last executing test programs: 11m55.731870521s ago: executing program 1 (id=1939): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @remote, 0xfffffffe}}, {{0xa, 0xfffc, 0x0, @private2}}]}, 0x190) syz_emit_ethernet(0xf87, &(0x7f0000001a00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a60f510000fc020000000000400000000000000000ff02000000000000000000000000000184"], 0x0) 11m55.564863784s ago: executing program 1 (id=1940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000024000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001505000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) 11m55.388402707s ago: executing program 1 (id=1941): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x114) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000300)="7a1cd8b80d9be8a07672d29b23d1bc46f2f027c158de0481cf5deb0c5d15b69e173c5b724cb26702d3d17a6db715986a6cdb80a56ad5daf33212c0cc67c3e3881c02ab6b84ce408dfe66db", &(0x7f0000000540)="c188d76fd7cbebb9caecb73e13275251345105892ffbef337ad311a174df1977fcfa9f620afd9784d73a59ebdb95edc9fef8799c845267c2e273840ef9fa4f7f0239a80ecbdd05a71e94a017970db149b5dbe7fe6319618aa995bed05a707db8cc72e7525a25b0500b6c69e47fb98d471b3c9bb6c1bad1e1d7c5ffd397379788e712d38b96c43b91a8ae05de97560e0515f7d5b9f5e5254e9270dffc407dc3e32caf686cf624f991278f5c6864570f4d7f4fd2fa2bbcde9de9167bbdf2de8f7a1dc2ae177a7c5aa3bed91151d5a2d6", 0x800, r3, 0x0, 0x200000000000000}, 0x38) 11m53.39154944s ago: executing program 1 (id=1944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010100}]}}}]}, 0x50}}, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x200000, 0x0, 0x3, 0x0, 'syz0\x00'}, 0x5, 0x400, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 11m53.107943077s ago: executing program 1 (id=1947): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[], 0x48}, 0x1, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @loopback, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a3a00002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setns(0xffffffffffffffff, 0x24020000) sendmmsg$inet(r7, &(0x7f0000001700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="140000000000000000000000010000000e000000000000001400000000000000000000000100000007000000000000002400000000000000000000000700000094040000820d212aab96bad6cdf9", @ANYRES32, @ANYBLOB="ac1414366401010100000000600000000000000010000000070000000144207d40000000090000069f000000060001000000000a76000000090000000701862a00000002070e301517f337fc5724b0f4b19f0210c22ab262618268e7b39eceaeaa720106fe8b1561940400001c0000000000000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000001100000000000000290000000100000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010102ac1414aa000000001400000000000000010000000100000001"], 0x168}}], 0x1, 0x8000004) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 11m52.740169094s ago: executing program 1 (id=1950): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket(0x25, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) getpeername$inet6(r0, &(0x7f00000001c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000640)={0x1, 0x3, "ec9fe44d4dbe56a65274d7c727e7e53c1bb714e315eeb406bfdd73835e5defa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67013fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b2fdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bcb7d08e36655c00"}) prctl$PR_SCHED_CORE(0x3e, 0x8000000000000001, 0xffffffffffffffff, 0x3, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) r7 = socket(0x3, 0x80000, 0x7fa4d044) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x34}}, 0x4000) pipe2(&(0x7f0000000280), 0x0) connect$tipc(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x1, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0x4, 0x1005, &(0x7f0000002840)=""/4101, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) sendmmsg$unix(r7, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x40, 0x30, 0x5, 0x803, 0x0, 0x3, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0xd, @remote, 0x5}]}, &(0x7f0000000100)=0x10) 11m52.127588488s ago: executing program 32 (id=1950): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket(0x25, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) getpeername$inet6(r0, &(0x7f00000001c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000640)={0x1, 0x3, "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"}) prctl$PR_SCHED_CORE(0x3e, 0x8000000000000001, 0xffffffffffffffff, 0x3, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) r7 = socket(0x3, 0x80000, 0x7fa4d044) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x34}}, 0x4000) pipe2(&(0x7f0000000280), 0x0) connect$tipc(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x1, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0x4, 0x1005, &(0x7f0000002840)=""/4101, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) sendmmsg$unix(r7, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x40, 0x30, 0x5, 0x803, 0x0, 0x3, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0xd, @remote, 0x5}]}, &(0x7f0000000100)=0x10) 11m2.500089885s ago: executing program 0 (id=2106): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x4000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000240)=ANY=[], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000680)={&(0x7f0000000ac0)=[{0x40, 0x4010, 0x0, 0x0}, {0x7f, 0x7800, 0x0, 0x0}], 0x2}) 10m59.40998497s ago: executing program 0 (id=2129): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="aefdda9d240306000000f57f07603aeff0f64ebbee07962c38e22e11b44e65d76641cb0100070068002aa7b642d1cd27d586a953b4242fc0ac4e", 0x3a}], 0x1) 10m59.179373922s ago: executing program 0 (id=2131): epoll_create(0xaf2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000fdd2cc0e49788f17000000000000e2ffe8bf5a15522b01be003aa3023512321947649ce5"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = gettid() setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x7ffffffe, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000006a0000082abd7000ffdbdf250a0000000000000008000a000200000008000500", @ANYRES32=r5, @ANYBLOB="040009000400090008000a0000000000080005c29ac29a41c1513bf830eaf30d4f909619c26af411f83a3588380f416b0e2884429587640e585eedea28945d378c0afa496baf192dc6c08daab93c19304a25ea2dd7eabd994d9b9f0b9cc61b96859d172c", @ANYRES32=r5, @ANYBLOB="080001000200000008000500", @ANYRES32=r5, @ANYBLOB="0800010002000000"], 0x58}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x9, &(0x7f0000000240)=[{0x8, 0x5, 0x8, 0x5}, {0x3ff, 0x1, 0xd, 0xfe8}, {0xfffa, 0x24, 0x49, 0x8}, {0x44, 0xf9, 0x2, 0x4}, {0x8, 0xe3, 0x95, 0x2}, {0x0, 0x40, 0x7, 0x8}, {0x9, 0x7f, 0x3, 0xe700}, {0x8, 0x32, 0x5, 0x1}, {0x555f, 0xff, 0x6, 0x2000}]}) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000040)=[{r6}, {r6, 0x8008}], 0x2, 0x0, 0x0, 0x0) tkill(r2, 0x7) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r9 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x8}}], 0x1, 0x0) writev(r9, &(0x7f0000000340)=[{&(0x7f00000001c0)="c7c5", 0x2}], 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r10, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x200, 0x3}}]}) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) 10m58.859502695s ago: executing program 0 (id=2133): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x220) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, 0x0) 10m58.295567833s ago: executing program 0 (id=2134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x1b00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 10m57.198219936s ago: executing program 0 (id=2135): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000"], 0x28}}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x5eb102) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000deffffff003a00000008000300", @ANYRES32=r11, @ANYBLOB="05005b00c1"], 0x24}}, 0x0) 10m56.717474189s ago: executing program 33 (id=2135): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000"], 0x28}}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x5eb102) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000deffffff003a00000008000300", @ANYRES32=r11, @ANYBLOB="05005b00c1"], 0x24}}, 0x0) 1m20.583511318s ago: executing program 5 (id=4541): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x203f76, 0x100, 0xfffffffe, 0x1cf}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0xf400, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497ccf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, "55000000030007000000dc7500", "1575a859", "07d7fcde", "2782914e", ["aabe8459c62224475793e8a7", "7f9ce2d2c4f4390300c1d1c8", "ce0301000c0091023be516d1", '\x00\x00k\x00\x00\x00\x00\x00\x00 \x00']}) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r8, &(0x7f0000000300)=[{{0x0, 0xfffffffffffffffa, 0x0}, 0x3a}], 0x30, 0x40000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1m18.423125477s ago: executing program 5 (id=4549): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x6, 0x3, &(0x7f00000000c0)={0x11, "cc9efc7ddb01702fa90000000000009900"}}) 1m16.551688246s ago: executing program 5 (id=4559): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d", @ANYRES8=0x0, @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 1m16.200339734s ago: executing program 5 (id=4560): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(0xffffffffffffffff, r0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x20000000000, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xfffffffb, 0xfffffff9}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x7600) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040), &(0x7f00000000c0)) r4 = socket(0x28, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000280)={r7, 0xe}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000500)={r8}, &(0x7f0000000540)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) 1m13.590105569s ago: executing program 5 (id=4572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}, 0x1, 0x3000000}, 0x0) 1m13.435561055s ago: executing program 5 (id=4573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setattr(0x0, 0x0, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x80000001, 0xbfe00000}, &(0x7f0000000000), &(0x7f0000000280)) (async) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x80000001, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300) (async) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) write$ppp(r3, &(0x7f0000000340)="bc7a5313a25870a567f814", 0xb) (async) write$ppp(r3, &(0x7f0000000340)="bc7a5313a25870a567f814", 0xb) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000002c0)={0x10003, 0x0, {[0x1, 0x4, 0x3, 0x2, 0x2, 0x9, 0xffffffffe1fc044f, 0x80]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x5bb}) 58.36212132s ago: executing program 34 (id=4573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setattr(0x0, 0x0, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x80000001, 0xbfe00000}, &(0x7f0000000000), &(0x7f0000000280)) (async) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x80000001, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300) (async) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) write$ppp(r3, &(0x7f0000000340)="bc7a5313a25870a567f814", 0xb) (async) write$ppp(r3, &(0x7f0000000340)="bc7a5313a25870a567f814", 0xb) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000002c0)={0x10003, 0x0, {[0x1, 0x4, 0x3, 0x2, 0x2, 0x9, 0xffffffffe1fc044f, 0x80]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x5bb}) 10.042027091s ago: executing program 7 (id=4761): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x3) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xf, 0xcee, 0xd, 0xe, 0x2, 0x100, 0x3}, &(0x7f0000000100)={0x7, 0x9, 0x40, 0xfffffffffffff000, 0x7f, 0x7fffffff, 0x1, 0x1}, &(0x7f0000000140)={0xffff, 0x0, 0x1, 0x10, 0x0, 0x9, 0x0, 0x67}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x7]}, 0x8}) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000280), 0x12) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0xec, "6e835754a6ae98e8ec90895c6a3f0a25c8e3ce77d85ef4b9d4c0486cb88109500f3d38f3a24dd6ce48a729c7c16916db21ad2480f3ad873d144c6fcb4503c28c098edbed74222b9cd6cebb7942e082cc75a632d79fd5d3b836c946835ae7079be61710cf011981251ffe8d26c9000e8e76a26a614eccc8f6ed9b66857e89e640ddfecbb8b94532ac035af1052154e6d318e137b2d3dbb0f1a7a3a577a639675dfb8e60d48d5bb945c60b062234aa8ce9ccf420cba5dc83787682507e1a6a15a128e6e49402ce5a34ca6bcee5edb2c04585cb5b58ad873f76398b9794a3ad2d64b6b68dd5b84c1133e4848302"}, &(0x7f00000003c0)=0xf4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r4, 0x1ff, 0x1}, 0xc) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000540)=""/41, 0x29}, {&(0x7f0000000580)=""/139, 0x8b}, {&(0x7f0000000640)=""/122, 0x7a}], 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000700)={@local, @initdev}, &(0x7f0000000740)=0xc) r5 = syz_mount_image$fuse(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x200401, &(0x7f0000000800)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@blksize}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsfloor}, {@obj_role={'obj_role', 0x3d, '\xc9'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x63, 0x51, 0x64, 0x63, 0x61, 0x66, 0x37], 0x2d, [0x32, 0x30, 0x63, 0x38], 0x2d, [0x66, 0x64, 0x39, 0x62], 0x2d, [0x37, 0x35, 0x30, 0x64], 0x2d, [0x38, 0x61, 0x2, 0x66, 0x31, 0x33, 0x61, 0x61]}}}, {@euid_gt={'euid>', 0xee00}}]}}, 0x1, 0x0, &(0x7f0000000940)="0ffcf574cfc5a47a76c70f497656417eb391f76d999557d8fa3c89c356fa7c2dad423e853149183135970858afe6a606c5db4c252e9f84682817e89a79840560e8214d9080cd3916b35e5e2a28035bfc3956fe9c3eb9b19f1b004b8ae8dacc4e7c34a92b861bdc8bbdac946d1aac3ecbbe598a66503fdac3394c0b5d7d384dd7a51a83b3cf7105f28a9350762bc14110b2efcdff46294015a054b50b9aab200cf70ab366c765a91a6d8fd252c3f44fd5a7cac6b34da19582e6f0e19fddeb7e004372efe869") r6 = openat(r5, &(0x7f0000000a40)='./file0\x00', 0x800, 0x20) clock_gettime(0x2, &(0x7f0000000a80)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_clone(0xb0800100, &(0x7f0000000c80)="0be483cf97fba41eb952d9643074a8f51f63d85dfb3fceaf5f595b379cc30084df8e8dd21d894c4dc37108ebda8ad44a793152eedde40de8d2d2ff04f3c16c5b92682abd9c6e11a885474f09799d0bbf77c09cbed05612aade1067c21b8527ab83c6a61f28d3e000e055775d43cdb9b49d106308", 0x74, &(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)="34007e3804ff0b437626c2faedbe296b27187a4228644ddd15f6b61a481f69923db817e5f3bc54c816f666e05b6962e3cb94927802c0684250e227fcff4819ccfd467220600acf6d178f81300a3dfe3a17ffb93459d79f67d28ba7f76b33b3504ef849461d609b3b2e748b60abc91921233e1f9a8fed31dad4fa1fafc11ff01cb2963079600f") newfstatat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = socket$caif_seqpacket(0x25, 0x5, 0x5) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000002240)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002280)='./file0\x00', &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000002400)={0x0, 0x0}) getresuid(&(0x7f0000002440), &(0x7f0000002480), &(0x7f00000024c0)=0x0) statx(r6, &(0x7f0000002500)='./file0\x00', 0x6000, 0x80, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002640)='./file0\x00', &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000002700)={0x8, 0x3, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x2, 0x4}) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000002740)={0x1, 0x5, {0xffffffffffffffff}, {0xee01}, 0x1, 0x9}) sendmmsg$unix(r7, &(0x7f000000da40)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b00)="b02241bb43a89b52f913bc3c07814d2c31a79cf3b8c6254c8e2014fd7c9dd2aec0e1f989fef9ca39e56f0fd344d9e10c3ae70faef7bfa2e910d2a095f4aa090f9775730c0cc19862d3982384b2a886b62ae1ba412a1e124379a74c9573b6edd6ca9632be380593225c8c0ce6c92e243bfe39b0a287a46b2108f9fe408720eedebbaeca484c1fad5c26b2efc1c33dd99002ccd767506985863d153da0ad", 0x9d}, {&(0x7f0000000bc0)="3211641ce3fd3b4a8119bd5f1bace0afe19d9d179a68d37afcc87a31362fe347063fd6e6e494a5bb048524cd7299f7daf13a0d2614028c97203fea66ac576d8d34247426e4e2abdd26c1d8b7296ced8a0f3858f59111c5ef1a217c80", 0x5c}], 0x2, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, r9}}}, @rights={{0x2c, 0x1, 0x1, [r6, r3, r5, r10, r11, 0xffffffffffffffff, r6]}}], 0x50, 0x8101}}, {{&(0x7f0000000f80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001000)="d63d949bdfedc178b74af667526b5c23c68ee9eac75e1e917c7ea657d9e9dcb0d0b7555c2a5f1e0e6584f05ac3df25db5547581934c55c8307fcb552099e1754be16172d2c17b340d5297357041420008d0214f1344db0f8a69d1f0d0ec4ebbf8c3d4e6356fbfcf47edbf05dc7ed3887a64dd15067e8611dc01928156d65a46ea8b209ef0807d3c556937255a7", 0x8d}, {&(0x7f00000010c0)="89b35afd42c798bd10804e76e38d10d7f6399d77149d74", 0x17}, {&(0x7f0000001100)="7e125715dd2179e9fddebb8e850efcf58607927d1afdeaa0bc2df48474cacd6060354588231f0db16ea49fdc4f27ffc1e3758f40f7db", 0x36}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="2eccae232af97128702edd819caa5d682f3a4dee62f8d4b50a80fd0b068eaa9d92ff874c3e0389ecf78b4f35aa148cb0764b66c8d82ea60a5da914543795741ac0ac6c3255c28c2f", 0x48}], 0x5, &(0x7f0000002800)=[@cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x28, 0x1, 0x1, [r3, r5, r3, r6, r5, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r6, r6, 0xffffffffffffffff, r5]}}], 0xf0, 0x40000}}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000002900)="572b3ebb471d09be233c180ed12f7f28dd6da75c0f6c83fdd8c23c864681a4792e8127fd49688c0446c5d136e134a4df524af0a4", 0x34}, {&(0x7f0000002940)="1e3dbd67afb61e4d9472f57d5ca0462650c1563d071447076090cfabe19b06a36931983c32d51577aa3692f4f672f5ba9d0619326f6ff762c820c945ce6d208990", 0x41}, {&(0x7f00000029c0)="fc273c292765660be2f1a4896a568cc6cd82b456800c30010ebc8f997ab8e0aabcf2cef2bcd43bf40945cc72fed41c7d5d65b0a7eca6e75187af31c2b9778a8172cce960c94d21dc767e47f78fa32d99114b14220eab28aa89e82402d4e4ae78fcdc0042611b23e313fdcb76410095ebecdee54fe5c7da7f5a47856aa0b4db54e4018d16886b680f74ec9bd05c7a016f40daf27b6336c4eaa4c749170a14b491bd8b9ad384dc73ad40ce3a78759c517ae4aafd44b2132dfc134a2932d255ff825ff6ec25f3585b9ce86534a1511c1121665f16bf6e51303094d6b3ccd06949db2f84b2387d7d9ea86d", 0xe9}, {&(0x7f0000002ac0)="f0595215e5a9a83a9c281f8725ed0121bfc1d0c81051c21a7b3a961763979a8acb2c26f43f717d622d5b2e305afab431f207df9aadc7aafed4d0959d752f92864b890120dd30117c6f5d07b12816a27e4ad8b2aec4027a838f4d2eaac8c46d865caf87d2fb4c66c6043406218be1469084fc7025dfac15eb526869f16fe0375e4a802bb2b7bd06c883d9afa7bb9442c240bf564ce3a723554840b324ec158031c99c987d17ca86fae190698f34f694a856b181ecac3667f0f9fecac22fb11453455af27c218c1423a0728629b510d7be39f1f9d75d9dd086560885fba4881822454572666317b0683fb30142707dd1efb390553174c7084a179a8feb78b1e071f00d8257ad5f03da16eb24fab7d9d30906b395d95c664d22691e4f1cd18d7a0668859306a945f5a16dc52b3bed5ad9b8c88994d6aa5dbe11d522d98ad0a12005f34845e7aff4ce0a8ea37c76387bd3fbb7e3c534f6f3a7bcb20151fd231ed03f84630a221dbb6543a35992fc17e84efdc3af9883fa37758d2b6b40e812306ab1e611c23da8940295f7836978adfe7ab2162b2be7a586afc39dbfcdb9ed870641975c3cb4b2934f0ffb30913ad31ed739a8531e0a49002a5047026ddf0e7cee244b844a9338c059769c21a854aa53b4e837f3d2ef5922ce753ec4559a27818619becfdde6b643ecb54d3188df4329f3b8d7209a5768f02e38d4a7c3752f0c4d2d69b5ff950c66436b81db8433b3c1c9ea86a49e3fe3483288b7899965c9f25149a6582e7a8359ab0036961a6367fbc04c5b6708f2fd956ae8fac86113a021fc2ad5d9aafb35c01d2d6305536d61846df06e3c24756b612d4c882d4be9c745a9c35509f9abdd9f2d44e4d18977eb253f9001542c1b73e0d6e07e3a70f694b1731a2ae9a3d8f57799a3e9599b9be2c7625cb9c6ab70045292d6668d20dfa83f84c53b184b0918b6021f20a470f5d08f05501a490a00b72c17df5d2ada59ff41a433e82f251957b0c62f854d24f8c1550c7220bbaa2a3f4dababde06121834e2b2ff6962a68aad60eb524eed6c102e6a44c6d8151bc08dd99835f6015674f5c45abc556f9db121eeea0fc83e37f76cc3b4a4deeba2abcc74563c694c9db3e5c7140e457921c0cbf86bd3fa3eb34f75a0b08b3b9f2f8b1753e00108bc92beec7f1d0592cdcd6b0aadfeaa9cfc0bd2917210b0ba2a0b1ec23e0b35c7f3f1cc1e41f65dfdf194d2d46f3c4438ac2703c39b4eb077eae255122bc2966234ee5a05652ba716945bd560688143a5a9755d516d693ca3bfbf4e36b3896fc6c2e46c3c02cc55a5ffae5a65d35d2179e203595b7b3b3ca9014d42fcc072b42072a29314a1cf8ab4246c28bc1d70ba38f026f1424d3f68e381b31f50cd3ef29ac53537282b07f383e2f952be42e3a22e487fc017ae94c92a944a4b105c2388111ca7599834abdb2315c9ce54dde99365883c2993cdfd0310737ae7b24c3f3112361d46735ae80028297eda6b25eaf25e12a048079aaf4c0218697be39a6eaa9750d8dad0fcba6e5a1885e6cf04092e33919bd6e8df37f5262c24355b38e6d3525f713adedf9f7a65bac0188406a98c104b27a48ee82c7c029c30781a06f7f4cdd112f1f514e4f408a56566afbd2bf82c7c985556c5b2860e1e87596bcb517c0c07bc167f4d983f154dbaf50e54e1ed74193045f0aaf23b92c9741abc9220e54ec5cbcb9e043f9046a2ac2ae12a045786a9e98db95331d0dfe040df0893fdeef5a8e6bba3b66769518759a897ea70274b356018fe8b88c0ba2f53fda55118492f4e2727ff9c74cfe1759e6201127b432c821177e99e85c6242e1581fa6bbc46bd3fe23b6b3701e532358cd197797bc47e362ede9b80cc08bbd253be2717d1c8f9712bd42ab99918aea8a216dbceecbd980361074414c3938475d913c06739ff2f8906919a439c8c65c4de46244647af118956ddfe93837d6607668c8cdb4213d9aeff0d6ca2f671f6245cfc7086daf23281218891a6a01f9438317dba8fbf34b4bf3b85d574cb4453dc8991066a76ed7817da4e888ffd5269216c7d331a89a8e165e64e87e608f02c269b4889f9d7589276c98e66ecb4b67b29f8be55a3c0668c7404eef3e4fb47653bb6a1478ad6a3976b0638280df20b2911d5905c215936ea2fa29d1acbe02dc06889b8d00372922b33a882a23bd81dd12eb79b2374c79cb6cf162618b92839eb9056d29e6a26f436e4312489aaa0e466e555dd9fd56b158ab46d570aa27450ebb42512000aba001178314283bf83c3adf9f3b373ff56fdd93f5df93cf0efe6a84e442df0a9fb9e876bb3995e9746ac00dfab9092647759e52fd0ca37e693aca6e5e1d2b277cea12579f706a71beff9895f9f4096df3072420b5bf1844c14fa371a1e0181c3bdf2c5509523640d69f2707812e5c9ec3dc84dea52b92d270a630d293af083dca79af4080a7437b3630b8c5d9fb64f81eda52aa567bfa34ae1bd5ce08fa77b819cede224ca5ab4a56a0a66ec94216c9907e3ab54818586c04c0858e406e4e43d0fce501a7592470d0772f63483464bf0e9c058f6ff4687e1cb1fc07d5999c527cb4d469f5dcf794989081a2b705f659c591b9d1d9fd4dbf014f16cc08eedc80ffdb64bebcc6ce292632e7f3eb2ca631954ea4e389f31def88f64394c5bf5c5ef438380ebb64697c1b61414becf3e98adf0b9dd69a71ed15f7d79e28cb143090d28f690130e6b4b04ef4f7efaa309e98340c712514e22c040349da12b757b0e839cc975a412a00648df9970102ddf68bac3ed7ccbe12f67009aceb64ebf362b119c4f52a4c8504cb0a5706a74b6c6ccc6f08049f41576172d24592fe95a103c2a731f264b2df965436a75f58e5e49373ab551ac1da99fcf7feabee6ef7d9b8ce28780fa85a20a158413b52ac4613afe6de6f0343669fc794ffd3499927d0c3f22497c37228565333c984648b83caf3c858e57c24a8d51b37591ef43d0ccb8ea3c3ff086a355c8e1cdfc3d034250ea0e2246e7e6ed88e737c3bf239709f683ced6ac7f1ef7bb426cb7156093f1e77f698d8bf9529611cfffc0fba2a56b906ea9bea2279d0f8e30c97144e35f376a50197422b3aafe6b180ebf55db03a40ca414a483513f4393d1e14304e29695dfe97a64817609d39e4f90f62f88e7b43e1e8963594b592f6540c6aead9aae62df519ba26b817e226fff37e05c4c564c46683e9a6816f940fbbd920626aeb9cf29f1ef6d9cb62b813db2457a3da28f148fdf0df42d7ba141410ead38715a37f8d44788caaad46a4c3ecf321fe721df64b5e517a508daf83faba0afdd5a8a913949cd8d2dc773219ee128b015f9f427d860b830d972707c8ca541f61d7ff7dcd7f23951f21feb440829db882dd554220a2635271ef096025b7fcff43f36b6581a504273b79605761d3d432438d6d6deed8aaca635dad198b0658b1989c916cd15cbf60a02da3f453de36921dd63b0a4ed24325f172b6d9e776b4eab72eed419b66f70be688ed28ade7571c970a83d2ef28aa5d8bde80161c01a3611470a4446b6f3d6cc791d37b5004e379f43278f275fa6e85fc399fb958d8eba04272fdb47f95530ec7e617a674862bbfec6a4c8da2f4a37748c37115a3d2243fa2513aeb2bdf3f79ad0e2a9468370a80f470728a9f62fff582419fd78329d8b80d8905295952b81ac072651ce0eb5c2ced4378a73ec4986f7014deebf4e97476c1a8aee82862297f2e52a1e8e252c74c1e0dc65e75a727f1cd8721a71e7123e5f9ce3ff19834425a20e0e25cd6b57f91ff273d049d5278f64bd33ce27fc82717fbc7e1f8f1a9cc731358c9c1c26011900ab790ce69acdb6324af360e39b05c4371d1b66f3f4d73355a6ff115b265ea3126a9685de10393d466ae8acca4621e128dfd13c2f1572f43263b63b97728f1af70ce9b0afd7259d956ea1bb46433117a8e42786c791b0bf5d827644fa00a59d7a59023380549e6ad470cfa1befa1944ff02a93b5db918c49cf50240e4f88cb23929adfa62f0dc7c5bf31b3bd9acc43656bce1b58a8948caa2c3a5981fe732d56bdd24e69edcfe691c141d1f92cacc48c9f482f0599ddd38f393b7786ffc00ddc1a9bc1a031165308c2061cc60d034d9ad333b135ebca1fb49c7addd67b0b7445e47bdc364cf695bcbabe90764780b07d67a7c050992a2b5bd2c30546c0925328679b1a6f7efd2cda0a4a50829c268f7377fa355e4d9d41fa8523538690c778ef20d723d711929ff51463c016ddaf553e24821eea02e53adf4dd705fc908894519ffb6af29b9c218290c354eebfdfea8a3c023b7c57bcd2fa06faee6f829ad52f50c95cc73ebc410d788f014bb654f500f682e1ce9efc45cd263435a80336ce3b5a840d72de85ef08285f76300fe2e9df9446df3b156c7a8f6782bd03c27e3637a7e4c09153071a78e3bbf3a25ada237fc9ab86ce0f40cebe77e8e8568f585ca0f6dbd5c20a4d552c42ba511b69240fb02d5586fd8f60900006ec9a84fd0794321b45ce5098ebcf91f63c42510043b371cef9953598f501563f1fcb8151a3bd9dc0d04eff152189ab60a1aefa30350914d1167332c1a86c5b3cbc3342e553629d813e58aaf5758f0f81b6ca61f7b4bd72bd60c8cc1b53fcc0d606b0a6cc5d4154555186ac4c7beb76a27ab975b4c790801981e45cac681f44db5a95274ec16fe531dcc0a519332007a93d09181feeee470117388c14b1f19b6d69a4b3b1a0861bba5ee0c2d222c0bc7bb0f0da0a11595c386e46fed9fdd905438c08ed68f1826aae3f41dcbd6f35c17973371146d3f8c48a204139bc5f0cf2a057fb93bcb4a1c91fecd38c07e5ee15cb71f4c7f813985cdb8a81b1638697248c76b890a43447a24afcfbb60b47365f41ca9a2541307d000036ae66e52595ebdc4fbe30d43daa71441d6382f57f86d2980118f82e26204ce5efe5e8ccf8b0c2d6d838aeca4e0123b092b6b45924a12e514972305622fe45d142644465052a1b7a5f9d356d6c0a91ee999705b2a110a78f667d08378cdaa8fc15a22fd677d7be49a7c18a1807e0082b23f15349c932298f3bed214dde44d7ef672b1e325b3db53b0cb399ef98ce0f1e24ee4a1eb4a715ff3d70726316deaaadd948e3b80cf21e9371ad91629e62f947a350e29afb8069d8987ab8cd438bce6ce9aba99990593cbc57e2c9bc2c03599dd6e77fe5fd5c7571a1a3b1e8a1c5a85bf1bb72885db30449f129f80ec65ee2d0d8fd6037429ebf73f2a6b8839e13ebe92a38011285d69de1fede6ca3877824e4c0c7f17e0f9e79a7cff2191af7ad641cdadb62c3c42e0ebb805798407ac71718cbb1e0261215037d27f391c2c9fe3e7937904614e924b80afbce7f47ea55098b9fa30d2024a71057bcb09d8920edd98b73cf200ac3f74fc75ae7deabe52a9b894b04b7516013386fe8a1f1bf111cc11e9e66c30bb6246ed5c28ec284b06bd61648021093c16abf6bf56ebb4e9d0b7b6fe6e109ae1b758d1cbfd44ccfa46b240c2485956f9373a4895cf76258f32e7c8b2bf00d5aaa306bc46dcfc98a3d38bd9b3d8ec4dcb9980269b57002a89a630460c652fc31e798b9df165555527ecd80074cc48da5490a2ec54adb24095812975127d7c76e0047d24b7ce01fba15f8c21b3af6e5704847401129101530ac5bf24525fa74408af24ec1a363aecdccc0cd50f066e358a1e9e980a0585fbbe8d792919a7d1576cd36917a35c897c61a6c392b74edab9d4b487672a5210fbfb4ea55302a068822c610836005fd94db239221e6eef6c", 0x1000}, {&(0x7f0000003ac0)="69f40d04315f4dc22108b7f33d1a00232fa1098876c3fc044c", 0x19}, {&(0x7f0000003b00)="2bfe7ace485a85802d4e572f64d188a8c7725bdecd51f093adc17593eea0506fc93aabec304f399b80bc99a5d6739ae545c0d3741bd4c5ad70f7a48fb49a07c8f49d69cd3cfa7a19f0d97cf052814c64bc1100a6", 0x54}], 0x6, &(0x7f0000004180)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r2, r6, r5, r3, r6]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}], 0xe8, 0x800}}, {{&(0x7f0000004280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004600)=[{&(0x7f0000004300)="1b78666cd035baae0fe19000df076c10351805a8a05053252e6c622a6a1ab9adf1e3f5800ca23dffdbaeba3e4faa0d436d1ea5ad7da8da8e2c11cac0bf838b6670dbef988c5b4d767eb7bb284a3a069a7f0fa8f5e23dc0b2f2194193060e7d3367229235", 0x64}, {&(0x7f0000004380)="54013dacdbf3c84747780ca552369620aa260439cd3f21ad8efdab423362d792da959e97ba3f1a88ab756f519f5eedb477c05b56bca7b252c63c84a3890d0dd399a0713570361869867b7c67846229098907480fdaa55386440f62b141b244f3cbe7e268573a948e4b67438e439bd7c0e8f1af016f00a19cb8b4afe3e0a194bb24a10130b60e352b380348216ed19179e4fd32ca17d6e8d1e1d0c4fd1e61762540624dc8b9c2583f4b1b86bcebd7d2f7482b9087fff98264178de6f93d6f3989f4a8b31f0ae25677a4c8e56e184d11d8a48b26ab36c1c8ee18ca900866c5824d69f2b29d0965f7daf08d7e", 0xeb}, {&(0x7f0000004480)="dd6314367758bc3e05aa1568d5e40881d9781c59b945b2a32d8fff7b2ea77a8332a419b675e415da5173074dc13318f564bf1b36551d6847894915fff9453eff200cce82c1649b9ee810cfcaef62c33af43641e04f3f6ab251e1689a3eb5ee9e6b6fd4f42063dd74d9ed124ce2d2ad6356d67cfc858f1a1abfa53cde7ba7bc1b110ed495bed766e5", 0x88}, {&(0x7f0000004540)="4adbfb9eb5a321a020c6b1b60b419e1219df52cccde0d76b51171ee93acb4e9f2fe60ccb0361e8c2431c3ffb35", 0x2d}, {&(0x7f0000004580)="59bfc03ea3be65dffc1cdbd56983e0b96b3d8a120634dcd4e339ebabe2ecb146851b2f900a39d98a40a0b2acb9c706b0b6a9ee9ce73bbc3b39fe13b15fa79a0857aff84ce44bd1fa55ed8964c9475bf569f3ea", 0x53}], 0x5, &(0x7f0000004840)=[@rights={{0x34, 0x1, 0x1, [r0, r5, r1, r0, r1, r2, r1, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [r1, r6]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, r1, r0]}}, @rights={{0x24, 0x1, 0x1, [r6, 0xffffffffffffffff, r5, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, r1, r3, r6]}}], 0x130, 0x40000}}, {{&(0x7f0000004980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000004a00)="b6d5a719c36f26520a2a6d03a037529f9e995985dc4d9c2c5eae2aa17c6d66d7c817ff913def2eff5fb54fc2abfa323ce135ab4ac6a2184cab07cc49756e974064fc2eefb69eadef43cec5cb8ae7759a6d10a4f4f8fd475dc71c83916a1f0a99cb599033251923f89736c90b673d93359ab42ceb91be464836cab1fc31af92aa5a928c30842ff005a31c20172263d6aeff4bc45683e12b8c94711828e8885024f310d09dc2feb40638e5f78e926ef1ee29a95d6c6e48bff5b9b626976c0a470c557f8e0df5b74d54ef713782319ebcba24061c96b7580e697a3e8005098ed3282fd3c330bc2c7122de475b3a7058957a16bdd4cb5fe9", 0xf6}, {&(0x7f0000004b00)="d33c1c21a1bcc750a1e34e89137226e7c4b9f6226be79a2a77bd3bf9e8629503ccfa61efcd37697c8a6c493ecd3c2dfef8fbc12c02ab50869ebd81221d62144460b1f7eb071c1682", 0x48}, {&(0x7f0000004b80)="9451ce8ddea9918bba871093970ab84f55d590e2f88752c6c80c1dc769a9d8f297e01df6675cca6f36de4b83b04cc7b571", 0x31}, {&(0x7f0000004bc0)="5323a0e4ee63b4168e031234c6287aafa8106b2b740e361aff5b36defba1c55b74982a0b072cb5cc934e07e2223aec2cff1707a275aaedc43a5d079fe5bff7352c22ac145b15539ad9762702d365b1bcc6de7d8413f87b9ecd37648e17ee9066131dd2573c9fa3d1a4be36a50283addcc33d470c3852ab7975ecdb56a7385251e59005e6f273d55bebd0e5966e251106d106b406c37b4a828e57e6e4f2ef", 0x9e}], 0x4, &(0x7f000000d980)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0xc0, 0x4}}], 0x5, 0x805) 9.884833058s ago: executing program 7 (id=4762): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000019200)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001}) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) r5 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000019240)=ANY=[@ANYRESHEX=r5, @ANYRES32=0x0, @ANYBLOB="150100000000000030001280090001b9275c662ad88900766c616e00000000200002980010000000000000020000"], 0x58}, 0x1, 0x0, 0x0, 0x2008801}, 0x40000) syz_usb_control_io$hid(r6, 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r8, 0xc1205531, &(0x7f0000001a40)={0x1, 0x6, 0x0, 0x8004, '\x00', '\x00', '\x00', 0x0, 0x5d05, 0x10000004, 0x1, "38d49788ead5f71fd65acf7132de72ec"}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) futex(&(0x7f0000004000)=0x1400005, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb301fffd) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000192c0)='coredump_filter\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 9.721522773s ago: executing program 4 (id=4763): syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000011c0)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0x2}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c000580080001008863"], 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x80000}) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r9, 0xc02c564a, &(0x7f0000000000)={0x100, 0x31384142, 0x0, @stepwise={0x0, 0x400, 0x0, 0xc, 0xfffffffc}}) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000000900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r10, 0x89e1, 0x0) 9.38017136s ago: executing program 3 (id=4765): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101050000142413099f33760bf14377323063f9c8a44d113905241510000905810300020800040904010000020d00000904010102020d0000090586020016e1ad0009050369a0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x80, 0x1c, {0x2, 0x2270, 0x1000, 0x9, 0x6, 0x8000, 0xf7fd, 0xed, 0x100, 0xfffc, 0x5, 0xfe}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) memfd_secret(0x80000) syz_usb_control_io(r0, 0x0, 0x0) 6.857657582s ago: executing program 6 (id=4770): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20801, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc9a1, 0x20, 0x100007, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf365f16a9d2abdb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x10, 0x8000, 0x0, 0xdfc8, {{0x26, 0x4, 0x0, 0x2a, 0x98, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast2, @empty, {[@generic={0x89, 0x2}, @timestamp_addr={0x44, 0x24, 0xbc, 0x1, 0x0, [{@remote, 0x1adcc763}, {@multicast1, 0x2}, {@multicast1, 0x7}, {@private=0xa010101, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0xbc, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x37}, 0xd1}, {@rand_addr=0x64010102, 0x10000}, {@private=0xa010100, 0x40}, {@rand_addr=0x64010102}]}, @generic={0x7, 0x8, "9209cad86aad"}, @lsrr={0x83, 0x27, 0xfd, [@remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback, @remote, @local, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}]}, @timestamp={0x44, 0x8, 0x5f, 0x0, 0x3, [0xb3]}]}}}}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000bc00ffdbdf250100000004000180100002800c0001"], 0x28}}, 0x0) r5 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) io_setup(0x501, &(0x7f0000000100)) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000000180)={0x3, 0x6}) 6.431999626s ago: executing program 2 (id=4771): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000007c0)={{r0}, r2, 0x2, @inherit={0x88, &(0x7f0000000080)={0x0, 0x8, 0x4, 0x7b, {0x20, 0x8000, 0x38e9400, 0x8000000000000001}, [0x6, 0x200, 0x94f, 0x3, 0x3, 0x7, 0x800, 0x7]}}, @devid=r3}) 6.374591951s ago: executing program 6 (id=4772): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 66) 6.371952748s ago: executing program 4 (id=4773): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000100), 0x80000000006, 0x933142) (async) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000340)={0x0, 0x5, 0x42, {0x42, 0x31, "7ef84712f6775de3f293655e67f1c6162c05a0c067286b4658ef27df6e14d55a32735f00f289997a01e5f2f6249644bb21c7630e59e64f785fb72d69cc823fdb"}}, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000800)={0x60, 0xc, 0xa3, "fe974766aa759722cef0f42fff9bc6d7120659823f4fa8fc3c6cc3cc12dfd234449f6d03b1a4e38558e4f38b6fccae64b657ade0beb8ac559cafc4156258fe29048ffdef88599eff63afe1cc19efd2d956284f816441562927b6db6d42937371fa98433aa296a1b9ccab6b15022a878bb7d4103ad568858d8887485dad83488b57dbe3e4eb88f701a0811f73e092dcdad562e5bab572981d5f49a83ca8e8789d6113f3"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000000480)={0x20, 0x0, 0x54, {0x52, "b4f4305575193b2eaa3010c9bdac8fca088961e5cf6da35107988e17482c5efbec8a5ef7003065c437ccfb73dba73ac5efe442635f30991f4fae4bfd366061b785c92a4fd335f34192b64412289cca6b5a0c"}}, &(0x7f0000000400)={0x20, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x5}}) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x18de, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r4, &(0x7f0000000440)=[{0x7, 0x75, 0xa8, 0x0, @tick=0x9, {0xfd}, {0x7}, @quote={{0x9, 0x9}, 0x200}}], 0x1c) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x444380, 0x0) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) (async) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = dup2(r6, r7) (async) writev(r3, &(0x7f0000000180), 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x3ff) (async) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff000151a32fed7e8a2fca000000000000eeffff0064010101006855000000000000000000000000000107144e230005000000003a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x19e, &(0x7f0000000a00)=ANY=[@ANYBLOB="741020c6e47dbbbbbbbbbbbb08004e0c01900066000001219078e0000001e0000001444cea63ac1414aa00010000e000000200000001ac1414aa000000090000000000000006ac1e010100000008ac1414bb000000040000000000000007ac220101000009320a01010000000005865affffffff0212a1b1048469eb6f1daaebac2e2f4835ae060ffe90294d46836447adf325241e050357060d9d5d5cd69a70d015a22c6c060c59908d70de94ff0f3cee0502020920b64f14ad1de30203c502050476d6000e64b4906c4594e0bcf28b92f8440c78d17f00000100000040070b2ee000000100000000940c3452caf43ef24a5ef198004e244e2204e1907844c8e9ae008e048f25f6eff822eeb9dea157bdd5f87b70c1438ef662f06d96c99a439fcd0e5e7adebfe7a698919378fa8eb52af8ca4d1b967a4c1e26147c825bf8fb2891009e9750774e9974fbb65b1f4a76d88b03044a4b8bedb565bbdba991c696d14d1688f6eb424b64f2c47b03a2257ad40c62cc50d79558149b567a7c84b16b41889fb623e2793f0a0848e3fbf0b64df4b4d30018c19800114f32b57071f1ea4c9a5398ae755d05a4f62dbd6499d653da84b65c31b0579f536a7923cdc1e955e462b12a1ebac8b7e5e7f4fba2a680ae4e887b418a04237fe3d97f2154448a842e40050d086c3caf103fc147e41a4dbeaf5cacc9fd8a0dbde95bbf63a847fd4d49158272a58d44cb743ed7077b4c4c179b17b375ee4d547b3e8c2769bd56e098856266c77520e6028b52841ceb3cfd14c63d8a968f6b3501f4a4c200400f23"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="f800000018000100feffffff0001000000000000000000000000fffffffffffffc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1c142500000000000000000000000000000000000000009201000000000000a39b0000000000004d2ce6ac028f980667cef503000100000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffff7f01000000000000d3093b5ba4001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002000100030000000000000008001e005be10000a2b80359bf36a66ac98220ac59ef8d47f72ade8d321a8687e225561e2aea811ad263fadcb3"], 0xf8}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r10, @ANYRES32=r10], 0x44}}, 0x2000800) (async) socket$key(0xf, 0x3, 0x2) 6.19240343s ago: executing program 3 (id=4774): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x3fd, 0x0, 0x0, 0x100007f, 0x0, 0x8}, {}, 0x0, 0x6e6bb5, 0x0, 0x1}}, 0xb8}}, 0x80) 6.099880249s ago: executing program 2 (id=4775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="010000000500000000003900000008000300", @ANYRES32=r2, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) 5.843995636s ago: executing program 6 (id=4776): syz_usb_connect(0x2, 0x440, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYBLOB="b2"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x2040400) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3, r2}, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 5.703878402s ago: executing program 7 (id=4777): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4080) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x8907, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000, 0xf000000}) 5.531079036s ago: executing program 2 (id=4778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc, 0x7, {0x600}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xffffff10, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 5.53055127s ago: executing program 3 (id=4779): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1, 0x5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0xffe0, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc010) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x51, 0x66, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x400000, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000140)="b3d396064bd20a17988e265504495bebd37679373837292658fd0d6c5857e280e448b3cde95f1f7a", 0x28}, {&(0x7f0000001880)="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", 0x1000}], 0x2) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) 5.248792634s ago: executing program 2 (id=4780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(0x0, 0x0, 0x230040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000e4f40)={0x2, [], 0x80, "91605e962f046c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000e7fc0)={0x1, [], 0x0, "f55bd596e372ec"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000e9fc0)={0x4, [], 0x2c, "a9d6884da746dc"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000ec080)={0x0, 0x0, "176887a34f18604cc806bb5a5035c199ca429d22d8711d104be6f0707bbb1fe72cd40373c98df0351e26b7f02ee008ddfc8b05559436277b24bed4bcdccd371ab31d033cd5bcd64390c7bf3600eef5639c3dfc3d30cf5b3524e4d082dfdb68fed59cdd5cff2527d0fea08f580b2dcdaeccbb822f8ef681ff01fa929b00a1196e9d998522d8581ffc134c69e8004222cd3252033ca434085d310d755246ab13cf6008a0854815cef7ea542c03116ecd8a00046a1be2f6d9053e20fe804c02fc0c79d1428d38481d062e1554c5868f72553d25682495f2affb76ff837d7059da7f7bcdcf4b1ab51d7992bbfe6eb531ab8d5f11533e1fcd1f366c5e04951c956d5a", "f5e63bcfa12f5f44d9235bf1b0ba15e6ec6c690e001133a81d0d5fc0702b3c3fd290661d0e6287d1a54ec22d8f52759d663c678d2a33ddfb99d54d0a527fa283f4666ebd95f84b52500009ef675611a9fbf1c5b069d90335cc9c136c97c2ae105a9b4e712fce486d6fb03075f47d49f3956c855ed3bb70cf4282dfdf54884e6116808aa402f26e1f46fab7621759383f95d5ae1cfd5bb1202eed692a5bc81615772c261362b08ae2de4c5fd68cc74f4f09300d4b07c23c1b870256c00314fcbac06896830425f3b3d9baf934936a87e9a411740cbccc98272caa4effbbd79553d7ff622c9b7e820922722876045dd42d790defb369419a9880ebd923d42907ea0bb665c0601facde99ab4cdb87806d9ee0336ebb48cbe573a42fc7984f90bf033f80ff0c636816ec5502443ec49b140d2f8401e6c2afbc07d94bdd952d3bb41975c0ceaccc0b187b52cebf109034255ef004d3222729bde9252bf52607d0deb4f91351117970945e86015eac36d960d0e9ccb85fbd16bfb9e82bcf17a1c980bdbc235dbb7df97360fe238abddce08da4f54ca805c9c0c72bfb1431d115345c751452acf1adc41be7201ce2ccc799c5534647885b3746800dc2b9b55eab29a4ab4f2e57dd49a7519426b4cf058cbe972c49b7e99684feb78eb47bd467d12cefaac1fd31711f093581276fcd1b320edbd2f70b07c05ea9f3d54fce85f7d70dfe59768edbe69dbd6d9da9efb86323d99322cc02906bfe811e2c2b9ba7585559c3fbd7285174e95d1faaf934a21cd675f8e398322ffa8362eb935dafdcc4ba926a6027e5a17a797dad2bbc0bf66af53f8ff23942df04192a10ad98e73c1abbcf741a442bd47552866d960d811ca5e11cb6ca2163215223ac19b16be5c1ced7721932604fe9c7c144e76408ab585f6a1766e7f924b087ee5af40c364b2ddd3c7f64810b640a3dfd1413182c0503992727de5766da0215cab0fae78433887a8f75aa1fee94b9b72980b4f0bdf22fa9dbf51c3a18d48d2a99b97794170694248ddb20adadd35ceb88f31dfe886cddecc0096c857f6f192ecdd129636e919928e4482352ff1d1f6a70e98cd221afa412bf265d078a83d9e3a9dad8f5a000b0bc782093538a62859490f135f8e724cf3ac3dc42670c4b350d4082844c5547345ef36cc8d0e2fb5fcb78066c0e068525e1228ec0e36d17980abc13162e16952ecb93fc2a9ba99f023f24c509a959e4c3c39a296e544eb2e61d4137fa12c6d41a6c36a020f64b206f85ba3a986fb3b024866aec7f49b76236ab777d4bc1afe641869b1e30dba7c8d07d9306d647dbf55cbd1262dd5486de863166bbfd3843212c0b6906dbd76bb8ec7b865e0f81e8e2e0be54f04593eba7f376cde93a9d1b8d0ad1735bb3d95e758f0a240c1a75b7a2c370051a7f16fa55d925ac4f1e1912ba3df3211d7f81d72c61c6f3e8b94980515d60c1a99b699a877957b1f1f74e8cd60d503b64d2ac36e161238bfa6effa96f053c7a0f4cdd0a74f90a934880ea73bb8ca067b28704643ebc55167503acbb2263666cce3ec0dbeabbbe746cdbbcdd8b7cfdee20e8367249fe36c829b1bf1dcff952a4271ef69d3a0a01c142f13444003d181d5d24457da026d07a61e2f34669f0f0e12f84b9297b1af3e8a6cef51e9075de19d54da72e59ddaf2924a908cca65036c62b116a1e86cceaa7a3b46e2f170f188d867c217f5b54d9b8d4510ab960c70d2820d1fd3a8d0b10289f107a67aab1b8316d22a5e3d56fb5bbb54d434874ed75e8da42adfd0efd7e65181950c1e47f00f06a9c8a7a0492d63ac0674a1e1653651aff75e55bd9422c77eed03d7d08cbedd66bc98afe533fa2d865e1b441bb80e845589eea81c30cfadc028f85053e9493189bbdf9b0666081fdb147095651a84caad43707747e6c892640d8713d554a47ae90213edefb552ba7013efd6c819e3c244b2872ba4c2ca710a01e51c0cd8b7272377aa95922ce9bf3f63ad959133b00f560c53191b3ae6652ffad373b7ac7e45daaff67b4894693f954b5d47b4371976cd9b9babec76499c23f52c09dfb71e432f0c6bb0921c6f0afb14d0d53f2dbaa41fcdbcbd465789511b2e618dfd3cdfdae48171c1daa12c64ac10fc32a8b311ba4b1b6da081981e6330677fd298afb889318b6ea75ce8b91843c5ff5461da29162cdbe23690036f99137f8ab6c4a21bd6bf6d7e09e4855c88b866fb9205dc720dd1bffb532f2c90c8c1203fd424c8cf444f931fc6011ce3007f7784627c9ae99ae97b1b74f898b0cd11cca5ac39345c96929550f33d6455f72df8959c29bb60cf04afabbc55752061d9e50cad479d1daa0f6f75e541b6fb7a17fa0c8c1c60a0682be14851d522d62e474e0ae95e5b4a2b27d64296f4d08c5dc55ac69599ee134b29b6adb517047bbffd4109260f8415fb8550f2b04bcfd2cc373ff708f974d150b51e763f514238733a1e6910e900af8086642596bfa35f2f6f3a62d81cfc4ae2c32014097389dfa6c18b72d549f694af0f258e533e5c9ab0bdc0e43a47ac0c1b3a583d47041b8333539aa8e0c56363018dfef3e7ebedaefcde342b20c335849dd3cf3126ea9597d689b01d663d115f98d00c1e28ba1a784c2da564c712fc174ce87a62f0b5e8f34492147392ba7ca9e044a222bbce160c5cd3967e87017f85fc8de0fb1e97502bc4e421d07628e888c77bad4f80e04fa2a6cfe539185556217323fe1792260164cba3105a606555922a13fb8c5eb7ed42a132b7d36ff3d325f76ea84d9a7dcd72f05b4c7e9bea4e58fc4d4d948d6a69cefbc3ed27d14fe3465abe0c7c97830630ecde1c4c03e1b09bf4d86fb4186c4b0167d6e7a3fa549900058cd97d30c1a6188f2a42be2a848b421582c99b6c9decc964f22ec3270c537d623a9ac17ac977e8bea5d9cac3e165ff3b27a608cf6363268e58247fd81e800772df3aac3a4f753eba2b4fc2186d9310692f55911bd806fa33e775f2b6294ecbaaa44dac9fc0c88da8b39d87fd66db8558d84711bfd97ef1470a9168e57ce392c6cc26e8c2cf3dbf2fdc6e5d33392d46456a0bfadfa3e3e8d43bdfb3d6429ae66a8766f07ead811863d6ffc96de1249a710643b418af1911d4332782d6fb5ef08ba53f6074f778aa547de8541ca44069c88ccf9b8afec3c490e8f0e8a8575b0d6dabe8f9fa028adb98e0c08a6f6e5d8d45ca33f1ce5e8e8058e6daa868648228b7d620b1893b326958a5e1c0f255aeb427dbdf6072115df3dde9e0d8480897d66bdc307eb261199cb6b60b54d2ab225ef2b33d5b1d3aac442ffeacd2c448b2c6a4499de55a119bd6509cb14558d8ce008de6f4d16bdd9e94adf48e27df14b885e389436f04a5a7bdcbcf6a4b3caccdeddad03290dafc5b793b69a7d7cf9962e6cfb1059e25db6ca244d1b3722e48dff510b5c00ed4a06e2a9d64078f1078bdcb2a14ab22d5753bca72944945f0e7a233c666959faa8915dd46093bb6ec69f86172fb79346a01925da3e8b6ba3d53a54f353dd7eb3e9af3d58dfaec7f658c2a4cf7b987de22eb2a98a8b2b9670180d012790afb79ea49a531ab7e29e8efb59fd0a133d1c627cfb34a2369413b1dbe06bc3cb3628f79668de3ac008941c4d57b9622d02979ee4f944e4f2a588cc286619413a970cde91c20055093dddc94b5f17d0d0f3fd4ee137b89124c4aa0b484d4b79f140da641951303bd4840bba9e1e8c39d5764359301f62dcee0a2a8bc6a56de08ad24a00ce16f1cbffa928157801a30287591ad6a52e51a2f15346bc925889e1e65b9d50188f1eafa69519b90ae5052c45b61fa4e49ef2855dd262ffca38926ea7fa5b6faec7f6fb1f886ff6f3fb35cd8040335607306be90e381292db7ef5149ca1d291de8f2d9683541ac3720e66c1b6c16aaaa6c5a23b1ec482fa892d27fb703a4577216c40ed478768fb99c674a99e00b6a177b6219189b3787ca045010d6f4f7fa6530e1878d4afc18366cbe82516c13e776e210d251846495e6054f4422e27bb468b2042537400300d41d93df300ca37ac073f7b8e6212e4d4af24337374100fe236ca3d47ffce4a31546ad9c9dcfc586e1840e6ba9af09430148a610af7cc7d646e0f5c407afc8fab14430c2aa492bd711168e15d2bb4f653c79ef1cf355d0bee806970518dbe7f8b48bfc3ce7bc4b13e69d6f5287bbbeaa745ebede49b92cddd7ecee9d2ce404f544a5297ca02ddeba5ca2aa3b2f1c43b3ac2d2d8e2d1aa4ee21cbec422838bb50c280aebf024f6832f47a8b47bb2bb77fe51715f721db7aeb4b1896e787b96b58a8666dfc84523689dcadd146931dbe67776bd02da13f8fa5e33d48a812445223e1c275c30c402961fc079e95704405396bdbabe3b0395752727ac7aedd4df3da22105236fdaab0ae9f935aace7f0a70481b4201cda2b769db475a59337000a0e02dac2f47b090728cdd6b6c74db137f2612bf2ea5ff04f4efd6f67aa7c32e0de188ceec8e0c8e6b615eb3f44ee602c8b8112e8547c2b1704f3411beeb9a087e42b2df6fc2c232abec2539fb941537cac7d99338b40e5629ca909912c9ac867588c5d125c35adeecfdfce1aad7dcf8cb15fab733219c4dddbabcbcf5a35c19d9b43c65d4603cec80f4116e61b575ca484865b2ebd14bc2469cbf66585b10cb7482e3569da5293c5b9353a40ecc4ade9680c318d487c3a1921764c1d833f1a1d2da72ac8b831b474f018f9ebd98ba37d7fdbd113bf9d1979474afed0f6cac1e03c5a4247c75fd6d401bedc9e798b157dac7cf480093aa20232b563922f255e8060a0f8feca0ce5859e09268ece3e7e97d41252eb99e973037c59bf6e441239c97e6f1fbe545673d7b6211e41c92ee0d8d6d357d101ab5c7d5f782a006684e161009914f228512f95e778eafa020fd7fdd2d66e552e3d2d214e1b76280fb6360691f32b35c14b167c4410b7754acba40b78a1226db1c90d8435a0d582124d46ba4e05806e2d8b359beef239d192058526ca1522e340abd47da005d81bfee74f455900729816696fd01af73b48ed316fb73ba6ed13b3937f61ada613d76dc0c9a32e1d25ae3d765af465d410874c9f72ddc94ac4b8f5c2e69296cc054c141246f440007a80160ef55c7dc1d6369c228241d55370497992cac22f2a45b42632f67e1602dae1145b612bded096aa254ce3b5f7cc712690099c8b78cb51cea102909289968825f7ea12d4ff73e844ee882763355a1b037e8dadc65a20f8bd1f1722cafaf7359eceac6bfb1ce2c2d6e8673bf5f2b4c921cc53d7bd5a5d2e7e311219e5f0ad9952d0374445ff24d24d65b0ee2867bdf60585c19a5579b38851f18dbc7224058ffb5e8abfb3aa10e02a708279c24b60fdd4ea58923a9f201e189b429d6941e81c1f0f73c683400"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000200)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0600330080"], 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) 5.097085748s ago: executing program 4 (id=4781): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004011}, 0x40010) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800a10000000a0001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000d000000000005000e"], 0x7c}}, 0x0) 4.917491061s ago: executing program 2 (id=4782): ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @random="926c81c53d8c"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000780)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getgroups(0x27, &(0x7f0000002540)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) chdir(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0xb) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x7f}) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in=@local, 0x4e20, 0x56, 0x2, 0x2, 0x2, 0x0, 0x0, 0x32}, {0x7ff, 0x0, 0x1000000001, 0x3, 0xfffffffffffffff6, 0x2000000, 0x10000}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x4d3, 0x2b}, 0x0, @in=@rand_addr=0x64010100, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000001640)=0x3, 0x4) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000280)={0x20, 0x18, 0x2, "36bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x7, 0xfffffffd}]}, 0x10) 4.515666342s ago: executing program 4 (id=4783): syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000011c0)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0x2}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c000580080001008863"], 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x80000}) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r9, 0xc02c564a, &(0x7f0000000000)={0x100, 0x31384142, 0x0, @stepwise={0x0, 0x400, 0x0, 0xc, 0xfffffffc}}) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000000900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r10, 0x89e1, 0x0) 3.628253586s ago: executing program 6 (id=4784): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) write$binfmt_script(r2, &(0x7f0000000380)={'#! ', './file0', [{0x20, '\t\t'}, {}]}, 0xf) pipe(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffc}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000000000000000000000000e9000000"], 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}, {0x4, 0x6e09, 0x24, &(0x7f0000000240)="043cb60a56e27a4c68b366d3e58181c2c34b74bee631798684f5a56d6532ffca5d36143f"}], 0x2}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="1e4b9aacaad37a75d48727454626b9e724202c0ae46a37e3bc9a808e6518bff38863e1b00cafb3ab76d2650e47c0a8726e93d37e771e6a46d4135d00878a32f8a5332c39cdab4872be5678081d48265a3dfdf2e58f111b0dfa283c8e9297b62bd075aac0ba9ccbfc5069bbc2b522800c16563d16b9c6cf5cc1ea9f5f779fef02514cc2fd8910dc1b61b09c7d00216f3d648607e47f8f5d6f51504ba9f39256bb102d98121a9a818ebb168b8d25ab72533108a2edea415002eaf9ff56d553453917f9aa27eef982b6141953e0727d0cc4e907e9db915d8bb7e64a2a6b5ac04ac061cf0ff584edfa4dd81bf02a1d3a04f8c155f3bb46be382dacb1471e82246a7d"], 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xf9}, &(0x7f0000000600)={0x40, 0xb, 0x2, "f116"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7bb999f75685ce51}}, &(0x7f0000000740)={0x40, 0x19, 0x2, "c698"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x5}, 0x0, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x8d}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x8}}) syz_usb_connect$cdc_ecm(0x2, 0xb8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x1, 0xb, 0x9, 0xff, 0x7}, 0x41, &(0x7f0000000100)={0x5, 0xf, 0x41, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x8, 0x9, 0xf02f}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x7, 0x10}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "cba882655fa2693a83efc8310e594411"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "4689ff451437e45f43d539f404429e13"}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41f}}]}) sched_getattr(0x0, &(0x7f00000007c0)={0x38}, 0x38, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff00000000000000000200"], 0xd8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r4], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1400000000000000290000000800000005000000000000002400000000000000290000003200000000000000000000000000ffffffffffff", @ANYRES32=0x0, @ANYBLOB="0600000000000000eb4ccf4e74b1e5d7b2caba5ce8fd9d57c7a5cb1b2e2ca7113723ddb2aff3f747a0b7a6429e4591b9f0b9f5e6bd1d"], 0x40}, 0x20044084) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_open_dev$vim2m(&(0x7f0000000140), 0xfffffffffffffffc, 0x2) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000380)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f0000000540)=@userptr={0x1, 0x0, 0x4, 0x4831, 0x9, {r10, r11/1000+60000}, {0x5, 0x0, 0x7, 0x5, 0x4, 0x2, "b37313a3"}, 0xb, 0x2, {&(0x7f0000000340)}, 0x3, 0x0, r12}) socket$nl_rdma(0x10, 0x3, 0x14) mknod(&(0x7f00000005c0)='./file0\x00', 0x8000, 0x8) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ff010000000000000000000000000001000000000000000000000000000000004e2200004e21e14f0a00006000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000104000000000010fcffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff770000000000000003020000000000000000000000000000ff7f00000000000102000000b16b6e0001"], 0xc4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, {&(0x7f00000000c0)=""/107, 0x6b}, &(0x7f0000000040), 0x4}, 0xa0) 2.595878551s ago: executing program 3 (id=4785): r0 = fsopen(0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(0x0) sendmsg$can_bcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x41) 1.671097177s ago: executing program 3 (id=4786): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d52101b080d29428f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae11a973735b36d5b1b63e91c00305d9be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c580263093ca9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6fa94fc488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c766000a5e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1386abdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060fb30e900caab415db6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3c901cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ffffff7f000000007f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca405d8c5f64fdb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb40800000077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e5e2c664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53dc10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fa6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c02b5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbb25c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d060000008926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, 0x2, 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, 0x2, 0x7}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xc8, 0x29, 0x4, {0x4, 0x15, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x38, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x400, 0xb]}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x98, 0x29, 0x36, {0x5e, 0xf, '\x00', [@generic={0xff, 0x40, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f"}, @pad1, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x4, 0x966, 0xfffffffffffffff7]}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3}}]}}}, @rthdr={{0x18}}], 0x1c0}}], 0x1, 0x810) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x1104000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) munmap(&(0x7f0000014000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000014000/0x4000)=nil, 0x4000) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000280)={0xa, 0x0, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe52f, 0x1}, 0x20) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000000240)=[r7, r7], 0x2, r5, r6, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x469, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 1.655471752s ago: executing program 2 (id=4787): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffff7fe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f000000a280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0xfffffffffffffff5, r6, {0x7, 0x1f, 0x3fffe, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x8005}}, 0x50) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) readv(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070001400000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) 1.190316688s ago: executing program 7 (id=4788): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100003050000a1000000000000100000", @ANYRES32=0x0, @ANYBLOB="01fe0000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1], 0x44}}, 0x0) 1.007700688s ago: executing program 3 (id=4789): ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x8004b709, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1, 0x0, 0xfff0}], 0x1, 0x0) 929.453763ms ago: executing program 4 (id=4790): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000010800000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="00000000b0c4000014001680100001800c000400ffffff7f880000000a000100aaaa"], 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 885.80267ms ago: executing program 6 (id=4791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x5c}, 0x1, 0xf5ff}, 0x0) 498.930413ms ago: executing program 7 (id=4792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(0x0, 0x0, 0x230040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000e4f40)={0x2, [], 0x80, "91605e962f046c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000e7fc0)={0x1, [], 0x0, "f55bd596e372ec"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000e9fc0)={0x4, [], 0x2c, "a9d6884da746dc"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000ec080)={0x0, 0x0, "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", "f5e63bcfa12f5f44d9235bf1b0ba15e6ec6c690e001133a81d0d5fc0702b3c3fd290661d0e6287d1a54ec22d8f52759d663c678d2a33ddfb99d54d0a527fa283f4666ebd95f84b52500009ef675611a9fbf1c5b069d90335cc9c136c97c2ae105a9b4e712fce486d6fb03075f47d49f3956c855ed3bb70cf4282dfdf54884e6116808aa402f26e1f46fab7621759383f95d5ae1cfd5bb1202eed692a5bc81615772c261362b08ae2de4c5fd68cc74f4f09300d4b07c23c1b870256c00314fcbac06896830425f3b3d9baf934936a87e9a411740cbccc98272caa4effbbd79553d7ff622c9b7e820922722876045dd42d790defb369419a9880ebd923d42907ea0bb665c0601facde99ab4cdb87806d9ee0336ebb48cbe573a42fc7984f90bf033f80ff0c636816ec5502443ec49b140d2f8401e6c2afbc07d94bdd952d3bb41975c0ceaccc0b187b52cebf109034255ef004d3222729bde9252bf52607d0deb4f91351117970945e86015eac36d960d0e9ccb85fbd16bfb9e82bcf17a1c980bdbc235dbb7df97360fe238abddce08da4f54ca805c9c0c72bfb1431d115345c751452acf1adc41be7201ce2ccc799c5534647885b3746800dc2b9b55eab29a4ab4f2e57dd49a7519426b4cf058cbe972c49b7e99684feb78eb47bd467d12cefaac1fd31711f093581276fcd1b320edbd2f70b07c05ea9f3d54fce85f7d70dfe59768edbe69dbd6d9da9efb86323d99322cc02906bfe811e2c2b9ba7585559c3fbd7285174e95d1faaf934a21cd675f8e398322ffa8362eb935dafdcc4ba926a6027e5a17a797dad2bbc0bf66af53f8ff23942df04192a10ad98e73c1abbcf741a442bd47552866d960d811ca5e11cb6ca2163215223ac19b16be5c1ced7721932604fe9c7c144e76408ab585f6a1766e7f924b087ee5af40c364b2ddd3c7f64810b640a3dfd1413182c0503992727de5766da0215cab0fae78433887a8f75aa1fee94b9b72980b4f0bdf22fa9dbf51c3a18d48d2a99b97794170694248ddb20adadd35ceb88f31dfe886cddecc0096c857f6f192ecdd129636e919928e4482352ff1d1f6a70e98cd221afa412bf265d078a83d9e3a9dad8f5a000b0bc782093538a62859490f135f8e724cf3ac3dc42670c4b350d4082844c5547345ef36cc8d0e2fb5fcb78066c0e068525e1228ec0e36d17980abc13162e16952ecb93fc2a9ba99f023f24c509a959e4c3c39a296e544eb2e61d4137fa12c6d41a6c36a020f64b206f85ba3a986fb3b024866aec7f49b76236ab777d4bc1afe641869b1e30dba7c8d07d9306d647dbf55cbd1262dd5486de863166bbfd3843212c0b6906dbd76bb8ec7b865e0f81e8e2e0be54f04593eba7f376cde93a9d1b8d0ad1735bb3d95e758f0a240c1a75b7a2c370051a7f16fa55d925ac4f1e1912ba3df3211d7f81d72c61c6f3e8b94980515d60c1a99b699a877957b1f1f74e8cd60d503b64d2ac36e161238bfa6effa96f053c7a0f4cdd0a74f90a934880ea73bb8ca067b28704643ebc55167503acbb2263666cce3ec0dbeabbbe746cdbbcdd8b7cfdee20e8367249fe36c829b1bf1dcff952a4271ef69d3a0a01c142f13444003d181d5d24457da026d07a61e2f34669f0f0e12f84b9297b1af3e8a6cef51e9075de19d54da72e59ddaf2924a908cca65036c62b116a1e86cceaa7a3b46e2f170f188d867c217f5b54d9b8d4510ab960c70d2820d1fd3a8d0b10289f107a67aab1b8316d22a5e3d56fb5bbb54d434874ed75e8da42adfd0efd7e65181950c1e47f00f06a9c8a7a0492d63ac0674a1e1653651aff75e55bd9422c77eed03d7d08cbedd66bc98afe533fa2d865e1b441bb80e845589eea81c30cfadc028f85053e9493189bbdf9b0666081fdb147095651a84caad43707747e6c892640d8713d554a47ae90213edefb552ba7013efd6c819e3c244b2872ba4c2ca710a01e51c0cd8b7272377aa95922ce9bf3f63ad959133b00f560c53191b3ae6652ffad373b7ac7e45daaff67b4894693f954b5d47b4371976cd9b9babec76499c23f52c09dfb71e432f0c6bb0921c6f0afb14d0d53f2dbaa41fcdbcbd465789511b2e618dfd3cdfdae48171c1daa12c64ac10fc32a8b311ba4b1b6da081981e6330677fd298afb889318b6ea75ce8b91843c5ff5461da29162cdbe23690036f99137f8ab6c4a21bd6bf6d7e09e4855c88b866fb9205dc720dd1bffb532f2c90c8c1203fd424c8cf444f931fc6011ce3007f7784627c9ae99ae97b1b74f898b0cd11cca5ac39345c96929550f33d6455f72df8959c29bb60cf04afabbc55752061d9e50cad479d1daa0f6f75e541b6fb7a17fa0c8c1c60a0682be14851d522d62e474e0ae95e5b4a2b27d64296f4d08c5dc55ac69599ee134b29b6adb517047bbffd4109260f8415fb8550f2b04bcfd2cc373ff708f974d150b51e763f514238733a1e6910e900af8086642596bfa35f2f6f3a62d81cfc4ae2c32014097389dfa6c18b72d549f694af0f258e533e5c9ab0bdc0e43a47ac0c1b3a583d47041b8333539aa8e0c56363018dfef3e7ebedaefcde342b20c335849dd3cf3126ea9597d689b01d663d115f98d00c1e28ba1a784c2da564c712fc174ce87a62f0b5e8f34492147392ba7ca9e044a222bbce160c5cd3967e87017f85fc8de0fb1e97502bc4e421d07628e888c77bad4f80e04fa2a6cfe539185556217323fe1792260164cba3105a606555922a13fb8c5eb7ed42a132b7d36ff3d325f76ea84d9a7dcd72f05b4c7e9bea4e58fc4d4d948d6a69cefbc3ed27d14fe3465abe0c7c97830630ecde1c4c03e1b09bf4d86fb4186c4b0167d6e7a3fa549900058cd97d30c1a6188f2a42be2a848b421582c99b6c9decc964f22ec3270c537d623a9ac17ac977e8bea5d9cac3e165ff3b27a608cf6363268e58247fd81e800772df3aac3a4f753eba2b4fc2186d9310692f55911bd806fa33e775f2b6294ecbaaa44dac9fc0c88da8b39d87fd66db8558d84711bfd97ef1470a9168e57ce392c6cc26e8c2cf3dbf2fdc6e5d33392d46456a0bfadfa3e3e8d43bdfb3d6429ae66a8766f07ead811863d6ffc96de1249a710643b418af1911d4332782d6fb5ef08ba53f6074f778aa547de8541ca44069c88ccf9b8afec3c490e8f0e8a8575b0d6dabe8f9fa028adb98e0c08a6f6e5d8d45ca33f1ce5e8e8058e6daa868648228b7d620b1893b326958a5e1c0f255aeb427dbdf6072115df3dde9e0d8480897d66bdc307eb261199cb6b60b54d2ab225ef2b33d5b1d3aac442ffeacd2c448b2c6a4499de55a119bd6509cb14558d8ce008de6f4d16bdd9e94adf48e27df14b885e389436f04a5a7bdcbcf6a4b3caccdeddad03290dafc5b793b69a7d7cf9962e6cfb1059e25db6ca244d1b3722e48dff510b5c00ed4a06e2a9d64078f1078bdcb2a14ab22d5753bca72944945f0e7a233c666959faa8915dd46093bb6ec69f86172fb79346a01925da3e8b6ba3d53a54f353dd7eb3e9af3d58dfaec7f658c2a4cf7b987de22eb2a98a8b2b9670180d012790afb79ea49a531ab7e29e8efb59fd0a133d1c627cfb34a2369413b1dbe06bc3cb3628f79668de3ac008941c4d57b9622d02979ee4f944e4f2a588cc286619413a970cde91c20055093dddc94b5f17d0d0f3fd4ee137b89124c4aa0b484d4b79f140da641951303bd4840bba9e1e8c39d5764359301f62dcee0a2a8bc6a56de08ad24a00ce16f1cbffa928157801a30287591ad6a52e51a2f15346bc925889e1e65b9d50188f1eafa69519b90ae5052c45b61fa4e49ef2855dd262ffca38926ea7fa5b6faec7f6fb1f886ff6f3fb35cd8040335607306be90e381292db7ef5149ca1d291de8f2d9683541ac3720e66c1b6c16aaaa6c5a23b1ec482fa892d27fb703a4577216c40ed478768fb99c674a99e00b6a177b6219189b3787ca045010d6f4f7fa6530e1878d4afc18366cbe82516c13e776e210d251846495e6054f4422e27bb468b2042537400300d41d93df300ca37ac073f7b8e6212e4d4af24337374100fe236ca3d47ffce4a31546ad9c9dcfc586e1840e6ba9af09430148a610af7cc7d646e0f5c407afc8fab14430c2aa492bd711168e15d2bb4f653c79ef1cf355d0bee806970518dbe7f8b48bfc3ce7bc4b13e69d6f5287bbbeaa745ebede49b92cddd7ecee9d2ce404f544a5297ca02ddeba5ca2aa3b2f1c43b3ac2d2d8e2d1aa4ee21cbec422838bb50c280aebf024f6832f47a8b47bb2bb77fe51715f721db7aeb4b1896e787b96b58a8666dfc84523689dcadd146931dbe67776bd02da13f8fa5e33d48a812445223e1c275c30c402961fc079e95704405396bdbabe3b0395752727ac7aedd4df3da22105236fdaab0ae9f935aace7f0a70481b4201cda2b769db475a59337000a0e02dac2f47b090728cdd6b6c74db137f2612bf2ea5ff04f4efd6f67aa7c32e0de188ceec8e0c8e6b615eb3f44ee602c8b8112e8547c2b1704f3411beeb9a087e42b2df6fc2c232abec2539fb941537cac7d99338b40e5629ca909912c9ac867588c5d125c35adeecfdfce1aad7dcf8cb15fab733219c4dddbabcbcf5a35c19d9b43c65d4603cec80f4116e61b575ca484865b2ebd14bc2469cbf66585b10cb7482e3569da5293c5b9353a40ecc4ade9680c318d487c3a1921764c1d833f1a1d2da72ac8b831b474f018f9ebd98ba37d7fdbd113bf9d1979474afed0f6cac1e03c5a4247c75fd6d401bedc9e798b157dac7cf480093aa20232b563922f255e8060a0f8feca0ce5859e09268ece3e7e97d41252eb99e973037c59bf6e441239c97e6f1fbe545673d7b6211e41c92ee0d8d6d357d101ab5c7d5f782a006684e161009914f228512f95e778eafa020fd7fdd2d66e552e3d2d214e1b76280fb6360691f32b35c14b167c4410b7754acba40b78a1226db1c90d8435a0d582124d46ba4e05806e2d8b359beef239d192058526ca1522e340abd47da005d81bfee74f455900729816696fd01af73b48ed316fb73ba6ed13b3937f61ada613d76dc0c9a32e1d25ae3d765af465d410874c9f72ddc94ac4b8f5c2e69296cc054c141246f440007a80160ef55c7dc1d6369c228241d55370497992cac22f2a45b42632f67e1602dae1145b612bded096aa254ce3b5f7cc712690099c8b78cb51cea102909289968825f7ea12d4ff73e844ee882763355a1b037e8dadc65a20f8bd1f1722cafaf7359eceac6bfb1ce2c2d6e8673bf5f2b4c921cc53d7bd5a5d2e7e311219e5f0ad9952d0374445ff24d24d65b0ee2867bdf60585c19a5579b38851f18dbc7224058ffb5e8abfb3aa10e02a708279c24b60fdd4ea58923a9f201e189b429d6941e81c1f0f73c683400"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000200)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0600330080"], 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) 498.326427ms ago: executing program 6 (id=4793): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000002c0)}}], 0x3, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpgid(0x0) close(0xffffffffffffffff) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0xb, 0xffffffffffffffff, 0x0, r8}) syz_usb_disconnect(r7) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r7, 0x550c, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="201100000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r9, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="400010000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_setup(0x267a, &(0x7f0000000140)={0x0, 0x52a0, 0x8000, 0x1, 0x8e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000500)={'dvmrp0\x00'}) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000000)={0x1ffb, 0x1, 0x2}, 0x18, 0x0) landlock_restrict_self(r10, 0x1) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r6}) sendmmsg$unix(r3, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 292.602323ms ago: executing program 7 (id=4794): syz_usb_connect(0x2, 0x440, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000c1b2fd40861246206fc10000000109022e040108004000090450000eff040100da0fe42101caf61f785b7bd6f9a40324b2b8253d68e955dd65abfed59c829185881ffcf5071e69d83a94cccf753dd12f7dafdf5b2d4e3c8bf7d1851b891f21b183913d49bf953bab3ee777ab2030fd27eea9c11becf582bd1b62acc0c22b85cc4a21fdf944da65c501f2bcfe60009f9fd3182f3ef9ea028b761d8d18b12c0fbf64e01fdc16ab3f19ccea2d43d16c315afe1e0654083cd85bdecc1d0c08b65aa2b2b59ecb592696ae75b74bced0a71a55e78c444bc6465fc101e4d0d773fceabb706647834c3dac7f5053ba0fc5a1b7012444dace5c0a0be4300e09210200040122e20b0905e7022000050b08090580014001030607cc31074fbfe106909c0e2a9e3c8f70de1215b05b4e75f54d1fa06a425bb8c7fef594d2ffdf29b12ec1b945fa8258e29da5d13e03ec0c272e99523b2a0be430b629f7fa5bb1d4efc8455fff57efa9f30ce50458ae7f8b794ead783acf5e9960b78172cee5cf148a84453239e84e0e513347117423804b3e605c5fee826960698e8fcb3ed028f3686f7e7c4fc44974d6987f3a16f956683194e67b59a1225efa8d91d82fa9115ce443a8e13e7a3e934b017d087333eef373067226b5e8d836f1f1bdb35584b0e08c8edcc0f3390725010106ff7f0905", @ANYBLOB="b2"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x2040400) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 0s ago: executing program 4 (id=4795): socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x11, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df, 0x0, 0xfffd], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd]}}}}]}, 0x88}}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000500)={'sit0\x00', r5, 0x8000, 0x700, 0x3ff, 0x4, {{0x45, 0x4, 0x0, 0x5, 0x114, 0x66, 0x0, 0x5, 0x29, 0x0, @empty, @rand_addr=0x64010102, {[@lsrr={0x83, 0x1b, 0xca, [@multicast1, @rand_addr=0x64010101, @rand_addr=0x64010101, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x8, 0x0}]}, @cipso={0x86, 0x64, 0xffffffffffffffff, [{0x6, 0x10, "390b30ef252d111fefaec85fa08f"}, {0x6, 0x8, "0b9061131821"}, {0x5, 0x6, "31d51116"}, {0x6, 0x8, "bf2b0e0b7c86"}, {0x0, 0x11, "bbf098c3e3cf023bc34020ab8bb305"}, {0x2, 0x9, "1ebbbbbdf6832d"}, {0x7, 0x11, "b19d6e3f00ed8a364f0ca810a65172"}, {0x2, 0xd, "f002fe862c338f5456979a"}]}, @generic={0x44, 0xe, "62e950ce5a3ee9dfcc93c997"}, @ssrr={0x89, 0x27, 0xf5, [@dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, @multicast1, @local, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}, @broadcast]}, @ssrr={0x89, 0x7, 0xfb, [@dev={0xac, 0x14, 0x14, 0x32}]}, @timestamp={0x44, 0x28, 0x84, 0x0, 0x4, [0x10, 0x3ff, 0x1, 0x10001, 0x8000, 0x7fffffff, 0x9, 0x0, 0x5]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @ssrr={0x89, 0x13, 0x7a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}}) r6 = fsopen(0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f021}) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='source', &(0x7f0000000040)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@\xe7\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbe\xf7\xa7N\xf5L.d9\xc3t\x8b]YA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\xfe\x0e1\x9f\xd2\xb2\x81?\x04\x0e\x9a]\x85z\xf4\x7f\x92\xb8\xef\x97a\x86\x17JG2e\x81\x8e\t:\x10\xaf{\xd6b\xceX\xaeb\xf4\x92\xc4m\x02\xef\xe8\'.0h\xcd\xdb\xee\x10\\\xdb\xa8\x86\x83~j\xabTy\xfe\x90a\xae \xe5\xa63\x12\x10\xfdu\x8ey\x9a\x0e\xcd\xf5\xe8y\xd4\xc5\x99\xf6\x93\x1f\x19\x16w\b9\x0fq\xa6 \x0f\xa5{c\x18\x15\x973', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_MODE_ADDFB(r9, 0xc01c64ae, &(0x7f0000000380)={0x0, 0x98, 0xffff, 0xfffffffd, 0x1, 0x7, 0xe96}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x8040600) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x2}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): endmsg+0x2f4/0x370 [ 1118.575370][T29455] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1118.575395][T29455] ____sys_sendmsg+0x80a/0x9f0 [ 1118.575434][T29455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1118.575474][T29455] ? import_iovec+0x73/0xa0 [ 1118.575507][T29455] ___sys_sendmsg+0x2a5/0x360 [ 1118.575532][T29455] ? __pfx____sys_sendmsg+0x10/0x10 [ 1118.575585][T29455] ? __fget_files+0x2a/0x420 [ 1118.575613][T29455] ? __fget_files+0x3a0/0x420 [ 1118.575651][T29455] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1118.575673][T29455] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1118.575701][T29455] ? __pfx_ksys_write+0x10/0x10 [ 1118.575734][T29455] do_syscall_64+0x14d/0xf80 [ 1118.575764][T29455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.575784][T29455] ? clear_bhb_loop+0x40/0x90 [ 1118.575810][T29455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.575831][T29455] RIP: 0033:0x7fc17b19c799 [ 1118.575851][T29455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1118.575868][T29455] RSP: 002b:00007fc17c023028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1118.575888][T29455] RAX: ffffffffffffffda RBX: 00007fc17b415fa0 RCX: 00007fc17b19c799 [ 1118.575902][T29455] RDX: 0000000000000815 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1118.575916][T29455] RBP: 00007fc17c023090 R08: 0000000000000000 R09: 0000000000000000 [ 1118.575929][T29455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1118.575940][T29455] R13: 00007fc17b416038 R14: 00007fc17b415fa0 R15: 00007fc17b53fa48 [ 1118.575969][T29455] [ 1118.995654][T29460] netlink: 'syz.6.4303': attribute type 10 has an invalid length. [ 1119.112913][T29463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4304'. [ 1119.121976][ T1208] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1119.130156][ T1208] em28xx 5-1:0.0: Config register raw data: 0x9e [ 1119.364316][ T1208] em28xx 5-1:0.0: AC97 command still being executed: not handled properly! [ 1119.373748][ T1208] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1119.381427][ T1208] em28xx 5-1:0.0: No AC97 audio processor [ 1120.051860][T29473] netlink: 'syz.5.4305': attribute type 10 has an invalid length. [ 1120.763368][ T1208] usb 5-1: USB disconnect, device number 23 [ 1120.780167][ T1208] em28xx 5-1:0.0: Disconnecting em28xx [ 1120.798342][ T1208] em28xx 5-1:0.0: Freeing device [ 1122.348664][T29460] bond5: (slave dummy0): Releasing active interface [ 1122.378060][T29460] dummy0: left promiscuous mode [ 1122.436795][T29460] dummy0: entered promiscuous mode [ 1122.448790][T29460] team0: Port device dummy0 added [ 1122.487684][T29473] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 1123.057326][T29523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4316'. [ 1123.119827][T29522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1123.157248][T29522] batadv_slave_1: entered promiscuous mode [ 1123.431761][ T1208] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1123.636377][ T1208] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1123.690033][ T1208] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1123.753752][ T1208] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1123.784221][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1123.820639][ T1208] usb 4-1: Product: syz [ 1123.833445][ T1208] usb 4-1: Manufacturer: syz [ 1123.852739][ T1208] usb 4-1: SerialNumber: syz [ 1123.885694][ T1208] usb 4-1: config 0 descriptor?? [ 1123.983687][ T1208] usb 4-1: selecting invalid altsetting 0 [ 1124.439596][ T1208] usb 4-1: USB disconnect, device number 53 [ 1124.608319][T29575] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4321'. [ 1124.656219][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1124.844719][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1124.861570][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1124.884479][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.908145][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1124.931955][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1124.958172][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.989062][ T9] usb 3-1: Product: syz [ 1125.008189][ T9] usb 3-1: Manufacturer: syz [ 1125.030756][ T9] usb 3-1: SerialNumber: syz [ 1125.243558][T29598] netlink: 'syz.3.4325': attribute type 1 has an invalid length. [ 1125.509787][ T9] usb 3-1: 0:2 : does not exist [ 1125.534487][ T29] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1125.718653][ T29] usb 5-1: config 0 has an invalid interface number: 42 but max is 0 [ 1125.744960][ T29] usb 5-1: config 0 has no interface number 0 [ 1125.765594][ T29] usb 5-1: too many endpoints for config 0 interface 42 altsetting 127: 239, using maximum allowed: 30 [ 1125.787772][ T29] usb 5-1: config 0 interface 42 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 239 [ 1125.807562][ T29] usb 5-1: config 0 interface 42 has no altsetting 0 [ 1125.820608][ T29] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1125.837360][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.849576][ T29] usb 5-1: Product: syz [ 1125.853947][ T29] usb 5-1: Manufacturer: syz [ 1125.862468][ T29] usb 5-1: SerialNumber: syz [ 1125.878858][ T29] usb 5-1: config 0 descriptor?? [ 1126.106409][ T29] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1126.141822][ T29] sonixb 5-1:0.42: Error reading register 00: -71 [ 1126.202390][ T29] usb 5-1: USB disconnect, device number 24 [ 1126.810636][ T9] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 1127.011395][ T9] usb 3-1: USB disconnect, device number 12 [ 1127.072253][T29321] udevd[29321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1127.204255][ T1208] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1127.214416][ T5909] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1127.348485][T29672] netlink: 'syz.5.4336': attribute type 3 has an invalid length. [ 1127.366801][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1127.375862][ T1208] usb 4-1: Using ep0 maxpacket: 16 [ 1127.382915][ T5909] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1127.393113][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1127.406542][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1127.416758][ T5909] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1127.424575][ T1208] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1127.439106][ T5909] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1127.448685][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.458233][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.469070][ T5909] usb 5-1: config 0 descriptor?? [ 1127.487991][ T1208] usb 4-1: Product: syz [ 1127.492348][ T1208] usb 4-1: Manufacturer: syz [ 1127.514217][ T1208] usb 4-1: SerialNumber: syz [ 1127.528226][ T1208] usb 4-1: config 0 descriptor?? [ 1127.534214][ T5902] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1127.544943][ T1208] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1127.554823][ T1208] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1127.677771][ T5909] hdpvr 5-1:0.0: firmware version 0x15 dated Š–¸&S¶ð2;¨“Ãx&X^„œ wÒΖŠ g/ƒ µn#»† [ 1127.716825][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.729566][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.747139][ T5902] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1127.760722][ T5902] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1127.773143][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.795622][ T5902] usb 7-1: config 0 descriptor?? [ 1127.895478][ T29] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1127.915753][T29644] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4331'. [ 1127.926324][ T5909] hdpvr 5-1:0.0: device init failed [ 1127.946836][ T5909] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 1127.975332][ T5909] usb 5-1: USB disconnect, device number 25 [ 1128.057542][ T29] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1128.068866][ T29] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1128.082076][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1128.092173][ T29] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1128.101665][ T29] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1128.111377][ T29] usb 3-1: Product: syz [ 1128.116898][ T29] usb 3-1: Manufacturer: syz [ 1128.121926][ T29] usb 3-1: SerialNumber: syz [ 1128.131023][ T29] usb 3-1: config 0 descriptor?? [ 1128.145653][ T29] usb 3-1: selecting invalid altsetting 0 [ 1128.162261][ T1208] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1128.248208][ T5902] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1128.419037][ T5902] usb 7-1: USB disconnect, device number 63 [ 1128.510180][T29730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.527258][T29730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.581226][ T1208] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1128.590982][ T1208] em28xx 4-1:0.0: board has no eeprom [ 1128.704388][ T1208] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1128.721138][ T1208] em28xx 4-1:0.0: dvb set to bulk mode. [ 1128.745859][ T9] em28xx 4-1:0.0: Binding DVB extension [ 1128.775809][ T1208] usb 4-1: USB disconnect, device number 54 [ 1128.801429][ T1208] em28xx 4-1:0.0: Disconnecting em28xx [ 1128.905644][ T9] em28xx 4-1:0.0: Registering input extension [ 1128.930006][ T1208] em28xx 4-1:0.0: Closing input extension [ 1128.999650][ T1208] em28xx 4-1:0.0: Freeing device [ 1129.284322][ T5902] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1129.457599][ T5902] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1129.474361][ T5902] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.503179][ T5902] usb 7-1: config 220 has no interface number 2 [ 1129.528211][ T5902] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1129.564838][ T5902] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1129.572021][ T5902] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1129.579958][ T5902] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1129.597555][ T5902] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1129.607683][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.619152][ T5902] usb 7-1: Product: syz [ 1129.625358][ T5902] usb 7-1: Manufacturer: syz [ 1129.630442][ T5902] usb 7-1: SerialNumber: syz [ 1129.667349][T29772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4345'. [ 1129.898633][ T5902] usb 7-1: selecting invalid altsetting 0 [ 1129.921267][ T5902] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1129.931774][ T5902] uvcvideo 7-1:220.0: No valid video chain found. [ 1129.992734][ T5902] usb 7-1: selecting invalid altsetting 0 [ 1129.999315][ T5902] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1130.032492][ T5902] usb 7-1: USB disconnect, device number 64 [ 1130.304231][ T1208] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1130.464458][ T1208] usb 5-1: Using ep0 maxpacket: 16 [ 1130.499471][ T1208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.552152][ T1208] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1130.586200][ T1208] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1130.618127][ T1208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.643863][T29807] Cannot find del_set index 2 as target [ 1130.749578][ T1208] usb 5-1: config 0 descriptor?? [ 1130.857834][ T1208] pxrc 5-1:0.0: Could not find endpoint [ 1130.901531][ T1208] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1131.727785][ T5894] usb 5-1: USB disconnect, device number 26 [ 1132.236768][ T1208] usb 3-1: USB disconnect, device number 13 [ 1132.445314][ T5894] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1132.605471][ T5894] usb 7-1: Using ep0 maxpacket: 32 [ 1132.615876][ T5894] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1132.648765][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.716389][ T5894] usb 7-1: config 0 descriptor?? [ 1132.780279][ T5894] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1133.017672][T29878] kvm: pic: level sensitive irq not supported [ 1133.018025][T29878] kvm: pic: non byte read [ 1133.924466][ T5894] gspca_sunplus: reg_w_riv err -110 [ 1133.946353][ T5894] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1134.284239][ T5894] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1134.470933][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 1134.489217][ T5894] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1134.500535][T29899] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1134.520831][ T5894] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1134.531133][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1134.553259][ T5894] usb 5-1: Product: syz [ 1134.583967][ T5894] usb 5-1: Manufacturer: syz [ 1134.598998][ T5894] usb 5-1: SerialNumber: syz [ 1134.627802][ T5894] usb 5-1: config 0 descriptor?? [ 1134.641214][T29890] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1134.925725][T29905] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1134.981285][T29909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.028075][T29909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.045003][T29905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.053884][T29905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.401716][ T30] audit: type=1326 audit(1772818305.632:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29915 comm="syz.5.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1859c799 code=0x7ffc0000 [ 1135.431984][ T30] audit: type=1326 audit(1772818305.632:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29915 comm="syz.5.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1859c799 code=0x7ffc0000 [ 1135.461057][ T30] audit: type=1326 audit(1772818305.662:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29915 comm="syz.5.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fea1859c799 code=0x7ffc0000 [ 1135.486993][ T30] audit: type=1326 audit(1772818305.662:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29915 comm="syz.5.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1859c799 code=0x7ffc0000 [ 1135.550423][ T30] audit: type=1326 audit(1772818305.662:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29915 comm="syz.5.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea1859c799 code=0x7ffc0000 [ 1135.645242][ T30] audit: type=1326 audit(1772818305.662:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29915 comm="syz.5.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1859c799 code=0x7ffc0000 [ 1135.716688][ T30] audit: type=1326 audit(1772818305.662:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29915 comm="syz.5.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fea1859c799 code=0x7ffc0000 [ 1135.783652][ T30] audit: type=1326 audit(1772818305.722:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29915 comm="syz.5.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1859c799 code=0x7ffc0000 [ 1135.851949][ T30] audit: type=1326 audit(1772818305.722:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29915 comm="syz.5.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fea1859c799 code=0x7ffc0000 [ 1135.953964][ T30] audit: type=1326 audit(1772818305.842:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29915 comm="syz.5.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1859c799 code=0x7ffc0000 [ 1137.090490][ T5909] usb 5-1: USB disconnect, device number 27 [ 1137.564232][ T5909] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1137.746627][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1137.775777][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1137.787405][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1137.801040][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1137.817622][ T5909] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1137.828809][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.844199][ T5909] usb 5-1: config 0 descriptor?? [ 1138.000874][ T29] usb 7-1: USB disconnect, device number 65 [ 1138.302414][ T5909] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1138.515804][T29938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.555158][T29938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.624599][ T5909] usb 5-1: USB disconnect, device number 28 [ 1138.824185][ T29] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1138.879201][T29983] gretap1: entered promiscuous mode [ 1138.994550][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 1139.017033][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1139.029681][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1139.049104][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1139.060343][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1139.097369][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1139.126134][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.696076][ T29] usb 7-1: GET_CAPABILITIES returned 0 [ 1139.701649][ T29] usbtmc 7-1:16.0: can't read capabilities [ 1140.433409][T30004] netlink: 'syz.5.4374': attribute type 10 has an invalid length. [ 1140.994251][ T29] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1141.176028][ T29] usb 6-1: config index 0 descriptor too short (expected 30768, got 36) [ 1141.206766][ T29] usb 6-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 1141.241954][ T29] usb 6-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 1141.290968][ T29] usb 6-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 1141.334143][ T29] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1141.379590][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.410656][T30018] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4378'. [ 1141.638374][T30020] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4379'. [ 1141.914736][T30026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4381'. [ 1142.021397][T30030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4381'. [ 1142.062438][ T29] usb 6-1: string descriptor 0 read error: -71 [ 1142.151432][ T29] usb 6-1: USB disconnect, device number 79 [ 1142.230616][T30026] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1142.377581][T30028] bond1: (slave dummy0): Releasing active interface [ 1142.396823][T30028] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1142.423056][T30030] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 1142.445191][ T5909] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1142.544467][ T29] usb 7-1: USB disconnect, device number 66 [ 1142.617972][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1142.635413][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1142.646530][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1142.657453][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1142.672941][ T5909] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1142.683412][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.710271][ T5909] usb 3-1: config 0 descriptor?? [ 1142.852029][T30089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4384'. [ 1143.020771][T30098] tipc: Enabling of bearer rejected, failed to enable media [ 1143.134267][ T5894] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1143.185337][ T5909] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1143.364201][ T5894] usb 7-1: device descriptor read/64, error -71 [ 1143.413065][T30058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.437670][T30058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.471647][ T5909] usb 3-1: USB disconnect, device number 14 [ 1143.765005][ T5894] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1143.874259][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1143.914187][ T5894] usb 7-1: device descriptor read/64, error -71 [ 1144.046642][ T5894] usb usb7-port1: attempt power cycle [ 1144.065228][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1144.075573][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.099760][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1144.126985][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1144.143366][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.163160][ T9] usb 4-1: Product: syz [ 1144.174771][ T9] usb 4-1: Manufacturer: syz [ 1144.187560][ T9] usb 4-1: SerialNumber: syz [ 1144.210435][ T9] usb 4-1: config 0 descriptor?? [ 1144.404226][ T5894] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1144.464989][ T5894] usb 7-1: device descriptor read/8, error -71 [ 1144.503952][ T5902] usb 4-1: USB disconnect, device number 55 [ 1144.756621][ T5894] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1144.812756][ T5894] usb 7-1: device descriptor read/8, error -71 [ 1144.921643][T30152] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4395'. [ 1144.944549][ T5894] usb usb7-port1: unable to enumerate USB device [ 1145.208265][T30162] FAULT_INJECTION: forcing a failure. [ 1145.208265][T30162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.227273][T30162] CPU: 0 UID: 0 PID: 30162 Comm: syz.5.4397 Tainted: G L syzkaller #0 PREEMPT(full) [ 1145.227312][T30162] Tainted: [L]=SOFTLOCKUP [ 1145.227321][T30162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1145.227335][T30162] Call Trace: [ 1145.227344][T30162] [ 1145.227354][T30162] dump_stack_lvl+0xe8/0x150 [ 1145.227391][T30162] should_fail_ex+0x412/0x560 [ 1145.227425][T30162] _copy_to_user+0x31/0xb0 [ 1145.227461][T30162] simple_read_from_buffer+0xe1/0x170 [ 1145.227498][T30162] proc_fail_nth_read+0x1bb/0x230 [ 1145.227534][T30162] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1145.227569][T30162] ? rw_verify_area+0x2a6/0x4d0 [ 1145.227591][T30162] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1145.227624][T30162] vfs_read+0x20c/0xa70 [ 1145.227645][T30162] ? fdget_pos+0x246/0x320 [ 1145.227681][T30162] ? __pfx___mutex_lock+0x10/0x10 [ 1145.227706][T30162] ? __pfx_vfs_read+0x10/0x10 [ 1145.227743][T30162] ? __fget_files+0x2a/0x420 [ 1145.227780][T30162] ? __fget_files+0x3a0/0x420 [ 1145.227811][T30162] ? __fget_files+0x2a/0x420 [ 1145.227853][T30162] ksys_read+0x150/0x270 [ 1145.227879][T30162] ? __pfx_ksys_read+0x10/0x10 [ 1145.227914][T30162] do_syscall_64+0x14d/0xf80 [ 1145.227946][T30162] ? trace_irq_disable+0x3b/0x150 [ 1145.227978][T30162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.228001][T30162] ? clear_bhb_loop+0x40/0x90 [ 1145.228028][T30162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.228051][T30162] RIP: 0033:0x7fea1855cfce [ 1145.228071][T30162] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1145.228091][T30162] RSP: 002b:00007fea19438fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1145.228114][T30162] RAX: ffffffffffffffda RBX: 00007fea194396c0 RCX: 00007fea1855cfce [ 1145.228131][T30162] RDX: 000000000000000f RSI: 00007fea194390a0 RDI: 0000000000000005 [ 1145.228145][T30162] RBP: 00007fea19439090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.228159][T30162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.228173][T30162] R13: 00007fea18816128 R14: 00007fea18816090 R15: 00007fea1893fa48 [ 1145.228208][T30162] [ 1145.743597][T30183] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4403'. [ 1145.784632][ T9] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1145.892631][T30183] libceph: resolve '0..' (ret=-3): failed [ 1146.044418][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1146.056601][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.068248][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1146.106428][ T9] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1146.117026][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.126354][ T9] usb 6-1: Product: â ‰ [ 1146.130970][ T9] usb 6-1: Manufacturer: 〠[ 1146.139587][ T9] usb 6-1: SerialNumber: á°Š [ 1146.259577][T30193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4404'. [ 1146.295697][T30197] netlink: 'syz.2.4405': attribute type 10 has an invalid length. [ 1146.347356][T30200] netlink: 'syz.2.4405': attribute type 10 has an invalid length. [ 1146.376795][T30197] bond1: (slave dummy0): Releasing active interface [ 1146.435012][ T9] usb 6-1: USB disconnect, device number 80 [ 1146.462607][T30197] team0: Port device dummy0 added [ 1146.709919][T30210] FAULT_INJECTION: forcing a failure. [ 1146.709919][T30210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.790381][T30210] CPU: 1 UID: 0 PID: 30210 Comm: syz.2.4406 Tainted: G L syzkaller #0 PREEMPT(full) [ 1146.790418][T30210] Tainted: [L]=SOFTLOCKUP [ 1146.790428][T30210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1146.790442][T30210] Call Trace: [ 1146.790452][T30210] [ 1146.790462][T30210] dump_stack_lvl+0xe8/0x150 [ 1146.790500][T30210] should_fail_ex+0x412/0x560 [ 1146.790535][T30210] _copy_from_user+0x2d/0xb0 [ 1146.790571][T30210] ___sys_sendmsg+0x1c6/0x360 [ 1146.790602][T30210] ? __pfx____sys_sendmsg+0x10/0x10 [ 1146.790659][T30210] ? __fget_files+0x2a/0x420 [ 1146.790692][T30210] ? __fget_files+0x3a0/0x420 [ 1146.790735][T30210] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1146.790760][T30210] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1146.790792][T30210] ? __pfx_ksys_write+0x10/0x10 [ 1146.790827][T30210] do_syscall_64+0x14d/0xf80 [ 1146.790860][T30210] ? trace_irq_disable+0x3b/0x150 [ 1146.790892][T30210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.790916][T30210] ? clear_bhb_loop+0x40/0x90 [ 1146.790943][T30210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.790966][T30210] RIP: 0033:0x7ff70ad9c799 [ 1146.790988][T30210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.791008][T30210] RSP: 002b:00007ff70bbf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1146.791033][T30210] RAX: ffffffffffffffda RBX: 00007ff70b015fa0 RCX: 00007ff70ad9c799 [ 1146.791050][T30210] RDX: 0000000000000884 RSI: 0000200000000140 RDI: 0000000000000003 [ 1146.791064][T30210] RBP: 00007ff70bbf3090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.791078][T30210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1146.791092][T30210] R13: 00007ff70b016038 R14: 00007ff70b015fa0 R15: 00007ff70b13fa48 [ 1146.791135][T30210] [ 1147.734489][ T5909] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1147.894518][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 1147.916843][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.934768][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.960002][ T5909] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1147.983574][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.029823][ T5909] usb 4-1: config 0 descriptor?? [ 1148.050687][ T5909] hub 4-1:0.0: USB hub found [ 1149.034187][ T29] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1149.195356][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 1149.207046][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1149.219240][ T29] usb 3-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 1149.236584][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1149.250912][ T29] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1149.261958][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.270764][ T29] usb 3-1: Product: syz [ 1149.279166][ T29] usb 3-1: Manufacturer: syz [ 1149.285387][ T29] usb 3-1: SerialNumber: syz [ 1149.424128][ T5902] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1149.514251][T30244] fuse: Bad value for 'fd' [ 1149.584176][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 1149.607665][ T29] usb 3-1: failed waiting for Axe-Fx III to boot: -71 [ 1149.660250][ T5902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.694244][ T29] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1149.710846][ T5902] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1149.728929][ T29] usb 3-1: USB disconnect, device number 15 [ 1149.753647][ T5902] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1149.783012][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.802814][ T5902] usb 5-1: Product: â ‰ [ 1149.808865][ T5902] usb 5-1: Manufacturer: 〠[ 1149.813933][ T5902] usb 5-1: SerialNumber: á°Š [ 1149.975789][T30273] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4418'. [ 1150.086378][ T5902] usb 5-1: USB disconnect, device number 29 [ 1150.540115][T30289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4422'. [ 1151.583465][T30303] FAULT_INJECTION: forcing a failure. [ 1151.583465][T30303] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.599951][T30303] CPU: 0 UID: 0 PID: 30303 Comm: syz.5.4427 Tainted: G L syzkaller #0 PREEMPT(full) [ 1151.599992][T30303] Tainted: [L]=SOFTLOCKUP [ 1151.600002][T30303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1151.600019][T30303] Call Trace: [ 1151.600045][T30303] [ 1151.600057][T30303] dump_stack_lvl+0xe8/0x150 [ 1151.600102][T30303] should_fail_ex+0x412/0x560 [ 1151.600140][T30303] should_failslab+0xa8/0x100 [ 1151.600172][T30303] ? skb_clone+0x212/0x3a0 [ 1151.600199][T30303] kmem_cache_alloc_noprof+0x87/0x650 [ 1151.600235][T30303] skb_clone+0x212/0x3a0 [ 1151.600265][T30303] __netlink_deliver_tap+0x404/0x850 [ 1151.600316][T30303] ? netlink_deliver_tap+0x2e/0x1b0 [ 1151.600351][T30303] netlink_deliver_tap+0x19c/0x1b0 [ 1151.600385][T30303] netlink_sendskb+0x68/0x140 [ 1151.600417][T30303] netlink_unicast+0x3a3/0x9b0 [ 1151.600458][T30303] ? __pfx_netlink_unicast+0x10/0x10 [ 1151.600500][T30303] netlink_rcv_skb+0x2b6/0x4b0 [ 1151.600533][T30303] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1151.600656][T30303] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1151.600716][T30303] netlink_unicast+0x80f/0x9b0 [ 1151.600758][T30303] ? __pfx_netlink_unicast+0x10/0x10 [ 1151.600790][T30303] ? netlink_sendmsg+0x650/0xb40 [ 1151.600821][T30303] ? skb_put+0x11b/0x210 [ 1151.600862][T30303] netlink_sendmsg+0x813/0xb40 [ 1151.600907][T30303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1151.600946][T30303] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1151.600981][T30303] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1151.601014][T30303] ____sys_sendmsg+0x972/0x9f0 [ 1151.601064][T30303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1151.601114][T30303] ? import_iovec+0x73/0xa0 [ 1151.601158][T30303] ___sys_sendmsg+0x2a5/0x360 [ 1151.601189][T30303] ? __pfx____sys_sendmsg+0x10/0x10 [ 1151.601257][T30303] ? __fget_files+0x2a/0x420 [ 1151.601294][T30303] ? __fget_files+0x3a0/0x420 [ 1151.601342][T30303] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1151.601369][T30303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1151.601406][T30303] ? __pfx_ksys_write+0x10/0x10 [ 1151.601448][T30303] do_syscall_64+0x14d/0xf80 [ 1151.601486][T30303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.601512][T30303] ? clear_bhb_loop+0x40/0x90 [ 1151.601543][T30303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.601568][T30303] RIP: 0033:0x7fea1859c799 [ 1151.601594][T30303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.601616][T30303] RSP: 002b:00007fea1945a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1151.601651][T30303] RAX: ffffffffffffffda RBX: 00007fea18815fa0 RCX: 00007fea1859c799 [ 1151.601671][T30303] RDX: 0000000000000884 RSI: 0000200000000140 RDI: 0000000000000003 [ 1151.601687][T30303] RBP: 00007fea1945a090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.601703][T30303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.601719][T30303] R13: 00007fea18816038 R14: 00007fea18815fa0 R15: 00007fea1893fa48 [ 1151.601759][T30303] [ 1152.578222][T30319] netlink: 'syz.6.4432': attribute type 10 has an invalid length. [ 1152.607429][T30320] fuse: Unknown parameter 'fd0x000000000000000a' [ 1152.634347][T30319] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4432'. [ 1153.104677][ T29] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1153.254251][ T5902] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1153.286683][ T29] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1153.301848][ T5909] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1153.316373][ T29] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1153.342511][ T5909] usbhid 4-1:0.0: can't add hid device: -32 [ 1153.354325][ T29] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.365413][ T5909] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1153.392173][ T29] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1153.422546][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1153.430049][ T5902] usb 7-1: Using ep0 maxpacket: 16 [ 1153.452902][ T29] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1153.465686][ T5902] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.496959][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.510082][ T5902] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1153.540194][ T29] usb 3-1: config 0 descriptor?? [ 1153.551651][ T5902] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1153.580582][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.598779][ T5902] usb 7-1: Product: â ‰ [ 1153.609964][ T5902] usb 7-1: Manufacturer: 〠[ 1153.624164][ T5902] usb 7-1: SerialNumber: á°Š [ 1153.923678][ T5902] usb 7-1: USB disconnect, device number 71 [ 1154.014298][ T29] hid-alps 0003:044E:120C.0023: item fetching failed at offset 7/8 [ 1154.042063][ T29] hid-alps 0003:044E:120C.0023: parse failed [ 1154.048462][ T29] hid-alps 0003:044E:120C.0023: probe with driver hid-alps failed with error -22 [ 1154.328912][T30350] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1154.389994][T30350] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1154.714119][ T5902] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1154.732282][T30361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4433'. [ 1154.884265][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 1154.904809][ T5902] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1154.928538][ T5902] usb 5-1: config 4 has too many interfaces: 231, using maximum allowed: 32 [ 1154.947756][ T5902] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 231 [ 1154.968765][ T5902] usb 5-1: config 4 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1155.000127][ T5902] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1155.032743][ T5902] usb 5-1: string descriptor 0 read error: -22 [ 1155.046868][ T5902] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1155.071561][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.146513][ T5902] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1155.342579][T30350] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 1155.390590][ T5902] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1155.485255][ T5902] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1155.492518][ T5902] usb 5-1: media controller created [ 1155.542939][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1155.642038][ T5902] zl10353_read_register: readreg error (reg=127, ret==0) [ 1155.753028][ T5902] usb 5-1: USB disconnect, device number 30 [ 1155.827883][ T29] usb 4-1: USB disconnect, device number 56 [ 1155.981301][T30400] netlink: 'syz.5.4439': attribute type 3 has an invalid length. [ 1156.913940][T30426] kvm: user requested TSC rate below hardware speed [ 1156.916578][T30426] kvm: user requested TSC rate below hardware speed [ 1156.928000][ T5894] usb 3-1: USB disconnect, device number 16 [ 1157.399739][T30456] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4447'. [ 1157.484197][ T5902] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1157.543575][T30456] sg_write: data in/out 294879/80 bytes for SCSI command 0x2-- guessing data in; [ 1157.543575][T30456] program syz.5.4447 not setting count and/or reply_len properly [ 1157.637368][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1157.637403][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1157.637448][ T5902] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1157.637475][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.674067][ T5902] usb 5-1: config 0 descriptor?? [ 1157.722237][ T5902] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1157.744248][ T29] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1157.903875][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 1157.909120][ T29] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1157.909153][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.912370][ T29] usb 4-1: config 0 descriptor?? [ 1158.133827][ T29] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1158.146864][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1158.152359][ T29] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1158.152430][ T29] usb 4-1: media controller created [ 1158.168382][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1158.347094][ T29] az6027: usb out operation failed. (-71) [ 1158.348148][ T29] az6027: usb out operation failed. (-71) [ 1158.348169][ T29] stb0899_attach: Driver disabled by Kconfig [ 1158.348184][ T29] az6027: no front-end attached [ 1158.348184][ T29] [ 1158.349798][ T29] az6027: usb out operation failed. (-71) [ 1158.349817][ T29] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1158.352352][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input78 [ 1158.357666][ T29] dvb-usb: schedule remote query interval to 400 msecs. [ 1158.357693][ T29] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1158.370819][ T29] usb 4-1: USB disconnect, device number 57 [ 1158.547508][ T29] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1158.594241][T30494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.594584][T30494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.146639][T30513] netlink: 'syz.5.4454': attribute type 13 has an invalid length. [ 1159.198957][ T29] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1159.208584][T30513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.215813][T30513] bridge0: port 2(bridge_slave_1) entered listening state [ 1159.223307][T30513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.230567][T30513] bridge0: port 1(bridge_slave_0) entered listening state [ 1159.384155][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 1159.392067][ T29] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.421779][ T29] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 2 [ 1159.450836][ T29] usb 4-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 1159.460949][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.480852][ T29] usb 4-1: Product: syz [ 1159.501192][ T29] usb 4-1: Manufacturer: syz [ 1159.506858][ T29] usb 4-1: SerialNumber: syz [ 1159.581660][T30513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1159.742770][T30504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.750153][T30504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.808002][ T29] usb 4-1: USB disconnect, device number 58 [ 1159.896029][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1159.896049][ T30] audit: type=1326 audit(1772818330.132:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30541 comm="syz.5.4457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea1859c799 code=0x0 [ 1160.302199][ T5894] usb 5-1: USB disconnect, device number 31 [ 1160.930790][T30572] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1161.267197][T30582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4464'. [ 1161.409550][T30588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1161.934411][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1162.164197][ T29] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1162.319553][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 1162.382410][ T29] usb 6-1: config 0 has no interfaces? [ 1162.400179][ T29] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1162.414564][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1162.440757][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.495501][ T29] usb 6-1: config 0 descriptor?? [ 1162.630634][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1162.670542][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1162.717990][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1162.742322][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.772031][ T9] usb 4-1: config 0 descriptor?? [ 1162.817595][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1162.984244][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1163.170943][T30623] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1163.720123][T30638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.737398][T30638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.993241][T30648] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4475'. [ 1165.107745][ T10] usb 4-1: USB disconnect, device number 59 [ 1165.180069][T30708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4481'. [ 1165.258445][T30712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4482'. [ 1165.434682][T30712] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1165.652810][T30748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4481'. [ 1165.701482][T30751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1165.719327][T30714] veth0_to_bond: entered promiscuous mode [ 1165.757285][T30714] bond6: (slave macvlan3): Enslaving as an active interface with an up link [ 1165.830114][ T5894] usb 6-1: USB disconnect, device number 81 [ 1166.299007][T30772] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4486'. [ 1166.325540][T30772] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4486'. [ 1167.000386][T30789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4490'. [ 1167.096545][T30791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4490'. [ 1169.668476][T30818] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4496'. [ 1170.009343][T30820] FAULT_INJECTION: forcing a failure. [ 1170.009343][T30820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.086953][T30820] CPU: 1 UID: 0 PID: 30820 Comm: syz.5.4498 Tainted: G L syzkaller #0 PREEMPT(full) [ 1170.086989][T30820] Tainted: [L]=SOFTLOCKUP [ 1170.086998][T30820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1170.087012][T30820] Call Trace: [ 1170.087022][T30820] [ 1170.087031][T30820] dump_stack_lvl+0xe8/0x150 [ 1170.087080][T30820] should_fail_ex+0x412/0x560 [ 1170.087117][T30820] _copy_to_user+0x31/0xb0 [ 1170.087155][T30820] simple_read_from_buffer+0xe1/0x170 [ 1170.087194][T30820] proc_fail_nth_read+0x1bb/0x230 [ 1170.087231][T30820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1170.087267][T30820] ? rw_verify_area+0x2a6/0x4d0 [ 1170.087290][T30820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1170.087323][T30820] vfs_read+0x20c/0xa70 [ 1170.087345][T30820] ? fdget_pos+0x246/0x320 [ 1170.087392][T30820] ? __pfx___mutex_lock+0x10/0x10 [ 1170.087416][T30820] ? __pfx_vfs_read+0x10/0x10 [ 1170.087442][T30820] ? __fget_files+0x2a/0x420 [ 1170.087479][T30820] ? __fget_files+0x3a0/0x420 [ 1170.087511][T30820] ? __fget_files+0x2a/0x420 [ 1170.087552][T30820] ksys_read+0x150/0x270 [ 1170.087579][T30820] ? __pfx_ksys_read+0x10/0x10 [ 1170.087607][T30820] ? ksys_read+0x10/0x270 [ 1170.087635][T30820] do_syscall_64+0x14d/0xf80 [ 1170.087668][T30820] ? trace_irq_disable+0x3b/0x150 [ 1170.087703][T30820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.087727][T30820] ? clear_bhb_loop+0x40/0x90 [ 1170.087756][T30820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.087778][T30820] RIP: 0033:0x7fea1855cfce [ 1170.087800][T30820] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1170.087820][T30820] RSP: 002b:00007fea19459fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1170.087845][T30820] RAX: ffffffffffffffda RBX: 00007fea1945a6c0 RCX: 00007fea1855cfce [ 1170.087862][T30820] RDX: 000000000000000f RSI: 00007fea1945a0a0 RDI: 0000000000000004 [ 1170.087877][T30820] RBP: 00007fea1945a090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.087892][T30820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.087905][T30820] R13: 00007fea18816038 R14: 00007fea18815fa0 R15: 00007fea1893fa48 [ 1170.087941][T30820] [ 1170.994022][T30832] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1171.034074][T30832] macsec1: entered allmulticast mode [ 1171.093145][T30832] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1172.974301][ T5902] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1173.174419][ T5902] usb 7-1: Using ep0 maxpacket: 8 [ 1173.196251][ T5902] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1173.223779][ T5902] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1173.289549][ T5902] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1173.343530][ T5902] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1173.381513][ T5902] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1173.463960][ T5902] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1173.508405][ T5902] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1173.580556][ T5902] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1173.638819][ T5902] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1173.704953][ T5902] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1173.766677][ T5902] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1173.825774][ T5902] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1173.907058][ T5902] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1173.919754][T30869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4509'. [ 1174.030577][T30871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4509'. [ 1174.056753][ T5902] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1174.202553][ T5902] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1174.264312][ T5902] usb 7-1: string descriptor 0 read error: -22 [ 1174.275177][ T5902] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1174.284400][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.441353][ T5902] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1175.838472][T30908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4515'. [ 1175.911239][T30913] netlink: 'syz.4.4515': attribute type 10 has an invalid length. [ 1175.953582][T30913] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 1177.141682][ T29] usb 7-1: USB disconnect, device number 73 [ 1177.300273][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.310091][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.104180][ T29] usb 7-1: new full-speed USB device number 74 using dummy_hcd [ 1180.284219][ T29] usb 7-1: device descriptor read/64, error -71 [ 1180.544252][ T29] usb 7-1: new full-speed USB device number 75 using dummy_hcd [ 1180.724199][ T29] usb 7-1: device descriptor read/64, error -71 [ 1180.854512][ T29] usb usb7-port1: attempt power cycle [ 1180.874362][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1181.024318][ T10] usb 5-1: device descriptor read/64, error -71 [ 1181.224196][ T29] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 1181.242858][T31004] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1181.255199][ T29] usb 7-1: device descriptor read/8, error -71 [ 1181.298821][T31005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4535'. [ 1181.304817][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1181.475048][ T10] usb 5-1: device descriptor read/64, error -71 [ 1181.505876][ T29] usb 7-1: new full-speed USB device number 77 using dummy_hcd [ 1181.537099][ T29] usb 7-1: device descriptor read/8, error -71 [ 1181.614616][ T10] usb usb5-port1: attempt power cycle [ 1181.656234][ T29] usb usb7-port1: unable to enumerate USB device [ 1181.974218][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1182.026125][ T10] usb 5-1: device descriptor read/8, error -71 [ 1182.113609][T31020] fuse: Unknown parameter 'fd0x000000000000000a' [ 1182.324258][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1182.385861][ T10] usb 5-1: device descriptor read/8, error -71 [ 1182.514736][ T10] usb usb5-port1: unable to enumerate USB device [ 1183.334303][ T797] usb 7-1: new low-speed USB device number 78 using dummy_hcd [ 1183.928294][T31057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4546'. [ 1184.684275][ T797] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1184.846827][ T797] usb 6-1: Using ep0 maxpacket: 32 [ 1184.860450][ T797] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1184.895173][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.935306][ T797] usb 6-1: config 0 descriptor?? [ 1185.183682][ T797] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1185.237739][ T797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1185.302936][ T797] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1185.341788][ T797] usb 6-1: media controller created [ 1185.420640][ T797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1185.539805][ T797] az6027: usb out operation failed. (-71) [ 1185.562293][ T797] az6027: usb out operation failed. (-71) [ 1185.571102][ T797] stb0899_attach: Driver disabled by Kconfig [ 1185.578708][ T797] az6027: no front-end attached [ 1185.578708][ T797] [ 1185.588462][ T797] az6027: usb out operation failed. (-71) [ 1185.596928][ T797] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1185.627814][ T797] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input80 [ 1185.679583][ T797] dvb-usb: schedule remote query interval to 400 msecs. [ 1185.711321][ T797] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1185.768219][ T797] usb 6-1: USB disconnect, device number 82 [ 1186.002657][ T797] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1186.026651][T31139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4558'. [ 1186.189119][T31147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4558'. [ 1188.605700][ T5894] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1188.784157][ T5894] usb 7-1: Using ep0 maxpacket: 16 [ 1188.796724][ T5894] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.812517][ T5894] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.829547][ T5894] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1188.838971][ T5894] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1188.851546][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.866286][ T5894] usb 7-1: config 0 descriptor?? [ 1188.974523][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1189.100255][T31206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1189.108315][T31206] batadv_slave_0: entered promiscuous mode [ 1189.134163][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1189.143466][ T5894] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 1189.187541][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1189.199309][ T5894] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 1189.232125][ T10] usb 4-1: config 0 has no interface number 0 [ 1189.238724][ T5894] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 1189.274212][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1189.288430][ T5894] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 1189.338318][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.353901][ T5894] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 1189.385739][ T10] usb 4-1: Product: syz [ 1189.401786][ T5894] nzxt-smart2 0003:1E71:2009.0024: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 1189.419616][ T10] usb 4-1: Manufacturer: syz [ 1189.441343][ T10] usb 4-1: SerialNumber: syz [ 1189.456625][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1189.465631][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1189.503150][ T10] usb 4-1: config 0 descriptor?? [ 1189.533136][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1189.679832][ T5894] usb 7-1: USB disconnect, device number 79 [ 1189.817979][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1189.871391][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1189.898594][T31224] fido_id[31224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1191.732308][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1191.740860][ T5902] usb 4-1: USB disconnect, device number 60 [ 1191.839134][ T5902] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1191.976810][ T5902] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1192.089850][ T5902] quatech2 4-1:0.51: device disconnected [ 1192.500543][T31277] FAULT_INJECTION: forcing a failure. [ 1192.500543][T31277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1192.586355][T31277] CPU: 1 UID: 0 PID: 31277 Comm: syz.4.4578 Tainted: G L syzkaller #0 PREEMPT(full) [ 1192.586396][T31277] Tainted: [L]=SOFTLOCKUP [ 1192.586402][T31277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1192.586413][T31277] Call Trace: [ 1192.586419][T31277] [ 1192.586426][T31277] dump_stack_lvl+0xe8/0x150 [ 1192.586454][T31277] should_fail_ex+0x412/0x560 [ 1192.586508][T31277] _copy_from_user+0x2d/0xb0 [ 1192.586546][T31277] input_event_from_user+0xb1/0x290 [ 1192.586587][T31277] ? __pfx_input_event_from_user+0x10/0x10 [ 1192.586631][T31277] evdev_write+0x2c7/0x4c0 [ 1192.586666][T31277] ? __pfx_evdev_write+0x10/0x10 [ 1192.586698][T31277] ? bpf_lsm_file_permission+0x9/0x20 [ 1192.586725][T31277] ? security_file_permission+0x75/0x260 [ 1192.586757][T31277] ? rw_verify_area+0x255/0x4d0 [ 1192.586773][T31277] ? __pfx_evdev_write+0x10/0x10 [ 1192.586795][T31277] vfs_write+0x29a/0xb90 [ 1192.586818][T31277] ? __pfx_vfs_write+0x10/0x10 [ 1192.586836][T31277] ? __fget_files+0x2a/0x420 [ 1192.586860][T31277] ? __fget_files+0x2a/0x420 [ 1192.586904][T31277] ? __fget_files+0x3a0/0x420 [ 1192.586934][T31277] ? __fget_files+0x2a/0x420 [ 1192.586977][T31277] ksys_write+0x150/0x270 [ 1192.586996][T31277] ? __pfx_ksys_write+0x10/0x10 [ 1192.587021][T31277] do_syscall_64+0x14d/0xf80 [ 1192.587046][T31277] ? trace_irq_disable+0x3b/0x150 [ 1192.587071][T31277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.587107][T31277] ? clear_bhb_loop+0x40/0x90 [ 1192.587133][T31277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.587155][T31277] RIP: 0033:0x7f95e9d9c799 [ 1192.587177][T31277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.587191][T31277] RSP: 002b:00007f95ead3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1192.587207][T31277] RAX: ffffffffffffffda RBX: 00007f95ea015fa0 RCX: 00007f95e9d9c799 [ 1192.587219][T31277] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 1192.587230][T31277] RBP: 00007f95ead3b090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.587240][T31277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1192.587249][T31277] R13: 00007f95ea016038 R14: 00007f95ea015fa0 R15: 00007f95ea13fa48 [ 1192.587288][T31277] [ 1192.901134][T31285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4580'. [ 1192.901157][T31285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4580'. [ 1192.913531][T31285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4580'. [ 1193.331549][T31289] netlink: 'syz.2.4581': attribute type 1 has an invalid length. [ 1194.870983][T31298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4586'. [ 1196.039509][T31330] FAULT_INJECTION: forcing a failure. [ 1196.039509][T31330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1196.118517][T31330] CPU: 0 UID: 0 PID: 31330 Comm: syz.4.4590 Tainted: G L syzkaller #0 PREEMPT(full) [ 1196.118544][T31330] Tainted: [L]=SOFTLOCKUP [ 1196.118550][T31330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1196.118560][T31330] Call Trace: [ 1196.118567][T31330] [ 1196.118574][T31330] dump_stack_lvl+0xe8/0x150 [ 1196.118601][T31330] should_fail_ex+0x412/0x560 [ 1196.118625][T31330] _copy_from_user+0x2d/0xb0 [ 1196.118651][T31330] ___sys_sendmsg+0x1c6/0x360 [ 1196.118673][T31330] ? __pfx____sys_sendmsg+0x10/0x10 [ 1196.118709][T31330] ? lockdep_hardirqs_on+0x7a/0x110 [ 1196.118751][T31330] __sys_sendmmsg+0x27c/0x4e0 [ 1196.118770][T31330] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1196.118784][T31330] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1196.118816][T31330] ? ksys_write+0x242/0x270 [ 1196.118835][T31330] ? __pfx_ksys_write+0x10/0x10 [ 1196.118857][T31330] __x64_sys_sendmmsg+0xa0/0xc0 [ 1196.118874][T31330] do_syscall_64+0x14d/0xf80 [ 1196.118897][T31330] ? trace_irq_disable+0x3b/0x150 [ 1196.118921][T31330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.118936][T31330] ? clear_bhb_loop+0x40/0x90 [ 1196.118955][T31330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.118971][T31330] RIP: 0033:0x7f95e9d9c799 [ 1196.118987][T31330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1196.119000][T31330] RSP: 002b:00007f95ead3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1196.119018][T31330] RAX: ffffffffffffffda RBX: 00007f95ea015fa0 RCX: 00007f95e9d9c799 [ 1196.119030][T31330] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 1196.119040][T31330] RBP: 00007f95ead3b090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.119050][T31330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1196.119059][T31330] R13: 00007f95ea016038 R14: 00007f95ea015fa0 R15: 00007f95ea13fa48 [ 1196.119083][T31330] [ 1197.652539][T31360] netlink: 'syz.4.4594': attribute type 10 has an invalid length. [ 1198.600567][T31375] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4597'. [ 1198.716845][T31375] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4597'. [ 1202.401712][T31409] syzkaller0: entered promiscuous mode [ 1202.407721][T31409] syzkaller0: entered allmulticast mode [ 1203.060597][T31422] FAULT_INJECTION: forcing a failure. [ 1203.060597][T31422] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.090511][T31422] CPU: 0 UID: 0 PID: 31422 Comm: syz.6.4606 Tainted: G L syzkaller #0 PREEMPT(full) [ 1203.090537][T31422] Tainted: [L]=SOFTLOCKUP [ 1203.090544][T31422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1203.090554][T31422] Call Trace: [ 1203.090561][T31422] [ 1203.090569][T31422] dump_stack_lvl+0xe8/0x150 [ 1203.090598][T31422] should_fail_ex+0x412/0x560 [ 1203.090625][T31422] should_failslab+0xa8/0x100 [ 1203.090650][T31422] __kmalloc_cache_noprof+0x88/0x660 [ 1203.090675][T31422] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1203.090700][T31422] ? sctp_add_bind_addr+0x8c/0x370 [ 1203.090725][T31422] sctp_add_bind_addr+0x8c/0x370 [ 1203.090748][T31422] sctp_copy_local_addr_list+0x314/0x4f0 [ 1203.090770][T31422] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1203.090790][T31422] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1203.090809][T31422] ? sctp_association_new+0x1894/0x25e0 [ 1203.090836][T31422] ? sctp_v4_is_any+0x35/0x60 [ 1203.090855][T31422] ? sctp_copy_one_addr+0x93/0x360 [ 1203.090877][T31422] sctp_bind_addr_copy+0xb3/0x3c0 [ 1203.090897][T31422] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1203.090917][T31422] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1203.090942][T31422] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1203.090967][T31422] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1203.090991][T31422] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1203.091013][T31422] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1203.091037][T31422] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1203.091059][T31422] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1203.091079][T31422] sctp_sendmsg+0x1528/0x2c10 [ 1203.091112][T31422] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1203.091137][T31422] ? aa_sk_perm+0x6d5/0x900 [ 1203.091161][T31422] ? __pfx_aa_sk_perm+0x10/0x10 [ 1203.091182][T31422] ? sock_rps_record_flow+0x19/0x400 [ 1203.091201][T31422] ? inet_sendmsg+0x2f4/0x370 [ 1203.091215][T31422] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1203.091234][T31422] ____sys_sendmsg+0x80a/0x9f0 [ 1203.091265][T31422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1203.091296][T31422] ? import_iovec+0x73/0xa0 [ 1203.091323][T31422] ___sys_sendmsg+0x2a5/0x360 [ 1203.091341][T31422] ? __pfx____sys_sendmsg+0x10/0x10 [ 1203.091382][T31422] ? __fget_files+0x2a/0x420 [ 1203.091404][T31422] ? __fget_files+0x3a0/0x420 [ 1203.091434][T31422] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1203.091451][T31422] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1203.091473][T31422] ? __pfx_ksys_write+0x10/0x10 [ 1203.091497][T31422] do_syscall_64+0x14d/0xf80 [ 1203.091521][T31422] ? trace_irq_disable+0x3b/0x150 [ 1203.091543][T31422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.091559][T31422] ? clear_bhb_loop+0x40/0x90 [ 1203.091577][T31422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.091593][T31422] RIP: 0033:0x7fc17b19c799 [ 1203.091608][T31422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.091622][T31422] RSP: 002b:00007fc17c023028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1203.091639][T31422] RAX: ffffffffffffffda RBX: 00007fc17b415fa0 RCX: 00007fc17b19c799 [ 1203.091650][T31422] RDX: 0000000000000815 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1203.091661][T31422] RBP: 00007fc17c023090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.091676][T31422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1203.091685][T31422] R13: 00007fc17b416038 R14: 00007fc17b415fa0 R15: 00007fc17b53fa48 [ 1203.091709][T31422] [ 1203.614276][ T797] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1203.867368][ T797] usb 4-1: device descriptor read/64, error -71 [ 1203.945799][T31426] syzkaller0: entered promiscuous mode [ 1203.997422][T31431] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4609'. [ 1204.020585][T31426] syzkaller0: entered allmulticast mode [ 1204.175059][ T797] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1204.335765][ T797] usb 4-1: device descriptor read/64, error -71 [ 1204.484607][ T797] usb usb4-port1: attempt power cycle [ 1204.669610][T31445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4613'. [ 1204.847670][T31446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4613'. [ 1204.884379][ T797] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1204.951627][T31449] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1204.961412][ T797] usb 4-1: device descriptor read/8, error -71 [ 1204.974659][T31449] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1204.983921][T31449] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1204.996162][T31449] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1205.033438][T31449] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1205.264157][ T797] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1205.332561][ T797] usb 4-1: device descriptor read/8, error -71 [ 1205.504637][ T797] usb usb4-port1: unable to enumerate USB device [ 1206.893823][T31459] chnl_net:caif_netlink_parms(): no params data found [ 1207.144970][ T5833] Bluetooth: hci3: command tx timeout [ 1207.256983][T31527] syzkaller0: entered promiscuous mode [ 1207.852316][T31459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.884368][T31459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.924195][T31459] bridge_slave_0: entered allmulticast mode [ 1207.981582][T31459] bridge_slave_0: entered promiscuous mode [ 1208.071958][T31459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.139110][T31459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.193454][T31459] bridge_slave_1: entered allmulticast mode [ 1208.263259][T31459] bridge_slave_1: entered promiscuous mode [ 1208.723954][T31626] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4622'. [ 1208.762827][T31608] syzkaller0: entered promiscuous mode [ 1208.783145][T31608] syzkaller0: entered allmulticast mode [ 1209.224263][ T5833] Bluetooth: hci3: command tx timeout [ 1211.296279][ T5833] Bluetooth: hci3: command tx timeout [ 1213.004305][ T797] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 1213.184788][ T797] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.207600][ T797] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1213.232764][ T797] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1213.244275][ T797] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1213.254745][ T797] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1213.306424][ T797] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1213.328734][ T797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1213.337025][ T797] usb 7-1: Product: syz [ 1213.341240][ T797] usb 7-1: Manufacturer: syz [ 1213.345981][ T797] usb 7-1: SerialNumber: syz [ 1213.354863][ T797] usb 7-1: config 0 descriptor?? [ 1213.379208][ T5833] Bluetooth: hci3: command tx timeout [ 1213.583161][ T797] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1213.590280][ T797] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1213.930174][T31674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.063446][T31674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.094707][ T797] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1214.103234][ T797] radio-si470x 7-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 1214.117094][ T797] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 1214.898012][T31459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.023655][T31459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.177699][T31459] team0: Port device team_slave_0 added [ 1215.222178][T31459] team0: Port device team_slave_1 added [ 1215.309735][T31459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.328035][T31459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.376694][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1215.384138][T31459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.409220][T31459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.444097][T31459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.515095][T31459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.549588][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1215.611336][T31459] hsr_slave_0: entered promiscuous mode [ 1215.626209][T31459] hsr_slave_1: entered promiscuous mode [ 1215.638528][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.662204][ T10] usb 4-1: config 0 descriptor?? [ 1215.685642][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1215.774438][ T5894] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1215.937941][ T5894] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1215.953568][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1215.968574][ T5894] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1215.980206][ T5894] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1215.988533][ T5894] usb 5-1: Manufacturer: syz [ 1216.004721][ T5894] usb 5-1: config 0 descriptor?? [ 1216.082319][ T5894] rc_core: IR keymap rc-hauppauge not found [ 1216.095747][ T5894] Registered IR keymap rc-empty [ 1216.110498][ T5894] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1216.121944][T31459] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1216.142594][ T5894] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input81 [ 1216.203225][T31459] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1216.215577][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 1216.231660][T31731] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4632'. [ 1216.242646][T31459] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1216.265681][ T797] usb 5-1: USB disconnect, device number 36 [ 1216.283217][T31459] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1216.419083][T31459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.442229][T31459] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.457837][T12026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.465123][T12026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.483058][T20772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.490344][T20772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.590547][T31459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.647496][T31459] veth0_vlan: entered promiscuous mode [ 1216.677128][T31459] veth1_vlan: entered promiscuous mode [ 1216.711595][T31459] veth0_macvtap: entered promiscuous mode [ 1216.723185][T31459] veth1_macvtap: entered promiscuous mode [ 1216.745251][T31459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1216.764141][T31459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1216.779655][T10011] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.790755][T10011] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.802001][T10011] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.812028][T10011] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.347393][T10011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.391703][T10011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.517928][T31898] syzkaller1: entered promiscuous mode [ 1217.523589][T31898] syzkaller1: entered allmulticast mode [ 1217.657209][T12035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.673069][T12035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.886693][ T797] usb 4-1: USB disconnect, device number 65 [ 1218.272776][ T30] audit: type=1326 audit(1772818388.482:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.7.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4939c799 code=0x7ffc0000 [ 1218.470533][ T30] audit: type=1326 audit(1772818388.492:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.7.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4939c799 code=0x7ffc0000 [ 1218.604394][ T30] audit: type=1326 audit(1772818388.542:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.7.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4e4939c799 code=0x7ffc0000 [ 1218.738370][ T30] audit: type=1326 audit(1772818388.542:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.7.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4939c799 code=0x7ffc0000 [ 1218.818349][ T30] audit: type=1326 audit(1772818388.542:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.7.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4e4939c799 code=0x7ffc0000 [ 1218.924425][ T30] audit: type=1326 audit(1772818388.542:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.7.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4939c799 code=0x7ffc0000 [ 1219.024275][ T1208] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 1219.057337][ T30] audit: type=1326 audit(1772818388.542:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.7.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e4939c799 code=0x7ffc0000 [ 1219.137161][ T30] audit: type=1326 audit(1772818388.542:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.7.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4939c799 code=0x7ffc0000 [ 1219.176074][ T1208] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.199329][ T1208] usb 4-1: config 0 has no interfaces? [ 1219.217386][ T30] audit: type=1326 audit(1772818388.542:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.7.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4e4939c799 code=0x7ffc0000 [ 1219.242572][ T1208] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1219.251930][ T797] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1219.298912][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.316957][ T30] audit: type=1326 audit(1772818388.542:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.7.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4939c799 code=0x7ffc0000 [ 1219.349580][ T1208] usb 4-1: config 0 descriptor?? [ 1219.404158][ T797] usb 5-1: Using ep0 maxpacket: 32 [ 1219.413759][ T797] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1219.433133][ T797] usb 5-1: config 0 has no interface number 0 [ 1219.450758][ T797] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1219.489911][ T797] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1219.519731][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.534149][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.541452][ C1] bridge0: topology change detected, propagating [ 1219.548236][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.555516][ C1] bridge0: topology change detected, propagating [ 1219.583615][ T5909] usb 4-1: USB disconnect, device number 66 [ 1219.608284][ T797] usb 5-1: Product: syz [ 1219.626309][ T797] usb 5-1: Manufacturer: syz [ 1219.637240][ T797] usb 5-1: SerialNumber: syz [ 1219.668546][ T797] usb 5-1: config 0 descriptor?? [ 1219.903566][ T5909] usb 7-1: USB disconnect, device number 80 [ 1220.323236][ T797] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1220.354904][ T797] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1221.669190][T32006] snd_virmidi snd_virmidi.0: control 1:9:195::53367 is already present [ 1221.802329][ T797] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 1221.842161][ T797] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 1221.872148][ T797] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 1221.901777][ T797] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1221.916352][ T797] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1221.955675][ T797] usb 5-1: USB disconnect, device number 37 [ 1222.304220][ T797] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1222.675160][ T797] usb 7-1: Using ep0 maxpacket: 8 [ 1222.685389][T32032] netlink: 496 bytes leftover after parsing attributes in process `syz.2.4658'. [ 1222.748813][T32037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4657'. [ 1223.052121][T32040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4657'. [ 1223.116427][ T797] usb 7-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1223.151529][ T797] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.220013][ T797] usb 7-1: config 0 descriptor?? [ 1223.310141][ T797] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1223.317098][ T797] pwc: Warning: more than 1 configuration available. [ 1224.304584][ T5902] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1224.500268][ T5902] usb 8-1: Using ep0 maxpacket: 8 [ 1224.533090][ T5902] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1224.594836][ T5902] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1224.691460][ T5902] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1224.704698][ T5902] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1224.776958][ T5902] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1224.854957][ T5902] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1224.929478][ T5902] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1224.963784][ T5902] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1225.034215][ T5902] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1225.081244][ T5902] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1225.178782][ T5902] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1225.208964][ T5902] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1225.257134][ T5902] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1225.317546][ T5902] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1225.334417][ T5902] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1225.366379][ T5902] usb 8-1: string descriptor 0 read error: -22 [ 1225.396434][ T5902] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1225.413536][ T5902] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.529786][ T5902] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1226.664463][ T5902] usb 8-1: USB disconnect, device number 2 [ 1226.780023][ T797] pwc: Failed to set LED on/off time (-71) [ 1226.786410][ T797] pwc: send_video_command error -71 [ 1226.831658][ T797] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1226.883207][ T797] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1226.927557][ T797] usb 7-1: USB disconnect, device number 81 [ 1227.400133][T32115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4666'. [ 1228.274379][T32131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4673'. [ 1228.434396][T32135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.518770][T32135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.810324][T32146] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4676'. [ 1228.835966][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1228.835990][ T30] audit: type=1326 audit(1772818399.012:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32134 comm="syz.6.4675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc17b19c799 code=0x0 [ 1229.544104][ T5902] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 1229.684166][ T1208] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1229.707335][ T5902] usb 7-1: config 8 has an invalid interface number: 80 but max is 0 [ 1229.727508][ T5902] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.768577][ T5902] usb 7-1: config 8 has no interface number 0 [ 1229.798589][ T5902] usb 7-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1229.831320][ T5902] usb 7-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1229.874912][ T1208] usb 3-1: Using ep0 maxpacket: 8 [ 1229.886509][ T5902] usb 7-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 1229.919817][ T1208] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1229.960225][ T1208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1229.970416][ T5902] usb 7-1: config 8 interface 80 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1230.015929][ T5902] usb 7-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 1230.048940][ T1208] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1230.098148][ T5902] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1230.121322][ T1208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1230.154738][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.199581][ T5902] usb 7-1: NFC: intf ffff88807d1a1000 id ffffffff8f1d1b80 [ 1230.222718][ T1208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1230.308919][ T1208] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1230.340349][ T1208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1230.390736][ T1208] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1230.426291][ T1208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1230.453089][ T1208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1230.501363][ T1208] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1230.521115][T32162] netlink: 182 bytes leftover after parsing attributes in process `syz.6.4678'. [ 1230.546726][ T1208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1230.583421][T32162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.616017][ T1208] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1230.645986][T32162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.708497][ T1208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1230.751290][ T1208] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1230.780730][ T1208] usb 3-1: string descriptor 0 read error: -22 [ 1230.787640][ T1208] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1230.797377][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.846345][ T1208] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1231.371185][ T1208] usb 7-1: USB disconnect, device number 82 [ 1231.663432][ T1208] usb 3-1: USB disconnect, device number 17 [ 1233.046626][T32231] netlink: 89 bytes leftover after parsing attributes in process `syz.7.4687'. [ 1233.441007][T32242] netlink: 'syz.3.4690': attribute type 4 has an invalid length. [ 1233.684207][ T5894] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1233.926706][ T5894] usb 8-1: Using ep0 maxpacket: 16 [ 1233.962529][ T5894] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1233.972740][ T5894] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.981202][ T5894] usb 8-1: Product: syz [ 1233.986537][ T5894] usb 8-1: Manufacturer: syz [ 1233.991290][ T5894] usb 8-1: SerialNumber: syz [ 1234.002181][ T5894] usb 8-1: config 0 descriptor?? [ 1234.415498][T32258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4693'. [ 1234.699211][T32261] trusted_key: encrypted_key: master key parameter 'u0' is invalid [ 1234.734403][ T5894] dvb_usb_dtv5100 8-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1235.079344][ T5902] usb 8-1: USB disconnect, device number 3 [ 1235.234899][ T5894] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1235.414228][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 1235.436323][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1235.448958][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1235.460900][ T5894] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1235.464349][ T5902] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1235.474573][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1235.497728][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1235.521820][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1235.531727][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1235.544982][ T5894] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1235.563510][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1235.578327][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1235.595764][ T5894] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1235.603670][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1235.630410][ T5894] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1235.643102][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1235.654811][ T5894] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1235.684993][ T5894] usb 3-1: string descriptor 0 read error: -22 [ 1235.691615][ T5894] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1235.704278][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 1235.725316][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.761697][ T5894] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1235.837983][ T5902] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1235.871325][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.901737][ T5902] usb 4-1: Product: syz [ 1235.913508][ T5902] usb 4-1: Manufacturer: syz [ 1235.924232][ T5902] usb 4-1: SerialNumber: syz [ 1235.943146][ T5902] usb 4-1: config 0 descriptor?? [ 1236.203632][ T5902] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1236.330943][ T5894] usb 3-1: USB disconnect, device number 18 [ 1236.409253][ T5902] usb write operation failed. (-71) [ 1236.431527][ T5902] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1236.443240][ T5902] dvbdev: DVB: registering new adapter (Terratec H7) [ 1236.450892][ T5902] usb 4-1: media controller created [ 1236.457827][ T5902] usb read operation failed. (-71) [ 1236.463863][ T5902] usb write operation failed. (-71) [ 1236.479129][ T5902] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1236.528660][ T5902] usb 4-1: USB disconnect, device number 67 [ 1236.693215][ T30] audit: type=1326 audit(1772818406.922:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32321 comm="syz.4.4700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1236.736745][ T30] audit: type=1326 audit(1772818406.962:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32321 comm="syz.4.4700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1236.918479][ T30] audit: type=1326 audit(1772818406.962:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32321 comm="syz.4.4700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1237.076369][ T30] audit: type=1326 audit(1772818406.962:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32321 comm="syz.4.4700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1237.168756][T32337] FAULT_INJECTION: forcing a failure. [ 1237.168756][T32337] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.204092][T32337] CPU: 1 UID: 0 PID: 32337 Comm: syz.3.4702 Tainted: G L syzkaller #0 PREEMPT(full) [ 1237.204126][T32337] Tainted: [L]=SOFTLOCKUP [ 1237.204135][T32337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1237.204148][T32337] Call Trace: [ 1237.204157][T32337] [ 1237.204169][T32337] dump_stack_lvl+0xe8/0x150 [ 1237.204204][T32337] should_fail_ex+0x412/0x560 [ 1237.204228][T32337] should_failslab+0xa8/0x100 [ 1237.204251][T32337] __kmalloc_cache_noprof+0x88/0x660 [ 1237.204301][T32337] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1237.204333][T32337] ? sctp_add_bind_addr+0x8c/0x370 [ 1237.204368][T32337] sctp_add_bind_addr+0x8c/0x370 [ 1237.204405][T32337] sctp_copy_local_addr_list+0x314/0x4f0 [ 1237.204453][T32337] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1237.204482][T32337] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1237.204508][T32337] ? sctp_association_new+0x1894/0x25e0 [ 1237.204546][T32337] ? sctp_v4_is_any+0x35/0x60 [ 1237.204573][T32337] ? sctp_copy_one_addr+0x93/0x360 [ 1237.204604][T32337] sctp_bind_addr_copy+0xb3/0x3c0 [ 1237.204632][T32337] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1237.204662][T32337] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1237.204700][T32337] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1237.204735][T32337] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1237.204770][T32337] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1237.204808][T32337] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1237.204877][T32337] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1237.204906][T32337] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1237.204935][T32337] sctp_sendmsg+0x1528/0x2c10 [ 1237.204983][T32337] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1237.205019][T32337] ? aa_sk_perm+0x6d5/0x900 [ 1237.205055][T32337] ? __pfx_aa_sk_perm+0x10/0x10 [ 1237.205086][T32337] ? sock_rps_record_flow+0x19/0x400 [ 1237.205113][T32337] ? inet_sendmsg+0x2f4/0x370 [ 1237.205134][T32337] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1237.205163][T32337] ____sys_sendmsg+0x80a/0x9f0 [ 1237.205208][T32337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1237.205253][T32337] ? import_iovec+0x73/0xa0 [ 1237.205292][T32337] ___sys_sendmsg+0x2a5/0x360 [ 1237.205320][T32337] ? __pfx____sys_sendmsg+0x10/0x10 [ 1237.205379][T32337] ? __fget_files+0x2a/0x420 [ 1237.205411][T32337] ? __fget_files+0x3a0/0x420 [ 1237.205456][T32337] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1237.205482][T32337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1237.205515][T32337] ? __pfx_ksys_write+0x10/0x10 [ 1237.205552][T32337] do_syscall_64+0x14d/0xf80 [ 1237.205587][T32337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.205611][T32337] ? clear_bhb_loop+0x40/0x90 [ 1237.205638][T32337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.205660][T32337] RIP: 0033:0x7f4742b9c799 [ 1237.205682][T32337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.205703][T32337] RSP: 002b:00007f4743a08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1237.205726][T32337] RAX: ffffffffffffffda RBX: 00007f4742e15fa0 RCX: 00007f4742b9c799 [ 1237.205742][T32337] RDX: 0000000000000815 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1237.205756][T32337] RBP: 00007f4743a08090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.205776][T32337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1237.205785][T32337] R13: 00007f4742e16038 R14: 00007f4742e15fa0 R15: 00007f4742f3fa48 [ 1237.205809][T32337] [ 1237.704100][ T30] audit: type=1326 audit(1772818406.982:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32321 comm="syz.4.4700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1237.730742][ T30] audit: type=1326 audit(1772818406.982:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32321 comm="syz.4.4700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1237.809234][ T30] audit: type=1326 audit(1772818406.982:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32321 comm="syz.4.4700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1237.908718][T32341] netlink: 'syz.3.4703': attribute type 7 has an invalid length. [ 1237.951037][ T30] audit: type=1326 audit(1772818406.982:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32321 comm="syz.4.4700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1238.050831][ T30] audit: type=1326 audit(1772818407.012:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32314 comm="syz.7.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4939c799 code=0x7ffc0000 [ 1238.204431][ T30] audit: type=1326 audit(1772818407.012:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32314 comm="syz.7.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f4e4939c799 code=0x7ffc0000 [ 1238.763532][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.772937][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.494239][ T5902] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1239.600121][T32355] syz.3.4704 (32355): drop_caches: 2 [ 1239.692398][ T5902] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1239.736445][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.782479][ T5902] usb 5-1: config 0 descriptor?? [ 1239.816802][ T5902] cp210x 5-1:0.0: cp210x converter detected [ 1239.829860][T32353] syz.3.4704 (32353): drop_caches: 2 [ 1240.239769][ T5902] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1240.440017][ T5894] usb 5-1: USB disconnect, device number 38 [ 1240.462385][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1240.507230][ T5894] cp210x 5-1:0.0: device disconnected [ 1240.980390][T32412] trusted_key: encrypted_key: hex blob is missing [ 1241.064934][T32414] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1241.503143][T32418] fuse: Unknown parameter '0x000000000000000e' [ 1241.555554][ T1208] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1241.734382][ T1208] usb 4-1: Using ep0 maxpacket: 32 [ 1241.774183][ T1208] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1241.808509][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.850363][ T1208] usb 4-1: Product: syz [ 1241.881530][ T1208] usb 4-1: Manufacturer: syz [ 1241.900323][ T1208] usb 4-1: SerialNumber: syz [ 1241.946199][ T1208] usb 4-1: config 0 descriptor?? [ 1241.986987][ T1208] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1243.727537][T32459] kvm: kvm [32456]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000081 [ 1243.741198][T32459] kvm: kvm [32456]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6800 [ 1243.757226][T32459] kvm: kvm [32456]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100001081 [ 1244.189406][T32471] program syz.4.4728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1244.199970][ T1208] gspca_ov534_9: sccb_write failed [ 1244.612798][T32428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.639946][T32428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.861752][T32428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.892024][T32428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.914752][ T1208] gspca_ov534_9: reg_w failed -110 [ 1245.206777][ T1208] gspca_ov534_9: Unknown sensor 0000 [ 1245.206888][ T1208] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1245.266553][ T1208] usb 4-1: USB disconnect, device number 68 [ 1246.702194][T32507] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4732'. [ 1246.821941][T32507] bridge_slave_1: left promiscuous mode [ 1246.857467][T32507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.890519][T32507] bridge_slave_0: left allmulticast mode [ 1246.903829][T32507] bridge_slave_0: left promiscuous mode [ 1246.918371][T32507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.478027][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1248.478061][ T30] audit: type=1326 audit(1772818418.712:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32534 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1248.511209][ T30] audit: type=1326 audit(1772818418.742:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32534 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1248.535532][ T30] audit: type=1326 audit(1772818418.772:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32534 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1248.562999][ T30] audit: type=1326 audit(1772818418.772:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32534 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1248.629187][ T30] audit: type=1326 audit(1772818418.772:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32534 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1248.654115][ T30] audit: type=1326 audit(1772818418.792:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32534 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1248.706525][ T30] audit: type=1326 audit(1772818418.792:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32534 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1248.730745][ T30] audit: type=1326 audit(1772818418.792:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32534 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1248.758324][ T30] audit: type=1326 audit(1772818418.822:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32534 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1248.784527][ T30] audit: type=1326 audit(1772818418.822:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32534 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e9d9c799 code=0x7ffc0000 [ 1248.814536][ T797] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1248.944144][ T29] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1248.967988][ T797] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.985947][ T797] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.000909][ T797] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1249.010775][ T797] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1249.020683][ T797] usb 8-1: Manufacturer: syz [ 1249.040543][ T797] usb 8-1: config 0 descriptor?? [ 1249.095300][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 1249.109916][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1249.132176][T32555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4742'. [ 1249.153614][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1249.175997][ T29] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1249.185452][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.201518][ T29] usb 5-1: Product: syz [ 1249.213937][ T29] usb 5-1: Manufacturer: syz [ 1249.224243][ T29] usb 5-1: SerialNumber: syz [ 1249.237981][ T29] usb 5-1: config 0 descriptor?? [ 1249.291528][ T29] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1249.302314][T32558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4742'. [ 1249.311768][ T29] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1249.395111][ T797] usbhid 8-1:0.0: can't add hid device: -71 [ 1249.401290][ T797] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1249.439659][ T797] usb 8-1: USB disconnect, device number 4 [ 1249.913814][ T29] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1249.930356][ T29] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1250.588683][ T29] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1250.626478][ T29] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1250.652006][ T29] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1251.080199][ T29] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1251.108980][ T29] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1251.164229][ T29] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1251.217983][ T29] usb 5-1: USB disconnect, device number 39 [ 1251.874187][ T5894] usb 7-1: new full-speed USB device number 83 using dummy_hcd [ 1251.985021][ T9] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1252.024212][ T5894] usb 7-1: device descriptor read/64, error -71 [ 1252.159090][ T9] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 1252.169300][ T9] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.182239][ T9] usb 4-1: config 8 has no interface number 0 [ 1252.193123][ T9] usb 4-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1252.207185][ T9] usb 4-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1252.220134][ T9] usb 4-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 1252.234922][ T9] usb 4-1: config 8 interface 80 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1252.265512][ T9] usb 4-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 1252.282988][ T5894] usb 7-1: new full-speed USB device number 84 using dummy_hcd [ 1252.305513][ T9] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1252.330879][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.382328][ T9] usb 4-1: NFC: intf ffff888056289000 id ffffffff8f1d1b80 [ 1252.394317][ T1208] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1252.424583][ T5894] usb 7-1: device descriptor read/64, error -71 [ 1252.495909][T32665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4759'. [ 1252.557508][ T5894] usb usb7-port1: attempt power cycle [ 1252.565933][ T1208] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1252.592523][ T1208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.617219][ T1208] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1252.627038][T32645] netlink: 182 bytes leftover after parsing attributes in process `syz.3.4755'. [ 1252.640009][ T1208] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1252.650212][ T1208] usb 5-1: Manufacturer: syz [ 1252.663013][ T1208] usb 5-1: config 0 descriptor?? [ 1252.681272][T32669] fuse: Bad value for 'fd' [ 1252.744318][ T1208] rc_core: IR keymap rc-hauppauge not found [ 1252.750633][ T1208] Registered IR keymap rc-empty [ 1252.763346][ T1208] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1252.781762][ T1208] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input82 [ 1252.912813][ T797] usb 5-1: USB disconnect, device number 40 [ 1252.924267][ C0] igorplugusb 5-1:0.0: submit urb failed: -19 [ 1252.931463][ T5894] usb 7-1: new full-speed USB device number 85 using dummy_hcd [ 1252.973638][ T5894] usb 7-1: device descriptor read/8, error -71 [ 1253.208763][T32704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4763'. [ 1253.241688][ T797] usb 4-1: USB disconnect, device number 69 [ 1253.245402][ T1208] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1253.303330][ T5894] usb 7-1: new full-speed USB device number 86 using dummy_hcd [ 1253.345667][T32712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4763'. [ 1253.427500][ T5894] usb 7-1: device descriptor read/8, error -71 [ 1253.566557][ T5894] usb usb7-port1: unable to enumerate USB device [ 1253.596576][ T1208] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1253.609310][ T1208] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1253.624091][ T1208] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1253.661178][ T1208] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1253.676938][ T1208] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.688114][ T1208] usb 8-1: Product: syz [ 1253.692942][ T1208] usb 8-1: Manufacturer: syz [ 1253.700098][ T1208] usb 8-1: SerialNumber: syz [ 1253.720570][ T1208] usb 8-1: config 0 descriptor?? [ 1253.739397][T32688] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1253.774114][ T797] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1253.989247][ T797] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x86 has invalid maxpacket 5632, setting to 1024 [ 1254.072771][ T797] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1254.183521][ T797] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1254.212918][T32733] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1254.232683][ T797] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1254.297484][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.415275][ T797] usb 4-1: Product: syz [ 1254.435113][ T797] usb 4-1: Manufacturer: syz [ 1254.520102][ T797] usb 4-1: SerialNumber: syz [ 1254.798210][T32716] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1255.504223][ T797] cdc_ncm 4-1:1.0: bind() failure [ 1255.603935][ T797] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1255.650672][ T797] cdc_ncm 4-1:1.1: bind() failure [ 1255.726761][ T797] usb 4-1: USB disconnect, device number 70 [ 1256.387881][ T304] FAULT_INJECTION: forcing a failure. [ 1256.387881][ T304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1256.414909][ T304] CPU: 0 UID: 0 PID: 304 Comm: syz.6.4772 Tainted: G L syzkaller #0 PREEMPT(full) [ 1256.414944][ T304] Tainted: [L]=SOFTLOCKUP [ 1256.414953][ T304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1256.414968][ T304] Call Trace: [ 1256.414978][ T304] [ 1256.414988][ T304] dump_stack_lvl+0xe8/0x150 [ 1256.415026][ T304] should_fail_ex+0x412/0x560 [ 1256.415063][ T304] _copy_from_user+0x2d/0xb0 [ 1256.415100][ T304] input_event_from_user+0xb1/0x290 [ 1256.415135][ T304] ? __pfx_input_event_from_user+0x10/0x10 [ 1256.415172][ T304] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 1256.415210][ T304] evdev_write+0x2c7/0x4c0 [ 1256.415256][ T304] ? __pfx_evdev_write+0x10/0x10 [ 1256.415287][ T304] ? bpf_lsm_file_permission+0x9/0x20 [ 1256.415315][ T304] ? security_file_permission+0x75/0x260 [ 1256.415341][ T304] ? rw_verify_area+0x255/0x4d0 [ 1256.415363][ T304] ? __pfx_evdev_write+0x10/0x10 [ 1256.415395][ T304] vfs_write+0x29a/0xb90 [ 1256.415429][ T304] ? __pfx_vfs_write+0x10/0x10 [ 1256.415455][ T304] ? __fget_files+0x2a/0x420 [ 1256.415491][ T304] ? __fget_files+0x2a/0x420 [ 1256.415521][ T304] ? __fget_files+0x3a0/0x420 [ 1256.415553][ T304] ? __fget_files+0x2a/0x420 [ 1256.415594][ T304] ksys_write+0x150/0x270 [ 1256.415621][ T304] ? __pfx_ksys_write+0x10/0x10 [ 1256.415657][ T304] do_syscall_64+0x14d/0xf80 [ 1256.415691][ T304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.415714][ T304] ? clear_bhb_loop+0x40/0x90 [ 1256.415743][ T304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.415766][ T304] RIP: 0033:0x7fc17b19c799 [ 1256.415787][ T304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.415806][ T304] RSP: 002b:00007fc17c023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1256.415830][ T304] RAX: ffffffffffffffda RBX: 00007fc17b415fa0 RCX: 00007fc17b19c799 [ 1256.415847][ T304] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 1256.415863][ T304] RBP: 00007fc17c023090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.415877][ T304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1256.415891][ T304] R13: 00007fc17b416038 R14: 00007fc17b415fa0 R15: 00007fc17b53fa48 [ 1256.415926][ T304] [ 1256.618213][ T311] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4774'. [ 1256.774109][ T5902] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1256.903490][ T313] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4775'. [ 1256.904244][ T797] usb 8-1: USB disconnect, device number 5 [ 1256.994278][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 1257.002147][ T5902] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1257.010453][ T5902] usb 5-1: config 0 has no interface number 0 [ 1257.076405][ T5902] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1257.114268][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.122336][ T5902] usb 5-1: Product: syz [ 1257.139999][ T5902] usb 5-1: Manufacturer: syz [ 1257.149704][ T5902] usb 5-1: SerialNumber: syz [ 1257.176780][ T5902] usb 5-1: config 0 descriptor?? [ 1257.244141][ T1208] usb 7-1: new full-speed USB device number 87 using dummy_hcd [ 1257.423799][ T350] netlink: 45 bytes leftover after parsing attributes in process `syz.3.4779'. [ 1257.438099][ T1208] usb 7-1: config 8 has an invalid interface number: 80 but max is 0 [ 1257.490695][ T1208] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.532673][ T5902] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1257.550916][ T5902] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1257.566807][ T5902] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1257.582614][ T1208] usb 7-1: config 8 has no interface number 0 [ 1257.601632][ T1208] usb 7-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1257.643299][ T5902] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1257.673207][ T1208] usb 7-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1257.703252][ T5902] usb 5-1: USB disconnect, device number 41 [ 1257.747746][ T363] netlink: 'syz.4.4781': attribute type 8 has an invalid length. [ 1257.789842][ T363] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4781'. [ 1257.807726][ T1208] usb 7-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 1257.832518][ T363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4781'. [ 1257.868311][ T1208] usb 7-1: config 8 interface 80 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1257.909497][ T1208] usb 7-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 1258.011351][ T1208] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1258.056503][ T1208] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.112708][ T1208] usb 7-1: NFC: intf ffff88807cb57000 id ffffffff8f1d1b80 [ 1258.353520][ T324] netlink: 182 bytes leftover after parsing attributes in process `syz.6.4776'. [ 1258.405198][ T29] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1258.487398][ T419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4783'. [ 1258.582803][ T419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4783'. [ 1258.593825][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 1258.613145][ T29] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1258.644687][ T29] usb 3-1: config 0 has no interface number 0 [ 1258.689325][ T29] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1258.719224][ T29] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1258.737297][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.745757][ T29] usb 3-1: Product: syz [ 1258.749962][ T29] usb 3-1: Manufacturer: syz [ 1258.754711][ T29] usb 3-1: SerialNumber: syz [ 1258.787027][ T29] usb 3-1: config 0 descriptor?? [ 1258.804966][ T29] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1258.836717][ T29] em28xx 3-1:0.132: Video interface 132 found: [ 1258.992098][ T5894] usb 7-1: USB disconnect, device number 87 [ 1259.216924][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1259.247940][ T29] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1259.534597][ T5894] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1259.714031][ T5894] usb 7-1: Using ep0 maxpacket: 32 [ 1259.742116][ T5894] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1259.780932][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.837143][ T5894] usb 7-1: config 0 descriptor?? [ 1259.894715][ T29] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 1259.929367][ T29] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1260.132566][ T437] em28xx 3-1:0.132: failed to trigger read from i2c address 0x14 (error=-5) [ 1260.167812][ T5894] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1260.184350][ T29] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1260.222318][ T29] em28xx 3-1:0.132: analog set to bulk mode. [ 1260.243794][ T5894] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1260.266806][ T797] em28xx 3-1:0.132: Registering V4L2 extension [ 1260.297144][ T5894] dib0700: firmware download failed at 7 with -22 [ 1260.311156][ T29] usb 3-1: USB disconnect, device number 19 [ 1260.414222][ T437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.502153][ T29] em28xx 3-1:0.132: Disconnecting em28xx [ 1260.515398][ T437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.936268][ T460] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4784'. [ 1261.088330][ T5894] usb 7-1: USB disconnect, device number 88 [ 1261.407371][ T797] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1261.459513][ T797] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1261.508517][ T797] em28xx 3-1:0.132: No AC97 audio processor [ 1261.564191][ T797] usb 3-1: Decoder not found [ 1261.577715][ T797] em28xx 3-1:0.132: failed to create media graph [ 1261.627689][ T797] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1261.681242][ T797] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1261.727730][ T29] em28xx 3-1:0.132: Closing input extension [ 1261.784827][ T29] em28xx 3-1:0.132: Freeing device [ 1261.842389][ T489] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1261.888926][ T489] macsec1: entered allmulticast mode [ 1261.917515][ T489] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1261.937347][ T503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4790'. [ 1262.041541][ T515] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4790'. [ 1262.173239][ T503] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1262.208390][ T506] bond2: (slave dummy0): Releasing backup interface [ 1262.320229][ T506] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1262.416735][ T515] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check. [ 1262.716656][ T545] [ 1262.719028][ T545] ===================================================== [ 1262.725984][ T545] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1262.733484][ T545] syzkaller #0 Tainted: G L [ 1262.739469][ T545] ----------------------------------------------------- [ 1262.746405][ T545] syz.6.4793/545 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1262.753975][ T545] ffffffff8e40c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1262.762737][ T545] [ 1262.762737][ T545] and this task is already holding: [ 1262.770105][ T545] ffff888033ab4220 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1262.778822][ T545] which would create a new lock dependency: [ 1262.784712][ T545] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1262.792305][ T545] [ 1262.792305][ T545] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1262.801770][ T545] (&dev->event_lock#2){..-.}-{3:3} [ 1262.801806][ T545] [ 1262.801806][ T545] ... which became SOFTIRQ-irq-safe at: [ 1262.804223][ T797] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1262.807001][ T545] lock_acquire+0xf0/0x2e0 [ 1262.826763][ T545] _raw_spin_lock_irqsave+0x40/0x60 [ 1262.832098][ T545] input_event+0x76/0xe0 [ 1262.836429][ T545] hidinput_report_event+0xa1/0x100 [ 1262.841725][ T545] hid_report_raw_event+0x1489/0x1720 [ 1262.847189][ T545] hid_input_report+0x44b/0x580 [ 1262.852130][ T545] hid_irq_in+0x47e/0x6d0 [ 1262.856631][ T545] __usb_hcd_giveback_urb+0x376/0x540 [ 1262.862142][ T545] dummy_timer+0xbbd/0x45d0 [ 1262.866782][ T545] __hrtimer_run_queues+0x53a/0xcc0 [ 1262.872076][ T545] hrtimer_run_softirq+0x182/0x5a0 [ 1262.877279][ T545] handle_softirqs+0x22a/0x870 [ 1262.882142][ T545] __irq_exit_rcu+0x5f/0x150 [ 1262.886826][ T545] irq_exit_rcu+0x9/0x30 [ 1262.891203][ T545] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1262.896930][ T545] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1262.903000][ T545] pv_native_safe_halt+0xf/0x20 [ 1262.907968][ T545] default_idle+0x9/0x20 [ 1262.912302][ T545] default_idle_call+0x72/0xb0 [ 1262.917202][ T545] do_idle+0x1bd/0x500 [ 1262.921370][ T545] cpu_startup_entry+0x43/0x60 [ 1262.926228][ T545] rest_init+0x2de/0x300 [ 1262.930574][ T545] start_kernel+0x385/0x3d0 [ 1262.935233][ T545] x86_64_start_reservations+0x24/0x30 [ 1262.940826][ T545] x86_64_start_kernel+0x143/0x1c0 [ 1262.946031][ T545] common_startup_64+0x13e/0x147 [ 1262.951059][ T545] [ 1262.951059][ T545] to a SOFTIRQ-irq-unsafe lock: [ 1262.958069][ T545] (tasklist_lock){.+.+}-{3:3} [ 1262.958095][ T545] [ 1262.958095][ T545] ... which became SOFTIRQ-irq-unsafe at: [ 1262.970721][ T545] ... [ 1262.970728][ T545] lock_acquire+0xf0/0x2e0 [ 1262.977817][ T545] _raw_read_lock+0x36/0x50 [ 1262.982420][ T545] __do_wait+0xde/0x740 [ 1262.986668][ T545] do_wait+0x1e7/0x540 [ 1262.990844][ T545] kernel_wait+0xd6/0x1c0 [ 1262.995262][ T545] call_usermodehelper_exec_work+0xbe/0x230 [ 1263.001246][ T545] process_scheduled_works+0xb02/0x1830 [ 1263.007092][ T545] worker_thread+0xa50/0xfc0 [ 1263.011774][ T545] kthread+0x388/0x470 [ 1263.015928][ T545] ret_from_fork+0x51e/0xb90 [ 1263.020635][ T545] ret_from_fork_asm+0x1a/0x30 [ 1263.025495][ T545] [ 1263.025495][ T545] other info that might help us debug this: [ 1263.025495][ T545] [ 1263.035720][ T545] Chain exists of: [ 1263.035720][ T545] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 1263.035720][ T545] [ 1263.048767][ T545] Possible interrupt unsafe locking scenario: [ 1263.048767][ T545] [ 1263.057080][ T545] CPU0 CPU1 [ 1263.062439][ T545] ---- ---- [ 1263.067862][ T545] lock(tasklist_lock); [ 1263.072108][ T545] local_irq_disable(); [ 1263.078859][ T545] lock(&dev->event_lock#2); [ 1263.086068][ T545] lock(&f_owner->lock); [ 1263.092928][ T545] [ 1263.096379][ T545] lock(&dev->event_lock#2); [ 1263.101306][ T545] [ 1263.101306][ T545] *** DEADLOCK *** [ 1263.101306][ T545] [ 1263.109465][ T545] 2 locks held by syz.6.4793/545: [ 1263.114507][ T545] #0: ffff88807d1b1860 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 1263.123143][ T545] #1: ffff888033ab4220 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1263.132284][ T545] [ 1263.132284][ T545] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1263.142688][ T545] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1263.148611][ T545] IN-SOFTIRQ-W at: [ 1263.153022][ T545] lock_acquire+0xf0/0x2e0 [ 1263.159804][ T545] _raw_spin_lock_irqsave+0x40/0x60 [ 1263.167358][ T545] input_event+0x76/0xe0 [ 1263.173947][ T545] hidinput_report_event+0xa1/0x100 [ 1263.181550][ T545] hid_report_raw_event+0x1489/0x1720 [ 1263.189277][ T545] hid_input_report+0x44b/0x580 [ 1263.196503][ T545] hid_irq_in+0x47e/0x6d0 [ 1263.203183][ T545] __usb_hcd_giveback_urb+0x376/0x540 [ 1263.210902][ T545] dummy_timer+0xbbd/0x45d0 [ 1263.217756][ T545] __hrtimer_run_queues+0x53a/0xcc0 [ 1263.225418][ T545] hrtimer_run_softirq+0x182/0x5a0 [ 1263.232885][ T545] handle_softirqs+0x22a/0x870 [ 1263.240011][ T545] __irq_exit_rcu+0x5f/0x150 [ 1263.246974][ T545] irq_exit_rcu+0x9/0x30 [ 1263.253604][ T545] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1263.261603][ T545] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1263.269940][ T545] pv_native_safe_halt+0xf/0x20 [ 1263.277155][ T545] default_idle+0x9/0x20 [ 1263.283746][ T545] default_idle_call+0x72/0xb0 [ 1263.290866][ T545] do_idle+0x1bd/0x500 [ 1263.297385][ T545] cpu_startup_entry+0x43/0x60 [ 1263.304507][ T545] rest_init+0x2de/0x300 [ 1263.311104][ T545] start_kernel+0x385/0x3d0 [ 1263.317954][ T545] x86_64_start_reservations+0x24/0x30 [ 1263.325797][ T545] x86_64_start_kernel+0x143/0x1c0 [ 1263.333262][ T545] common_startup_64+0x13e/0x147 [ 1263.340551][ T545] INITIAL USE at: [ 1263.344806][ T545] lock_acquire+0xf0/0x2e0 [ 1263.351487][ T545] _raw_spin_lock_irqsave+0x40/0x60 [ 1263.358949][ T545] input_inject_event+0xa5/0x340 [ 1263.366146][ T545] kbd_led_trigger_activate+0xbc/0x100 [ 1263.373862][ T545] led_trigger_set+0x535/0x960 [ 1263.381038][ T545] led_trigger_set_default+0x260/0x2a0 [ 1263.388766][ T545] led_classdev_register_ext+0x787/0x9c0 [ 1263.396668][ T545] input_leds_connect+0x517/0x790 [ 1263.403977][ T545] input_register_device+0xd00/0x1160 [ 1263.411660][ T545] atkbd_connect+0x731/0xa50 [ 1263.418586][ T545] serio_driver_probe+0x82/0xd0 [ 1263.425774][ T545] really_probe+0x267/0xaf0 [ 1263.432610][ T545] __driver_probe_device+0x18c/0x320 [ 1263.440176][ T545] driver_probe_device+0x4f/0x240 [ 1263.447467][ T545] __driver_attach+0x3e7/0x710 [ 1263.454499][ T545] bus_for_each_dev+0x23b/0x2c0 [ 1263.461636][ T545] serio_handle_event+0x20a/0xdd0 [ 1263.468924][ T545] process_scheduled_works+0xb02/0x1830 [ 1263.476764][ T545] worker_thread+0xa50/0xfc0 [ 1263.483621][ T545] kthread+0x388/0x470 [ 1263.489969][ T545] ret_from_fork+0x51e/0xb90 [ 1263.496851][ T545] ret_from_fork_asm+0x1a/0x30 [ 1263.503906][ T545] } [ 1263.506767][ T545] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1263.516350][ T545] -> (kbd_event_lock){....}-{3:3} { [ 1263.521831][ T545] INITIAL USE at: [ 1263.525990][ T545] lock_acquire+0xf0/0x2e0 [ 1263.532501][ T545] _raw_spin_lock_irqsave+0x40/0x60 [ 1263.539798][ T545] vt_reset_unicode+0x2b/0x1a0 [ 1263.546677][ T545] reset_vc+0x68/0x1b0 [ 1263.552839][ T545] vc_init+0x70/0x4a0 [ 1263.558907][ T545] con_init+0x377/0x6a0 [ 1263.565237][ T545] console_init+0x10b/0x4d0 [ 1263.571874][ T545] start_kernel+0x22b/0x3d0 [ 1263.578464][ T545] x86_64_start_reservations+0x24/0x30 [ 1263.586106][ T545] x86_64_start_kernel+0x143/0x1c0 [ 1263.593336][ T545] common_startup_64+0x13e/0x147 [ 1263.600363][ T545] } [ 1263.603154][ T545] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1263.611410][ T545] ... acquired at: [ 1263.615483][ T545] _raw_spin_lock+0x2e/0x40 [ 1263.620197][ T545] kbd_event+0xd6/0x40d0 [ 1263.624624][ T545] input_handle_events_default+0xd4/0x1a0 [ 1263.630526][ T545] input_pass_values+0x288/0x890 [ 1263.635643][ T545] input_event_dispose+0x330/0x6b0 [ 1263.640930][ T545] input_inject_event+0x1dd/0x340 [ 1263.646134][ T545] evdev_write+0x325/0x4c0 [ 1263.650728][ T545] vfs_write+0x29a/0xb90 [ 1263.655145][ T545] ksys_write+0x150/0x270 [ 1263.659648][ T545] do_syscall_64+0x14d/0xf80 [ 1263.664423][ T545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.670489][ T545] [ 1263.672808][ T545] -> (&tty->flow.lock){....}-{3:3} { [ 1263.678297][ T545] INITIAL USE at: [ 1263.682377][ T545] lock_acquire+0xf0/0x2e0 [ 1263.688721][ T545] _raw_spin_lock_irqsave+0x40/0x60 [ 1263.695850][ T545] start_tty+0x20/0x70 [ 1263.701918][ T545] n_tty_set_termios+0xa7c/0x10c0 [ 1263.708871][ T545] tty_set_termios+0xdb3/0x1800 [ 1263.715647][ T545] set_termios+0x566/0x710 [ 1263.721980][ T545] tty_mode_ioctl+0x4a6/0x7d0 [ 1263.728575][ T545] tty_ioctl+0x9c5/0xde0 [ 1263.734772][ T545] __se_sys_ioctl+0xfc/0x170 [ 1263.741282][ T545] do_syscall_64+0x14d/0xf80 [ 1263.747800][ T545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.755614][ T545] } [ 1263.758293][ T545] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1263.767221][ T545] ... acquired at: [ 1263.771204][ T545] _raw_spin_lock_irqsave+0x40/0x60 [ 1263.776588][ T545] stop_tty+0x2f/0x150 [ 1263.780851][ T545] kbd_event+0x2ec1/0x40d0 [ 1263.785453][ T545] input_handle_events_default+0xd4/0x1a0 [ 1263.791358][ T545] input_pass_values+0x288/0x890 [ 1263.796476][ T545] input_event_dispose+0x330/0x6b0 [ 1263.801769][ T545] input_inject_event+0x1dd/0x340 [ 1263.806972][ T545] evdev_write+0x325/0x4c0 [ 1263.811575][ T545] vfs_write+0x29a/0xb90 [ 1263.815994][ T545] ksys_write+0x150/0x270 [ 1263.820525][ T545] do_syscall_64+0x14d/0xf80 [ 1263.825307][ T545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.831376][ T545] [ 1263.833699][ T545] -> (&new->fa_lock){....}-{3:3} { [ 1263.838918][ T545] INITIAL USE at: [ 1263.842916][ T545] lock_acquire+0xf0/0x2e0 [ 1263.849086][ T545] _raw_write_lock_irq+0x3d/0x50 [ 1263.855804][ T545] fasync_insert_entry+0xc3/0x270 [ 1263.862599][ T545] fasync_helper+0x52/0xb0 [ 1263.868761][ T545] pipe_fasync+0xa9/0x1e0 [ 1263.874840][ T545] do_fcntl+0x1201/0x1a20 [ 1263.880916][ T545] __se_sys_fcntl+0xc8/0x150 [ 1263.887280][ T545] do_syscall_64+0x14d/0xf80 [ 1263.893619][ T545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.901252][ T545] INITIAL READ USE at: [ 1263.905672][ T545] lock_acquire+0xf0/0x2e0 [ 1263.912271][ T545] _raw_read_lock_irqsave+0x48/0x60 [ 1263.919654][ T545] kill_fasync+0x199/0x4d0 [ 1263.926259][ T545] pipe_release+0x19c/0x330 [ 1263.932954][ T545] __fput+0x44f/0xa70 [ 1263.939117][ T545] task_work_run+0x1d9/0x270 [ 1263.945945][ T545] do_exit+0x70f/0x23c0 [ 1263.952276][ T545] do_group_exit+0x21b/0x2d0 [ 1263.959041][ T545] get_signal+0x1284/0x1330 [ 1263.965723][ T545] arch_do_signal_or_restart+0xbc/0x830 [ 1263.973444][ T545] exit_to_user_mode_loop+0x86/0x480 [ 1263.980906][ T545] do_syscall_64+0x32d/0xf80 [ 1263.987683][ T545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.995752][ T545] } [ 1263.998342][ T545] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1264.007181][ T545] ... acquired at: [ 1264.011077][ T545] _raw_read_lock_irqsave+0x48/0x60 [ 1264.016463][ T545] kill_fasync+0x199/0x4d0 [ 1264.021058][ T545] __start_tty+0x18c/0x220 [ 1264.025654][ T545] n_tty_ioctl_helper+0x128/0x4d0 [ 1264.030925][ T545] tty_ioctl+0x9c5/0xde0 [ 1264.035348][ T545] __se_sys_ioctl+0xfc/0x170 [ 1264.040122][ T545] do_syscall_64+0x14d/0xf80 [ 1264.044901][ T545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.050978][ T545] [ 1264.053301][ T545] -> (&f_owner->lock){....}-{3:3} { [ 1264.058517][ T545] INITIAL USE at: [ 1264.062425][ T545] lock_acquire+0xf0/0x2e0 [ 1264.068421][ T545] _raw_write_lock_irq+0x3d/0x50 [ 1264.074940][ T545] __f_setown+0x67/0x370 [ 1264.080860][ T545] tty_fasync+0x2db/0x350 [ 1264.086762][ T545] do_fcntl+0x1201/0x1a20 [ 1264.092654][ T545] __se_sys_fcntl+0xc8/0x150 [ 1264.098808][ T545] do_syscall_64+0x14d/0xf80 [ 1264.104982][ T545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.112458][ T545] INITIAL READ USE at: [ 1264.116793][ T545] lock_acquire+0xf0/0x2e0 [ 1264.123213][ T545] _raw_read_lock_irqsave+0x48/0x60 [ 1264.130414][ T545] send_sigio+0x38/0x370 [ 1264.136657][ T545] kill_fasync+0x24d/0x4d0 [ 1264.143076][ T545] lease_break_callback+0x26/0x30 [ 1264.150102][ T545] __break_lease+0x81c/0x1e80 [ 1264.156786][ T545] vfs_create+0x39c/0x460 [ 1264.163114][ T545] filename_mknodat+0x3e8/0x660 [ 1264.169966][ T545] __se_sys_mknodat+0x3b/0x150 [ 1264.176762][ T545] do_syscall_64+0x14d/0xf80 [ 1264.183380][ T545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.191283][ T545] } [ 1264.193787][ T545] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1264.202643][ T545] ... acquired at: [ 1264.206442][ T545] _raw_read_lock_irqsave+0x48/0x60 [ 1264.211829][ T545] send_sigio+0x38/0x370 [ 1264.216253][ T545] kill_fasync+0x24d/0x4d0 [ 1264.220851][ T545] lease_break_callback+0x26/0x30 [ 1264.226055][ T545] __break_lease+0x81c/0x1e80 [ 1264.230924][ T545] vfs_create+0x39c/0x460 [ 1264.235426][ T545] filename_mknodat+0x3e8/0x660 [ 1264.240464][ T545] __se_sys_mknodat+0x3b/0x150 [ 1264.245401][ T545] do_syscall_64+0x14d/0xf80 [ 1264.250182][ T545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.256276][ T545] [ 1264.258599][ T545] [ 1264.258599][ T545] the dependencies between the lock to be acquired [ 1264.258608][ T545] and SOFTIRQ-irq-unsafe lock: [ 1264.272122][ T545] -> (tasklist_lock){.+.+}-{3:3} { [ 1264.277253][ T545] HARDIRQ-ON-R at: [ 1264.281235][ T545] lock_acquire+0xf0/0x2e0 [ 1264.287306][ T545] _raw_read_lock+0x36/0x50 [ 1264.293485][ T545] __do_wait+0xde/0x740 [ 1264.299291][ T545] do_wait+0x1e7/0x540 [ 1264.305008][ T545] kernel_wait+0xd6/0x1c0 [ 1264.310987][ T545] call_usermodehelper_exec_work+0xbe/0x230 [ 1264.318559][ T545] process_scheduled_works+0xb02/0x1830 [ 1264.325778][ T545] worker_thread+0xa50/0xfc0 [ 1264.332038][ T545] kthread+0x388/0x470 [ 1264.337758][ T545] ret_from_fork+0x51e/0xb90 [ 1264.344015][ T545] ret_from_fork_asm+0x1a/0x30 [ 1264.350460][ T545] SOFTIRQ-ON-R at: [ 1264.354442][ T545] lock_acquire+0xf0/0x2e0 [ 1264.360515][ T545] _raw_read_lock+0x36/0x50 [ 1264.366677][ T545] __do_wait+0xde/0x740 [ 1264.372484][ T545] do_wait+0x1e7/0x540 [ 1264.378204][ T545] kernel_wait+0xd6/0x1c0 [ 1264.384197][ T545] call_usermodehelper_exec_work+0xbe/0x230 [ 1264.391770][ T545] process_scheduled_works+0xb02/0x1830 [ 1264.398982][ T545] worker_thread+0xa50/0xfc0 [ 1264.405232][ T545] kthread+0x388/0x470 [ 1264.411037][ T545] ret_from_fork+0x51e/0xb90 [ 1264.417294][ T545] ret_from_fork_asm+0x1a/0x30 [ 1264.423722][ T545] INITIAL USE at: [ 1264.427616][ T545] lock_acquire+0xf0/0x2e0 [ 1264.433601][ T545] _raw_write_lock_irq+0x3d/0x50 [ 1264.440107][ T545] copy_process+0x247a/0x3cf0 [ 1264.446355][ T545] kernel_clone+0x248/0x8e0 [ 1264.452422][ T545] user_mode_thread+0x110/0x180 [ 1264.458845][ T545] rest_init+0x23/0x300 [ 1264.464584][ T545] start_kernel+0x385/0x3d0 [ 1264.470650][ T545] x86_64_start_reservations+0x24/0x30 [ 1264.477676][ T545] x86_64_start_kernel+0x143/0x1c0 [ 1264.484358][ T545] common_startup_64+0x13e/0x147 [ 1264.490864][ T545] INITIAL READ USE at: [ 1264.495200][ T545] lock_acquire+0xf0/0x2e0 [ 1264.501652][ T545] _raw_read_lock+0x36/0x50 [ 1264.508164][ T545] __do_wait+0xde/0x740 [ 1264.514317][ T545] do_wait+0x1e7/0x540 [ 1264.520387][ T545] kernel_wait+0xd6/0x1c0 [ 1264.526825][ T545] call_usermodehelper_exec_work+0xbe/0x230 [ 1264.534748][ T545] process_scheduled_works+0xb02/0x1830 [ 1264.542299][ T545] worker_thread+0xa50/0xfc0 [ 1264.548888][ T545] kthread+0x388/0x470 [ 1264.554976][ T545] ret_from_fork+0x51e/0xb90 [ 1264.561671][ T545] ret_from_fork_asm+0x1a/0x30 [ 1264.568462][ T545] } [ 1264.570967][ T545] ... key at: [] tasklist_lock+0x18/0x40 [ 1264.578798][ T545] ... acquired at: [ 1264.582601][ T545] _raw_read_lock+0x36/0x50 [ 1264.587289][ T545] send_sigurg+0x12b/0x420 [ 1264.591895][ T545] sk_send_sigurg+0x6c/0x2e0 [ 1264.596666][ T545] queue_oob+0x42c/0x4f0 [ 1264.601087][ T545] unix_stream_sendmsg+0xcb1/0xe80 [ 1264.606378][ T545] ____sys_sendmsg+0x972/0x9f0 [ 1264.611337][ T545] ___sys_sendmsg+0x2a5/0x360 [ 1264.616188][ T545] __sys_sendmmsg+0x27c/0x4e0 [ 1264.621070][ T545] __x64_sys_sendmmsg+0xa0/0xc0 [ 1264.626099][ T545] do_syscall_64+0x14d/0xf80 [ 1264.630872][ T545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.636975][ T545] [ 1264.639306][ T545] [ 1264.639306][ T545] stack backtrace: [ 1264.645198][ T545] CPU: 0 UID: 0 PID: 545 Comm: syz.6.4793 Tainted: G L syzkaller #0 PREEMPT(full) [ 1264.645222][ T545] Tainted: [L]=SOFTLOCKUP [ 1264.645229][ T545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1264.645239][ T545] Call Trace: [ 1264.645248][ T545] [ 1264.645255][ T545] dump_stack_lvl+0xe8/0x150 [ 1264.645281][ T545] __lock_acquire+0x2a94/0x2cf0 [ 1264.645310][ T545] lock_acquire+0xf0/0x2e0 [ 1264.645329][ T545] ? send_sigurg+0x12b/0x420 [ 1264.645349][ T545] _raw_read_lock+0x36/0x50 [ 1264.645378][ T545] ? send_sigurg+0x12b/0x420 [ 1264.645393][ T545] send_sigurg+0x12b/0x420 [ 1264.645411][ T545] sk_send_sigurg+0x6c/0x2e0 [ 1264.645430][ T545] queue_oob+0x42c/0x4f0 [ 1264.645450][ T545] ? __pfx_queue_oob+0x10/0x10 [ 1264.645468][ T545] ? __lock_acquire+0x6b5/0x2cf0 [ 1264.645489][ T545] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1264.645510][ T545] unix_stream_sendmsg+0xcb1/0xe80 [ 1264.645528][ T545] ? sched_clock+0x3f/0x60 [ 1264.645550][ T545] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1264.645577][ T545] ? aa_sock_msg_perm+0xda/0x1b0 [ 1264.645599][ T545] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1264.645617][ T545] ____sys_sendmsg+0x972/0x9f0 [ 1264.645645][ T545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1264.645672][ T545] ? import_iovec+0x73/0xa0 [ 1264.645697][ T545] ___sys_sendmsg+0x2a5/0x360 [ 1264.645713][ T545] ? __pfx____sys_sendmsg+0x10/0x10 [ 1264.645741][ T545] ? kasan_check_range+0x97/0x2c0 [ 1264.645764][ T545] __sys_sendmmsg+0x27c/0x4e0 [ 1264.645780][ T545] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1264.645794][ T545] ? do_futex+0x395/0x420 [ 1264.645843][ T545] ? __pfx_do_fcntl+0x10/0x10 [ 1264.645866][ T545] ? rcu_is_watching+0x15/0xb0 [ 1264.645891][ T545] __x64_sys_sendmmsg+0xa0/0xc0 [ 1264.645907][ T545] do_syscall_64+0x14d/0xf80 [ 1264.645931][ T545] ? trace_irq_disable+0x3b/0x150 [ 1264.645955][ T545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.645971][ T545] ? clear_bhb_loop+0x40/0x90 [ 1264.645988][ T545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.646004][ T545] RIP: 0033:0x7fc17b19c799 [ 1264.646020][ T545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.646034][ T545] RSP: 002b:00007fc17c023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1264.646051][ T545] RAX: ffffffffffffffda RBX: 00007fc17b415fa0 RCX: 00007fc17b19c799 [ 1264.646064][ T545] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000005 [ 1264.646074][ T545] RBP: 00007fc17b232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1264.646084][ T545] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 1264.646094][ T545] R13: 00007fc17b416038 R14: 00007fc17b415fa0 R15: 00007fc17b53fa48 [ 1264.646111][ T545] [ 1265.175437][ T797] usb 8-1: config 8 has an invalid interface number: 80 but max is 0 [ 1265.183580][ T797] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.215629][ T797] usb 8-1: config 8 has no interface number 0 [ 1265.221797][ T797] usb 8-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1265.267922][ T797] usb 8-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1265.289106][ T797] usb 8-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 1265.325512][ T797] usb 8-1: config 8 interface 80 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1265.354085][ T797] usb 8-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 1265.381326][ T797] usb 8-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1265.401701][ T797] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.430865][ T797] usb 8-1: NFC: intf ffff888028ad9000 id ffffffff8f1d1b80 [ 1265.482830][ T1208] usb 8-1: USB disconnect, device number 6