][ T3866] usb 5-1: config 0 descriptor?? [ 2669.992784][ T3866] hub 5-1:0.0: USB hub found [ 2670.058573][T12916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2670.101433][T12916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2670.234204][ T3866] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 2670.275638][ T3866] usbhid 5-1:0.0: can't add hid device: -71 [ 2670.288602][ T3866] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2670.323016][T21368] appletouch 6-1:0.85: Geyser mode initialized. [ 2670.331229][ T3866] usb 5-1: USB disconnect, device number 14 [ 2670.360207][T21368] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input311 [ 2670.542497][T21368] usb 6-1: USB disconnect, device number 30 [ 2670.632161][T21368] appletouch 6-1:0.85: input: appletouch disconnected [ 2670.834938][T12946] binder: 12944:12946 ioctl c018620c 200000000000 returned -22 [ 2671.050918][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11142'. [ 2671.518488][T12948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2671.520741][T21368] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 2671.750541][T26994] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2671.874449][T21368] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2671.884089][T21368] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2671.892249][T21368] usb 6-1: Product: syz [ 2671.930843][T26994] usb 4-1: Using ep0 maxpacket: 32 [ 2671.962356][T21368] usb 6-1: Manufacturer: syz [ 2671.966999][T21368] usb 6-1: SerialNumber: syz [ 2671.996389][T26994] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 2672.025681][T26994] usb 4-1: config 0 has no interface number 0 [ 2672.059940][T26994] usb 4-1: config 0 interface 196 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 16 [ 2672.078408][T21368] usb 6-1: config 0 descriptor?? [ 2672.155437][T26994] usb 4-1: config 0 interface 196 has no altsetting 0 [ 2672.213476][T26994] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0124, bcdDevice=a2.b6 [ 2672.253596][T26994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2672.320881][T26994] usb 4-1: Product: syz [ 2672.344807][T26994] usb 4-1: Manufacturer: syz [ 2672.359908][T26994] usb 4-1: SerialNumber: syz [ 2672.374482][T21368] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2672.394481][T26994] usb 4-1: config 0 descriptor?? [ 2672.416982][T12971] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2672.510473][T21369] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2672.578422][T12973] netlink: 'syz.0.11149': attribute type 16 has an invalid length. [ 2672.588426][T12973] netlink: 'syz.0.11149': attribute type 17 has an invalid length. [ 2672.607089][T12973] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2672.660734][T21369] usb 2-1: Using ep0 maxpacket: 32 [ 2672.675247][T21369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2672.685367][T21369] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2672.697361][T21369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2672.767644][T21369] usb 2-1: config 0 descriptor?? [ 2672.819033][T21369] hub 2-1:0.0: USB hub found [ 2672.864382][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11148'. [ 2672.997945][T21369] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 2673.046545][T21369] usbhid 2-1:0.0: can't add hid device: -71 [ 2673.059034][T21369] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2673.121589][T21369] usb 2-1: USB disconnect, device number 113 [ 2673.158842][T26994] ftdi_sio 4-1:0.196: FTDI USB Serial Device converter detected [ 2673.177501][T26994] ftdi_sio ttyUSB0: unknown device type: 0xa2b6 [ 2673.195995][T26994] usb 4-1: USB disconnect, device number 18 [ 2673.211049][T26994] ftdi_sio 4-1:0.196: device disconnected [ 2673.503586][ T3866] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 2673.586212][T12992] netlink: 72 bytes leftover after parsing attributes in process `syz.5.11145'. [ 2673.605387][T12995] loop5: detected capacity change from 0 to 7 [ 2673.698815][ T3866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13629, setting to 64 [ 2673.726033][ T3866] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2673.820488][ T3866] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 2673.882472][ T3866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2673.920225][ T3866] usb 5-1: config 0 descriptor?? [ 2673.934623][T12989] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2674.041100][T21368] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 2674.150755][T26994] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2674.311082][T26994] usb 4-1: Using ep0 maxpacket: 16 [ 2674.318317][T26994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2674.328920][T26994] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2674.342451][T26994] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2674.351706][T26994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2674.365464][T26994] usb 4-1: config 0 descriptor?? [ 2674.377914][T26994] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2674.393767][ T3866] hid-multitouch 0003:0457:07DA.0097: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 2674.624516][T13014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2674.634854][T13014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2674.742673][T26994] usb 5-1: USB disconnect, device number 15 [ 2674.805400][T13018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11158'. [ 2674.892002][T13021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11159'. [ 2676.026315][T21368] usb 6-1: USB disconnect, device number 31 [ 2676.210558][T26994] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2676.378365][T26994] usb 5-1: config 0 has no interfaces? [ 2676.388872][T26994] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2676.399746][T26994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2676.418987][T26994] usb 5-1: Product: syz [ 2676.427028][T26994] usb 5-1: Manufacturer: syz [ 2676.435357][T26994] usb 5-1: SerialNumber: syz [ 2676.447041][T26994] usb 5-1: config 0 descriptor?? [ 2676.668392][T13033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2676.716887][T13033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2676.812896][T10597] usb 5-1: USB disconnect, device number 16 [ 2676.950692][T13046] IPv6: addrconf: prefix option has invalid lifetime [ 2677.065970][T10597] usb 4-1: USB disconnect, device number 19 [ 2677.118965][T13048] loop5: detected capacity change from 0 to 7 [ 2677.910941][T26994] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2678.028508][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11171'. [ 2678.101400][T13065] netlink: 'syz.3.11171': attribute type 29 has an invalid length. [ 2678.140402][T26994] usb 2-1: Using ep0 maxpacket: 8 [ 2678.146405][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11171'. [ 2678.202137][T26994] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2678.272665][T26994] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2678.322703][T26994] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2678.400850][T26994] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2678.421110][T26994] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2678.430208][T26994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2678.699178][T26994] usb 2-1: GET_CAPABILITIES returned 0 [ 2678.706275][T26994] usbtmc 2-1:16.0: can't read capabilities [ 2678.965412][T13060] fuse: Unknown parameter './file0' [ 2678.975348][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2678.984505][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2678.993618][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2679.002702][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2679.029298][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2679.038424][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2679.047547][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2679.056665][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2679.065872][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2679.074969][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2679.110838][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2679.120012][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2679.129105][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2679.138178][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2679.161664][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2679.170799][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 2679.180071][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 2679.203508][T26994] usb 2-1: USB disconnect, device number 114 [ 2679.951757][T13099] loop5: detected capacity change from 0 to 7 [ 2680.642107][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11182'. [ 2680.972846][T13116] netlink: 'syz.3.11186': attribute type 9 has an invalid length. [ 2681.443339][T13120] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2681.490510][ T9767] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2681.650797][ T9767] usb 4-1: Using ep0 maxpacket: 8 [ 2681.658797][ T9767] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2681.669067][ T9767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2681.678080][ T9767] usb 4-1: Product: syz [ 2681.682354][ T9767] usb 4-1: Manufacturer: syz [ 2681.686995][ T9767] usb 4-1: SerialNumber: syz [ 2681.693599][ T9767] usb 4-1: config 0 descriptor?? [ 2681.706674][T13130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11191'. [ 2681.801286][ T3866] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 2681.870576][T10597] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2681.907404][ T9767] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 2681.962800][ T3866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2681.973326][ T3866] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 2681.984783][ T3866] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2681.994062][ T3866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2682.002345][ T3866] usb 2-1: Product: syz [ 2682.006973][ T3866] usb 2-1: Manufacturer: syz [ 2682.011773][ T3866] usb 2-1: SerialNumber: syz [ 2682.020460][T10597] usb 6-1: Using ep0 maxpacket: 8 [ 2682.030077][T10597] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2682.037763][T10597] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2682.049427][T10597] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2682.061152][T10597] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2682.073171][T10597] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2682.084679][T10597] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2682.096267][T10597] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2682.109890][T10597] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2682.118472][T10597] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2682.126548][T10597] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2682.138120][T10597] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2682.151350][T10597] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2682.173100][T10597] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2682.194938][T10597] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2682.217376][T10597] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2682.237615][T10597] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2682.246646][T10597] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2682.254904][T10597] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2682.266322][T10597] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2682.278148][T10597] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2682.290313][T10597] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2682.301859][T10597] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2682.314161][T10597] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2682.328278][T10597] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2682.338191][T10597] usb 6-1: string descriptor 0 read error: -22 [ 2682.344827][T10597] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2682.354399][T10597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2682.371888][T10597] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2683.767561][ T9767] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2683.780810][ T9767] dvbdev: DVB: registering new adapter (Terratec H7) [ 2683.788367][ T9767] usb 4-1: media controller created [ 2683.868969][ T9767] usb 4-1: dvb_usb_v2: MAC address: 00:00:00:00:00:00 [ 2683.893247][ T9767] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2683.988593][T13143] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:0 [ 2684.009161][ T9767] DVB: Unable to find symbol drxk_attach() [ 2684.071953][ T9767] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -22 [ 2684.553922][ T3866] usb 2-1: USB disconnect, device number 115 [ 2684.715634][T26994] usb 6-1: USB disconnect, device number 32 [ 2684.739666][T13150] netlink: 'syz.1.11197': attribute type 9 has an invalid length. [ 2685.187003][T26994] usb 4-1: USB disconnect, device number 20 [ 2686.397161][T13186] loop5: detected capacity change from 0 to 7 [ 2686.404763][T13186] Dev loop5: unable to read RDB block 7 [ 2686.588886][T13186] loop5: AHDI p1 [ 2686.609480][T13191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11208'. [ 2686.726084][T13186] loop5: partition table partially beyond EOD, truncated [ 2687.010449][ T9767] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2687.140466][ T9767] usb 6-1: device descriptor read/64, error -71 [ 2687.159398][T13198] netlink: 'syz.3.11211': attribute type 9 has an invalid length. [ 2687.460462][ T9767] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2687.591628][ T9767] usb 6-1: device descriptor read/64, error -71 [ 2687.701525][ T9767] usb usb6-port1: attempt power cycle [ 2687.952347][T13212] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0000 with DS=0x85 [ 2687.965781][T13212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11216'. [ 2687.975488][T13212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11216'. [ 2688.060716][ T9767] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2688.081160][ T9767] usb 6-1: device descriptor read/8, error -71 [ 2688.330499][ T9767] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2688.351417][ T9767] usb 6-1: device descriptor read/8, error -71 [ 2688.460959][ T9767] usb usb6-port1: unable to enumerate USB device [ 2689.862670][T13239] netlink: 'syz.5.11224': attribute type 9 has an invalid length. [ 2690.053243][T13244] delete_channel: no stack [ 2690.403444][T13260] netlink: 766 bytes leftover after parsing attributes in process `syz.3.11229'. [ 2690.590489][T21368] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2690.698429][T13272] netlink: 'syz.0.11234': attribute type 1 has an invalid length. [ 2690.706891][T13272] netlink: 252 bytes leftover after parsing attributes in process `syz.0.11234'. [ 2690.789637][T21368] usb 5-1: Using ep0 maxpacket: 32 [ 2690.835317][T13277] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11236'. [ 2690.855262][T21368] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2690.875753][T21368] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2690.888934][T13275] random: crng reseeded on system resumption [ 2690.906677][T21368] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2690.949379][T21368] usb 5-1: config 0 descriptor?? [ 2690.960227][T21368] hub 5-1:0.0: USB hub found [ 2691.178478][T21368] hub 5-1:0.0: 1 port detected [ 2691.641097][T21368] usb 5-1: USB disconnect, device number 17 [ 2692.577697][T13290] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.11240'. [ 2692.870488][T21368] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 2693.067682][T21368] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2693.119204][T21368] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2693.175421][T21368] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2693.244416][T21368] usb 5-1: config 0 descriptor?? [ 2693.274845][T13290] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2693.415048][T13299] netlink: 'syz.5.11243': attribute type 9 has an invalid length. [ 2693.785544][T21368] elan 0003:04F3:0755.0098: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 2693.900652][T21368] usb 5-1: USB disconnect, device number 18 [ 2694.054243][T13303] fido_id[13303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2694.783694][T10597] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2694.853454][T13307] netlink: 'syz.5.11246': attribute type 1 has an invalid length. [ 2694.863220][T13307] netlink: 'syz.5.11246': attribute type 2 has an invalid length. [ 2694.871897][T13307] netlink: 'syz.5.11246': attribute type 1 has an invalid length. [ 2694.879914][T13307] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11246'. [ 2694.912809][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11251'. [ 2694.940736][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11251'. [ 2694.950814][T10597] usb 4-1: Using ep0 maxpacket: 8 [ 2694.962198][T10597] usb 4-1: config index 0 descriptor too short (expected 46935, got 18) [ 2694.976064][T10597] usb 4-1: config 0 has too many interfaces: 116, using maximum allowed: 32 [ 2694.979455][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11251'. [ 2694.994513][T10597] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2695.014778][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11251'. [ 2695.019112][T10597] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 116 [ 2695.057248][T10597] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 2695.066977][T10597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2695.079947][T10597] usb 4-1: Product: syz [ 2695.089204][T10597] usb 4-1: Manufacturer: syz [ 2695.100423][T10597] usb 4-1: SerialNumber: syz [ 2695.116203][T10597] usb 4-1: config 0 descriptor?? [ 2695.641031][T10597] usb 4-1: USB disconnect, device number 21 [ 2696.862284][T13352] usb usb7: usbfs: process 13352 (syz.3.11258) did not claim interface 0 before use [ 2697.385960][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11261'. [ 2703.904769][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2703.964821][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2703.975485][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2704.030747][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2704.083515][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2705.074547][T13397] FAULT_INJECTION: forcing a failure. [ 2705.074547][T13397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2705.141224][T13397] CPU: 1 UID: 0 PID: 13397 Comm: syz.5.11271 Tainted: G L syzkaller #0 PREEMPT(full) [ 2705.141256][T13397] Tainted: [L]=SOFTLOCKUP [ 2705.141263][T13397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2705.141276][T13397] Call Trace: [ 2705.141283][T13397] [ 2705.141292][T13397] dump_stack_lvl+0xe8/0x150 [ 2705.141325][T13397] should_fail_ex+0x412/0x560 [ 2705.141357][T13397] _copy_to_user+0x31/0xb0 [ 2705.141380][T13397] simple_read_from_buffer+0xe1/0x170 [ 2705.141407][T13397] proc_fail_nth_read+0x1bb/0x230 [ 2705.141432][T13397] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2705.141456][T13397] ? rw_verify_area+0x2a6/0x4d0 [ 2705.141482][T13397] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2705.141505][T13397] vfs_read+0x20c/0xa70 [ 2705.141530][T13397] ? fdget_pos+0x246/0x320 [ 2705.141552][T13397] ? __pfx_do_recvmmsg+0x10/0x10 [ 2705.141577][T13397] ? __pfx___mutex_lock+0x10/0x10 [ 2705.141598][T13397] ? __pfx_vfs_read+0x10/0x10 [ 2705.141625][T13397] ? __fget_files+0x2a/0x420 [ 2705.141658][T13397] ? __fget_files+0x3a0/0x420 [ 2705.141681][T13397] ? __fget_files+0x2a/0x420 [ 2705.141711][T13397] ksys_read+0x150/0x270 [ 2705.141740][T13397] ? __pfx_ksys_read+0x10/0x10 [ 2705.141778][T13397] do_syscall_64+0x14d/0xf80 [ 2705.141797][T13397] ? trace_irq_disable+0x3b/0x150 [ 2705.141821][T13397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2705.141840][T13397] ? clear_bhb_loop+0x40/0x90 [ 2705.141863][T13397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2705.141881][T13397] RIP: 0033:0x7f981775c84e [ 2705.141900][T13397] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2705.141917][T13397] RSP: 002b:00007f98185c7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2705.141938][T13397] RAX: ffffffffffffffda RBX: 00007f98185c86c0 RCX: 00007f981775c84e [ 2705.141952][T13397] RDX: 000000000000000f RSI: 00007f98185c80a0 RDI: 0000000000000004 [ 2705.141964][T13397] RBP: 00007f98185c8090 R08: 0000000000000000 R09: 0000000000000000 [ 2705.141976][T13397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2705.141988][T13397] R13: 00007f9817a16038 R14: 00007f9817a15fa0 R15: 00007f9817b3fa48 [ 2705.142018][T13397] [ 2705.724714][T13408] 8021q: VLANs not supported on syzkaller0 [ 2705.950108][T13395] chnl_net:caif_netlink_parms(): no params data found [ 2706.353620][T13425] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2706.361492][ T5824] Bluetooth: hci1: command tx timeout [ 2706.380786][T13425] FAULT_INJECTION: forcing a failure. [ 2706.380786][T13425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2706.394386][T13425] CPU: 1 UID: 0 PID: 13425 Comm: syz.3.11278 Tainted: G L syzkaller #0 PREEMPT(full) [ 2706.394415][T13425] Tainted: [L]=SOFTLOCKUP [ 2706.394422][T13425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2706.394433][T13425] Call Trace: [ 2706.394440][T13425] [ 2706.394448][T13425] dump_stack_lvl+0xe8/0x150 [ 2706.394479][T13425] should_fail_ex+0x412/0x560 [ 2706.394507][T13425] _copy_from_user+0x2d/0xb0 [ 2706.394529][T13425] kstrtouint_from_user+0xd6/0x180 [ 2706.394558][T13425] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2706.394590][T13425] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2706.394625][T13425] proc_fail_nth_write+0x8e/0x210 [ 2706.394646][T13425] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2706.394672][T13425] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2706.394693][T13425] vfs_write+0x29a/0xb90 [ 2706.394728][T13425] ? __pfx_vfs_write+0x10/0x10 [ 2706.394757][T13425] ? __fget_files+0x2a/0x420 [ 2706.394784][T13425] ? __fget_files+0x3a0/0x420 [ 2706.394807][T13425] ? __fget_files+0x2a/0x420 [ 2706.394838][T13425] ksys_write+0x150/0x270 [ 2706.394867][T13425] ? __pfx_ksys_write+0x10/0x10 [ 2706.394905][T13425] do_syscall_64+0x14d/0xf80 [ 2706.394924][T13425] ? trace_irq_disable+0x3b/0x150 [ 2706.394948][T13425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2706.394967][T13425] ? clear_bhb_loop+0x40/0x90 [ 2706.394990][T13425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2706.395009][T13425] RIP: 0033:0x7f9c3935c84e [ 2706.395028][T13425] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2706.395045][T13425] RSP: 002b:00007f9c3a20efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2706.395065][T13425] RAX: ffffffffffffffda RBX: 00007f9c3a20f6c0 RCX: 00007f9c3935c84e [ 2706.395079][T13425] RDX: 0000000000000001 RSI: 00007f9c3a20f0a0 RDI: 0000000000000004 [ 2706.395091][T13425] RBP: 00007f9c3a20f090 R08: 0000000000000000 R09: 0000000000000000 [ 2706.395103][T13425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2706.395115][T13425] R13: 00007f9c39616038 R14: 00007f9c39615fa0 R15: 00007f9c3973fa48 [ 2706.395145][T13425] [ 2708.473538][ T5824] Bluetooth: hci1: command tx timeout [ 2709.945346][ T3866] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2710.105776][ T3866] usb 4-1: config 0 has no interfaces? [ 2710.151910][ T3866] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2710.161359][ T3866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2710.169378][ T3866] usb 4-1: Product: syz [ 2710.174174][ T3866] usb 4-1: Manufacturer: syz [ 2710.178812][ T3866] usb 4-1: SerialNumber: syz [ 2710.210512][ T3866] usb 4-1: config 0 descriptor?? [ 2710.442526][T13452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2710.451632][T13452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2710.460674][T13453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2710.470558][T13453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2710.520711][ T5824] Bluetooth: hci1: command tx timeout [ 2712.620233][ T5824] Bluetooth: hci1: command tx timeout [ 2712.836089][T13452] veth0_vlan: left promiscuous mode [ 2712.851760][T13452] veth0_vlan: entered promiscuous mode [ 2712.996361][T13456] fuse: Bad value for 'fd' [ 2713.347662][T13395] bridge0: port 1(bridge_slave_0) entered blocking state [ 2713.357835][T13395] bridge0: port 1(bridge_slave_0) entered disabled state [ 2713.365928][T13395] bridge_slave_0: entered allmulticast mode [ 2713.374615][T13395] bridge_slave_0: entered promiscuous mode [ 2713.388259][T13470] FAULT_INJECTION: forcing a failure. [ 2713.388259][T13470] name failslab, interval 1, probability 0, space 0, times 0 [ 2713.404153][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.404244][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.421749][T13470] CPU: 0 UID: 0 PID: 13470 Comm: syz.4.11290 Tainted: G L syzkaller #0 PREEMPT(full) [ 2713.421780][T13470] Tainted: [L]=SOFTLOCKUP [ 2713.421786][T13470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2713.421796][T13470] Call Trace: [ 2713.421804][T13470] [ 2713.421812][T13470] dump_stack_lvl+0xe8/0x150 [ 2713.421843][T13470] should_fail_ex+0x412/0x560 [ 2713.421872][T13470] should_failslab+0xa8/0x100 [ 2713.421891][T13470] ? do_getname+0x2e/0x250 [ 2713.421910][T13470] kmem_cache_alloc_noprof+0x87/0x650 [ 2713.421942][T13470] do_getname+0x2e/0x250 [ 2713.421962][T13470] ? getname_flags+0x11/0x20 [ 2713.421985][T13470] path_listxattrat+0xd9/0x3f0 [ 2713.422007][T13470] ? __pfx_path_listxattrat+0x10/0x10 [ 2713.422037][T13470] do_syscall_64+0x14d/0xf80 [ 2713.422057][T13470] ? trace_irq_disable+0x3b/0x150 [ 2713.422076][T13470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2713.422092][T13470] ? clear_bhb_loop+0x40/0x90 [ 2713.422113][T13470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2713.422129][T13470] RIP: 0033:0x7f3d4b59bf79 [ 2713.422147][T13470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2713.422161][T13470] RSP: 002b:00007f3d4c3cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 2713.422180][T13470] RAX: ffffffffffffffda RBX: 00007f3d4b815fa0 RCX: 00007f3d4b59bf79 [ 2713.422194][T13470] RDX: 00000000fffffeec RSI: 0000000000000000 RDI: 0000200000000100 [ 2713.422206][T13470] RBP: 00007f3d4c3cc090 R08: 0000000000000000 R09: 0000000000000000 [ 2713.422218][T13470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2713.422229][T13470] R13: 00007f3d4b816038 R14: 00007f3d4b815fa0 R15: 00007f3d4b93fa48 [ 2713.422257][T13470] [ 2713.636683][T13395] bridge0: port 2(bridge_slave_1) entered blocking state [ 2713.644288][T13395] bridge0: port 2(bridge_slave_1) entered disabled state [ 2713.651704][T13395] bridge_slave_1: entered allmulticast mode [ 2713.659109][T13395] bridge_slave_1: entered promiscuous mode [ 2713.687239][T13395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2713.699040][T13395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2713.731069][T13395] team0: Port device team_slave_0 added [ 2713.739401][T13395] team0: Port device team_slave_1 added [ 2713.764193][T13395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2713.771209][T13395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2713.797576][T13395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2713.810586][T13395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2713.818757][T13395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2713.851681][T13395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2713.991781][T10849] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2714.004754][T10849] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2714.176542][T13395] hsr_slave_0: entered promiscuous mode [ 2714.222009][T13395] hsr_slave_1: entered promiscuous mode [ 2714.228752][T13395] debugfs: 'hsr0' already exists in 'hsr' [ 2714.263391][T13395] Cannot create hsr debugfs directory [ 2714.312200][T26994] usb 4-1: USB disconnect, device number 22 [ 2714.431176][T10849] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2714.480709][T10849] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2714.732868][T10849] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2714.762214][T10849] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2715.008407][T10849] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 2715.036156][T10849] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2715.070993][T10849] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2715.631753][T10849] tipc: Resetting bearer [ 2716.076003][T10849] tipc: Disabling bearer [ 2716.241885][T10849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2716.294256][T10849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2716.332597][T10849] bond0 (unregistering): Released all slaves [ 2716.365974][T10849] bond1 (unregistering): Released all slaves [ 2716.579269][T10849] tipc: Disabling bearer [ 2716.637265][T10849] tipc: Left network mode [ 2716.752528][T13395] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2716.770719][T13395] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2716.807885][T13395] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2716.866685][T13395] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2717.128165][T13532] syzkaller0: entered promiscuous mode [ 2717.145294][T13532] syzkaller0: entered allmulticast mode [ 2717.444896][T13544] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11306'. [ 2717.749033][T13395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2717.915631][T10849] dummy0: left promiscuous mode [ 2717.969133][T10849] hsr_slave_0: left promiscuous mode [ 2717.975258][T21366] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2718.090881][T10849] hsr_slave_1: left promiscuous mode [ 2718.097189][T10849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2718.127013][T10849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2718.141676][T21366] usb 6-1: Using ep0 maxpacket: 32 [ 2718.148532][T21366] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 2718.235206][T21366] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2718.247755][T10849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2718.256386][T21366] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2718.265662][T10849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2718.292597][T26994] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2718.304084][T21366] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2718.327991][T21366] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2718.344824][T21366] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2718.371131][T10849] veth1_macvtap: left promiscuous mode [ 2718.377936][T21366] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2718.396013][T10849] veth0_macvtap: left promiscuous mode [ 2718.401822][T10849] veth1_vlan: left promiscuous mode [ 2718.408340][T21366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2718.417915][T10849] veth0_vlan: left promiscuous mode [ 2718.596213][T26994] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2718.608155][T26994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2718.660804][T21366] usb 6-1: config 0 descriptor?? [ 2718.725347][T26994] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2718.762925][T26994] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2718.808586][T26994] usb 5-1: Product: syz [ 2718.827502][T26994] usb 5-1: Manufacturer: syz [ 2718.839840][T26994] usb 5-1: SerialNumber: syz [ 2718.870084][T26994] usb 5-1: config 0 descriptor?? [ 2718.889160][T21366] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2718.946223][T26994] usb 5-1: selecting invalid altsetting 0 [ 2718.985387][T21366] usb 6-1: USB disconnect, device number 37 [ 2719.045055][T21366] usblp0: removed [ 2719.202003][T26994] usb 5-1: USB disconnect, device number 19 [ 2719.452277][T21366] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2719.612894][T21366] usb 6-1: Using ep0 maxpacket: 32 [ 2719.619603][T21366] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 2719.644202][T21366] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2719.696545][T21366] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2719.717217][T21366] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2719.783487][T21366] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2719.803977][T21366] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2719.819035][T21366] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2719.842059][T21366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2719.866415][T10849] ` (unregistering): Port device team_slave_1 removed [ 2719.876730][T21366] usb 6-1: config 0 descriptor?? [ 2719.929469][T10849] ` (unregistering): Port device team_slave_0 removed [ 2720.094520][T21366] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2720.264478][T13395] 8021q: adding VLAN 0 to HW filter on device team0 [ 2720.364204][T10851] bridge0: port 1(bridge_slave_0) entered blocking state [ 2720.371424][T10851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2720.582023][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 2720.589217][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2720.689507][T13395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2720.868437][T13395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2721.052852][T13586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11315'. [ 2721.117185][T13395] veth0_vlan: entered promiscuous mode [ 2721.171983][T13395] veth1_vlan: entered promiscuous mode [ 2721.328629][T13395] veth0_macvtap: entered promiscuous mode [ 2721.379113][T10597] usb 6-1: USB disconnect, device number 38 [ 2721.406998][T13395] veth1_macvtap: entered promiscuous mode [ 2721.445439][T10597] usblp0: removed [ 2721.547508][T13395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2721.704248][T13395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2721.773713][ T1336] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2721.883359][ T1336] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2721.920892][T21369] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2721.933776][ T1336] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2721.982836][ T1336] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2722.080628][T21369] usb 6-1: Using ep0 maxpacket: 8 [ 2722.121183][T21369] usb 6-1: config 0 has no interfaces? [ 2722.140152][T21369] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2722.169972][T21369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2722.208793][T21369] usb 6-1: Product: syz [ 2722.235888][T21369] usb 6-1: Manufacturer: syz [ 2722.258616][T21369] usb 6-1: SerialNumber: syz [ 2722.299533][T21369] usb 6-1: config 0 descriptor?? [ 2722.429433][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2722.459118][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2722.643823][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2722.657487][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2723.424123][T10597] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 2723.677989][T10597] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2723.700511][T10597] usb 4-1: not running at top speed; connect to a high speed hub [ 2723.735168][T10597] usb 4-1: config 3 has an invalid interface number: 140 but max is 1 [ 2723.758899][T13640] FAULT_INJECTION: forcing a failure. [ 2723.758899][T13640] name failslab, interval 1, probability 0, space 0, times 0 [ 2723.773569][T10597] usb 4-1: config 3 has an invalid interface number: 228 but max is 1 [ 2723.792809][T13640] CPU: 0 UID: 0 PID: 13640 Comm: syz.0.11323 Tainted: G L syzkaller #0 PREEMPT(full) [ 2723.792849][T13640] Tainted: [L]=SOFTLOCKUP [ 2723.792856][T13640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2723.792868][T13640] Call Trace: [ 2723.792875][T13640] [ 2723.792885][T13640] dump_stack_lvl+0xe8/0x150 [ 2723.792916][T13640] should_fail_ex+0x412/0x560 [ 2723.792947][T13640] should_failslab+0xa8/0x100 [ 2723.792971][T13640] __kmalloc_noprof+0xe8/0x760 [ 2723.792999][T13640] ? fib6_info_alloc+0x30/0xf0 [ 2723.793029][T13640] fib6_info_alloc+0x30/0xf0 [ 2723.793054][T13640] ip6_route_info_create+0x142/0x860 [ 2723.793087][T13640] ip6_route_add+0x49/0x1b0 [ 2723.793116][T13640] inet6_rtm_newroute+0x268/0x19e0 [ 2723.793149][T13640] ? unwind_next_frame+0xa5/0x23c0 [ 2723.793179][T13640] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 2723.793214][T13640] ? __lock_acquire+0x6b5/0x2cf0 [ 2723.793237][T13640] ? is_bpf_text_address+0x26/0x2b0 [ 2723.793291][T13640] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 2723.793314][T13640] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 2723.793344][T13640] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 2723.793368][T13640] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2723.793396][T13640] ? __lock_acquire+0x6b5/0x2cf0 [ 2723.793427][T13640] netlink_rcv_skb+0x232/0x4b0 [ 2723.793454][T13640] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2723.793481][T13640] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2723.793515][T13640] ? netlink_deliver_tap+0x2e/0x1b0 [ 2723.793547][T13640] netlink_unicast+0x80f/0x9b0 [ 2723.793580][T13640] ? __pfx_netlink_unicast+0x10/0x10 [ 2723.793604][T13640] ? netlink_sendmsg+0x650/0xb40 [ 2723.793627][T13640] ? skb_put+0x11b/0x210 [ 2723.793656][T13640] netlink_sendmsg+0x813/0xb40 [ 2723.793689][T13640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2723.793717][T13640] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2723.793745][T13640] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2723.793765][T13640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2723.793789][T13640] ____sys_sendmsg+0xa68/0xad0 [ 2723.793821][T13640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2723.793848][T13640] ? import_iovec+0x73/0xa0 [ 2723.793872][T13640] ___sys_sendmsg+0x2a5/0x360 [ 2723.793896][T13640] ? __pfx____sys_sendmsg+0x10/0x10 [ 2723.793947][T13640] ? __fget_files+0x2a/0x420 [ 2723.793969][T13640] ? __fget_files+0x3a0/0x420 [ 2723.794001][T13640] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2723.794023][T13640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2723.794051][T13640] ? __pfx_ksys_write+0x10/0x10 [ 2723.794089][T13640] do_syscall_64+0x14d/0xf80 [ 2723.794108][T13640] ? trace_irq_disable+0x3b/0x150 [ 2723.794132][T13640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2723.794151][T13640] ? clear_bhb_loop+0x40/0x90 [ 2723.794173][T13640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2723.794192][T13640] RIP: 0033:0x7f137c79bf79 [ 2723.794211][T13640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2723.794228][T13640] RSP: 002b:00007f137d590028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2723.794248][T13640] RAX: ffffffffffffffda RBX: 00007f137ca15fa0 RCX: 00007f137c79bf79 [ 2723.794262][T13640] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000008 [ 2723.794276][T13640] RBP: 00007f137d590090 R08: 0000000000000000 R09: 0000000000000000 [ 2723.794288][T13640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2723.794300][T13640] R13: 00007f137ca16038 R14: 00007f137ca15fa0 R15: 00007f137cb3fa48 [ 2723.794325][T13640] [ 2723.798799][T10597] usb 4-1: config 3 has an invalid descriptor of length 10, skipping remainder of the config [ 2724.353696][T10597] usb 4-1: config 3 has no interface number 0 [ 2724.359880][T10597] usb 4-1: config 3 has no interface number 1 [ 2724.366563][T10597] usb 4-1: config 3 interface 140 has no altsetting 0 [ 2724.373518][T10597] usb 4-1: config 3 interface 228 has no altsetting 0 [ 2724.383851][T10597] usb 4-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=41.a4 [ 2724.394229][T10597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2724.402537][T10597] usb 4-1: Product: syz [ 2724.406927][T10597] usb 4-1: Manufacturer: syz [ 2724.411681][T10597] usb 4-1: SerialNumber: syz [ 2724.657434][ T9767] usb 6-1: USB disconnect, device number 39 [ 2725.285014][T10597] usb 4-1: USB disconnect, device number 23 [ 2725.459046][T12462] udevd[12462]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.228/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 2725.478132][T12399] udevd[12399]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.140/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2725.769602][T13688] netlink: 'syz.3.11336': attribute type 8 has an invalid length. [ 2726.120054][T13696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11338'. [ 2726.193402][T13702] input: syz1 as /devices/virtual/input/input313 [ 2726.218682][T13696] macvtap1: entered promiscuous mode [ 2726.278759][T13696] batadv0: entered promiscuous mode [ 2726.303643][T13696] macvtap1: entered allmulticast mode [ 2726.334698][T13696] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2726.399101][T13705] batadv0: left promiscuous mode [ 2726.800943][T12985] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2726.990894][T12985] usb 6-1: Using ep0 maxpacket: 8 [ 2727.002878][T12985] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2727.029499][T12985] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2727.092740][T12985] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2727.104679][T12985] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2727.118869][T12985] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2727.179327][T12985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2727.464115][T12985] usb 6-1: GET_CAPABILITIES returned 0 [ 2727.471595][T12985] usbtmc 6-1:16.0: can't read capabilities [ 2727.659576][T13707] fuse: Unknown parameter './file0' [ 2727.666339][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2727.675483][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2727.812461][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2727.821578][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2727.830646][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2727.839711][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2727.849186][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2727.858267][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2727.867358][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2727.876478][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2727.885581][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2727.894652][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2727.903732][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2727.992380][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2728.001468][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2728.010520][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 2728.102870][T21369] usb 6-1: USB disconnect, device number 40 [ 2728.281334][T13743] IPVS: set_ctl: invalid protocol: 44 172.20.20.24:20002 [ 2728.295721][ T29] audit: type=1326 audit(1771137930.309:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.3.11351" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c3939bf79 code=0x0 [ 2729.090622][T12985] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2729.242110][T12985] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2729.252821][T12985] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2729.280535][T12985] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2729.322360][T12985] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2729.350078][T12985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2729.398007][T12985] usb 5-1: Product: syz [ 2729.411535][T12985] usb 5-1: Manufacturer: syz [ 2729.416189][T12985] usb 5-1: SerialNumber: syz [ 2729.445886][T12985] hub 5-1:1.0: bad descriptor, ignoring hub [ 2729.473991][T12985] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2729.654670][T12985] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2729.755706][T13775] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11358'. [ 2730.260474][T13754] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 2730.501093][T13754] usb 5-1: device firmware changed [ 2730.508778][T12985] usb 5-1: USB disconnect, device number 20 [ 2730.517807][T12985] usblp0: removed [ 2730.732626][T12985] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2730.912597][T12985] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2731.315480][T12985] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2731.349231][T12985] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2731.384371][T12985] usb 5-1: string descriptor 0 read error: -22 [ 2731.391512][T12985] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2731.414208][T12985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2731.459539][T12985] hub 5-1:1.0: bad descriptor, ignoring hub [ 2731.468554][T12985] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2731.666566][T12985] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2731.742850][T12985] usb 5-1: USB disconnect, device number 21 [ 2731.787932][T12985] usblp0: removed [ 2732.482682][T13809] netlink: 'syz.3.11368': attribute type 4 has an invalid length. [ 2732.745959][T13817] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2732.764958][T13817] xt_TCPMSS: Only works on TCP SYN packets [ 2733.070951][T10597] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 2733.249427][T10597] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2733.263550][T10597] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2733.273031][T10597] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 2733.285096][T10597] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2733.306822][T10597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2733.342140][T13812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2733.377103][T10597] hub 5-1:1.0: bad descriptor, ignoring hub [ 2733.432192][T10597] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2733.439812][T10597] cdc_wdm 5-1:1.0: skipping garbage [ 2733.446257][T10597] cdc_wdm 5-1:1.0: skipping garbage [ 2733.459674][T10597] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2733.465943][T10597] cdc_wdm 5-1:1.0: Unknown control protocol [ 2733.722777][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2733.729526][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2733.735843][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2733.742437][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2733.748600][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 2735.992816][T12985] usb 5-1: USB disconnect, device number 22 [ 2736.327693][T13861] ip6tnl1: entered allmulticast mode [ 2736.381546][T13861] netlink: 'syz.6.11381': attribute type 10 has an invalid length. [ 2736.530689][T13861] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2736.620675][T13876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11383'. [ 2736.710932][ T49] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2736.730965][ T49] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2736.750235][T10597] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2736.916786][ T9767] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2737.183667][T13890] loop7: detected capacity change from 0 to 16383 [ 2737.331154][T10597] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2741.160622][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2750.520737][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2767.800687][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2774.843322][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.850391][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2803.640683][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2828.120644][T13951] Bluetooth: hci1: command 0x0406 tx timeout [ 2836.283876][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.293345][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2872.120618][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2889.410965][ T30] INFO: task kworker/0:1:5513 blocked for more than 143 seconds. [ 2889.418818][ T30] Tainted: G L syzkaller #0 [ 2889.425527][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2889.434641][ T30] task:kworker/0:1 state:D stack:22088 pid:5513 tgid:5513 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2889.446824][ T30] Workqueue: usb_hub_wq hub_event [ 2889.452116][ T30] Call Trace: [ 2889.455411][ T30] [ 2889.458352][ T30] __schedule+0x1585/0x5340 [ 2889.463101][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 2889.468157][ T30] ? __pfx___schedule+0x10/0x10 [ 2889.473570][ T30] ? schedule+0x90/0x360 [ 2889.477824][ T30] schedule+0x164/0x360 [ 2889.482051][ T30] usb_kill_urb+0x1cf/0x2f0 [ 2889.486560][ T30] ? __pfx_usb_kill_urb+0x10/0x10 [ 2889.491862][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2889.497937][ T30] usb_start_wait_urb+0x1a3/0x510 [ 2889.503187][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2889.508769][ T30] usb_control_msg+0x232/0x3e0 [ 2889.513915][ T30] hub_port_init+0xb1e/0x28d0 [ 2889.518607][ T30] hub_event+0x2593/0x4f30 [ 2889.523125][ T30] ? __pfx_hub_event+0x10/0x10 [ 2889.527901][ T30] ? process_scheduled_works+0xa25/0x1830 [ 2889.533932][ T30] ? process_scheduled_works+0xa25/0x1830 [ 2889.539664][ T30] process_scheduled_works+0xb02/0x1830 [ 2889.545483][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 2889.551717][ T30] ? assign_work+0x3d5/0x5e0 [ 2889.556317][ T30] worker_thread+0xa50/0xfc0 [ 2889.561353][ T30] kthread+0x388/0x470 [ 2889.565443][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2889.570898][ T30] ? __pfx_kthread+0x10/0x10 [ 2889.575508][ T30] ret_from_fork+0x51e/0xb90 [ 2889.580118][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2889.585430][ T30] ? __switch_to+0xc7d/0x1450 [ 2889.590134][ T30] ? __pfx_kthread+0x10/0x10 [ 2889.595139][ T30] ret_from_fork_asm+0x1a/0x30 [ 2889.599935][ T30] [ 2889.603161][ T30] [ 2889.603161][ T30] Showing all locks held in the system: [ 2889.611109][ T30] 1 lock held by khungtaskd/30: [ 2889.615959][ T30] #0: ffffffff8e7603e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2889.625996][ T30] 5 locks held by klogd/5182: [ 2889.630927][ T30] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 2889.640976][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 2889.650034][ T30] #2: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 2889.659230][ T30] #3: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 2889.669338][ T30] #4: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_change+0xd4/0x340 [ 2889.678451][ T30] 2 locks held by getty/5583: [ 2889.683354][ T30] #0: ffff88803273a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2889.693350][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 2889.703729][ T30] 5 locks held by kworker/0:1/5513: [ 2889.708950][ T30] #0: ffff888021eb6948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 2889.720720][ T30] #1: ffffc90003d37c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 2889.732734][ T30] #2: ffff88802b09b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2889.741968][ T30] #3: ffff88802b2c5518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2889.751947][ T30] #4: ffff88802a97b268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2889.761859][ T30] [ 2889.764195][ T30] ============================================= [ 2889.764195][ T30] [ 2889.772825][ T30] NMI backtrace for cpu 0 [ 2889.772854][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2889.772877][ T30] Tainted: [L]=SOFTLOCKUP [ 2889.772882][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2889.772891][ T30] Call Trace: [ 2889.772898][ T30] [ 2889.772904][ T30] dump_stack_lvl+0xe8/0x150 [ 2889.772931][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 2889.772956][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2889.772978][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2889.773005][ T30] sys_info+0x135/0x170 [ 2889.773025][ T30] watchdog+0xfd9/0x1030 [ 2889.773055][ T30] ? watchdog+0x21a/0x1030 [ 2889.773084][ T30] kthread+0x388/0x470 [ 2889.773101][ T30] ? __pfx_watchdog+0x10/0x10 [ 2889.773125][ T30] ? __pfx_kthread+0x10/0x10 [ 2889.773144][ T30] ret_from_fork+0x51e/0xb90 [ 2889.773171][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2889.773193][ T30] ? __switch_to+0xc7d/0x1450 [ 2889.773218][ T30] ? __pfx_kthread+0x10/0x10 [ 2889.773237][ T30] ret_from_fork_asm+0x1a/0x30 [ 2889.773275][ T30] [ 2889.773282][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2889.890922][ C1] NMI backtrace for cpu 1 [ 2889.890942][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2889.890965][ C1] Tainted: [L]=SOFTLOCKUP [ 2889.890972][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2889.890993][ C1] RIP: 0010:unwind_next_frame+0x1821/0x23c0 [ 2889.891024][ C1] Code: 19 02 00 00 80 3d 5e df aa 11 00 0f 85 0c 02 00 00 c6 05 51 df aa 11 01 4c 89 f7 e8 b9 0b 00 00 e9 f8 01 00 00 48 8b 54 24 08 <48> 8d 5a 02 48 83 c2 03 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f [ 2889.891040][ C1] RSP: 0018:ffffc90000a08778 EFLAGS: 00000046 [ 2889.891056][ C1] RAX: 0000000000000000 RBX: ffffc90000a08880 RCX: 0000000000000000 [ 2889.891068][ C1] RDX: ffffffff90a6e17e RSI: 0000000000000001 RDI: ffffc90000a088a8 [ 2889.891080][ C1] RBP: dffffc0000000000 R08: ffffc90000a088a7 R09: 0000000000000000 [ 2889.891092][ C1] R10: ffffc90000a08898 R11: fffff52000141115 R12: ffffc90000a08898 [ 2889.891105][ C1] R13: 1ffff9200014110b R14: ffffc90000a08848 R15: 1ffffffff214dc30 [ 2889.891119][ C1] FS: 0000000000000000(0000) GS:ffff88812556f000(0000) knlGS:0000000000000000 [ 2889.891133][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2889.891145][ C1] CR2: 0000562b1c2ea660 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 2889.891160][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 2889.891171][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2889.891182][ C1] Call Trace: [ 2889.891188][ C1] [ 2889.891199][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2889.891223][ C1] ? __queue_work+0xbe1/0x1020 [ 2889.891247][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2889.891265][ C1] arch_stack_walk+0x11b/0x150 [ 2889.891291][ C1] ? call_timer_fn+0x192/0x640 [ 2889.891313][ C1] stack_trace_save+0xa9/0x100 [ 2889.891328][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2889.891345][ C1] ? stack_depot_save_flags+0x33/0x810 [ 2889.891372][ C1] kasan_save_stack+0x3e/0x60 [ 2889.891397][ C1] ? kasan_save_stack+0x3e/0x60 [ 2889.891420][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 2889.891441][ C1] ? insert_work+0x3d/0x330 [ 2889.891458][ C1] ? __queue_work+0xbe1/0x1020 [ 2889.891500][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 2889.891521][ C1] insert_work+0x3d/0x330 [ 2889.891540][ C1] __queue_work+0xbe1/0x1020 [ 2889.891563][ C1] ? __queue_work+0x1a1/0x1020 [ 2889.891592][ C1] call_timer_fn+0x192/0x640 [ 2889.891611][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 2889.891633][ C1] ? call_timer_fn+0xd4/0x640 [ 2889.891652][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2889.891675][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 2889.891691][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 2889.891714][ C1] __run_timer_base+0x67e/0x8b0 [ 2889.891731][ C1] ? ktime_get+0x45/0x200 [ 2889.891751][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 2889.891771][ C1] ? sched_clock_cpu+0x74/0x440 [ 2889.891795][ C1] run_timer_softirq+0xb7/0x170 [ 2889.891813][ C1] handle_softirqs+0x22a/0x870 [ 2889.891835][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 2889.891858][ C1] __irq_exit_rcu+0x5f/0x150 [ 2889.891879][ C1] irq_exit_rcu+0x9/0x30 [ 2889.891898][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2889.891924][ C1] [ 2889.891930][ C1] [ 2889.891937][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2889.891955][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2889.891971][ C1] Code: 7e 6e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 8d 1d 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2889.891985][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 2889.891998][ C1] RAX: 0000000003d48ec9 RBX: ffffffff819a779d RCX: 0000000080000001 [ 2889.892010][ C1] RDX: 0000000000000001 RSI: ffffffff8deed5c3 RDI: ffffffff8c279800 [ 2889.892022][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 2889.892035][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff90114db0 [ 2889.892047][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 0000000000000001 [ 2889.892060][ C1] ? do_idle+0x1bd/0x500 [ 2889.892085][ C1] default_idle+0x9/0x20 [ 2889.892103][ C1] default_idle_call+0x72/0xb0 [ 2889.892122][ C1] do_idle+0x1bd/0x500 [ 2889.892145][ C1] ? __pfx_do_idle+0x10/0x10 [ 2889.892167][ C1] ? do_idle+0x4d6/0x500 [ 2889.892188][ C1] cpu_startup_entry+0x43/0x60 [ 2889.892210][ C1] start_secondary+0x101/0x110 [ 2889.892229][ C1] common_startup_64+0x13e/0x147 [ 2889.892252][ C1] [ 2890.338698][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2890.345661][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2890.356351][ T30] Tainted: [L]=SOFTLOCKUP [ 2890.360663][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2890.370829][ T30] Call Trace: [ 2890.374097][ T30] [ 2890.377005][ T30] vpanic+0x56c/0xa60 [ 2890.380974][ T30] ? __pfx___schedule+0x10/0x10 [ 2890.385811][ T30] ? __pfx_vpanic+0x10/0x10 [ 2890.390298][ T30] ? __pfx_console_unlock+0x10/0x10 [ 2890.395516][ T30] panic+0xc5/0xd0 [ 2890.399250][ T30] ? __pfx_panic+0x10/0x10 [ 2890.403664][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 2890.409030][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2890.415283][ T30] watchdog+0x1023/0x1030 [ 2890.419623][ T30] ? watchdog+0x21a/0x1030 [ 2890.424039][ T30] kthread+0x388/0x470 [ 2890.428189][ T30] ? __pfx_watchdog+0x10/0x10 [ 2890.432861][ T30] ? __pfx_kthread+0x10/0x10 [ 2890.437445][ T30] ret_from_fork+0x51e/0xb90 [ 2890.442029][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2890.447132][ T30] ? __switch_to+0xc7d/0x1450 [ 2890.451801][ T30] ? __pfx_kthread+0x10/0x10 [ 2890.456485][ T30] ret_from_fork_asm+0x1a/0x30 [ 2890.461285][ T30] [ 2890.464765][ T30] Kernel Offset: disabled [ 2890.469102][ T30] Rebooting in 86400 seconds..