last executing test programs: 7m48.338529109s ago: executing program 4 (id=895): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2003}, 0x24}}, 0x0) r2 = socket(0xa, 0x3, 0x7) setsockopt(r2, 0xff, 0x6, 0x0, 0x0) syz_emit_ethernet(0xd4, &(0x7f00000024c0)=ANY=[@ANYBLOB="0000000000004f3ba0235e5f88a2"], 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) connect$packet(r1, &(0x7f0000000000)={0x11, 0x15, r3, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x1114}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="00010000ac0000001c0012800b000100697036746e6c00000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x40011}, 0x20004090) 7m48.188054169s ago: executing program 4 (id=896): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc4c03d12, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000001c0)='\xc2\xa0\xaefM\xc1\xb5\\xO\x00\x02\xbc\x97\xea\xffm\xaa\x80\xdc]\xbd\x95\xe4\x81\x92_Q\x82\x9d\xbfj2s\xe6\x0ew2\xb8\x96\xfc\xa9\xf7\x03s\xdd\x18\xb9\x8f\xb6k\a\xfd\xab\xc6\x88\xa4\xee\x88\xd7\xaf\xb0I\xae\xb4\xc7\xc5v\x8c\xf8\x11*\x7f\xd3\xdffP\xbbj\x14P\x10\t\ry\xa0\x8d\x8b\xa6\x8e:\xc1\x8b\x1b\xdd!') connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x5887, 0x1000, 0x2, 0x10000371}, &(0x7f0000001140)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x67f, 0x64, 0x0, 0x0) 7m46.823863203s ago: executing program 4 (id=900): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x7, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa}], &(0x7f0000000040)='syzkaller\x00', 0x80000001, 0x77, &(0x7f0000000080)=""/119, 0x41000, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x3, 0x69a, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xf500}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map=0x1, 0x2e, 0x1, 0x8, &(0x7f0000000340)=[0x0], 0x1, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x10000, 0x0, 0x7fff, 0x20080, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map=r4, r2, 0x17, 0x0, 0x0, @void, @value, @void, @void, r3}, 0x20) syz_usb_connect(0x5, 0x4c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023a00010d019002090432a70201039e08090588061000060408082387ac33afe3410725010305f80409050702000204026607"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 7m45.322432304s ago: executing program 4 (id=905): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ea962905759208ebba17f3501c16f26715af985d6d05cd70f04bf9d333c8c6ba2146310700305a3d0d2d2311180ba9df44ba6624c05b19991c546270cfaeee47deafe3213ddbceff6d20498c65e12d6b38bd55ed43c945b0c9ae196dd565b33d7d055b6ec0102371914cd9c98df51cb1979e6f6011e41d3eb2f248daf1dbdcace2", 0x81}], 0x1}, 0x800) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffffc, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x401, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7d, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x4, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0xffff, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x8, 0x2, 0x3, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x55, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x1) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$LOOP_SET_FD(r6, 0x4c03, r6) dup2(r5, r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x2, 0x5a, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x1, 0x1, 0x3, 0x67, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6}}, @hid_hid={0x9, 0x21, 0x7, 0x5a, 0x1, {0x22, 0xd46}}], [{{0x9, 0x5, 0xa, 0x2, 0x20, 0x1, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1e, 0xf814}]}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x8, &(0x7f0000001880)=ANY=[@ANYBLOB="fcebd688ec975eba"], 0x1, [{0x0, 0x0}]}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf0, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x100000000000003, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x10000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 7m42.079856956s ago: executing program 4 (id=912): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)={0x14, 0x2e, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}, 0x1b) r2 = userfaultfd(0x80001) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x1, 0x80, 0x1, 0x8, {{0x3a, 0x4, 0x1, 0xd, 0xe8, 0x66, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x74, 0x1, [{0x0, 0x10, "8630f28778d5332118009b4d1a1f"}, {0x7, 0xe, "fd916a5204b830ae426d52c9"}, {0x5, 0x5, "d120ad"}, {0x0, 0x12, "5a7b02b4a8760d4ca0e6d353a2196a07"}, {0x7, 0x12, "ddb072d86755744761d90c5a024af029"}, {0x0, 0x7, "ae66ba31cc"}, {0x5, 0xa, "a69db344d3f3b816"}, {0x0, 0x9, "fb389529541146"}, {0x2, 0x5, "afa543"}, {0x0, 0x8, "26b513e21496"}]}, @rr={0x7, 0x1b, 0x36, [@rand_addr=0x64010102, @empty, @loopback, @loopback, @local, @broadcast]}, @timestamp={0x44, 0x28, 0x4e, 0x0, 0x8, [0x1, 0x80, 0x8, 0x4, 0x9, 0xc59f, 0x100, 0x2, 0x10000]}, @noop, @lsrr={0x83, 0x1b, 0x64, [@dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010101, @rand_addr=0x64010100, @private=0xa010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r3, 0x214, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) r5 = socket(0xa, 0x801, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x23d}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa3d}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3242}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x804) prctl$PR_CAPBSET_DROP(0x18, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x40, 0x20, 0x7, 0x0, {{0x11, 0x4, 0x2, 0x2e, 0x44, 0x65, 0x0, 0xb9, 0x0, 0x0, @rand_addr=0x64010102, @empty, {[@timestamp={0x44, 0x24, 0xa4, 0x0, 0x2, [0x2330, 0x9, 0x8, 0x94, 0xc, 0x524be186, 0xcad3, 0x5]}, @timestamp={0x44, 0xc, 0xc2, 0x0, 0x2, [0x1, 0x4552]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, r7}) capset(&(0x7f0000000d40)={0x19980330}, &(0x7f00000002c0)={0x3, 0x1, 0x6, 0x8, 0x2}) getsockopt(r5, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54) 7m41.584714665s ago: executing program 4 (id=913): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000d042dbd70000000002000000001", @ANYRES32=r4, @ANYBLOB="04000400000000002400128009000100626f6e640000000014000280050015"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) io_uring_setup(0x7d98, 0x0) 7m40.366601922s ago: executing program 32 (id=913): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000d042dbd70000000002000000001", @ANYRES32=r4, @ANYBLOB="04000400000000002400128009000100626f6e640000000014000280050015"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) io_uring_setup(0x7d98, 0x0) 5m28.548363379s ago: executing program 2 (id=1372): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x12}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) 5m28.367807654s ago: executing program 2 (id=1374): openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000280)=0x14) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r4, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0xc1105511, &(0x7f0000000040)) syz_usb_connect(0x5, 0x24, &(0x7f0000001740)=ANY=[@ANYBLOB="08010017001f43088f0510660548010203010902120001049570810904008100ffffff02", @ANYBLOB="0e20bbab094b588fd18516cc21902a50c8bc1b65c47ca8992cf82bf03e32164c6811d469ce7ba6d2928b96042de67da8f53bb021f3d5dffe001a3d25b2d2baac43d68fa41c9f50cc40484f314435cc1b638ad43611f3f322c0cd59d390896b027901757ae7e5743740ef9560b21d6936f21b2eebfd4fa7e46f30323025cd875d055fbc89251db479facbb050fcbae44522b2e84ffbfbafbab6cb6ab0111a708332ad16e13deb7b8d08d9b702754a5f198e7d8e40342df19c075d", @ANYRESOCT=r8], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f907, 0xc, '\x00', @p_u32=0x0}}) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) pwritev2(r10, &(0x7f0000001540)=[{&(0x7f0000000100)="58abdd380f1b7ca8c1caa050e5d34c2eaaef2d3db1d0d8bd9e", 0x19}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000000140)="3cbc723933cc6dd0bf85b01b725799a32354b9ff8d12e61d9a573eed780fea37efd37b843a5a2feed71228f0448a58100cb4e06fa61e0b79123181196c48d1c69bf9c612dafffa688cd66fc8b519b1b7c2", 0x51}, {&(0x7f00000001c0)="78a7e74d7ecd1e46a3a4e818edecf019feda8569a0da4a35d4353661bacbfc3236b18927d90a59af92916d912416e3325f6f8b05cb", 0x35}, {&(0x7f00000012c0)="f503c4565e32bdeec9745ea9f8f4a9f8a9670948b37a558d4b8827dc6b61accf0e4fa12ff63e66dad7c229217a2ab1b1d32192bad659b7684c1d8e7c8471be14b385859ca9b60e", 0x47}, {&(0x7f0000001340)="a32832f5cf3055ba23ac88de3095a9c3877badc32796a48a2f99120bcc75b08b3dde21e671700f084ab73c0afe4835b8485044826fef33dcdc5938bed45fdeeab99f4f3e8fedc312ce27d16d189e89796619205b9fb8c0640704968e5186f796142b53f505c53f78897b9871fe8d4554e7d8efa41b3bf2e4259edbb6df2e154fbd2db3ed914b979d3dea9f3140d9f0b85997e518a5fc7ca0a6c987b1d8c16a228e338f0ac24a4cee60c7be7b714e65ffa735da0fef0dcde833a515c9a1d29175ea17b8622e3fae", 0xc7}, {&(0x7f0000001440)="6555a95d66ea0ee7eb19fa51a296fac3e86607b9a54c15179439eb622bb7b9566110dcbf735c406c9c8468b068756a53276fac73a1b10b4601df469be4ecdeb5ab1e6bb93442ce0a7c39ce21f9d3dd5e01ce6e5cb7f64b145f1e6cde56e6fbdb531fe0c813ba9b8000d8ebebd59143b64bc30270544dd70f1c7365cf00366b3b36751b7eb12b8d193b5bde9494673e09b7f740c90c4375ee8ff0cecfcd5df28b2a58b0be8141767565d45a0bdd2059944b9c4d810d129f19ca367517502f35615b4ef013fa83207db2640803a33041603f5930cdecd7d6f3ee", 0xd9}], 0x7, 0x0, 0x6, 0x2) 5m25.199685167s ago: executing program 2 (id=1386): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) memfd_create(&(0x7f0000000100)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\xb4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\x9c\x9f\x84\xef\x9c\x1e\xa6U\x98\xf1\aj8\xaaE\xf3|\x86\x7f\xf8\xc6\xd9\xea\x00\an\x82;\x01IX\f\x04\x80\xad\x8cg\x84\x8b\xe2\xef\xa85_\x82\xa0\xd4\xac\xad\x1d?\xb5Z;I\xf0\xfct5O\x90\xdbv\xadT\xe7\xc8\xd9\xe5\x8bM>\xd4\x1evT^\x12\xc7\xdb', 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240003000000000904290202b48cbb0009050402100000fa00090582024000000000"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000900)=ANY=[@ANYBLOB="000106"], 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r4, 0x309, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_disconnect(r2) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x5, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3}) 5m21.046207315s ago: executing program 2 (id=1401): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(0x3) lseek(r3, 0x0, 0x2) r4 = syz_open_dev$loop(&(0x7f0000000b00), 0x8, 0x8000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) waitid(0x1, r5, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) lseek(r4, 0x2, 0x4) fcntl$getown(r4, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r8 = signalfd(r0, &(0x7f0000000000)={[0x100000000]}, 0x8) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008880) 5m19.96288027s ago: executing program 2 (id=1404): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000434000/0x4000)=nil) socket(0x3, 0x2, 0x3c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0x2, @remote}, {0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x4, {[0x2, 0x800003, 0x0, 0x1, 0x50, 0x5]}}, 0x5c) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x200802) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fsopen(&(0x7f00000000c0)='vxfs\x00', 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000040)={@private2, r6}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)}) close_range(r8, 0xffffffffffffffff, 0x0) 5m17.572318178s ago: executing program 2 (id=1412): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb146000) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x49801}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x85}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}]}, 0x58}}, 0x0) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) r11 = userfaultfd(0x80001) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) (async) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5m17.154284925s ago: executing program 33 (id=1412): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb146000) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x49801}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x85}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}]}, 0x58}}, 0x0) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) r11 = userfaultfd(0x80001) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) (async) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m34.860428127s ago: executing program 1 (id=1972): r0 = socket(0xa, 0xa, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x2000, @loopback, 0x2}, 0x1c) r1 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x102, 0x4) sendfile(r0, r2, 0x0, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6a, 0x3c, 0x70, 0x20, 0x4cb, 0x109, 0x911b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x50, 0x0, 0x0, 0x54, 0xcc, 0x29}}]}}]}}, 0x0) syz_usb_connect(0x5, 0x63, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x87, 0x7e, 0x71, 0x20, 0x763, 0x1021, 0x74b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x28, 0xe, 0x0, 0x0, [{{0x9, 0x4, 0xa0, 0x2f, 0x7, 0xff, 0x2d, 0x53, 0x0, [], [{{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x4, 0x51, 0x4}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x8, 0x6, 0x4}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x3}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x2, 0x2, 0x3}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x2, 0x2, 0x7}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x52, 0x8b}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x1}}]}}]}}]}}, &(0x7f0000000080)={0x40, 0x0, 0xfffffffffffffefb, 0x0}) 2m32.860238568s ago: executing program 1 (id=1975): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x13) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060018000100000008000500", @ANYRES32=r1, @ANYRES16], 0x54}}, 0x0) 2m32.780006911s ago: executing program 1 (id=1977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c00028008000140000000020c000180080001400a010101080008400000001005000500020000000500010006"], 0x70}, 0x1, 0x0, 0xffef}, 0x0) 2m32.603626973s ago: executing program 1 (id=1980): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c00"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38000e"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c500", 0x2c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2m32.413771914s ago: executing program 1 (id=1984): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) fchmod(r0, 0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x21) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) getdents64(r2, &(0x7f00000000c0)=""/4096, 0x1000) sendmsg$nl_generic(r2, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048080}, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000000)={0xc5, 0x0, r1}) close(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x20000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2m32.004448722s ago: executing program 1 (id=1986): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) close_range(0xffffffffffffffff, r0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff04, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40448b4}, 0x4000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x8, 0xfffffefc, 0x5}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0x10, 0x33, 0x100, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000280)={@loopback, @empty}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0xff81, 0x3f00, 0x5, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}]}]}, 0x24}}, 0x4000) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES16=r11], 0x1c}}, 0x804) 2m16.674696515s ago: executing program 34 (id=1986): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) close_range(0xffffffffffffffff, r0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff04, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40448b4}, 0x4000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x8, 0xfffffefc, 0x5}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0x10, 0x33, 0x100, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000280)={@loopback, @empty}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0xff81, 0x3f00, 0x5, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}]}]}, 0x24}}, 0x4000) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES16=r11], 0x1c}}, 0x804) 5.534231831s ago: executing program 6 (id=2563): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38000e"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00070088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 5.478780689s ago: executing program 7 (id=2564): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000434000/0x4000)=nil) socket(0x3, 0x2, 0x3c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0x2, @remote}, {0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x4, {[0x2, 0x800003, 0x0, 0x1, 0x50, 0x5]}}, 0x5c) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x200802) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fsopen(&(0x7f00000000c0)='vxfs\x00', 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000040)={@private2, r6}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)}) close_range(r8, 0xffffffffffffffff, 0x0) 5.364161904s ago: executing program 6 (id=2565): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1) close(r0) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000000904000012020e0000052406"], 0x0) 5.153149359s ago: executing program 3 (id=2566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = gettid() alarm(0x100) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) alarm(0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="f0808f0f90ffff000f23bb9a08000000ae0026f30f1ecd67360f2116c4c2a58c07b9800000c00f3235000400000f30260f015c794166baf80cb864b7c083ef66bafc0cb86a2284edef0f2014", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x859) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2036) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)={0x90, 0x0, 0x6, {0x1, 0x0, 0x7fffbfff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r6, r7, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x315080, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000280)={0x50, 0x0, r9, {0x7, 0x2b, 0x4, 0x80001c, 0x5, 0x1000, 0x3c63, 0x2, 0x0, 0x0, 0x10, 0x3ff}}, 0x50) 4.939033196s ago: executing program 3 (id=2567): syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffd, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = eventfd(0x0) writev(r2, &(0x7f0000000780)=[{&(0x7f0000004540)="f15fb7bee276b4b328", 0x9}], 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000240)={0x3, @sdr={0x34343452}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@local}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x6, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff}) write(r4, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c1e0309000800a000", 0x33a) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x775881) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f000001b000/0x4000)=nil, &(0x7f0000851000/0x1000)=nil, &(0x7f0000eed000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f000023d000/0x800000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ee1000/0x1000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f000041c000/0x4000)=nil, &(0x7f0000593000/0x1000)=nil, &(0x7f0000000040)="6825318ed0f84a8ccf6a0ff98478", 0xe, r6}, 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x40, 0x2, 0x7}, 0x2}}, 0x18) syz_emit_ethernet(0x52, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = gettid() timer_create(0x0, &(0x7f00000004c0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000600)="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", &(0x7f0000000440)="5e94bc55639777a6334833a5a68379c8f1cd01570ec0bf1204baf88bed2d25c261f47d1d568dbab1b4f7421237cf3c0e230e324c7c0d324f3a50bddf14c83cbf5e96b2afe188643bc865433d61312316aeb69e89e5595491b2e7955a82dfe1feb97151"}}, &(0x7f0000bbdffc)) wait4(r7, &(0x7f0000000180), 0x40000000, &(0x7f00000001c0)) 4.40026621s ago: executing program 5 (id=2568): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x3}, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x7fffffff}, {{@in=@private=0xa010100, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x200}, {{@in6=@loopback, 0xffffffff, 0x3c}, 0xa, @in=@multicast2, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x3, 0x0, 0x0, 0x8}]}]}, 0x1bc}}, 0x20000000) 4.389638529s ago: executing program 5 (id=2569): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x8004, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x201}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) 4.323817489s ago: executing program 5 (id=2570): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_TRANSMIT(r0, 0xc0386105, 0x0) r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000080)) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x4, 0x103000) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x1, 0x18, 0x3, &(0x7f0000000180)={0x11, "26ec27e864de7d1b22ccf2240533fd46a9735c3ad272b25dd8d9e840cdca4e8000"}}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='s~;\x00\x00e\xcf<\x0e\xa7#\xcd\x03\xe0+`}\xc1\x15[u@\xa8\x99Y0\xef\xf3\xbb\xd5)KP\x15\x98\x1f\xa4\xa2y\xbe\xf8\xc8\xfc>\xd9rIH\\A<\x1f}\xc7\x9f\x00L\x94A\xa5\xbe\xf2W\xd6\xde\'M\xff\x11\x8b\t\x84w\xed\x9b\x7f\xdb\xe4\x9bo\xfc\xdbh0s\xbaB>\bJ$\xcb\xfd?\xd1=\xe9+\x8b\x85\n \xe5\x8b\xd8\xc3\x8c\x9a\xfcX\xf5L\x85\x96\xb59t`O\xe0\x95@\xa7xo\x91\xb6{\x0f\x8f', &(0x7f0000000400)='//\xf2/\x06\b/\\/o/\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$alg(r2, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, 0x0, 0x0, 0x40000}, {0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="35330a99a0f51e39ad6ded28eabdaaff392ec04e377d85c74814111370ae8254fa9c1f4042f56cb706df11f0d830a776616fd87e84cc79e980795e097d159f35ad55506319bee0ce5d9463cb636af02157e61a26dd180436990fec1804874f43e38a8687c37a667c276509ff2a548be1084e50e3a1a2fadb7abca7491aa44a461dbdda9fffebed82bd2c346c1db9d1", 0x8f}, {&(0x7f00000000c0)="9a6ffd5e16be9c9bad78a59acc90292b98938926b6becd292894d84f187cdfbe70667be6028ca92ae3172343f9bbd2b0060e715f1ee507f5fd223f444ef95445f160f47fe8c724d2", 0x48}, {&(0x7f0000000280)="a8ed496fa7e45368be770ca0c9c9d480a1be8a25bab3f5597a143074d8c163a47b190750d5755d707c194e37cae28c771bc13d4b", 0x34}, {&(0x7f00000002c0)="0baa67c52753da82dfcec1a661138f4c98a103a1e779a16720d9a53c066b78b547986d5862f5c5198837b86106c5c9fd0cf991269cedf8ec8658d5018ed7250a50ec9012db9b1c108e1de17a38a102d1a14bcee205d18d", 0x57}, {&(0x7f0000000340)="23a2320f5a49ffebf555a19a502731a45df183d43c9a544b617e452f1d16a8955d6320d4a594496ec7674b215f6b9f3abb0a9fe077b9cbb48d6dc2209578c4f857816f5cb5355f27d8078d5925de6b886041f409fd4e420c9f0841f320e6e15851604a4560ef1b9743606278a62e4d85a5367c5b8954297ef0e552aae3daf000397cc8ccebeef08c1e497e862b6413c0eacb3a6b79cf994175c390c42e1e2be1dd0059ac", 0xa4}], 0x5, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x35fffea442ae036c}, @assoc={0x18, 0x117, 0x4, 0x40b}], 0x30, 0x40014}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="10fec66dfd1f3ac77a68a4a747bf468854ab49433d1164e3933d6fc36c6361c77e74886915f6faf3fae83a84f4153fe70b359971c5006f263e7fc9c406ce381c1aa8f9f0394e261316f616e4fef8def81d3f524f9c3f6ca2fc35b38b2958d91abe615c53c167cd34e1f7a3389a2c48cb0ab87038bf532a3d25fbaeecc3d58f5c12f1b90754d1cfea277daf389aff133c3b0cf5e378afc6a3ff6d96594f32f66a699045ec9ff13ce819c5e93c3b8b2c9f6e1d25e55fda091a018d97e5c4e81f84647e16cb86b33f3c8d8000228974bd91", 0xd0}, {&(0x7f00000005c0)="607414a74aec73a71b03b32c3cca89aad2f5b69bcd1eee74dc5162259db0b05fbb7afd97cf1899d8c3383693fa50e32d8544ecf331f0ce584bd0950de33fb8e21ad5bb97476744317828e97ed0ae0f5e3e9cb82694586bffd268e87d681754e9e6", 0x61}], 0x2, 0x0, 0x0, 0x223b1c4ddbbe1cc6}], 0x3, 0x40800) r6 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r7 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x17, 0x51, 0x29, 0x20, 0x557, 0x2009, 0xc71e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x58, 0x7, 0x2, 0x8a, 0xb5, 0x38, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000100)='\\%)$*:\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) getsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000740)=0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003500)={@ifindex=r9, 0xffffffffffffffff, 0x16, 0x1022}, 0x20) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.120403587s ago: executing program 5 (id=2573): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x40}, 0x1, 0x0, 0x0, 0x20048845}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000018001105010000000a000000000000fbe927088738a416e850380d5ee806000000000c001600010000"], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x0) open(&(0x7f0000000100)='.\x00', 0x741e00, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0205fc090900000027bd7000070000000500060000000e000a004e24fffffffdfc01000000000000000000000000000098850000000000000200010004"], 0x48}, 0x1, 0x400000000000000}, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.014359234s ago: executing program 3 (id=2574): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, 0x0, 0x88842, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) (rerun: 64) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) (async) close(r2) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async) r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) (async) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000001c0)={@local, @broadcast}, 0x0) (async, rerun: 64) openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x802, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) 3.912536296s ago: executing program 7 (id=2575): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38000e"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000788081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3.910099558s ago: executing program 7 (id=2576): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r2], 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) unshare(0x24060400) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x19}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) r10 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r10, 0x9, 0x4) syz_open_procfs(0x0, &(0x7f0000001240)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000140), 0x0) 3.501646544s ago: executing program 0 (id=2577): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f71", 0x81}], 0x1}}], 0x1, 0x20040041) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000700)={r4, 0xffffffffffffffff, 0xe80, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x3}}, 0x1e) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x291, 0x0, 0x1000000000008}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x60, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x200040b4) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x7c, r10, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x3c}}}}, [@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x811}, 0xc812) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000004c0)={0x7, 0x0, [{0x7, 0x1, 0x1, 0xffffffc0, 0x2, 0x9399, 0x8}, {0x40000000, 0xe3, 0x1, 0x4, 0x3, 0x6, 0x4}, {0xb, 0xc89, 0x1, 0x3, 0x22b, 0x8001, 0x8}, {0xa, 0x6, 0x5, 0x9, 0x65, 0x70, 0x5}, {0x80000001, 0xdfa, 0x0, 0x5, 0x1, 0x8, 0x7fff}, {0x40000000, 0x80000000, 0x5, 0xff, 0x401, 0x1, 0x4c3}, {0x80000007, 0x4, 0x5, 0xbf83, 0xfffffff6, 0x1ff, 0x2a}]}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f00000001c0)={0x4, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)}) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.29738026s ago: executing program 3 (id=2578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="00005fbc904edfffffffffffffaaaaaaaaaaaa3ef467c78f2d3e261ae0db79"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x43, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000043a5aa40801b96e3b1a7000000010902120001000000000904"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xb}, {0xd, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1000, 0x1a9, 0x9b, 0x8, 0x4, 0xfbf, 0x1, 0x1, 0x40}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x0, 0x3}, @raw32}], 0x1c) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000012c0)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r5, &(0x7f0000000140)="8265000000000000", 0x5ac) 2.895871051s ago: executing program 7 (id=2579): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="48010000100013070000000000000000fe880000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14142800000000000000000000000000000000330000002001000000000000000000000005000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000200000000000000000000000c001c00", @ANYRES32=r1, @ANYBLOB="060000004c00140073686131"], 0x148}}, 0x0) 2.835153069s ago: executing program 7 (id=2580): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000100), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0xa) socket$inet_tcp(0x2, 0x1, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000779000/0x1000)=nil, 0x3000, 0x3, 0x2}) 2.797231195s ago: executing program 0 (id=2581): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x3}, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x7fffffff}, {{@in=@private=0xa010100, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x200}, {{@in6=@loopback, 0xffffffff, 0x3c}, 0xa, @in=@multicast2, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x3, 0x0, 0x0, 0x8}]}]}, 0x1bc}}, 0x20000000) 2.672115717s ago: executing program 0 (id=2582): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aafffffffe6c000000ffffffff00000000000000000000000000000000000000000000000000000000008000000000000000000000000000000100000000000000fdffffffffffffff04000000000000000000000000000000020000000000000004000000000000000000004000000000000000000000000001000002000000000400000025bd700000000000020000010000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001200726663343130362863636d28646573335f6564652d67656e657269632929000000000000000000000000000000000000000000000000000000000000000000000000000080010000"], 0x184}, 0x1, 0x0, 0x0, 0x44}, 0x4810) r4 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r4, 0x107, 0x1, 0x0, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000240)) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0xc8101, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r5, 0xffffffffffffffff}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffc) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r8, 0x80e85411, &(0x7f0000000340)) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r9, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10001, 0x0) close_range(r2, r6, 0x0) 2.215978171s ago: executing program 6 (id=2583): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x12}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) 2.094440039s ago: executing program 6 (id=2584): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) set_mempolicy(0x2, &(0x7f0000001200)=0x7f, 0xb13) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000008200)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000780)="458536673721281f4d11bbaef277025d5956149afb0c9cf068ee7d7cd58568aaa763936eb4b2e8872cd89334becf2eb617423cf7b2b6d1762fbac3f2f0330b2a0c613f83b57af9da9e91e4a596495f12885a7e759bccfa35ea7713ca4bf9a2f94c1aac13493bb4e959bf715d05bff26bbb59c51a3e3b7452dfd8f60f9d5ba29bb2c4953005ebe2e2112d2eed90ec2ad082f665a0d0bcd7a2711fee61cf45b81e58c1563ab87ef168c6c3052992f589373f309effc015c578d146426f040ba6a498778f2b13ac35e4f8bd1b63", 0xcc}, {&(0x7f0000000940)="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", 0xfe}, {&(0x7f0000000a40)="4d0aaf8c25a48fa45b101677fc1a379cc257a98f915f1052109b8a54acc46efba06d9b6a7809cb45410f901e63bff50c94c280908d822045aabdb9bf54e0be9eb05b21a112bff060017d42d70160da62777c74375dea80f2a6b0ed88eeac01d3fe09e4ce0141a7ea13dfc40e94f775dfe6d6caf215e62b8f982f79136f77d10f12d89e4a60659256858dbb2586cc48f5921b35806ce2116217e02deae5", 0x9d}, {&(0x7f0000000340)}, {&(0x7f0000000b00)="1b6e01a9b06f10161de6b71ddc1fb3d495806a15f0afdc795f72219cf509a053119c6c882b52793cb2fbc6216f932980cb270743760b71bc1dc668faa4e0a740cc30d4d11711385dbf72c39547e057f31284dcb3f3b57b7695a00b677cc7c8edef009e20b3394754bb90ff551161e33bb5770886a0d189fea76427ebb99227f8794c68018172fffd5a9a65e2c6bdf7a854e86a71910946", 0x97}, {&(0x7f00000003c0)="ecf7353c32c141a653faf18cec2dbdcafa855615", 0x14}, {&(0x7f0000000640)="4e48a3e91d1de02f7cffeaf919877d4bfe7350ea8e849779fb0d18b10716d4d6f8bea8007a51d207e369d068bf0bb28d7b069ae4", 0x34}, {&(0x7f0000000bc0)="7e5b5d47078dfa8b4f75bf170d2acafbf6851019806dc9c8513b4d8dbd01fb49570d45452299a8ad30ef2a3335efbf2e72c9288d9b32a6734d59a2971a25b504a843977a1850ccae9710c4192acb3122892e", 0x52}, {&(0x7f0000000680)="3ddd7339bd3b", 0x6}], 0x9, &(0x7f00000010c0)=[@rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [r2, r3, r3, r1, r0, r1, r1, r2, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r2, r2, r2, r3, r2, r2, r3, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r0]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0xf8, 0x20000000}}, {{&(0x7f0000001240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="eecc92cdc0e217de9cb1ecd8607828cd061cb4da0b781966748ea9789db2dc399bf069b25514aec42d2a1e63d4b9a5d25716e1822382b7517dc8f5aecc8c8ed4e12d2c33bdc86c84a0c032b7bc86705ab86a0b790d3c51e4105d3e1d1f610e1e909c8889aec00244324ac02abb259933d3a60aaec3fd2479b3df4500772b252a85f1f52e94bc6d77652c64c80777b976772abcce6dc51c35f7298c15226e75ba84a9965e8169a5a71767e94be213a3a7b6ea", 0xb2}], 0x2, &(0x7f0000002380)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x78, 0x8810}}, {{&(0x7f0000002400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002600)=[{&(0x7f0000002d80)="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", 0x1000}, {&(0x7f0000002480)="b83e8b02687559da0a9b6c446a1bd9d36686f71ce5aaed1e39ac690182ac67da2b210cf43b476b66a5af40bf170adc7e3f3d5edc1087409a1603fedaf8d7fbecf9fcf84407f6bbdd9ce8e3b3d62ef5854562cdbdb8a74d188fb54eaaeac147616c15e53044fa77217d7d82d52c9b23ee", 0x70}, {&(0x7f0000002500)="d4c0c5f3d0b1363a6c342f5f1bd1dbb436e6db31fffd411a60665d7e2223d073e56c9ed3b31509f80856931e135f7b66490149590991958b6b4f3799794b98389599eeea1b1ee4055e487f63a808a3f802e13335829fd41d5d0b82edb47b7b80a80713fae3fb166b236badbc781f6eea6f6a74670329f69879a8deb81d527154b28a6ea81515af09911f37413b029019994a36635ccf86ddc7f3146162cf0b6057a342c9228b7395c8bfbbfd3d23f448ab8f02b01de21d1e8a2769f71507c0f46a5958b88bd1e26a607989e22249c785ee40", 0xd2}, {&(0x7f0000006200)="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", 0x1000}], 0x4, &(0x7f0000002680), 0x0, 0x20000801}}, {{&(0x7f0000002740)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002b00)=[{&(0x7f00000027c0)}, {&(0x7f0000002800)="afdf1a2338cd5cdc051160ab18748bc16bac270779878b44d8f822e9f1fd7d9072e81a391b1af3b7db8ad7606a67471a7eac39875a054b15844c0b63e8a4ccdbee2e88b45e500c90583527d8131b13b1b81f453ecaf2bd0a264474cae164f170b6d4a4a7c8c5692a68a911f58e0610bca1c80d9fb09cbef34e570b42671ec879c09ab529765f1776940a7c59b2ac0e", 0x8f}, {&(0x7f00000028c0)="1505ddd49bac7cdd47781ce9b92d3ed8a55399df72e10203135e2ae4680799e253cc936e1461b118a2b71447f9c6a3e7762536585a3a87472c8d6b86cb2d1fdcaf76e733d2ddaac3d627299d4ffc2c1a91eab8e1acf571981a83b3b5f685584c7e35f6b0b00c0fdf633568f49b4e92cc40d5ea63a89396136c923dd6c970578de6f2f3", 0x83}, {&(0x7f0000002980)="41cf39a40cafd16b7bb2022c1c639dfad3776e83f79f6a9328f9985970e2f94e617baf189ce5388ab96207d1c02824e6a46a9555a43401eca69172de55bfd5dc639ee32a868af0a03289d8461218e32aee6ad76d77c3aa22a36eca791b32622d6467fb98536689ec54c8bc9beef3a84ce0803f0d9e6061badde5b13302806f3a1655d2006a7a2ae8e40df242d9d71a63645865bb", 0x94}, {&(0x7f0000002a40)="cbc6a23fa26b2fe1258b88e617e84eb77a7c7b755a9e4816ef5f22cc9eb619722ec7b25b338b37313984d83164ee23c1b21df2dcff5f7e6649a0c4c2538baf5a55ca1c2dd31fd880f01cb487bd5048f4f46d5a1aab7df6b4dd9611ce33ea3225ac2df5c6abe50d97ce314e1d28ad52448753ee7ba240de8e2866f23da43ec029938f01cd8e309ad18ad904eda536", 0x8e}], 0x5, &(0x7f0000002b80)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30, 0x2404c084}}, {{&(0x7f0000002bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002c40)}, {&(0x7f0000003d80)="8108998e5016a13a092d99ebe328b16a3c50e8659a10830e10c76f3e2de61c7d2be208294bbc3597e140a7d923461fc7db44a06b490868d45949ce9d7e751df90a5843891a25f75c3c64476a6433bd7e9333c87cdbd292a2adc6440131e411fcba7f3633f7bad3fa2be227e73cde3c45dd992e6f70c7b292b982f32f13b2a1b8508dd6c126ae19915765f539c9e37be3f9c894a31afc0440471e16", 0x9b}, {&(0x7f0000003e40)="ae79806364036563d612bc38ec3d1a67428ebd55ae21ec856fdd904222f488a05a2c3e0f9af8e5bec05471edc839a7eb3b5d7e8430d19f018f582759819119941fcaf81b3fb1b3a9733d46ddab276856ab707dc60f4f86aeb66b97313391944b68d5897d16a31818c88d5c4bb96754644c38263a6ba05f113fc521ae972e41875cb356e2e25b44ef", 0x88}, {&(0x7f0000003f00)="74665368b4700c1d5e6ce0705ed518c2d0aa7f479b0acae97fb36be4643aca02bdb1ca36d1dba7e55f20ff250919a0a91ce4867802941e3970197aafde5201ddc41b16019b5e3be59e8c2876d192ee5d903b8ca31249cb11a33b6d11dbf694b7450bd946fc005833cc094c1cc4f62f81b688c1d87ffced11c07befd7a533367accf748c2caac702b9d554103c4e23c5c5dfcae90a6169de38772dbf40c5df0cdacf7aab2d8e94e21ac6ab5a463b4743108fe966c911d610aab79f67d850e262658a89fb9c6e763524c09bb54f4870266adcfe8cca617d4030dc8dcddb74987f570352036cb042024032dde", 0xeb}, {&(0x7f0000007200)="a67632be3bad16943e9bb60481cc0ea402344634ee77430f206522a49707f0a16a34d938b04f06c6bc696ab8fd323dfb32d4e4e1fe48b2915ee7f33d5b5179732408baf97930356d5daf7fee7016c64423cd4308c8af2a6dd06e22d6b38a32ed62c94d0248fd1e198a1eedc8d8e5ab69742e05695fd3c3d9240fb20e857579b050de86e2894f64f50bb17656247113203394c821ecf595fe8f21da3c57c26a48e1fcbecd292cd3c767ef62d14dfcd7bf0d1f8444398dcdebf33611f6e2a3a79e1773c0dc0a5c539139dcf76e9063bef40cda2741c779e77516299f4f94f382c556453db68428683f67c7b74f6e1e2a07433a52eaea4f0f34d42ab12eb5614d95d9c91865bdc190f84330bffc129d7410ef943e6c6527e97312c2cc88a4825b67cc5cb5d84d83960d083ba4d458407b2de748df01a107fb77448378b93face8a8936407757549b1881bdcfe9755731906d070c1214ddd7c6e93971a1f4d82568c65d164714a4f0cddc4b3507e1aa2598cd8d62fa06bfd6e2a36e98bcd3836bac42b44d984b1fadd8dc3a4c31df2eab044b20e9050185b2a0bdb6bd1767b2d8bb3c94f794f99ef89b338003a54eb35146b26a517d5cfc58b0fac067b8a471e8ec51d9d5b10e84cd698fc96727f08be993b565c7f9a23075dacc406e6448a555aed75c362e9194776d586d6a58e263a27b840223d85794fd4d86b051cf85333006763a037017a9065ac185c9c8d23c1bf3e6286c1c21796aadf19f09a74a07552e841f792d4d9f7444a7ebe3cc2052a91828e24055492146afa6054455f284cc87d949417c8ce471fd07b514c5496f7f56f9d049928ac414ed1ac1e09dc4b11f1c07c022efdcf6371ba0a4a9c9ceb5c2658c0ac0553e98d5f2c42e657e8860a44c4c0b20fe0f071c32a93a0a288007632ed990f25d8cc638c3c75b6e21e6e6c5dd54c6c0709804ec888ba5a59428c4272ae800c5841fec45d5a225ad6eedf1e22763573a860d3edde162e99ce536ff38702f42207bae4ab26fba8aea5f7f5826fea1adc3f08e987fc685d3a5d0ab69e758d823ee54fdeae4505f76113fc50908308b4feef66b24c163cc7cdd66af42af20e86e7e5718e487b59e32a537f30ca60d6b12362cc1e6b27e4bb115e2bd85e6a5ec269395a4ec16c5b741d0dd1b687f0e7c8cbdb8a7cfa54d1c117a4b47d53530cb8e77f0217dd7cf4fa2c7f01b6e38cce39b56957e93d3991026c1a1b79bf21e154bb6f9424b8d7847dd6d2411f47c3f2b5768453d7809b6768e7baaf2901382b0ca0b3b0e7ece908ad0b59e135e91fc551a0859b227deca718734e389188722d450d8d55e6fdbc5b20d57aa7c4e2ced77fe57ea2910aa1210d72d9f19139aafb4d6413135d411814ffb967078a2ab7b347cda6b9b5c138e9a06bcb98e2a5c621f8aa2c57631492d8d42fb1d83841513fddfb8d7f3e68627d0532b5ff3165fca9aeccd4bf2b3e5cc24242581d8883ef10ace1f8cdbd65e078f055aa5b3eca06b63330bd85d37c17eceba255e880334ce022245252a1c496f33219ac340cdd403009065154d951d2bfd7de10f7e77ebab7adefe8f9927d89955097baa3c37521ef55fa7880ee931c52819ce1bb91cba763d8e68f488b69025643ba98d86bb0ca5117baca1668417afbbbae46e3fbf17ecdc0246881f807bc645af960f0d92a59bdc9ebc831dc704f99c6215099498348ef30740b5cb958b8c6a5bc716503eb3b8f848539682ff037e408645b5ffbd5fd6bae5c440485216bacb5a142687dbc1850c26ca6731d41feaea082893a043f7b138e00b3ada62c9c4d322d713d1aaaf0d24c353c8c439cc284d8dc20951d54db311c562da7ac0a548a5b1096c8101086e332b39cdc78e4618827954d9fdeadb520937239a70ccfe5752648ac0b87f6c0ce1e07743101e6ca8d544515fdc48fe6f42ff96c03a1f08d998dad480521da8d409e936177420ed76cbfa317eb6d234cd312b7c697ec1578d863e0c8b919fb2a6acc1141de09f8c47773508b4e5f5b97921df2444710bc133b136062c4364ffe37b44026805f75fbb791dafb16d466f993723243b16e15025105e03dca586b649caa9f082f1590dd369d78fe90acc7def00508d910e8cb57a0cbc313846134010a0c610d2cf06e2a19b70e8377519d8169f14808c9f009e81621eeba1bc2776cc1211b569aab6287bc22acd43620e98270b8cbd8cd97e4bdcff7b1cdb2cec850299630698ae8c41e5443c31821f2c8c3cdb1d96c519eb1cd01f3f32e2f45a5cfaecbc0ca9dbc9fa8b9a5d821e44dd9369ec9ac86b39a6464d0c00a444762c13994c103b89842fdb2d0dce6cbd18810ea392297611fdd2287c7c26aff55b673da8004d03d9a130402637ab9c948ec66dc4d8f1f64e3a3a0ecf6902085972c9f8ba1986e471e99e37cea1923574a43f006ab279d39b9fee80a4b4f4b7dbe8cf6554e8eebb331458b6883ede69cce9500cf3d823ae8949817e620f0365069417619f6abd01e415262c6134e12a60f76e001c22f75e30534acd2841318ff5da1aa5a4a54ba7ae43a40a2ae387188049e0a679d352c780ff363292d799412d8225c7906f6f23308becec9c6345310c988cc34fe86db34efac5470d3f6852b96dd0a19863a584c89929c5f6e847d2d326fc0b85dae7f6e70c959ecdbe717153c8f3dab82d30638ca4f5de93cace09f629b3ef256ebeeab64a296880ee073aedce10ff41decbe73d9033eabae5d0f09dd036b946df23d78496af87929ab26c4503fad34fb54035066ca6d2e403ca61d49271294ba9a0572e80e277c0a9862287925d031a43e88157bc7d555caef6637eae2d9c9670655829f47bd63cc64b6a0b6cac06a9c4ec419f28d5d8f5a717c85b0c4d80937e9f0182ffd659dda73b1d6dc5e7417b60256f5437a2f63635e0e2ed3c39b3ecd7d986be8fa3c91a78f753be07003a7113d3e5c8d9fd199c6a57724bfa0004d7e0fcf031bd3156f958948d771fe8ad7405f9308255dd66e28e279fc7c335f740ace42213d937bb3815c3e98f0a9dc82d978041a19d351160e88bb4d362511ad644eacd4cfaf0d2de1ed7a936e2bec68888655799329c1ebcbd1f994a1a5a5dca5f6590f128bd1409fa18b3f4f82d219602ebcda34e812b21e01cd0b1229754bfea7dbb6ebca2e3eee4b81ed800a60a755be529eb4e6c1f759f06433b18a0f09533c9fa7f29e4e9c1734eebced5ebc59ce3843ef95a34921de852dfe8d1ca70dfabbb3a7bc9279531f7bf614b150507aa2a5300eb2127950b7fdcafb1acd641f3e533c10f32b847bb2afdbcdbbc918eaccb830c9b17463c07f8e2b44d1e13f402a4c25d3f4a586f18afdf5e16536baf6f84f2d10557e9a28bda72f584d51ff4d07b543993cd1305b8140e2d79e278da9c9c448275b7d362aebf3e44236fb1079b705f1140d7dfc7e8fa29a946f939f18a35781b4929e78d36134fe441b3a5feaee63bb4425e89a95e151fc8f72acbe2b17fd43e3a2aeeb3fc41ccfbdae103b2fc8df9c2ca48dd5ed993617099a4fd5f81f05e0a50648b36aebcfebe489bffdb7934469b7414b6ecfd8cd9e4014c07e2df612af79ab3149fdf9273dcbc059f32a4b0bb08d598e1d72cd054a7d3d3a50a262fd0c19712ac1ba8fc699403bc4e40b14a818181dd98f83e81a264320eafe095ec668b8d8c9814f6a19e6c6af949380f0213ad0106fd72f24352ee20e924cdb8fee6617605134e1630682a6a53e40f1e0e9685d0dbb1c749b6e7e0cb6c169b64f5dab86136c3593ba906fb59a39655a2761303121970fdeb9612fc5b33aa222b6f6627fb3de16c32407c75a3570e01e27735a9d87a80e0d5ca90b7043a511a04a826be0a2fc56c3785b4d79c2d120c9fa591f80771d626d9b03b4c0678a9214a8cdf9b5fff5a3e37554834d2facfd3946cbd9b055137594586662590f7527863ee8bdfde102363aa1d1623fe5ba9d24245022c1057c72e99f85678d4e9273535808e6e4766b403c739a105ca6b3864f4a3eb4f7e39f69af0510b4194b9c6c3ac96746ccffded1e9744c4dd7cd30f45245fd6e5b572765998358d5d4246ced61b83310d0735a90b6b45134bbfeb5a04697429523aad9a5545c591a33f6f6b9e29610f81a70870bd372666a98da1be1a7098c6e9fb298e7e842955d2a7fb3243113582ae2a585588e6ce5a501a7f27acc6fdcc956243ad0a0c019e82d90ef67d96d5583b01b22d0cbb58c0159c242f218558d1ba8b2d258d8045a32eca0507bea8e43817afead474e608046ebbb78034a1a9ae10732fc7333860fe9f3e1cec4a191c8806c4fcde6d6c956aa7e936e5f16eaf92de3e57b98178b9e61d4eca4e6b4226734c470f0bb36056e42159d89c23c33f4348b724b58d9728aa3abac7baba5542be4bb3f970a547ff1f43ed94853ff7e331f87176daeaab6128d62974c5eea65f577198da1245fc1c123962d1896386d68c1695f90cd5dbbfece71f64f580344a35c074d6b93351bf59a55f8da01cd8aae2915f4000bf4ed98aa8b82d8253f6e7245466834e75201295c0dbe133414534e283b517db47cc39bc7b493f3cd0abbd5f329a8591b33a742bf8e6cd0e047c2d5b2916b37966c3a3399b81b2bf9427601142f14e76612687310cc2606aba24bbf75a3120d8b01af8f46f9255e9bba407c1995e649c0973a4e6a1e64c2eceb14eb6608145ddb4380d4c7ed24a50eaa9956dacfdf3c3e1073d91724a60c6ee00e41e8abe1d25d5739b92faaa02f9e6b092caa3480162ece2ef6d8d357a9b5f2712ddb39ceb42c63bae24a04b401cf91e73b31008a4da74f7c1852731c3570823a87b77c95ff8ac3e4284e7228a16bef41544d37d5a0cd40f8cc5b75257c9ea341f99a40a7b71b9946cf0fe5f26415cb35d17b28f4c5e97f413b7077bc762b6b3ddcce9c6dcecd6baad7fd8179ac74ec48631f9c96e23368cdf756c56a3439654c51f99e024eae788dc176b68425b27758baef2319770b08d2a5cb73d4fcd302cfe4a0c7c8fcd0a9a8c69e8f804a38befb76a21b286a9bf7e65590edeba02b0a9609d33dd0b6ea80b1237cfa0dcb9b5a41989b812ae52890cf822e8a3017be6437b4fe8ca13814426aa5c5b87421f6fd248fbce6582921bed880a5ea22a479b806eb34dd31f449b5de18e9b9a11c4b46bbf19a2a07b58bf5b96560de731317b98b141e177b226532eddded3e1702e993e96f4b286c50368f32273eebfbebdd9fe375dfc0822e7a3fcb9c7707f0d021f2ce25b4dad7b20b9a8a3b0de82e466393fe54599295a36fa092ce9d08c41a619060b4f55b3d912e8e2cce6e2b990fe4e25509cd7e2d6340ee679c694c15c2377e08a858470a9683c96d27176e9086f33d2681d0e423246bf9a17d314e4cfa3c4175142b09fbb04ed2d204d35da2b45f8b0d23b2f398dce65f92ae0924e0b9aae6e08a327c97ebea91c371b1e8cbee135e2ff32907b9c15163c3693b49b5295934654ce41274074a7db67b72ecbe20c442bc9932cef4e42ad04d1e79cb49bd5eb9351f801a26f18b840348374e7c8e085f3121f9ae87e2f80cca8153848382bdb00f65e4fe53ba33d80c0501934b86e3f7d4d21a2dfbcaa8704961d1de1b9957e6cb8eaa5fd6b0fca835a36fcfb0a6c39320a95f828f0415c57dd43fc1e9fdd74acf2f54e3e03df3ebb9e541ba3d359c9c1718308b5bc75512b67b4197cc05ff2637a340a31ffaa338bbc2118ec9b3657877a3e800fe2530c9987d0d09d2a551280ea1a9c5a90ca4ac3411f4edc57765791d", 0x1000}, {&(0x7f0000004000)="d7c91bf9aad0854d0917a1a7ee2cc048d6cc45b457e97474581a1ef737d92935cb456478533a27360e7e656b191f17427ec5ca24098fdc1046892c29190614ac0f44b0f243550af236f6debfb85eb45a3990db1125de0c646b74c8f5c3095d51d010723da88042451a18e849f8cda32493b073c88ff80b839c41e6f5650df2863668fd9e7ed1bd76b54283078691b973561c8880f0ee4cf4", 0x98}], 0x6, 0x0, 0x0, 0x4}}], 0x5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x10, 0x0, 0x9, 0x8, 0xfffffe0000000001, 0xfa11, 0xffefffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000800e0003006269746d61703a697000000005000400000000000900020073797a30000000000140ffffffff0c0001800800014080ffffff0500140002000000050005000200000005000100060000006744bf015f66af53c9bea42a79bb96d8d53867bd39b29997b2fa6c492ee927d6ed6f82677b63e3832c06000000cb1d214bbf0b18ac08bf27f9ea11b971d414bf00"/172], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x40008d4) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d0182da772f17ad4178f2a23c115f1e6450865a9eb53604c795d1febf02bd35bb1369296594bd997e7ab532e1fed2ee31d50d0276627d24d4b7270e95ee3b787247c892dfab7b9b66"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000000)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_setup(0x5, &(0x7f0000000e80)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) syz_io_uring_setup(0x4, &(0x7f0000000580), &(0x7f0000000080), 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 2.004515915s ago: executing program 3 (id=2585): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e20, @local}], 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r2, 0x7504}, 0x8) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000200)={r3, 0x7}, 0x8) (async) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$KDGKBMETA(r5, 0x4b62, &(0x7f0000000240)) r6 = socket(0x26, 0x4, 0x2) (async) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x2) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) r9 = syz_open_procfs(r8, &(0x7f0000000340)='net/ip6_tables_targets\x00') syz_genetlink_get_family_id$smc(&(0x7f0000000380), r6) (async) syz_io_uring_setup(0x4c39, &(0x7f00000003c0)={0x0, 0x4aec, 0x80, 0x0, 0x126, 0x0, r9}, &(0x7f0000000440), &(0x7f0000000480)) (async) sendmsg$inet(r4, &(0x7f00000008c0)={&(0x7f00000004c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000500)="7949314b7e8d480629ad0b3ed207c1869496bbc99083a20fd88b524429ecf18f481b3aeb96cc4170f04e6e602421abd7274f8fcf4f218f9305ce86d690028b3599859e22da4359a249ee97ae62c1eb4a4816e5fe05c8", 0x56}, {&(0x7f0000000580)="71b11fad7ee773a1a4", 0x9}, {&(0x7f00000005c0)="f2d50aac434146ccc2ede6afc5eaa195a93b867e099326c91c6fd946ad6889f2ebc55a46bae0405a94622cfc7bed9a3f2cc2eff23b9ec416b535cab6ccb1476d320849602870acc60a68eb9c75d45f231f6757ad1126ed60617cecc0c20188bb28d790c124508258d4e07279b76b95a195fc205032cc39986b7d30bee5a981065e27ece41c7c829b14a530ee8e79477b521f57faa71359e9c6ff265476e4595d6ff2538d7efa4d9eac6923fb7800c24113c5b2e575564abf0c740884280f48635be190ab4452d0800bee67e2adfef018fa022d4b782fa2991b6f114ba8fea5a8d9c431527e95edf5", 0xe8}, {&(0x7f00000006c0)="ac56d82c6ddd6cdd3f52cebfaa3c33226845698b41671cb8bf6d6ea733ce849b6b11041b4aa50bd8c0e43db3665dc73d88350896722064f652593e4d9544a2f124398f28705e770b4b52a3dc79f363ace749987729f343b2562ccf397aba7ec518e9b394dde70de6a6d218213f94149f6ac8976ec96ba7c5764966d9d1c55a7212e8dac4bf2a3a36f5101c397b1b1f17ef2bf2de7f7c3d1e31c15fac5ca24aa93cfa55de55ebd49cc1cf52db73d0a1a0dda778c3dab84a", 0xb7}, {&(0x7f0000000780)="4e881fda3eaa2cc5ddfbbb234f12a81202c9b6ae1bba656140128412e65fd2147dac814dd840beabb2205163a5ef80f35c3e5b7e4a80f855557208694a52dff6e4fbef2d4b68a29017cd4deb4071f8b46c39b002cada01dda156bab5e4968b4b91a1c66bc2c7b9240efa0fe477f54311b29794255ecdb6a5fc9ae88b15fb262e4462d51134ee8c170457b801b46ac5d82fcf50", 0x93}], 0x5}, 0x1000) writev(r6, &(0x7f0000000b80)=[{&(0x7f0000000900)="6ee64c23074b7cb8622d1f6ad4809c87b2f1b929e819e5e32c7ac464556a2c1804f126cf097030f6419ea0207b71cdb0858580f0d55077cede471b92ddc6310a", 0x40}, {&(0x7f0000000940)="5acf857662916d0175ee41c2105e3434c5327b19e6dbbb3d16b2079ce3420ff74b1e81afea9bc7fe6c2d4e992392b311", 0x30}, {&(0x7f0000000980)="5a9e96219572d1f7e1a8813337919e4d1517ff7e9725672db87f7950890cfd76f75301ae390e719dd1c528c144f9f34fcdc2ee54a0de87ea743c3f3ecef0f3020be51926c653019fe3697f68c90ce29550ae3a7347f0c86d7155f174223996e232a3828d407bb4961495eab9617455d1dd7d45237f968abdad317c3306e95ac52443b0d825924fefc946d8a74013c9a2ab43d287", 0x94}, {&(0x7f0000000a40)="5889055d26a6ba92af7f4b3cfd99306ef0ca41938ab29e679c7f42ab6a02fa6cebdc4d7cfb447f0e57057498", 0x2c}, {&(0x7f0000000a80)="afa4e12b2791d0d394b2ca6a328b2f652b55ef254df4c25c29080030e05785eb29831fa91d44db07de53baadfb7a2606ad20d0078b078641b1f85374440ed9e647f20ec35dc8a82153321075bdad11c164af765de5a064f8f04ba9b862a8bb917a4582a4531511585fd8eac8f4a18ce1873578890f61bad8487b6fa800988066bb82a5988c51e7e0f2bdb9b901d48b28931424f650df3add898e179e867b31f3a3e9bfd5fbe1f51696d43db0ed038596d0279f7edf3d99575951c00bc9adc610ae580a9871ed2cbb559376260e8bda0334a6a97f2a6f328ba46a", 0xda}], 0x5) r10 = fsmount(r9, 0x5977d7aa01f4e0aa, 0x89) (async) r11 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) setsockopt$inet6_group_source_req(r9, 0x29, 0x2f, &(0x7f0000000c80)={0xfffffd33, {{0xa, 0x4e20, 0x0, @loopback, 0xffffffff}}, {{0xa, 0x4e24, 0x101, @empty, 0x9}}}, 0x108) (async) sendmsg$inet6(r1, &(0x7f0000001280)={&(0x7f0000000dc0)={0xa, 0x4e24, 0x6, @empty, 0x9}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000e00)="3d56e0d888db43d378bec58432b73ee82318ba9907acd859f7650b6fff05adb454a6374b9d87e0754d5b4fda96465c2074bca52a8870d92b9fa6161c1ea099205c68382584edf28d8d273e5f2612f734a1ecc74024378ca72713ae5f698c4dfa23954ad73fde20be60798f4cd5dedba3171029e8f47b1421f418a38a4d8a0938727c5ae29f8b009a9fcdc632ea8468d5419ec30fb80306b2c046b6b5f73081d7acf51f1108d01be2d22158ff1466f9750160e8526cfb54567ede23b74ed07b5436cff284b254aa7927f2fd61f730304936079e", 0xd3}], 0x1, &(0x7f0000000f40)=[@dstopts={{0xc8, 0x29, 0x37, {0x3c, 0x15, '\x00', [@pad1, @ra={0x5, 0x2, 0x6}, @pad1, @calipso={0x7, 0x40, {0x3, 0xe, 0x8, 0x4, [0x7, 0x8001, 0x2, 0x3, 0x7, 0x7, 0x2]}}, @ra={0x5, 0x2, 0x10}, @enc_lim={0x4, 0x1, 0xe}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0x5, [0x9, 0x5, 0x4, 0x945, 0x1, 0x0]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0xa, 0x1000, [0x100000001, 0x4]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}, @dontfrag={{0x14}}, @tclass={{0x14}}, @dstopts={{0xc0, 0x29, 0x37, {0x2c, 0x14, '\x00', [@generic={0x1, 0x93, "9f1ebc402ef3f748783bd7b621d5d850bacab781548f75bf7d00a80f5c5772cb10647b07ded9e245670d3ec426af58f930e3d9179a9f1e818a5885f8a0bebf95e4bef819d1a2bda44c45ef6ac1d4bdcc9c0615365c39228c5e2d0d2e589fd1317d7b4745b8100a2b299c9159dec28ede445a715bf7f709e56cb1b0cd85ea826bdc11c8e8ec35d9d5c7a2c3571acbfde2f68d54"}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x0, 0x80, 0x0, [@loopback]}}}, @rthdrdstopts={{0x140, 0x29, 0x37, {0x15, 0x24, '\x00', [@generic={0x4, 0x9c, "b840c2ffc8d2107d6edd8183593683d844297bb1c5893dda4f972af0bc4567c304d5d256766d213f144c8d849d76d706c0239f961e39c6f511aa351ee6ac6c38e979fcfca44a4fb0bebf55618a5c2f6efd29c943affd16afe1dcafb6f67c3cffa13735b6836b212a79f0c802026f2c1ca6ec5e828728e84605c2b4bab2af48697ed4991a95d7621f32490251431f1787ecd0ef0460a284fe878b7e0c"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x5, 0x6, [0x0, 0x7fffffffffffffff, 0x7, 0xc, 0x2, 0xfffffffffffffffb, 0x2]}}, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x340}, 0x4004040) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001300), r10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001340)={0x188, r12, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x90}, {0xc, 0x90, 0xa}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x400}, {0xc, 0x90, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x1268}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5b}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7fff}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x58e7e4599a38d25f}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x4}}]}, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x4008001) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x2d) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000001580), 0x101400, 0x0) 1.739854185s ago: executing program 3 (id=2586): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000434000/0x4000)=nil) socket(0x3, 0x2, 0x3c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0x2, @remote}, {0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x4, {[0x2, 0x800003, 0x0, 0x1, 0x50, 0x5]}}, 0x5c) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x200802) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fsopen(&(0x7f00000000c0)='vxfs\x00', 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000040)={@private2, r6}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)}) close_range(r8, 0xffffffffffffffff, 0x0) 1.055811607s ago: executing program 6 (id=2587): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000524500", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 712.579966ms ago: executing program 5 (id=2588): socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000240)={0x11, 0x2, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x1) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r6 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r9 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r9, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 668.190653ms ago: executing program 6 (id=2589): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r2], 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) unshare(0x24060400) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) r10 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r10, 0x9, 0x4) syz_open_procfs(0x0, &(0x7f0000001240)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000140), 0x0) 647.624432ms ago: executing program 0 (id=2590): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}]}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) (async) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}]}}}]}, 0x38}}, 0x0) (async) 637.940865ms ago: executing program 7 (id=2591): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="48010000100013070000000000000000fe880000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14142800000000000000000000000000000000330000002001000000000000000000000020000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000200000000000000000000000c001c00", @ANYRES32=r1, @ANYBLOB="060000004c00140073686131"], 0x148}}, 0x0) 0s ago: executing program 0 (id=2592): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', 0x0}) fsopen(&(0x7f0000000000)='jfs\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x90740, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x6000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r6 = gettid() sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) rt_sigqueueinfo(r6, 0x21, &(0x7f0000000100)={0x1f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) kernel console output (not intermixed with test programs): 13731] syzkaller1: entered allmulticast mode [ 651.532484][ T5914] usb 2-1: USB disconnect, device number 94 [ 651.582979][ T5915] usb 7-1: Using ep0 maxpacket: 16 [ 651.617751][ T5915] usb 7-1: config 0 has no interfaces? [ 651.659120][ T5915] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 651.707944][ T5915] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 651.762153][ T5915] usb 7-1: Manufacturer: syz [ 651.804910][ T5915] usb 7-1: config 0 descriptor?? [ 651.944024][T11789] cxacru 6-1:251.202: cxacru_bind: interface has incorrect endpoints [ 651.955784][T11789] cxacru 6-1:251.202: usbatm_usb_probe: bind failed: -19! [ 651.990036][T11789] usb 6-1: USB disconnect, device number 63 [ 652.093470][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1975'. [ 652.119444][T13738] bridge0: entered promiscuous mode [ 652.149170][T13740] loop5: detected capacity change from 0 to 7 [ 652.162946][T13740] Dev loop5: unable to read RDB block 7 [ 652.172445][T13740] loop5: unable to read partition table [ 652.186429][T13740] loop5: partition table beyond EOD, truncated [ 652.200944][T13740] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 652.537437][T13751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.567111][T13751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.616862][T13751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.664070][T13751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.215534][T13770] usb 1-1: USB disconnect, device number 22 [ 653.584604][T13776] loop5: detected capacity change from 0 to 7 [ 653.591537][T13776] Dev loop5: unable to read RDB block 7 [ 653.602357][T13776] loop5: unable to read partition table [ 653.608760][T13776] loop5: partition table beyond EOD, truncated [ 653.633890][T13776] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 654.008236][ T5914] usb 7-1: USB disconnect, device number 42 [ 654.052234][ T5915] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 654.235778][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 654.256351][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short [ 654.281458][ T5915] usb 4-1: config 5 has an invalid interface number: 40 but max is 0 [ 654.324496][ T5915] usb 4-1: config 5 has no interface number 0 [ 654.362593][ T5915] usb 4-1: config 5 interface 40 has no altsetting 0 [ 654.384572][ T5915] usb 4-1: New USB device found, idVendor=0421, idProduct=3948, bcdDevice= 0.a8 [ 654.407567][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.416569][ T5915] usb 4-1: Product: syz [ 654.421286][ T5915] usb 4-1: Manufacturer: syz [ 654.426652][ T5915] usb 4-1: SerialNumber: syz [ 654.427183][T13787] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1993'. [ 654.462218][T13790] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1993'. [ 654.763676][ T5915] cdc_phonet 4-1:5.40: probe with driver cdc_phonet failed with error -22 [ 654.801373][ T5915] usb 4-1: USB disconnect, device number 125 [ 654.884338][T13803] xt_hashlimit: size too large, truncated to 1048576 [ 654.936509][T13805] syzkaller1: entered promiscuous mode [ 654.964086][T13805] syzkaller1: entered allmulticast mode [ 655.012137][ T5914] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 655.163629][ T5914] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.174063][ T5914] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 655.189636][ T5914] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 655.199770][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 655.208760][ T5914] usb 7-1: SerialNumber: syz [ 655.219857][ T5914] cdc_mbim 7-1:1.0: MBIM functional descriptor missing [ 655.229423][ T5914] cdc_mbim 7-1:1.0: bind() failure [ 655.360091][T13807] loop5: detected capacity change from 0 to 7 [ 655.368936][T13807] Dev loop5: unable to read RDB block 7 [ 655.375173][T13807] loop5: unable to read partition table [ 655.381086][T13807] loop5: partition table beyond EOD, truncated [ 655.391363][T13807] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 655.434515][T11789] usb 7-1: USB disconnect, device number 43 [ 655.554083][T13811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.566040][T13811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.833395][T13822] netlink: 'syz.3.2002': attribute type 4 has an invalid length. [ 656.358970][ T5915] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 656.632658][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 656.644357][ T5915] usb 4-1: config 0 has no interfaces? [ 656.653671][ T5915] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 656.669170][ T5915] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 656.679309][ T5915] usb 4-1: Manufacturer: syz [ 656.695313][ T5915] usb 4-1: config 0 descriptor?? [ 658.219948][T13842] FAULT_INJECTION: forcing a failure. [ 658.219948][T13842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.236618][T13842] CPU: 0 UID: 0 PID: 13842 Comm: syz.6.2007 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.236647][T13842] Tainted: [L]=SOFTLOCKUP [ 658.236654][T13842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 658.236665][T13842] Call Trace: [ 658.236672][T13842] [ 658.236680][T13842] dump_stack_lvl+0xe8/0x150 [ 658.236708][T13842] should_fail_ex+0x414/0x560 [ 658.236739][T13842] _copy_from_user+0x2d/0xb0 [ 658.236763][T13842] do_sock_getsockopt+0x15c/0x3d0 [ 658.236787][T13842] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 658.236809][T13842] ? __fget_files+0x3a0/0x420 [ 658.236831][T13842] ? __fget_files+0x2a/0x420 [ 658.236865][T13842] __x64_sys_getsockopt+0x1a5/0x250 [ 658.236896][T13842] do_syscall_64+0xec/0xf80 [ 658.236917][T13842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.236936][T13842] ? trace_irq_disable+0x37/0x100 [ 658.236958][T13842] ? clear_bhb_loop+0x60/0xb0 [ 658.236980][T13842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.236997][T13842] RIP: 0033:0x7f7a21b8f749 [ 658.237013][T13842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.237030][T13842] RSP: 002b:00007f7a22b14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 658.237050][T13842] RAX: ffffffffffffffda RBX: 00007f7a21de5fa0 RCX: 00007f7a21b8f749 [ 658.237065][T13842] RDX: 0000000000002720 RSI: 0000200000000114 RDI: 0000000000000003 [ 658.237076][T13842] RBP: 00007f7a22b14090 R08: 0000200000000000 R09: 0000000000000000 [ 658.237089][T13842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.237100][T13842] R13: 00007f7a21de6038 R14: 00007f7a21de5fa0 R15: 00007f7a21f0fa28 [ 658.237129][T13842] [ 658.906295][ T5914] usb 4-1: USB disconnect, device number 126 [ 659.022537][T13854] loop5: detected capacity change from 0 to 7 [ 659.029741][T13854] Dev loop5: unable to read RDB block 7 [ 659.049472][T13854] loop5: unable to read partition table [ 659.080121][T13854] loop5: partition table beyond EOD, truncated [ 659.110753][T13854] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 659.632927][ T5915] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 659.810729][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.825921][ T5915] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 659.850731][ T5915] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 659.861228][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 659.869760][ T5915] usb 4-1: SerialNumber: syz [ 659.892507][ T5915] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 659.967027][ T5915] cdc_mbim 4-1:1.0: bind() failure [ 660.242425][T11789] usb 4-1: USB disconnect, device number 127 [ 660.372399][ T5915] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 660.533376][ T5915] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 660.553222][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.653455][ T5915] usb 6-1: config 0 descriptor?? [ 660.670260][ T5915] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 660.691828][ T5915] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 660.903031][ T5914] usb 6-1: USB disconnect, device number 64 [ 660.933814][T13899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.945152][T13899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.965049][T13902] binder: 13901:13902 ioctl c00c6211 ffffffffffffffff returned -14 [ 661.292368][ T5914] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 661.456442][ T5914] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 661.472686][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.579061][ T5914] usb 4-1: Product: syz [ 661.591194][ T5914] usb 4-1: Manufacturer: syz [ 661.606497][ T5914] usb 4-1: SerialNumber: syz [ 661.629835][ T5914] r8152-cfgselector 4-1: Unknown version 0x0000 [ 661.737963][T13922] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2032'. [ 661.815684][ T5914] r8152-cfgselector 4-1: config 0 descriptor?? [ 662.631172][ T5914] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 663.050756][T13932] bridge0: port 3(syz_tun) entered blocking state [ 663.069800][T13932] bridge0: port 3(syz_tun) entered disabled state [ 663.090698][T13932] syz_tun: entered allmulticast mode [ 663.107051][T13932] syz_tun: entered promiscuous mode [ 663.119853][T13932] bridge0: port 3(syz_tun) entered blocking state [ 663.126858][T13932] bridge0: port 3(syz_tun) entered forwarding state [ 663.422188][ T5915] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 663.676035][ T5915] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 663.685078][ T5915] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 663.705199][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 663.718877][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 663.753880][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 663.818808][ T5915] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 663.836020][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 663.868813][ T5915] usb 4-1: Product: syz [ 663.902421][ T5915] usb 4-1: Manufacturer: syz [ 663.965055][ T5915] cdc_wdm 4-1:1.0: skipping garbage [ 663.987096][ T5915] cdc_wdm 4-1:1.0: skipping garbage [ 664.018634][ T5915] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 664.035210][ T5915] cdc_wdm 4-1:1.0: Unknown control protocol [ 664.287571][ T5915] usb 4-1: USB disconnect, device number 3 [ 664.368560][T13951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.398260][T13951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.666767][T13959] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2046'. [ 664.772230][ T5915] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 665.094074][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 665.128730][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 665.158963][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 665.170841][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 665.189415][ T5915] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 665.204435][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.309759][ T5915] usb 6-1: config 0 descriptor?? [ 665.361577][T13965] netlink: 774 bytes leftover after parsing attributes in process `syz.0.2049'. [ 665.593815][T13975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.623732][T13978] blktrace: Concurrent blktraces are not allowed on loop1 [ 665.635343][T13975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.789694][ T5915] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 666.307392][T13992] QAT: Stopping all acceleration devices. [ 666.372075][ T5919] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 666.380457][T13993] netlink: 'syz.3.2057': attribute type 10 has an invalid length. [ 666.388877][T13993] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 666.400020][T13993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.544079][ T5919] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.554623][ T5919] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 666.576205][ T5919] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 666.586046][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 666.594828][ T5919] usb 7-1: SerialNumber: syz [ 666.607359][ T5919] cdc_mbim 7-1:1.0: MBIM functional descriptor missing [ 666.621276][ T5919] cdc_mbim 7-1:1.0: bind() failure [ 667.392597][ T5915] usb 6-1: reset high-speed USB device number 65 using dummy_hcd [ 667.515397][T14008] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2062'. [ 667.532014][ T5915] usb 6-1: device descriptor read/64, error -71 [ 667.812282][ T5915] usb 6-1: reset high-speed USB device number 65 using dummy_hcd [ 667.952051][ T5915] usb 6-1: device descriptor read/64, error -71 [ 668.202200][ T5915] usb 6-1: reset high-speed USB device number 65 using dummy_hcd [ 668.222654][ T5915] usb 6-1: device descriptor read/8, error -71 [ 668.462228][ T5915] usb 6-1: reset high-speed USB device number 65 using dummy_hcd [ 668.492816][ T5915] usb 6-1: device descriptor read/8, error -71 [ 668.633242][ T5919] usb 6-1: USB disconnect, device number 65 [ 668.745515][T14021] bridge0: entered promiscuous mode [ 668.803591][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 668.816716][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 668.838061][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 668.846423][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 668.855407][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 669.073966][ T5919] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 669.112921][ T5915] usb 7-1: USB disconnect, device number 44 [ 669.296806][ T5919] usb 6-1: device descriptor read/64, error -71 [ 669.713624][ T5919] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 669.852109][ T5919] usb 6-1: device descriptor read/64, error -71 [ 670.001819][T14025] chnl_net:caif_netlink_parms(): no params data found [ 670.004976][ T5919] usb usb6-port1: attempt power cycle [ 670.538833][T14052] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2071'. [ 670.642991][T14025] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.662560][T14025] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.785893][T14025] bridge_slave_0: entered allmulticast mode [ 670.803736][T14025] bridge_slave_0: entered promiscuous mode [ 670.814692][T14025] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.872138][T14025] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.880535][T14025] bridge_slave_1: entered allmulticast mode [ 670.899149][T14025] bridge_slave_1: entered promiscuous mode [ 670.920002][ T52] Bluetooth: hci5: command tx timeout [ 671.099426][T14025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.119144][T14025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.233301][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 671.582124][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 671.592980][ T43] usb 4-1: config 0 has no interfaces? [ 671.608576][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 671.621244][ T43] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 671.695988][ T43] usb 4-1: Manufacturer: syz [ 671.714599][T14025] team0: Port device team_slave_0 added [ 671.733439][ T43] usb 4-1: config 0 descriptor?? [ 671.757422][T14025] team0: Port device team_slave_1 added [ 671.870349][T14061] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2072'. [ 672.187161][T14025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.227384][T14025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.301980][T14025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.486733][T14025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.552132][T14025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.822968][T14025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.938609][T14025] hsr_slave_0: entered promiscuous mode [ 672.959947][T14069] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2073'. [ 672.983201][T14025] hsr_slave_1: entered promiscuous mode [ 673.000534][T14025] debugfs: 'hsr0' already exists in 'hsr' [ 673.009938][T14071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.009980][ T52] Bluetooth: hci5: command tx timeout [ 673.026507][T14025] Cannot create hsr debugfs directory [ 673.042209][T14071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.651655][ T5914] usb 4-1: USB disconnect, device number 4 [ 674.047110][T14025] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 674.198992][T14025] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 674.219336][T14081] netlink: 774 bytes leftover after parsing attributes in process `syz.6.2077'. [ 674.270660][T14025] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 674.329274][T14025] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 674.583166][T14091] loop5: detected capacity change from 0 to 7 [ 674.630287][T14091] Dev loop5: unable to read RDB block 7 [ 674.639966][T14025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.642236][ T5914] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 674.650332][T14091] loop5: unable to read partition table [ 674.670775][T14025] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.678465][T14091] loop5: partition table beyond EOD, truncated [ 674.737787][ T6229] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.744941][ T6229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.827835][T14091] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 674.855577][ T5914] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 674.872392][ T5914] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 674.923587][ T5914] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 674.971802][ T5914] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 675.009597][ T6229] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.013595][ T5914] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 675.017016][ T6229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.063791][ T52] Bluetooth: hci5: command tx timeout [ 675.081029][ T5914] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 675.103464][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 675.161434][T14025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.188711][ T5914] usb 7-1: Product: syz [ 675.302674][ T5914] usb 7-1: Manufacturer: syz [ 675.333958][ T5914] cdc_wdm 7-1:1.0: skipping garbage [ 675.346654][ T5914] cdc_wdm 7-1:1.0: skipping garbage [ 675.453466][ T5914] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 675.462763][ T5914] cdc_wdm 7-1:1.0: Unknown control protocol [ 675.577845][T14025] veth0_vlan: entered promiscuous mode [ 675.711810][ T43] usb 7-1: USB disconnect, device number 45 [ 675.716593][T14025] veth1_vlan: entered promiscuous mode [ 675.957921][T14025] veth0_macvtap: entered promiscuous mode [ 676.002331][T14025] veth1_macvtap: entered promiscuous mode [ 676.156124][T14025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.179152][T14025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.210662][ T5982] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.233795][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.249837][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.281225][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.718444][T14116] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2084'. [ 676.864823][T10644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.888958][T10644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.146585][ T52] Bluetooth: hci5: command tx timeout [ 677.157502][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.170573][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.351333][T14123] netlink: 774 bytes leftover after parsing attributes in process `syz.5.2087'. [ 677.774153][T14134] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2088'. [ 678.005242][ T9] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 678.262584][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 678.279918][ T9] usb 7-1: config 0 has no interfaces? [ 678.315281][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 678.418659][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 678.469693][ T9] usb 7-1: Manufacturer: syz [ 678.493310][ T9] usb 7-1: config 0 descriptor?? [ 678.756743][T14149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.043005][T14149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.973383][T14156] tipc: Enabling of bearer rejected, already enabled [ 680.417451][ T43] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 680.536546][ T5919] usb 7-1: USB disconnect, device number 46 [ 680.632582][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 680.641849][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 680.658819][ T43] usb 6-1: config 4 interface 0 has no altsetting 0 [ 680.704565][ T43] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 680.715545][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.739566][ T43] usb 6-1: Product: syz [ 680.758996][ T43] usb 6-1: Manufacturer: syz [ 680.777478][ T43] usb 6-1: SerialNumber: syz [ 681.006925][T14175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.027933][T14175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.068791][T14178] input: syz0 as /devices/virtual/input/input32 [ 681.167430][T14175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.189501][T14178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.201179][T14178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.210028][T14175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.230926][T14181] FAULT_INJECTION: forcing a failure. [ 681.230926][T14181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.281064][T14181] CPU: 1 UID: 0 PID: 14181 Comm: syz.6.2101 Tainted: G L syzkaller #0 PREEMPT(full) [ 681.281101][T14181] Tainted: [L]=SOFTLOCKUP [ 681.281108][T14181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 681.281120][T14181] Call Trace: [ 681.281128][T14181] [ 681.281138][T14181] dump_stack_lvl+0xe8/0x150 [ 681.281173][T14181] should_fail_ex+0x414/0x560 [ 681.281207][T14181] _copy_from_user+0x2d/0xb0 [ 681.281233][T14181] __sys_sendto+0x25c/0x520 [ 681.281257][T14181] ? __pfx___sys_sendto+0x10/0x10 [ 681.281276][T14181] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 681.281308][T14181] ? __fget_files+0x3a0/0x420 [ 681.281339][T14181] ? ksys_write+0x22a/0x250 [ 681.281359][T14181] ? __pfx_ksys_write+0x10/0x10 [ 681.281380][T14181] __x64_sys_sendto+0xde/0x100 [ 681.281402][T14181] do_syscall_64+0xec/0xf80 [ 681.281423][T14181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.281442][T14181] ? clear_bhb_loop+0x60/0xb0 [ 681.281466][T14181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.281483][T14181] RIP: 0033:0x7f7a21b8f749 [ 681.281501][T14181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.281519][T14181] RSP: 002b:00007f7a22b14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 681.281540][T14181] RAX: ffffffffffffffda RBX: 00007f7a21de5fa0 RCX: 00007f7a21b8f749 [ 681.281556][T14181] RDX: 000000000000000e RSI: 0000200000000440 RDI: 0000000000000006 [ 681.281569][T14181] RBP: 00007f7a22b14090 R08: 00002000000001c0 R09: 0000000000000014 [ 681.281583][T14181] R10: 00000000000400d0 R11: 0000000000000246 R12: 0000000000000001 [ 681.281596][T14181] R13: 00007f7a21de6038 R14: 00007f7a21de5fa0 R15: 00007f7a21f0fa28 [ 681.281624][T14181] [ 681.992069][ T5914] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 682.050993][T14189] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2102'. [ 682.246192][ T5914] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 682.258687][ T5914] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 682.292099][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 682.320751][ T5914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 682.436493][ T5914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 682.468857][T14200] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2107'. [ 682.489589][ T5914] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 682.503638][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 682.521063][ T5914] usb 4-1: Product: syz [ 682.534214][ T5914] usb 4-1: Manufacturer: syz [ 682.559916][ T5914] cdc_wdm 4-1:1.0: skipping garbage [ 682.580633][ T5914] cdc_wdm 4-1:1.0: skipping garbage [ 682.607515][ T5914] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 682.627859][ T5914] cdc_wdm 4-1:1.0: Unknown control protocol [ 682.718713][T14202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.765109][ T43] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 682.772567][T14202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.795345][ T43] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 682.822714][ T43] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 682.829980][ T43] usb 6-1: media controller created [ 682.850988][ T5914] usb 4-1: USB disconnect, device number 5 [ 682.890094][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 682.942182][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 683.052279][ T43] usb 6-1: USB disconnect, device number 69 [ 683.667639][T14217] tipc: Enabling of bearer rejected, already enabled [ 684.029962][T14222] FAULT_INJECTION: forcing a failure. [ 684.029962][T14222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.049934][T14222] CPU: 1 UID: 0 PID: 14222 Comm: syz.7.2113 Tainted: G L syzkaller #0 PREEMPT(full) [ 684.049967][T14222] Tainted: [L]=SOFTLOCKUP [ 684.049975][T14222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 684.049985][T14222] Call Trace: [ 684.049994][T14222] [ 684.050003][T14222] dump_stack_lvl+0xe8/0x150 [ 684.050033][T14222] should_fail_ex+0x414/0x560 [ 684.050064][T14222] _copy_to_user+0x31/0xb0 [ 684.050088][T14222] simple_read_from_buffer+0xe1/0x170 [ 684.050116][T14222] proc_fail_nth_read+0x1b3/0x220 [ 684.050139][T14222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 684.050162][T14222] ? rw_verify_area+0x2a6/0x4d0 [ 684.050181][T14222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 684.050203][T14222] vfs_read+0x200/0xa30 [ 684.050221][T14222] ? fdget_pos+0x247/0x320 [ 684.050250][T14222] ? __pfx___mutex_lock+0x10/0x10 [ 684.050272][T14222] ? __pfx_vfs_read+0x10/0x10 [ 684.050303][T14222] ? __fget_files+0x2a/0x420 [ 684.050331][T14222] ? __fget_files+0x3a0/0x420 [ 684.050353][T14222] ? __fget_files+0x2a/0x420 [ 684.050381][T14222] ksys_read+0x145/0x250 [ 684.050401][T14222] ? __pfx_ksys_read+0x10/0x10 [ 684.050429][T14222] do_syscall_64+0xec/0xf80 [ 684.050451][T14222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.050470][T14222] ? trace_irq_disable+0x37/0x100 [ 684.050495][T14222] ? clear_bhb_loop+0x60/0xb0 [ 684.050518][T14222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.050537][T14222] RIP: 0033:0x7f831c18e15c [ 684.050556][T14222] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 684.050573][T14222] RSP: 002b:00007f831d0f5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 684.050595][T14222] RAX: ffffffffffffffda RBX: 00007f831c3e5fa0 RCX: 00007f831c18e15c [ 684.050611][T14222] RDX: 000000000000000f RSI: 00007f831d0f50a0 RDI: 0000000000000007 [ 684.050623][T14222] RBP: 00007f831d0f5090 R08: 0000000000000000 R09: 0000000000000014 [ 684.050636][T14222] R10: 00000000000400d0 R11: 0000000000000246 R12: 0000000000000001 [ 684.050649][T14222] R13: 00007f831c3e6038 R14: 00007f831c3e5fa0 R15: 00007f831c50fa28 [ 684.050681][T14222] [ 684.272703][ T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 684.582136][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 684.602928][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 684.646562][ T43] usb 4-1: config 4 interface 0 has no altsetting 0 [ 684.659580][ T43] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 684.675333][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.685467][ T43] usb 4-1: Product: syz [ 684.692300][ T43] usb 4-1: Manufacturer: syz [ 684.700484][ T43] usb 4-1: SerialNumber: syz [ 685.289044][T14236] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2116'. [ 685.812941][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.819397][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.997255][T14246] tipc: Enabling of bearer rejected, already enabled [ 686.152277][ T5831] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 686.227423][T14247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.318306][T14247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.348948][ T5831] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.369573][ T5831] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 686.392703][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.412911][ T5831] usb 7-1: config 0 descriptor?? [ 686.425750][ T5831] pwc: Askey VC010 type 2 USB webcam detected. [ 686.613056][ T43] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 686.658437][ T5831] pwc: recv_control_msg error -71 req 02 val 2b00 [ 686.684189][ T43] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 686.703434][ T5831] pwc: recv_control_msg error -71 req 02 val 2700 [ 686.723477][ T5831] pwc: recv_control_msg error -71 req 02 val 2c00 [ 686.730637][ T43] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 686.745442][ T5831] pwc: recv_control_msg error -71 req 04 val 1000 [ 686.760839][ T43] usb 4-1: media controller created [ 686.789595][ T5831] pwc: recv_control_msg error -71 req 04 val 1300 [ 686.824902][ T5831] pwc: recv_control_msg error -71 req 04 val 1400 [ 686.844902][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 686.855906][T14262] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2122'. [ 686.913160][ T5831] pwc: recv_control_msg error -71 req 02 val 2000 [ 686.983335][ T5831] pwc: recv_control_msg error -71 req 02 val 2100 [ 686.999432][ T5831] pwc: recv_control_msg error -71 req 04 val 1500 [ 687.013050][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 687.029539][ T5831] pwc: recv_control_msg error -71 req 02 val 2500 [ 687.057897][ T5831] pwc: recv_control_msg error -71 req 02 val 2400 [ 687.081543][ T5831] pwc: recv_control_msg error -71 req 02 val 2600 [ 687.125192][ T5831] pwc: recv_control_msg error -71 req 02 val 2900 [ 687.143282][ T43] usb 4-1: USB disconnect, device number 6 [ 687.169865][ T5831] pwc: recv_control_msg error -71 req 02 val 2800 [ 687.203070][ T5831] pwc: recv_control_msg error -71 req 04 val 1100 [ 687.219307][T14266] netlink: 774 bytes leftover after parsing attributes in process `syz.3.2125'. [ 687.231581][ T5831] pwc: recv_control_msg error -71 req 04 val 1200 [ 687.288588][ T5831] pwc: Registered as video103. [ 687.372891][ T5831] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input33 [ 687.732577][ T5831] usb 7-1: USB disconnect, device number 47 [ 688.474354][T14289] netlink: 'syz.5.2130': attribute type 4 has an invalid length. [ 688.662606][T14292] netlink: 774 bytes leftover after parsing attributes in process `syz.3.2131'. [ 688.892253][ T10] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 689.162005][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 689.171571][ T10] usb 6-1: config 0 has no interfaces? [ 689.179349][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 689.188835][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 689.431321][ T10] usb 6-1: Manufacturer: syz [ 689.479327][ T10] usb 6-1: config 0 descriptor?? [ 689.756306][T14312] fuse: Bad value for 'fd' [ 690.862261][ T5915] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 690.992278][ T5915] usb 4-1: device descriptor read/64, error -71 [ 691.232087][ T5915] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 691.394446][ T5915] usb 4-1: device descriptor read/64, error -71 [ 691.634665][ T5915] usb usb4-port1: attempt power cycle [ 691.643049][T14325] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2139'. [ 691.762312][ T9] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 691.866798][ T5831] usb 6-1: USB disconnect, device number 70 [ 691.946080][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 691.972331][ T5915] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 691.993494][ T5915] usb 4-1: device descriptor read/8, error -71 [ 692.000260][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 692.028923][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.058367][ T9] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 692.088868][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.112205][ T9] usb 7-1: config 0 descriptor?? [ 692.147304][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 692.188392][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 692.262067][ T5915] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 692.316206][ T5915] usb 4-1: device descriptor read/8, error -71 [ 692.324583][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 692.354782][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 692.378259][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 692.392124][ T5831] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 692.415852][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 692.437592][ T5915] usb usb4-port1: unable to enumerate USB device [ 692.453523][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 692.495947][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 692.559422][ T9] bigben 0003:146B:0902.0032: unexpected rdesc, please submit for review [ 692.562103][ T5831] usb 6-1: Using ep0 maxpacket: 8 [ 692.589131][ T9] bigben 0003:146B:0902.0032: hidraw1: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.6-1/input0 [ 692.603482][ T5831] usb 6-1: unable to get BOS descriptor or descriptor too short [ 692.621610][ T9] bigben 0003:146B:0902.0032: not enough fields in HID_OUTPUT_REPORT 0 [ 692.644316][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 692.662238][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 692.684122][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 692.698554][ T9] bigben 0003:146B:0902.0032: no output report found [ 692.721993][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 692.723437][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 692.754872][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 692.784203][ T9] usb 7-1: USB disconnect, device number 48 [ 692.804018][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 692.837148][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 692.846158][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 692.872935][ T5831] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 692.890071][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.913488][ T5831] usb 6-1: Product: syz [ 692.917810][ T5831] usb 6-1: Manufacturer: syz [ 692.919912][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 692.949261][ T5831] usb 6-1: SerialNumber: syz [ 692.987508][ T5831] usb 6-1: config 0 descriptor?? [ 693.003989][ T5831] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 693.166937][T13311] udevd[13311]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 693.441039][T14347] tipc: Started in network mode [ 693.464338][T14347] tipc: Node identity ac14142f, cluster identity 4711 [ 693.491333][T14347] tipc: New replicast peer: 0.0.0.0 [ 693.515704][T14347] tipc: Enabled bearer , priority 10 [ 693.872236][ T5831] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 694.052252][ T5915] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 694.122391][ T5831] usb 7-1: Using ep0 maxpacket: 8 [ 694.223467][ T5831] usb 7-1: unable to get BOS descriptor or descriptor too short [ 694.245651][ T5831] usb 7-1: config 4 interface 0 has no altsetting 0 [ 694.259730][ T5831] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 694.270436][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.280028][ T5831] usb 7-1: Product: syz [ 694.286782][ T5831] usb 7-1: Manufacturer: syz [ 694.299806][ T5831] usb 7-1: SerialNumber: syz [ 694.312114][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 694.340219][ T5915] usb 4-1: config 9 has no interfaces? [ 694.361257][ T5915] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 694.436664][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.652565][ T9] tipc: Node number set to 2886997039 [ 695.019473][ T5913] usb 6-1: USB disconnect, device number 71 [ 696.468772][ T5915] usb 4-1: string descriptor 0 read error: -71 [ 696.478085][ T5915] usb 4-1: USB disconnect, device number 11 [ 696.661621][ T5831] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 696.828512][ T5831] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 696.871416][ T5831] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 696.899300][ T5831] usb 7-1: media controller created [ 697.331824][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 697.520385][ T5831] zl10353_read_register: readreg error (reg=127, ret==0) [ 697.669794][ T5831] usb 7-1: USB disconnect, device number 49 [ 697.778894][T14388] __nla_validate_parse: 25 callbacks suppressed [ 697.778925][T14388] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2154'. [ 699.071069][T14417] tipc: Enabling of bearer rejected, already enabled [ 699.448543][ T9] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 699.642048][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 699.649094][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 699.684510][ T9] usb 7-1: config 4 interface 0 has no altsetting 0 [ 699.795177][ T9] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 699.837159][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.863104][ T9] usb 7-1: Product: syz [ 699.871051][ T9] usb 7-1: Manufacturer: syz [ 699.918000][ T9] usb 7-1: SerialNumber: syz [ 701.382766][ T5915] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 701.542402][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 701.554448][ T5915] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 701.595370][ T5915] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.921461][ T5915] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 702.159367][ T9] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 702.179761][ T5915] usb 6-1: config 1 has no interface number 1 [ 702.222616][ T5915] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 702.243308][ T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 702.289218][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 702.296595][ T5915] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 702.329496][ T9] usb 7-1: media controller created [ 702.442280][ T5915] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 702.483101][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 702.492062][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.531677][ T5915] usb 6-1: Product: syz [ 702.538562][ T5915] usb 6-1: Manufacturer: syz [ 702.546044][ T5915] usb 6-1: SerialNumber: syz [ 702.565229][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 702.829742][ T9] usb 7-1: USB disconnect, device number 50 [ 702.953745][T14457] syzkaller1: entered promiscuous mode [ 702.972231][T14457] syzkaller1: entered allmulticast mode [ 703.039253][T14465] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2171'. [ 703.505209][ T5915] usb 6-1: USB disconnect, device number 72 [ 703.581751][T13312] udevd[13312]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 703.848807][T14472] loop5: detected capacity change from 0 to 7 [ 703.864635][T14472] Dev loop5: unable to read RDB block 7 [ 703.878884][T14472] loop5: unable to read partition table [ 703.892920][T14472] loop5: partition table beyond EOD, truncated [ 703.932505][T14472] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 704.672606][ T5915] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 704.914900][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.995011][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.028147][ T5915] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 705.191281][ T5915] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 705.230859][ T5915] usb 6-1: Manufacturer: syz [ 705.255714][ T5915] usb 6-1: config 0 descriptor?? [ 705.809640][T14495] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2179'. [ 706.819566][ T5915] uclogic 0003:256C:006D.0033: failed retrieving Huion firmware version: -71 [ 706.983392][ T5915] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 706.992983][ T5915] uclogic 0003:256C:006D.0033: probe with driver uclogic failed with error -71 [ 707.035894][ T5915] usb 6-1: USB disconnect, device number 73 [ 707.102022][ T5919] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 707.275441][ T5919] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 707.353280][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.370259][ T5919] usb 4-1: config 0 has no interfaces? [ 707.387318][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.403946][ T5919] usb 4-1: config 0 has no interfaces? [ 707.414750][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.425090][ T5919] usb 4-1: config 0 has no interfaces? [ 707.452892][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.529313][ T5919] usb 4-1: config 0 has no interfaces? [ 707.562992][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.656208][ T5919] usb 4-1: config 0 has no interfaces? [ 707.718215][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.728470][ T5919] usb 4-1: config 0 has no interfaces? [ 707.795998][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.812049][ T5919] usb 4-1: config 0 has no interfaces? [ 707.876033][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.896913][ T5919] usb 4-1: config 0 has no interfaces? [ 707.905175][ T5919] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 708.014796][T14525] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2187'. [ 708.070632][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.135288][ T5919] usb 4-1: config 0 descriptor?? [ 709.328047][T14534] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2190'. [ 709.337133][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2190'. [ 710.734594][ T5913] usb 4-1: USB disconnect, device number 12 [ 710.780797][ T30] audit: type=1326 audit(1767293569.846:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.6.2195" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a21b8f749 code=0x0 [ 710.943489][T14565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.964557][T14565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.016357][T14565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.069075][T14565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.194162][ T5915] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 711.352222][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 711.360212][ T5915] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 711.369782][ T5915] usb 4-1: config 0 has no interface number 0 [ 711.378310][ T5915] usb 4-1: config 0 interface 247 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 711.395805][ T5915] usb 4-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 711.417944][ T5915] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 711.459509][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 711.472464][ T5915] usb 4-1: Product: syz [ 711.476772][ T5915] usb 4-1: Manufacturer: syz [ 711.492096][ T5915] usb 4-1: config 0 descriptor?? [ 711.502624][ T9] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 711.686318][ T9] usb 6-1: too many configurations: 65, using maximum allowed: 8 [ 711.706994][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.732297][ T9] usb 6-1: config 0 has no interfaces? [ 711.915317][T14581] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2201'. [ 711.938082][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.953617][T14579] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 711.961351][T14579] ALSA: mixer_oss: invalid index 1374389 [ 711.999352][T14577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.008702][T14577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.034309][ T9] usb 6-1: config 0 has no interfaces? [ 712.094758][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.104931][ T9] usb 6-1: config 0 has no interfaces? [ 712.142953][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.173110][ T9] usb 6-1: config 0 has no interfaces? [ 712.218108][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.341443][ T9] usb 6-1: config 0 has no interfaces? [ 712.375647][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.398471][T14586] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2203'. [ 712.409147][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2203'. [ 712.458493][ T9] usb 6-1: config 0 has no interfaces? [ 712.525920][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.559985][ T9] usb 6-1: config 0 has no interfaces? [ 712.579219][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.600208][ T9] usb 6-1: config 0 has no interfaces? [ 712.950729][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 712.988498][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.146111][ T9] usb 6-1: config 0 descriptor?? [ 713.522308][ T5831] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 713.712541][ T5831] usb 7-1: Using ep0 maxpacket: 16 [ 713.743359][ T5831] usb 7-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 713.787606][ T5831] usb 7-1: config 32 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 713.819289][ T5831] usb 7-1: config 32 interface 0 has no altsetting 0 [ 713.839927][ T5831] usb 7-1: New USB device found, idVendor=0179, idProduct=1800, bcdDevice= 0.00 [ 713.867783][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.918832][ T5831] usbhid 7-1:32.0: couldn't find an input interrupt endpoint [ 714.146244][T14605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.156698][T14605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.232227][T14609] input: syz1 as /devices/virtual/input/input34 [ 714.362874][T14609] netlink: 'syz.7.2208': attribute type 1 has an invalid length. [ 714.619971][ T5915] usb 6-1: USB disconnect, device number 74 [ 714.968078][ T10] usb 4-1: USB disconnect, device number 13 [ 715.329787][T14627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2214'. [ 715.364835][T14627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2214'. [ 715.445344][T14631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.461437][T14631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.687428][T14631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.707101][T14635] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2217'. [ 715.717622][T14631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.446485][T14642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.509099][T14642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.767801][ T10] usb 7-1: USB disconnect, device number 51 [ 717.313756][T14658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.417588][T14658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.721388][T14670] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2225'. [ 718.616534][ T30] audit: type=1326 audit(1767293577.696:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.5.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9718f749 code=0x7ffc0000 [ 718.642073][T14684] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2227'. [ 718.673789][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2227'. [ 718.683894][ T30] audit: type=1326 audit(1767293577.696:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.5.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c9718f749 code=0x7ffc0000 [ 718.709362][ T30] audit: type=1326 audit(1767293577.696:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.5.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9718f749 code=0x7ffc0000 [ 718.763925][ T30] audit: type=1326 audit(1767293577.696:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.5.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9718f749 code=0x7ffc0000 [ 718.839400][T14689] netlink: 'syz.7.2229': attribute type 2 has an invalid length. [ 718.864539][ T30] audit: type=1326 audit(1767293577.696:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.5.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7c9718f749 code=0x7ffc0000 [ 718.911284][ T30] audit: type=1326 audit(1767293577.766:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.5.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9718f749 code=0x7ffc0000 [ 718.936285][T14689] : entered promiscuous mode [ 718.951450][ T30] audit: type=1326 audit(1767293577.766:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.5.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9718f749 code=0x7ffc0000 [ 719.008858][ T10] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 719.172187][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 719.181109][ T10] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 719.209764][ T10] usb 6-1: config 0 has no interface number 0 [ 719.231308][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 719.265255][ T10] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 719.279463][ T10] usb 6-1: Product: syz [ 719.287507][ T10] usb 6-1: SerialNumber: syz [ 719.296637][ T10] usb 6-1: config 0 descriptor?? [ 719.311516][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input35 [ 719.332216][ T5919] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 719.417137][T14704] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2233'. [ 719.512738][ T5919] usb 7-1: Using ep0 maxpacket: 16 [ 719.526084][T14682] netlink: 774 bytes leftover after parsing attributes in process `syz.5.2228'. [ 719.551551][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 719.560083][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 719.568060][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 719.575648][ T10] usb 6-1: USB disconnect, device number 75 [ 719.582047][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 719.589021][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 719.634765][ T5919] usb 7-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 719.648883][ T5919] usb 7-1: config 32 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 719.669838][ T10] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 719.686125][ T5919] usb 7-1: config 32 interface 0 has no altsetting 0 [ 719.836245][ T5919] usb 7-1: New USB device found, idVendor=0179, idProduct=1800, bcdDevice= 0.00 [ 719.845498][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.948754][ T5919] usbhid 7-1:32.0: couldn't find an input interrupt endpoint [ 722.282113][ T5919] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 722.297918][ T5831] usb 7-1: USB disconnect, device number 52 [ 722.454248][ T5919] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 722.477657][ T5919] usb 4-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 722.504729][ T5919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 722.514750][ T5919] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 722.615154][ T5919] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 722.624933][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 722.645933][ T5919] usb 4-1: Product: syz [ 722.658015][ T5919] usb 4-1: Manufacturer: syz [ 722.692012][ T5919] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 722.973951][ T5919] usb 4-1: USB disconnect, device number 14 [ 723.169473][T14754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.237858][T14754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.737634][T14766] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2250'. [ 725.814518][T14792] fuse: Unknown parameter 'rootm' [ 726.225265][ T5913] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 726.545744][ T5913] usb 6-1: Using ep0 maxpacket: 16 [ 726.563035][ T5913] usb 6-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 726.643795][ T5913] usb 6-1: config 32 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 726.718055][ T5913] usb 6-1: config 32 interface 0 has no altsetting 0 [ 726.821176][ T5913] usb 6-1: New USB device found, idVendor=0179, idProduct=1800, bcdDevice= 0.00 [ 726.897317][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.049301][ T5913] usbhid 6-1:32.0: couldn't find an input interrupt endpoint [ 727.382379][ T10] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 727.523881][ T10] usb 4-1: device descriptor read/64, error -71 [ 727.662401][T14822] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2266'. [ 727.772071][ T10] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 728.012047][ T10] usb 4-1: device descriptor read/64, error -71 [ 728.124439][ T10] usb usb4-port1: attempt power cycle [ 728.479614][ T10] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 728.564394][ T10] usb 4-1: device descriptor read/8, error -71 [ 728.776775][ T5913] usb 6-1: USB disconnect, device number 76 [ 728.812049][ T10] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 728.924573][ T10] usb 4-1: device descriptor read/8, error -71 [ 729.089746][ T10] usb usb4-port1: unable to enumerate USB device [ 730.012359][ T5913] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 730.166087][ T5913] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.177961][ T5913] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 730.194963][ T5913] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 730.204418][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 730.215230][ T5913] usb 7-1: SerialNumber: syz [ 730.261629][ T5913] cdc_mbim 7-1:1.0: MBIM functional descriptor missing [ 730.269594][ T5913] cdc_mbim 7-1:1.0: bind() failure [ 730.462687][ T5913] usb 7-1: USB disconnect, device number 53 [ 730.572060][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 730.741817][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 730.754577][ T10] usb 4-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 730.775096][T14851] syzkaller1: entered promiscuous mode [ 730.780644][T14851] syzkaller1: entered allmulticast mode [ 730.818727][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 730.837929][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 730.891580][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 730.924637][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 730.955964][ T10] usb 4-1: Product: syz [ 730.969098][ T10] usb 4-1: Manufacturer: syz [ 731.008333][ T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 731.245558][ T10] usb 4-1: USB disconnect, device number 19 [ 732.041247][T14861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.061726][T14861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.879170][T14862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.371158][T14874] netlink: 'syz.5.2280': attribute type 2 has an invalid length. [ 733.387960][T14868] 8021q: adding VLAN 0 to HW filter on device bond2 [ 733.415445][T14868] bridge0: port 3(bond2) entered blocking state [ 733.435259][T14868] bridge0: port 3(bond2) entered disabled state [ 733.455376][T14868] bond2: entered allmulticast mode [ 733.475733][T14868] bond2: entered promiscuous mode [ 733.494580][T14881] GUP no longer grows the stack in syz.5.2280 (14881): 200000005000-200000008000 (200000004000) [ 733.507618][T14868] bridge0: port 3(bond2) entered blocking state [ 733.514089][T14868] bridge0: port 3(bond2) entered forwarding state [ 733.532625][T14881] CPU: 1 UID: 0 PID: 14881 Comm: syz.5.2280 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.532660][T14881] Tainted: [L]=SOFTLOCKUP [ 733.532669][T14881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 733.532683][T14881] Call Trace: [ 733.532696][T14881] [ 733.532706][T14881] dump_stack_lvl+0xe8/0x150 [ 733.532739][T14881] fixup_user_fault+0x64a/0x700 [ 733.532774][T14881] fault_in_user_writeable+0x72/0xe0 [ 733.532797][T14881] futex_lock_pi+0x773/0xa90 [ 733.532832][T14881] ? __pfx_futex_lock_pi+0x10/0x10 [ 733.532887][T14881] ? __pfx_futex_wake_mark+0x10/0x10 [ 733.532928][T14881] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 733.532977][T14881] do_futex+0x292/0x420 [ 733.533006][T14881] ? __pfx_do_futex+0x10/0x10 [ 733.533030][T14881] ? __vm_munmap+0x2c1/0x380 [ 733.533063][T14881] __se_sys_futex+0x36f/0x400 [ 733.533094][T14881] ? __pfx___se_sys_futex+0x10/0x10 [ 733.533117][T14881] ? rcu_is_watching+0x15/0xb0 [ 733.533148][T14881] ? __x64_sys_futex+0x21/0xf0 [ 733.533174][T14881] do_syscall_64+0xec/0xf80 [ 733.533195][T14881] ? rcu_is_watching+0x15/0xb0 [ 733.533218][T14881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.533239][T14881] ? clear_bhb_loop+0x60/0xb0 [ 733.533264][T14881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.533285][T14881] RIP: 0033:0x7f7c9718f749 [ 733.533306][T14881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.533325][T14881] RSP: 002b:00007f7c97f48038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 733.533348][T14881] RAX: ffffffffffffffda RBX: 00007f7c973e6270 RCX: 00007f7c9718f749 [ 733.533365][T14881] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 733.533379][T14881] RBP: 00007f7c97213f91 R08: 0000000000000000 R09: 0000000000000000 [ 733.533394][T14881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.533407][T14881] R13: 00007f7c973e6308 R14: 00007f7c973e6270 R15: 00007f7c9750fa28 [ 733.533442][T14881] [ 733.791755][ T1160] bridge0: port 3(bond2) entered disabled state [ 733.825830][T14874] : entered promiscuous mode [ 734.242078][ T5913] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 734.308404][T14892] program syz.7.2284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 734.338362][T14892] xt_hashlimit: size too large, truncated to 1048576 [ 734.389924][T14893] : renamed from vxcan1 (while UP) [ 734.397551][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.417288][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.429903][ T5913] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 734.467762][ T5913] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 734.492179][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.502564][ T5831] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 734.517498][ T5913] usb 7-1: config 0 descriptor?? [ 734.735450][ T5831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.749071][ T5831] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 734.767033][ T5831] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 734.777656][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 734.786035][ T5831] usb 4-1: SerialNumber: syz [ 734.937306][T14900] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2286'. [ 735.205667][T14903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.218940][ T5913] ryos 0003:1E7D:3232.0034: hidraw1: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.6-1/input0 [ 735.235830][ T5831] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 735.244118][T14903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.262212][ T5831] cdc_mbim 4-1:1.0: bind() failure [ 735.287301][ T5831] usb 4-1: USB disconnect, device number 20 [ 736.040184][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2287'. [ 736.075792][T14906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2287'. [ 736.812167][ T5913] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 737.032326][ T5913] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 737.040540][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.182520][ T6726] usb 7-1: USB disconnect, device number 54 [ 737.299292][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.364851][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 737.426298][ T5913] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 737.472315][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.504696][ T5913] usb 4-1: config 0 descriptor?? [ 737.980615][ T5913] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 738.252124][ T6726] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 738.422362][ T6726] usb 7-1: Using ep0 maxpacket: 8 [ 738.434056][ T6726] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.453475][ T6726] usb 7-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.00 [ 738.466181][ T6726] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.501061][ T6726] usb 7-1: config 0 descriptor?? [ 738.535604][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2291'. [ 738.544983][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2291'. [ 738.632142][ T5913] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 738.745206][T14933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.784412][ T5913] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.784904][T14933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.796459][ T5913] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 738.933384][ T5913] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 738.943534][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 738.951678][ T5913] usb 6-1: SerialNumber: syz [ 738.971779][ T5913] cdc_mbim 6-1:1.0: MBIM functional descriptor missing [ 738.979001][ T5913] cdc_mbim 6-1:1.0: bind() failure [ 739.167323][ T5913] usb 6-1: USB disconnect, device number 77 [ 739.258855][T14944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.286498][T14944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.415011][T14852] syz.0.2274 (14852) used greatest stack depth: 18240 bytes left [ 739.474279][ C1] plantronics 0003:047F:FFFF.0035: usb_submit_urb(ctrl) failed: -1 [ 739.584946][T14947] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2298'. [ 739.626391][T14949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.637797][T14949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.086670][T14962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2304'. [ 740.167331][T14965] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2303'. [ 740.307010][T14969] netlink: 'syz.3.2305': attribute type 4 has an invalid length. [ 740.369731][ T10] usb 4-1: USB disconnect, device number 21 [ 740.906750][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 740.945873][T14971] fuse: Unknown parameter '0x0000000000000003' [ 741.196398][ T6726] usbhid 7-1:0.0: can't add hid device: -71 [ 741.207094][ T6726] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 741.262296][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 741.290063][ T10] usb 4-1: config 0 has no interfaces? [ 741.312354][ T6726] usb 7-1: USB disconnect, device number 55 [ 741.393733][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 741.427699][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 741.438085][ T10] usb 4-1: Manufacturer: syz [ 741.451043][ T10] usb 4-1: config 0 descriptor?? [ 741.521093][T14980] binder: BINDER_SET_CONTEXT_MGR already set [ 741.540221][T14983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2311'. [ 741.566165][T14980] binder: 14978:14980 ioctl 4018620d 200000000040 returned -16 [ 741.591616][T14984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2311'. [ 742.082618][ T5913] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 742.246739][ T5913] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 742.260247][ T5913] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.273626][ T5913] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 742.285705][ T5913] usb 6-1: config 1 has no interface number 1 [ 742.295335][ T5913] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 742.309369][ T5913] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 742.332392][ T5913] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 742.354214][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.372364][ T5913] usb 6-1: Product: syz [ 742.377833][ T5913] usb 6-1: Manufacturer: syz [ 742.384077][ T5913] usb 6-1: SerialNumber: syz [ 742.598723][T15005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.624234][T15005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.661654][ T5913] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 742.677498][ T5913] usb 6-1: MIDIStreaming interface descriptor not found [ 742.762369][ T5913] usb 6-1: USB disconnect, device number 78 [ 743.249356][T15012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 743.257216][T15012] IPv6: NLM_F_CREATE should be set when creating new route [ 743.264524][T15012] IPv6: NLM_F_CREATE should be set when creating new route [ 743.490087][ T5913] usb 4-1: USB disconnect, device number 22 [ 743.591439][ T6726] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 743.946481][ T6726] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.963460][ T6726] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.991194][ T6726] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 744.015299][ T6726] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.069053][ T6726] usb 7-1: config 0 descriptor?? [ 744.698299][ T6726] hid-led 0003:27B8:01ED.0036: probe with driver hid-led failed with error -71 [ 744.762136][ T6726] usb 7-1: USB disconnect, device number 56 [ 745.513400][T15056] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2333'. [ 746.631527][T15067] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2337'. [ 747.225763][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.232600][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.321503][T15085] usb usb8: usbfs: process 15085 (syz.6.2343) did not claim interface 0 before use [ 747.334506][ T5913] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 747.494708][ T5913] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 747.574196][ T5913] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 747.597840][ T5913] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 747.607318][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 747.615903][ T5913] usb 6-1: SerialNumber: syz [ 747.632162][ T5831] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 747.641861][ T5913] cdc_mbim 6-1:1.0: MBIM functional descriptor missing [ 747.652268][ T5913] cdc_mbim 6-1:1.0: bind() failure [ 747.720736][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2346'. [ 747.758440][T15096] erspan0: entered promiscuous mode [ 747.834904][ T10] usb 6-1: USB disconnect, device number 79 [ 747.915083][ T5831] usb 7-1: not running at top speed; connect to a high speed hub [ 747.930060][ T5831] usb 7-1: config 1 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 747.955551][ T5831] usb 7-1: config 1 interface 0 altsetting 247 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.984223][ T5831] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.005260][ T5831] usb 7-1: config 1 interface 0 has no altsetting 0 [ 748.066641][ T5831] usb 7-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.40 [ 748.090296][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.109183][ T5831] usb 7-1: Product: syz [ 748.122232][ T5831] usb 7-1: Manufacturer: syz [ 748.135942][ T5831] usb 7-1: SerialNumber: syz [ 748.380409][T15085] loop9: detected capacity change from 0 to 7 [ 748.389732][T15085] Dev loop9: unable to read RDB block 7 [ 748.552043][T15085] loop9: AHDI p4 [ 748.577962][T15085] loop9: partition table partially beyond EOD, truncated [ 749.046473][T15106] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 749.062692][ T5831] usbhid 7-1:1.0: can't add hid device: -71 [ 749.068779][ T5831] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 749.083057][T15106] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 749.130202][ T5831] usb 7-1: USB disconnect, device number 57 [ 749.143830][T15112] pim6reg1: entered promiscuous mode [ 749.149194][T15112] pim6reg1: entered allmulticast mode [ 749.369474][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2355'. [ 749.517293][T15128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.539653][T15128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.545119][T15131] IPv6: addrconf: prefix option has invalid lifetime [ 749.564761][T15131] IPv6: addrconf: prefix option has invalid lifetime [ 749.668319][T15137] netlink: 'syz.3.2359': attribute type 10 has an invalid length. [ 749.876809][T15137] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 749.960017][T15145] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2360'. [ 750.104835][T15137] team0: Port device netdevsim0 added [ 750.374538][T15148] macsec2: entered allmulticast mode [ 750.382785][T15148] erspan0: entered allmulticast mode [ 750.419570][T15148] erspan0: left allmulticast mode [ 750.503946][T15152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.528422][T15152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.567296][T15152] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2363'. [ 750.817439][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2367'. [ 751.347448][T15173] FAULT_INJECTION: forcing a failure. [ 751.347448][T15173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.362397][T15173] CPU: 0 UID: 0 PID: 15173 Comm: syz.0.2369 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.362427][T15173] Tainted: [L]=SOFTLOCKUP [ 751.362434][T15173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 751.362445][T15173] Call Trace: [ 751.362454][T15173] [ 751.362463][T15173] dump_stack_lvl+0xe8/0x150 [ 751.362492][T15173] should_fail_ex+0x414/0x560 [ 751.362527][T15173] _copy_to_user+0x31/0xb0 [ 751.362552][T15173] simple_read_from_buffer+0xe1/0x170 [ 751.362579][T15173] proc_fail_nth_read+0x1b3/0x220 [ 751.362602][T15173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.362625][T15173] ? rw_verify_area+0x2a6/0x4d0 [ 751.362644][T15173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.362666][T15173] vfs_read+0x200/0xa30 [ 751.362681][T15173] ? fdget_pos+0x247/0x320 [ 751.362708][T15173] ? __pfx___mutex_lock+0x10/0x10 [ 751.362727][T15173] ? __pfx_vfs_read+0x10/0x10 [ 751.362747][T15173] ? __fget_files+0x2a/0x420 [ 751.362774][T15173] ? __fget_files+0x3a0/0x420 [ 751.362796][T15173] ? __fget_files+0x2a/0x420 [ 751.362828][T15173] ksys_read+0x145/0x250 [ 751.362850][T15173] ? __pfx_ksys_read+0x10/0x10 [ 751.362879][T15173] do_syscall_64+0xec/0xf80 [ 751.362899][T15173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.362927][T15173] ? trace_irq_disable+0x37/0x100 [ 751.362953][T15173] ? clear_bhb_loop+0x60/0xb0 [ 751.362977][T15173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.362995][T15173] RIP: 0033:0x7fa4a578e15c [ 751.363013][T15173] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 751.363030][T15173] RSP: 002b:00007fa4a662a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 751.363050][T15173] RAX: ffffffffffffffda RBX: 00007fa4a59e5fa0 RCX: 00007fa4a578e15c [ 751.363066][T15173] RDX: 000000000000000f RSI: 00007fa4a662a0a0 RDI: 000000000000000a [ 751.363078][T15173] RBP: 00007fa4a662a090 R08: 0000000000000000 R09: 0000000000000000 [ 751.363091][T15173] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 751.363102][T15173] R13: 00007fa4a59e6038 R14: 00007fa4a59e5fa0 R15: 00007fa4a5b0fa28 [ 751.363134][T15173] [ 751.692041][ T10] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 751.892070][ T10] usb 4-1: device descriptor read/64, error -71 [ 752.062239][T15180] fuse: Unknown parameter 'grup_id' [ 752.087579][T15184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2372'. [ 752.113513][T15180] xt_CONNSECMARK: invalid mode: 4 [ 752.142271][ T10] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 752.150477][T15185] lo: Caught tx_queue_len zero misconfig [ 752.157810][T15184] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 752.341822][ T5915] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 752.350647][ T10] usb 4-1: device descriptor read/64, error -71 [ 752.462224][ T10] usb usb4-port1: attempt power cycle [ 752.528427][ T5915] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 752.558717][ T5915] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 752.593596][T15197] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2376'. [ 752.624133][ T5915] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 752.638390][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 752.659395][ T5915] usb 7-1: SerialNumber: syz [ 752.692001][ T5915] cdc_mbim 7-1:1.0: MBIM functional descriptor missing [ 752.734873][ T5915] cdc_mbim 7-1:1.0: bind() failure [ 752.832411][ T10] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 752.880703][ T10] usb 4-1: device descriptor read/8, error -71 [ 752.891250][ T5913] usb 7-1: USB disconnect, device number 58 [ 753.132258][ T10] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 753.271514][ T10] usb 4-1: device descriptor read/8, error -71 [ 753.403128][ T10] usb usb4-port1: unable to enumerate USB device [ 753.502241][T15214] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2379'. [ 753.725221][T15221] fuse: Unknown parameter 'lpkI[WKiX.݂HsXģE00x0000000000000004' [ 754.559710][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 754.904402][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.915038][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 754.943845][ T10] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 755.001972][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.066402][ T10] usb 4-1: config 0 descriptor?? [ 755.268100][T15237] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2385'. [ 755.328369][T15228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.384951][T15228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.668348][T15228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.694827][T15228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.817221][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 755.832120][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 755.875240][ T10] usb 4-1: USB disconnect, device number 27 [ 755.980928][T15262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.122740][T15262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.510150][T15272] netlink: 'syz.3.2394': attribute type 4 has an invalid length. [ 757.172012][ T5915] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 757.342430][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 757.358122][ T5915] usb 4-1: config 0 has no interfaces? [ 757.378040][ T5915] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 757.393676][ T5915] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 757.417494][ T5915] usb 4-1: Manufacturer: syz [ 757.437839][ T5915] usb 4-1: config 0 descriptor?? [ 758.067417][T15283] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2396'. [ 758.315970][ T30] audit: type=1326 audit(1767293617.396:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15285 comm="syz.6.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a21b8f749 code=0x7ffc0000 [ 758.343207][ T30] audit: type=1326 audit(1767293617.396:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15285 comm="syz.6.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a21b8f749 code=0x7ffc0000 [ 758.366010][ T30] audit: type=1326 audit(1767293617.396:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15285 comm="syz.6.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a21b8f749 code=0x7ffc0000 [ 758.390906][ T30] audit: type=1326 audit(1767293617.416:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15285 comm="syz.6.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a21b8f749 code=0x7ffc0000 [ 758.417327][ T30] audit: type=1326 audit(1767293617.416:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15285 comm="syz.6.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a21b8f749 code=0x7ffc0000 [ 758.448974][ T30] audit: type=1326 audit(1767293617.416:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15285 comm="syz.6.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a21b8f749 code=0x7ffc0000 [ 758.493519][ T30] audit: type=1326 audit(1767293617.456:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15285 comm="syz.6.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7a21b8f749 code=0x7ffc0000 [ 758.545348][ T30] audit: type=1326 audit(1767293617.456:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15285 comm="syz.6.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a21b8f749 code=0x7ffc0000 [ 758.570082][ T30] audit: type=1326 audit(1767293617.456:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15285 comm="syz.6.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a21b8f749 code=0x7ffc0000 [ 758.595145][ T30] audit: type=1326 audit(1767293617.466:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15285 comm="syz.6.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a21b8f749 code=0x7ffc0000 [ 758.912064][ T10] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 759.080256][ T10] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 759.107983][ T10] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 759.132638][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 759.152089][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 759.166668][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 759.204145][ T10] usb 6-1: Product: syz [ 759.221024][ T10] usb 6-1: Manufacturer: syz [ 759.242823][ T10] usb 6-1: SerialNumber: syz [ 759.264606][ T10] usb 6-1: config 0 descriptor?? [ 759.282736][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 759.288826][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 759.496968][T15291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.507755][ T10] usb 6-1: selecting invalid altsetting 0 [ 759.523392][T15291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.800771][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2399'. [ 759.810517][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2399'. [ 759.936469][ T10] usb 6-1: USB disconnect, device number 80 [ 759.992535][ T6726] usb 4-1: USB disconnect, device number 28 [ 760.076726][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2407'. [ 760.090223][T15322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.120446][T15322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.473575][T15329] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2408'. [ 760.496647][T15330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.512904][T15330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.544324][T15330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.553548][T15331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.566377][T15330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.593801][T15331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.732076][ T6726] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 760.972314][ T6726] usb 6-1: Using ep0 maxpacket: 8 [ 761.036975][T15342] input: syz1 as /devices/virtual/input/input36 [ 761.232065][T15342] netlink: 'syz.0.2412': attribute type 1 has an invalid length. [ 761.243706][ T5913] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 761.273345][ T6726] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 761.292156][ T6726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.301431][ T6726] usb 6-1: Product: syz [ 761.305881][ T6726] usb 6-1: Manufacturer: syz [ 761.310765][ T6726] usb 6-1: SerialNumber: syz [ 761.346327][ T6726] usb 6-1: config 0 descriptor?? [ 761.434605][ T5913] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.450307][ T5913] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 761.469064][ T5913] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 761.484562][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 761.496419][ T5913] usb 7-1: SerialNumber: syz [ 761.527596][ T5913] cdc_mbim 7-1:1.0: MBIM functional descriptor missing [ 761.546160][ T5913] cdc_mbim 7-1:1.0: bind() failure [ 761.559687][ T6726] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71 [ 761.567524][ T6726] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 761.600234][ T6726] usb 6-1: USB disconnect, device number 81 [ 762.432359][ T6726] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 762.586871][ T6726] usb 6-1: unable to get BOS descriptor or descriptor too short [ 762.596719][ T6726] usb 6-1: not running at top speed; connect to a high speed hub [ 762.616740][ T6726] usb 6-1: config 0 has an invalid interface number: 93 but max is 0 [ 762.637128][ T6726] usb 6-1: config 0 has no interface number 0 [ 762.651278][ T6726] usb 6-1: config 0 interface 93 has no altsetting 0 [ 762.676203][ T6726] usb 6-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=5e.2b [ 762.698677][ T6726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.721193][ T6726] usb 6-1: Product: syz [ 762.730028][ T6726] usb 6-1: Manufacturer: syz [ 762.746787][ T6726] usb 6-1: SerialNumber: syz [ 762.759608][ T6726] usb 6-1: config 0 descriptor?? [ 763.452706][ T6726] usb 6-1: unknown interface protocol 0x1a, assuming v1 [ 763.467928][ T6726] usb 6-1: cannot find UAC_HEADER [ 763.515126][ T6726] snd-usb-audio 6-1:0.93: probe with driver snd-usb-audio failed with error -22 [ 763.544997][ T6726] usb 6-1: USB disconnect, device number 82 [ 763.628078][T13312] udevd[13312]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.93/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 763.889092][ T6726] usb 7-1: USB disconnect, device number 59 [ 763.988109][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2419'. [ 764.031644][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2419'. [ 764.339545][T15387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.349219][T15387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.376752][ T5831] hid_parser_main: 1 callbacks suppressed [ 764.376768][ T5831] hid-generic 00A0:0006:0003.0037: unknown main item tag 0x4 [ 764.421066][ T5831] hid-generic 00A0:0006:0003.0037: unknown main item tag 0x0 [ 764.439131][ T5831] hid-generic 00A0:0006:0003.0037: unknown main item tag 0x2 [ 764.489282][ T5831] hid-generic 00A0:0006:0003.0037: unknown main item tag 0x0 [ 764.517081][ T5831] hid-generic 00A0:0006:0003.0037: unknown main item tag 0x0 [ 764.553810][ T5831] hid-generic 00A0:0006:0003.0037: unknown main item tag 0x0 [ 764.580236][ T5831] hid-generic 00A0:0006:0003.0037: unknown main item tag 0x0 [ 764.639046][T15394] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2424'. [ 764.768675][ T5831] hid-generic 00A0:0006:0003.0037: unknown main item tag 0x0 [ 764.982251][ T5831] hid-generic 00A0:0006:0003.0037: unknown main item tag 0x0 [ 765.000896][ T5831] hid-generic 00A0:0006:0003.0037: unknown main item tag 0x0 [ 765.364932][ T5831] hid-generic 00A0:0006:0003.0037: hidraw1: HID v0.05 Device [syz1] on syz0 [ 766.852051][ T6726] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 767.014266][ T6726] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.032118][ T6726] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 767.075807][ T6726] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 767.105690][ T6726] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 767.129854][ T6726] usb 7-1: SerialNumber: syz [ 767.160075][ T6726] cdc_mbim 7-1:1.0: MBIM functional descriptor missing [ 767.187650][ T6726] cdc_mbim 7-1:1.0: bind() failure [ 767.326258][T15405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.344519][T15405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.467698][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'. [ 767.749276][T15449] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2441'. [ 768.028978][T15452] binder: 15451:15452 ioctl c0d05604 200000000380 returned -22 [ 768.051877][T15452] binder: 15451:15452 ioctl 40045730 200000000480 returned -22 [ 769.440279][ T6726] usb 7-1: USB disconnect, device number 60 [ 769.623266][T15471] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 770.209079][T15485] FAULT_INJECTION: forcing a failure. [ 770.209079][T15485] name failslab, interval 1, probability 0, space 0, times 0 [ 770.258027][T15485] CPU: 1 UID: 0 PID: 15485 Comm: syz.5.2450 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.258056][T15485] Tainted: [L]=SOFTLOCKUP [ 770.258063][T15485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 770.258075][T15485] Call Trace: [ 770.258084][T15485] [ 770.258091][T15485] dump_stack_lvl+0xe8/0x150 [ 770.258119][T15485] should_fail_ex+0x414/0x560 [ 770.258151][T15485] should_failslab+0xa8/0x100 [ 770.258176][T15485] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 770.258204][T15485] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 770.258234][T15485] ? __d_alloc+0x37/0x6f0 [ 770.258265][T15485] __d_alloc+0x37/0x6f0 [ 770.258295][T15485] d_alloc_pseudo+0x21/0xc0 [ 770.258322][T15485] alloc_file_pseudo+0xcc/0x210 [ 770.258351][T15485] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 770.258377][T15485] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 770.258402][T15485] ? rcu_is_watching+0x15/0xb0 [ 770.258424][T15485] ? hugetlbfs_get_inode+0x448/0x640 [ 770.258456][T15485] hugetlb_file_setup+0x3ee/0x630 [ 770.258484][T15485] ksys_mmap_pgoff+0x22f/0x760 [ 770.258513][T15485] do_syscall_64+0xec/0xf80 [ 770.258533][T15485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.258551][T15485] ? trace_irq_disable+0x37/0x100 [ 770.258577][T15485] ? clear_bhb_loop+0x60/0xb0 [ 770.258601][T15485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.258620][T15485] RIP: 0033:0x7f7c9718f749 [ 770.258638][T15485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.258656][T15485] RSP: 002b:00007f7c97f8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 770.258676][T15485] RAX: ffffffffffffffda RBX: 00007f7c973e6090 RCX: 00007f7c9718f749 [ 770.258691][T15485] RDX: 0000000000000004 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 770.258704][T15485] RBP: 00007f7c97f8a090 R08: ffffffffffffffff R09: 0000000000000000 [ 770.258718][T15485] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 770.258730][T15485] R13: 00007f7c973e6128 R14: 00007f7c973e6090 R15: 00007f7c9750fa28 [ 770.258757][T15485] [ 770.682071][ T6726] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 770.842348][ T6726] usb 7-1: Using ep0 maxpacket: 16 [ 770.850407][ T6726] usb 7-1: config 0 has no interfaces? [ 770.857819][ T6726] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 770.869809][ T6726] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 770.878721][ T6726] usb 7-1: Manufacturer: syz [ 770.916481][ T6726] usb 7-1: config 0 descriptor?? [ 771.120923][T15503] input: syz1 as /devices/virtual/input/input37 [ 771.659309][T15513] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2455'. [ 771.908506][T15522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.920712][T15522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.779652][T15530] ALSA: seq fatal error: cannot create timer (-16) [ 773.426499][T15538] netlink: 'syz.3.2461': attribute type 4 has an invalid length. [ 773.772182][ T5831] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 773.839993][ T6726] usb 7-1: USB disconnect, device number 61 [ 773.962738][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 774.020257][ T5831] usb 4-1: config 0 has no interfaces? [ 774.066707][ T5831] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 774.094960][ T5831] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 774.123178][ T5831] usb 4-1: Manufacturer: syz [ 774.137893][ T5831] usb 4-1: config 0 descriptor?? [ 774.473879][T15552] FAULT_INJECTION: forcing a failure. [ 774.473879][T15552] name failslab, interval 1, probability 0, space 0, times 0 [ 774.512023][T15552] CPU: 0 UID: 0 PID: 15552 Comm: syz.6.2464 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.512049][T15552] Tainted: [L]=SOFTLOCKUP [ 774.512054][T15552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 774.512060][T15552] Call Trace: [ 774.512066][T15552] [ 774.512072][T15552] dump_stack_lvl+0xe8/0x150 [ 774.512092][T15552] should_fail_ex+0x414/0x560 [ 774.512112][T15552] should_failslab+0xa8/0x100 [ 774.512126][T15552] kmem_cache_alloc_noprof+0x88/0x710 [ 774.512144][T15552] ? alloc_empty_file+0x55/0x1d0 [ 774.512160][T15552] alloc_empty_file+0x55/0x1d0 [ 774.512174][T15552] alloc_file_pseudo+0x13d/0x210 [ 774.512189][T15552] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 774.512206][T15552] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 774.512220][T15552] ? rcu_is_watching+0x15/0xb0 [ 774.512234][T15552] ? hugetlbfs_get_inode+0x448/0x640 [ 774.512252][T15552] hugetlb_file_setup+0x3ee/0x630 [ 774.512268][T15552] ksys_mmap_pgoff+0x22f/0x760 [ 774.512287][T15552] do_syscall_64+0xec/0xf80 [ 774.512299][T15552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.512309][T15552] ? trace_irq_disable+0x37/0x100 [ 774.512323][T15552] ? clear_bhb_loop+0x60/0xb0 [ 774.512335][T15552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.512346][T15552] RIP: 0033:0x7f7a21b8f749 [ 774.512356][T15552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.512366][T15552] RSP: 002b:00007f7a22af3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 774.512378][T15552] RAX: ffffffffffffffda RBX: 00007f7a21de6090 RCX: 00007f7a21b8f749 [ 774.512386][T15552] RDX: 0000000000000004 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 774.512394][T15552] RBP: 00007f7a22af3090 R08: ffffffffffffffff R09: 0000000000000000 [ 774.512401][T15552] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 774.512407][T15552] R13: 00007f7a21de6128 R14: 00007f7a21de6090 R15: 00007f7a21f0fa28 [ 774.512423][T15552] [ 776.371527][ T5831] usb 4-1: USB disconnect, device number 29 [ 776.483760][T15578] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2469'. [ 777.035963][T15588] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2472'. [ 777.993785][T15595] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2473'. [ 778.878031][ T5913] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 779.225830][ T5913] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.236055][ T5913] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 779.251263][ T5913] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 779.316256][T15617] netlink: 'syz.3.2481': attribute type 4 has an invalid length. [ 779.502783][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 779.510844][ T5913] usb 7-1: SerialNumber: syz [ 779.765423][ T6726] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 779.848323][ T5913] cdc_mbim 7-1:1.0: MBIM functional descriptor missing [ 779.862295][ T5913] cdc_mbim 7-1:1.0: bind() failure [ 779.952101][ T6726] usb 4-1: Using ep0 maxpacket: 16 [ 779.961139][ T6726] usb 4-1: config 0 has no interfaces? [ 779.975999][ T6726] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 779.988470][ T6726] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 780.046761][ T6726] usb 4-1: Manufacturer: syz [ 780.060232][ T6726] usb 4-1: config 0 descriptor?? [ 780.153614][T15628] netlink: 'syz.7.2483': attribute type 4 has an invalid length. [ 780.584918][T15630] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 780.591483][T15630] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 780.606263][T15630] vhci_hcd vhci_hcd.0: Device attached [ 780.922241][ T5831] usb 44-1: SetAddress Request (2) to port 0 [ 780.928776][T15631] vhci_hcd: connection closed [ 780.929277][ T5831] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 780.944355][T14190] vhci_hcd vhci_hcd.5: stop threads [ 780.954027][T14190] vhci_hcd vhci_hcd.5: release socket [ 780.963183][T14190] vhci_hcd vhci_hcd.5: disconnect device [ 780.996873][T15638] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2484'. [ 781.469772][ T5913] usb 7-1: USB disconnect, device number 62 [ 782.160087][ T6726] usb 4-1: USB disconnect, device number 30 [ 782.306914][T15654] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 782.313467][T15654] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 782.359399][T15654] vhci_hcd vhci_hcd.0: Device attached [ 782.366674][T15652] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2490'. [ 782.542435][ T6726] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 782.602197][ T6726] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 783.103699][T15656] vhci_hcd: connection reset by peer [ 783.109318][ T80] vhci_hcd vhci_hcd.6: stop threads [ 783.119242][ T80] vhci_hcd vhci_hcd.6: release socket [ 783.127720][ T80] vhci_hcd vhci_hcd.6: disconnect device [ 783.637027][T15659] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 783.644537][T15659] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 783.666372][T15659] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 783.677176][T15659] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 783.699583][T15659] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 783.706579][T15659] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 783.718803][T15659] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 783.726137][T15659] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 783.734270][T15659] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 783.740269][T15659] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 783.747753][T15659] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 783.754142][T15659] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 783.763288][T15659] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 783.778293][T15668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.794479][T15668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.850824][T15683] netlink: 'syz.5.2499': attribute type 4 has an invalid length. [ 783.910752][T15668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.938862][T15668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.013660][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 784.084108][T15668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.134276][T15668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.193709][T15690] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2500'. [ 784.222061][ T5913] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 784.258326][ T10] usb 4-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 784.268429][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.282677][ T10] usb 4-1: Product: syz [ 784.289898][ T10] usb 4-1: Manufacturer: syz [ 784.298148][ T10] usb 4-1: SerialNumber: syz [ 784.311080][ T10] usb 4-1: config 0 descriptor?? [ 784.322251][ T10] f81232 4-1:0.0: f81232 converter detected [ 784.344490][ T10] usb 4-1: f81232 converter now attached to ttyUSB0 [ 784.415857][ T5913] usb 6-1: Using ep0 maxpacket: 16 [ 784.440841][ T5913] usb 6-1: config 0 has no interfaces? [ 784.452832][ T5913] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 784.480268][ T5913] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 784.514343][ T5913] usb 6-1: Manufacturer: syz [ 784.523870][T15675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.536737][T15675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.544259][ T5913] usb 6-1: config 0 descriptor?? [ 784.559669][T15675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.570899][T15693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.585942][T15693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.593947][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 784.601086][T15675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.618142][ T43] usb 4-1: USB disconnect, device number 31 [ 784.628531][ T43] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 784.639182][ T43] f81232 4-1:0.0: device disconnected [ 785.549938][T15698] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2503'. [ 785.708466][T15702] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2502'. [ 785.792213][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 785.798330][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 785.804713][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 785.810715][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 785.819532][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 786.033670][ T5831] usb 44-1: device descriptor read/8, error -110 [ 786.442853][ T5831] usb usb44-port1: attempt power cycle [ 786.661994][T15706] Bluetooth: hci3: command 0x0406 tx timeout [ 786.920892][ T5913] usb 6-1: USB disconnect, device number 83 [ 787.017940][ T5831] usb usb44-port1: unable to enumerate USB device [ 787.462450][T15741] kAFS: unable to lookup cell '' [ 787.572454][T15746] kAFS: unable to lookup cell '(,c' [ 787.782125][ T6726] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 787.867125][T15706] Bluetooth: hci1: command 0x0406 tx timeout [ 787.867248][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 787.874320][T15706] Bluetooth: hci0: command 0x0406 tx timeout [ 787.879367][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 787.891865][T13288] Bluetooth: hci2: command 0x0406 tx timeout [ 787.932306][ T5831] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 787.939949][ T5913] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 788.142254][ T5913] usb 7-1: Using ep0 maxpacket: 32 [ 788.162244][ T5913] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 788.173015][ T5913] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 788.181694][ T5913] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 788.203665][ T5831] usb 6-1: config 7 has an invalid interface number: 101 but max is 0 [ 788.217463][ T5831] usb 6-1: config 7 has no interface number 0 [ 788.256472][ T5831] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 788.276408][ T5913] usb 7-1: config 1 has no interface number 0 [ 788.317170][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.328110][ T5913] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 788.358102][ T5831] usb 6-1: Product: syz [ 788.375081][ T5913] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 788.389623][ T5831] usb 6-1: Manufacturer: syz [ 788.397558][ T5831] usb 6-1: SerialNumber: syz [ 788.433845][T15754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.465716][ T5913] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 788.467775][T15754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.517031][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.610138][ T5913] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 788.949778][ T5913] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 789.203210][ T5831] as10x_usb: device has been detected [ 789.215270][ T5831] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 789.256917][ T5831] usb 6-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 789.397396][T15747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2514'. [ 789.474838][ T5831] as10x_usb: error during firmware upload part1 [ 789.531777][ T5831] Registered device Elgato EyeTV DTT Deluxe [ 789.553377][ T5831] usb 6-1: USB disconnect, device number 84 [ 789.639675][ T5831] Unregistered device Elgato EyeTV DTT Deluxe [ 789.645004][ T5831] as10x_usb: device has been disconnected [ 789.692160][ T5913] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 789.952370][T15749] Bluetooth: hci5: command 0x0c1a tx timeout [ 790.024287][ T43] snd_usb_pod 7-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 790.052107][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 790.059628][ T5913] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 790.097316][ T5913] usb 4-1: config 32 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 790.161307][ T5913] usb 4-1: config 32 interface 0 has no altsetting 0 [ 790.190606][ T5913] usb 4-1: New USB device found, idVendor=0179, idProduct=1800, bcdDevice= 0.00 [ 790.219258][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.276559][ T5913] usbhid 4-1:32.0: couldn't find an input interrupt endpoint [ 790.800659][T15780] fuse: Bad value for 'fd' [ 790.836428][T15780] netlink: 'syz.5.2522': attribute type 1 has an invalid length. [ 790.862219][ T5913] usb 7-1: USB disconnect, device number 63 [ 790.881363][ T5913] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 790.954334][T15785] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2522'. [ 791.058606][T15789] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2523'. [ 791.130723][T15792] netlink: 774 bytes leftover after parsing attributes in process `syz.5.2525'. [ 791.143713][T15792] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2525'. [ 791.245835][T15798] netlink: 774 bytes leftover after parsing attributes in process `syz.5.2528'. [ 791.279219][T15798] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2528'. [ 791.665332][T15802] fuse: Unknown parameter 'fd<0x0000000000000004' [ 792.072099][ T5913] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 792.233636][ T5831] usb 4-1: USB disconnect, device number 32 [ 792.265642][ T5913] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 792.282505][ T5913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.303627][ T5913] usb 6-1: config 0 has no interface number 0 [ 792.309904][ T5913] usb 6-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 216 [ 792.330558][ T5913] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 792.403601][ T5913] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 792.430052][T15812] kAFS: unable to lookup cell '' [ 792.440556][T15812] kAFS: unable to lookup cell '(,c' [ 792.461012][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.499488][ T5913] usb 6-1: config 0 descriptor?? [ 792.511316][T15806] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 792.615323][ T5913] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 792.787077][T15806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.810356][T15806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.832289][ T5831] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 792.857042][ T13] usb 6-1: Failed to submit usb control message: -71 [ 792.857303][ T6726] usb 6-1: USB disconnect, device number 85 [ 792.864408][ T13] usb 6-1: unable to send the bmi data to the device: -71 [ 792.881255][ T13] usb 6-1: unable to get target info from device [ 792.892235][ T13] usb 6-1: could not get target info (-71) [ 792.906143][ T13] usb 6-1: could not probe fw (-71) [ 792.994332][ T5831] usb 4-1: too many configurations: 223, using maximum allowed: 8 [ 793.047605][ T5831] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 793.057129][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.070358][ T5831] usb 4-1: Product: syz [ 793.138262][T15834] x_tables: duplicate underflow at hook 3 [ 793.320326][ T5831] usb 4-1: Manufacturer: syz [ 793.325204][ T5831] usb 4-1: SerialNumber: syz [ 793.343758][ T5831] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 793.394376][ T5913] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 793.734798][ T5831] usb 4-1: USB disconnect, device number 33 [ 794.427576][ T5913] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 794.452149][ T5913] ath9k_htc: Failed to initialize the device [ 794.479615][ T5831] usb 4-1: ath9k_htc: USB layer deinitialized [ 794.488713][T15852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.517505][T15852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.082014][ T5831] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 795.243789][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 795.309497][T15869] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2545'. [ 795.411740][ T5831] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 795.458030][ T5831] usb 4-1: config 32 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 795.495451][ T5831] usb 4-1: config 32 interface 0 has no altsetting 0 [ 795.519515][ T5831] usb 4-1: New USB device found, idVendor=0179, idProduct=1800, bcdDevice= 0.00 [ 795.550729][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.594274][ T5831] usbhid 4-1:32.0: couldn't find an input interrupt endpoint [ 796.662228][ T10] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 796.822557][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 796.843838][ T10] usb 6-1: config 3 has an invalid interface number: 162 but max is 2 [ 796.876536][ T10] usb 6-1: config 3 has an invalid interface number: 137 but max is 2 [ 796.893917][ T10] usb 6-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 796.928165][ T10] usb 6-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 796.954604][ T10] usb 6-1: config 3 has an invalid descriptor of length 245, skipping remainder of the config [ 796.967163][ T10] usb 6-1: config 3 has 2 interfaces, different from the descriptor's value: 3 [ 796.987744][ T10] usb 6-1: config 3 has no interface number 0 [ 796.997857][ T10] usb 6-1: config 3 has no interface number 1 [ 797.005000][ T10] usb 6-1: config 3 interface 162 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 797.038235][ T10] usb 6-1: config 3 interface 162 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 797.053236][ T10] usb 6-1: config 3 interface 162 altsetting 8 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 797.069992][ T10] usb 6-1: config 3 interface 162 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 797.084118][ T10] usb 6-1: config 3 interface 162 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 797.095906][ T10] usb 6-1: config 3 interface 162 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 797.108361][ T10] usb 6-1: config 3 interface 137 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 797.121516][ T10] usb 6-1: config 3 interface 137 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 797.138897][ T10] usb 6-1: config 3 interface 137 altsetting 2 endpoint 0x7 has invalid wMaxPacketSize 0 [ 797.158291][ T10] usb 6-1: config 3 interface 137 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 797.170179][ T10] usb 6-1: config 3 interface 137 altsetting 2 has an invalid endpoint descriptor of length 2, skipping [ 797.185797][ T10] usb 6-1: config 3 interface 162 has no altsetting 0 [ 797.193606][ T10] usb 6-1: config 3 interface 137 has no altsetting 0 [ 797.205519][ T10] usb 6-1: New USB device found, idVendor=0572, idProduct=58a6, bcdDevice=fd.dd [ 797.215317][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.224453][ T10] usb 6-1: Product:  [ 797.229047][ T10] usb 6-1: Manufacturer: Ћ [ 797.234070][ T10] usb 6-1: SerialNumber: ࡡ [ 797.479695][ T10] usb 6-1: USB disconnect, device number 86 [ 797.619099][ T5831] usb 4-1: USB disconnect, device number 34 [ 797.684870][T15897] binder: 15896:15897 ioctl c0306201 200000001a80 returned -14 [ 797.736236][T15902] macvtap1: entered allmulticast mode [ 797.742126][T15902] veth0_macvtap: entered allmulticast mode [ 797.744466][T15904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.762870][T15904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.776475][T15904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.785513][T15904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.798874][T15904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.808070][T15904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.156567][T15912] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2558'. [ 799.481327][T15928] netlink: 774 bytes leftover after parsing attributes in process `syz.6.2563'. [ 800.093724][ T10] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 800.277691][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 800.297653][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 800.380047][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 800.389593][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 800.398745][ T10] usb 7-1: SerialNumber: syz [ 800.528486][ T10] cdc_mbim 7-1:1.0: MBIM functional descriptor missing [ 800.541628][ T10] cdc_mbim 7-1:1.0: bind() failure [ 800.849579][T15955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.895444][T15955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.020166][T15963] netlink: 774 bytes leftover after parsing attributes in process `syz.7.2575'. [ 801.122036][ T5831] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 801.317683][ T5831] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 801.327019][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.382387][ T5831] usb 6-1: Product: syz [ 801.409670][ T5831] usb 6-1: Manufacturer: syz [ 801.421640][ T5831] usb 6-1: SerialNumber: syz [ 801.463978][ T5831] usb 6-1: config 0 descriptor?? [ 801.689651][ T5831] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 801.972224][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 802.134992][ T10] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 802.144896][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.161395][ T10] usb 4-1: config 0 descriptor?? [ 802.177951][ T10] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 802.190185][ T10] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 802.381722][ T10] usb 4-1: USB disconnect, device number 35 [ 802.411874][T15987] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2582'. [ 802.719139][ T5913] usb 7-1: USB disconnect, device number 64 [ 803.033753][T15993] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2584'. [ 803.576096][ T5831] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 803.599703][ T5831] usb 6-1: USB disconnect, device number 87 [ 803.985507][T16005] loop5: detected capacity change from 0 to 7 [ 803.995423][T16005] Dev loop5: unable to read RDB block 7 [ 804.025298][T16005] loop5: unable to read partition table [ 804.040522][T16005] loop5: partition table beyond EOD, truncated [ 804.061409][T16005] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 804.415054][T16011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.445761][T16011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.487577][T16011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.542882][T16021] netlink: 'syz.5.2588': attribute type 12 has an invalid length. [ 804.613351][T16011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.902518][ T31] INFO: task syz.1.1986:13770 blocked for more than 143 seconds. [ 804.916745][ T31] Tainted: G L syzkaller #0 [ 804.924412][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 804.965342][ T31] task:syz.1.1986 state:D stack:24696 pid:13770 tgid:13766 ppid:5844 task_flags:0x480140 flags:0x00080002 [ 805.060418][ T31] Call Trace: [ 805.087984][ T31] [ 805.097957][ T31] __schedule+0x149b/0x4fd0 [ 805.128255][ T31] ? __pfx___schedule+0x10/0x10 [ 805.191864][ T31] ? schedule+0x91/0x360 [ 805.336143][T16028] PM: Image not found (code -22) [ 805.357562][ T31] schedule+0x165/0x360 [ 805.361898][ T31] schedule_timeout+0x9a/0x270 [ 805.480959][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 805.490201][ T31] ? do_raw_spin_lock+0x121/0x290 [ 805.501424][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 805.538898][ T31] ? wait_for_completion+0x267/0x5d0 [ 805.545894][ T31] wait_for_completion+0x2bf/0x5d0 [ 805.740614][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 805.753082][ T31] i2c_del_adapter+0x591/0x760 [ 805.765528][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 805.776040][ T31] ? __pfx_cp2112_remove+0x10/0x10 [ 805.789675][ T31] ? kernfs_put+0x40e/0x470 [ 805.798962][ T31] ? sysfs_remove_group+0x23d/0x2f0 [ 805.810277][ T31] ? __pfx_cp2112_remove+0x10/0x10 [ 805.823741][ T31] cp2112_remove+0x5b/0x100 [ 805.834702][ T31] hid_device_remove+0x228/0x370 [ 805.846361][ T31] ? __pfx_hid_device_remove+0x10/0x10 [ 805.913742][ T31] device_release_driver_internal+0x46f/0x800 [ 805.924223][ T31] bus_remove_device+0x34d/0x440 [ 805.938934][ T31] device_del+0x511/0x8e0 [ 805.955583][ T31] ? __pfx_device_del+0x10/0x10 [ 806.023300][ T31] hid_destroy_device+0x6b/0x1b0 [ 806.038987][ T31] usbhid_disconnect+0x9f/0xc0 [ 806.047251][ T31] usb_unbind_interface+0x26e/0x910 [ 806.060340][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 806.067312][ T31] device_release_driver_internal+0x4d9/0x800 [ 806.080642][ T31] bus_remove_device+0x34d/0x440 [ 806.095345][ T31] device_del+0x511/0x8e0 [ 806.108599][ T31] ? __pfx_device_del+0x10/0x10 [ 806.116684][ T31] ? kobject_put+0x531/0x570 [ 806.123829][ T31] usb_disable_device+0x3d4/0x8e0 [ 806.129331][ T31] usb_disconnect+0x32f/0x990 [ 806.138233][ T31] hub_quiesce+0x171/0x330 [ 806.143245][ T31] hub_disconnect+0xc8/0x470 [ 806.148001][ T31] usb_unbind_interface+0x26e/0x910 [ 806.155711][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 806.171051][ T31] device_release_driver_internal+0x4d9/0x800 [ 806.187126][ T31] proc_disconnect_claim+0x2e1/0x380 [ 806.204462][ T31] ? trace_contention_end+0x39/0x100 [ 806.218815][ T31] ? __pfx_proc_disconnect_claim+0x10/0x10 [ 806.234657][ T31] ? __mutex_lock+0x335/0x1350 [ 806.248517][ T31] usbdev_ioctl+0x130c/0x20b0 [ 806.259791][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 806.277557][ T31] ? __fget_files+0x2a/0x420 [ 806.290837][ T31] ? __fget_files+0x3a0/0x420 [ 806.305902][ T31] ? __fget_files+0x2a/0x420 [ 806.318382][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 806.330435][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 806.347475][ T31] __se_sys_ioctl+0xfc/0x170 [ 806.360834][ T31] do_syscall_64+0xec/0xf80 [ 806.371039][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.391265][ T31] ? trace_irq_disable+0x37/0x100 [ 806.408359][ T31] ? clear_bhb_loop+0x60/0xb0 [ 806.418047][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.436049][ T31] RIP: 0033:0x7f753f98f749 [ 806.449090][ T31] RSP: 002b:00007f75407f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 806.476298][ T31] RAX: ffffffffffffffda RBX: 00007f753fbe5fa0 RCX: 00007f753f98f749 [ 806.490662][ T31] RDX: 0000200000000000 RSI: 000000008108551b RDI: 0000000000000008 [ 806.504295][ T31] RBP: 00007f753fa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 806.513534][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.521668][ T31] R13: 00007f753fbe6038 R14: 00007f753fbe5fa0 R15: 00007f753fd0fa28 [ 806.531015][ T31] [ 806.535064][ T31] INFO: task syz.1.1986:13771 blocked for more than 145 seconds. [ 806.545868][ T31] Tainted: G L syzkaller #0 [ 806.553742][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 806.564197][ T31] task:syz.1.1986 state:D stack:28728 pid:13771 tgid:13766 ppid:5844 task_flags:0x400040 flags:0x00080002 [ 806.578354][ T31] Call Trace: [ 806.581656][ T31] [ 806.585004][ T31] __schedule+0x149b/0x4fd0 [ 806.589849][ T31] ? __pfx___schedule+0x10/0x10 [ 806.596519][ T31] ? schedule+0x91/0x360 [ 806.601828][ T31] schedule+0x165/0x360 [ 806.606441][ T31] schedule_preempt_disabled+0x13/0x30 [ 806.612498][ T31] __mutex_lock+0x7e6/0x1350 [ 806.617381][ T31] ? __mutex_lock+0x5bb/0x1350 [ 806.622294][ T31] ? usbdev_ioctl+0x140/0x20b0 [ 806.627192][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 806.632616][ T31] usbdev_ioctl+0x140/0x20b0 [ 806.637252][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 806.642539][ T31] ? __fget_files+0x2a/0x420 [ 806.647248][ T31] ? __fget_files+0x3a0/0x420 [ 806.652117][ T31] ? __fget_files+0x2a/0x420 [ 806.656751][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 806.661787][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 806.667247][ T31] __se_sys_ioctl+0xfc/0x170 [ 806.671873][ T31] do_syscall_64+0xec/0xf80 [ 806.676925][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.683288][ T31] ? trace_irq_disable+0x37/0x100 [ 806.688348][ T31] ? clear_bhb_loop+0x60/0xb0 [ 806.693418][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.699512][ T31] RIP: 0033:0x7f753f98f749 [ 806.705502][ T31] RSP: 002b:00007f75407d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 806.714144][ T31] RAX: ffffffffffffffda RBX: 00007f753fbe6090 RCX: 00007f753f98f749 [ 806.722480][ T31] RDX: 00002000000006c0 RSI: 00000000c0185500 RDI: 0000000000000008 [ 806.730503][ T31] RBP: 00007f753fa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 806.738620][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.747141][ T31] R13: 00007f753fbe6128 R14: 00007f753fbe6090 R15: 00007f753fd0fa28 [ 806.755524][ T31] [ 806.758609][ T31] [ 806.758609][ T31] Showing all locks held in the system: [ 806.792102][ T31] 1 lock held by khungtaskd/31: [ 806.837817][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 806.848065][ T31] 2 locks held by getty/5590: [ 806.852859][ T31] #0: ffff88814eb450a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 806.862855][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 806.873292][ T31] 3 locks held by kworker/u8:17/5992: [ 806.878710][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 806.890648][ T31] #1: ffffc9000513fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 806.902242][ T31] #2: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 806.912189][ T31] 4 locks held by kworker/u8:3/10644: [ 806.917594][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 806.927841][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 806.937452][ T31] #2: ffff8880b87260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 806.946617][ T31] #3: ffffffff99ad6e78 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x87/0x540 [ 806.957262][ T31] 4 locks held by kworker/u8:12/11894: [ 806.963348][ T31] 5 locks held by syz.1.1986/13770: [ 806.969049][ T31] #0: ffff888144704198 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x140/0x20b0 [ 806.978563][ T31] #1: ffff888144705160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 806.989691][ T31] #2: ffff88807f16f198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 806.999464][ T31] #3: ffff88807c4dd160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 807.011038][ T31] #4: ffff8880558f5a20 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 807.022292][ T31] 1 lock held by syz.1.1986/13771: [ 807.027417][ T31] #0: ffff888144704198 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x140/0x20b0 [ 807.036739][ T31] 2 locks held by syz.5.2588/16006: [ 807.042196][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 807.051198][ T31] #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0 [ 807.062533][ T31] [ 807.065972][ T31] ============================================= [ 807.065972][ T31] [ 807.074640][ T31] NMI backtrace for cpu 0 [ 807.074661][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 807.074688][ T31] Tainted: [L]=SOFTLOCKUP [ 807.074695][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 807.074706][ T31] Call Trace: [ 807.074715][ T31] [ 807.074724][ T31] dump_stack_lvl+0xe8/0x150 [ 807.074753][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 807.074781][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 807.074813][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 807.074842][ T31] sys_info+0x135/0x170 [ 807.074863][ T31] watchdog+0xf95/0xfe0 [ 807.074893][ T31] ? watchdog+0x20a/0xfe0 [ 807.074926][ T31] kthread+0x711/0x8a0 [ 807.074954][ T31] ? __pfx_watchdog+0x10/0x10 [ 807.074979][ T31] ? __pfx_kthread+0x10/0x10 [ 807.075005][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 807.075033][ T31] ? __pfx_kthread+0x10/0x10 [ 807.075058][ T31] ret_from_fork+0x510/0xa50 [ 807.075078][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 807.075095][ T31] ? __switch_to+0xc9e/0x1480 [ 807.075125][ T31] ? __pfx_kthread+0x10/0x10 [ 807.075151][ T31] ret_from_fork_asm+0x1a/0x30 [ 807.075191][ T31] [ 807.075199][ T31] Sending NMI from CPU 0 to CPUs 1: [ 807.205662][ C1] NMI backtrace for cpu 1 [ 807.205681][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 807.205705][ C1] Tainted: [L]=SOFTLOCKUP [ 807.205712][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 807.205722][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 807.205744][ C1] Code: 13 e3 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 807.205759][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c2 [ 807.205774][ C1] RAX: 00000000010f48f5 RBX: ffffffff819713ee RCX: 0000000080000001 [ 807.205787][ C1] RDX: 0000000000000001 RSI: ffffffff8d79207b RDI: ffffffff8bc083e0 [ 807.205800][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 807.205814][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822270 [ 807.205827][ C1] R13: 1ffff110038d4b70 R14: 0000000000000001 R15: 0000000000000001 [ 807.205839][ C1] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 807.205853][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 807.205866][ C1] CR2: 00007f7a21db7198 CR3: 00000000790f6000 CR4: 00000000003526f0 [ 807.205882][ C1] Call Trace: [ 807.205889][ C1] [ 807.205896][ C1] default_idle+0x13/0x20 [ 807.205915][ C1] default_idle_call+0x73/0xb0 [ 807.205936][ C1] do_idle+0x1be/0x4d0 [ 807.205953][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 807.205973][ C1] ? __pfx_do_idle+0x10/0x10 [ 807.205995][ C1] cpu_startup_entry+0x44/0x60 [ 807.206014][ C1] start_secondary+0x101/0x110 [ 807.206038][ C1] common_startup_64+0x13e/0x147 [ 807.206067][ C1] [ 807.382844][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 807.389819][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 807.400511][ T31] Tainted: [L]=SOFTLOCKUP [ 807.404831][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 807.415579][ T31] Call Trace: [ 807.419050][ T31] [ 807.422008][ T31] vpanic+0x1e0/0x670 [ 807.425990][ T31] panic+0xb9/0xc0 [ 807.429707][ T31] ? __pfx_panic+0x10/0x10 [ 807.434187][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 807.439743][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 807.445910][ T31] watchdog+0xfdf/0xfe0 [ 807.450077][ T31] ? watchdog+0x20a/0xfe0 [ 807.454414][ T31] kthread+0x711/0x8a0 [ 807.458483][ T31] ? __pfx_watchdog+0x10/0x10 [ 807.463159][ T31] ? __pfx_kthread+0x10/0x10 [ 807.467749][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 807.472958][ T31] ? __pfx_kthread+0x10/0x10 [ 807.477557][ T31] ret_from_fork+0x510/0xa50 [ 807.482156][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 807.487283][ T31] ? __switch_to+0xc9e/0x1480 [ 807.491982][ T31] ? __pfx_kthread+0x10/0x10 [ 807.496577][ T31] ret_from_fork_asm+0x1a/0x30 [ 807.501352][ T31] [ 807.504733][ T31] Kernel Offset: disabled [ 807.509055][ T31] Rebooting in 86400 seconds..