last executing test programs: 11m28.319284875s ago: executing program 4 (id=4513): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x1c4100) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x1000000, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) 11m27.951080323s ago: executing program 4 (id=4514): ftruncate(0xffffffffffffffff, 0x51a9497) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x68, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x4}]}, 0x68}}, 0x0) socketpair(0x11, 0xa, 0x586dcd19, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) poll(&(0x7f0000000100)=[{r2, 0x6086}, {r2, 0x1a0}], 0x2, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002140)=@filter={'filter\x00', 0xe, 0x4, 0x4c0, 0xffffffff, 0xf0, 0x320, 0xf0, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'netdevsim0\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @empty, [0x0, 0xff, 0xffffffff, 0xff000000], [0x0, 0xffffffff, 0x0, 0xffffff00], 'bond_slave_0\x00', 'erspan0\x00', {0xff}, {}, 0x32, 0xd, 0x7, 0x49}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x4, 0x401], 0x5, 0x10, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x19}, @dev={0xfe, 0x80, '\x00', 0x25}, @private2, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @remote}, @empty, @mcast1, @loopback, @loopback, @remote], 0xe}}, @common=@ipv6header={{0x28}, {0xe2, 0xb}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x101}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, [0xff, 0xffffff00, 0x0, 0xff000000], [0xff, 0xffffff00, 0xffffffff, 0xff000000], 'erspan0\x00', '\x00', {}, {}, 0x2b, 0x3, 0x6, 0x20}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000140)={0x0, 0x0, "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", "809bf58353680de55d90e4118fa9e4bb32a337c8180a48123eec305eec62d0ecd9d013cc45fc121eaeb72c11c5f4ffeb3af555952140290e2dde887198eb7e399def0d0a8ad56d5e27132abcd516d48711198e170427a64386ce300805d131e4c5fded31aac90d5e05975bc2408054db4d67b21490e2415df6b9b5d687b3b2a72d35931fe98f02e1d653cff005bb5a77c9cd793789f93568ac4ec8db2b248d56c9c712275bb31eef92145af46d99ef418d9931198b7f5795f5b9cd1bab643dbf8d0f9f7edebf444317dcb3667463ae2a0d422e056ade841edf482accbba255adde7d17cc713045de77ce01d16f49d6d10115ca5129c10c652351af4503cb5d58f4bb3e1c4fcad63a90840e571b4fc9276d42b57a6e84249af98f3524dfd487eb026d2af8106cc9ead75e1175a4235a4eb04646b9097dd0b989e74b749f68a0c15ef46493eb37c77ce5e3f846ff97e2f97599ef9cd0888c4cb21db8a499dd29d15bd89ce0cce4a19a90abdde1e61acbdf124577d684584279e4c3348b464c8b58ab68541bbe560986cc5e5960384dac227e07f36a17c75f583745ac3dd5698e729464130fdddab6394210cd612f4c9ccd9ca7dcdb5f81e4da326a1a67daaf75c4ae5271e4d5458147feac70f13715610183efdcd257f6964287d3d7a9b2c56b6d7667c3d314e42eb05e308f0d86bd1cd0e473f054a4966f199ca40602a4f89c2e0287452a96869d0bf47bb51bdbc09067d3a9d915d461621fa2dd96a5269d157a94b20089898fae189f5183f8894b0c25013422c0bc080aa342303ddb73a6adc26508e4b4b32afc8ea1f93cece7d8bfd13d150f07cb7f053721cb64152868e362946b1d4305de6de9dd972e484d7d985c7592a1b5ea14f6df86c00ac943b607a5b02612bcd39677f13011d5f97f4638c54d00fd755ce765376455d0f24bb7864a128b117e3f8525876b62018153aaf09f8c237c1737841d3c087219d232613062cb8ad986a46cdfea728e2d5ae82f8ac32b606602c716a37800b482f8a5e9bc8e36160ec6615ad76c9656c4dc640c3d343bef9e4ccc4a4cdbff260cba311413e598f79a4b08c286012df798749b933a29c834a1d1a9ee1b93c5c297617f197f1d777227b8d419a579fc55430a08d4c823bcc2b86b680dae8d61ca1d3f9adef8eba3190094f102e782714402ad254978aed72f5a0d75c0901fdf513f3fb84531b48d7c315ed1a2b996bc30228065f29050a449e58bc82a78667913bb0d1cd5689ac9a08bb122b4fecd3e9736afed9e04b7ebf6e01c39a34f00d87c857561200796bab293e9ac23644a1a5d9bcf892eb0fbe30228e207cbd2d8a424069a5f7d7b4b78290348fcd81eaee7e553ffedfd4143a842605ddfe7e6c3ada61973a77387362c7f7c2558d09d6fd75a14bb45510c3b952a81268dc0b20fb142939946f37fd2994efe7c2682838eebcc883c07cee2b08d75d2f9ccec9db96c485f73231158e97c391876172b351a3f35b3cf77e11a030c54447fae6a5c2c4dd4fef6d073413e8a8096cc5096be0cbef0d7a4fdb6afdd5e936da52b601b83267847a6a5c2787a361d59f09413cb849b956d1a0049ad045d669106c034c15b7452d5481e7a6c2502a5d36f1b764217b8fd0b445929fa6acfeb6147b92c5741fe7b73a9559a616ac0cfab94473632f1f914686d4e21f144accab95e68b15b86167e73c4386c90446601452ec075b5b06fd36c5418f7d9f1de19deee5cf2b8a56ff1af97b6f4a2f16abbfe33f456d917d583a099b9df39d5362af5d90cbd0801c4a74c6072cb9b1ec7a7a8c0acb3471e71b3c4e74337920bf51566350044be8c01059fba9d3731ad3a66fb7765acd6104799a347a2aed5844ae33cdf8cbaa335cec22d59b8336f501a1b1aa5d986d7f28311b063030da77d2d29cd62169c71bd33cbab09b9119c47d4f8df7668b262497abeece33ae0eb40aed7ee03deafa7914733f6ed3380672476841e662066aebeb1b75dde1ce69d29e8bb113b7dc904a4e1d53ca62352149d83d0805249a1aec985002898f3cd4939991add2154d7561242385420b27fd57ec1de288b01214818b738ffd8b6c8bc358e4c8c0d5839dc2ec32be189298192a39269ca00a25ac0f63da5a09c36bbac8ee74bd738d74456b1935af802b9c076f387ca13a1fc7108235f6077d68e23c77f21f08aaf8c7e8cec42784d2365bf830b34f85d630e1ff2a67155048db8de7bd9ef9ac4da5e4c7084b6610c4aba29e40104c60894b029297a90e37d73aac56f047b9b42a8668c96893517abf75782e040cc2ca5f3e59a2b5d89bb08b2d89bc12abca7f1ab62056bce91d9310ff592c9687ac64d052f13cae7c6fb026dce4e837478ba04ccd07c93fb92afae2e515e2428aa7e8761d13bd5c394b97a3a5dd22f7231f175abb26524d441cda7ce5a6b477f56f30a7135205cf1a8b053556a608333e552e5e9bfc37dbc6a8d811d5323edbfda61bca8849b51942bcf703ab223eb618ff3b1842dfa9bbf72b04ff63797256d5d93df1e6e0a3550c6fcc74623ab0523bd41297c5358f71ea2d224af421f682e80661e4b24412efcbfafcc651b3fb1612412e7ba56c6c4619821ecbb825bd0e594edceb8313763450757fac62af4fe1a2cf99f1552b92bee22dd44f03e46e436ac235bee5cadaa073cf9ffef2ee98dd5563262a638a4262c622975a6ea0948fb90b81e57583815b3673521d3bdca17144bb6a6d9c0d24999a9f454bba13d9f9d8f935fdd53a76e160d4213b13cf9dc525177e09efe43f8088e40c3334bf91a046a1067dd5d14af9f932db0e1ae46acf65645f6e921dcb1a3249f9d87d5d184f9b803b805506d812e74c86b9e03f14dd57aec9d3a71893f33696875938cc6c16f310f45fb25dbc321c09a4942c481d1be873bb433f6c41c78891b1d7ac6f92ac601e6cc2a9d9b70af57a1abda78ff54f67b0d7477840070f228a038f6e6ade243cbef13891517bd020739be23762ee9b7306c25a6fd88e9f69f0059b487a0e786e4409a9c865bdc8b4e99b3d21306c6052736d3e86ce899ec80891d65afb1f5c1ceb49670c52b4a988166b62e8565e2379655937da3c8bdcc14747fdcfda1cc1bda534b5703e94dda7d2767ff8011421a38d23bc669e930a42eb8396a331c39a87ff76ac63829a082c497f39bce0c23d7ab5cbccae3c9e24179c43da57478af27bca34b26fcebc4789e270c6bd55845fdb4bcd08982e36913de22f7bcfd2819f753024d6e76474cd4ece3a2d266bb38f261a7bbf7604ab004ee6769a4ae0b0027b192ace95352b6c428dd7087da492c0f19e7d08ced1b58db3cd9befefe65bf2f5837b5f912d6949bc198daeb1ad20f71367c744183b1d62fb2562ff6bb9b9c474b108b94b032d8aff267467d5f8dc3a5c70dbceef57e7a7e5d7349f6f27b34466c4582f7299be5599b4def38a460131ad4b56fec378a8ce3ba6e213989554b7725640ec4b5070dc4230f3aaad0fbbcf8157a689e102ed870b7c117a6456448ef3d94c0987313f16c9d2da76854c0f290dbe19da36a5f5502ac3a3ddda41707b490cab31403f87c4a769a98fa6f8b8cfade637d0bf846856d6df2e2aea874f6d590149a2330f1f97656f2d333b6d97b6b6e34a04bb26e4fdb14af17edcc81c0a302c985190c10e943329f4918eb5b01576da87bcdc605f5db63c56445585f43e513d2ec20f96e49cca4a877c2ef4b3b3a1bf57227825209fe04362c66b1db4241817c779a1d47d397cafc99f3778c5a2382ff438159cdab62cb10e20c768953c58b94385a89662dd21f084ec1f54672b054e1bd06f8998e0df9d443d6e587a4de09e73f8403f58c941c79919868720d7ce34b0b0b4d9efdadc47dc3c24ab782a038af17effaecba270a6a942bad0c6a6f25117c2d810d0071f6ba9257194a81c044715163ceb5f8d7696368c243874f9d0a234757dcc0c591bef676959c3ba7674e29ba80f546200294d5f162bfeb8f2fa7ccda030d6195282e905c0650f081fb62d9fbd97552f11472074be6faf0596bffbe9468e2ef5163087044bd909b82befbb8ce78b98a7d930270303a9e9d5cf7a1e35b6e03638127ee9b6575eb09428f3c6864e86ece26f6e2a7099322eacda4e93c73d8e5cd4cc1fe34a148ff78b40cb52ee997d31091d43f3b97bc56a3986dac5c202575e1416aabde074c27b475cae80adad0dd8d354fa6d4bf5da9f5f9db5b7e29c335da253fea4b6f4d3304ba588d6ee0bb3e254ef0140bfa224f0e5c49aef49e0c6d756a179a536086a7e253d6b5a709a5c866679cbee6f237b72c645576b35d89ed5b98b2458b9cf1178ffe740218e8fc5fe985e8a0f9a046915834bce2b7c8caafcdb6d7c3ac7b37c708daccc367654e17fece3255d6f8b1c742805cdc007c6538ca559e4eafe5f0fd02a5e936b3d397615e39c8fda06ab4491d95602279c3c7be3ef8ea86e51fd9ae9573ed0b3b078c5ffdd9d819c2cf1b4e6774b0c3dcb41657beaa3ba6f995d514e38ed06e6e5580e9cf117e61484c8ca301d021b431fcaf9cc9ecf59aa481ef1c9988ab3f997c1a94beaee61223a1f79762ee90c05a315d22e68b3986d33b7138ec367a57d219460a0971ef3b843ee7da8d273c57d0ef3988e9881901f61870aca2d3e8dee74e27739b478a20e81556cd1992a7b872ae013f5674607002bdd8bf5c0b6e3db538617e7aefb42bd7230464240ce1c00d23359b5c96496563bbebfe13f96c6cfaa6c2b769f4c04157d72943317700de3f94e65c1870c5ede82d11fb4903c5ce2e634a1b30a1bf01b67128774ca0af0d7d0baf5726f0f8be733607f0f085e48adcf9b80ede408dbf7847dfc43dc41abae53f14eef525086876c81f0bd062d789beb6296949d21c43f1df8fc66d4e8e8f02d6386f3a321aeea505dd2726bfcbd983a9b539195def66cbde208d78902a8f9b07807d16e69c8177998c00d9f12bf924429f2c49dc6ee18f665d5c06901fb7cbabfe1456ca7024dccd3e5f8e99dd6b4068c34a1abec85598b36f1445108044fe0dc409b406f36927343c0b42e47ab292428b8f75a61a34306067ceb83866ec66786e3ba3b9da009b2457091f7d994fa0c9615be94dab5560860af95a5da8610a07143722818f14a2de7f0b96082da8e7e55d4cc3b52fabe020e53e609e79792cb751a5b4e3e74b9ea889b875c1a2c7f67a6a98dc0f90f15fbac75f24ad689c52a7a986c4b504393baf0fe79f0a87821f345713bc277bdf602890628b2d3ed70524eff4bfe720cb28e1dd916b57854162993797a8032fba595a4ffbbd87e2449d4b67f33104e3d485a48db601669c669728677d56ee005e5193e7f47589b508ae3a995dd684826776657b41ead7ff8e0c4b94cd25d42cb87069703f2faf4e"}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001140)={r3, 0x7}) fchdir(r1) getrusage(0x0, &(0x7f0000002e40)) 11m27.74056033s ago: executing program 4 (id=4515): writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b8004", 0xd}], 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad05000100070000000500010007000000090002"], 0x74}}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000130000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 11m27.612214115s ago: executing program 4 (id=4516): r0 = socket(0x10, 0x803, 0x0) mq_open(&(0x7f0000000600)='$j\x99\x80\x80\x03l\x9a\x05\xb5\r9\xd3\xd8{VZq\xec\xa0F\xc8\x14{\xf9\xda{L^\x84-\x87\xe7\x97\xc2\xc2\xbd|\xe72\x81p7\xb7\xa4\xc0\xb5\xae>-\xbc\x16.\xda\x91\xe8\xf6\xe3\xc55\x822D\xbd\x13\x12\v\xadP \bm\xf5\xdb\nig\xbc\x1b\xd8\x12E\xeb\x80c\xd2\xfd\x9c\x04\xa0i\xda&\x9b\xb8\x1e\xeb\xfeF\x06L\x9e\xa1\xe6\xe1\xe0\xe5-\xae;\xe5\a\xc6I\xdfT\x9d\x85\xde/\xcc\x99\x8c\xfek\x95b\x04\r@\x1e\x96\xb2G&8\x81\xfaU\xcf\xc7\x9f5(4\xe3\x84ef\xa6\xdd_\xdc\r\xach\xa6\\\x14\xd8a\xecsP\xf5\x99\x81\x01\xca\xc7\xe4~\b\x00-\xd8\x83\"V\x89\xe3\x8dm!8\xb8J(K\xfd\xce\x8aLI\x12z\xb0\xc1\xc2\x00\xea\x9bR\xb4\xea@\x8aa\xc4\xcc\xb17{iQ@5\xda_\xfd\x99\xe1+]X\v\xdc\x8f\x06\x98\xefAE\x9f\xf0\xf5{\x8e\xf7l[B\xeb\xf3\xa8\xb9\xecn\x97\xca9\xf6q\xe9\r\xcb\xf4Y\x90\x06\x9a\\\x15\xa2\x8a\x8c\x945\x89U0\xef\x1cjy_0*\xdee\x1d\a\x02\xcd\x9c]>\xf03\xf6\x82\x89\xd9\x7fH\xaa\xf0)\x80\xe1\x17\xc9\xfd\x82;9d\aj\x98A\xaa[\xf1\x86:\xda\a\x18v\"\x00\xc5', 0x2, 0x1fc, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000030000002800018014000280080001000800000008000200000000f50c0001007564703a73797a32"], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000008ddd9cd88c"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000480)=ANY=[@ANYBLOB="030000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64, @ANYBLOB='\x00'/28], 0xc) socket$nl_generic(0x10, 0x3, 0x10) 11m27.290068903s ago: executing program 4 (id=4517): socket$kcm(0x2, 0x200000000000001, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0xe, 0x24000010, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x6, 0x6, @random="b8667c152066"}, 0x14) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xa6f6, 0x10, 0x2, 0x28b}, 0x0, &(0x7f0000000000), &(0x7f0000000000)) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r6 = dup2(r2, r2) socket(0x2b, 0x1, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x94000516) lsetxattr(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='urer.hashlimit\x00'], 0x0, 0x0, 0x1) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) fsopen(&(0x7f0000000180)='nfsd\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) recvmmsg(r8, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/95, 0x5f}], 0x1}, 0xff}], 0x1, 0x2000, 0x0) close(0x3) lseek(r7, 0x851, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041) 11m27.027123852s ago: executing program 4 (id=4518): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0xffffffff, 0x40000) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x3, 0x3, 0x1003, 0x6, 0xd, 0x7, 0x1}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) write(r2, &(0x7f0000000380)="88a96c864696ec545f8b765f2953156bae1f0d51131cf90d056c26f9fbb61532bc6dbea9cf1b8933cd9550e8fae9e4688070d97f50f7e1e959b6411e171bd9708386cb030011c17b510db0c6f5b5fbe4847f46eb3ef68724a9aee30af264c718f74b2a3b19da94b50e639c7f3e1d45faeb182e192dfcf93a57cc1da493981dba1639551626185e1546e26a10157fdb825f5ff6ab936e560749b021b1d4aa2345c9029b3036c78835f2f8d8249c1e0c502d8a0a30a65610c34402750616f99b31305dba", 0xc3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x1, 0x0, 0xfffffd11, 0x0, r6, 0xffffffff}, 0x50) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r7}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) r8 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r8, 0xc0305602, &(0x7f00000000c0)={0x0, 0x1, 0x1015}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000000000000000000000e0a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) 11m26.705290669s ago: executing program 32 (id=4518): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0xffffffff, 0x40000) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x3, 0x3, 0x1003, 0x6, 0xd, 0x7, 0x1}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) write(r2, &(0x7f0000000380)="88a96c864696ec545f8b765f2953156bae1f0d51131cf90d056c26f9fbb61532bc6dbea9cf1b8933cd9550e8fae9e4688070d97f50f7e1e959b6411e171bd9708386cb030011c17b510db0c6f5b5fbe4847f46eb3ef68724a9aee30af264c718f74b2a3b19da94b50e639c7f3e1d45faeb182e192dfcf93a57cc1da493981dba1639551626185e1546e26a10157fdb825f5ff6ab936e560749b021b1d4aa2345c9029b3036c78835f2f8d8249c1e0c502d8a0a30a65610c34402750616f99b31305dba", 0xc3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x1, 0x0, 0xfffffd11, 0x0, r6, 0xffffffff}, 0x50) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r7}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) r8 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r8, 0xc0305602, &(0x7f00000000c0)={0x0, 0x1, 0x1015}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000000000000000000000e0a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) 9m49.309761553s ago: executing program 1 (id=5068): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x400000000000000}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r5, 0x0, 0x0, 0x78f2a36b) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x4c831, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000280)='%\xdf\xf1\xcf(,c\xbe\xfbL:', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x8242, 0x4) 9m48.198652591s ago: executing program 1 (id=5073): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8005d}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8e", 0x4) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket(0xa, 0x3, 0x87) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@local, 0x18, r5}) (async) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@local, 0x18, r5}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x18, r5}) (async) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x18, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000)) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_usb_connect(0x2, 0x46, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0xd9, 0x80, 0x83, 0x40, 0x421, 0x42d, 0x6712, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x2, 0x7, 0x80, 0x10, "", [{{0x9, 0x4, 0x4d, 0x0, 0x0, 0x2, 0x2, 0xff, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x35e1, 0x1}, {0x6, 0x24, 0x1a, 0x3fe, 0x31}, [@mdlm_detail={0x5, 0x24, 0x13, 0xc, 'W'}]}]}}]}}]}}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x46, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0xd9, 0x80, 0x83, 0x40, 0x421, 0x42d, 0x6712, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x2, 0x7, 0x80, 0x10, "", [{{0x9, 0x4, 0x4d, 0x0, 0x0, 0x2, 0x2, 0xff, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x35e1, 0x1}, {0x6, 0x24, 0x1a, 0x3fe, 0x31}, [@mdlm_detail={0x5, 0x24, 0x13, 0xc, 'W'}]}]}}]}}]}}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0}) 9m48.093334355s ago: executing program 1 (id=5074): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x24202, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000001c0), &(0x7f0000000200)={'U+', 0x9}, 0x16, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x24, r2, 0x705, 0x70bd31, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xfffffffffffffe32}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r1, r3, 0x0) syz_usb_connect$uac3(0x2, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000000835121782400001020301090286000301034007080b0002010130010904000000010130"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x89, &(0x7f0000000040)=@string={0x89, 0x3, "8e1e1e5ab6e19efb9a04ee555547ea434aacfc054b5ae585a8566bac2ae1f0aee12e42c0d803c1bc3007693065323e392934215912894f6e72e34142c579ffb47227a1b3a69ef7ac5ed87f0dd675f360b483eb61fa10d80474897779b402e647535705cfe82a2472e2fdacdd79c965e4db6a27d2d4fdc77df7b66722a5c985ab921d91955d0f17"}}, {0x0, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3c0a}}]}) lseek(r1, 0x10001, 0x3) 9m46.576887655s ago: executing program 1 (id=5088): syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffff0180c200000308004500003000000000000190780a01010e2c1414aa04009078d00000e04500000000670048001100000000000002000000"], 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000240)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010101, 0x4e23, 0x9, 0x4e22, 0x7, 0xa, 0x80, 0x80, 0x33, r3, r5}, {0x8, 0x5, 0x6, 0xfffffffffffffc00, 0xd, 0x8e3, 0x5, 0xb226}, {0x10001, 0x10fac00, 0xffffffff, 0x10}, 0x7, 0x6e6bba, 0x0, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d4, 0x2b}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3507, 0x0, 0x0, 0x6, 0x9, 0x946, 0x8001}}, 0xe8) lchown(&(0x7f0000000000)='./file0\x00', r5, 0xee01) 9m45.652884179s ago: executing program 1 (id=5094): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') lseek(r4, 0x100000008, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000002c0)={0xa, @sliced={0x8001, [0x6, 0x6, 0x6, 0x8, 0x8, 0x1ff, 0x3, 0x0, 0x79a, 0x5, 0x150a, 0x7fff, 0x7, 0x8, 0x6, 0x2, 0xfffb, 0x7, 0xfffd, 0x7, 0x80, 0x8000, 0x2, 0x4297, 0x4, 0x5, 0xeb95, 0x1, 0x8, 0x4, 0x5, 0x7, 0x1000, 0x7f, 0xa62c, 0x7, 0xfffd, 0x8, 0xb, 0x9, 0x6, 0x6, 0xf, 0x8, 0x193, 0x9, 0x7, 0xfce4], 0x6}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x40400, 0x8) fcntl$notify(r6, 0x402, 0x8000003b) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) read$proc_mixer(r7, &(0x7f0000000380)=""/187, 0xbb) write$proc_mixer(r7, &(0x7f00000003c0)=ANY=[], 0x71) dup3(0xffffffffffffffff, r7, 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) 9m45.155743537s ago: executing program 1 (id=5098): socket$kcm(0x10, 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{&(0x7f00000003c0)=@phonet, 0x80, &(0x7f0000000840)=[{&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000580)=""/70, 0x46}, {&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000000740)=""/247, 0xf7}], 0x5, &(0x7f00000008c0)=""/39, 0x27}, 0x9}, {{&(0x7f0000000900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000009c0)=""/168, 0xa8}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002400)}, 0x200}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) io_setup(0x6, &(0x7f0000001380)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) mkdir(0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0x4}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r6, 0x0, r5, 0x0, 0x90, 0x0) write$FUSE_ENTRY(r7, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0x0, {0x7, 0x2, 0x8, 0x5, 0xffff2bfc, 0x3, {0x2, 0x80f, 0x7fff, 0x7, 0x800000000000a, 0xffc, 0x8, 0x802, 0x8, 0x8000, 0x2, 0x0, 0x0, 0x6704, 0x38311813}}}, 0x90) 9m44.369671043s ago: executing program 33 (id=5098): socket$kcm(0x10, 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{&(0x7f00000003c0)=@phonet, 0x80, &(0x7f0000000840)=[{&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000580)=""/70, 0x46}, {&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000000740)=""/247, 0xf7}], 0x5, &(0x7f00000008c0)=""/39, 0x27}, 0x9}, {{&(0x7f0000000900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000009c0)=""/168, 0xa8}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002400)}, 0x200}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) io_setup(0x6, &(0x7f0000001380)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) mkdir(0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0x4}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r6, 0x0, r5, 0x0, 0x90, 0x0) write$FUSE_ENTRY(r7, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0x0, {0x7, 0x2, 0x8, 0x5, 0xffff2bfc, 0x3, {0x2, 0x80f, 0x7fff, 0x7, 0x800000000000a, 0xffc, 0x8, 0x802, 0x8, 0x8000, 0x2, 0x0, 0x0, 0x6704, 0x38311813}}}, 0x90) 4m5.966591864s ago: executing program 5 (id=6774): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=@mpls_getroute={0x24, 0x1a, 0x1, 0x70bd25, 0x25dfdbfc, {0x1c, 0x80, 0x0, 0xff, 0xfe, 0x1, 0xfe, 0x8, 0x3a00}, [@RTA_DST={0x8, 0x1, {0x800, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) clock_gettime(0x0, &(0x7f0000000540)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540), 0x3, 0x0, 0x7}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x4, 0xf, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x38, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x98, 0x29, 0x36, {0x5e, 0xf, '\x00', [@generic={0xff, 0x40, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f"}, @pad1, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x4, 0x966, 0xfffffffffffffff7]}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3}}]}}}, @rthdr={{0x18}}], 0x190}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836c", 0xf90}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="b8010000100001002cbc7000000000002b80c0c91e9877c892bc0e0cf70280eefc010000000000000000e2ffffff000100000000000000000000ffff7f000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b8}}, 0x44050) 4m5.642495054s ago: executing program 5 (id=6775): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e0000002000b000000000000000000000000000000000000000000000000000000000800100000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000001000000000000000600"/83], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 4m5.481584882s ago: executing program 5 (id=6776): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x77359400}, {r1, r2+60000000}}, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x40) r3 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f00000001c0)={0x0, [[0x1, 0x0, 0x4000000], [0x7ff, 0x100003, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x91, 0x0, 0x738, 0x0, 0x8, 0x0, 0x1]], '\x00', [{0xfffffffe, 0x4}, {0x100775, 0xffffffff}, {0x0, 0x5}, {0x5}, {}, {0x8564}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x1}, {0xb6f}], '\x00', 0x5}) (async) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x2202, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000540)="ab2d3e76ac797a4cd8b70919b61eb5d07a1890cf6ff523fd85841332495b6351d971a785d06b7a625f0b886b772fe361b30f68bdf17635f8b23a3fb8311c482a9f90be4520ae09b98c9ee1dc1ec35b16096879fab7c40b5deaf2030940041b9742de58591dc288503c5ef8d2334710953161728142b1e25aa4afa272cc5913be1ac6a3159e827422e3bd3ba2370f800091a2fab6c4ee038913c004391711097e6a7b57c458f20950b85b72a102f98b31a475135dd7439e5d51b2f827b96abb152a782d", 0xc3}], 0x1) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000140)={0xfffff800, 0xfffff689, 0xfffffefe, 0xca, 0x9, "5eb658000000e500", 0x5f9, 0x10004}) (async) unshare(0x64000600) 4m5.374147919s ago: executing program 5 (id=6777): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24040, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) 4m5.04735345s ago: executing program 5 (id=6779): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c280"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 4m4.757531685s ago: executing program 5 (id=6781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r2, 0x5, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b2"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x38, r5, 0x1, 0x4, 0x2, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0xa001, 0x6, 0x81, 0xffff, 0x404, 0x8005, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44814}, 0x14) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x198, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x1e}}}}, [@NL80211_ATTR_IE={0x12f, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @measure_req={0x26, 0x3, {0x40, 0x0, 0x6}}, @ht={0x2d, 0x1a, {0x800, 0x1, 0x7, 0x0, {0x401, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x1, 0x5, 0xd}}, @mesh_chsw={0x76, 0x6, {0x1, 0x9, 0x23, 0x3}}, @peer_mgmt={0x75, 0x16, {0x0, 0x1ff, @val=0x8, @void, @val="38c55f360c31228ed2c8a121e9b9161b"}}, @mesh_chsw={0x76, 0x6, {0x7a, 0x3, 0x3a, 0x3}}, @random_vendor={0xdd, 0x94, "c4e4f038c9f9382d6b5bce80b0ebc4a786109c8b523e4f8bbe73399dc04145afdcf94606beb239c722f0c3dac9a672b1626487b243fb1405195d328b42453814080166a06eeca6b8fa6c49dfab9e060b1820eefec1c6fa3eb4b0ea8e7cd2b394042445d7c69dd61fc9379cd8440a98c7e59b445f817c1f96602472840ab978b1ab789cc9e860986545b3d5bd6114b2b9bdfc09b5"}, @mic={0x8c, 0x10, {0x5ba, "3a9ca8e5f25f", @short="4655c41e723a658e"}}, @random_vendor={0xdd, 0x35, "ba84ded2efcadbe2790f37ef5406727ffdf119bc19271422d6aa3483510351798a00bb550ee667433f089c65970914790dbe8e47bb"}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x198}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x68, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "322e73352ed5955d482ee5364c432384"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 4m4.553215844s ago: executing program 34 (id=6781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r2, 0x5, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b2"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x38, r5, 0x1, 0x4, 0x2, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0xa001, 0x6, 0x81, 0xffff, 0x404, 0x8005, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44814}, 0x14) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x198, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x1e}}}}, [@NL80211_ATTR_IE={0x12f, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @measure_req={0x26, 0x3, {0x40, 0x0, 0x6}}, @ht={0x2d, 0x1a, {0x800, 0x1, 0x7, 0x0, {0x401, 0x3, 0x0, 0x9, 0x0, 0x1}, 0x1, 0x5, 0xd}}, @mesh_chsw={0x76, 0x6, {0x1, 0x9, 0x23, 0x3}}, @peer_mgmt={0x75, 0x16, {0x0, 0x1ff, @val=0x8, @void, @val="38c55f360c31228ed2c8a121e9b9161b"}}, @mesh_chsw={0x76, 0x6, {0x7a, 0x3, 0x3a, 0x3}}, @random_vendor={0xdd, 0x94, "c4e4f038c9f9382d6b5bce80b0ebc4a786109c8b523e4f8bbe73399dc04145afdcf94606beb239c722f0c3dac9a672b1626487b243fb1405195d328b42453814080166a06eeca6b8fa6c49dfab9e060b1820eefec1c6fa3eb4b0ea8e7cd2b394042445d7c69dd61fc9379cd8440a98c7e59b445f817c1f96602472840ab978b1ab789cc9e860986545b3d5bd6114b2b9bdfc09b5"}, @mic={0x8c, 0x10, {0x5ba, "3a9ca8e5f25f", @short="4655c41e723a658e"}}, @random_vendor={0xdd, 0x35, "ba84ded2efcadbe2790f37ef5406727ffdf119bc19271422d6aa3483510351798a00bb550ee667433f089c65970914790dbe8e47bb"}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x198}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x68, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "322e73352ed5955d482ee5364c432384"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 9.227567305s ago: executing program 7 (id=7776): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x6f) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000240)=[{&(0x7f00000004c0)="2d9b1d0000e000000001000000000000000000005315b443b7d788aec4bf4890556e91eebbdef82765cda6401bcf473eb55635e9", 0x34}], 0x1}}], 0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc841) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.906359519s ago: executing program 7 (id=7777): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x30314247, 0x0, 0x0, [{0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x2}, {}, {0x10}], 0x0, 0x0, 0x2}}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES16=r0], 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 6.604048071s ago: executing program 6 (id=7787): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209000100"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r1, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r1, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000003680)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x800) (async) sendmmsg$alg(r4, &(0x7f0000003680)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x800) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000001b80)={&(0x7f0000000300)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/181, 0xb5}], 0x1}}], 0x1, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x2000) (async) syz_open_dev$dri(0x0, 0x0, 0x2000) syz_usb_connect(0x2, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x300, 0xc6, 0x14, 0xd6, 0x8, 0x1235, 0x10, 0x7efe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x90, 0x8, 0xd0, 0x4, "", [{{0x9, 0x4, 0x76, 0x2, 0x1, 0xa0, 0x54, 0x50, 0x9, [], [{{0x9, 0x5, 0x8, 0x10, 0x200, 0x3, 0x8, 0x89, [@generic={0x9, 0x4, "aac52b32686de8"}]}}]}}]}}]}}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0}) 5.771553379s ago: executing program 7 (id=7794): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@delnexthop={0x20, 0x69, 0x400, 0x70bd26, 0x25dfdbff, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x8, 0x0, 0x80}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r3, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f000000acc0)=""/4087, 0xff7}, {0x0}], 0x2}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB='\b'], 0x90}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xc0000000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) file_getattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x18, 0x400) 5.111855511s ago: executing program 7 (id=7795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3000f4ff0034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004d4010000020a05"], 0x250}, 0x1, 0x0, 0x0, 0x24008011}, 0x0) 4.977952084s ago: executing program 0 (id=7796): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=@mpls_getroute={0x24, 0x1a, 0x1, 0x70bd25, 0x25dfdbfc, {0x1c, 0x80, 0x0, 0xff, 0xfe, 0x1, 0xfe, 0x8, 0x3a00}, [@RTA_DST={0x8, 0x1, {0x800, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) clock_gettime(0x0, &(0x7f0000000540)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540), 0x3, 0x0, 0x7}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x4, 0xf, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x38, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x98, 0x29, 0x36, {0x5e, 0xf, '\x00', [@generic={0xff, 0x40, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f"}, @pad1, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x4, 0x966, 0xfffffffffffffff7]}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3}}]}}}, @rthdr={{0x18}}], 0x190}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="b8010000180001002cbc7000000000002b80c0c91e9877c892bc0e0cf70280eefc010000000000000000e2ffffff000100000000000000000000ffff7f000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b8}}, 0x44050) 4.960196028s ago: executing program 7 (id=7797): openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x8, @remote, 0x3}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0xd, 0x820d, 0x203, 0x200, r4}, &(0x7f0000000100)=0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ff8000) r6 = dup3(r5, r0, 0x80000) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000034c0)={0x2020}, 0xcac) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4, 0x5}]}, 0x10) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x1, 0x6, @local}, 0x14) syz_usb_connect(0x2, 0x3b, &(0x7f0000000a40)=ANY=[@ANYBLOB="120101026e694b109911039000d7010203010902290001fb0780020904000000ffd36b0505240600000000d1000200400000000000000000"], &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0}) 4.270937512s ago: executing program 0 (id=7798): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) fsopen(&(0x7f0000000340)='hugetlbfs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x2080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.142046699s ago: executing program 6 (id=7799): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x4175, &(0x7f00000002c0)={0x0, 0x136f, 0x40, 0x0, 0x2d0}, &(0x7f0000000140), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00'}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1a, 0x0, 0x0, 0x0) 3.903614745s ago: executing program 6 (id=7801): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 3.662360907s ago: executing program 6 (id=7802): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'dummy0\x00', @broadcast}) read$FUSE(r1, &(0x7f0000008340)={0x2020}, 0x2020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xb, 0xfff3}, {0x2, 0xffff}}, ["", ""]}, 0x24}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x130, 0x0, 0x2, {0x2, 0x3, 0x0, '\x00', {0x427167f3b73c1d19, 0x7ff, 0xadf, 0x10, 0x0, 0x0, 0x2000, '\x00', 0x6, 0x8000000000000001, 0x1, 0x3, {0x8, 0x6}, {0x4000000000006, 0xb}, {0x2000001, 0xd}, {0x4, 0x9fe}, 0x2000, 0x6, 0xc0, 0x7}}}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) writev(r0, &(0x7f0000003400)=[{0x0}, {&(0x7f00000005c0)="2890d1b12fb7c5a4948a84bcd5a8b830d9080624d863f59c3b96f5ce6e82cee8bdd5a507bab894f9f234c59bc9c790ad6ab7ff835cf35c5637db64271d3e85e5c400000000000000cdf75e54f11f9ce75db56ba67d749ef9b243ced6201a64d140f8f313634f66c7db82d181ab2a9e6e5061d9cfeb147f3c6481819221c6917a2304000000000000006b9b8c053d49932592209efd63adb243d7c7b25bde5a4d762fe00ca5734476620a48085b67ad33bcb20b32b0d41137d34ed700c21a7e164fae8dc88c5f32c84e2df869ef1024eadf09660ff0a155c12a6e7ee662e573e0ec6901bf2dc61164e151b89e24cd2b2fb166b7", 0xf3}, {&(0x7f0000002180)="6f661ecd27910ad4518ec8c386249ed938fcb17093900b101d8b20340e85088bda13b1c6027e85ad52b02500", 0x2c}, {&(0x7f00000021c0)}, {&(0x7f0000001940)="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"/1910, 0x776}], 0x5) r3 = syz_open_dev$evdev(&(0x7f0000001900), 0xfffffffffffffffc, 0x0) read$hidraw(r3, &(0x7f00000008c0)=""/257, 0x101) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x5e) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x94, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000580), 0x4) syz_emit_ethernet(0x82, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x7f, 0x200, 0xffff7fff, 0x8, 0xffffffff}, 0x14) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002227d2b1f9e0602349756c6a9fe65d"], 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="91229708a14b87145f8ad1bbc325c294040c37", 0x13, 0x4040000, &(0x7f00000000c0)={0xa, 0x4e24, 0xfffffe00, @mcast2, 0x2}, 0x1c) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) 3.413531508s ago: executing program 0 (id=7803): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r0 = inotify_init1(0x81800) r1 = socket$inet(0x10, 0x3, 0x80) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x7fff, 0xc78e}, {0xfffffffd}]}}) r2 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r4 = dup(r0) inotify_rm_watch(r4, r2) 3.079441402s ago: executing program 0 (id=7804): keyctl$instantiate(0xc, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="6e65772064656661756c74207365723a73797a2030303030303030303030303030303030380b2f23012764c8b1a581b38990223430393300"], 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/96, 0x60) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000300)="7800000018002507b9409b02ffff48000203be04020406050a08040c5c000900580004020a0000000d0085a168d0bf46d32345653600648d270016000a09000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004070b0015000a0000000000e000e218d1dd3b6ed538640f3250", 0x78, 0x0, 0x0, 0x0) fsopen(&(0x7f00000000c0)='ubifs\x00', 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, &(0x7f0000000340)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r4, 0x0, &(0x7f0000000180)="dba8e2", 0x3, 0x50000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000001080)={0x28, 0x1, r6, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r1, 0x0, 0x4000001) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102f7"], 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000003c0)={0x1}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000002400)="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", 0x4bd}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) 1.734052582s ago: executing program 3 (id=7806): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x6f) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000240)=[{&(0x7f00000004c0)="2d9b1d00000000010001000000000000000000005315b443b7d788aec4bf4890556e91eebbdef82765cda6401bcf473eb55635e9", 0x34}], 0x1}}], 0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc841) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.732768034s ago: executing program 7 (id=7807): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) r1 = socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff, 0x2}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000400), 0xfffffffffffffea8) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400c0defc2276acff0100000000000000000000000000010c0002800500010000000000440002802c000180140003000000000000000000aa14000400000000000000000000000000000000011400018008000100e000000108000200ac141444080007400000000000"], 0x9c}}, 0x28000080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r2, @ANYRES64=r3], 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003010101"], 0x38}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r7 = accept4$alg(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="01", 0x1}], 0x1, 0x0, 0x0, 0x20040010}], 0x1, 0x40001c0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xc98, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xbc8, 0xffffffff, 0xffffffff, 0xbc8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x2}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcf8) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x4000000000, 0x416480) ioctl$HIDIOCSFLAG(r9, 0x4004480f, &(0x7f0000000140)=0x2) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$HIDIOCGUSAGE(r9, 0xc018480b, 0x0) 1.729110802s ago: executing program 3 (id=7808): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x1c4100) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x100000, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) 1.659041948s ago: executing program 3 (id=7809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3000f5ff0034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004d4010000020a05"], 0x250}, 0x1, 0x0, 0x0, 0x24008011}, 0x0) 1.536797364s ago: executing program 3 (id=7810): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x11, r1, 0x1, 0x81, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}}], 0x2, 0x40500f0) 577.420979ms ago: executing program 2 (id=7814): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x556, 0x40, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9}, {0x350, 0x20002, 0xffffffff}, {0x10, 0x300}, {0x4, 0x4000000, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3f000000, 0x2, 0x0, 0x4}) 466.771191ms ago: executing program 2 (id=7815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r3, 0x5, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b2"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x24, r7, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44814}, 0x14) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x68, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "322e73352ed5955d482ee5364c432384"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 429.806955ms ago: executing program 2 (id=7816): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40f15, 0x20a3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x81}, @IFLA_BR_AGEING_TIME, @IFLA_BR_MCAST_QUERIER_INTVL={0x0, 0x20, 0x2}]}}}, @IFLA_MTU={0xffffff04, 0x4, 0x100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 349.747569ms ago: executing program 0 (id=7817): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x1400, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 290.865182ms ago: executing program 2 (id=7818): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast6-avx\x00'}, 0x3ccc8c87c0b6dffa) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) write$tun(r2, &(0x7f0000000040)={@void, @val={0x0, 0x1, 0x4, 0x401, 0x1, 0x7}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @remote, @dev={0xfe, 0x80, '\x00', 0x20}, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}, 0x3e) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={&(0x7f0000000000)="9b4ff83256", &(0x7f0000000280)=""/229, &(0x7f0000000380)="b172e82c", &(0x7f0000000440)="072abcff0bc46e678afc9747381889fffefacf8fe5b72275b7a1877d525017d36d0a763a099dcd3c4e07a6dd5fad6d7fb2f33ef6c3bb0bcf75ecec10a7035733768c6d8e165b45b873fd880cbd56e99e8543fd6892c277d9fb2a4271a671619a5cec83ff7b1db33a5d9c3402", 0x0, r2}, 0x38) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f7", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000"], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 284.064966ms ago: executing program 2 (id=7819): r0 = syz_open_dev$video(&(0x7f000000e000), 0x3, 0x101140) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') fstat(r5, &(0x7f0000002f00)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[r3, r4], 0x2, 0x80000}) (async) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f000000e280)={0x9, 0x9, 0x1, 0x0, 0x1}) 257.306338ms ago: executing program 0 (id=7820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, 0x0, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f00000001c0)=0x1135010, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x5, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) 222.295599ms ago: executing program 6 (id=7821): r0 = inotify_init() ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x0, 0x7}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) inotify_init() (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x0, 0x7}) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) 130.829804ms ago: executing program 3 (id=7822): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x6f) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000240)=[{&(0x7f00000004c0)="2d9b1d000000000b0001000000000000000000005315b443b7d788aec4bf4890556e91eebbdef82765cda6401bcf473eb55635e9", 0x34}], 0x1}}], 0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc841) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 94.140554ms ago: executing program 6 (id=7823): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0xff7f000000000000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r5, 0x0, 0x0, 0x78f2a36b) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x4c831, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000280)='%\xdf\xf1\xcf(,c\xbe\xfbL:', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x8242, 0x4) 505.018µs ago: executing program 2 (id=7824): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0401000016000100000000000000000000000000000000050000000000000000fc0200000000000000000000000000004e200000000000000000000000000000b9b5d6952fc1a0f5391fbcf1a0210cfa8bd6de13ca8736c8819587c3d7b0e111b88b749c28a8e51f567015c0979c489e970d1165101d7739f6061e6d31ab5068a6562ed928e86d2fb944ac453718a33133903678b1f2812af471ca", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa00000000330000000000000000000000000000000000000005000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000300000000000000000000000000000000000000030000000000000001020000040000000a000000000000000000000005000000090000000c001c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x104}}, 0x4000080) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xd4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x8, 0xb, 0x1, 0x42}, {0x6, 0x400004, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}, @TCA_U32_CLASSID={0x8, 0x1, {0xa, 0xfff2}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000200)=0x1) close(0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000044) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)=r6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000140)) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f00000002c0)) ioctl$PPPIOCSFLAGS1(r10, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r10, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000240)=ANY=[@ANYRESHEX=r10], 0x0) r12 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r12, 0x80dc5521, &(0x7f0000000900)=""/135) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000018c0)={'team0\x00'}) 0s ago: executing program 3 (id=7825): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xc0002003}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000040)={r4, 0x8, {0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x12, 0x13, 0xd, "9aea047ae4f80dfc068e0dd562428157d20c8382e2afc08e66eaab6c924d68afc452e8cb5ebbb058747cde1240ea7fe789de238370159320104ea2e8aad463e9", "5adca21b6c68cd0838ea93eec6d53e404eb722cda3a5cf342b099eb87c40c9fb9a62bc3a17bb717f94aca1a894b445debd94429f28a73b008ec9a787890a9744", "e331ae2351694a3f10c2b43c787302f6494813075031d37203d8e152bf803750", [0x2, 0x1]}}) (async) syz_usb_connect(0x1, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0x6a, 0x78, 0x2a, 0x8, 0x2040, 0x4900, 0x4411, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xf2, 0xf7, 0x0, 0x5, "", [{{0x9, 0x4, 0x28, 0x4, 0x2, 0xfd, 0xc3, 0x57, 0xc, [], [{{0x9, 0x5, 0xd, 0x2, 0x3ff, 0x8, 0x9, 0x9}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x8, 0xc, 0x3}}]}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) kernel console output (not intermixed with test programs): ex_unlock_slowpath+0x1be/0x6f0 [ 1451.799663][T29824] ? __fget_files+0x3a0/0x420 [ 1451.799690][T29824] ? ksys_write+0x242/0x270 [ 1451.799711][T29824] ? __pfx_ksys_write+0x10/0x10 [ 1451.799736][T29824] __x64_sys_sendto+0xde/0x100 [ 1451.799756][T29824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.799774][T29824] do_syscall_64+0x174/0x580 [ 1451.799789][T29824] ? trace_irq_disable+0x3b/0x140 [ 1451.799811][T29824] ? clear_bhb_loop+0x40/0x90 [ 1451.799830][T29824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.799846][T29824] RIP: 0033:0x7f7d0ff9ce59 [ 1451.799862][T29824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.799874][T29824] RSP: 002b:00007f7d10e76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1451.799891][T29824] RAX: ffffffffffffffda RBX: 00007f7d10215fa0 RCX: 00007f7d0ff9ce59 [ 1451.799902][T29824] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1451.799912][T29824] RBP: 00007f7d10e76090 R08: 0000200000000000 R09: 0000000000000014 [ 1451.799922][T29824] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1451.799930][T29824] R13: 00007f7d10216038 R14: 00007f7d10215fa0 R15: 00007f7d1033fa48 [ 1451.799956][T29824] [ 1452.096473][T24208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.107410][T29831] sctp: [Deprecated]: syz.3.7414 (pid 29831) Use of int in max_burst socket option. [ 1452.107410][T29831] Use struct sctp_assoc_value instead [ 1452.251612][ T7183] usb 1-1: Using ep0 maxpacket: 8 [ 1452.271284][ T7183] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.290384][ T7183] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1452.319482][ T7183] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1452.342846][ T7183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.368863][ T7183] usb 1-1: Product: syz [ 1452.376994][ T7183] usb 1-1: Manufacturer: syz [ 1452.384594][T24208] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1452.407261][ T7183] usb 1-1: SerialNumber: syz [ 1452.425726][ T7183] usb 1-1: config 0 descriptor?? [ 1452.543812][T24208] usb 7-1: Using ep0 maxpacket: 32 [ 1452.552047][T24208] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1452.562801][T24208] usb 7-1: config 230 has an invalid descriptor of length 1, skipping remainder of the config [ 1452.580581][T24208] usb 7-1: config 230 has 2 interfaces, different from the descriptor's value: 3 [ 1452.700317][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.737594][ T7183] usb 1-1: USB disconnect, device number 83 [ 1452.814782][T24208] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1452.829430][T24208] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.849687][T24208] usb 7-1: Product: syz [ 1452.859606][T24208] usb 7-1: Manufacturer: syz [ 1452.870495][T24208] usb 7-1: SerialNumber: syz [ 1452.904049][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.215748][T24208] usb 7-1: unit 4 not found! [ 1453.230778][T24208] usb 7-1: unit 0 not found! [ 1453.664693][T29857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1453.788004][T29857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1454.237617][T29845] ALSA: mixer_oss: invalid OSS volume '' [ 1454.523983][ T5700] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1454.734346][ T5700] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1454.756924][T18648] net_ratelimit: 6 callbacks suppressed [ 1454.756941][T18648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.780946][ T5700] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1454.833777][ T5700] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 1454.868991][ T5700] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1454.939683][ T5700] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1454.962186][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.015333][ T5700] usb 1-1: Product: syz [ 1455.022729][ T5700] usb 1-1: Manufacturer: syz [ 1455.040131][ T5700] usb 1-1: SerialNumber: syz [ 1455.064236][T20504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.074822][ T5700] usb 1-1: config 0 descriptor?? [ 1455.131578][T29860] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1455.153955][ T3268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.199522][T10482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.218595][T20504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.275074][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.499413][ T5700] usb 1-1: USB disconnect, device number 84 [ 1455.665559][ T7183] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1455.716051][T29864] netlink: 7076 bytes leftover after parsing attributes in process `syz.3.7420'. [ 1455.794753][T10482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.803119][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.853807][ T7183] usb 3-1: Using ep0 maxpacket: 8 [ 1455.865021][ T7183] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 1455.884846][ T7183] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1455.912542][ T7183] usb 3-1: config 3 has no interface number 0 [ 1455.920407][ T7183] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1455.973885][ T7183] usb 3-1: config 3 interface 45 has no altsetting 0 [ 1455.995207][ T7183] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1456.005643][ T7183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.035649][ T7183] usb 3-1: Product: syz [ 1456.065405][ T7183] usb 3-1: Manufacturer: syz [ 1456.104489][ T7183] usb 3-1: SerialNumber: syz [ 1456.409736][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.845110][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.275907][T24208] snd-usb-audio 7-1:230.0: probe with driver snd-usb-audio failed with error -22 [ 1458.299406][T24208] usb 7-1: unit 4 not found! [ 1458.305927][T24208] usb 7-1: unit 0 not found! [ 1458.496707][T24208] snd-usb-audio 7-1:230.1: probe with driver snd-usb-audio failed with error -22 [ 1458.508459][ T7183] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1458.604513][T28339] udevd[28339]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:230.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1458.705366][ T7183] usb 3-1: USB disconnect, device number 60 [ 1458.762201][T28601] udevd[28601]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1459.871050][T18648] usb 7-1: USB disconnect, device number 104 [ 1459.952090][ T5700] net_ratelimit: 8 callbacks suppressed [ 1459.952108][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.024463][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.152549][T29901] sctp: [Deprecated]: syz.6.7429 (pid 29901) Use of int in maxseg socket option. [ 1460.152549][T29901] Use struct sctp_assoc_value instead [ 1460.167510][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.191469][T29902] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7428'. [ 1460.263823][ T5700] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1460.415472][ T5700] usb 4-1: Using ep0 maxpacket: 8 [ 1460.436481][ T5700] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.456624][ T5700] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1460.479488][ T5700] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1460.491438][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.502020][ T5700] usb 4-1: Product: syz [ 1460.515820][ T5700] usb 4-1: Manufacturer: syz [ 1460.520553][ T5700] usb 4-1: SerialNumber: syz [ 1460.553852][ T5700] usb 4-1: config 0 descriptor?? [ 1460.693834][T18648] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1460.786532][ T997] usb 4-1: USB disconnect, device number 54 [ 1460.860209][T18648] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1460.873348][T18648] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.892238][T18648] usb 7-1: Product: syz [ 1460.901227][T18648] usb 7-1: Manufacturer: syz [ 1460.909226][T10482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.918847][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.928609][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.938611][T20504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.955656][T18648] usb 7-1: SerialNumber: syz [ 1460.978142][T18648] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1461.077350][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.186206][ T997] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1461.225227][T29909] vlan2: entered promiscuous mode [ 1461.236757][T29909] bond0: entered promiscuous mode [ 1461.253684][T29910] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7432'. [ 1461.262939][T29909] bond_slave_0: entered promiscuous mode [ 1461.268775][T29909] bond_slave_1: entered promiscuous mode [ 1461.306159][T12406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.392204][T29913] binder: 29911:29913 ioctl c0306201 200000000080 returned -14 [ 1461.430393][T29910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1461.513576][T29910] bond_slave_0: left promiscuous mode [ 1461.541485][T29910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1461.544116][T29910] bond_slave_1: left promiscuous mode [ 1461.546532][T29910] bond0 (unregistering): Released all slaves [ 1461.579639][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.720587][T29922] netlink: 11 bytes leftover after parsing attributes in process `syz.6.7431'. [ 1461.789443][T29906] sctp: [Deprecated]: syz.6.7431 (pid 29906) Use of int in maxseg socket option. [ 1461.789443][T29906] Use struct sctp_assoc_value instead [ 1461.825742][T18648] usb 7-1: USB disconnect, device number 105 [ 1462.265520][ T997] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1462.287636][ T997] ath9k_htc: Failed to initialize the device [ 1462.310403][T18648] usb 7-1: ath9k_htc: USB layer deinitialized [ 1462.324512][T29934] FAULT_INJECTION: forcing a failure. [ 1462.324512][T29934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1462.339724][T29934] CPU: 0 UID: 0 PID: 29934 Comm: syz.7.7440 Tainted: G L syzkaller #0 PREEMPT(full) [ 1462.339752][T29934] Tainted: [L]=SOFTLOCKUP [ 1462.339758][T29934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1462.339768][T29934] Call Trace: [ 1462.339774][T29934] [ 1462.339781][T29934] dump_stack_lvl+0xe8/0x150 [ 1462.339805][T29934] should_fail_ex+0x412/0x560 [ 1462.339827][T29934] _copy_from_iter+0x1d3/0x1670 [ 1462.339846][T29934] ? rep_movs_alternative+0x4a/0x90 [ 1462.339870][T29934] ? __pfx__copy_from_iter+0x10/0x10 [ 1462.339885][T29934] ? sock_alloc_send_pskb+0x896/0x990 [ 1462.339907][T29934] ? __pfx__copy_from_iter+0x10/0x10 [ 1462.339930][T29934] copy_page_from_iter+0x220/0x2d0 [ 1462.339951][T29934] skb_copy_datagram_from_iter+0x306/0x710 [ 1462.339977][T29934] packet_sendmsg+0x35b1/0x4fb0 [ 1462.340008][T29934] ? __lock_acquire+0x6b5/0x2cf0 [ 1462.340031][T29934] ? __lock_acquire+0x6b5/0x2cf0 [ 1462.340064][T29934] ? __pfx_packet_sendmsg+0x10/0x10 [ 1462.340091][T29934] ? aa_sk_perm+0x6d5/0x900 [ 1462.340119][T29934] ? __pfx_aa_sk_perm+0x10/0x10 [ 1462.340136][T29934] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1462.340164][T29934] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1462.340186][T29934] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1462.340207][T29934] ? __pfx_packet_sendmsg+0x10/0x10 [ 1462.340225][T29934] __sys_sendto+0x672/0x710 [ 1462.340248][T29934] ? __pfx___sys_sendto+0x10/0x10 [ 1462.340279][T29934] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1462.340307][T29934] ? __irq_exit_rcu+0xca/0x220 [ 1462.340323][T29934] ? lockdep_softirqs_on+0x11d/0x180 [ 1462.340340][T29934] ? handle_softirqs+0x715/0x840 [ 1462.340360][T29934] __x64_sys_sendto+0xde/0x100 [ 1462.340381][T29934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.340399][T29934] do_syscall_64+0x174/0x580 [ 1462.340417][T29934] ? clear_bhb_loop+0x40/0x90 [ 1462.340436][T29934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.340451][T29934] RIP: 0033:0x7f770779ce59 [ 1462.340468][T29934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1462.340481][T29934] RSP: 002b:00007f77086fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1462.340499][T29934] RAX: ffffffffffffffda RBX: 00007f7707a15fa0 RCX: 00007f770779ce59 [ 1462.340510][T29934] RDX: 000000000001fffc RSI: 0000200000000180 RDI: 0000000000000003 [ 1462.340521][T29934] RBP: 00007f77086fb090 R08: 0000200000000140 R09: 0000000000000014 [ 1462.340540][T29934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1462.340550][T29934] R13: 00007f7707a16038 R14: 00007f7707a15fa0 R15: 00007f7707b3fa48 [ 1462.340576][T29934] [ 1462.661661][T29937] loop7: detected capacity change from 0 to 16384 [ 1462.707407][T29939] trusted_key: encrypted_key: insufficient parameters specified [ 1462.793761][T20504] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1462.964431][T20504] usb 4-1: Using ep0 maxpacket: 32 [ 1463.260518][T29945] tipc: Enabled bearer , priority 5 [ 1463.268370][T29945] syzkaller0: entered promiscuous mode [ 1463.273861][T29945] syzkaller0: entered allmulticast mode [ 1463.326352][T29945] tipc: Resetting bearer [ 1463.334356][T29944] tipc: Resetting bearer [ 1463.357580][T29944] tipc: Disabling bearer [ 1463.526591][ T7183] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1463.849294][T20504] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1463.958945][T25521] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1464.180778][ T7183] usb 3-1: Using ep0 maxpacket: 8 [ 1464.284421][T20504] usb 4-1: config 230 has an invalid descriptor of length 1, skipping remainder of the config [ 1464.294800][T20504] usb 4-1: config 230 has 2 interfaces, different from the descriptor's value: 3 [ 1464.516665][T25521] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1464.531970][T20504] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1464.544187][ T7183] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.557843][ T7183] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1464.567754][T20504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.579048][T25521] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1464.589239][T20504] usb 4-1: Product: syz [ 1464.594126][T25521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1464.604781][T20504] usb 4-1: Manufacturer: syz [ 1464.610091][T20504] usb 4-1: SerialNumber: syz [ 1464.616641][T25521] usb 1-1: Product: syz [ 1464.621618][ T7183] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1464.632335][T25521] usb 1-1: Manufacturer: syz [ 1464.641214][T25521] usb 1-1: SerialNumber: syz [ 1464.650983][ T7183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.661911][ T7183] usb 3-1: Product: syz [ 1464.666901][ T7183] usb 3-1: Manufacturer: syz [ 1464.671878][ T7183] usb 3-1: SerialNumber: syz [ 1464.686406][ T7183] usb 3-1: config 0 descriptor?? [ 1465.091269][T20504] usb 4-1: unit 4 not found! [ 1465.096978][T20504] usb 4-1: unit 0 not found! [ 1465.127687][T18648] usb 3-1: USB disconnect, device number 61 [ 1465.138097][T10715] net_ratelimit: 9 callbacks suppressed [ 1465.138113][T10715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.227026][T25521] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 85 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1465.305311][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.420294][T29960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7447'. [ 1465.528502][T29960] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7447'. [ 1465.828836][T29963] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7448'. [ 1466.365291][T18648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.385234][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.674072][ T9566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.678332][T10715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.692004][T24208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.701661][T25521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.741290][ T997] usb 1-1: USB disconnect, device number 85 [ 1466.782150][ T997] usblp0: removed [ 1466.830081][T29981] loop8: detected capacity change from 0 to 7 [ 1466.869787][T29981] Dev loop8: unable to read RDB block 7 [ 1466.897094][T29981] loop8: unable to read partition table [ 1466.903659][T29981] loop8: partition table beyond EOD, truncated [ 1466.909864][T29981] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 1466.919508][T29983] sctp: [Deprecated]: syz.2.7455 (pid 29983) Use of int in maxseg socket option. [ 1466.919508][T29983] Use struct sctp_assoc_value instead [ 1467.063373][T29985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1467.269089][ T997] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1467.315907][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.435295][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.488699][ T997] usb 1-1: Using ep0 maxpacket: 8 [ 1467.496056][T29993] loop5: detected capacity change from 0 to 7 [ 1467.511997][ T997] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.523115][T29993] Dev loop5: unable to read RDB block 7 [ 1467.528721][T29993] loop5: unable to read partition table [ 1467.539506][ T997] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1467.541650][ T997] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1467.541674][ T997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.541692][ T997] usb 1-1: Product: syz [ 1467.541706][ T997] usb 1-1: Manufacturer: syz [ 1467.541719][ T997] usb 1-1: SerialNumber: syz [ 1467.547469][ T997] usb 1-1: config 0 descriptor?? [ 1467.595579][T29993] loop5: partition table beyond EOD, truncated [ 1467.601768][T29993] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1467.698514][ T29] audit: type=1800 audit(1780156851.498:7918): pid=29995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7461" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 1467.907496][ T997] usb 1-1: USB disconnect, device number 86 [ 1470.270589][ T9566] net_ratelimit: 6 callbacks suppressed [ 1470.270608][ T9566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.322318][T20504] snd-usb-audio 4-1:230.0: probe with driver snd-usb-audio failed with error -22 [ 1470.341883][T20504] usb 4-1: unit 4 not found! [ 1470.346998][T20504] usb 4-1: unit 0 not found! [ 1470.361411][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.496769][T20504] snd-usb-audio 4-1:230.1: probe with driver snd-usb-audio failed with error -22 [ 1470.565950][T28339] udevd[28339]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:230.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1470.601739][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.138907][ T997] usb 4-1: USB disconnect, device number 55 [ 1471.416019][T12406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.456577][T30025] fuse: Bad value for 'group_id' [ 1471.480690][T30025] fuse: Bad value for 'group_id' [ 1471.498826][T30029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1471.520232][T30029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1471.623885][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.823788][ T997] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1471.838599][T30042] tipc: Enabled bearer , priority 9 [ 1471.847383][T30042] syzkaller0: entered promiscuous mode [ 1471.853053][T30042] syzkaller0: entered allmulticast mode [ 1471.901496][T30042] tipc: Resetting bearer [ 1471.914550][T30040] tipc: Resetting bearer [ 1471.944449][T30040] tipc: Disabling bearer [ 1471.983626][ T997] usb 7-1: Using ep0 maxpacket: 8 [ 1471.991361][ T997] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.004215][T25521] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1472.014676][ T997] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1472.036485][ T997] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1472.049312][ T997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.058359][ T997] usb 7-1: Product: syz [ 1472.063062][ T997] usb 7-1: Manufacturer: syz [ 1472.067742][ T997] usb 7-1: SerialNumber: syz [ 1472.087461][ T997] usb 7-1: config 0 descriptor?? [ 1472.164251][T25521] usb 1-1: Using ep0 maxpacket: 32 [ 1472.174085][T25521] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.185292][T25521] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1472.196595][T25521] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1472.213310][T25521] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1472.223936][T25521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1472.232648][T25521] usb 1-1: Product: syz [ 1472.238016][T25521] usb 1-1: Manufacturer: syz [ 1472.242897][T25521] usb 1-1: SerialNumber: syz [ 1472.251190][T25521] usb 1-1: config 0 descriptor?? [ 1472.260339][T25521] usb 1-1: no audio or video endpoints found [ 1472.312269][T15670] usb 7-1: USB disconnect, device number 106 [ 1472.405613][ T997] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1472.430012][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.441152][T18648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.453142][T20504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.454213][ T9566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.486333][T30037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.495398][T30037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.524225][T15670] usb 1-1: USB disconnect, device number 87 [ 1472.556039][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.579912][ T997] usb 4-1: Using ep0 maxpacket: 32 [ 1472.590097][ T997] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1472.600929][ T997] usb 4-1: config 230 has an invalid descriptor of length 1, skipping remainder of the config [ 1472.611805][ T997] usb 4-1: config 230 has 2 interfaces, different from the descriptor's value: 3 [ 1472.624479][ T997] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1472.634888][ T997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.642970][ T997] usb 4-1: Product: syz [ 1472.647854][ T997] usb 4-1: Manufacturer: syz [ 1472.652507][ T997] usb 4-1: SerialNumber: syz [ 1473.007038][ T997] usb 4-1: unit 4 not found! [ 1473.011706][ T997] usb 4-1: unit 0 not found! [ 1473.445144][T30059] input: syz0 as /devices/virtual/input/input63 [ 1473.727371][T30065] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7484'. [ 1473.815352][T30067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1473.872757][T30069] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1474.047012][ T29] audit: type=1800 audit(1780156857.888:7919): pid=30074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7489" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 1474.385151][T20504] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1475.285902][T20504] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1475.320804][T20504] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1475.332514][T20504] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 1475.342364][T20504] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1475.559614][T25521] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1475.671662][T15670] net_ratelimit: 12 callbacks suppressed [ 1475.671691][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.688459][T30019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.805702][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.125162][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.244297][T20504] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1476.253427][T25521] usb 3-1: Using ep0 maxpacket: 8 [ 1476.258903][T20504] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.266908][T20504] usb 1-1: Product: syz [ 1476.276147][T20504] usb 1-1: Manufacturer: syz [ 1476.280776][T20504] usb 1-1: SerialNumber: syz [ 1476.288054][T20504] usb 1-1: config 0 descriptor?? [ 1476.358007][T30076] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1476.698152][T20504] usb 1-1: USB disconnect, device number 88 [ 1476.795166][T25521] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.807035][T25521] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1476.823865][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.828406][T25521] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1476.860948][T25521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.870119][T25521] usb 3-1: Product: syz [ 1476.874970][T25521] usb 3-1: Manufacturer: syz [ 1476.880113][T25521] usb 3-1: SerialNumber: syz [ 1476.899381][T25521] usb 3-1: config 0 descriptor?? [ 1477.142429][T25521] usb 3-1: USB disconnect, device number 62 [ 1477.353756][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.450377][T24208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.564854][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.573979][T20504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.590124][T20504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.622272][ T5700] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1477.809912][T30094] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7494'. [ 1477.880213][T30096] tipc: Enabled bearer , priority 10 [ 1477.896594][ T5700] usb 1-1: Using ep0 maxpacket: 32 [ 1477.911720][ T5700] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1477.931810][ T997] snd-usb-audio 4-1:230.0: probe with driver snd-usb-audio failed with error -22 [ 1477.941947][T30096] syzkaller0: entered promiscuous mode [ 1477.946440][ T5700] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1477.947428][T30096] syzkaller0: entered allmulticast mode [ 1477.963607][ T5700] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1477.980753][ T997] usb 4-1: unit 4 not found! [ 1478.005794][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.014098][ T997] usb 4-1: unit 0 not found! [ 1478.024766][ T5700] usb 1-1: config 0 descriptor?? [ 1478.061884][T30096] tipc: Resetting bearer [ 1478.075535][T30102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1478.087439][T30095] tipc: Resetting bearer [ 1478.109078][ T997] snd-usb-audio 4-1:230.1: probe with driver snd-usb-audio failed with error -22 [ 1478.153177][ T997] usb 4-1: USB disconnect, device number 56 [ 1478.210041][T30095] tipc: Disabling bearer [ 1478.217449][T28605] udevd[28605]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:230.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1478.290638][T30108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1478.305951][T30108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1478.444943][T30114] netlink: 7064 bytes leftover after parsing attributes in process `syz.7.7501'. [ 1478.461270][T30115] netlink: 7064 bytes leftover after parsing attributes in process `syz.7.7501'. [ 1478.496520][ T5700] corsair-psu 0003:1B1C:1C09.006C: unknown main item tag 0x0 [ 1478.512015][ T5700] corsair-psu 0003:1B1C:1C09.006C: unknown main item tag 0x0 [ 1478.531864][ T5700] corsair-psu 0003:1B1C:1C09.006C: unknown main item tag 0x0 [ 1478.561875][ T5700] corsair-psu 0003:1B1C:1C09.006C: unknown main item tag 0x0 [ 1478.583040][ T5700] corsair-psu 0003:1B1C:1C09.006C: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 1478.692157][ C1] usb 1-1: input irq status -75 received [ 1478.709958][T30117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7503'. [ 1478.735012][ T997] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1478.903912][T30092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.912632][T30092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1479.005350][ T997] usb 4-1: Using ep0 maxpacket: 32 [ 1479.012144][ T997] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.022606][ T997] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1479.031681][ T997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.042363][ T997] usb 4-1: config 0 descriptor?? [ 1479.050912][ T997] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1479.164113][ T5700] corsair-psu 0003:1B1C:1C09.006C: unable to initialize device (-110) [ 1479.172484][ T5725] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1479.182687][ T5700] corsair-psu 0003:1B1C:1C09.006C: probe with driver corsair-psu failed with error -110 [ 1479.199846][ T5700] usb 1-1: USB disconnect, device number 89 [ 1479.374011][ T5725] usb 7-1: Using ep0 maxpacket: 8 [ 1479.381617][ T5725] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.385423][T20504] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1479.399428][ T5725] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1479.417026][ T5725] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1479.426381][ T5725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.438816][ T5725] usb 7-1: Product: syz [ 1479.443034][ T5725] usb 7-1: Manufacturer: syz [ 1479.447693][ T5725] usb 7-1: SerialNumber: syz [ 1479.455802][ T5725] usb 7-1: config 0 descriptor?? [ 1479.553830][T20504] usb 3-1: Using ep0 maxpacket: 32 [ 1479.600144][ T29] audit: type=1800 audit(1780156863.398:7920): pid=30133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7509" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1479.684227][ T5725] usb 7-1: USB disconnect, device number 107 [ 1479.835719][ T997] gspca_spca501: reg write: error -110 [ 1479.846391][ T997] spca501 4-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1479.871096][ T997] spca501 4-1:0.0: probe with driver spca501 failed with error -22 [ 1480.004281][ T997] usb 4-1: USB disconnect, device number 57 [ 1480.109659][T20504] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1480.441991][T20504] usb 3-1: config 230 has an invalid descriptor of length 1, skipping remainder of the config [ 1480.461675][T20504] usb 3-1: config 230 has 2 interfaces, different from the descriptor's value: 3 [ 1480.500782][T20504] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1480.518185][T20504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.527761][T20504] usb 3-1: Product: syz [ 1480.532868][T20504] usb 3-1: Manufacturer: syz [ 1480.542934][T20504] usb 3-1: SerialNumber: syz [ 1480.649952][ T997] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1480.747826][T18648] net_ratelimit: 11 callbacks suppressed [ 1480.747842][T18648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.808015][T30141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7512'. [ 1480.864174][ T997] usb 7-1: Using ep0 maxpacket: 8 [ 1480.876314][T30145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7512'. [ 1480.898388][ T997] usb 7-1: config 3 has an invalid interface number: 45 but max is 0 [ 1480.915372][ T9566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.930959][ T997] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1480.950371][ T997] usb 7-1: config 3 has no interface number 0 [ 1480.957324][ T997] usb 7-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1480.973313][T30141] ipvlan2: entered allmulticast mode [ 1480.980462][ T997] usb 7-1: config 3 interface 45 has no altsetting 0 [ 1480.987616][T30141] syz_tun: entered allmulticast mode [ 1480.995158][ T997] usb 7-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1481.006655][ T997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.021224][ T997] usb 7-1: Product: syz [ 1481.032842][ T997] usb 7-1: Manufacturer: syz [ 1481.039735][T20504] usb 3-1: unit 4 not found! [ 1481.044353][T20504] usb 3-1: unit 0 not found! [ 1481.053630][ T997] usb 7-1: SerialNumber: syz [ 1481.086838][T30145] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1481.095103][T30147] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7514'. [ 1481.310189][T30153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.318727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.407981][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.516482][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.570105][T24208] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1481.673906][T30153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.682360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.854011][ T5693] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1481.923988][T24208] usb 4-1: device descriptor read/64, error -71 [ 1482.081055][T30153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.090636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.302067][T24208] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1482.309869][ T5693] usb 1-1: Using ep0 maxpacket: 16 [ 1482.768139][T24208] usb 4-1: device descriptor read/64, error -71 [ 1482.877973][T24208] usb usb4-port1: attempt power cycle [ 1483.211200][ T5693] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1483.325406][T24208] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1483.548606][ T5693] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.560074][ T5693] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1483.574425][T24208] usb 4-1: device descriptor read/8, error -71 [ 1483.585887][ T5693] usb 1-1: New USB device found, idVendor=1235, idProduct=9012, bcdDevice= 0.40 [ 1483.596481][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.605686][ T5693] usb 1-1: Product: syz [ 1483.610410][ T5693] usb 1-1: Manufacturer: syz [ 1483.615914][ T5693] usb 1-1: SerialNumber: syz [ 1483.856660][T24208] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1483.886030][T24208] usb 4-1: device descriptor read/8, error -71 [ 1483.999348][ T29] audit: type=1800 audit(1780156867.838:7921): pid=30164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7518" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 1484.113770][T24208] usb usb4-port1: unable to enumerate USB device [ 1484.593958][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.612317][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.796084][ T5700] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1484.994102][T30176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7522'. [ 1485.013693][ T5700] usb 4-1: Using ep0 maxpacket: 32 [ 1485.044337][ T5700] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1485.079531][ T5700] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1485.086721][ T5700] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1485.102010][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.131660][ T5700] usb 4-1: config 0 descriptor?? [ 1485.579852][ T5700] corsair-psu 0003:1B1C:1C09.006D: unknown main item tag 0x0 [ 1485.590624][ T5700] corsair-psu 0003:1B1C:1C09.006D: unknown main item tag 0x0 [ 1485.598132][ T5700] corsair-psu 0003:1B1C:1C09.006D: unknown main item tag 0x0 [ 1485.605696][ T5700] corsair-psu 0003:1B1C:1C09.006D: unknown main item tag 0x0 [ 1485.624119][ T5700] corsair-psu 0003:1B1C:1C09.006D: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 1485.687548][T30174] [U]  [ 1485.798403][ C1] usb 4-1: input irq status -75 received [ 1485.876882][T18648] net_ratelimit: 23 callbacks suppressed [ 1485.876900][T18648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.929409][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.023081][T30167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.046274][T30167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.263972][ T5700] corsair-psu 0003:1B1C:1C09.006D: unable to initialize device (-110) [ 1486.279712][ T5700] corsair-psu 0003:1B1C:1C09.006D: probe with driver corsair-psu failed with error -110 [ 1486.315541][ T5700] usb 4-1: USB disconnect, device number 62 [ 1486.472099][T20504] snd-usb-audio 3-1:230.0: probe with driver snd-usb-audio failed with error -22 [ 1486.472731][ T997] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1486.577282][ T997] usb 7-1: USB disconnect, device number 108 [ 1486.614021][T20504] usb 3-1: unit 4 not found! [ 1486.618662][T20504] usb 3-1: unit 0 not found! [ 1486.642010][ T5693] usb 1-1: USB disconnect, device number 90 [ 1486.744684][T25521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.823375][T20504] snd-usb-audio 3-1:230.1: probe with driver snd-usb-audio failed with error -22 [ 1486.838716][T25521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.902972][T20504] usb 3-1: USB disconnect, device number 63 [ 1486.948249][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.965655][T28605] udevd[28605]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:230.1/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1487.030940][T30200] tipc: Enabled bearer , priority 10 [ 1487.049885][T30200] syzkaller0: entered promiscuous mode [ 1487.061988][T30200] syzkaller0: entered allmulticast mode [ 1487.117358][T30200] tipc: Resetting bearer [ 1487.134496][T30199] tipc: Resetting bearer [ 1487.183726][ T9566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.195824][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.209109][ T997] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1487.218961][T30199] tipc: Disabling bearer [ 1487.266735][ T5700] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1487.358153][ T997] usb 7-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1487.370370][ T997] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1487.387938][ T997] usb 7-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 1487.405629][ T997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1487.420495][ T997] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1487.432196][ T997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.442621][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1487.457293][ T997] usb 7-1: Product: syz [ 1487.461583][ T997] usb 7-1: Manufacturer: syz [ 1487.466803][ T997] usb 7-1: SerialNumber: syz [ 1487.471529][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.483385][ T5700] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1487.494017][ T997] usb 7-1: config 0 descriptor?? [ 1487.504187][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.512616][T30182] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1487.544081][ T5700] usb 4-1: config 0 descriptor?? [ 1487.832156][T18648] usb 7-1: USB disconnect, device number 109 [ 1487.954660][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.179798][ T5700] usb 4-1: string descriptor 0 read error: -22 [ 1488.306795][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.415881][ T5700] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.006E/input/input64 [ 1488.511691][ T5700] uclogic 0003:256C:006D.006E: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 1488.589228][ T5700] usb 4-1: USB disconnect, device number 63 [ 1488.782816][T30211] fido_id[30211]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1488.886890][T30217] tipc: Enabled bearer , priority 0 [ 1488.899880][T30216] tipc: Enabling of bearer rejected, already enabled [ 1488.927443][T30213] tipc: Resetting bearer [ 1488.985337][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.513929][ T5693] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1489.803719][ T5693] usb 4-1: Using ep0 maxpacket: 32 [ 1489.813800][ T5693] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1489.837798][ T5693] usb 4-1: config 230 has an invalid descriptor of length 1, skipping remainder of the config [ 1489.855717][ T5693] usb 4-1: config 230 has 2 interfaces, different from the descriptor's value: 3 [ 1489.870360][ T5693] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1489.893860][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.909599][ T5693] usb 4-1: Product: syz [ 1489.919541][ T5693] usb 4-1: Manufacturer: syz [ 1489.928290][ T5693] usb 4-1: SerialNumber: syz [ 1490.345548][T30233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7542'. [ 1490.461139][T30237] netlink: 'syz.2.7542': attribute type 2 has an invalid length. [ 1490.482559][ T5693] usb 4-1: unit 4 not found! [ 1490.487862][ T5693] usb 4-1: unit 0 not found! [ 1491.092394][ T997] net_ratelimit: 6 callbacks suppressed [ 1491.092412][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.832246][T12406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.116010][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.754337][T20504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.827009][T20504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.926718][T10715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.042882][T10482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.140525][T30213] tipc: Disabling bearer [ 1493.152974][T30220] IPVS: Error connecting to the multicast addr [ 1493.160412][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.379903][T30246] bridge0: port 3(macvlan3) entered blocking state [ 1493.386649][T30246] bridge0: port 3(macvlan3) entered disabled state [ 1493.393617][T30246] macvlan3: entered allmulticast mode [ 1493.399027][T30246] bridge0: entered allmulticast mode [ 1493.406182][T30246] macvlan3: left allmulticast mode [ 1493.411302][T30246] bridge0: left allmulticast mode [ 1493.545597][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.203498][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.618662][T30283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7556'. [ 1496.020653][ T5693] snd-usb-audio 4-1:230.0: probe with driver snd-usb-audio failed with error -22 [ 1496.042179][ T5693] usb 4-1: unit 4 not found! [ 1496.047459][ T5693] usb 4-1: unit 0 not found! [ 1496.297134][ T5700] net_ratelimit: 6 callbacks suppressed [ 1496.297148][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.552866][ T29] audit: type=1800 audit(1780156880.378:7922): pid=30292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7559" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1496.710472][ T5693] snd-usb-audio 4-1:230.1: probe with driver snd-usb-audio failed with error -22 [ 1496.770415][ T3268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.788184][T28605] udevd[28605]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:230.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1497.235161][T20504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.317851][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.854555][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.027435][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.349641][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.597325][ T5700] usb 4-1: USB disconnect, device number 64 [ 1498.815127][T30304] x_tables: unsorted entry at hook 3 [ 1498.904873][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.908894][T30311] FAULT_INJECTION: forcing a failure. [ 1498.908894][T30311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1498.965520][T30311] CPU: 1 UID: 0 PID: 30311 Comm: syz.0.7564 Tainted: G L syzkaller #0 PREEMPT(full) [ 1498.965548][T30311] Tainted: [L]=SOFTLOCKUP [ 1498.965554][T30311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1498.965564][T30311] Call Trace: [ 1498.965571][T30311] [ 1498.965579][T30311] dump_stack_lvl+0xe8/0x150 [ 1498.965603][T30311] should_fail_ex+0x412/0x560 [ 1498.965627][T30311] _copy_from_user+0x2d/0xb0 [ 1498.965647][T30311] ___sys_recvmsg+0x175/0x590 [ 1498.965664][T30311] ? get_pid_task+0x20/0x1f0 [ 1498.965682][T30311] ? get_pid_task+0x20/0x1f0 [ 1498.965704][T30311] ? __pfx____sys_recvmsg+0x10/0x10 [ 1498.965725][T30311] ? __fget_files+0x2a/0x420 [ 1498.965760][T30311] ? __fget_files+0x3a0/0x420 [ 1498.965795][T30311] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1498.965815][T30311] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1498.965840][T30311] ? __pfx_ksys_write+0x10/0x10 [ 1498.965869][T30311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.965888][T30311] do_syscall_64+0x174/0x580 [ 1498.965904][T30311] ? trace_irq_disable+0x3b/0x140 [ 1498.965926][T30311] ? clear_bhb_loop+0x40/0x90 [ 1498.965946][T30311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.965962][T30311] RIP: 0033:0x7f642b79ce59 [ 1498.965978][T30311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1498.965991][T30311] RSP: 002b:00007f642c5f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1498.966010][T30311] RAX: ffffffffffffffda RBX: 00007f642ba15fa0 RCX: 00007f642b79ce59 [ 1498.966021][T30311] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1498.966032][T30311] RBP: 00007f642c5f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1498.966041][T30311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1498.966050][T30311] R13: 00007f642ba16038 R14: 00007f642ba15fa0 R15: 00007f642bb3fa48 [ 1498.966077][T30311] [ 1499.201073][T30314] tipc: Enabled bearer , priority 10 [ 1499.209653][T30314] syzkaller0: entered promiscuous mode [ 1499.215131][T30314] syzkaller0: entered allmulticast mode [ 1499.237025][T10482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.307574][T30314] tipc: Resetting bearer [ 1499.358941][T30313] tipc: Resetting bearer [ 1499.383457][T30313] tipc: Disabling bearer [ 1499.389382][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.593382][T30324] netlink: 'syz.3.7570': attribute type 10 has an invalid length. [ 1499.934045][T24208] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1500.006658][T30338] netlink: 7076 bytes leftover after parsing attributes in process `syz.7.7575'. [ 1500.095858][T24208] usb 3-1: Using ep0 maxpacket: 32 [ 1500.103998][T24208] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1500.116742][T24208] usb 3-1: config 230 has an invalid descriptor of length 1, skipping remainder of the config [ 1500.128011][T24208] usb 3-1: config 230 has 2 interfaces, different from the descriptor's value: 3 [ 1500.145379][T24208] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1500.163791][T24208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.183692][T24208] usb 3-1: Product: syz [ 1500.188300][T24208] usb 3-1: Manufacturer: syz [ 1500.193428][T24208] usb 3-1: SerialNumber: syz [ 1500.697620][T24208] usb 3-1: unit 4 not found! [ 1500.702583][T24208] usb 3-1: unit 0 not found! [ 1500.722066][T30345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1501.084185][T20504] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1501.473793][ T997] net_ratelimit: 4 callbacks suppressed [ 1501.473810][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.483999][T20504] usb 1-1: Using ep0 maxpacket: 32 [ 1501.526947][T20504] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1501.550697][T20504] usb 1-1: config 0 interface 0 has no altsetting 1 [ 1501.578887][T20504] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1501.672836][T20504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1501.712945][T20504] usb 1-1: SerialNumber: syz [ 1501.741277][T20504] usb 1-1: config 0 descriptor?? [ 1501.789942][ T3268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.809840][T30354] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 30354 comm: syz.6.7579) [ 1501.885688][T30360] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7579'. [ 1501.930599][T20504] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1501.952529][ T29] audit: type=1800 audit(1780156885.748:7923): pid=30354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7579" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=164045 res=0 errno=0 [ 1502.011498][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.032818][T20504] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1502.055403][T30359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7581'. [ 1502.269011][T20504] usb 1-1: USB disconnect, device number 91 [ 1502.526598][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.914876][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.161148][T20504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.392652][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.556283][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.792103][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.808389][T10715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.794839][T24208] snd-usb-audio 3-1:230.0: probe with driver snd-usb-audio failed with error -22 [ 1505.820447][T24208] usb 3-1: unit 4 not found! [ 1505.826019][T24208] usb 3-1: unit 0 not found! [ 1505.938147][T24208] snd-usb-audio 3-1:230.1: probe with driver snd-usb-audio failed with error -22 [ 1506.020833][T28339] udevd[28339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:230.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1506.580707][ T997] usb 3-1: USB disconnect, device number 64 [ 1506.664668][ T5725] net_ratelimit: 8 callbacks suppressed [ 1506.664686][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.795351][T30379] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7586'. [ 1506.824918][T24208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.081780][T30387] FAULT_INJECTION: forcing a failure. [ 1507.081780][T30387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1507.103716][T30387] CPU: 0 UID: 0 PID: 30387 Comm: syz.7.7588 Tainted: G L syzkaller #0 PREEMPT(full) [ 1507.103743][T30387] Tainted: [L]=SOFTLOCKUP [ 1507.103748][T30387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1507.103758][T30387] Call Trace: [ 1507.103764][T30387] [ 1507.103772][T30387] dump_stack_lvl+0xe8/0x150 [ 1507.103795][T30387] should_fail_ex+0x412/0x560 [ 1507.103818][T30387] _copy_from_user+0x2d/0xb0 [ 1507.103839][T30387] copy_folio_from_user+0x1e3/0x320 [ 1507.103867][T30387] hugetlb_mfill_atomic_pte+0xe56/0x1730 [ 1507.103900][T30387] mfill_atomic_copy+0xcf3/0x15b0 [ 1507.103944][T30387] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 1507.103973][T30387] userfaultfd_ioctl+0x28eb/0x4a10 [ 1507.103993][T30387] ? __kasan_slab_free+0x5c/0x80 [ 1507.104011][T30387] ? kfree+0x1c5/0x640 [ 1507.104028][T30387] ? tomoyo_path_number_perm+0x501/0x630 [ 1507.104059][T30387] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1507.104106][T30387] ? kasan_quarantine_put+0xbb/0x1f0 [ 1507.104134][T30387] ? tomoyo_path_number_perm+0x219/0x630 [ 1507.104155][T30387] ? tomoyo_path_number_perm+0x219/0x630 [ 1507.104177][T30387] ? do_vfs_ioctl+0x1166/0x1530 [ 1507.104202][T30387] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1507.104227][T30387] ? __schedule+0x1837/0x5740 [ 1507.104277][T30387] ? __pfx___schedule+0x10/0x10 [ 1507.104303][T30387] ? rcu_is_watching+0x15/0xb0 [ 1507.104323][T30387] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1507.104344][T30387] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1507.104363][T30387] __se_sys_ioctl+0xfc/0x170 [ 1507.104385][T30387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.104403][T30387] do_syscall_64+0x174/0x580 [ 1507.104430][T30387] ? clear_bhb_loop+0x40/0x90 [ 1507.104451][T30387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.104466][T30387] RIP: 0033:0x7f770779ce59 [ 1507.104482][T30387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1507.104495][T30387] RSP: 002b:00007f77086fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1507.104512][T30387] RAX: ffffffffffffffda RBX: 00007f7707a15fa0 RCX: 00007f770779ce59 [ 1507.104523][T30387] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 1507.104534][T30387] RBP: 00007f77086fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.104543][T30387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.104553][T30387] R13: 00007f7707a16038 R14: 00007f7707a15fa0 R15: 00007f7707b3fa48 [ 1507.104582][T30387] [ 1507.254066][ T5725] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1507.497207][ T5693] usb 7-1: new full-speed USB device number 110 using dummy_hcd [ 1507.685990][ T5725] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1507.705038][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.746245][ T5693] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1507.760858][ T5693] usb 7-1: not running at top speed; connect to a high speed hub [ 1507.783348][ T5693] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.804445][ T5693] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1507.818315][ T5725] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1507.849668][T30406] bridge0: port 4(macvlan2) entered blocking state [ 1507.857095][T30406] bridge0: port 4(macvlan2) entered disabled state [ 1507.861143][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.863894][T30406] macvlan2: entered allmulticast mode [ 1507.877096][T30406] bridge0: entered allmulticast mode [ 1507.878137][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1507.886327][T30406] bridge0: entered promiscuous mode [ 1507.918567][T30406] macvlan2: left allmulticast mode [ 1507.923740][T30406] bridge0: left allmulticast mode [ 1507.923834][ T5725] usb 1-1: Product: syz [ 1507.938181][T24208] bridge0: left promiscuous mode [ 1507.971191][ T5725] usb 1-1: Manufacturer: syz [ 1507.981839][ T5725] usb 1-1: SerialNumber: syz [ 1508.130934][T24208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.165010][T30416] veth2: entered allmulticast mode [ 1508.233134][T30419] netlink: 'syz.2.7598': attribute type 3 has an invalid length. [ 1508.363926][ T5725] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1508.396841][ T5725] usb 1-1: USB disconnect, device number 92 [ 1508.423055][ T5725] usblp0: removed [ 1508.469040][ T5693] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1508.537758][ T5693] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.545913][ T5693] usb 7-1: Product: syz [ 1508.550124][ T5693] usb 7-1: Manufacturer: syz [ 1508.554700][ T5693] usb 7-1: SerialNumber: syz [ 1508.598165][T24208] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1508.744506][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.932293][T30429] FAULT_INJECTION: forcing a failure. [ 1508.932293][T30429] name failslab, interval 1, probability 0, space 0, times 0 [ 1508.944929][T30429] CPU: 0 UID: 0 PID: 30429 Comm: syz.7.7604 Tainted: G L syzkaller #0 PREEMPT(full) [ 1508.944945][T30429] Tainted: [L]=SOFTLOCKUP [ 1508.944949][T30429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1508.944955][T30429] Call Trace: [ 1508.944961][T30429] [ 1508.944966][T30429] dump_stack_lvl+0xe8/0x150 [ 1508.944982][T30429] should_fail_ex+0x412/0x560 [ 1508.944997][T30429] should_failslab+0xa8/0x100 [ 1508.945008][T30429] __kmalloc_noprof+0xe8/0x760 [ 1508.945022][T30429] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1508.945035][T30429] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1508.945045][T30429] ? tomoyo_domain+0xd7/0x130 [ 1508.945058][T30429] ? tomoyo_path_number_perm+0x219/0x630 [ 1508.945071][T30429] tomoyo_path_number_perm+0x246/0x630 [ 1508.945085][T30429] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1508.945099][T30429] ? sb_end_write+0xe9/0x1c0 [ 1508.945111][T30429] ? vfs_write+0x9bc/0xb90 [ 1508.945141][T30429] ? ksys_write+0x1fc/0x270 [ 1508.945157][T30429] security_file_ioctl+0xc3/0x2a0 [ 1508.945171][T30429] __se_sys_ioctl+0x47/0x170 [ 1508.945185][T30429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.945195][T30429] do_syscall_64+0x174/0x580 [ 1508.945205][T30429] ? trace_irq_disable+0x3b/0x140 [ 1508.945220][T30429] ? clear_bhb_loop+0x40/0x90 [ 1508.945232][T30429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.945242][T30429] RIP: 0033:0x7f770779ce59 [ 1508.945252][T30429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.945261][T30429] RSP: 002b:00007f77086fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1508.945272][T30429] RAX: ffffffffffffffda RBX: 00007f7707a15fa0 RCX: 00007f770779ce59 [ 1508.945279][T30429] RDX: 0000000000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 1508.945285][T30429] RBP: 00007f77086fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1508.945290][T30429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1508.945296][T30429] R13: 00007f7707a16038 R14: 00007f7707a15fa0 R15: 00007f7707b3fa48 [ 1508.945311][T30429] [ 1508.945315][T30429] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1509.204376][ T5693] usb 7-1: 0:2 : does not exist [ 1509.209927][ T5693] usb 7-1: unit 4 not found! [ 1509.222828][ T5693] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1509.234318][T24208] usb 4-1: Using ep0 maxpacket: 8 [ 1509.253186][ T5693] usb 7-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1509.262669][ T5693] usb 7-1: [5] FU [HMD Audio Playback Volume] ch = 1, val = 0/1/1 [ 1509.346727][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.450621][T24208] usb 4-1: config 7 has an invalid interface number: 162 but max is 1 [ 1509.480908][ T5693] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1509.494413][T24208] usb 4-1: config 7 has an invalid interface number: 23 but max is 1 [ 1509.524058][T24208] usb 4-1: config 7 has an invalid interface descriptor of length 2, skipping [ 1509.552801][T24208] usb 4-1: config 7 has no interface number 0 [ 1509.558924][T24208] usb 4-1: config 7 has no interface number 1 [ 1509.565039][T24208] usb 4-1: config 7 interface 23 altsetting 48 bulk endpoint 0x5 has invalid maxpacket 1023 [ 1509.575466][T24208] usb 4-1: config 7 interface 23 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1509.588850][T24208] usb 4-1: config 7 interface 162 has no altsetting 0 [ 1509.595632][T24208] usb 4-1: config 7 interface 23 has no altsetting 0 [ 1509.642843][T10715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.666778][ T5693] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1509.688533][T24208] usb 4-1: New USB device found, idVendor=0b62, idProduct=0059, bcdDevice=38.9c [ 1509.713649][ T997] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1509.715667][T24208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.740810][T24208] usb 4-1: Product: syz [ 1509.744997][T24208] usb 4-1: Manufacturer: syz [ 1509.758897][T24208] usb 4-1: SerialNumber: syz [ 1509.765552][ T5693] usb 7-1: USB disconnect, device number 110 [ 1509.942319][ T997] usb 1-1: Using ep0 maxpacket: 32 [ 1509.943671][T20504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.950075][ T997] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1509.964465][T10482] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1509.974085][T10482] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.983477][ T997] usb 1-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 1509.994055][T10482] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1510.003063][ T997] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1510.018664][T10482] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.035045][ T997] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1510.047655][T10482] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.057510][ T997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.066169][T10482] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1510.075274][ T997] usb 1-1: Product: syz [ 1510.080596][ T997] usb 1-1: Manufacturer: syz [ 1510.085536][T10482] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.094754][ T997] usb 1-1: SerialNumber: syz [ 1510.100938][T10482] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.114890][T10482] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1510.123882][T10482] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.132754][T10482] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.143064][T10482] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1510.222704][T30418] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.7599'. [ 1510.248182][T30418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.275477][T30418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.334353][T30440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7608'. [ 1510.540113][T30459] syz.7.7612 (30459): drop_caches: 1 [ 1510.577573][T30459] syz.7.7612 (30459): drop_caches: 1 [ 1510.866541][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.931948][T24208] usb 4-1: USB disconnect, device number 65 [ 1511.538934][T30458] ALSA: mixer_oss: invalid OSS volume '' [ 1511.553285][T30458] ALSA: mixer_oss: invalid OSS volume 'OGA' [ 1511.555257][T30467] netlink: 'syz.3.7615': attribute type 10 has an invalid length. [ 1512.075670][T30465] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7613'. [ 1512.090128][T30465] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7613'. [ 1512.520620][ T997] usb 1-1: 1:1 : unsupported format bits 0x2002 [ 1512.556157][ T997] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1512.584258][ T997] usb 1-1: unit 37 not found! [ 1512.590657][ T997] usb 1-1: unit 0 not found! [ 1512.629060][T30480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7619'. [ 1512.646298][ T5725] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1512.678970][T30480] sctp: [Deprecated]: syz.0.7619 (pid 30480) Use of int in maxseg socket option. [ 1512.678970][T30480] Use struct sctp_assoc_value instead [ 1512.890381][ T5725] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1512.973364][ T997] usb 1-1: USB disconnect, device number 93 [ 1513.004641][T30483] hsr0: entered allmulticast mode [ 1513.086836][T30483] hsr_slave_0: entered allmulticast mode [ 1513.109921][ T5725] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1513.122659][T28601] udevd[28601]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1513.148166][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1513.177785][T30483] hsr_slave_1: entered allmulticast mode [ 1513.178507][T30488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7620'. [ 1513.198588][ T5725] usb 3-1: Product: syz [ 1513.220982][ T5725] usb 3-1: Manufacturer: syz [ 1513.241191][ T5725] usb 3-1: SerialNumber: syz [ 1513.558019][T30488] hsr_slave_0: left promiscuous mode [ 1513.569435][T30488] hsr_slave_1: left promiscuous mode [ 1513.615956][ T5725] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1513.677647][ T5725] usb 3-1: USB disconnect, device number 65 [ 1513.805211][ T5725] usblp0: removed [ 1513.945976][T24208] net_ratelimit: 1 callbacks suppressed [ 1513.946008][T24208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.477206][T30502] FAULT_INJECTION: forcing a failure. [ 1514.477206][T30502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1514.495796][T30502] CPU: 1 UID: 0 PID: 30502 Comm: syz.7.7625 Tainted: G L syzkaller #0 PREEMPT(full) [ 1514.495823][T30502] Tainted: [L]=SOFTLOCKUP [ 1514.495830][T30502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1514.495840][T30502] Call Trace: [ 1514.495847][T30502] [ 1514.495855][T30502] dump_stack_lvl+0xe8/0x150 [ 1514.495879][T30502] should_fail_ex+0x412/0x560 [ 1514.495909][T30502] _copy_to_user+0x31/0xb0 [ 1514.495932][T30502] simple_read_from_buffer+0xe1/0x170 [ 1514.495956][T30502] proc_fail_nth_read+0x1bb/0x230 [ 1514.495979][T30502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1514.496003][T30502] ? rw_verify_area+0x2a6/0x4d0 [ 1514.496023][T30502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1514.496045][T30502] vfs_read+0x20c/0xa70 [ 1514.496071][T30502] ? __pfx___mutex_lock+0x10/0x10 [ 1514.496091][T30502] ? __pfx_vfs_read+0x10/0x10 [ 1514.496113][T30502] ? __fget_files+0x2a/0x420 [ 1514.496136][T30502] ? __fget_files+0x3a0/0x420 [ 1514.496153][T30502] ? __fget_files+0x2a/0x420 [ 1514.496188][T30502] ksys_read+0x150/0x270 [ 1514.496210][T30502] ? __pfx_ksys_read+0x10/0x10 [ 1514.496239][T30502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.496257][T30502] do_syscall_64+0x174/0x580 [ 1514.496272][T30502] ? trace_irq_disable+0x3b/0x140 [ 1514.496292][T30502] ? clear_bhb_loop+0x40/0x90 [ 1514.496313][T30502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.496329][T30502] RIP: 0033:0x7f770775d68e [ 1514.496344][T30502] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1514.496358][T30502] RSP: 002b:00007f77086fafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1514.496376][T30502] RAX: ffffffffffffffda RBX: 00007f77086fb6c0 RCX: 00007f770775d68e [ 1514.496388][T30502] RDX: 000000000000000f RSI: 00007f77086fb0a0 RDI: 0000000000000005 [ 1514.496398][T30502] RBP: 00007f77086fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1514.496408][T30502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.496418][T30502] R13: 00007f7707a16038 R14: 00007f7707a15fa0 R15: 00007f7707b3fa48 [ 1514.496446][T30502] [ 1515.305975][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.642436][T30515] sctp: [Deprecated]: syz.3.7630 (pid 30515) Use of int in maxseg socket option. [ 1515.642436][T30515] Use struct sctp_assoc_value instead [ 1515.829144][T30522] netlink: 'syz.3.7632': attribute type 10 has an invalid length. [ 1516.058980][T30525] netlink: 'syz.0.7633': attribute type 11 has an invalid length. [ 1516.089870][T30525] netlink: 448 bytes leftover after parsing attributes in process `syz.0.7633'. [ 1516.463416][T30521] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7624'. [ 1516.479510][T30521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7624'. [ 1516.553694][ T5700] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1516.566099][T30517] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7626'. [ 1516.623324][T30517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7626'. [ 1516.736191][ T5700] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1516.757872][ T5700] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1516.790104][ T5700] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 1516.839859][ T5700] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1516.883046][ T5700] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1516.907082][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.937473][ T5700] usb 3-1: Product: syz [ 1516.966731][ T5700] usb 3-1: Manufacturer: syz [ 1516.985827][T20504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.003513][ T5700] usb 3-1: SerialNumber: syz [ 1517.036086][ T5700] usb 3-1: config 0 descriptor?? [ 1517.075341][T30531] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1517.561706][T30554] loop5: detected capacity change from 0 to 7 [ 1517.728133][T30554] Dev loop5: unable to read RDB block 7 [ 1517.774826][T30554] loop5: unable to read partition table [ 1517.821830][T30554] loop5: partition table beyond EOD, truncated [ 1517.874502][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.911974][T30554] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1518.195968][T30556] FAULT_INJECTION: forcing a failure. [ 1518.195968][T30556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1518.229078][T30556] CPU: 1 UID: 0 PID: 30556 Comm: syz.3.7642 Tainted: G L syzkaller #0 PREEMPT(full) [ 1518.229106][T30556] Tainted: [L]=SOFTLOCKUP [ 1518.229113][T30556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1518.229123][T30556] Call Trace: [ 1518.229131][T30556] [ 1518.229139][T30556] dump_stack_lvl+0xe8/0x150 [ 1518.229164][T30556] should_fail_ex+0x412/0x560 [ 1518.229188][T30556] _copy_from_user+0x2d/0xb0 [ 1518.229210][T30556] userfaultfd_ioctl+0xa3a/0x4a10 [ 1518.229230][T30556] ? __kasan_slab_free+0x5c/0x80 [ 1518.229251][T30556] ? kfree+0x1c5/0x640 [ 1518.229268][T30556] ? tomoyo_path_number_perm+0x501/0x630 [ 1518.229288][T30556] ? __se_sys_ioctl+0x47/0x170 [ 1518.229309][T30556] ? do_syscall_64+0x174/0x580 [ 1518.229330][T30556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.229357][T30556] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1518.229403][T30556] ? kasan_quarantine_put+0xbb/0x1f0 [ 1518.229432][T30556] ? tomoyo_path_number_perm+0x219/0x630 [ 1518.229454][T30556] ? tomoyo_path_number_perm+0x219/0x630 [ 1518.229477][T30556] ? do_vfs_ioctl+0x1166/0x1530 [ 1518.229504][T30556] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1518.229530][T30556] ? vfs_write+0x9bc/0xb90 [ 1518.229581][T30556] ? ksys_write+0x1fc/0x270 [ 1518.229607][T30556] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1518.229629][T30556] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1518.229650][T30556] __se_sys_ioctl+0xfc/0x170 [ 1518.229672][T30556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.229689][T30556] do_syscall_64+0x174/0x580 [ 1518.229705][T30556] ? trace_irq_disable+0x3b/0x140 [ 1518.229727][T30556] ? clear_bhb_loop+0x40/0x90 [ 1518.229746][T30556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.229763][T30556] RIP: 0033:0x7f7d0ff9ce59 [ 1518.229778][T30556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1518.229792][T30556] RSP: 002b:00007f7d10e76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1518.229810][T30556] RAX: ffffffffffffffda RBX: 00007f7d10215fa0 RCX: 00007f7d0ff9ce59 [ 1518.229821][T30556] RDX: 0000000000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 1518.229832][T30556] RBP: 00007f7d10e76090 R08: 0000000000000000 R09: 0000000000000000 [ 1518.229842][T30556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1518.229852][T30556] R13: 00007f7d10216038 R14: 00007f7d10215fa0 R15: 00007f7d1033fa48 [ 1518.229879][T30556] [ 1518.764224][T30560] bridge0: port 3(macvlan2) entered blocking state [ 1518.770798][T30560] bridge0: port 3(macvlan2) entered disabled state [ 1518.804875][T30560] macvlan2: entered allmulticast mode [ 1518.819796][T30560] bridge0: entered allmulticast mode [ 1518.826082][T30560] bridge0: entered promiscuous mode [ 1518.834829][T30560] macvlan2: left allmulticast mode [ 1518.840175][T30560] bridge0: left allmulticast mode [ 1518.940048][T20504] bridge0: left promiscuous mode [ 1519.288401][T24208] usb 3-1: USB disconnect, device number 66 [ 1519.541831][T30575] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7647'. [ 1520.373741][T15670] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1520.553641][T15670] usb 1-1: Using ep0 maxpacket: 32 [ 1520.575648][T15670] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1520.867379][T15670] usb 1-1: config 230 has an invalid descriptor of length 1, skipping remainder of the config [ 1520.882189][T15670] usb 1-1: config 230 has 2 interfaces, different from the descriptor's value: 3 [ 1520.899386][T15670] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1520.916642][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.919741][T15670] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.020765][T15670] usb 1-1: Product: syz [ 1521.042080][T15670] usb 1-1: Manufacturer: syz [ 1521.064655][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.083232][T15670] usb 1-1: SerialNumber: syz [ 1521.436700][T15670] usb 1-1: unit 4 not found! [ 1521.470817][T15670] usb 1-1: unit 0 not found! [ 1521.768850][T30606] FAULT_INJECTION: forcing a failure. [ 1521.768850][T30606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1521.828724][T30606] CPU: 0 UID: 0 PID: 30606 Comm: syz.3.7659 Tainted: G L syzkaller #0 PREEMPT(full) [ 1521.828749][T30606] Tainted: [L]=SOFTLOCKUP [ 1521.828756][T30606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1521.828766][T30606] Call Trace: [ 1521.828773][T30606] [ 1521.828781][T30606] dump_stack_lvl+0xe8/0x150 [ 1521.828805][T30606] should_fail_ex+0x412/0x560 [ 1521.828827][T30606] _copy_to_user+0x31/0xb0 [ 1521.828841][T30606] copy_to_sockptr+0x5e/0xa0 [ 1521.828856][T30606] ip_mroute_getsockopt+0x2a1/0x430 [ 1521.828871][T30606] ? __pfx_ip_mroute_getsockopt+0x10/0x10 [ 1521.828885][T30606] ? __lock_acquire+0x6b5/0x2cf0 [ 1521.828908][T30606] do_ip_getsockopt+0x276/0x1d40 [ 1521.828929][T30606] ? aa_file_perm+0x192/0x15e0 [ 1521.828950][T30606] ? aa_label_sk_perm+0x532/0x6e0 [ 1521.828969][T30606] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 1521.828987][T30606] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1521.829006][T30606] ? __lock_acquire+0x6b5/0x2cf0 [ 1521.829027][T30606] ? __might_fault+0xaf/0x130 [ 1521.829045][T30606] ip_getsockopt+0xbb/0x230 [ 1521.829072][T30606] ? __pfx_ip_getsockopt+0x10/0x10 [ 1521.829095][T30606] ? sock_common_getsockopt+0x2d/0xb0 [ 1521.829114][T30606] ? raw_getsockopt+0xce/0x1f0 [ 1521.829133][T30606] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1521.829146][T30606] do_sock_getsockopt+0x51d/0x7e0 [ 1521.829164][T30606] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1521.829185][T30606] ? __fget_files+0x3a0/0x420 [ 1521.829202][T30606] ? __fget_files+0x2a/0x420 [ 1521.829227][T30606] __x64_sys_getsockopt+0x1a4/0x240 [ 1521.829255][T30606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.829272][T30606] do_syscall_64+0x174/0x580 [ 1521.829285][T30606] ? trace_irq_disable+0x3b/0x140 [ 1521.829298][T30606] ? clear_bhb_loop+0x40/0x90 [ 1521.829310][T30606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.829320][T30606] RIP: 0033:0x7f7d0ff9ce59 [ 1521.829329][T30606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1521.829339][T30606] RSP: 002b:00007f7d10e76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1521.829356][T30606] RAX: ffffffffffffffda RBX: 00007f7d10215fa0 RCX: 00007f7d0ff9ce59 [ 1521.829369][T30606] RDX: 00000000000000d0 RSI: 0000000000000000 RDI: 0000000000000003 [ 1521.829379][T30606] RBP: 00007f7d10e76090 R08: 00002000000001c0 R09: 0000000000000000 [ 1521.829389][T30606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1521.829399][T30606] R13: 00007f7d10216038 R14: 00007f7d10215fa0 R15: 00007f7d1033fa48 [ 1521.829427][T30606] [ 1522.609395][ T5707] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1523.282009][ T5707] usb 3-1: Using ep0 maxpacket: 16 [ 1523.287326][T24208] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1523.945293][ T5707] usb 3-1: config 182 has an invalid interface number: 81 but max is 0 [ 1523.953571][ T5707] usb 3-1: config 182 has no interface number 0 [ 1523.965328][ T5707] usb 3-1: config 182 interface 81 has no altsetting 0 [ 1524.071942][T20504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.333566][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.417829][T24208] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1524.430523][T24208] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 1524.443104][T24208] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1524.480658][T24208] usb 4-1: config 0 has no interface number 0 [ 1524.506549][T24208] usb 4-1: config 0 has no interface number 1 [ 1524.549140][T24208] usb 4-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 1524.574310][T24208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.627270][T24208] usb 4-1: Product: syz [ 1524.631969][T24208] usb 4-1: Manufacturer: syz [ 1524.642107][T24208] usb 4-1: SerialNumber: syz [ 1524.688342][T24208] usb 4-1: config 0 descriptor?? [ 1524.700962][T24208] cdc_acm 4-1:0.51: probe with driver cdc_acm failed with error -22 [ 1524.930878][ T5707] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=99.33 [ 1524.939945][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.947930][ T5707] usb 3-1: Product: syz [ 1524.952087][ T5707] usb 3-1: Manufacturer: syz [ 1524.983107][T24208] usb 4-1: USB disconnect, device number 66 [ 1525.048274][ T5707] usb 3-1: can't set config #182, error -71 [ 1525.085234][ T5707] usb 3-1: USB disconnect, device number 67 [ 1525.431884][T30638] netlink: 'syz.2.7668': attribute type 11 has an invalid length. [ 1525.445516][T30638] netlink: 448 bytes leftover after parsing attributes in process `syz.2.7668'. [ 1526.563412][T15670] snd-usb-audio 1-1:230.0: probe with driver snd-usb-audio failed with error -22 [ 1526.588255][T15670] usb 1-1: unit 4 not found! [ 1526.595224][T15670] usb 1-1: unit 0 not found! [ 1526.689192][T30659] loop5: detected capacity change from 0 to 7 [ 1526.701244][T30659] Dev loop5: unable to read RDB block 7 [ 1526.707296][T30659] loop5: unable to read partition table [ 1526.717325][T15670] snd-usb-audio 1-1:230.1: probe with driver snd-usb-audio failed with error -22 [ 1526.736451][T30659] loop5: partition table beyond EOD, truncated [ 1526.760770][T30659] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1526.844984][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.878097][T28605] udevd[28605]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:230.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1527.419660][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.572286][T30646] bridge0: port 4(macvlan2) entered blocking state [ 1528.590192][T30646] bridge0: port 4(macvlan2) entered disabled state [ 1528.601980][ T5725] usb 1-1: USB disconnect, device number 94 [ 1528.605288][T30646] macvlan2: entered allmulticast mode [ 1528.617010][T30646] bridge0: entered allmulticast mode [ 1528.627857][T30646] bridge0: entered promiscuous mode [ 1528.650341][T30646] macvlan2: left allmulticast mode [ 1528.659120][T30646] bridge0: left allmulticast mode [ 1528.721610][T15670] bridge0: left promiscuous mode [ 1529.376725][ T5725] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1529.495197][ T5700] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 1529.550696][ T5725] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1529.567249][ T5725] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1529.578358][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1529.597005][ T5725] usb 1-1: Product: syz [ 1529.601378][ T5725] usb 1-1: Manufacturer: syz [ 1529.612115][ T5725] usb 1-1: SerialNumber: syz [ 1529.653767][ T5700] usb 4-1: Invalid ep0 maxpacket: 64 [ 1529.794772][ T5700] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 1529.846065][ T5725] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 95 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1529.983624][ T5700] usb 4-1: Invalid ep0 maxpacket: 64 [ 1530.001843][ T5700] usb usb4-port1: attempt power cycle [ 1530.025123][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.129135][T24208] usb 1-1: USB disconnect, device number 95 [ 1530.157483][T24208] usblp0: removed [ 1530.234495][ T5707] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1530.353625][ T5700] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 1530.394471][ T5707] usb 7-1: Using ep0 maxpacket: 16 [ 1530.395177][ T5700] usb 4-1: Invalid ep0 maxpacket: 64 [ 1530.412857][ T5707] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1530.435829][T24208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.456698][ T5707] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1530.468789][ T5707] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1530.476292][ T5707] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1530.494419][ T5707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.516573][ T5707] usb 7-1: config 0 descriptor?? [ 1530.574044][ T5700] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 1530.631988][ T5700] usb 4-1: Invalid ep0 maxpacket: 64 [ 1530.651283][ T5700] usb usb4-port1: unable to enumerate USB device [ 1530.763435][T30710] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7687'. [ 1531.339354][ T5707] hid (null): unknown global tag 0xcc [ 1531.946397][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.954409][ T5707] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1532.124442][ T5707] usb 1-1: Using ep0 maxpacket: 8 [ 1532.139653][ T5707] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.161806][ T5707] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1532.182572][ T5707] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1532.195695][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.209742][ T5707] usb 1-1: Product: syz [ 1532.234557][ T5707] usb 1-1: Manufacturer: syz [ 1532.254509][ T5707] usb 1-1: SerialNumber: syz [ 1532.579308][T30726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1532.749824][T10482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.117342][ T5700] usb 7-1: USB disconnect, device number 111 [ 1533.367166][ T5725] usb 1-1: USB disconnect, device number 96 [ 1533.625779][ T5707] IPVS: starting estimator thread 0... [ 1533.655788][ T5700] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1533.701296][ T5693] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1533.754512][T30751] IPVS: using max 31 ests per chain, 74400 per kthread [ 1533.816128][ T997] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1533.846260][ T5700] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1533.855756][ T5700] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.867245][ T5700] usb 7-1: config 0 descriptor?? [ 1533.934281][T20504] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1533.964321][ T5693] usb 4-1: Using ep0 maxpacket: 32 [ 1533.972422][ T5693] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1533.983809][ T997] usb 3-1: Using ep0 maxpacket: 32 [ 1533.991416][ T997] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1534.000869][ T997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.012150][ T997] usb 3-1: config 0 descriptor?? [ 1534.076252][ T5700] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1534.224848][ T29] audit: type=1326 audit(1780156918.048:7924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30746 comm="syz.2.7700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86f5f9ce59 code=0x0 [ 1534.298012][ T5700] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1534.306335][ T5700] [drm] Initialized udl on minor 2 [ 1534.324759][ T997] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1534.354263][ T997] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1534.363176][ T997] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1534.485302][ T5700] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1534.498213][ T5700] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1534.757197][T30737] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7695'. [ 1534.845723][ T5693] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1534.854786][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.866723][ T5693] usb 4-1: Product: syz [ 1534.870904][ T5693] usb 4-1: Manufacturer: syz [ 1534.875491][ T5693] usb 4-1: SerialNumber: syz [ 1534.901202][ T5693] usb 4-1: config 0 descriptor?? [ 1534.953824][T30739] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1535.005044][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.060787][T20504] usb 1-1: config 2 has an invalid interface number: 162 but max is 0 [ 1535.068976][T20504] usb 1-1: config 2 has no interface number 0 [ 1535.075062][T20504] usb 1-1: config 2 interface 162 has no altsetting 0 [ 1535.083001][ T5693] hub 4-1:0.0: bad descriptor, ignoring hub [ 1535.089372][ T5693] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1535.109803][ T5693] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input67 [ 1535.164665][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.288251][T15670] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1535.288769][ T5693] usb 7-1: USB disconnect, device number 112 [ 1535.312509][T15670] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1535.401027][T24208] usb 4-1: USB disconnect, device number 71 [ 1535.497757][T20504] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=72.b2 [ 1535.508868][T20504] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.517977][T20504] usb 1-1: Product: syz [ 1535.522464][T20504] usb 1-1: Manufacturer: syz [ 1535.540815][T20504] usb 1-1: SerialNumber: syz [ 1535.830384][T30748] netlink: 'syz.0.7701': attribute type 11 has an invalid length. [ 1536.258413][T30774] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7706'. [ 1536.339380][T30776] netlink: 140 bytes leftover after parsing attributes in process `syz.7.7708'. [ 1536.376064][T20504] usb 1-1: selecting invalid altsetting 0 [ 1536.413775][T30776] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7708'. [ 1536.434484][T24208] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1536.569957][T20504] usb 1-1: USB disconnect, device number 97 [ 1536.607732][T24208] usb 4-1: config 0 has an invalid interface number: 81 but max is 2 [ 1536.621799][T24208] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.647525][T24208] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1536.690191][T24208] usb 4-1: config 0 has no interface number 0 [ 1536.721364][T28339] udevd[28339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.162/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1536.755079][T24208] usb 4-1: config 0 interface 81 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1536.807894][T24208] usb 4-1: config 0 interface 81 has no altsetting 0 [ 1536.861095][T24208] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=21.7a [ 1536.870176][T24208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.891691][T24208] usb 4-1: config 0 descriptor?? [ 1537.162780][T24208] usb 4-1: can't set config #0, error -71 [ 1537.189461][T24208] usb 4-1: USB disconnect, device number 72 [ 1537.310734][T30797] tipc: Enabled bearer , priority 10 [ 1537.474330][T30806] loop5: detected capacity change from 0 to 7 [ 1537.509748][T30806] Dev loop5: unable to read RDB block 7 [ 1537.532591][T30806] loop5: unable to read partition table [ 1537.555094][T30806] loop5: partition table beyond EOD, truncated [ 1537.597895][T30806] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1537.798190][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.800312][ T5693] usb 7-1: new full-speed USB device number 113 using dummy_hcd [ 1537.896095][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.166762][ T5693] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1538.242883][ T5693] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1538.313176][ T5693] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1538.387550][ T5693] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1538.418328][ T5693] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1538.444547][ T5693] usb 7-1: Product: syz [ 1538.449033][ T5693] usb 7-1: Manufacturer: syz [ 1538.454471][ T5693] usb 7-1: SerialNumber: syz [ 1538.482195][ T5693] usb 7-1: config 0 descriptor?? [ 1538.520956][ T5693] usb 7-1: selecting invalid altsetting 0 [ 1538.729176][T30799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.853963][T30799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.594093][ T5700] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1539.618049][T30830] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7725'. [ 1539.818809][ T5700] usb 1-1: device descriptor read/64, error -71 [ 1540.104169][ T5700] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1540.243713][ T5700] usb 1-1: device descriptor read/64, error -71 [ 1540.353924][ T5700] usb usb1-port1: attempt power cycle [ 1540.703765][ T5700] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1540.755014][ T5700] usb 1-1: device descriptor read/8, error -71 [ 1540.823988][T24208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.908580][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.003979][ T5700] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1541.044580][ T5700] usb 1-1: device descriptor read/8, error -71 [ 1541.174173][ T5700] usb usb1-port1: unable to enumerate USB device [ 1541.318258][T30795] snd-usb-audio 7-1:0.0: Runtime PM usage count underflow! [ 1541.357931][ T5700] usb 7-1: USB disconnect, device number 113 [ 1541.652907][T30864] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7737'. [ 1541.718167][T30864] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7737'. [ 1542.544666][T24208] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1542.603760][ T5700] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1542.750556][T30885] netlink: 'syz.3.7742': attribute type 11 has an invalid length. [ 1542.764677][T24208] usb 7-1: Using ep0 maxpacket: 32 [ 1542.776894][T30885] netlink: 448 bytes leftover after parsing attributes in process `syz.3.7742'. [ 1542.787875][ T5700] usb 1-1: Using ep0 maxpacket: 8 [ 1542.806854][ T5700] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.843171][ T5700] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1542.899898][ T5700] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1542.911818][ T9566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.942852][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.981491][ T5700] usb 1-1: Product: syz [ 1543.008720][ T5700] usb 1-1: Manufacturer: syz [ 1543.047090][ T5700] usb 1-1: SerialNumber: syz [ 1543.067424][T24208] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1543.103965][ T5700] usb 1-1: config 0 descriptor?? [ 1543.349923][T20504] usb 1-1: USB disconnect, device number 102 [ 1543.501079][T24208] usb 7-1: config 0 has an invalid interface number: 77 but max is 0 [ 1543.511054][T24208] usb 7-1: config 0 has no interface number 0 [ 1543.518897][T24208] usb 7-1: config 0 interface 77 has no altsetting 0 [ 1543.853233][T24208] usb 7-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=9c.90 [ 1543.864428][T24208] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.867754][T30892] netlink: 'syz.3.7745': attribute type 10 has an invalid length. [ 1543.872456][T24208] usb 7-1: Product: syz [ 1543.872473][T24208] usb 7-1: Manufacturer: syz [ 1543.893735][T24208] usb 7-1: SerialNumber: syz [ 1543.904657][T24208] usb 7-1: config 0 descriptor?? [ 1543.985025][T20504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.657511][ T29] audit: type=1800 audit(1780156928.498:7925): pid=30906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7750" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1544.833596][T30909] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1545.244163][T30911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7748'. [ 1545.259257][T30911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7748'. [ 1545.363160][T30914] tipc: Enabled bearer , priority 0 [ 1545.380673][T30914] syzkaller0: entered promiscuous mode [ 1545.395824][T30914] syzkaller0: entered allmulticast mode [ 1545.818801][T24208] quatech2 7-1:0.77: Quatech 2nd gen USB to Serial Driver converter detected [ 1545.833382][T30873] ALSA: mixer_oss: invalid OSS volume '' [ 1545.865054][T24208] usb 7-1: qt2_attach - failed to power on unit: -71 [ 1545.874181][T30873] ALSA: mixer_oss: invalid OSS volume 'OGA' [ 1545.899613][T24208] quatech2 7-1:0.77: probe with driver quatech2 failed with error -71 [ 1545.934320][T24208] usb 7-1: USB disconnect, device number 114 [ 1546.027942][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.032168][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.046778][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.077662][T12406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.088825][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.100215][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.135686][T30926] tipc: Failed to remove unknown binding: 66,1,1/0:3805731564/3805731566 [ 1546.141427][T30929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7757'. [ 1546.163882][T30929] netlink: 2 bytes leftover after parsing attributes in process `syz.6.7757'. [ 1546.383772][ T5700] tipc: Node number set to 3996171011 [ 1546.669439][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.723620][ T5700] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1546.898889][ T5700] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1546.918388][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.941510][ T5700] usb 4-1: Product: syz [ 1546.950853][ T5700] usb 4-1: Manufacturer: syz [ 1546.963583][ T5700] usb 4-1: SerialNumber: syz [ 1546.994493][T24208] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1547.027463][T30940] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7761'. [ 1547.036808][T30940] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7761'. [ 1547.344631][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.654264][T24208] usb 7-1: Using ep0 maxpacket: 8 [ 1547.914470][T30949] tipc: Enabled bearer , priority 0 [ 1547.922216][T30949] syzkaller0: entered promiscuous mode [ 1547.927715][T30949] syzkaller0: entered allmulticast mode [ 1547.997502][ T5700] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1548.245193][T15670] usb 1-1: new low-speed USB device number 103 using dummy_hcd [ 1548.262078][ T5700] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1548.273940][T30916] tipc: Resetting bearer [ 1548.283664][ T5700] usb 4-1: USB disconnect, device number 73 [ 1548.291177][ T5700] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 1548.314987][T24208] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1548.327998][T24208] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1548.337742][T24208] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1548.347465][T24208] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1548.357372][T24208] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1548.370430][T24208] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1548.371605][T30916] tipc: Disabling bearer [ 1548.379451][T24208] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.423247][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.455862][T15670] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1548.463715][T15670] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1548.491111][T15670] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1548.520217][T28339] udevd[28339]: setting owner of /dev/bus/usb/004/073 to uid=0, gid=0 failed: No such file or directory [ 1548.545550][T15670] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1548.579872][T15670] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1548.594852][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.605647][T15670] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1548.618176][T15670] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1548.632244][T15670] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1548.658493][T15670] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1548.671779][T24208] usb 7-1: usb_control_msg returned -32 [ 1548.672113][T15670] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1548.689144][T15670] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1548.696678][T24208] usbtmc 7-1:16.0: can't read capabilities [ 1548.700301][T15670] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1548.700331][T15670] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1548.700362][T15670] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1548.700383][T15670] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1548.700407][T15670] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1548.814436][T15670] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1548.824738][T15670] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1548.836324][T30954] sctp: [Deprecated]: syz.7.7766 (pid 30954) Use of int in maxseg socket option. [ 1548.836324][T30954] Use struct sctp_assoc_value instead [ 1548.842236][T15670] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1548.899487][ T5700] usb 7-1: USB disconnect, device number 115 [ 1548.906389][T15670] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1548.921583][T15670] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1548.933719][T15670] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1548.952456][T15670] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1548.966151][T15670] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1548.991476][T15670] usb 1-1: string descriptor 0 read error: -22 [ 1549.001319][T15670] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1549.016067][T30959] FAULT_INJECTION: forcing a failure. [ 1549.016067][T30959] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.022077][T15670] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.052293][ T5693] tipc: Node number set to 509453371 [ 1549.072471][T30959] CPU: 0 UID: 0 PID: 30959 Comm: syz.3.7767 Tainted: G L syzkaller #0 PREEMPT(full) [ 1549.072495][T30959] Tainted: [L]=SOFTLOCKUP [ 1549.072501][T30959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1549.072509][T30959] Call Trace: [ 1549.072516][T30959] [ 1549.072523][T30959] dump_stack_lvl+0xe8/0x150 [ 1549.072545][T30959] should_fail_ex+0x412/0x560 [ 1549.072568][T30959] should_failslab+0xa8/0x100 [ 1549.072587][T30959] __kmalloc_node_noprof+0xf0/0x7c0 [ 1549.072610][T30959] ? crypto_create_tfm_node+0x83/0x3f0 [ 1549.072634][T30959] crypto_create_tfm_node+0x83/0x3f0 [ 1549.072659][T30959] crypto_alloc_tfm_node+0x172/0x3f0 [ 1549.072687][T30959] esp6_init_state+0x63c/0x1240 [ 1549.072703][T30959] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1549.072731][T30959] ? __pfx_esp6_init_state+0x10/0x10 [ 1549.072764][T30959] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1549.072786][T30959] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1549.072815][T30959] ? __xfrm_init_state+0x842/0x1460 [ 1549.072838][T30959] __xfrm_init_state+0xac9/0x1460 [ 1549.072856][T30959] ? __xfrm_init_state+0x842/0x1460 [ 1549.072878][T30959] xfrm_add_sa+0x3073/0x4230 [ 1549.072904][T30959] ? __pfx_xfrm_add_sa+0x10/0x10 [ 1549.072920][T30959] ? apparmor_capable+0x126/0x170 [ 1549.072943][T30959] ? __nla_parse+0x40/0x60 [ 1549.072966][T30959] xfrm_user_rcv_msg+0x7ae/0xc40 [ 1549.072990][T30959] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1549.073040][T30959] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1549.073063][T30959] ? rcu_is_watching+0x15/0xb0 [ 1549.073090][T30959] ? trace_contention_end+0x3d/0x140 [ 1549.073111][T30959] ? __mutex_lock+0x319/0x1550 [ 1549.073134][T30959] netlink_rcv_skb+0x232/0x4b0 [ 1549.073157][T30959] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1549.073177][T30959] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1549.073213][T30959] ? netlink_deliver_tap+0x2e/0x1b0 [ 1549.073234][T30959] ? netlink_deliver_tap+0x2e/0x1b0 [ 1549.073258][T30959] xfrm_netlink_rcv+0x79/0x90 [ 1549.073277][T30959] netlink_unicast+0x75c/0x8e0 [ 1549.073309][T30959] netlink_sendmsg+0x813/0xb40 [ 1549.073339][T30959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1549.073364][T30959] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1549.073388][T30959] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1549.073411][T30959] ____sys_sendmsg+0x972/0x9f0 [ 1549.073427][T30959] ? __might_fault+0xaf/0x130 [ 1549.073453][T30959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1549.073478][T30959] ? import_iovec+0x73/0xa0 [ 1549.073501][T30959] ___sys_sendmsg+0x2a5/0x360 [ 1549.073516][T30959] ? __lock_acquire+0x6b5/0x2cf0 [ 1549.073534][T30959] ? __pfx____sys_sendmsg+0x10/0x10 [ 1549.073583][T30959] ? __fget_files+0x2a/0x420 [ 1549.073601][T30959] ? __fget_files+0x3a0/0x420 [ 1549.073628][T30959] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1549.073648][T30959] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1549.073673][T30959] ? __pfx_ksys_write+0x10/0x10 [ 1549.073703][T30959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.073721][T30959] do_syscall_64+0x174/0x580 [ 1549.073737][T30959] ? trace_irq_disable+0x3b/0x140 [ 1549.073758][T30959] ? clear_bhb_loop+0x40/0x90 [ 1549.073777][T30959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.073793][T30959] RIP: 0033:0x7f7d0ff9ce59 [ 1549.073809][T30959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.073823][T30959] RSP: 002b:00007f7d10e55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1549.073841][T30959] RAX: ffffffffffffffda RBX: 00007f7d10216090 RCX: 00007f7d0ff9ce59 [ 1549.073853][T30959] RDX: 0000000000044050 RSI: 0000200000000180 RDI: 0000000000000009 [ 1549.073863][T30959] RBP: 00007f7d10e55090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.073874][T30959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1549.073883][T30959] R13: 00007f7d10216128 R14: 00007f7d10216090 R15: 00007f7d1033fa48 [ 1549.073912][T30959] [ 1549.080274][T15670] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1549.180616][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.181761][T18648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.436916][T30949] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7764'. [ 1549.505562][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.515894][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.577896][T30949] tipc: Resetting bearer [ 1549.649615][T30950] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 1549.772953][T30967] fuse: Unknown parameter 'use00000000000000000000' [ 1550.101102][T30974] loop5: detected capacity change from 0 to 7 [ 1550.116406][T30974] Dev loop5: unable to read RDB block 7 [ 1550.125915][T30974] loop5: unable to read partition table [ 1550.135433][T18648] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1550.159578][T30974] loop5: partition table beyond EOD, truncated [ 1550.181451][T30974] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1550.344153][T18648] usb 4-1: Using ep0 maxpacket: 8 [ 1550.359375][T18648] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1550.381621][T18648] usb 4-1: config 0 has no interface number 0 [ 1550.399661][T18648] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1550.418277][T30977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1550.430834][T18648] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1550.460626][T18648] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1550.501258][T18648] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1550.535739][T20504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.578252][T18648] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1550.643256][T18648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.737103][T18648] usb 4-1: config 0 descriptor?? [ 1550.828906][T18648] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1550.912332][T30984] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7775'. [ 1551.174352][T18648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.189511][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.232413][T30986] io-wq is not configured for unbound workers [ 1552.069741][T30995] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7779'. [ 1552.177505][T30995] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7779'. Stopping sshd: stopped /usr/sbin/sshd (pid 5385) OK Stopping crond: stopped /usr/sbin/crond (pid 5369) OK [ 1552.831976][T18648] usb 1-1: USB disconnect, device number 103 [ 1552.849854][T30950] tipc: Resetting bearer [ 1552.983098][ T5700] usb 4-1: USB disconnect, device number 74 [ 1553.014993][ T5700] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 1553.022298][T30950] tipc: Disabling bearer [ 1553.116870][T31008] netem: change failed Stopping dhcpcd... [ 1553.426721][T31021] netlink: 428 bytes leftover after parsing attributes in process `syz.6.7787'. [ 1553.449359][T31022] netlink: 428 bytes leftover after parsing attributes in process `syz.6.7787'. stopped /sbin/dhcpcd (pid 5294)[ 1553.485432][T31021] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7787'. [ 1553.521714][T31022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7787'. [ 1553.656865][ T5693] net_ratelimit: 10 callbacks suppressed [ 1553.656902][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog Stopping network: [ 1553.824967][ T5707] usb 7-1: new full-speed USB device number 116 using dummy_hcd [ 1553.828374][T31033] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7789'. [ 1554.009591][ T5707] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1554.037576][ T5707] usb 7-1: not running at top speed; connect to a high speed hub [ 1554.223970][T31045] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7794'. [ 1554.232953][T31045] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7794'. [ 1554.273776][T31048] xt_hashlimit: size too large, truncated to 1048576 [ 1554.380087][T31053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7793'. [ 1554.383153][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.484238][ T5707] usb 7-1: config 144 has an invalid interface number: 118 but max is 0 [ 1554.493093][ T5707] usb 7-1: config 144 has an invalid interface number: 170 but max is 0 [ 1554.501440][ T5707] usb 7-1: config 144 has 2 interfaces, different from the descriptor's value: 1 [ 1554.510559][ T5707] usb 7-1: config 144 has no interface number 0 [ 1554.516811][ T5707] usb 7-1: config 144 has no interface number 1 [ 1554.523102][ T5707] usb 7-1: config 144 interface 118 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1554.534138][ T5707] usb 7-1: too many endpoints for config 144 interface 170 altsetting 197: 43, using maximum allowed: 30 [ 1554.545368][ T5707] usb 7-1: config 144 interface 170 altsetting 197 has 0 endpoint descriptors, different from the interface descriptor's value: 43 [ 1554.558862][ T5707] usb 7-1: config 144 interface 118 has no altsetting 0 [ 1554.565815][ T5707] usb 7-1: config 144 interface 170 has no altsetting 0 [ 1554.722070][T24208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.738733][ T5707] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=7e.fe [ 1554.759140][ T5707] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.777686][ T5707] usb 7-1: Product: syz [ 1554.781886][ T5707] usb 7-1: Manufacturer: syz [ 1554.786489][ T5707] usb 7-1: SerialNumber: syz OK [ 1554.901491][T31064] netlink: 'syz.7.7795': attribute type 11 has an invalid length. [ 1554.919729][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog Stopping iptables: [ 1555.225319][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.241601][T31071] binder: BINDER_SET_CONTEXT_MGR already set [ 1555.288379][T31071] binder: 31070:31071 ioctl 4018620d 200000000500 returned -16 OK [ 1555.448938][ T5707] usb 7-1: USB disconnect, device number 116 [ 1555.562080][T28339] udevd[28339]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:144.118/sound/card3/controlC3/../uevent} for writing: No such file or directory Stopping system message bus: [ 1555.876227][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.906886][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.916362][T18648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.927115][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.980002][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.018795][T31106] trusted_key: encrypted_key: insufficient parameters specified [ 1557.154262][T24208] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1557.207541][T31106] iommufd_mock iommufd_mock0: Adding to iommu group 0 done [ 1557.558664][T24208] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1557.581480][T24208] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1557.591314][T24208] usb 7-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1557.600421][T24208] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.617445][T24208] usb 7-1: config 0 descriptor?? [ 1557.682359][ T5707] usb 1-1: new high-speed USB device number 104 using dummy_hcd Stopping klogd: OK Stopping acpid: [ 1558.315603][T31130] netlink: 'syz.3.7809': attribute type 11 has an invalid length. [ 1558.336875][ T5707] usb 1-1: Using ep0 maxpacket: 8 [ 1558.338334][T31130] __nla_validate_parse: 2 callbacks suppressed [ 1558.338348][T31130] netlink: 448 bytes leftover after parsing attributes in process `syz.3.7809'. [ 1558.551529][ T5707] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 1558.560681][ T5707] usb 1-1: config 0 has no interface number 1 [ 1558.568209][ T5707] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1558.580341][ T5707] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 1558.596194][ T5707] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1558.606381][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.615892][ T5707] usb 1-1: Product: syz [ 1558.620344][ T5707] usb 1-1: Manufacturer: syz [ 1558.625785][ T5707] usb 1-1: SerialNumber: syz [ 1558.634281][ T5707] usb 1-1: config 0 descriptor?? [ 1558.645048][ T5707] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1558.674257][ T5693] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1558.824679][T18648] net_ratelimit: 3 callbacks suppressed [ 1558.824698][T18648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.837383][ T5693] usb 4-1: Using ep0 maxpacket: 8 [ 1558.855830][ T5693] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.855858][ T5693] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1558.880947][ T5693] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1558.880965][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.880987][ T5693] usb 4-1: Product: syz [ 1558.880995][ T5693] usb 4-1: Manufacturer: syz [ 1558.881014][ T5693] usb 4-1: SerialNumber: syz [ 1558.898552][ T5693] usb 4-1: config 0 descriptor?? [ 1559.021995][ T5707] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1559.037896][ T2366] pvrusb2: Invalid read control endpoint [ 1559.045635][ T2366] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1559.055152][ T2366] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1559.129611][ T5707] usb 1-1: USB disconnect, device number 104 [ 1559.147897][ T5693] usb 4-1: USB disconnect, device number 75 [ 1559.236756][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog OK Stopping syslogd: stopped /sbin/syslogd (pid 4981) OK [ 1559.537824][T31151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7816'. [ 1559.902756][T31172] bridge0: port 1(macvlan2) entered blocking state [ 1559.920510][T31172] bridge0: port 1(macvlan2) entered disabled state [ 1559.927483][T31172] macvlan2: entered allmulticast mode [ 1559.932925][T31172] bridge0: entered allmulticast mode [ 1559.972996][T31172] macvlan2: left allmulticast mode [ 1559.987849][T31172] bridge0: left allmulticast mode [ 1559.999919][T31180] binder: 31177:31180 ioctl 4c0a 200000000040 returned -22 [ 1560.018863][T24208] usbhid 7-1:0.0: can't add hid device: -71 [ 1560.025567][T24208] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1560.034748][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.057897][T24208] usb 7-1: USB disconnect, device number 117 umount: can't remount debugfs read-only [ 1560.115037][ T8696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.264821][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.323671][T16449] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 1560.529129][T16449] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1560.560085][T16449] usb 4-1: config 242 has an invalid interface number: 40 but max is 0 [ 1560.595561][T16449] usb 4-1: config 242 has no interface number 0 [ 1560.618216][T16449] usb 4-1: config 242 interface 40 altsetting 4 endpoint 0xD is Bulk; changing to Interrupt [ 1560.651263][T16449] usb 4-1: config 242 interface 40 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 8 [ 1560.686387][T16449] usb 4-1: config 242 interface 40 has no altsetting 0 [ 1560.718811][T16449] usb 4-1: string descriptor 0 read error: -22 [ 1560.743906][T16449] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=44.11 [ 1560.783692][T16449] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.811487][T31179] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1560.834153][T16449] hdpvr 4-1:242.40: Could not find bulk-in endpoint [ 1560.850696][T16449] hdpvr 4-1:242.40: probe with driver hdpvr failed with error -12 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only [ 1561.021923][ T5693] usb 4-1: USB disconnect, device number 76 The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.76 closed by remote host. [ 1561.304263][T18648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.312420][T18648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.348888][T24208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog Sent SIGKILL to all processes Requesting system poweroff [ 1562.666772][T10482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.680983][T10482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.067645][ T3268] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.306934][ T3268] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.546285][T31188] smc: removing smcd device lo [ 1563.557930][ T997] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1563.612571][ T997] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1563.672622][ T2366] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 1563.693833][ T2366] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 1563.713640][ T2366] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 1563.733773][ T2366] pvrusb2: Failure uploading firmware1 [ 1563.745670][ T997] usb 3-1: USB disconnect, device number 68 [ 1563.754046][ T2366] pvrusb2: Device initialization was not successful. [ 1563.766747][ T2366] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 1563.776455][ T2366] pvrusb2: Failed to submit write-control URB status=-19 [ 1563.799561][ T5707] pvrusb2: Device being rendered inoperable [ 1563.801225][ T2366] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1563.846431][ T2366] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1563.868407][ T2366] ------------[ cut here ]------------ [ 1563.871186][ T3268] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.874191][ T2366] ret [ 1563.874211][ T2366] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0xa30, CPU#1: pvrusb2-context/2366 [ 1563.874252][ T2366] Modules linked in: [ 1563.874318][ T2366] CPU: 1 UID: 0 PID: 2366 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 1563.874342][ T2366] Tainted: [L]=SOFTLOCKUP [ 1563.874350][ T2366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1563.874361][ T2366] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 1563.874386][ T2366] Code: bb fb e9 5d fc ff ff e8 f8 c2 bb fb c6 05 0f 41 10 0a 01 48 c7 c7 a0 05 54 8c e8 d5 b8 1d fb e9 85 fc ff ff e8 db c2 bb fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 a0 06 54 8c 4c 89 e2 e8 45 59 22 fb e9 [ 1563.874401][ T2366] RSP: 0018:ffffc90007097670 EFLAGS: 00010293 [ 1563.874418][ T2366] RAX: ffffffff8609f3c5 RBX: dffffc0000000000 RCX: ffff88802ce29f00 [ 1563.874432][ T2366] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 1563.874444][ T2366] RBP: 0000000000000001 R08: ffffffff903023f7 R09: 1ffffffff206047e [ 1563.874457][ T2366] R10: dffffc0000000000 R11: fffffbfff206047f R12: ffffffff8cae3ae0 [ 1563.874470][ T2366] R13: 0000000000001770 R14: ffff8880622080b0 R15: 00000000fffffff5 [ 1563.874484][ T2366] FS: 0000000000000000(0000) GS:ffff88812539e000(0000) knlGS:0000000000000000 [ 1563.874498][ T2366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1563.874511][ T2366] CR2: 000055555c838a38 CR3: 0000000034c48000 CR4: 00000000003526f0 [ 1563.874527][ T2366] Call Trace: [ 1563.874535][ T2366] [ 1563.874547][ T2366] ? kfree+0x1c5/0x640 [ 1563.874569][ T2366] ? _request_firmware+0xf11/0x1780 [ 1563.874589][ T2366] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1563.874616][ T2366] _request_firmware+0x1052/0x1780 [ 1563.874655][ T2366] ? __pfx__request_firmware+0x10/0x10 [ 1563.874690][ T2366] request_firmware+0x36/0x50 [ 1563.874713][ T2366] pvr2_locate_firmware+0xb3/0x500 [ 1563.874741][ T2366] pvr2_upload_firmware1+0x1ba/0x910 [ 1563.874766][ T2366] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1563.874791][ T2366] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 1563.874826][ T2366] pvr2_hdw_initialize+0x428/0x3c50 [ 1563.874847][ T2366] ? lockdep_hardirqs_on+0x7a/0x110 [ 1563.874882][ T2366] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1563.874905][ T2366] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 1563.874924][ T2366] ? rcu_is_watching+0x15/0xb0 [ 1563.874946][ T2366] ? trace_contention_end+0x3d/0x140 [ 1563.874975][ T2366] ? pvr2_context_thread_func+0x26a/0xb40 [ 1563.875001][ T2366] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1563.875018][ T2366] ? pvr2_context_thread_func+0x102/0xb40 [ 1563.875037][ T2366] ? __pfx___schedule+0x10/0x10 [ 1563.875061][ T2366] ? __pfx___mutex_lock+0x10/0x10 [ 1563.875079][ T2366] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1563.875102][ T2366] ? schedule+0x90/0x360 [ 1563.875129][ T2366] ? schedule+0x16e/0x360 [ 1563.875154][ T2366] pvr2_context_thread_func+0x490/0xb40 [ 1563.875180][ T2366] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 1563.875200][ T2366] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1563.875227][ T2366] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1563.875251][ T2366] ? __kthread_parkme+0x7a/0x1f0 [ 1563.875279][ T2366] kthread+0x389/0x470 [ 1564.196616][ T2366] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 1564.202796][ T2366] ? __pfx_kthread+0x10/0x10 [ 1564.207487][ T2366] ret_from_fork+0x514/0xb70 [ 1564.212130][ T2366] ? __pfx_ret_from_fork+0x10/0x10 [ 1564.217480][ T2366] ? __switch_to+0xc79/0x1410 [ 1564.222621][ T2366] ? __pfx_kthread+0x10/0x10 [ 1564.227272][ T2366] ret_from_fork_asm+0x1a/0x30 [ 1564.232089][ T2366] [ 1564.235199][ T2366] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1564.242487][ T2366] CPU: 1 UID: 0 PID: 2366 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 1564.253780][ T2366] Tainted: [L]=SOFTLOCKUP [ 1564.258104][ T2366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1564.268163][ T2366] Call Trace: [ 1564.271449][ T2366] [ 1564.274379][ T2366] vpanic+0x56c/0xa60 [ 1564.278363][ T2366] ? __pfx__printk+0x10/0x10 [ 1564.282955][ T2366] ? __pfx_vpanic+0x10/0x10 [ 1564.287460][ T2366] ? is_bpf_text_address+0x292/0x2b0 [ 1564.292763][ T2366] ? is_bpf_text_address+0x26/0x2b0 [ 1564.299372][ T2366] panic+0xc5/0xd0 [ 1564.303102][ T2366] ? __pfx_panic+0x10/0x10 [ 1564.307530][ T2366] ? ret_from_fork_asm+0x1a/0x30 [ 1564.312482][ T2366] __warn+0x315/0x4c0 [ 1564.316471][ T2366] ? firmware_fallback_sysfs+0x746/0xa30 [ 1564.322121][ T2366] ? firmware_fallback_sysfs+0x746/0xa30 [ 1564.327770][ T2366] __report_bug+0x29a/0x540 [ 1564.332729][ T2366] ? firmware_fallback_sysfs+0x746/0xa30 [ 1564.338389][ T2366] ? __pfx___report_bug+0x10/0x10 [ 1564.343426][ T2366] ? __up_read+0x291/0x6b0 [ 1564.347953][ T2366] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1564.353772][ T2366] ? firmware_fallback_sysfs+0x746/0xa30 [ 1564.359414][ T2366] report_bug+0x16a/0x220 [ 1564.363746][ T2366] ? firmware_fallback_sysfs+0x746/0xa30 [ 1564.369387][ T2366] ? firmware_fallback_sysfs+0x748/0xa30 [ 1564.375038][ T2366] handle_bug+0x9c/0x200 [ 1564.379300][ T2366] exc_invalid_op+0x1a/0x50 [ 1564.383814][ T2366] asm_exc_invalid_op+0x1a/0x20 [ 1564.388668][ T2366] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 1564.394982][ T2366] Code: bb fb e9 5d fc ff ff e8 f8 c2 bb fb c6 05 0f 41 10 0a 01 48 c7 c7 a0 05 54 8c e8 d5 b8 1d fb e9 85 fc ff ff e8 db c2 bb fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 a0 06 54 8c 4c 89 e2 e8 45 59 22 fb e9 [ 1564.414601][ T2366] RSP: 0018:ffffc90007097670 EFLAGS: 00010293 [ 1564.420677][ T2366] RAX: ffffffff8609f3c5 RBX: dffffc0000000000 RCX: ffff88802ce29f00 [ 1564.428648][ T2366] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 1564.436624][ T2366] RBP: 0000000000000001 R08: ffffffff903023f7 R09: 1ffffffff206047e [ 1564.444596][ T2366] R10: dffffc0000000000 R11: fffffbfff206047f R12: ffffffff8cae3ae0 [ 1564.452658][ T2366] R13: 0000000000001770 R14: ffff8880622080b0 R15: 00000000fffffff5 [ 1564.460646][ T2366] ? firmware_fallback_sysfs+0x745/0xa30 [ 1564.466314][ T2366] ? kfree+0x1c5/0x640 [ 1564.470398][ T2366] ? _request_firmware+0xf11/0x1780 [ 1564.475616][ T2366] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1564.481173][ T2366] _request_firmware+0x1052/0x1780 [ 1564.486312][ T2366] ? __pfx__request_firmware+0x10/0x10 [ 1564.491790][ T2366] request_firmware+0x36/0x50 [ 1564.496485][ T2366] pvr2_locate_firmware+0xb3/0x500 [ 1564.501614][ T2366] pvr2_upload_firmware1+0x1ba/0x910 [ 1564.506907][ T2366] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1564.512895][ T2366] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 1564.518722][ T2366] pvr2_hdw_initialize+0x428/0x3c50 [ 1564.523937][ T2366] ? lockdep_hardirqs_on+0x7a/0x110 [ 1564.529153][ T2366] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1564.535065][ T2366] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 1564.540705][ T2366] ? rcu_is_watching+0x15/0xb0 [ 1564.545483][ T2366] ? trace_contention_end+0x3d/0x140 [ 1564.550800][ T2366] ? pvr2_context_thread_func+0x26a/0xb40 [ 1564.556542][ T2366] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1564.562177][ T2366] ? pvr2_context_thread_func+0x102/0xb40 [ 1564.567991][ T2366] ? __pfx___schedule+0x10/0x10 [ 1564.572862][ T2366] ? __pfx___mutex_lock+0x10/0x10 [ 1564.577898][ T2366] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1564.583895][ T2366] ? schedule+0x90/0x360 [ 1564.588158][ T2366] ? schedule+0x16e/0x360 [ 1564.592506][ T2366] pvr2_context_thread_func+0x490/0xb40 [ 1564.598101][ T2366] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 1564.604179][ T2366] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1564.610266][ T2366] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1564.616077][ T2366] ? __kthread_parkme+0x7a/0x1f0 [ 1564.621029][ T2366] kthread+0x389/0x470 [ 1564.625104][ T2366] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 1564.631174][ T2366] ? __pfx_kthread+0x10/0x10 [ 1564.635768][ T2366] ret_from_fork+0x514/0xb70 [ 1564.640362][ T2366] ? __pfx_ret_from_fork+0x10/0x10 [ 1564.645475][ T2366] ? __switch_to+0xc79/0x1410 [ 1564.650165][ T2366] ? __pfx_kthread+0x10/0x10 [ 1564.654762][ T2366] ret_from_fork_asm+0x1a/0x30 [ 1564.659542][ T2366] [ 1564.662711][ T2366] Kernel Offset: disabled [ 1564.667069][ T2366] Rebooting in 86400 seconds..